last executing test programs: 9.961627784s ago: executing program 1 (id=11653): syz_emit_ethernet(0xa2, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd603000bb006c2b00fc020000000000000000000000000000fe8000000000000000000000000000aa3b"], 0x0) socket$kcm(0xa, 0x3, 0x87) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 9.204653192s ago: executing program 4 (id=11657): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000000)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04000000000000000300000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 9.069566461s ago: executing program 0 (id=11658): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000280)=0x3, 0x4) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001280)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x24, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e24, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}}}}}, 0x32) 8.898262823s ago: executing program 3 (id=11659): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040)) 8.785053019s ago: executing program 1 (id=11660): r0 = socket(0x10, 0x80002, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LIST(r1, 0x0, 0x84) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0) recvmmsg$unix(r0, &(0x7f0000000140)=[{{0x0, 0x402, &(0x7f0000000180)=[{&(0x7f0000000300)=""/4096, 0x1041}], 0x1}}], 0x14, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001300)={0x0, 0xffff0001, 0x7, 0x2}, &(0x7f0000001340)=0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) 8.494805415s ago: executing program 4 (id=11661): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 8.015517493s ago: executing program 3 (id=11662): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', 0x0, 0x0, 0x2000000026fe, 0x0, 0x1}}, 0x40) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendfile(r1, r2, 0x0, 0x2) close(r2) 7.520636122s ago: executing program 0 (id=11663): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xd, 0xfff3}, {0x3, 0xffff}, {0x9, 0x9}}, [{0x8, 0xb, 0xfffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040800) 7.081734375s ago: executing program 3 (id=11664): socket$igmp6(0xa, 0x3, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) write$bt_hci(r0, 0x0, 0x16) r1 = socket(0x8, 0x3, 0x3) getpeername$packet(r1, 0x0, 0x0) 6.958481528s ago: executing program 1 (id=11665): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.644775676s ago: executing program 4 (id=11667): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@delchain={0x44, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x0, 0xfff4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_SRC_MASK={0x8, 0x1c, 0xff000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 6.613930232s ago: executing program 0 (id=11668): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x240088d4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 5.293616839s ago: executing program 1 (id=11670): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000016c0)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@remote, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x40}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 4.928592259s ago: executing program 4 (id=11671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) recvmsg(0xffffffffffffffff, 0x0, 0x3f01) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) 4.823927724s ago: executing program 0 (id=11672): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r1, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.702482028s ago: executing program 2 (id=11673): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0x1e}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) shutdown(r0, 0x1) 4.412825808s ago: executing program 1 (id=11674): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffcc1, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000810400c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x4044014, &(0x7f0000000180)={0x11, 0x1, r2, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, 0x14) 3.642502669s ago: executing program 4 (id=11675): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x34, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) 3.566700755s ago: executing program 0 (id=11676): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001300), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001340), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000001380)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000001700)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @f_listen={0xbc, 0x2, 0x3, 0x82, 0xd1, 0x7, 0x11, {}, 0xff, 0x7, 0x6, 0x8, 0xb, "84783ed395102845b611fe"}}, 0x1b) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 3.09096223s ago: executing program 1 (id=11677): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) 2.994635533s ago: executing program 2 (id=11678): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) listen(r1, 0x2) 2.883089524s ago: executing program 3 (id=11679): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="0a000000010001", 0x7) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, 0x0, 0x0) bind$bt_l2cap(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 2.403229872s ago: executing program 3 (id=11680): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x2a, 0x802, 0xfefffffe) getsockname$packet(r0, 0x0, &(0x7f0000000080)) 2.375076509s ago: executing program 2 (id=11681): socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0xec, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xbc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x80, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}, {0x3c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x8}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x4}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1b}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x22, 0x3, 0x2ef}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xa}]}, {0x34}]}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x18}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x66}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x28}]}]}]}}]}, 0xec}, 0x1, 0x0, 0x0, 0x40001}, 0x20000014) 1.702857906s ago: executing program 3 (id=11682): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) r0 = socket(0x8, 0x3, 0x3) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x42020054, 0x0, 0x54) 1.640205326s ago: executing program 2 (id=11683): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x3d, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x1, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x7a, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @remote}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 664.748762ms ago: executing program 2 (id=11684): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c000000000000000000000000000000aacc0000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000006000000000001000000000000004400050000000000000000000000000000000000fffffffc3c00000002000000ac1414aa000000000000002d000000000600000004"], 0xfc}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1, 0x0, 0xfffffffe}}, 0x2e) 220.05245ms ago: executing program 4 (id=11685): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket(0x8, 0x4, 0x3) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, 0x0, &(0x7f00000002c0)) 14.560638ms ago: executing program 2 (id=11686): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r3, &(0x7f00000000c0), 0x12) 0s ago: executing program 0 (id=11687): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @in=@empty, 0x0, 0x5, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in6=@loopback, {0x0, 0x3, 0x9, 0x9, 0x10001, 0x0, 0x0, 0xfffffffffffffffc}, {0x4, 0x0, 0x5f, 0xa}, {0x1, 0xc0000000, 0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000440)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x5, 0xffff, 0x0, 0x2, 0x5}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) socket$key(0xf, 0x3, 0x2) write(r1, 0x0, 0x0) kernel console output (not intermixed with test programs): 27074][T17939] ip_tables: iptables: counters copy to user failed while replacing table [ 372.971261][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5851'. [ 373.265224][T17986] nbd: must specify a device to reconfigure [ 373.388277][T17990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5860'. [ 373.388337][T17990] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 374.085210][T18018] netlink: 'syz.2.5871': attribute type 3 has an invalid length. [ 374.085236][T18018] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5871'. [ 375.007402][T18044] IPVS: ip_vs_edit_dest(): server weight less than zero [ 375.194732][T18049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5889'. [ 375.338476][T18054] tipc: Started in network mode [ 375.338521][T18054] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 375.339403][T18054] tipc: New replicast peer: 2001:0000:0000:0000:0000:0000:0000:0000 [ 375.339716][T18054] tipc: Enabled bearer , priority 10 [ 375.502517][T18063] Bluetooth: hci0: unsupported parameter 5135 [ 375.502548][T18063] Bluetooth: hci0: unsupported parameter 8192 [ 375.502563][T18063] Bluetooth: hci0: unsupported parameter 5135 [ 375.502577][T18063] Bluetooth: hci0: unsupported parameter 8192 [ 376.115164][T18086] netlink: NAT attribute has 4 unknown bytes [ 376.115204][T18086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.434166][ T3397] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 376.434206][ T3397] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.438277][T18095] Bluetooth: hci0: unsupported parameter 5161 [ 376.438304][T18095] Bluetooth: hci0: unsupported parameter 8192 [ 376.438320][T18095] Bluetooth: hci0: unsupported parameter 5161 [ 376.438335][T18095] Bluetooth: hci0: unsupported parameter 8192 [ 376.469490][ T25] tipc: Node number set to 1 [ 376.798362][T18111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.015083][T18113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5917'. [ 377.015113][T18113] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5917'. [ 377.015133][T18113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5917'. [ 377.603466][T18137] netlink: 'syz.0.5930': attribute type 3 has an invalid length. [ 377.603494][T18137] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5930'. [ 377.951303][T18148] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5935'. [ 377.991923][T18151] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5937'. [ 378.014061][T18152] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 378.390728][T18165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5943'. [ 378.850180][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.850248][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.531701][T18211] xt_IDLETIMER: label is empty or not nul-terminated [ 379.556085][T18213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5965'. [ 379.556115][T18213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5965'. [ 379.663530][T18217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5967'. [ 380.741185][T18251] netlink: 'syz.2.5983': attribute type 4 has an invalid length. [ 380.801879][T18257] openvswitch: netlink: Tunnel attr 13 has unexpected len 4 expected 16 [ 381.041497][T18263] netlink: zone id is out of range [ 381.041515][T18263] netlink: zone id is out of range [ 381.041655][T18263] netlink: zone id is out of range [ 381.367695][T18277] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 382.189599][T18309] ip_tables: iptables: counters copy to user failed while replacing table [ 382.846762][T18328] veth0_to_bond: entered allmulticast mode [ 383.115127][T18339] __nla_validate_parse: 2 callbacks suppressed [ 383.115228][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6025'. [ 383.406512][T18350] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6030'. [ 383.925232][T18368] Bluetooth: hci0: unsupported parameter 5135 [ 383.925259][T18368] Bluetooth: hci0: unsupported parameter 8192 [ 383.925273][T18368] Bluetooth: hci0: unsupported parameter 5135 [ 383.925287][T18368] Bluetooth: hci0: unsupported parameter 8192 [ 384.505133][T18382] bond2: (slave bond_slave_0): Device is not our slave [ 384.505242][T18382] bond2: option active_slave: invalid value (bond_slave_0) [ 384.534181][T18382] bond2 (unregistering): Released all slaves [ 384.535682][T18389] ip_tables: iptables: counters copy to user failed while replacing table [ 385.152407][T18403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.592576][T18415] Bluetooth: MGMT ver 1.23 [ 386.284009][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 386.470903][T18454] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6079'. [ 386.876161][T18471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 387.164368][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 387.987386][T18503] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6104'. [ 388.470160][T18523] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6113'. [ 388.888904][T18542] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 388.888942][T18542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 389.194332][T18553] netlink: 'syz.1.6128': attribute type 2 has an invalid length. [ 389.344388][ T3348] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.344443][ T3348] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.344481][ T3348] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.344518][ T3348] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.609908][T18570] netlink: NAT attribute type 0 has unexpected length (4 != 0) [ 389.609952][T18570] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 390.771727][T18599] ip_tables: iptables: counters copy to user failed while replacing table [ 391.449239][T18614] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.6157'. [ 394.089899][T18724] pim6reg: entered allmulticast mode [ 394.116628][T18724] pim6reg: left allmulticast mode [ 394.519857][T18736] ovs-dp0: entered promiscuous mode [ 394.720343][T18743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6219'. [ 395.528033][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6233'. [ 395.558671][T18769] vlan0: entered promiscuous mode [ 395.558697][T18769] bridge0: entered promiscuous mode [ 395.558904][T18769] vlan0: entered allmulticast mode [ 395.558919][T18769] bridge0: entered allmulticast mode [ 395.998241][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6239'. [ 395.998270][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6239'. [ 396.428889][T18803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6247'. [ 396.428932][T18803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6247'. [ 396.962807][T18816] netlink: 71 bytes leftover after parsing attributes in process `syz.4.6252'. [ 397.168334][T18826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6258'. [ 397.299742][ T3397] IPVS: starting estimator thread 0... [ 397.384448][T18832] IPVS: using max 26 ests per chain, 62400 per kthread [ 397.647974][T18845] netlink: 'syz.2.6267': attribute type 1 has an invalid length. [ 397.982791][T18860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 398.905799][T18892] Bluetooth: hci0: unsupported parameter 5134 [ 398.905825][T18892] Bluetooth: hci0: unsupported parameter 8192 [ 398.905839][T18892] Bluetooth: hci0: unsupported parameter 5134 [ 398.905853][T18892] Bluetooth: hci0: unsupported parameter 8192 [ 399.776512][T18927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6303'. [ 399.776553][T18927] netlink: 'syz.3.6303': attribute type 3 has an invalid length. [ 401.479173][T18979] sock: sock_timestamping_bind_phc: sock not bind to device [ 402.263691][T19003] netlink: 13 bytes leftover after parsing attributes in process `syz.0.6338'. [ 403.105423][T19034] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6354'. [ 403.205498][T19039] netlink: 'syz.1.6357': attribute type 11 has an invalid length. [ 403.501486][T19046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6359'. [ 404.867520][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6385'. [ 404.867546][T19108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6385'. [ 406.843249][T19187] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6418'. [ 407.593340][T19219] rxe_eth0 speed is unknown, defaulting to 1000 [ 407.860742][T19221] wireguard: wg2: Could not create IPv4 socket [ 409.505649][T19273] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6447'. [ 410.715210][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6469'. [ 410.948123][T19328] vlan2: entered allmulticast mode [ 410.948150][T19328] bond0: entered allmulticast mode [ 411.466207][T19346] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6481'. [ 411.662676][T19354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6485'. [ 412.083023][T19372] Bluetooth: hci0: unsupported parameter 5134 [ 412.083051][T19372] Bluetooth: hci0: unsupported parameter 8192 [ 412.083067][T19372] Bluetooth: hci0: unsupported parameter 5134 [ 412.083082][T19372] Bluetooth: hci0: unsupported parameter 8192 [ 412.410281][T19379] netlink: 'syz.0.6498': attribute type 4 has an invalid length. [ 412.410308][T19379] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6498'. [ 412.440020][T19381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 412.440042][T19381] IPv6: NLM_F_CREATE should be set when creating new route [ 412.440098][T19381] IPv6: NLM_F_CREATE should be set when creating new route [ 412.440380][T19381] IPv6: NLM_F_CREATE should be set when creating new route [ 412.469893][T19381] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 413.095280][T19401] netlink: 'syz.2.6508': attribute type 1 has an invalid length. [ 415.010341][T19459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6536'. [ 415.764744][T19485] wireguard0: entered promiscuous mode [ 416.185698][T19498] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 416.668857][T19516] netlink: 'syz.3.6562': attribute type 1 has an invalid length. [ 416.668902][T19516] netlink: 500 bytes leftover after parsing attributes in process `syz.3.6562'. [ 417.532477][T19543] netlink: 'syz.0.6577': attribute type 1 has an invalid length. [ 417.532520][T19543] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.106251][T19566] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.329734][T19574] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6592'. [ 418.329768][T19574] nbd: illegal input index -8454144 [ 419.197644][T19603] netlink: 'syz.2.6606': attribute type 4 has an invalid length. [ 419.197672][T19603] netlink: 17 bytes leftover after parsing attributes in process `syz.2.6606'. [ 420.033645][T19623] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 420.503274][T19641] bond0: (slave gtp1): refused to change device type [ 420.742843][T19647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6628'. [ 420.742872][T19647] tipc: Invalid UDP bearer configuration [ 420.742913][T19647] tipc: Enabling of bearer rejected, failed to enable media [ 421.080994][T19658] smc: net device team0 applied user defined pnetid SYZ2 [ 421.186384][T19665] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6637'. [ 421.258585][T19668] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6640'. [ 421.259137][T19668] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6640'. [ 421.452421][T19675] xt_hashlimit: size too large, truncated to 1048576 [ 421.787546][T19689] netlink: 'syz.2.6647': attribute type 10 has an invalid length. [ 421.926728][T19693] netlink: 'syz.3.6652': attribute type 1 has an invalid length. [ 421.926755][T19693] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6652'. [ 421.926772][T19693] netlink: 'syz.3.6652': attribute type 1 has an invalid length. [ 422.098110][T19698] pimreg3: entered allmulticast mode [ 422.452303][T19713] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.477880][T19714] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6659'. [ 422.980399][T19732] tipc: Enabled bearer , priority 10 [ 425.946945][T19807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6703'. [ 425.946989][T19807] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.052929][T19808] netlink: 'syz.0.6704': attribute type 1 has an invalid length. [ 426.231980][T19815] netlink: 165 bytes leftover after parsing attributes in process `syz.2.6707'. [ 426.259942][T19816] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6708'. [ 426.260058][T19816] block nbd0: Unsupported socket: should be TCP or UNIX. [ 426.462956][T19820] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 426.613581][T19829] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6716'. [ 426.659619][T19830] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6713'. [ 426.822266][T19836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6717'. [ 426.822293][T19836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6717'. [ 426.915822][T19839] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6720'. [ 426.915858][T19839] netlink: 'syz.3.6720': attribute type 5 has an invalid length. [ 426.915874][T19839] netlink: 'syz.3.6720': attribute type 6 has an invalid length. [ 427.299164][T19852] __nla_validate_parse: 2 callbacks suppressed [ 427.299191][T19852] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6726'. [ 427.817673][T19875] Bluetooth: MGMT ver 1.23 [ 428.053685][T19882] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6741'. [ 428.500141][T19896] netlink: 'syz.1.6748': attribute type 8 has an invalid length. [ 428.500166][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6748'. [ 428.507089][T19896] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.508834][T19896] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.007449][T19910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6754'. [ 429.131749][ T969] wlan1: Trigger new scan to find an IBSS to join [ 429.304843][T19918] ieee802154 phy1 wpan1: encryption failed: -22 [ 429.674525][T19926] netlink: 240 bytes leftover after parsing attributes in process `syz.2.6761'. [ 430.029347][T19941] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6769'. [ 430.159121][T19945] netlink: 'syz.2.6771': attribute type 3 has an invalid length. [ 430.159151][T19945] netlink: 'syz.2.6771': attribute type 1 has an invalid length. [ 430.159168][T19945] netlink: 204 bytes leftover after parsing attributes in process `syz.2.6771'. [ 430.253302][T19947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6775'. [ 430.978259][T19974] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6782'. [ 431.395169][T19982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6788'. [ 431.748372][T19996] vlan1: entered allmulticast mode [ 431.748402][T19996] veth0_vlan: entered allmulticast mode [ 431.903065][T20001] netlink: zone id is out of range [ 431.903084][T20001] netlink: zone id is out of range [ 431.903093][T20001] netlink: zone id is out of range [ 431.903102][T20001] netlink: zone id is out of range [ 431.903111][T20001] netlink: zone id is out of range [ 431.903119][T20001] netlink: zone id is out of range [ 431.903392][T20001] netlink: zone id is out of range [ 431.903404][T20001] netlink: zone id is out of range [ 431.903413][T20001] netlink: zone id is out of range [ 431.903421][T20001] netlink: zone id is out of range [ 434.126014][ T12] wlan1: Trigger new scan to find an IBSS to join [ 434.399259][T20087] __nla_validate_parse: 1 callbacks suppressed [ 434.399285][T20087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6838'. [ 435.068159][ T1122] wlan1: Creating new IBSS network, BSSID 52:eb:61:87:4a:14 [ 435.573751][T20118] tipc: Enabled bearer , priority 9 [ 436.296890][T20143] netlink: 'syz.4.6864': attribute type 4 has an invalid length. [ 436.296918][T20143] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6864'. [ 436.857993][T20164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6873'. [ 436.858094][T20164] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 436.863304][T20164] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6873'. [ 437.455197][T20182] net_ratelimit: 499 callbacks suppressed [ 437.455302][T20182] netlink: Unknown nat attribute (0) [ 437.455332][T20182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 437.558009][T20184] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6883'. [ 437.632265][T20186] gretap0: vlans aren't supported yet for dev_uc|mc_add() [ 438.472204][T20218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6897'. [ 438.472416][T20218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6897'. [ 438.635379][T20223] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 28 bytes [ 439.968274][T20269] xt_IDLETIMER: label is empty or not nul-terminated [ 440.119600][T20278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6929'. [ 440.292950][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.035362][T20305] Bluetooth: hci0: unsupported parameter 5135 [ 441.035390][T20305] Bluetooth: hci0: unsupported parameter 8192 [ 441.035405][T20305] Bluetooth: hci0: unsupported parameter 5135 [ 441.035418][T20305] Bluetooth: hci0: unsupported parameter 8192 [ 441.086768][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 441.087815][ T5622] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 441.228796][ T1100] wlan1: Selected IBSS BSSID 52:eb:61:87:4a:14 based on configured SSID [ 441.598048][T20323] netlink: 'syz.4.6949': attribute type 2 has an invalid length. [ 441.741428][T20329] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6953'. [ 441.772890][T20314] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 441.772932][T20314] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.941621][T20323] : entered promiscuous mode [ 442.049885][T20314] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.049928][T20314] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.389882][T20348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6961'. [ 442.561073][T20314] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.561114][T20314] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.928169][T20362] xt_hashlimit: size too large, truncated to 1048576 [ 442.956230][T20314] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 442.956270][T20314] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.989085][T20341] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 443.412372][T20378] IPVS: length: 8 != 1152 [ 443.917646][ T50] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.917690][ T50] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.917799][ T50] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.917831][ T50] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.917872][ T50] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.917902][ T50] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.942539][ T3348] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 443.942582][ T3348] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.219688][T20398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6982'. [ 444.726370][T20416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6991'. [ 445.998718][T20461] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 447.421694][T20511] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7037'. [ 447.421723][T20511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7037'. [ 447.800896][T20523] Bluetooth: hci0: unsupported parameter 5135 [ 447.800923][T20523] Bluetooth: hci0: unsupported parameter 8192 [ 447.800937][T20523] Bluetooth: hci0: unsupported parameter 5135 [ 447.800950][T20523] Bluetooth: hci0: unsupported parameter 8192 [ 448.119398][T20532] Bluetooth: hci0: unsupported parameter 5135 [ 448.119425][T20532] Bluetooth: hci0: unsupported parameter 8192 [ 448.119439][T20532] Bluetooth: hci0: unsupported parameter 5135 [ 448.119453][T20532] Bluetooth: hci0: unsupported parameter 8192 [ 448.486915][T20544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7053'. [ 449.354290][T20576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7069'. [ 449.876123][T20596] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7078'. [ 449.876152][T20596] netlink: 'syz.1.7078': attribute type 9 has an invalid length. [ 450.142258][T20606] Bluetooth: hci0: unsupported parameter 5135 [ 450.142283][T20606] Bluetooth: hci0: unsupported parameter 8192 [ 450.142297][T20606] Bluetooth: hci0: unsupported parameter 5135 [ 450.142309][T20606] Bluetooth: hci0: unsupported parameter 8192 [ 450.190422][T20609] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7082'. [ 450.524119][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 450.698862][T20622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7090'. [ 450.838718][T20629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7094'. [ 450.838752][T20629] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7094'. [ 450.838851][T20629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7094'. [ 451.813621][T20664] tipc: Enabling of bearer rejected, media not registered [ 452.285998][T20685] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.520101][T20690] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7119'. [ 452.791778][T20704] Bluetooth: hci0: unsupported parameter 5135 [ 452.791805][T20704] Bluetooth: hci0: unsupported parameter 8192 [ 452.791820][T20704] Bluetooth: hci0: unsupported parameter 5135 [ 452.791834][T20704] Bluetooth: hci0: unsupported parameter 8192 [ 454.408115][T20756] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 454.408155][T20756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 454.753520][T20770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 455.021220][T20779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7162'. [ 455.642900][T20803] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7174'. [ 456.067895][T20822] IPv6: NLM_F_CREATE should be specified when creating new route [ 456.068002][T20822] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7184'. [ 456.172239][T20824] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7186'. [ 457.312432][T20863] netlink: Setting conntrack mark requires 'commit' flag. [ 457.312471][T20863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.452758][T20870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7206'. [ 457.509013][T20872] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7211'. [ 457.598762][T20872] bond3: Invalid ad_actor_system MAC address. [ 457.598786][T20872] bond3: option ad_actor_system: invalid value (1) [ 457.602354][T20872] bond3 (unregistering): Released all slaves [ 457.723264][T20880] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7212'. [ 457.751412][T20881] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7213'. [ 458.191212][T20899] Bluetooth: hci0: unsupported parameter 5135 [ 458.191244][T20899] Bluetooth: hci0: unsupported parameter 8192 [ 458.191260][T20899] Bluetooth: hci0: unsupported parameter 5135 [ 458.191275][T20899] Bluetooth: hci0: unsupported parameter 8192 [ 458.272796][T20901] Bluetooth: hci0: unsupported parameter 5134 [ 458.272826][T20901] Bluetooth: hci0: unsupported parameter 8192 [ 458.272842][T20901] Bluetooth: hci0: unsupported parameter 5134 [ 458.272858][T20901] Bluetooth: hci0: unsupported parameter 8192 [ 458.899571][T20922] vlan1: entered allmulticast mode [ 458.963495][T20926] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7236'. [ 459.257721][T20935] sctp: [Deprecated]: syz.3.7240 (pid 20935) Use of int in max_burst socket option deprecated. [ 459.257721][T20935] Use struct sctp_assoc_value instead [ 459.743247][T20946] netlink: 'syz.1.7244': attribute type 1 has an invalid length. [ 460.057294][T20957] IPVS: Error connecting to the multicast addr [ 461.735434][T21012] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7275'. [ 462.085929][T21020] IPVS: ip_vs_add_dest(): server weight less than zero [ 462.304994][T21024] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 462.591787][T21033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7286'. [ 462.667934][ T1122] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 462.668213][ T1122] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 462.696922][ T30] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 462.898258][ T4951] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.232218][T21049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7293'. [ 463.404757][ T4951] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 463.685045][T21062] netlink: 'syz.3.7300': attribute type 1 has an invalid length. [ 463.685072][T21062] netlink: 232 bytes leftover after parsing attributes in process `syz.3.7300'. [ 463.685089][T21062] netlink: 'syz.3.7300': attribute type 1 has an invalid length. [ 464.090865][T21075] netlink: 'syz.2.7306': attribute type 1 has an invalid length. [ 464.747867][T21103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7319'. [ 464.993085][T21111] lo: entered promiscuous mode [ 464.999253][T21111] lo: left promiscuous mode [ 465.148915][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7325'. [ 465.197422][T21115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7325'. [ 466.025957][T21145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.604125][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 466.722395][T21168] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7351'. [ 466.946070][T21173] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7353'. [ 467.445621][T21194] SET target dimension over the limit! [ 469.061985][T21249] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 469.339627][T21258] netlink: 3728 bytes leftover after parsing attributes in process `syz.1.7395'. [ 469.384536][T21258] netlink: 3784 bytes leftover after parsing attributes in process `syz.1.7395'. [ 469.953316][T21281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7406'. [ 470.371923][T21296] tipc: Started in network mode [ 470.371965][T21296] tipc: Node identity ac14142f, cluster identity 4711 [ 470.400040][T21296] tipc: Enabling of bearer rejected, failed to enable media [ 471.310549][ T1100] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 471.320569][T21327] netlink: 199784 bytes leftover after parsing attributes in process `syz.3.7428'. [ 471.320658][T21327] netlink: 'syz.3.7428': attribute type 1 has an invalid length. [ 471.710269][T21341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7434'. [ 472.522684][T21373] tipc: Enabling of bearer rejected, failed to enable media [ 472.648427][T21378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7453'. [ 472.648470][T21378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7453'. [ 473.134792][T21392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7460'. [ 473.414623][T21403] netlink: 'syz.4.7464': attribute type 1 has an invalid length. [ 473.947052][T21427] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7477'. [ 474.117970][T21432] ip_tables: iptables: counters copy to user failed while replacing table [ 474.409258][T21443] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 474.629811][T21452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7489'. [ 474.629850][T21452] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 474.844089][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 475.980600][T21506] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 475.980638][T21506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.443373][T21516] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7518'. [ 477.132407][T21534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7526'. [ 477.144902][T21534] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7526'. [ 477.144954][T21534] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7526'. [ 477.484286][ T52] Bluetooth: hci4: command 0x0406 tx timeout [ 477.949814][T21563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7540'. [ 478.455031][T21574] batman_adv: batadv0: Adding interface: gretap1 [ 478.455055][T21574] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.455095][T21574] batman_adv: batadv0: Interface activated: gretap1 [ 479.391062][T21606] Set syz1 is full, maxelem 14 reached [ 479.583573][T21612] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7564'. [ 480.682475][T21654] netlink: 'syz.2.7583': attribute type 6 has an invalid length. [ 481.006713][T21666] netlink: 'syz.2.7588': attribute type 5 has an invalid length. [ 481.966739][T21702] netlink: 'syz.3.7607': attribute type 1 has an invalid length. [ 481.966768][T21702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7607'. [ 482.080872][T21706] tipc: New replicast peer: 255.255.255.255 [ 482.091612][T21706] tipc: Enabled bearer , priority 10 [ 482.185153][T21709] netlink: 'syz.4.7611': attribute type 1 has an invalid length. [ 482.185181][T21709] netlink: 'syz.4.7611': attribute type 7 has an invalid length. [ 482.185196][T21709] netlink: 'syz.4.7611': attribute type 8 has an invalid length. [ 482.185211][T21709] netlink: 208 bytes leftover after parsing attributes in process `syz.4.7611'. [ 482.185244][T21709] NCSI netlink: No device for ifindex 65584 [ 482.895325][T21732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7622'. [ 482.897546][T21732] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7622'. [ 483.076387][ T4951] tipc: Node number set to 2886997039 [ 483.193270][T21738] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7625'. [ 483.840524][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7635'. [ 483.840556][T21758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7635'. [ 484.357553][T21766] netlink: 'syz.3.7639': attribute type 5 has an invalid length. [ 484.417276][T21766] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.195848][T21801] netlink: 81 bytes leftover after parsing attributes in process `syz.0.7656'. [ 486.009372][T21831] netlink: 'syz.4.7671': attribute type 1 has an invalid length. [ 486.009409][T21831] netlink: 'syz.4.7671': attribute type 2 has an invalid length. [ 486.013189][T21831] netlink: 'syz.4.7671': attribute type 1 has an invalid length. [ 486.013211][T21831] netlink: 'syz.4.7671': attribute type 2 has an invalid length. [ 486.192242][T21838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7672'. [ 486.768154][T21864] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7683'. [ 487.038290][T21872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7690'. [ 487.038322][T21872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7690'. [ 488.186413][T21896] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 488.430194][T21906] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7703'. [ 488.548004][T21908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7705'. [ 488.810552][T21921] netlink: 112 bytes leftover after parsing attributes in process `syz.2.7711'. [ 489.785374][T21953] netlink: 'syz.2.7727': attribute type 3 has an invalid length. [ 489.785399][T21953] netlink: 'syz.2.7727': attribute type 2 has an invalid length. [ 489.849338][T21958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7728'. [ 490.071393][ T3348] IPVS: starting estimator thread 0... [ 490.157995][T21963] IPVS: using max 27 ests per chain, 64800 per kthread [ 490.908638][T21987] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 490.908865][T21987] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 491.001763][T21993] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7744'. [ 491.484170][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 492.819765][T22056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7776'. [ 493.422807][T22076] veth0: entered promiscuous mode [ 493.449088][T22073] veth0: left promiscuous mode [ 493.876478][T22096] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7796'. [ 493.997105][T22098] netlink: 'syz.4.7797': attribute type 1 has an invalid length. [ 494.261759][T22106] tap0: tun_chr_ioctl cmd 1074025676 [ 494.261788][T22106] tap0: owner set to 0 [ 494.333615][T22110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7802'. [ 494.346627][T22110] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7802'. [ 495.192247][T22139] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 495.412564][T22151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7823'. [ 495.524756][T22154] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7824'. [ 496.093106][T22176] netlink: 'syz.0.7834': attribute type 1 has an invalid length. [ 496.948843][T22202] ip_tables: iptables: counters copy to user failed while replacing table [ 497.963494][T22245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7867'. [ 497.992313][T22244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7869'. [ 498.763922][T22273] netlink: 'syz.2.7883': attribute type 1 has an invalid length. [ 498.763948][T22273] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7883'. [ 499.137588][T22287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7888'. [ 499.287314][T22289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7888'. [ 499.624685][T22302] Bluetooth: hci0: Invalid link address type 18 for 00:40:00:00:00:00 [ 499.892323][T22312] bond0: option miimon: invalid value (18446744071829782528) [ 499.892355][T22312] bond0: option miimon: allowed values 0 - 2147483647 [ 500.055503][T22316] netlink: 71 bytes leftover after parsing attributes in process `syz.3.7903'. [ 501.249974][T22359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7924'. [ 501.251058][T22359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7924'. [ 501.647042][T22371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.730656][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.378743][T22401] netlink: 'syz.3.7942': attribute type 4 has an invalid length. [ 503.156061][T22419] 8021q: adding VLAN 0 to HW filter on device .` [ 503.221536][T22419] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.221712][T22419] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.402981][T22419] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 503.513281][T22419] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 503.722879][T22420] gtp0: left allmulticast mode [ 503.740914][T22420] veth3: left allmulticast mode [ 503.757458][T22420] vlan2: left allmulticast mode [ 503.757501][T22420] bond0: left allmulticast mode [ 503.777318][T22420] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 504.215647][T22446] Bluetooth: hci1: too big key_count value 32778 [ 505.155263][T22481] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.7977'. [ 505.305178][T22485] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 506.155099][T22511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7992'. [ 508.369764][T22579] lo: Caught tx_queue_len zero misconfig [ 511.780130][T22693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8074'. [ 511.815338][T22694] netlink: 'syz.0.8075': attribute type 1 has an invalid length. [ 511.815365][T22694] netlink: 'syz.0.8075': attribute type 3 has an invalid length. [ 511.815381][T22694] netlink: 'syz.0.8075': attribute type 7 has an invalid length. [ 511.815396][T22694] netlink: 'syz.0.8075': attribute type 8 has an invalid length. [ 511.815410][T22694] netlink: 184 bytes leftover after parsing attributes in process `syz.0.8075'. [ 511.815458][T22694] NCSI netlink: No device for ifindex 131092 [ 512.094307][T22703] ip_tables: iptables: counters copy to user failed while replacing table [ 512.162133][T22704] batadv_slave_0: Caught tx_queue_len zero misconfig [ 512.267573][T22707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8082'. [ 512.478835][T22718] netlink: 'syz.0.8087': attribute type 83 has an invalid length. [ 514.421862][T22791] tipc: Started in network mode [ 514.421968][T22791] tipc: Node identity ac14142f, cluster identity 4711 [ 514.441809][T22791] tipc: Enabled bearer , priority 10 [ 514.451581][T22791] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8120'. [ 514.764065][T22803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8126'. [ 515.168388][T22817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8133'. [ 515.173457][T22817] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.522353][T22828] netlink: 'syz.3.8138': attribute type 8 has an invalid length. [ 515.522571][T22828] sch_fq: defrate 0 ignored. [ 515.550644][ T25] tipc: Node number set to 2886997039 [ 515.880606][T22837] bond0: (slave team0): Releasing backup interface [ 515.918147][T22837] team0: Cannot enslave team device to itself [ 516.277125][T22853] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 516.803168][T22873] ip_tables: iptables: counters copy to user failed while replacing table [ 517.123554][T22883] netlink: 'syz.4.8165': attribute type 14 has an invalid length. [ 517.988014][T22901] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8170'. [ 518.282187][T22905] sch_tbf: burst 0 is lower than device lo mtu (143) ! [ 518.484110][T22912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8175'. [ 518.484149][T22912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8175'. [ 519.532369][T22940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8189'. [ 519.631512][T22940] ipvlan2: entered allmulticast mode [ 519.631540][T22940] virt_wifi0: entered allmulticast mode [ 519.706849][T22940] batman_adv: batadv0: Adding interface: ipvlan2 [ 519.706873][T22940] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 519.706913][T22940] batman_adv: batadv0: Interface activated: ipvlan2 [ 520.125020][T22959] netlink: 'syz.1.8198': attribute type 28 has an invalid length. [ 520.125048][T22959] netlink: 'syz.1.8198': attribute type 3 has an invalid length. [ 520.125064][T22959] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8198'. [ 520.240605][T22961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8199'. [ 520.389492][T22963] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8200'. [ 520.766111][T22981] bond_slave_0: Caught tx_queue_len zero misconfig [ 521.031750][T22991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8213'. [ 521.683632][T23012] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8225'. [ 521.683662][T23012] tipc: Invalid UDP bearer configuration [ 521.683706][T23012] tipc: Enabling of bearer rejected, failed to enable media [ 522.960425][T23057] macvtap0: entered allmulticast mode [ 522.960452][T23057] veth0_macvtap: entered allmulticast mode [ 523.149063][T23065] h: entered promiscuous mode [ 523.459607][T23069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8248'. [ 524.134330][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 524.154179][T23083] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 524.618302][T23101] netlink: 27 bytes leftover after parsing attributes in process `syz.3.8264'. [ 525.454888][T23131] netlink: 'syz.2.8278': attribute type 10 has an invalid length. [ 525.456230][T23131] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.502959][T23131] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.503093][T23131] bridge0: port 2(bridge_slave_1) entered listening state [ 525.529035][T23131] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 525.573123][T23131] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8278'. [ 525.573644][T23131] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.617631][T23131] bridge_slave_0: left allmulticast mode [ 525.617661][T23131] bridge_slave_0: left promiscuous mode [ 525.619407][T23131] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.811769][T23131] bond0: (slave bridge0): Releasing backup interface [ 525.928317][T23146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8284'. [ 526.168224][T23152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8287'. [ 526.168261][T23152] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8287'. [ 527.493463][T23190] sctp: [Deprecated]: syz.3.8305 (pid 23190) Use of struct sctp_assoc_value in delayed_ack socket option. [ 527.493463][T23190] Use struct sctp_sack_info instead [ 528.837853][T23227] netlink: 'syz.2.8323': attribute type 11 has an invalid length. [ 529.587505][T23247] erspan0: entered promiscuous mode [ 529.620654][T23251] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 529.622752][T23248] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 530.539711][T23273] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 530.542579][T23273] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 531.261388][T23298] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 531.261418][T23298] syzkaller1: group set to 0 [ 531.897308][T23323] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8368'. [ 532.098146][T23331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8371'. [ 532.200079][T23333] blkio.reset_stats is deprecated [ 533.672127][T23383] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 533.770841][T23387] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8397'. [ 534.048871][T23391] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8399'. [ 534.052697][T23391] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8399'. [ 534.052746][T23391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8399'. [ 534.452190][T23402] sctp: [Deprecated]: syz.2.8404 (pid 23402) Use of int in max_burst socket option. [ 534.452190][T23402] Use struct sctp_assoc_value instead [ 535.629547][ T52] block nbd0: Receive control failed (result -32) [ 535.695234][T18872] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 535.771554][T23450] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8424'. [ 535.896783][T23457] netlink: 'syz.0.8429': attribute type 11 has an invalid length. [ 536.113613][T23459] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8430'. [ 536.268495][T23463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8433'. [ 536.420992][T23463] macvtap1: entered promiscuous mode [ 536.421021][T23463] vlan0: entered promiscuous mode [ 536.423117][T23463] macvtap1: entered allmulticast mode [ 536.455660][T23463] vlan0: entered allmulticast mode [ 536.499566][T23469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8435'. [ 536.937187][T23483] __nla_validate_parse: 1 callbacks suppressed [ 536.937210][T23483] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8442'. [ 537.043260][T23487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8445'. [ 537.043289][T23487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8445'. [ 537.130189][T23487] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8445'. [ 537.130217][T23487] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8445'. [ 537.837814][T23512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8456'. [ 538.541867][T23541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8468'. [ 539.522256][T23570] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8482'. [ 540.612259][T23606] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8500'. [ 541.548506][T23641] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8515'. [ 542.571396][T23672] __nla_validate_parse: 1 callbacks suppressed [ 542.571421][T23672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8530'. [ 542.915346][T23683] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8536'. [ 545.065897][ T52] Bluetooth: hci2: connection err: -111 [ 545.280632][T23776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8580'. [ 545.316454][T23776] erspan0: entered promiscuous mode [ 545.731689][T23790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8588'. [ 545.878155][T23793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8592'. [ 547.501335][T23854] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8617'. [ 547.502289][T23851] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8617'. [ 547.978178][T23873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8627'. [ 547.995061][T23873] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8627'. [ 548.522040][T23886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8634'. [ 548.611614][T23890] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8636'. [ 548.734880][T23895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8638'. [ 548.843580][T23899] netlink: 232 bytes leftover after parsing attributes in process `syz.3.8640'. [ 550.605068][T23942] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8658'. [ 550.605114][T23942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8658'. [ 550.605131][T23942] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8658'. [ 550.781422][T23948] tipc: Enabling of bearer rejected, already enabled [ 550.858774][T23954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8665'. [ 551.361199][T23973] sctp: [Deprecated]: syz.0.8671 (pid 23973) Use of struct sctp_assoc_value in delayed_ack socket option. [ 551.361199][T23973] Use struct sctp_sack_info instead [ 552.385647][T24014] netlink: 'syz.2.8693': attribute type 21 has an invalid length. [ 552.385752][T24014] netlink: 'syz.2.8693': attribute type 4 has an invalid length. [ 552.385768][T24014] netlink: 'syz.2.8693': attribute type 5 has an invalid length. [ 552.403889][T24014] netlink: 'syz.2.8693': attribute type 21 has an invalid length. [ 552.404087][T24014] netlink: 'syz.2.8693': attribute type 4 has an invalid length. [ 552.404129][T24014] netlink: 'syz.2.8693': attribute type 5 has an invalid length. [ 552.764806][T24027] xt_hashlimit: size too large, truncated to 1048576 [ 552.829237][T24028] xt_hashlimit: size too large, truncated to 1048576 [ 552.945803][T24030] netlink: 'syz.1.8702': attribute type 1 has an invalid length. [ 552.945834][T24030] netlink: 'syz.1.8702': attribute type 2 has an invalid length. [ 554.313240][T24069] __nla_validate_parse: 9 callbacks suppressed [ 554.313268][T24069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8717'. [ 554.711892][T24080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8723'. [ 555.168924][T24095] gretap0: entered promiscuous mode [ 555.169604][T24095] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8730'. [ 555.169635][T24095] gretap0: left promiscuous mode [ 555.707281][T24109] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8734'. [ 556.039816][T24118] openvswitch: netlink: IP tunnel dst address not specified [ 556.039858][T24118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 556.428388][T24130] set match dimension is over the limit! [ 557.413254][T24161] gtp0: entered promiscuous mode [ 557.413278][T24161] gtp0: entered allmulticast mode [ 557.627617][T24172] ip6tnl0: Caught tx_queue_len zero misconfig [ 557.822015][T24176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8767'. [ 558.263662][T24191] sctp: [Deprecated]: syz.2.8774 (pid 24191) Use of int in maxseg socket option. [ 558.263662][T24191] Use struct sctp_assoc_value instead [ 558.397111][T24199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8780'. [ 558.397806][T24199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8780'. [ 558.398086][T24199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8780'. [ 558.452727][T24197] netlink: 'syz.1.8776': attribute type 83 has an invalid length. [ 559.275672][T24221] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8788'. [ 559.588299][T24231] openvswitch: netlink: Unknown key attributes 1 [ 560.151709][T24254] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 560.520696][T24268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8811'. [ 560.778516][T24278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8817'. [ 560.878823][T24278] 8021q: adding VLAN 0 to HW filter on device bond1 [ 560.910597][T24278] bond0: (slave bond1): Enslaving as an active interface with an up link [ 560.929542][T24284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8818'. [ 560.929583][T24284] netlink: 'syz.0.8818': attribute type 8 has an invalid length. [ 560.929599][T24284] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8818'. [ 561.010269][T24285] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8819'. [ 561.736174][T24309] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8831'. [ 562.100480][T24328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8840'. [ 563.167069][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.186109][T24362] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 563.186453][T24362] syzkaller1: linktype set to 823 [ 563.634830][T24379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8866'. [ 563.874864][T24388] netlink: 'syz.4.8869': attribute type 1 has an invalid length. [ 563.874889][T24388] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.8869'. [ 563.874908][T24388] netlink: 'syz.4.8869': attribute type 1 has an invalid length. [ 563.874921][T24388] netlink: 2016 bytes leftover after parsing attributes in process `syz.4.8869'. [ 564.080673][T24394] xfrm1: entered promiscuous mode [ 564.080699][T24394] xfrm1: entered allmulticast mode [ 565.713469][T24452] __nla_validate_parse: 2 callbacks suppressed [ 565.713493][T24452] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8900'. [ 566.308924][T24475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8912'. [ 567.136760][T24499] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8922'. [ 568.284210][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 568.962580][T24543] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8944'. [ 569.080786][T24547] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8945'. [ 569.353537][T24557] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 569.829457][T24575] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 572.052952][T24649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8992'. [ 572.156316][T24654] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 572.950488][T24681] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9007'. [ 573.417911][T24702] netlink: 'syz.3.9016': attribute type 2 has an invalid length. [ 573.806437][T24718] batadv0: entered promiscuous mode [ 573.810483][T24718] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 573.909563][ T52] Bluetooth: hci2: unexpected event 0x1d length: 10 > 5 [ 574.019501][T24718] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 574.100844][T24718] batadv0: left promiscuous mode [ 574.299973][T24731] veth1_to_bond: Caught tx_queue_len zero misconfig [ 574.525267][T24734] netlink: 'syz.3.9031': attribute type 15 has an invalid length. [ 575.300021][T24760] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9044'. [ 575.680636][T24775] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 577.611407][T24839] ip_tables: iptables: counters copy to user failed while replacing table [ 577.991063][T24849] netlink: 128 bytes leftover after parsing attributes in process `syz.2.9088'. [ 578.010877][T24851] sctp: [Deprecated]: syz.3.9089 (pid 24851) Use of struct sctp_assoc_value in delayed_ack socket option. [ 578.010877][T24851] Use struct sctp_sack_info instead [ 578.577159][T24867] veth0: mtu less than device minimum [ 578.985477][T24880] nbd1: detected capacity change from 0 to 274877906944 [ 578.992988][ T52] block nbd1: Receive control failed (result -32) [ 579.097497][ T1184] block nbd1: Dead connection, failed to find a fallback [ 579.097528][ T1184] block nbd1: shutting down sockets [ 579.097646][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.097769][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 579.122659][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.122908][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 579.125660][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.126399][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 579.129316][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.129350][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 579.130238][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.130321][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 579.156666][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.156796][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 579.232151][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.232772][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 579.241687][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.241786][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 579.241950][T24885] ldm_validate_partition_table(): Disk read failed. [ 579.242744][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.242817][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 579.259723][ T1184] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 579.259811][ T1184] Buffer I/O error on dev nbd1, logical block 0, async page read [ 579.297927][T24885] Dev nbd1: unable to read RDB block 0 [ 579.405054][T24885] nbd1: unable to read partition table [ 579.596143][T24885] ldm_validate_partition_table(): Disk read failed. [ 579.596649][T24885] Dev nbd1: unable to read RDB block 0 [ 579.597966][T24885] nbd1: unable to read partition table [ 580.346665][T24910] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 581.286883][T24937] ip_tables: iptables: counters copy to user failed while replacing table [ 581.461667][T24945] block nbd2: server does not support multiple connections per device. [ 581.463406][T24945] block nbd2: shutting down sockets [ 581.872866][T24959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9139'. [ 581.873126][T24959] netlink: 'syz.0.9139': attribute type 30 has an invalid length. [ 581.936119][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9139'. [ 581.936161][T24961] netlink: 'syz.0.9139': attribute type 30 has an invalid length. [ 582.220570][ T5622] block nbd2: Receive control failed (result -32) [ 582.221798][T23046] block nbd2: Receive control failed (result -32) [ 582.776404][T24973] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9144'. [ 583.607020][T24998] netlink: Only one type of NAT may be specified [ 583.607064][T24998] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 584.289952][T18874] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 584.623566][T25036] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 584.751315][T25043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9179'. [ 585.411183][T25063] netlink: 10 bytes leftover after parsing attributes in process `syz.4.9187'. [ 586.065419][T25086] IPv6: Can't replace route, no match found [ 586.065742][T25086] IPv6: Can't replace route, no match found [ 586.957562][T25112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9210'. [ 587.986894][T25134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9220'. [ 588.764219][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 588.881664][T25168] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9239'. [ 589.385762][T25184] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 590.019836][T25207] netlink: 64 bytes leftover after parsing attributes in process `syz.4.9257'. [ 590.722051][T25239] netlink: 'syz.2.9272': attribute type 2 has an invalid length. [ 591.208640][T25260] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9282'. [ 591.234564][T25255] bond2 (unregistering): Released all slaves [ 591.325998][T25260] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.326344][T25260] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.666969][T25268] netlink: 'syz.2.9286': attribute type 83 has an invalid length. [ 591.784875][T25275] ip_tables: iptables: counters copy to user failed while replacing table [ 591.908233][T25282] veth0: entered promiscuous mode [ 591.909382][T25281] veth0: left promiscuous mode [ 592.190755][T25292] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 593.130770][T25324] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9313'. [ 594.445853][T25368] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9335'. [ 595.373583][T25396] netlink: 'syz.0.9348': attribute type 12 has an invalid length. [ 595.476825][T25393] Bluetooth: hci0: Invalid link key type 76 for 00:00:4c:00:00:00 [ 596.817827][T25432] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9363'. [ 597.383870][T25454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9372'. [ 597.597676][T25460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9375'. [ 597.597710][T25460] nbd: couldn't find a device at index 65553 [ 597.702827][T25462] netlink: 'syz.2.9376': attribute type 4 has an invalid length. [ 598.153453][T25481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9385'. [ 598.322449][T25481] smc: removing net device team0 with user defined pnetid SYZ2 [ 598.368917][T25481] team0 (unregistering): Port device team_slave_0 removed [ 598.407333][T25481] team0 (unregistering): Port device team_slave_1 removed [ 600.420343][T25553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9421'. [ 600.812639][T25570] netlink: 'syz.2.9427': attribute type 83 has an invalid length. [ 601.638654][T25599] netlink: 'syz.1.9441': attribute type 2 has an invalid length. [ 601.638682][T25599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9441'. [ 601.643348][T25598] netlink: 'syz.4.9442': attribute type 10 has an invalid length. [ 601.699321][T25601] netlink: 'syz.4.9442': attribute type 10 has an invalid length. [ 602.045866][T25614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9447'. [ 602.268616][T25624] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9450'. [ 602.268650][T25624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9450'. [ 602.441781][T25626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9454'. [ 602.441810][T25626] netlink: 176 bytes leftover after parsing attributes in process `syz.4.9454'. [ 602.441856][T25626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9454'. [ 603.722559][T25668] netlink: 248 bytes leftover after parsing attributes in process `syz.3.9472'. [ 604.078911][T25681] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.078997][T25681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.273114][T25688] netlink: 88 bytes leftover after parsing attributes in process `syz.2.9484'. [ 605.590200][T25736] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 606.171779][T25751] openvswitch: netlink: IP tunnel dst address not specified [ 606.171817][T25751] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 606.452517][T25758] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9517'. [ 606.452674][T25758] netlink: 6 bytes leftover after parsing attributes in process `syz.2.9517'. [ 607.974538][T25809] netlink: 'syz.4.9541': attribute type 83 has an invalid length. [ 608.198099][T25815] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 608.278568][T25820] vxcan0: tx address claim with dest, not broadcast [ 608.404396][T25822] netlink: 'syz.4.9548': attribute type 83 has an invalid length. [ 608.544765][T25827] openvswitch: netlink: Unknown key attributes 1 [ 608.576871][T25831] erspan0: entered promiscuous mode [ 608.748863][T25838] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9556'. [ 608.879979][T25845] netlink: 'syz.4.9559': attribute type 5 has an invalid length. [ 609.126625][T25851] bridge0: Caught tx_queue_len zero misconfig [ 609.446826][T25866] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9568'. [ 610.098131][T25891] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9581'. [ 610.277585][T25896] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 610.624112][T25909] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9588'. [ 610.624146][T25909] block nbd3: Unsupported socket: should be TCP or UNIX. [ 610.694685][T25912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9589'. [ 610.792085][T25915] ip_tables: iptables: counters copy to user failed while replacing table [ 610.998254][T25921] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 613.662783][T26013] netlink: 'syz.0.9637': attribute type 4 has an invalid length. [ 613.962646][T26022] netlink: 'syz.0.9642': attribute type 5 has an invalid length. [ 614.682381][T26051] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 615.645989][ T3397] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 615.792631][T26094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9674'. [ 616.033045][T26100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9678'. [ 616.461157][T26119] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 616.984571][T26129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9691'. [ 616.984706][T26129] netlink: 2 bytes leftover after parsing attributes in process `syz.2.9691'. [ 618.063978][T26155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9703'. [ 618.064010][T26155] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9703'. [ 618.213381][T26161] erspan0: entered promiscuous mode [ 618.830965][T26182] netlink: 104 bytes leftover after parsing attributes in process `syz.0.9716'. [ 618.933431][T26186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9720'. [ 619.107530][T26194] netlink: 31 bytes leftover after parsing attributes in process `syz.4.9723'. [ 619.107564][T26194] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9723'. [ 619.330135][T26201] wg2: Caught tx_queue_len zero misconfig [ 619.551261][T26208] ip_tables: iptables: counters copy to user failed while replacing table [ 619.898618][T26218] xt_hashlimit: size too large, truncated to 1048576 [ 619.935363][T26224] syzkaller0: Caught tx_queue_len zero misconfig [ 620.170747][T26232] openvswitch: netlink: VLAN attribute unexpected. [ 621.368204][T26271] __nla_validate_parse: 3 callbacks suppressed [ 621.368230][T26271] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9759'. [ 621.368252][T26271] block nbd3: Unsupported socket: should be TCP or UNIX. [ 624.120204][T26350] ieee802154 phy1 wpan1: encryption failed: -126 [ 624.432029][T26363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9804'. [ 624.608569][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.027543][T26379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9809'. [ 625.770699][T26404] pim6reg: entered allmulticast mode [ 625.841090][T26400] pim6reg: left allmulticast mode [ 625.963661][T26411] netlink: 'syz.2.9824': attribute type 1 has an invalid length. [ 626.187684][T26419] netlink: 'syz.0.9827': attribute type 2 has an invalid length. [ 626.392510][T26426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9830'. [ 626.421610][T26425] netlink: 'syz.4.9829': attribute type 3 has an invalid length. [ 626.454755][T26430] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9834'. [ 626.454789][T26430] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9834'. [ 627.342228][T26458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9845'. [ 627.342258][T26458] netlink: 176 bytes leftover after parsing attributes in process `syz.1.9845'. [ 627.342312][T26458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9845'. [ 627.478981][T26462] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9849'. [ 627.479011][T26462] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9849'. [ 627.794055][T26473] netlink: 'syz.0.9850': attribute type 3 has an invalid length. [ 628.349639][T26494] pim6reg: entered allmulticast mode [ 628.514252][T26487] pim6reg: left allmulticast mode [ 628.852676][T26505] veth0: entered promiscuous mode [ 628.876449][T26501] veth0: left promiscuous mode [ 629.167222][T26514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9871'. [ 630.631161][T26532] pim6reg: entered allmulticast mode [ 630.795846][T26531] pim6reg: left allmulticast mode [ 631.115692][T26553] netlink: 'syz.4.9889': attribute type 3 has an invalid length. [ 632.053517][T26582] pim6reg: entered allmulticast mode [ 632.092051][T26576] pim6reg: left allmulticast mode [ 632.351677][T26590] veth0: Caught tx_queue_len zero misconfig [ 632.421386][T26595] openvswitch: netlink: Unknown key attributes 1 [ 632.627417][T26601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9905'. [ 632.745137][T26602] netlink: 'syz.0.9907': attribute type 83 has an invalid length. [ 634.027776][T26649] netlink: 'syz.0.9928': attribute type 83 has an invalid length. [ 634.476804][T26668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9939'. [ 635.476552][T26699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9951'. [ 635.481394][T26699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9951'. [ 635.896508][T26686] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 635.896552][T26686] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.445987][T26686] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.446077][T26686] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.737942][T26686] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.737986][T26686] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.993480][T26686] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.993522][T26686] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.464298][T26748] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 637.588080][ T30] lo speed is unknown, defaulting to 1000 [ 637.588172][ T30] syz0: Port: 1 Link DOWN [ 637.588485][ T30] lo speed is unknown, defaulting to 1000 [ 637.615052][ T3397] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.615158][ T3397] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.630980][ T1020] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.631083][ T1020] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.677384][ T43] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.677427][ T43] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.724897][ T43] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.724941][ T43] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.164566][T26768] xfrm0: Caught tx_queue_len zero misconfig [ 639.258410][T26811] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9997'. [ 639.258443][T26811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9997'. [ 640.844530][T23046] Bluetooth: hci4: command 0x0406 tx timeout [ 642.083840][T26907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10039'. [ 642.436457][T26915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10044'. [ 642.438881][T26916] netlink: 65011 bytes leftover after parsing attributes in process `syz.3.10044'. [ 643.222820][T26941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10056'. [ 643.222983][T26941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.365548][T26941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.957667][T26961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10064'. [ 643.957703][T26961] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10064'. [ 644.121739][T26967] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 644.739839][T26981] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 644.740262][T26981] gretap2: entered promiscuous mode [ 644.740281][T26981] gretap2: entered allmulticast mode [ 644.816478][T26985] erspan0: entered promiscuous mode [ 645.380452][T27008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10085'. [ 645.380488][T27008] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10085'. [ 645.459087][T27010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10086'. [ 645.711367][T27010] netlink: 'syz.0.10086': attribute type 1 has an invalid length. [ 645.711394][T27010] netlink: 'syz.0.10086': attribute type 2 has an invalid length. [ 646.560818][T27048] netlink: 236 bytes leftover after parsing attributes in process `syz.3.10101'. [ 646.560852][T27048] netlink: 236 bytes leftover after parsing attributes in process `syz.3.10101'. [ 646.725030][T27053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10104'. [ 647.372288][T27066] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10110'. [ 647.653674][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 647.756810][T27085] netlink: 'syz.2.10118': attribute type 10 has an invalid length. [ 647.800165][T27085] team0: Device wg2 is of different type [ 648.335198][T27102] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 648.691455][T27117] netlink: 'syz.2.10134': attribute type 1 has an invalid length. [ 649.916909][T27145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10147'. [ 649.967570][T27145] netlink: 'syz.3.10147': attribute type 1 has an invalid length. [ 649.967594][T27145] netlink: 'syz.3.10147': attribute type 2 has an invalid length. [ 650.048079][T27149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10149'. [ 650.048123][T27149] bond0: ARP target 8.4.0.0 is already present [ 650.048144][T27149] bond0: option arp_ip_target: invalid value (1032) [ 651.746675][T27198] netlink: 'syz.3.10172': attribute type 10 has an invalid length. [ 651.943070][T27198] team0: Device wg2 is of different type [ 652.374199][T27214] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 652.722384][T27218] bridge_slave_0 (unregistering): left allmulticast mode [ 652.722784][T27218] bridge_slave_0 (unregistering): left promiscuous mode [ 652.723298][T27218] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.299383][T27232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10185'. [ 654.017963][T27249] netlink: 'syz.0.10194': attribute type 1 has an invalid length. [ 654.026270][T27250] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10195'. [ 654.026795][T27250] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10195'. [ 654.247006][T27254] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10198'. [ 655.888317][T27288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10213'. [ 656.122316][T27292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10216'. [ 656.326057][T27301] tunl0: Caught tx_queue_len zero misconfig [ 657.467147][T27331] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10232'. [ 657.693120][T27338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10237'. [ 658.229837][T27358] vcan0: tx address claim with dlc 0 [ 658.432625][T27364] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 658.432648][T27364] IPv6: NLM_F_CREATE should be set when creating new route [ 658.736531][T27378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10255'. [ 658.827717][T27378] bridge0: port 3(batadv2) entered blocking state [ 658.852985][T27378] bridge0: port 3(batadv2) entered disabled state [ 658.854613][T27378] batadv2: entered allmulticast mode [ 658.889392][T27378] batadv2: entered promiscuous mode [ 658.985852][T27389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10258'. [ 659.436826][ T3348] batman_adv: batadv2: IGMP Querier appeared [ 659.436849][ T3348] batman_adv: batadv2: MLD Querier appeared [ 659.894534][T27419] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 660.312058][T27436] ip_tables: iptables: counters copy to user failed while replacing table [ 660.683980][T27447] ip_tables: iptables: counters copy to user failed while replacing table [ 662.110920][T27496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10306'. [ 662.307291][T27504] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10310'. [ 662.467716][T27509] ip_tables: iptables: counters copy to user failed while replacing table [ 663.564586][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.564820][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.051095][T27551] netlink: 'syz.2.10333': attribute type 11 has an invalid length. [ 664.071848][T27553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10331'. [ 664.179430][T27557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10336'. [ 664.180491][T27557] ip_tables: iptables: counters copy to user failed while replacing table [ 664.787406][T27582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10346'. [ 664.789211][T27582] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10346'. [ 665.062211][T27589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10348'. [ 665.147826][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079fd1800: rx timeout, send abort [ 665.276056][T27594] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 665.575446][T27608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10358'. [ 665.649332][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079fd1800: abort rx timeout. Force session deactivation [ 666.480800][T27639] netlink: 'syz.1.10381': attribute type 1 has an invalid length. [ 666.895138][T27647] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 667.102575][T27657] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 668.521885][T27709] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 668.684363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.685327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.685608][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.827779][T27722] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10408'. [ 668.850516][T27718] sctp: [Deprecated]: syz.2.10407 (pid 27718) Use of struct sctp_assoc_value in delayed_ack socket option. [ 668.850516][T27718] Use struct sctp_sack_info instead [ 669.708014][T27758] ip_tables: iptables: counters copy to user failed while replacing table [ 669.746276][T27758] C: renamed from lo (while UP) [ 669.772895][T27758] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 671.155509][T27791] ªªªªª»: renamed from dummy0 (while UP) [ 671.248363][T27792] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10431'. [ 673.204612][T27862] netlink: 27 bytes leftover after parsing attributes in process `syz.2.10462'. [ 673.897127][T27888] xt_hashlimit: size too large, truncated to 1048576 [ 674.348379][T27907] batadv_slave_1: entered promiscuous mode [ 674.392259][T27906] batadv_slave_1: left promiscuous mode [ 674.986785][T27919] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 675.049663][ C0] vcan0: j1939_tp_rxtimer: 0xffff888080ccac00: rx timeout, send abort [ 675.140486][T27923] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.158187][ T969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.158210][ T969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.549724][ C0] vcan0: j1939_tp_rxtimer: 0xffff888080ccac00: abort rx timeout. Force session deactivation [ 675.552108][ C0] vcan0: j1939_tp_rxtimer: 0xffff888080cca800: rx timeout, send abort [ 676.052151][ C0] vcan0: j1939_tp_rxtimer: 0xffff888080cca800: abort rx timeout. Force session deactivation [ 676.574363][T27970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10500'. [ 676.821925][T27976] syzkaller1: entered promiscuous mode [ 676.821950][T27976] syzkaller1: entered allmulticast mode [ 678.399765][T28020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10518'. [ 678.416847][T23046] block nbd3: Receive control failed (result -107) [ 678.534499][T28026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10520'. [ 678.607713][T28032] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10520'. [ 678.924023][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.924353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.421979][T28050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10529'. [ 679.595129][T28055] block nbd3: NBD_DISCONNECT [ 679.624664][T28055] block nbd3: Send disconnect failed -32 [ 679.624696][T28055] block nbd3: shutting down sockets [ 679.646219][ T137] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 679.954739][T28067] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 680.049092][T28070] macvlan0: entered promiscuous mode [ 680.332004][T28079] geneve3: entered promiscuous mode [ 680.346248][ T1100] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 52691 - 0 [ 680.346671][T18874] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 52691 - 0 [ 680.346712][T18874] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 52691 - 0 [ 680.346749][T18874] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 52691 - 0 [ 680.703479][T28090] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10547'. [ 680.737599][T28091] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10548'. [ 681.772851][T28118] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10562'. [ 681.772893][T28118] netlink: 'syz.4.10562': attribute type 7 has an invalid length. [ 681.772909][T28118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10562'. [ 681.839839][T28124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10564'. [ 681.870953][T28124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10564'. [ 681.990638][T28129] syzkaller1: entered promiscuous mode [ 681.990674][T28129] syzkaller1: entered allmulticast mode [ 682.168544][T28135] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 682.303010][T28142] sock: sock_set_timeout: `syz.1.10572' (pid 28142) tries to set negative timeout [ 683.096330][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.096357][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.144239][T28164] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 683.202185][T28172] netlink: 'syz.4.10586': attribute type 11 has an invalid length. [ 683.607052][T28179] syzkaller1: entered promiscuous mode [ 683.607081][T28179] syzkaller1: entered allmulticast mode [ 684.331018][T28201] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 684.684064][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.684338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.048042][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.117410][T28289] syzkaller1: entered promiscuous mode [ 687.117436][T28289] syzkaller1: entered allmulticast mode [ 688.609562][T28351] netlink: 'syz.4.10671': attribute type 11 has an invalid length. [ 688.937401][T28361] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10676'. [ 689.379855][T28375] netlink: 'syz.0.10684': attribute type 1 has an invalid length. [ 689.379883][T28375] netlink: 'syz.0.10684': attribute type 1 has an invalid length. [ 689.379899][T28375] netlink: 196 bytes leftover after parsing attributes in process `syz.0.10684'. [ 689.379916][T28375] netlink: 'syz.0.10684': attribute type 1 has an invalid length. [ 689.634299][T28386] ip_tables: iptables: counters copy to user failed while replacing table [ 690.444256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.444549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.004987][T28422] veth0: entered promiscuous mode [ 691.011232][T28421] veth0: left promiscuous mode [ 691.275080][T28431] netlink: 'syz.3.10707': attribute type 4 has an invalid length. [ 691.799969][T28444] syzkaller1: entered promiscuous mode [ 691.799996][T28444] syzkaller1: entered allmulticast mode [ 691.841852][T28447] netlink: 11 bytes leftover after parsing attributes in process `syz.0.10716'. [ 692.151825][T28457] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 693.396007][T28504] tipc: Can't bind to reserved service type 1 [ 694.310985][T28533] netlink: 83 bytes leftover after parsing attributes in process `syz.0.10758'. [ 695.172983][T28565] gretap0: entered promiscuous mode [ 695.564109][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.564407][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.732196][T28584] bond1: option mode: invalid value (10) [ 695.748845][T28584] bond1 (unregistering): Released all slaves [ 696.471079][T28604] netlink: 27 bytes leftover after parsing attributes in process `syz.1.10791'. [ 696.692554][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10792'. [ 696.714400][T28607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10792'. [ 696.787359][T28611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10795'. [ 697.076043][T28619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10799'. [ 697.383030][T28633] netlink: 68 bytes leftover after parsing attributes in process `syz.4.10803'. [ 697.383057][T28633] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10803'. [ 697.620854][T28638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10808'. [ 698.178509][T28663] netlink: 84 bytes leftover after parsing attributes in process `syz.1.10813'. [ 698.557313][T28675] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 698.586261][T28675] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 698.822440][T28686] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 699.681227][T28716] __nla_validate_parse: 1 callbacks suppressed [ 699.681254][T28716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10838'. [ 699.681288][T28716] netlink: 'syz.1.10838': attribute type 10 has an invalid length. [ 699.681307][T28716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10838'. [ 700.295743][T28739] netlink: 'syz.1.10849': attribute type 1 has an invalid length. [ 700.295771][T28739] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.10849'. [ 700.295790][T28739] netlink: 'syz.1.10849': attribute type 1 has an invalid length. [ 700.295805][T28739] netlink: 2016 bytes leftover after parsing attributes in process `syz.1.10849'. [ 700.352303][T28741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10850'. [ 700.603943][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.604193][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.210592][T28793] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10874'. [ 702.416780][T28799] syzkaller1: entered promiscuous mode [ 702.416809][T28799] syzkaller1: entered allmulticast mode [ 702.469945][T28799] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 702.607087][T28805] netlink: 'syz.0.10880': attribute type 1 has an invalid length. [ 702.607148][T28805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10880'. [ 703.081563][T28815] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10883'. [ 703.163294][T28810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10881'. [ 703.323818][T28824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10886'. [ 703.391248][T28824] netlink: 'syz.0.10886': attribute type 1 has an invalid length. [ 703.391277][T28824] netlink: 'syz.0.10886': attribute type 2 has an invalid length. [ 704.212424][T28851] bridge_slave_1: left promiscuous mode [ 704.214558][T28851] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.339587][T28851] bridge_slave_0: left allmulticast mode [ 704.339623][T28851] bridge_slave_0: left promiscuous mode [ 704.339919][T28851] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.699178][T28890] __nla_validate_parse: 1 callbacks suppressed [ 705.699213][T28890] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10917'. [ 706.460084][T28909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10924'. [ 706.524250][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.524463][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.803755][T28922] vcan0: tx address claim with different name [ 706.917453][T28927] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10930'. [ 709.437646][T29001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10954'. [ 709.532829][T29001] bridge3: entered promiscuous mode [ 709.533055][T29001] bridge3: entered allmulticast mode [ 709.573529][T29001] team0: Port device bridge3 added [ 709.575075][T29005] bridge0: port 4(team0) entered blocking state [ 709.575391][T29005] bridge0: port 4(team0) entered disabled state [ 709.576064][T29005] team0: entered allmulticast mode [ 709.576114][T29005] team_slave_0: entered allmulticast mode [ 709.576166][T29005] team_slave_1: entered allmulticast mode [ 709.758262][T29005] team0: entered promiscuous mode [ 709.758290][T29005] team_slave_0: entered promiscuous mode [ 709.758505][T29005] team_slave_1: entered promiscuous mode [ 709.882389][T29014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10959'. [ 709.882462][T29014] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10959'. [ 710.253263][T29026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10962'. [ 710.264947][T29028] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10963'. [ 710.264995][T29028] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10963'. [ 710.618728][T18874] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 711.081254][T29045] macvlan0: entered promiscuous mode [ 711.383540][T29059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10974'. [ 711.417783][T29059] netlink: 'syz.0.10974': attribute type 9 has an invalid length. [ 711.417810][T29059] netlink: 23 bytes leftover after parsing attributes in process `syz.0.10974'. [ 711.518826][T29064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.550660][T29064] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.860343][T29064] gretap0: entered promiscuous mode [ 711.939955][T29064] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 711.940488][T29063] syzkaller1: entered promiscuous mode [ 711.940513][T29063] syzkaller1: entered allmulticast mode [ 712.204236][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.204502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.247943][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.248079][ T43] bridge0: port 2(bridge_slave_1) entered listening state [ 713.496725][T29118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10996'. [ 714.670963][T29147] xt_hashlimit: size too large, truncated to 1048576 [ 715.607799][T29173] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11012'. [ 716.110803][T29189] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11020'. [ 716.763958][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.853967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.854257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.854650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.854990][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.330545][T29218] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 717.395365][T29217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11029'. [ 717.402476][T29217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11029'. [ 717.404095][T29217] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11029'. [ 717.468445][T29222] netlink: 'syz.3.11031': attribute type 17 has an invalid length. [ 717.468471][T29222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11031'. [ 717.468502][T29222] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11031'. [ 717.868315][T29232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11036'. [ 717.907724][T29232] macvlan0: left promiscuous mode [ 718.015917][T29232] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11036'. [ 719.008783][T29277] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11053'. [ 719.131986][T29283] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11056'. [ 719.393455][T29292] netlink: 'syz.2.11061': attribute type 4 has an invalid length. [ 719.454352][T29299] netlink: 4384 bytes leftover after parsing attributes in process `syz.0.11062'. [ 719.903573][T29308] ip6erspan0: entered allmulticast mode [ 720.281255][T29326] bond0: Caught tx_queue_len zero misconfig [ 720.523924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.859213][T29347] netlink: 'syz.0.11086': attribute type 39 has an invalid length. [ 720.948793][T29353] netlink: 'syz.1.11087': attribute type 7 has an invalid length. [ 720.948821][T29353] netlink: 'syz.1.11087': attribute type 8 has an invalid length. [ 721.641373][T29373] vcan0: tx address claim with broadcast sa [ 722.361802][T29383] ip_tables: iptables: counters copy to user failed while replacing table [ 722.888196][T29387] __nla_validate_parse: 5 callbacks suppressed [ 722.888221][T29387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11103'. [ 722.892467][ T52] block nbd3: Receive control failed (result -107) [ 723.690643][T29401] netlink: 'syz.4.11109': attribute type 2 has an invalid length. [ 723.708734][T29401] netlink: 'syz.4.11109': attribute type 2 has an invalid length. [ 723.708801][T29401] netlink: 67 bytes leftover after parsing attributes in process `syz.4.11109'. [ 724.314283][T29418] netlink: 'syz.1.11117': attribute type 64 has an invalid length. [ 724.337163][T29418] netlink: 'syz.1.11117': attribute type 64 has an invalid length. [ 725.084000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.084244][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.332508][T29420] IPVS: Scheduler module ip_vs_sip not found [ 725.795106][T29437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11123'. [ 727.163929][T29461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11136'. [ 727.163995][T29461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11136'. [ 727.165018][T29461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11136'. [ 727.165078][T29461] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11136'. [ 727.507986][T29463] netlink: 'syz.3.11138': attribute type 3 has an invalid length. [ 727.508015][T29463] netlink: 'syz.3.11138': attribute type 2 has an invalid length. [ 729.334349][T29497] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 729.551477][ T52] Bluetooth: hci3: connection err: -111 [ 730.774249][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 730.774875][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.066187][T29519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11162'. [ 731.155048][T29519] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11162'. [ 735.896315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 735.896932][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.027642][T29597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11193'. [ 739.769563][T29660] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 741.165259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.166244][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.166730][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.039819][T29690] sctp: [Deprecated]: syz.1.11233 (pid 29690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 742.039819][T29690] Use struct sctp_sack_info instead [ 742.371322][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 745.927723][T29753] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11262'. [ 747.404418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.405007][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.499998][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.856429][T29830] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11295'. [ 750.856495][T29830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11295'. [ 751.313441][T29838] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 752.099621][T29849] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11304'. [ 752.099751][T29849] netlink: 'syz.2.11304': attribute type 7 has an invalid length. [ 752.099815][T29849] netlink: 'syz.2.11304': attribute type 8 has an invalid length. [ 752.099878][T29849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11304'. [ 752.501668][T29842] tipc: Resetting bearer [ 752.519077][T29842] tipc: Resetting bearer [ 752.572583][T29842] tipc: Resetting bearer [ 752.620787][T29842] tipc: Resetting bearer [ 753.165917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.166614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.005651][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.006344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.175768][T29947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11344'. [ 761.414811][T29966] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11349'. [ 761.573003][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 762.363981][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.364291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.364514][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.364762][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.436144][T29998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11365'. [ 763.686244][T30001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11366'. [ 763.728998][T30001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11366'. [ 764.777606][T30014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11371'. [ 765.254502][T30018] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11372'. [ 766.203896][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.204155][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.504612][T30051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11384'. [ 767.754639][T30055] netlink: 'syz.4.11387': attribute type 4 has an invalid length. [ 767.811829][T30058] netlink: 'syz.4.11387': attribute type 4 has an invalid length. [ 768.048421][T30051] hsr_slave_1 (unregistering): left promiscuous mode [ 768.358933][T30062] bond0: entered promiscuous mode [ 768.359003][T30062] bond_slave_0: entered promiscuous mode [ 768.359717][T30062] bond_slave_1: entered promiscuous mode [ 768.368142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 768.409993][ T1564] lo speed is unknown, defaulting to 1000 [ 768.410157][ T1564] syz0: Port: 1 Link ACTIVE [ 768.410380][ T1564] lo speed is unknown, defaulting to 1000 [ 768.434897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.403969][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.517441][T30079] netlink: 'syz.1.11395': attribute type 13 has an invalid length. [ 769.517468][T30079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11395'. [ 769.688573][T30079] netlink: 'syz.1.11395': attribute type 13 has an invalid length. [ 769.688639][T30079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11395'. [ 769.905308][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.909982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.444259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.464488][T30096] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 770.553314][T30096] bond3: (slave lo): Enslaving as an active interface with an up link [ 770.640539][T30096] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 771.181293][T18874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.442407][ T1564] net_ratelimit: 2 callbacks suppressed [ 771.442433][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.482633][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.497218][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.868983][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.443982][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.444050][ C1] bridge0: topology change detected, propagating [ 772.526233][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.702346][T30109] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11405'. [ 772.760503][T30116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11406'. [ 773.096985][T18874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.097882][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 773.166467][T30115] netlink: 'syz.1.11408': attribute type 1 has an invalid length. [ 773.551096][T30129] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11413'. [ 773.567639][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.370900][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 774.605980][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.062188][T30151] netlink: 'syz.0.11422': attribute type 1 has an invalid length. [ 775.062256][T30151] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11422'. [ 775.420521][T30155] netlink: 'syz.4.11423': attribute type 1 has an invalid length. [ 776.320684][T30155] 8021q: adding VLAN 0 to HW filter on device bond5 [ 776.683524][T30170] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11427'. [ 776.697065][ T1564] net_ratelimit: 5 callbacks suppressed [ 776.697106][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.928951][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.942609][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.240802][T30179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11431'. [ 777.240903][T30179] netlink: 'syz.0.11431': attribute type 7 has an invalid length. [ 777.240940][T30179] netlink: 'syz.0.11431': attribute type 8 has an invalid length. [ 777.240997][T30179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11431'. [ 777.574878][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 777.728832][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.769704][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.887270][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.888180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.379121][T30209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 779.446937][T30209] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 780.365729][T30217] bridge0: entered promiscuous mode [ 780.366116][T30217] bridge0: entered allmulticast mode [ 780.462782][T30228] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11449'. [ 780.948783][T30233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11452'. [ 781.501899][T30246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11453'. [ 782.058340][ T1100] net_ratelimit: 13 callbacks suppressed [ 782.058393][ T1100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.113228][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.131281][ T52] block nbd5: Receive control failed (result -107) [ 782.226178][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 782.696624][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.244436][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.390039][T30264] netlink: 'syz.1.11462': attribute type 11 has an invalid length. [ 783.390098][T30264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11462'. [ 783.390750][T30264] netlink: 'syz.1.11462': attribute type 11 has an invalid length. [ 783.390789][T30264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11462'. [ 783.508997][T30267] netlink: 16215 bytes leftover after parsing attributes in process `syz.3.11461'. [ 783.965094][ T1100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.969779][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.287685][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.309965][T30273] netlink: 'syz.3.11463': attribute type 1 has an invalid length. [ 785.278236][ T1100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.337268][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.514695][T30310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11479'. [ 786.739777][T30310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11479'. [ 787.414768][ T30] net_ratelimit: 10 callbacks suppressed [ 787.414815][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.821381][T18874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.833384][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.151543][T30331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11488'. [ 788.448192][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.449790][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.809848][T30339] netlink: 'syz.4.11492': attribute type 1 has an invalid length. [ 789.484801][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.487350][T30339] 8021q: adding VLAN 0 to HW filter on device bond6 [ 789.728208][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.730247][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.951341][T30343] bond6: (slave gretap1): making interface the new active one [ 790.031028][T30343] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 790.049735][T30344] netlink: 'syz.2.11493': attribute type 14 has an invalid length. [ 790.049804][T30344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11493'. [ 790.252519][T30344] netlink: 'syz.2.11493': attribute type 14 has an invalid length. [ 790.252584][T30344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11493'. [ 790.266572][ T43] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.270283][ T43] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.270468][ T43] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.270573][ T43] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 790.528466][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.689358][T30358] netlink: 'syz.3.11498': attribute type 15 has an invalid length. [ 790.689429][T30358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11498'. [ 790.845629][T30361] ip_tables: iptables: counters copy to user failed while replacing table [ 791.002997][T30358] netlink: 'syz.3.11498': attribute type 15 has an invalid length. [ 791.003024][T30358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11498'. [ 791.224131][ T3397] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 791.230571][ T3397] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 791.232288][ T1100] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 791.897433][T30380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11507'. [ 792.115117][T30381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11506'. [ 792.116452][T30380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11507'. [ 792.146147][ T3397] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.146557][ T3397] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.146601][ T3397] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.146640][ T3397] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 792.606197][ T1564] net_ratelimit: 7 callbacks suppressed [ 792.606242][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.881557][T30393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.894442][T30393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.905381][T30393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.931045][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.932635][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.091552][T30392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.093550][T30392] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.567395][T18874] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 793.704203][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.226126][ T137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.438399][T30412] netlink: 27 bytes leftover after parsing attributes in process `syz.3.11520'. [ 794.649409][T30419] netlink: 'syz.1.11523': attribute type 18 has an invalid length. [ 794.649439][T30419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11523'. [ 794.650429][T30419] netlink: 'syz.1.11523': attribute type 18 has an invalid length. [ 794.650447][T30419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11523'. [ 795.865428][T30433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11532'. [ 796.266116][T30443] netlink: 'syz.0.11535': attribute type 1 has an invalid length. [ 796.645991][T30443] 8021q: adding VLAN 0 to HW filter on device bond1 [ 796.653574][T30446] only policy match revision 0 supported [ 796.677077][T30446] unable to load match [ 797.041795][T30447] team0: left allmulticast mode [ 797.041858][T30447] team_slave_0: left allmulticast mode [ 797.041919][T30447] team_slave_1: left allmulticast mode [ 797.042063][T30447] team0: left promiscuous mode [ 797.042116][T30447] team_slave_0: left promiscuous mode [ 797.042709][T30447] team_slave_1: left promiscuous mode [ 797.068997][T30447] bridge0: port 4(team0) entered disabled state [ 797.261181][T30447] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.305414][T30447] bond1: (slave team0): Enslaving as a backup interface with an up link [ 797.490278][ T43] bond1: (slave team0): link status definitely down, disabling slave [ 797.885923][T22433] net_ratelimit: 8 callbacks suppressed [ 797.885980][T22433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.047170][ T1100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.047764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.742998][T18874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.752240][T18874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.765847][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.979590][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 799.084993][T30481] netlink: 'syz.1.11548': attribute type 1 has an invalid length. [ 799.085019][T30481] netlink: 'syz.1.11548': attribute type 4 has an invalid length. [ 799.085034][T30481] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.11548'. [ 799.092391][T30481] netlink: 'syz.1.11548': attribute type 1 has an invalid length. [ 799.092417][T30481] netlink: 'syz.1.11548': attribute type 4 has an invalid length. [ 799.092432][T30481] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.11548'. [ 799.481135][T30488] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11549'. [ 799.690455][T30490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11552'. [ 799.989502][T18874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.042573][T30490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11552'. [ 801.088567][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 802.125511][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.084984][ C1] net_ratelimit: 1 callbacks suppressed [ 803.085041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.085601][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.314034][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.826644][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 803.827275][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.364839][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.448789][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 804.450201][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.086925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 805.408010][T22433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.707587][T30604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11583'. [ 808.289226][ T1020] net_ratelimit: 5 callbacks suppressed [ 808.289276][ T1020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.598394][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.844620][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.845111][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.940800][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.020585][T30600] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 809.434651][T30621] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11587'. [ 809.628640][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.628964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 809.661613][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.216798][ T3348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.219756][ T1020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 810.235415][T30633] sctp: [Deprecated]: syz.2.11592 (pid 30633) Use of int in maxseg socket option. [ 810.235415][T30633] Use struct sctp_assoc_value instead [ 812.370593][T30663] netlink: 'syz.4.11602': attribute type 1 has an invalid length. [ 812.862137][T30666] bond7: (slave bridge1): making interface the new active one [ 812.881727][T30666] bond7: (slave bridge1): Enslaving as an active interface with an up link [ 813.291467][T30674] bridge_slave_0: invalid flags given to default FDB implementation [ 813.817359][T22433] net_ratelimit: 8 callbacks suppressed [ 813.817406][T22433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.904700][T30680] veth1_to_bond: entered allmulticast mode [ 814.045890][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 814.059905][ T1020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.135956][T30680] veth1_to_bond: left allmulticast mode [ 814.603902][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.604132][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.727506][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.728090][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 814.846393][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.336545][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.887599][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.964669][T18873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.180874][T30704] mac80211_hwsim hwsim24 syzkaller1: entered promiscuous mode [ 816.180949][T30704] mac80211_hwsim hwsim24 syzkaller1: entered allmulticast mode [ 819.139176][ T30] net_ratelimit: 9 callbacks suppressed [ 819.139223][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 819.811154][ T1020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.364136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.364650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.388377][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.448125][ T3348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.468178][ T3348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.468444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.793739][T30770] ip_tables: iptables: counters copy to user failed while replacing table [ 821.405009][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 821.661164][T30773] syzkaller1: entered promiscuous mode [ 821.661612][T30773] syzkaller1: entered allmulticast mode [ 822.917202][T30802] netlink: 'syz.2.11649': attribute type 2 has an invalid length. [ 823.042819][T30801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11650'. [ 823.108091][T30804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11650'. [ 824.495506][T30823] syzkaller1: entered promiscuous mode [ 824.495750][T30823] syzkaller1: entered allmulticast mode [ 824.540947][T22433] net_ratelimit: 6 callbacks suppressed [ 824.540988][T22433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.019719][T30830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.054818][T30830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.081977][T30830] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.568731][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.597398][ T969] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 825.623521][ T1020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.624121][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 825.655149][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.134221][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 826.134849][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.186701][T30857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11667'. [ 829.726329][T22433] net_ratelimit: 10 callbacks suppressed [ 829.726389][T22433] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.379808][ T1020] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 830.765998][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.091501][T30913] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11681'. [ 831.329558][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.330792][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.331418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.812801][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.935467][T30925] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11683'. [ 831.974284][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.974940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.979317][ T3348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.035134][ T3348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 832.151935][T30930] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11683'. [ 832.756878][T30889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 833.823113][T30946] [ 833.825622][T30946] ====================================================== [ 833.832714][T30946] WARNING: possible circular locking dependency detected [ 833.839956][T30946] syzkaller #0 Not tainted [ 833.844425][T30946] ------------------------------------------------------ [ 833.851546][T30946] syz.2.11686/30946 is trying to acquire lock: [ 833.857811][T30946] ffff88801d2f7a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_permission+0x7f/0x430 [ 833.869091][T30946] [ 833.869091][T30946] but task is already holding lock: [ 833.878077][T30946] ffffffff8fbe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 833.888751][T30946] [ 833.888751][T30946] which lock already depends on the new lock. [ 833.888751][T30946] [ 833.899334][T30946] [ 833.899334][T30946] the existing dependency chain (in reverse order) is: [ 833.908743][T30946] [ 833.908743][T30946] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 833.916762][T30946] cpus_read_lock+0x42/0x160 [ 833.922003][T30946] static_key_enable+0x12/0x20 [ 833.927557][T30946] tcp_enable_tx_delay+0x253/0x330 [ 833.933409][T30946] do_tcp_setsockopt+0x136b/0x1f80 [ 833.939188][T30946] do_sock_setsockopt+0x17c/0x1b0 [ 833.944880][T30946] __x64_sys_setsockopt+0x13d/0x1b0 [ 833.950754][T30946] do_syscall_64+0x166/0x520 [ 833.956080][T30946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.962701][T30946] [ 833.962701][T30946] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 833.970415][T30946] lock_sock_nested+0x41/0x100 [ 833.975833][T30946] inet_shutdown+0x6a/0x390 [ 833.981086][T30946] nbd_mark_nsock_dead+0x2cb/0x550 [ 833.986887][T30946] recv_work+0x1cee/0x1e10 [ 833.991872][T30946] process_scheduled_works+0xc3d/0x1630 [ 833.997998][T30946] worker_thread+0xa47/0xfb0 [ 834.003169][T30946] kthread+0x38b/0x480 [ 834.007800][T30946] ret_from_fork+0x514/0xb70 [ 834.013008][T30946] ret_from_fork_asm+0x1a/0x30 [ 834.018553][T30946] [ 834.018553][T30946] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 834.026245][T30946] __mutex_lock+0x19d/0x1550 [ 834.031566][T30946] nbd_queue_rq+0x373/0xff0 [ 834.036630][T30946] blk_mq_dispatch_rq_list+0x499/0x1990 [ 834.042945][T30946] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 834.050204][T30946] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 834.056872][T30946] blk_mq_run_work_fn+0x16c/0x300 [ 834.062550][T30946] process_scheduled_works+0xc3d/0x1630 [ 834.068754][T30946] worker_thread+0xa47/0xfb0 [ 834.073943][T30946] kthread+0x38b/0x480 [ 834.078768][T30946] ret_from_fork+0x514/0xb70 [ 834.084211][T30946] ret_from_fork_asm+0x1a/0x30 [ 834.089557][T30946] [ 834.089557][T30946] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 834.096813][T30946] __mutex_lock+0x19d/0x1550 [ 834.101990][T30946] nbd_queue_rq+0xc1/0xff0 [ 834.106978][T30946] blk_mq_dispatch_rq_list+0x499/0x1990 [ 834.113098][T30946] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 834.119997][T30946] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 834.126560][T30946] blk_mq_run_work_fn+0x16c/0x300 [ 834.132163][T30946] process_scheduled_works+0xc3d/0x1630 [ 834.138389][T30946] worker_thread+0xa47/0xfb0 [ 834.143547][T30946] kthread+0x38b/0x480 [ 834.148174][T30946] ret_from_fork+0x514/0xb70 [ 834.153765][T30946] ret_from_fork_asm+0x1a/0x30 [ 834.159176][T30946] [ 834.159176][T30946] -> #4 (set->srcu){.+.+}-{0:0}: [ 834.166441][T30946] __synchronize_srcu+0xc9/0x2f0 [ 834.172072][T30946] elevator_switch+0x1e8/0x7b0 [ 834.177453][T30946] elevator_change+0x2fa/0x480 [ 834.183064][T30946] elevator_set_default+0x375/0x440 [ 834.188915][T30946] blk_register_queue+0x3f3/0x4e0 [ 834.194655][T30946] __add_disk+0x6b8/0xdb0 [ 834.199869][T30946] add_disk_fwnode+0x100/0x3a0 [ 834.205223][T30946] nbd_dev_add+0x733/0xb60 [ 834.210199][T30946] nbd_init+0x168/0x1f0 [ 834.215023][T30946] do_one_initcall+0x250/0x870 [ 834.220362][T30946] do_initcall_level+0x10a/0x1a0 [ 834.225968][T30946] do_initcalls+0x59/0xa0 [ 834.230876][T30946] kernel_init_freeable+0x29d/0x3e0 [ 834.236655][T30946] kernel_init+0x22/0x1d0 [ 834.241563][T30946] ret_from_fork+0x514/0xb70 [ 834.246850][T30946] ret_from_fork_asm+0x1a/0x30 [ 834.252272][T30946] [ 834.252272][T30946] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 834.260145][T30946] __mutex_lock+0x19d/0x1550 [ 834.265348][T30946] elevator_change+0x1af/0x480 [ 834.270713][T30946] elevator_set_none+0xb5/0x140 [ 834.276125][T30946] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 834.282601][T30946] nbd_start_device+0x189/0xb30 [ 834.288060][T30946] nbd_genl_connect+0x167d/0x1cd0 [ 834.293649][T30946] genl_family_rcv_msg_doit+0x233/0x340 [ 834.299879][T30946] genl_rcv_msg+0x614/0x7a0 [ 834.304952][T30946] netlink_rcv_skb+0x226/0x4a0 [ 834.310279][T30946] genl_rcv+0x28/0x40 [ 834.314909][T30946] netlink_unicast+0x8ef/0xa80 [ 834.320264][T30946] netlink_sendmsg+0x813/0xb40 [ 834.325595][T30946] sock_sendmsg_nosec+0x13a/0x180 [ 834.331376][T30946] ____sys_sendmsg+0x54e/0x850 [ 834.336843][T30946] ___sys_sendmsg+0x2a5/0x360 [ 834.342082][T30946] __x64_sys_sendmsg+0x1b1/0x290 [ 834.347578][T30946] do_syscall_64+0x166/0x520 [ 834.352746][T30946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.359389][T30946] [ 834.359389][T30946] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 834.368110][T30946] blk_alloc_queue+0x544/0x690 [ 834.373629][T30946] __blk_mq_alloc_disk+0x194/0x390 [ 834.379569][T30946] nbd_dev_add+0x494/0xb60 [ 834.384547][T30946] nbd_init+0x168/0x1f0 [ 834.389263][T30946] do_one_initcall+0x250/0x870 [ 834.394858][T30946] do_initcall_level+0x10a/0x1a0 [ 834.400384][T30946] do_initcalls+0x59/0xa0 [ 834.405366][T30946] kernel_init_freeable+0x29d/0x3e0 [ 834.411217][T30946] kernel_init+0x22/0x1d0 [ 834.416121][T30946] ret_from_fork+0x514/0xb70 [ 834.421288][T30946] ret_from_fork_asm+0x1a/0x30 [ 834.426733][T30946] [ 834.426733][T30946] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 834.434084][T30946] fs_reclaim_acquire+0x71/0x100 [ 834.439716][T30946] kmem_cache_alloc_noprof+0x5f/0x600 [ 834.445749][T30946] __kernfs_iattrs+0xdd/0x380 [ 834.451078][T30946] kernfs_iop_setattr+0xe6/0x3f0 [ 834.456573][T30946] notify_change+0xbba/0xea0 [ 834.462025][T30946] do_truncate+0x1c2/0x250 [ 834.467036][T30946] path_openat+0x15b5/0x1d60 [ 834.472185][T30946] do_file_open+0x23e/0x4a0 [ 834.477246][T30946] do_sys_openat2+0x115/0x200 [ 834.482513][T30946] __x64_sys_openat+0x138/0x170 [ 834.487932][T30946] do_syscall_64+0x166/0x520 [ 834.493108][T30946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.499746][T30946] [ 834.499746][T30946] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 834.508499][T30946] __lock_acquire+0x164c/0x2de0 [ 834.514032][T30946] lock_acquire+0x115/0x350 [ 834.519093][T30946] down_read+0x4a/0x330 [ 834.523811][T30946] kernfs_iop_permission+0x7f/0x430 [ 834.529663][T30946] inode_permission+0x3de/0x5f0 [ 834.535088][T30946] cgroup_attach_permissions+0x28e/0x9f0 [ 834.541282][T30946] __cgroup_procs_write+0x24b/0x320 [ 834.547098][T30946] cgroup_threads_write+0x24/0x50 [ 834.552800][T30946] cgroup_file_write+0x331/0x8f0 [ 834.558395][T30946] kernfs_fop_write_iter+0x3a4/0x540 [ 834.564515][T30946] vfs_write+0x612/0xba0 [ 834.569351][T30946] ksys_write+0x150/0x270 [ 834.574257][T30946] do_syscall_64+0x166/0x520 [ 834.579433][T30946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.585904][T30946] [ 834.585904][T30946] other info that might help us debug this: [ 834.585904][T30946] [ 834.596162][T30946] Chain exists of: [ 834.596162][T30946] &root->kernfs_iattr_rwsem --> sk_lock-AF_INET --> cpu_hotplug_lock [ 834.596162][T30946] [ 834.610476][T30946] Possible unsafe locking scenario: [ 834.610476][T30946] [ 834.618109][T30946] CPU0 CPU1 [ 834.623523][T30946] ---- ---- [ 834.629047][T30946] rlock(cpu_hotplug_lock); [ 834.633680][T30946] lock(sk_lock-AF_INET); [ 834.640657][T30946] lock(cpu_hotplug_lock); [ 834.647721][T30946] rlock(&root->kernfs_iattr_rwsem); [ 834.653143][T30946] [ 834.653143][T30946] *** DEADLOCK *** [ 834.653143][T30946] [ 834.661364][T30946] locks held by syz.2.11686/30946: 5, last CPU#1: [ 834.667929][T30946] #0: ffff88802cc38ef0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 834.677092][T30946] #1: ffff88807f916460 (sb_writers#9){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 834.686235][T30946] #2: ffff88807a5c4080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 834.696156][T30946] #3: ffffffff8fd9c7a0 (cgroup_mutex){+.+.}-{4:4}, at: cgroup_kn_lock_live+0x13c/0x230 [ 834.706290][T30946] #4: ffffffff8fbe9970 (cpu_hotplug_lock){++++}-{0:0}, at: cgroup_procs_write_start+0x539/0x900 [ 834.716972][T30946] [ 834.716972][T30946] stack backtrace: [ 834.722913][T30946] CPU: 1 UID: 0 PID: 30946 Comm: syz.2.11686 Not tainted syzkaller #0 PREEMPT(full) [ 834.732509][T30946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 834.742622][T30946] Call Trace: [ 834.746005][T30946] [ 834.749225][T30946] dump_stack_lvl+0xe8/0x150 [ 834.753991][T30946] print_circular_bug+0x2e2/0x300 [ 834.759112][T30946] check_noncircular+0x12f/0x150 [ 834.764139][T30946] __lock_acquire+0x164c/0x2de0 [ 834.769060][T30946] ? __lock_acquire+0x747/0x2de0 [ 834.774195][T30946] lock_acquire+0x115/0x350 [ 834.778914][T30946] ? kernfs_iop_permission+0x7f/0x430 [ 834.784324][T30946] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 834.790208][T30946] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 834.796324][T30946] down_read+0x4a/0x330 [ 834.800644][T30946] ? kernfs_iop_permission+0x7f/0x430 [ 834.806070][T30946] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 834.811928][T30946] kernfs_iop_permission+0x7f/0x430 [ 834.817176][T30946] ? __pfx_kernfs_iop_permission+0x10/0x10 [ 834.823208][T30946] inode_permission+0x3de/0x5f0 [ 834.828113][T30946] cgroup_attach_permissions+0x28e/0x9f0 [ 834.833809][T30946] __cgroup_procs_write+0x24b/0x320 [ 834.839179][T30946] cgroup_threads_write+0x24/0x50 [ 834.844335][T30946] ? __pfx_cgroup_threads_write+0x10/0x10 [ 834.850102][T30946] cgroup_file_write+0x331/0x8f0 [ 834.855098][T30946] ? trace_irq_disable+0x3b/0x140 [ 834.860202][T30946] ? __pfx_cgroup_file_write+0x10/0x10 [ 834.865717][T30946] ? __pfx_cgroup_file_write+0x10/0x10 [ 834.871344][T30946] ? __pfx_cgroup_file_write+0x10/0x10 [ 834.876989][T30946] ? __pfx_cgroup_file_write+0x10/0x10 [ 834.882653][T30946] kernfs_fop_write_iter+0x3a4/0x540 [ 834.888037][T30946] vfs_write+0x612/0xba0 [ 834.892359][T30946] ? __pfx_vfs_write+0x10/0x10 [ 834.897170][T30946] ? __fget_files+0x2a/0x420 [ 834.901809][T30946] ksys_write+0x150/0x270 [ 834.906190][T30946] ? __pfx_ksys_write+0x10/0x10 [ 834.911289][T30946] do_syscall_64+0x166/0x520 [ 834.915932][T30946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.922048][T30946] ? clear_bhb_loop+0x70/0xc0 [ 834.926865][T30946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.932812][T30946] RIP: 0033:0x7f8a4359e559 [ 834.937275][T30946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.957125][T30946] RSP: 002b:00007f8a444da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 834.965653][T30946] RAX: ffffffffffffffda RBX: 00007f8a43825fa0 RCX: 00007f8a4359e559 [ 834.973670][T30946] RDX: 0000000000000012 RSI: 00002000000001c0 RDI: 0000000000000004 [ 834.981777][T30946] RBP: 00007f8a436358b0 R08: 0000000000000000 R09: 0000000000000000 [ 834.989816][T30946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 834.998108][T30946] R13: 00007f8a43826038 R14: 00007f8a43825fa0 R15: 00007ffcb6faad58 [ 835.006320][T30946] [ 835.091543][ T25] net_ratelimit: 2 callbacks suppressed [ 835.091567][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.181671][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 835.182714][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 836.126799][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.085684][ T3348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.089958][ T3397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.090397][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.176089][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.724516][ T3348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 837.729855][ T3348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.291044][ T1564] net_ratelimit: 5 callbacks suppressed [ 840.291084][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.292204][ T1122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 840.293793][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.326807][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.563815][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.124637][ T969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.124973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.204863][ T3348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.366204][ T1564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.764844][ T3348] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog