last executing test programs: 4.485110222s ago: executing program 4 (id=13994): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r2, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000003c0)=""/170, 0xaa}], 0x2}, 0x2}], 0x1, 0x40000142, 0x0) 4.069786s ago: executing program 3 (id=14003): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000540)=0x14) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x1ff, 0x4, 0xffffffff, 0x0, 0xfffffffa, 0x8}}}}]}, 0x4c}}, 0x0) sendto$packet(r0, &(0x7f0000000740)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000a80)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 3.764715006s ago: executing program 3 (id=14007): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x1001}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ifreq(r1, 0x8943, &(0x7f0000000100)={'syzkaller1\x00', @ifru_ivalue}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) read(r0, &(0x7f0000000400), 0x1000) 3.576995667s ago: executing program 4 (id=14011): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000019c0)=0x2, 0x4) connect$inet(r0, &(0x7f0000001a00)={0x2, 0x4e23, @remote}, 0x10) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)={0xff}, 0x4) r1 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)="55000000200009afb72d13b2a4a2719302000000030b43026c26236925000400fe7f00000000000000003942cfd8880f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509a9a1f8baeb1898000000000100005a", 0x55}], 0x1}, 0x4000) write(r1, &(0x7f0000000040)="1c00000021002551071c0165ff00fc0202000000fd100f000ee1000c", 0x1c) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f00000000c0)='*(]$!\x00', 0x40, &(0x7f0000000580)={@_ha_fsid={[0x1, 0x2]}, {0x9, 0x3, 0x82, 0x2}}, 0x4, &(0x7f00000005c0)={@_ha_fsid}, &(0x7f0000000600)=0xcf}) 2.792961451s ago: executing program 3 (id=14018): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) r0 = socket(0x8, 0x3, 0x3) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 2.689738725s ago: executing program 1 (id=14019): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r3, r2, 0x25, 0x4, @void}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0xfffffffc, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.536529491s ago: executing program 4 (id=14020): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080)=0x1, 0x4) 2.170603804s ago: executing program 1 (id=14021): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) socket$inet6(0xa, 0x2, 0x0) 2.151857314s ago: executing program 0 (id=14022): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xd}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30d33, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1.80574448s ago: executing program 1 (id=14024): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x0, 0x80000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0x2, 0xc1, 0x8, 0x1, 0x3, 0x0, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x1, 0x6, 0x9, 0x4, 0x5, 0x5, 0x100000, 0x762, 0xa, 0x10, 0xe, 0x2b12, 0x100, 0x6, 0x0, 0xb, 0xfda, 0xbed4, 0x7, 0x3, 0x3, 0x0, 0xffffff29, 0x8, 0x5, 0x479b, 0x2, 0x7, 0x7f, 0x4, 0xa, 0x7, 0x12, 0x4000101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2ac, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x5, 0x4, 0x100003, 0x8, 0x752, 0x0, 0x3, 0xc, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xb, 0x84, 0x100, 0x5, 0x252, 0x7f, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0x1000d, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x3, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x400008, 0x6, 0x1, 0xfffffffc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.765101043s ago: executing program 3 (id=14025): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=r2, @ANYBLOB="830405000000000020001280080001006774700014000280080004000100000008000200db4c34ce"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) sendto$packet(r0, &(0x7f0000000300)="fd", 0x1, 0x40008c4, &(0x7f0000000200)={0x11, 0xf8, r3, 0x1, 0x8, 0x6, @random="156f5faf7478"}, 0x14) 1.760552209s ago: executing program 0 (id=14026): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.712856598s ago: executing program 2 (id=14027): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f00000001c0)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x4}], 0x2f, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000240)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'geneve0\x00', 0x0}) sendmsg(r1, &(0x7f0000000300)={&(0x7f0000000340)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000400)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f0000000440)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 1.616733366s ago: executing program 1 (id=14028): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newtfilter={0x40, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff4, 0x3d}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x3}}]}}]}, 0x40}}, 0x0) 1.586457572s ago: executing program 3 (id=14029): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=@newlink={0x28, 0x10, 0x801, 0x100000, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.509132121s ago: executing program 4 (id=14030): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x2400c890}, 0x40000) 1.497566638s ago: executing program 1 (id=14031): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000000210"], 0x18}, 0x1, 0x0, 0x0, 0x4048004}, 0x40) 1.489996074s ago: executing program 0 (id=14032): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r3, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0xfffffffc, 0x0, 0xd4}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e23, 0x5, @empty, 0x2800}}, 0x3, 0x0, 0x20000, 0x81, 0xe, 0x0, 0x4}, 0x9c) 1.259984034s ago: executing program 0 (id=14033): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000880)=@generic={0x0, r3}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000008c0)={r2, 0x0, 0x0}, 0x10) 1.071219018s ago: executing program 0 (id=14034): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 752.494401ms ago: executing program 2 (id=14035): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, 0x0, 0x2005, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x428, 0x358, 0x168, 0x10, 0x290, 0xb, 0x358, 0x250, 0x250, 0x358, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0xff6a], [0xff], 'ip6gretap0\x00', 'veth1_to_hsr\x00', {}, {0xff}, 0x1, 0xb6, 0x0, 0x22}, 0x6000000, 0x228, 0x290, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x1}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff], @ipv4=@multicast1, [0xffffffff, 0xffff00, 0xffffff00], 0x4d2, 0x0, 0x1, 0x1, 0x0, 0x5}, {@ipv4=@empty, [0xff000000, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@local, [0xffffffff, 0xffffff00, 0xffffff00, 0xff000000], 0x4d6, 0x3507, 0x3c, 0x1, 0x4, 0x16}, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0xffffff00, 0xff], @ipv6=@dev={0xfe, 0x80, '\x00', 0x1}, [0xff000000, 0x0, 0xffffffff, 0xffffff00], 0x4d5, 0x3507, 0x0, 0x0, 0x4, 0x4}, {@ipv4=@multicast1, [0xffffffff, 0x0, 0xff, 0xff], @ipv6=@loopback, [0xff000000, 0x0, 0xff000000, 0xffffffff], 0x4d9, 0x3502, 0x21, 0x1, 0x11, 0x14}], 0x1, 0x3}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x10000, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x488) 637.353983ms ago: executing program 1 (id=14036): socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) shutdown(0xffffffffffffffff, 0x1) r0 = socket(0x8, 0x3, 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 476.59775ms ago: executing program 2 (id=14037): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x1000) 303.89119ms ago: executing program 2 (id=14038): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg$alg(r1, &(0x7f0000004ec0)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000500)='\b', 0x1}], 0x1, 0x0, 0x0, 0x4000004}], 0x1, 0x20) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000140)=""/263, 0x107, 0x2, 0x0, 0x0) 300.566353ms ago: executing program 3 (id=14039): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r1 = socket(0x2a, 0x2, 0x0) unshare(0x28000600) connect$bt_sco(r1, 0x0, 0x0) 246.666035ms ago: executing program 4 (id=14040): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r0, 0x7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) listen(r1, 0x2) 215.822272ms ago: executing program 2 (id=14041): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvfrom$inet6(r0, &(0x7f0000000640)=""/248, 0xffffff1f, 0x40010002, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)='X', 0x1}], 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 82.492851ms ago: executing program 4 (id=14042): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000340), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000085c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000008600)={0x0, 0x0, &(0x7f0000008640)={&(0x7f0000008680)={0x38, r3, 0x1, 0xfffffffd, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x38}}, 0x20000000) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000086c0)={0x0, 0x0, &(0x7f0000008700)={&(0x7f0000008740)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x51}, 0x4000810) recvmmsg(r0, 0x0, 0x0, 0x40022000, &(0x7f0000008580)) 28.147594ms ago: executing program 0 (id=14043): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) 0s ago: executing program 2 (id=14044): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x20, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x4000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x6, r2, 0x0, r0}, 0x10) kernel console output (not intermixed with test programs): 0 bytes leftover after parsing attributes in process `syz.0.7103'. [ 359.670874][T20627] ip_tables: iptables: counters copy to user failed while replacing table [ 359.992763][T20644] tipc: Started in network mode [ 359.992784][T20644] tipc: Node identity , cluster identity 4711 [ 359.992801][T20644] tipc: Failed to set node id, please configure manually [ 359.992849][T20644] tipc: Enabling of bearer rejected, failed to enable media [ 360.246995][T20655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7118'. [ 360.353865][T20662] xt_cgroup: path and classid specified [ 360.557824][T20668] netlink: 'syz.2.7124': attribute type 1 has an invalid length. [ 361.549028][T20721] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 361.876680][T20741] vlan4: entered allmulticast mode [ 361.880350][T20741] bond0: entered allmulticast mode [ 361.880403][T20741] bond_slave_0: entered allmulticast mode [ 361.880443][T20741] bond_slave_1: entered allmulticast mode [ 362.551700][T20779] Bluetooth: hci0: unsupported parameter 5135 [ 362.551725][T20779] Bluetooth: hci0: unsupported parameter 8192 [ 362.551785][T20779] Bluetooth: hci0: unsupported parameter 5135 [ 362.551799][T20779] Bluetooth: hci0: unsupported parameter 8192 [ 363.642542][ T169] IPVS: starting estimator thread 0... [ 363.702920][T20816] IPVS: Scheduler module ip_vs_mh not found [ 363.730737][T20819] IPVS: using max 25 ests per chain, 60000 per kthread [ 364.306997][T20857] __nla_validate_parse: 3 callbacks suppressed [ 364.307019][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7216'. [ 364.932307][T20898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7234'. [ 365.847803][T20947] netlink: set zone limit has 4 unknown bytes [ 366.526757][T20980] netlink: 'syz.2.7268': attribute type 25 has an invalid length. [ 366.544595][T20979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7267'. [ 366.676081][T20986] sctp: [Deprecated]: syz.4.7273 (pid 20986) Use of int in maxseg socket option. [ 366.676081][T20986] Use struct sctp_assoc_value instead [ 366.956201][T21004] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7280'. [ 366.957858][T21001] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 367.046334][T21008] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 367.094742][T21010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7282'. [ 367.373021][T21027] team0: Device gtp0 is up. Set it down before adding it as a team port [ 367.425053][T21031] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.7293'. [ 367.426068][T21031] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.7293'. [ 367.669058][T21042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7298'. [ 367.913007][T21058] smc: net device lo erased user defined pnetid SYZ0 [ 367.913641][T21058] smc: smcd device lo erased user defined pnetid SYZ0 [ 368.066361][T21068] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7313'. [ 368.066391][T21068] netlink: 35 bytes leftover after parsing attributes in process `syz.2.7313'. [ 368.066408][T21068] netlink: 'syz.2.7313': attribute type 5 has an invalid length. [ 368.066422][T21068] netlink: 'syz.2.7313': attribute type 6 has an invalid length. [ 370.205752][T21193] netlink: 'syz.2.7373': attribute type 18 has an invalid length. [ 371.027329][T21248] Bluetooth: hci0: unsupported parameter 5135 [ 371.027354][T21248] Bluetooth: hci0: unsupported parameter 8192 [ 371.027368][T21248] Bluetooth: hci0: unsupported parameter 5135 [ 371.027382][T21248] Bluetooth: hci0: unsupported parameter 8192 [ 371.284510][T21258] __nla_validate_parse: 1 callbacks suppressed [ 371.284531][T21258] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7404'. [ 371.362830][T21264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7407'. [ 371.922874][T21298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7424'. [ 371.981145][T21303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7427'. [ 371.981173][T21303] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7427'. [ 372.734564][T21350] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.7450'. [ 373.122107][ T3291] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.122146][ T3291] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 373.285133][T21381] xt_nfacct: accounting object `syz0' does not exist [ 374.010355][T21418] veth5: entered allmulticast mode [ 374.115458][T21429] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7483'. [ 374.195795][T21433] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7488'. [ 374.195849][T21433] netlink: 'syz.4.7488': attribute type 5 has an invalid length. [ 374.195866][T21433] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7488'. [ 374.376335][T21445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7492'. [ 375.316854][T21487] netlink: 'syz.0.7512': attribute type 4 has an invalid length. [ 375.599150][T21498] tipc: Started in network mode [ 375.599187][T21498] tipc: Node identity e0000001, cluster identity 4711 [ 375.599242][T21498] tipc: Enabling of bearer rejected, failed to enable media [ 376.872031][T21571] __nla_validate_parse: 3 callbacks suppressed [ 376.872053][T21571] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7551'. [ 376.873966][T21571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7551'. [ 376.970138][T21573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7554'. [ 376.970166][T21573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7554'. [ 376.971036][T21573] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7554'. [ 376.971057][T21573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7554'. [ 377.152103][T21584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7557'. [ 377.550704][T21611] macvlan0: entered promiscuous mode [ 377.961771][T21633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7580'. [ 378.267642][T21653] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7590'. [ 378.367010][T21656] tipc: Started in network mode [ 378.367044][T21656] tipc: Node identity ac14142f, cluster identity 4711 [ 378.367844][T21656] tipc: Enabling of bearer rejected, failed to enable media [ 378.489582][T21661] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7594'. [ 378.745397][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.178157][T21704] netlink: 'syz.0.7616': attribute type 5 has an invalid length. [ 381.319751][T21828] pim6reg: entered allmulticast mode [ 382.345624][T21892] __nla_validate_parse: 10 callbacks suppressed [ 382.345646][T21892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7707'. [ 383.266698][T21952] netlink: get zone limit has 8 unknown bytes [ 383.736044][T21976] Bluetooth: hci0: unsupported parameter 5134 [ 383.736073][T21976] Bluetooth: hci0: unsupported parameter 8192 [ 383.736088][T21976] Bluetooth: hci0: unsupported parameter 5134 [ 383.736103][T21976] Bluetooth: hci0: unsupported parameter 8192 [ 383.835600][T21980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7749'. [ 383.991209][T21990] IPv6: NLM_F_CREATE should be specified when creating new route [ 384.362034][T22011] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 384.362617][T22011] team0: Device ipvlan2 is already an upper device of the team interface [ 384.476466][T22019] raw_sendmsg: syz.3.7769 forgot to set AF_INET. Fix it! [ 384.512794][T22021] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7770'. [ 384.702294][T22031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7773'. [ 384.902310][T22044] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7781'. [ 385.204072][T22061] netlink: 'syz.4.7789': attribute type 1 has an invalid length. [ 385.432939][T22076] netlink: 'syz.2.7796': attribute type 1 has an invalid length. [ 385.655240][T22089] veth0_to_bond: entered allmulticast mode [ 385.913875][T22102] macvlan0: entered promiscuous mode [ 386.198442][T22121] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7816'. [ 386.198470][T22121] bridge_slave_0: default FDB implementation only supports local addresses [ 386.268974][T22124] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7819'. [ 387.058279][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 387.206654][T22184] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7847'. [ 387.491128][T22200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7855'. [ 388.145567][T22243] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7875'. [ 388.161917][T22237] bond4: (slave bond_slave_0): Device is not our slave [ 388.164274][T22237] bond4: option active_slave: invalid value (bond_slave_0) [ 388.186834][T22237] bond4 (unregistering): Released all slaves [ 388.250820][T22247] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7875'. [ 388.661569][T22273] tipc: Enabling of bearer rejected, media not registered [ 388.666989][T22272] Bluetooth: hci0: unsupported parameter 5135 [ 388.667014][T22272] Bluetooth: hci0: unsupported parameter 8192 [ 388.667029][T22272] Bluetooth: hci0: unsupported parameter 5135 [ 388.667042][T22272] Bluetooth: hci0: unsupported parameter 8192 [ 388.886299][T22288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7897'. [ 389.485362][T22315] IPVS: stopping backup sync thread 10239 ... [ 389.657477][T22324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7911'. [ 389.657505][T22324] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7911'. [ 390.132142][T22349] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.7924'. [ 390.314442][T22361] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7930'. [ 390.318681][T22361] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7930'. [ 390.839214][T22389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7945'. [ 392.553556][T22488] netlink: 'syz.4.7992': attribute type 25 has an invalid length. [ 392.941953][T22511] __nla_validate_parse: 1 callbacks suppressed [ 392.941978][T22511] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8002'. [ 393.130609][T22522] ip_tables: iptables: counters copy to user failed while replacing table [ 393.226167][T22525] netlink: 'syz.4.8009': attribute type 46 has an invalid length. [ 393.994431][T22575] ip_tables: iptables: counters copy to user failed while replacing table [ 394.164038][T22582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8040'. [ 394.225244][T22586] netlink: 'syz.1.8041': attribute type 1 has an invalid length. [ 394.225271][T22586] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8041'. [ 394.225314][T22586] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8041'. [ 394.490689][T22599] xt_hashlimit: size too large, truncated to 1048576 [ 394.531603][T22601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8048'. [ 394.635722][T22605] netlink: 'syz.3.8049': attribute type 2 has an invalid length. [ 395.597594][T22655] netlink: 'syz.4.8072': attribute type 29 has an invalid length. [ 395.597623][T22655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8072'. [ 395.603985][T22655] netlink: 'syz.4.8072': attribute type 29 has an invalid length. [ 395.604046][T22655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8072'. [ 396.082173][T22682] netlink: 168 bytes leftover after parsing attributes in process `syz.2.8090'. [ 396.607149][T22717] ip_tables: iptables: counters copy to user failed while replacing table [ 396.760523][T22723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8108'. [ 397.506706][T22756] netlink: 75 bytes leftover after parsing attributes in process `syz.0.8125'. [ 397.732083][T22769] Bluetooth: hci0: unsupported parameter 5135 [ 397.732110][T22769] Bluetooth: hci0: unsupported parameter 8192 [ 397.732126][T22769] Bluetooth: hci0: unsupported parameter 5135 [ 397.732140][T22769] Bluetooth: hci0: unsupported parameter 8192 [ 398.193433][T22797] netlink: 'syz.4.8145': attribute type 29 has an invalid length. [ 398.974287][T22842] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 399.443855][T22863] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8176'. [ 399.553884][T22868] vlan2: entered allmulticast mode [ 399.588448][T22870] sctp: [Deprecated]: syz.0.8180 (pid 22870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.588448][T22870] Use struct sctp_sack_info instead [ 399.731540][T22879] netlink: 'syz.0.8186': attribute type 142 has an invalid length. [ 400.234366][T22910] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8199'. [ 400.308148][T22914] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8200'. [ 400.718729][T22944] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8216'. [ 400.849204][T22949] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8218'. [ 401.613112][T23001] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 403.047290][T23091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8287'. [ 403.731719][T23134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8305'. [ 403.940046][ T1000] bond0: (slave dummy0): interface is now down [ 403.940590][ T1000] bond0: now running without any active interface! [ 404.035735][T23146] pim6reg: entered allmulticast mode [ 404.046156][T23146] pim6reg: left allmulticast mode [ 404.208463][T23159] Bluetooth: hci0: unsupported parameter 5135 [ 404.208489][T23159] Bluetooth: hci0: unsupported parameter 8192 [ 404.208503][T23159] Bluetooth: hci0: unsupported parameter 5135 [ 404.208517][T23159] Bluetooth: hci0: unsupported parameter 8192 [ 404.363559][T23167] netlink: 'syz.4.8323': attribute type 9 has an invalid length. [ 405.290267][T23223] Bluetooth: hci0: add_remote_oob_data: invalid len of 70 bytes [ 406.276095][T23286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8377'. [ 406.467288][T23295] netlink: 'syz.4.8384': attribute type 1 has an invalid length. [ 406.467312][T23295] netlink: 'syz.4.8384': attribute type 2 has an invalid length. [ 406.467326][T23295] netlink: 'syz.4.8384': attribute type 3 has an invalid length. [ 406.467340][T23295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8384'. [ 407.464895][T23359] ip_tables: iptables: counters copy to user failed while replacing table [ 407.500827][T23362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8415'. [ 407.500866][T23362] netlink: 'syz.4.8415': attribute type 3 has an invalid length. [ 407.741939][T23375] netlink: 'syz.3.8419': attribute type 1 has an invalid length. [ 407.769809][T23378] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8421'. [ 408.090602][T23395] netlink: 288 bytes leftover after parsing attributes in process `syz.0.8430'. [ 408.519310][T23427] ip_tables: iptables: counters copy to user failed while replacing table [ 409.624769][T23492] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 28 bytes [ 409.738458][T23501] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8482'. [ 410.345084][T23538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8498'. [ 410.764723][T23564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8513'. [ 410.764755][T23564] netlink: 79 bytes leftover after parsing attributes in process `syz.4.8513'. [ 410.844756][T23568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8515'. [ 410.976074][T23575] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 411.982489][T23639] netlink: 'syz.4.8550': attribute type 2 has an invalid length. [ 412.130291][T23644] tipc: Started in network mode [ 412.130327][T23644] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 412.130380][T23644] tipc: Enabling of bearer rejected, failed to enable media [ 412.204369][T23649] netlink: 'syz.4.8555': attribute type 13 has an invalid length. [ 412.218246][T23650] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8554'. [ 413.393280][T23712] netlink: 'syz.1.8584': attribute type 4 has an invalid length. [ 413.633700][T23727] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8589'. [ 413.773778][T23735] tipc: Enabled bearer , priority 10 [ 413.788815][T23737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8595'. [ 413.788839][T23737] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8595'. [ 414.087423][T23753] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8603'. [ 414.380751][T23769] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8611'. [ 414.891813][ T5756] tipc: Node number set to 2886997039 [ 414.993777][T23805] sock: sock_timestamping_bind_phc: sock not bind to device [ 415.176335][T23814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8632'. [ 415.343511][T23823] smc: net device lo applied user defined pnetid SYZ0 [ 415.810571][T23849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8649'. [ 415.810601][T23849] netlink: 120 bytes leftover after parsing attributes in process `syz.3.8649'. [ 415.810658][T23849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8649'. [ 416.051499][T23863] block nbd0: Unsupported socket: should be TCP or UNIX. [ 416.236320][T23876] Bluetooth: hci0: unsupported parameter 5135 [ 416.236348][T23876] Bluetooth: hci0: unsupported parameter 8192 [ 416.236363][T23876] Bluetooth: hci0: unsupported parameter 5135 [ 416.236377][T23876] Bluetooth: hci0: unsupported parameter 8192 [ 416.725194][T23905] netlink: 'syz.3.8676': attribute type 1 has an invalid length. [ 417.809789][T23973] __nla_validate_parse: 3 callbacks suppressed [ 417.809812][T23973] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8707'. [ 417.902416][T23975] Bluetooth: hci0: unsupported parameter 5135 [ 417.902442][T23975] Bluetooth: hci0: unsupported parameter 8192 [ 417.902456][T23975] Bluetooth: hci0: unsupported parameter 5135 [ 417.902470][T23975] Bluetooth: hci0: unsupported parameter 8192 [ 418.201605][T23995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8719'. [ 418.664669][T24025] tipc: Enabling of bearer rejected, failed to enable media [ 418.766952][T24030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8734'. [ 418.798817][T24030] macvtap1: entered promiscuous mode [ 418.798843][T24030] hsr0: entered promiscuous mode [ 418.799262][T24030] macvtap1: entered allmulticast mode [ 418.799279][T24030] hsr0: entered allmulticast mode [ 418.799294][T24030] hsr_slave_0: entered allmulticast mode [ 418.799311][T24030] hsr_slave_1: entered allmulticast mode [ 418.801348][T24030] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 418.853286][T24034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8736'. [ 419.048585][T24044] ip_tables: iptables: counters copy to user failed while replacing table [ 419.805719][T24088] netlink: 348 bytes leftover after parsing attributes in process `syz.1.8760'. [ 420.117442][T24108] Bluetooth: hci0: unsupported parameter 5135 [ 420.117467][T24108] Bluetooth: hci0: unsupported parameter 8192 [ 420.117482][T24108] Bluetooth: hci0: unsupported parameter 5135 [ 420.117495][T24108] Bluetooth: hci0: unsupported parameter 8192 [ 421.202185][T24169] ip_tables: iptables: counters copy to user failed while replacing table [ 422.582243][T24250] Bluetooth: hci0: unsupported parameter 5161 [ 422.582268][T24250] Bluetooth: hci0: unsupported parameter 8192 [ 422.582282][T24250] Bluetooth: hci0: unsupported parameter 5161 [ 422.582295][T24250] Bluetooth: hci0: unsupported parameter 8192 [ 422.696174][T24254] netlink: 'syz.4.8826': attribute type 3 has an invalid length. [ 422.922462][T24265] netlink: 44 bytes leftover after parsing attributes in process `syz.3.8828'. [ 423.379580][T24290] netlink: 80 bytes leftover after parsing attributes in process `syz.1.8839'. [ 423.409002][T24289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8838'. [ 423.409044][T24289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8838'. [ 423.505048][T24293] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8840'. [ 423.627825][T24299] netlink: 240 bytes leftover after parsing attributes in process `syz.1.8843'. [ 424.279905][T24332] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 424.830237][T24362] ip_tables: iptables: counters copy to user failed while replacing table [ 425.338717][T24385] Bluetooth: hci0: load_link_keys: too big key_count value 5120 [ 425.736097][T24410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8885'. [ 426.304057][T24442] ip_tables: iptables: counters copy to user failed while replacing table [ 426.424478][T24447] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8901'. [ 426.424509][T24447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8901'. [ 426.642953][T24456] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8904'. [ 428.242196][T24559] netlink: 'syz.0.8955': attribute type 32 has an invalid length. [ 428.242223][T24559] __nla_validate_parse: 5 callbacks suppressed [ 428.242237][T24559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8955'. [ 428.311964][T24559] bond4: option coupled_control: invalid value (192) [ 428.327352][T24559] bond4 (unregistering): Released all slaves [ 428.513758][T24568] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8959'. [ 428.634088][T24576] erspan0: entered promiscuous mode [ 428.974142][T24594] ip_tables: iptables: counters copy to user failed while replacing table [ 428.992068][T24594] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.907226][T24640] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 430.063888][T24650] netlink: 84 bytes leftover after parsing attributes in process `syz.3.9000'. [ 430.607304][T24681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9014'. [ 430.824868][T24696] bond0: Caught tx_queue_len zero misconfig [ 431.427785][T24728] Bluetooth: hci0: Invalid link key type 76 for 00:00:4c:00:00:00 [ 431.472960][T24735] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 431.923615][ T4955] block nbd0: Receive control failed (result -32) [ 431.923828][ T5653] block nbd0: Receive control failed (result -32) [ 432.044662][T24758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9049'. [ 432.167666][T24762] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9051'. [ 433.057725][T24818] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9082'. [ 433.076180][T24816] netlink: 'syz.1.9079': attribute type 5 has an invalid length. [ 433.107382][T24822] xt_hashlimit: size too large, truncated to 1048576 [ 433.986176][T24865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9101'. [ 434.007379][T24865] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9101'. [ 434.047179][T24869] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 434.717839][T24906] netlink: 'syz.4.9120': attribute type 1 has an invalid length. [ 434.717863][T24906] netlink: 'syz.4.9120': attribute type 7 has an invalid length. [ 434.717879][T24906] netlink: 'syz.4.9120': attribute type 8 has an invalid length. [ 434.734149][T24906] netlink: 208 bytes leftover after parsing attributes in process `syz.4.9120'. [ 434.734195][T24906] NCSI netlink: No device for ifindex 65584 [ 435.102676][T24925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9128'. [ 435.306054][T24937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9135'. [ 435.366081][T24939] gtp0: entered promiscuous mode [ 435.366106][T24939] gtp0: entered allmulticast mode [ 435.586216][T24956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9144'. [ 435.586251][T24956] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9144'. [ 435.660136][T24956] netlink: 10 bytes leftover after parsing attributes in process `syz.0.9144'. [ 435.792001][T24968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9147'. [ 435.981569][T24971] tap0: tun_chr_ioctl cmd 1074025672 [ 435.981595][T24971] tap0: ignored: set checksum disabled [ 435.985928][T24961] udevd[24961]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 436.028147][T24960] udevd[24960]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 436.063285][T24977] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9151'. [ 437.144892][T25041] xt_hashlimit: size too large, truncated to 1048576 [ 437.192797][T25047] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 437.213402][T25047] 0ªX¹¦Dö»: entered allmulticast mode [ 437.610106][T25066] sch_fq: defrate 0 ignored. [ 437.714767][T25073] netlink: 'syz.4.9197': attribute type 8 has an invalid length. [ 438.222277][T25103] macsec2: entered allmulticast mode [ 438.484987][T25113] veth1_macvtap: left promiscuous mode [ 438.485019][T25113] macsec0: entered promiscuous mode [ 438.596846][T25115] veth1_macvtap: entered promiscuous mode [ 438.597302][T25115] macsec0: left promiscuous mode [ 438.860000][T25130] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 438.997748][T25136] bond0: option miimon: invalid value (18446744071829782528) [ 438.997778][T25136] bond0: option miimon: allowed values 0 - 2147483647 [ 439.222404][T25144] __nla_validate_parse: 9 callbacks suppressed [ 439.222443][T25144] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9226'. [ 439.555873][T25158] Bluetooth: hci0: Invalid link address type 18 for 00:40:00:00:00:00 [ 440.181105][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.344922][T25205] ip_tables: iptables: counters copy to user failed while replacing table [ 440.362042][T25205] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 440.601449][T25221] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9262'. [ 440.660660][T25226] TCP: TCP_TX_DELAY enabled [ 441.637632][T25280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9290'. [ 442.410246][T25309] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9303'. [ 442.744318][T25330] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 443.109023][T25349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9323'. [ 443.411517][T25369] xt_hashlimit: size too large, truncated to 1048576 [ 444.442057][T25429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9360'. [ 444.760613][T25449] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9370'. [ 444.845708][T25452] veth1_macvtap: left promiscuous mode [ 445.107607][T25466] tipc: Enabled bearer , priority 10 [ 445.110885][T25466] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 445.325957][T25476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9383'. [ 445.325985][T25476] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9383'. [ 445.500240][T25487] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9389'. [ 445.804295][T25505] tipc: Enabled bearer , priority 10 [ 445.805266][T25505] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9396'. [ 445.980137][T25515] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9401'. [ 446.186165][T25525] netlink: 'syz.3.9406': attribute type 21 has an invalid length. [ 446.186192][T25525] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9406'. [ 446.219013][ T5646] tipc: Node number set to 1 [ 446.682586][T25553] netlink: 'syz.0.9419': attribute type 3 has an invalid length. [ 446.682612][T25553] netlink: 'syz.0.9419': attribute type 1 has an invalid length. [ 446.682629][T25553] netlink: 212 bytes leftover after parsing attributes in process `syz.0.9419'. [ 446.682646][T25553] NCSI netlink: No device for ifindex 813332851 [ 446.896797][T25564] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 446.918473][ T5756] tipc: Node number set to 1593835523 [ 447.105078][T25577] blkio.reset_stats is deprecated [ 448.459180][T25660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9468'. [ 448.529210][T25664] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 448.565784][T25665] tipc: Started in network mode [ 448.565835][T25665] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 448.566120][T25665] tipc: Enabled bearer , priority 0 [ 448.568863][T25665] tipc: Disabling bearer [ 449.457075][T25716] : renamed from bond0 (while UP) [ 449.546776][T25719] __nla_validate_parse: 1 callbacks suppressed [ 449.546800][T25719] netlink: 108 bytes leftover after parsing attributes in process `syz.0.9496'. [ 449.738961][T25726] h: entered promiscuous mode [ 450.360690][T25766] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 451.624454][T25835] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 451.628250][T25835] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 452.357429][T25878] tun0: tun_chr_ioctl cmd 1074025675 [ 452.357457][T25878] tun0: persist enabled [ 452.654707][T25899] veth0_to_bridge: entered promiscuous mode [ 452.665974][T25898] veth0_to_bridge: left promiscuous mode [ 453.534329][T25954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9608'. [ 453.612570][T25959] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9610'. [ 454.221976][T25995] bond4: (slave veth0): Device is not bonding slave [ 454.222001][T25995] bond4: option active_slave: invalid value (veth0) [ 454.325538][T25995] bond4 (unregistering): Released all slaves [ 454.371488][T26000] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9631'. [ 454.718126][T26020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9638'. [ 454.718154][T26020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9638'. [ 454.834916][T26023] ip_tables: iptables: counters copy to user failed while replacing table [ 455.135042][T26042] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 455.538112][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 455.889227][T26080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9665'. [ 455.967848][T26084] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 456.293447][T26103] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9674'. [ 456.609324][T26118] batadv_slave_0: Caught tx_queue_len zero misconfig [ 456.868561][T26133] macvtap0: entered allmulticast mode [ 456.868586][T26133] veth0_macvtap: entered allmulticast mode [ 456.985602][T26139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9692'. [ 457.512243][T26169] tap0: tun_chr_ioctl cmd 1074025676 [ 457.512268][T26169] tap0: owner set to 0 [ 457.994652][T26196] tun0: tun_chr_ioctl cmd 1074025675 [ 457.994679][T26196] tun0: persist disabled [ 458.112425][T26201] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9721'. [ 458.375207][T26217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9728'. [ 459.184975][T26254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9748'. [ 459.220155][T26254] vlan2: entered promiscuous mode [ 459.220180][T26254] bond0: entered promiscuous mode [ 459.470524][ T4955] block nbd1: Receive control failed (result -32) [ 459.773408][T26288] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9762'. [ 459.773435][T26288] tipc: Invalid UDP bearer configuration [ 459.773478][T26288] tipc: Enabling of bearer rejected, failed to enable media [ 459.825993][T26291] ip_tables: iptables: counters copy to user failed while replacing table [ 459.999363][T26300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9770'. [ 460.000802][T26300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9770'. [ 460.001526][T26300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9770'. [ 460.002128][T26300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9770'. [ 460.004202][T26300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9770'. [ 460.209971][T26312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9772'. [ 460.217011][T26312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9772'. [ 460.217041][T26312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9772'. [ 460.417557][T26324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9776'. [ 461.387248][T26376] netlink: 'syz.2.9798': attribute type 1 has an invalid length. [ 461.524100][T26389] netlink: 'syz.3.9803': attribute type 5 has an invalid length. [ 461.979495][T26411] Bluetooth: hci1: too big key_count value 32778 [ 463.663947][T26514] ip_tables: iptables: counters copy to user failed while replacing table [ 463.932345][T26528] netlink: 'syz.0.9867': attribute type 14 has an invalid length. [ 464.085569][T26534] netlink: 'syz.1.9869': attribute type 3 has an invalid length. [ 464.206967][T26543] netlink: 'syz.3.9873': attribute type 1 has an invalid length. [ 464.357858][T26551] netlink: 'syz.4.9876': attribute type 83 has an invalid length. [ 464.365245][ T4955] block nbd296: Receive control failed (result -32) [ 465.121311][T26598] netlink: 'syz.2.9899': attribute type 2 has an invalid length. [ 465.161434][T26598] !: entered promiscuous mode [ 465.191606][T26598] __nla_validate_parse: 11 callbacks suppressed [ 465.191631][T26598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9899'. [ 465.191721][T26598] !: left promiscuous mode [ 465.222457][T26605] ip_tables: iptables: counters copy to user failed while replacing table [ 466.155963][T26661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9927'. [ 466.679334][T26694] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9943'. [ 466.801064][T26701] netlink: 'syz.4.9946': attribute type 10 has an invalid length. [ 466.833863][T26701] team0: Port device dummy0 added [ 467.031768][T26713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9953'. [ 467.031819][T26713] netlink: 176 bytes leftover after parsing attributes in process `syz.2.9953'. [ 467.031878][T26713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9953'. [ 467.557306][T26744] tap0: tun_chr_ioctl cmd 2148553947 [ 467.622052][T26748] block nbd2: Unsupported socket: should be TCP or UNIX. [ 468.214711][T26786] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 468.275217][T26791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9987'. [ 468.485595][T26802] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9992'. [ 469.081117][T26841] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10010'. [ 469.590889][T26870] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10025'. [ 470.241876][T26912] team0: No ports can be present during mode change [ 470.245734][T26915] netlink: 'syz.2.10047': attribute type 83 has an invalid length. [ 470.456680][T26925] __nla_validate_parse: 3 callbacks suppressed [ 470.456705][T26925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10049'. [ 470.578893][T26930] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10055'. [ 470.972047][T26952] netlink: 'syz.3.10066': attribute type 1 has an invalid length. [ 470.972071][T26952] netlink: 'syz.3.10066': attribute type 2 has an invalid length. [ 470.977078][T26952] netlink: 'syz.3.10066': attribute type 1 has an invalid length. [ 470.977098][T26952] netlink: 'syz.3.10066': attribute type 2 has an invalid length. [ 471.648622][T26993] netlink: 'syz.4.10085': attribute type 1 has an invalid length. [ 471.648647][T26993] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10085'. [ 471.713364][T26995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10088'. [ 472.080708][T27015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10095'. [ 472.100288][T27015] netlink: 'syz.1.10095': attribute type 1 has an invalid length. [ 472.100313][T27015] netlink: 'syz.1.10095': attribute type 2 has an invalid length. [ 472.775559][T27058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10116'. [ 473.075720][T27072] netlink: 'syz.3.10123': attribute type 83 has an invalid length. [ 473.723925][T27113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10142'. [ 473.779635][T27118] netlink: 71 bytes leftover after parsing attributes in process `syz.1.10143'. [ 473.814365][T27117] xt_hashlimit: size too large, truncated to 1048576 [ 474.453115][T27154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10158'. [ 474.484733][T27154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10158'. [ 474.666062][T27165] ip_tables: iptables: counters copy to user failed while replacing table [ 474.714969][T27167] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 474.741277][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 474.872272][T27175] netlink: 'syz.2.10169': attribute type 4 has an invalid length. [ 474.989471][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 475.395682][T27202] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 475.395708][T27202] syzkaller1: group set to 0 [ 475.618366][T27220] __nla_validate_parse: 1 callbacks suppressed [ 475.618495][T27220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10191'. [ 475.959592][T27237] sctp: [Deprecated]: syz.4.10198 (pid 27237) Use of int in maxseg socket option. [ 475.959592][T27237] Use struct sctp_assoc_value instead [ 476.212824][T27253] netlink: 'syz.0.10205': attribute type 83 has an invalid length. [ 476.281523][T27258] netlink: 2 bytes leftover after parsing attributes in process `syz.3.10206'. [ 476.671753][T27280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10217'. [ 477.349403][T27318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10233'. [ 477.349433][T27318] block nbd2: Unsupported socket: should be TCP or UNIX. [ 477.567127][T27332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10240'. [ 477.694942][T27337] sctp: [Deprecated]: syz.2.10245 (pid 27337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 477.694942][T27337] Use struct sctp_sack_info instead [ 478.410635][T27379] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10262'. [ 479.367361][T27423] netlink: 236 bytes leftover after parsing attributes in process `syz.3.10281'. [ 479.367395][T27423] netlink: 236 bytes leftover after parsing attributes in process `syz.3.10281'. [ 479.583141][T27434] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10285'. [ 479.969896][T27456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10300'. [ 480.619182][T27497] netlink: 'syz.4.10317': attribute type 33 has an invalid length. [ 480.684131][T27497] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 480.701711][T27497] bond4 (unregistering): Released all slaves [ 480.960816][T27519] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10325'. [ 480.995505][T27521] netlink: 44 bytes leftover after parsing attributes in process `syz.2.10324'. [ 481.252425][T27535] netlink: 'syz.4.10331': attribute type 83 has an invalid length. [ 481.422871][T27543] tipc: Enabled bearer , priority 0 [ 481.591587][T27552] netlink: 165 bytes leftover after parsing attributes in process `syz.3.10342'. [ 482.093931][T27586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10355'. [ 482.206185][T27592] vxcan0: tx address claim with dest, not broadcast [ 482.535110][T27608] netlink: 88 bytes leftover after parsing attributes in process `syz.0.10367'. [ 482.538988][ T991] tipc: Node number set to 43690 [ 482.561914][T27610] netlink: 'syz.3.10368': attribute type 4 has an invalid length. [ 482.603958][T27614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10370'. [ 482.795689][T27626] netlink: 248 bytes leftover after parsing attributes in process `syz.3.10374'. [ 482.883674][T27630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10379'. [ 483.466281][T27669] veth0: entered promiscuous mode [ 483.467023][T27669] veth0: left promiscuous mode [ 483.702691][T27682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10402'. [ 484.083529][T27704] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10412'. [ 484.085706][T27707] netlink: 'syz.4.10413': attribute type 83 has an invalid length. [ 484.160802][T27710] wg2: Caught tx_queue_len zero misconfig [ 485.071622][T27766] netlink: 'syz.3.10443': attribute type 2 has an invalid length. [ 486.556845][T27842] ip_tables: iptables: counters copy to user failed while replacing table [ 486.615620][T27848] netlink: 'syz.1.10482': attribute type 83 has an invalid length. [ 486.912222][T27863] __nla_validate_parse: 4 callbacks suppressed [ 486.912246][T27863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10488'. [ 486.951533][T27866] netlink: 'syz.0.10490': attribute type 8 has an invalid length. [ 487.179005][T27879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10495'. [ 487.179046][T27879] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10495'. [ 487.190489][T27881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10497'. [ 487.243766][T27882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10496'. [ 487.243796][T27882] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10496'. [ 487.525478][T27896] IPVS: wrr: TCP 172.20.20.170:20000 - no destination available [ 487.580686][T27903] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 488.239537][T27945] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10526'. [ 488.316788][T27948] netlink: 'syz.1.10529': attribute type 3 has an invalid length. [ 488.514290][T27957] netlink: 'syz.1.10532': attribute type 4 has an invalid length. [ 489.198917][T27996] erspan0: entered promiscuous mode [ 489.581334][T28015] netlink: 92 bytes leftover after parsing attributes in process `syz.1.10560'. [ 490.147428][T28050] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10575'. [ 490.316721][T28061] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10580'. [ 490.955706][T28096] netlink: 'syz.2.10598': attribute type 11 has an invalid length. [ 490.989126][T28098] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 491.966426][T28156] __nla_validate_parse: 4 callbacks suppressed [ 491.966466][T28156] netlink: 284 bytes leftover after parsing attributes in process `syz.4.10629'. [ 492.440420][T28184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10639'. [ 492.592450][T28196] netlink: 92 bytes leftover after parsing attributes in process `syz.3.10646'. [ 493.085925][T28224] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 493.358842][T28241] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 493.359102][T28241] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 493.989252][T28277] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10685'. [ 494.035382][T28281] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10687'. [ 494.035891][T28282] netlink: 'syz.1.10686': attribute type 30 has an invalid length. [ 494.663050][T28316] team0: No ports can be present during mode change [ 494.986847][T28335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10711'. [ 495.092426][T28337] IPVS: persistence engine module ip_vs_pe_À not found [ 495.334089][T28352] netlink: 'syz.4.10719': attribute type 1 has an invalid length. [ 495.407549][T28360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10722'. [ 496.093303][T28403] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10737'. [ 496.161341][T28407] ip_tables: iptables: counters copy to user failed while replacing table [ 496.610374][T28431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10751'. [ 496.610439][T28431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10751'. [ 497.222278][T28466] veth0: entered promiscuous mode [ 497.223380][T28465] veth0: left promiscuous mode [ 498.111977][T28515] __nla_validate_parse: 2 callbacks suppressed [ 498.112000][T28515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10787'. [ 498.116282][T28515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10787'. [ 498.644922][T28550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10802'. [ 498.751096][T28556] syz_tun: entered allmulticast mode [ 498.752439][T28556] syz_tun: left allmulticast mode [ 498.787537][T28558] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10805'. [ 498.870431][T28560] netlink: 'syz.4.10807': attribute type 11 has an invalid length. [ 499.293271][T28582] netlink: 'syz.3.10817': attribute type 1 has an invalid length. [ 499.293299][T28582] netlink: 4264 bytes leftover after parsing attributes in process `syz.3.10817'. [ 499.293318][T28582] netlink: 'syz.3.10817': attribute type 1 has an invalid length. [ 499.517233][T28596] netlink: 'syz.3.10824': attribute type 3 has an invalid length. [ 499.517286][T28596] netlink: 'syz.3.10824': attribute type 2 has an invalid length. [ 501.109181][ T991] lo speed is unknown, defaulting to 1000 [ 501.109240][ T991] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 501.607764][T28701] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10872'. [ 501.806088][T28715] IPv6: Can't replace route, no match found [ 501.806459][T28715] IPv6: Can't replace route, no match found [ 502.053592][T28728] netlink: 88 bytes leftover after parsing attributes in process `syz.0.10880'. [ 502.451743][T28749] sctp: [Deprecated]: syz.0.10887 (pid 28749) Use of int in max_burst socket option deprecated. [ 502.451743][T28749] Use struct sctp_assoc_value instead [ 502.556208][T28755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10889'. [ 502.771357][T28765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10893'. [ 502.773587][T28765] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10893'. [ 502.890607][T28774] tipc: New replicast peer: 255.255.255.255 [ 502.891412][T28774] tipc: Enabled bearer , priority 10 [ 502.960503][T28776] veth0: Caught tx_queue_len zero misconfig [ 503.145739][T28789] __nla_validate_parse: 1 callbacks suppressed [ 503.145761][T28789] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10903'. [ 503.145909][T28789] netlink: 6 bytes leftover after parsing attributes in process `syz.4.10903'. [ 503.207291][T28793] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 504.181681][T28848] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10932'. [ 504.683307][T28875] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 504.683436][T28875] syzkaller1: linktype set to 823 [ 504.768314][T28882] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 504.885416][T28888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10953'. [ 504.899375][T28888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10953'. [ 505.552294][T28932] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10970'. [ 505.552324][T28932] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10970'. [ 506.296309][T28976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10990'. [ 506.676143][T29001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11003'. [ 506.676184][T29001] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11003'. [ 506.707036][T29001] gretap0: entered promiscuous mode [ 506.717225][T29001] gretap0: left promiscuous mode [ 507.328124][T29037] sctp: [Deprecated]: syz.1.11020 (pid 29037) Use of int in max_burst socket option. [ 507.328124][T29037] Use struct sctp_assoc_value instead [ 508.518211][T29109] bridge0: Caught tx_queue_len zero misconfig [ 509.671443][T29147] __nla_validate_parse: 5 callbacks suppressed [ 509.671464][T29147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11071'. [ 510.652391][T29205] netlink: 'syz.1.11097': attribute type 2 has an invalid length. [ 510.680068][T29209] netlink: 'syz.2.11099': attribute type 5 has an invalid length. [ 511.813405][T29279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11132'. [ 511.815531][T29279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11132'. [ 511.958433][T29284] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11136'. [ 513.430798][T29377] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11179'. [ 513.608655][T29389] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 513.608686][T29389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 513.736516][T29397] sctp: [Deprecated]: syz.1.11187 (pid 29397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 513.736516][T29397] Use struct sctp_sack_info instead [ 513.924205][T29406] netlink: 104 bytes leftover after parsing attributes in process `syz.4.11190'. [ 514.100129][T29414] netlink: 'syz.4.11195': attribute type 6 has an invalid length. [ 514.675687][T29448] netlink: 104 bytes leftover after parsing attributes in process `syz.1.11212'. [ 515.224654][T21967] tipc: Subscription rejected, illegal request [ 515.993227][T29532] netlink: 232 bytes leftover after parsing attributes in process `syz.2.11251'. [ 516.025325][T29534] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11253'. [ 516.149310][T29539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11256'. [ 516.336088][T29551] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11259'. [ 516.544799][T29563] netlink: 10 bytes leftover after parsing attributes in process `syz.1.11267'. [ 517.002770][T29591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11281'. [ 517.003123][T29591] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11281'. [ 517.162867][T29593] netlink: 'syz.0.11282': attribute type 4 has an invalid length. [ 517.162893][T29593] netlink: 'syz.0.11282': attribute type 10 has an invalid length. [ 517.162908][T29593] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11282'. [ 517.163013][T29593] bond_slave_0: mtu greater than device maximum [ 517.248249][T29600] netlink: 'syz.1.11285': attribute type 2 has an invalid length. [ 517.652132][T29617] netlink: 'syz.0.11294': attribute type 28 has an invalid length. [ 517.652157][T29617] netlink: 'syz.0.11294': attribute type 3 has an invalid length. [ 517.652172][T29617] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11294'. [ 518.447988][T29630] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.448733][T29630] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.536959][T29630] team0: Port device dummy0 removed [ 518.744907][T29630] bridge_slave_0: left allmulticast mode [ 518.744929][T29630] bridge_slave_0: left promiscuous mode [ 518.745123][T29630] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.804912][T29630] bridge_slave_1: left allmulticast mode [ 518.804944][T29630] bridge_slave_1: left promiscuous mode [ 518.805176][T29630] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.845057][T29630] bond0: (slave bond_slave_0): Releasing backup interface [ 518.847183][T29630] bond_slave_0: left allmulticast mode [ 518.904439][T29630] bond0: (slave bond_slave_1): Releasing backup interface [ 518.921426][T29630] bond_slave_1: left allmulticast mode [ 518.987539][T29630] team0: Port device team_slave_0 removed [ 519.049121][T29630] team0: Port device team_slave_1 removed [ 519.091872][T29630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.112320][T29661] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11312'. [ 519.141912][T29630] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.181848][T29630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.228672][T29630] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.316972][T29630] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 520.129633][T29715] sctp: [Deprecated]: syz.2.11338 (pid 29715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 520.129633][T29715] Use struct sctp_sack_info instead [ 520.729522][T29746] batman_adv: batadv0: Adding interface: gretap1 [ 520.729544][T29746] batman_adv: batadv0: The MTU of interface gretap1 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.730036][T29746] batman_adv: batadv0: Interface activated: gretap1 [ 521.039799][T29761] veth0: entered promiscuous mode [ 521.041943][T29760] veth0: left promiscuous mode [ 521.484617][T29786] __nla_validate_parse: 7 callbacks suppressed [ 521.484638][T29786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11373'. [ 521.564553][T29788] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 522.496231][T29843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11401'. [ 522.586002][T29848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11403'. [ 522.587256][T29848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11403'. [ 524.846886][T29966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11458'. [ 524.847018][T29966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.065424][T29966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.717053][T30010] netlink: 'syz.3.11475': attribute type 4 has an invalid length. [ 526.363272][T30044] block nbd0: NBD_DISCONNECT [ 526.363356][T30044] block nbd0: Send disconnect failed -32 [ 526.363379][T30044] block nbd0: Send disconnect failed -32 [ 526.363403][T30044] block nbd0: shutting down sockets [ 526.754576][T30062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11494'. [ 526.850563][T30067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11496'. [ 527.656486][T30104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11508'. [ 527.656524][T30104] netlink: 'syz.1.11508': attribute type 1 has an invalid length. [ 527.656539][T30104] netlink: 'syz.1.11508': attribute type 2 has an invalid length. [ 527.898729][T30118] tipc: Enabled bearer , priority 10 [ 528.125740][T30129] IPVS: Scheduler module ip_vs_sip not found [ 528.336643][T30145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11524'. [ 528.336711][T30145] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11524'. [ 528.476532][T30153] veth0: entered promiscuous mode [ 528.477612][T30152] veth0: left promiscuous mode [ 528.856106][T30170] syzkaller1: entered promiscuous mode [ 528.856132][T30170] syzkaller1: entered allmulticast mode [ 529.239330][T30198] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 529.339295][T30201] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11549'. [ 529.339328][T30201] block nbd0: Unsupported socket: should be TCP or UNIX. [ 529.581316][T30215] tipc: Enabling of bearer rejected, same dev for different media [ 531.244839][T30303] netlink: 'syz.2.11598': attribute type 2 has an invalid length. [ 531.259430][T30303] netlink: 'syz.2.11598': attribute type 2 has an invalid length. [ 531.259454][T30303] netlink: 67 bytes leftover after parsing attributes in process `syz.2.11598'. [ 531.942920][T30348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11617'. [ 532.055064][T30355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11621'. [ 532.056510][T30355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11621'. [ 532.604531][T30388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11636'. [ 532.923838][T30406] IPVS: nq: FWM 3 0x00000003 - no destination available [ 534.232240][T30466] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11670'. [ 534.232277][T30466] netlink: 'syz.1.11670': attribute type 10 has an invalid length. [ 534.232296][T30466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11670'. [ 534.349095][T30473] ip_tables: iptables: counters copy to user failed while replacing table [ 534.528419][T30478] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 534.534898][T30481] pimreg: entered allmulticast mode [ 535.502278][T30537] ip6_tunnel: non-ECT from fb80:0000:0000:0000:0000:0000:0000:00aa with DS=0xe [ 535.711180][T30550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11708'. [ 535.727132][T30550] macvlan0: left promiscuous mode [ 535.767542][T30550] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11708'. [ 535.802156][T30554] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 536.412799][T30592] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11726'. [ 538.191509][T30696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11771'. [ 538.195599][T30696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11771'. [ 538.196000][T30696] netlink: 40 bytes leftover after parsing attributes in process `syz.3.11771'. [ 538.561327][T30712] netlink: 'syz.1.11779': attribute type 1 has an invalid length. [ 538.561353][T30712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11779'. [ 538.948208][T30740] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11791'. [ 539.320750][T30760] netlink: 'syz.0.11801': attribute type 1 has an invalid length. [ 539.320777][T30760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11801'. [ 539.351733][T30759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11800'. [ 539.596087][T30774] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11808'. [ 539.889232][T30788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11815'. [ 539.919982][T30788] netlink: 'syz.1.11815': attribute type 1 has an invalid length. [ 539.920007][T30788] netlink: 'syz.1.11815': attribute type 2 has an invalid length. [ 540.223716][T30806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11823'. [ 540.766508][T30840] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 541.576363][T30879] lo: left promiscuous mode [ 541.588932][T30879] tunl0: left promiscuous mode [ 541.643608][T30885] netlink: 'syz.1.11858': attribute type 3 has an invalid length. [ 541.643631][T30885] netlink: 'syz.1.11858': attribute type 2 has an invalid length. [ 542.036215][T30879] 0ªX¹¦Dö»: left allmulticast mode [ 542.380450][T30879] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 542.417234][T30911] bridge2: entered promiscuous mode [ 542.417259][T30911] bridge2: entered allmulticast mode [ 542.432954][T30911] team0: Port device bridge2 added [ 542.433174][T30916] bridge0: port 3(team0) entered blocking state [ 542.433273][T30916] bridge0: port 3(team0) entered disabled state [ 542.433521][T30916] team0: entered allmulticast mode [ 542.433537][T30916] team_slave_0: entered allmulticast mode [ 542.433567][T30916] team_slave_1: entered allmulticast mode [ 542.476375][T30916] team0: entered promiscuous mode [ 542.476398][T30916] team_slave_0: entered promiscuous mode [ 542.476583][T30916] team_slave_1: entered promiscuous mode [ 542.478261][T30916] bridge0: port 3(team0) entered blocking state [ 542.478395][T30916] bridge0: port 3(team0) entered forwarding state [ 542.766819][T30932] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 542.882705][T30931] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 542.883245][T30931] gretap3: entered promiscuous mode [ 542.883265][T30931] gretap3: entered allmulticast mode [ 543.427793][T30964] geneve2: entered promiscuous mode [ 543.431732][T30966] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 543.508712][T21967] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 48727 - 0 [ 543.508763][T21967] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 48727 - 0 [ 543.508800][T21967] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 48727 - 0 [ 543.508838][T21967] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 48727 - 0 [ 543.716976][T30978] __nla_validate_parse: 4 callbacks suppressed [ 543.716999][T30978] netlink: 27 bytes leftover after parsing attributes in process `syz.3.11896'. [ 544.134105][T31000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11908'. [ 544.153555][T31001] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 544.155556][T31000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11908'. [ 544.363118][T31012] ip_tables: iptables: counters copy to user failed while replacing table [ 544.373087][T31012] C: renamed from lo [ 544.389023][T31012] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 544.399619][T31016] netlink: 'syz.4.11914': attribute type 10 has an invalid length. [ 544.504812][T31016] team0: Device wg2 is of different type [ 544.754655][T31031] syzkaller1: entered promiscuous mode [ 544.754682][T31031] syzkaller1: entered allmulticast mode [ 545.055976][T31048] veth0: entered promiscuous mode [ 545.067018][T31047] veth0: left promiscuous mode [ 545.445892][T31073] dummy0: Caught tx_queue_len zero misconfig [ 545.498609][T31076] bridge_slave_1: default FDB implementation only supports local addresses [ 545.806732][T31093] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11952'. [ 545.860408][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880572e7c00: rx timeout, send abort [ 545.863395][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880572e7c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 545.926192][T31097] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11954'. [ 545.979578][T31099] netlink: 11 bytes leftover after parsing attributes in process `syz.0.11956'. [ 546.750161][T31147] bridge0: port 1(syz_tun) entered blocking state [ 546.750376][T31147] bridge0: port 1(syz_tun) entered disabled state [ 546.750579][T31147] syz_tun: entered allmulticast mode [ 546.752650][T31147] syz_tun: entered promiscuous mode [ 546.825057][T31150] netlink: 'syz.2.11980': attribute type 1 has an invalid length. [ 547.291120][T31181] sctp: [Deprecated]: syz.0.11992 (pid 31181) Use of struct sctp_assoc_value in delayed_ack socket option. [ 547.291120][T31181] Use struct sctp_sack_info instead [ 547.473470][T31188] syzkaller1: entered promiscuous mode [ 547.473503][T31188] syzkaller1: entered allmulticast mode [ 547.496972][T31188] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 547.566572][T31196] netlink: 'syz.2.11999': attribute type 9 has an invalid length. [ 547.566611][T31196] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11999'. [ 547.827203][T31206] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.12005'. [ 548.464517][T31242] netlink: 27 bytes leftover after parsing attributes in process `syz.3.12021'. [ 548.979524][T31276] netlink: 'syz.3.12036': attribute type 64 has an invalid length. [ 548.993375][T31276] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.993719][T31276] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.032240][T31277] netlink: 'syz.3.12036': attribute type 64 has an invalid length. [ 549.508672][T31304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12048'. [ 549.922457][T31324] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12059'. [ 550.302756][T31350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12071'. [ 550.428915][T31358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12074'. [ 550.428956][T31358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12074'. [ 550.813456][T31377] syzkaller1: entered promiscuous mode [ 550.813481][T31377] syzkaller1: entered allmulticast mode [ 550.985929][T31384] bond0: invalid NS target ff00:: specified for addition [ 550.985965][T31384] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 551.012677][T21967] bond0: (slave netdevsim1): link status definitely down, disabling slave [ 551.197612][T31398] ip_tables: iptables: counters copy to user failed while replacing table [ 551.304576][T31401] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 551.551086][T31414] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12101'. [ 554.195607][T31502] block nbd0: not configured, cannot reconfigure [ 554.400735][T31514] netlink: 'syz.1.12144': attribute type 4 has an invalid length. [ 554.424964][T31514] netlink: 'syz.1.12144': attribute type 4 has an invalid length. [ 554.668560][T31525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12148'. [ 554.993518][T31542] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12152'. [ 554.993547][T31542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12152'. [ 555.217294][T31550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12154'. [ 555.748239][T31580] tunl0: Caught tx_queue_len zero misconfig [ 555.892801][T31589] netlink: 'syz.1.12173': attribute type 17 has an invalid length. [ 555.892827][T31589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12173'. [ 555.892857][T31589] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12173'. [ 556.191757][T31604] netlink: 'syz.1.12180': attribute type 11 has an invalid length. [ 556.258072][T31608] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 556.423490][T31620] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.12186'. [ 556.646846][T31628] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12190'. [ 556.757824][T31634] syzkaller1: entered promiscuous mode [ 556.759704][T31634] syzkaller1: entered allmulticast mode [ 557.193067][T31660] vcan0: tx address claim with dest, not broadcast [ 557.387677][T31672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12210'. [ 557.474449][T31678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12214'. [ 557.842034][T31699] erspan0: entered promiscuous mode [ 558.510358][T31734] mac80211_hwsim hwsim9 syzkaller1: entered promiscuous mode [ 558.510390][T31734] mac80211_hwsim hwsim9 syzkaller1: entered allmulticast mode [ 558.851003][T31752] netlink: 'syz.1.12246': attribute type 10 has an invalid length. [ 559.023351][T31760] mac80211_hwsim hwsim9 syzkaller1: left promiscuous mode [ 559.023383][T31760] mac80211_hwsim hwsim9 syzkaller1: left allmulticast mode [ 559.485629][T31786] mac80211_hwsim hwsim9 syzkaller1: entered promiscuous mode [ 559.485661][T31786] mac80211_hwsim hwsim9 syzkaller1: entered allmulticast mode [ 559.877720][T31808] ip_tables: iptables: counters copy to user failed while replacing table [ 560.615502][T31844] mac80211_hwsim hwsim9 syzkaller1: left promiscuous mode [ 560.615534][T31844] mac80211_hwsim hwsim9 syzkaller1: left allmulticast mode [ 561.102167][T31875] netlink: 'syz.3.12300': attribute type 17 has an invalid length. [ 561.102191][T31875] __nla_validate_parse: 9 callbacks suppressed [ 561.102205][T31875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12300'. [ 561.102234][T31875] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12300'. [ 562.319674][T31931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12325'. [ 562.635206][T31946] sctp: [Deprecated]: syz.3.12331 (pid 31946) Use of struct sctp_assoc_value in delayed_ack socket option. [ 562.635206][T31946] Use struct sctp_sack_info instead [ 562.761954][T31949] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12332'. [ 562.844269][T31952] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 564.330380][T32038] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 564.399084][T32040] syzkaller1: entered promiscuous mode [ 564.399117][T32040] syzkaller1: entered allmulticast mode [ 565.164513][T32082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12396'. [ 565.241916][T32083] team_slave_1: Caught tx_queue_len zero misconfig [ 566.153564][T32137] netlink: 'syz.4.12418': attribute type 3 has an invalid length. [ 566.850670][T32172] lo: left promiscuous mode [ 566.876095][T32172] tunl0: left promiscuous mode [ 566.885948][T32172] gre0: left promiscuous mode [ 566.893727][T32176] openvswitch: netlink: Message has 6 unknown bytes. [ 566.943737][T32172] gretap0: left promiscuous mode [ 566.954336][T32172] ip_vti0: left promiscuous mode [ 566.974586][T32172] bridge_slave_0: left promiscuous mode [ 566.992069][T32172] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 567.138173][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.209350][ T1000] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 567.220603][ T997] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.220660][ T997] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.220701][ T997] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 567.412985][T32204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.413273][T32204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.413658][T32204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.413890][T32204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.414087][T32204] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.042654][T32233] net_ratelimit: 365 callbacks suppressed [ 568.042807][T32233] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.043770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.178842][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.181128][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.185074][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.185453][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.460943][T32252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12468'. [ 569.027988][T32283] sock: sock_set_timeout: `syz.4.12483' (pid 32283) tries to set negative timeout [ 569.029905][T32282] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 569.130712][T32289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12486'. [ 569.130753][T32289] netlink: 'syz.2.12486': attribute type 7 has an invalid length. [ 569.130768][T32289] netlink: 'syz.2.12486': attribute type 8 has an invalid length. [ 569.130781][T32289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12486'. [ 569.218010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.470200][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.807334][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056e65c00: rx timeout, send abort [ 570.807571][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056e65c00: 0x2ff01: (3) A timeout occurred and this is the connection abort to close the session. [ 571.177537][T32397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12537'. [ 571.249953][T32397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12537'. [ 571.832377][T32437] syzkaller1: entered promiscuous mode [ 571.832404][T32437] syzkaller1: entered allmulticast mode [ 571.908278][T32440] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12556'. [ 571.908337][T32440] netlink: 84 bytes leftover after parsing attributes in process `syz.2.12556'. [ 573.004692][T32475] syz_tun: left allmulticast mode [ 573.004723][T32475] syz_tun: left promiscuous mode [ 573.004954][T32475] bridge0: port 1(syz_tun) entered disabled state [ 573.064753][T32490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12578'. [ 573.241198][T32497] net_ratelimit: 22 callbacks suppressed [ 573.241223][T32497] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 573.302111][T21967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.306016][T29651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.306259][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.352527][T32475] team0: Port device dummy0 removed [ 573.443860][T32506] vcan0: tx address claim with different name [ 573.624051][T29651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.654017][T32510] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12587'. [ 573.922892][T32475] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 574.126596][T32525] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12592'. [ 574.126653][T32525] bond0: ARP target 8.4.0.0 is already present [ 574.126681][T32525] bond0: option arp_ip_target: invalid value (1032) [ 574.475848][T32548] netlink: 7 bytes leftover after parsing attributes in process `syz.2.12603'. [ 574.648786][T32558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12607'. [ 574.664268][T29651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.842690][T32568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.843359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.027328][T32579] netlink: 'syz.4.12619': attribute type 1 has an invalid length. [ 575.538468][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.075822][T32610] xt_hashlimit: size too large, truncated to 1048576 [ 576.494217][T32626] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12636'. [ 576.526649][T32628] bond0: (slave vlan3): Error -34 calling dev_set_mtu [ 577.346734][T32677] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12657'. [ 577.400618][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aa35000: rx timeout, send abort [ 577.900673][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807aa35000: abort rx timeout. Force session deactivation [ 577.902353][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803351b800: rx timeout, send abort [ 578.052086][T32712] xt_hashlimit: size too large, truncated to 1048576 [ 578.146425][T32720] netlink: 'syz.4.12675': attribute type 5 has an invalid length. [ 578.146449][T32720] netlink: 'syz.4.12675': attribute type 9 has an invalid length. [ 578.146465][T32720] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12675'. [ 578.338323][ C1] net_ratelimit: 20 callbacks suppressed [ 578.338348][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.402402][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803351b800: abort rx timeout. Force session deactivation [ 578.579686][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.634437][T32719] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.634582][T32719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.635056][T32719] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.635300][T32719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.834468][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.849697][T32719] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 579.137512][T32740] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 579.374703][T32751] dvmrp1: left allmulticast mode [ 579.377961][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.513715][T32757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12691'. [ 579.513803][T32755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12691'. [ 579.597186][T32760] block nbd0: not configured, cannot reconfigure [ 579.714707][ T5834] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.858196][T29651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.254322][ T328] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.254569][ T328] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.256146][ T330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.257194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.307388][ T332] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.307530][ T332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 580.307892][ T332] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.308200][ T332] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.327458][ T332] bridge0: entered promiscuous mode [ 580.327573][ T332] bridge0: entered allmulticast mode [ 580.730323][ T358] af_packet: tpacket_rcv: packet too big, clamped from 4080 to 3952. macoff=96 [ 580.905017][ T365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12723'. [ 580.953122][ T368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12722'. [ 581.319964][ T381] syzkaller1: entered promiscuous mode [ 581.319990][ T381] syzkaller1: entered allmulticast mode [ 581.589659][ T399] netlink: 'syz.2.12738': attribute type 1 has an invalid length. [ 581.589684][ T399] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.12738'. [ 581.941320][ T416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12745'. [ 581.959379][ T420] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12744'. [ 581.963020][ T416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12745'. [ 582.039173][ T422] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12747'. [ 582.492803][ T450] block nbd0: not configured, cannot reconfigure [ 582.930273][ T473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12769'. [ 583.114529][ T484] netlink: 'syz.0.12773': attribute type 12 has an invalid length. [ 583.116485][ T484] netlink: 'syz.0.12773': attribute type 12 has an invalid length. [ 583.378238][ C1] net_ratelimit: 12 callbacks suppressed [ 583.378264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.379390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 583.541773][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.028985][T29651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.349181][ T543] netlink: 'syz.3.12793': attribute type 1 has an invalid length. [ 584.521291][ T555] __nla_validate_parse: 28 callbacks suppressed [ 584.521316][ T555] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12794'. [ 584.521524][ T555] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12794'. [ 584.521789][ T555] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12794'. [ 584.522007][ T555] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12794'. [ 584.522253][ T555] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12794'. [ 584.522468][ T555] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12794'. [ 584.524124][ T555] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12794'. [ 584.524347][ T555] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12794'. [ 584.524575][ T555] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12794'. [ 584.524803][ T555] netlink: 5 bytes leftover after parsing attributes in process `syz.1.12794'. [ 584.782121][ T568] netlink: 'syz.1.12802': attribute type 1 has an invalid length. [ 584.782362][ T568] netlink: 'syz.1.12802': attribute type 1 has an invalid length. [ 584.933756][ T574] netlink: 'syz.4.12806': attribute type 21 has an invalid length. [ 584.934447][ T574] netlink: 'syz.4.12806': attribute type 21 has an invalid length. [ 585.070202][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.343206][ T601] netlink: 'syz.0.12817': attribute type 1 has an invalid length. [ 585.445577][ T601] 8021q: adding VLAN 0 to HW filter on device bond4 [ 585.502325][ T605] bond4: (slave geneve3): making interface the new active one [ 585.506561][ T605] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 585.781152][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.098738][T29651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.100005][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.521263][ T660] bridge2: entered promiscuous mode [ 586.521336][ T660] bridge2: entered allmulticast mode [ 586.792373][ T681] netlink: 'syz.0.12854': attribute type 2 has an invalid length. [ 586.844656][ T997] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 586.867054][ T679] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 586.956271][ T686] tls_set_device_offload: netdev not found [ 587.141482][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.222719][ T701] ip_tables: iptables: counters copy to user failed while replacing table [ 587.376167][ T693] hsr0 (unregistering): left allmulticast mode [ 587.850493][ T731] bond0: invalid NS target :: specified for addition [ 587.850527][ T731] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 588.414127][ T761] netlink: 'syz.0.12888': attribute type 5 has an invalid length. [ 588.419239][ T764] netlink: 'syz.2.12890': attribute type 4 has an invalid length. [ 588.423852][ T764] netlink: 'syz.2.12890': attribute type 4 has an invalid length. [ 588.446944][T29651] C speed is unknown, defaulting to 1000 [ 588.446971][T29651] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 588.818412][ T5829] net_ratelimit: 2 callbacks suppressed [ 588.818433][ T5829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.977997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.129138][ T809] ip_tables: iptables: counters copy to user failed while replacing table [ 589.228920][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.660860][ T838] __nla_validate_parse: 27 callbacks suppressed [ 589.660883][ T838] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12916'. [ 589.660913][ T838] netlink: 'syz.0.12916': attribute type 7 has an invalid length. [ 589.660928][ T838] netlink: 'syz.0.12916': attribute type 8 has an invalid length. [ 589.660943][ T838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12916'. [ 589.865207][ T849] netlink: 'syz.2.12920': attribute type 13 has an invalid length. [ 589.865230][ T849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12920'. [ 589.874543][ T849] netlink: 'syz.2.12920': attribute type 13 has an invalid length. [ 589.874564][ T849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12920'. [ 590.018000][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.249375][ T869] netlink: 112 bytes leftover after parsing attributes in process `syz.3.12933'. [ 590.274399][ T5646] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.470838][ T886] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12938'. [ 590.578077][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 590.626154][ T893] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12939'. [ 591.298338][T29651] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.406073][ T959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12960'. [ 591.665731][ T966] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 591.681205][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.683827][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.771460][ T968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.774280][ T968] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.849392][ T968] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 591.898571][ T5756] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 592.227594][ T989] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12971'. [ 592.338159][ T5756] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 592.399106][T21967] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 592.817508][ T1016] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 592.817602][ T1016] syzkaller1: Refused to change device type [ 593.001707][ T5300] veth0_vlan: left promiscuous mode [ 593.056595][T29651] veth0_vlan: entered promiscuous mode [ 593.460745][ T1000] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 593.461009][ T1000] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 593.682331][ T1069] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12995'. [ 593.779319][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 593.998277][ T5646] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 594.024150][ T1096] netlink: 'syz.3.13001': attribute type 10 has an invalid length. [ 594.064942][ T1096] geneve3: entered promiscuous mode [ 594.064968][ T1096] geneve3: entered allmulticast mode [ 594.684839][ T1127] gretap0: entered promiscuous mode [ 594.700423][ T1127] __nla_validate_parse: 7 callbacks suppressed [ 594.700445][ T1127] netlink: 5 bytes leftover after parsing attributes in process `syz.0.13014'. [ 594.710869][ T1127] 0ªî{X¹¦: renamed from gretap0 [ 594.762331][ T1127] 0ªî{X¹¦: left promiscuous mode [ 594.762355][ T1127] 0ªî{X¹¦: entered allmulticast mode [ 594.782552][ T1131] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13016'. [ 594.782891][ T1127] net_ratelimit: 6 callbacks suppressed [ 594.782906][ T1127] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 595.009027][ T1139] netlink: 'syz.4.13019': attribute type 1 has an invalid length. [ 595.050607][ T1139] 8021q: adding VLAN 0 to HW filter on device bond4 [ 595.133221][ T1139] bond4: (slave gretap1): making interface the new active one [ 595.164779][ T1139] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 595.245145][ T1149] netlink: 'syz.2.13023': attribute type 15 has an invalid length. [ 595.286608][ T1149] netlink: 'syz.2.13023': attribute type 15 has an invalid length. [ 595.304721][ T1000] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 595.304845][ T1000] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 595.304883][ T1000] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 595.304921][ T1000] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 595.445222][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.227764][ T1197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13047'. [ 596.351394][ T30] audit: type=1800 audit(1793886682.468:2): pid=1203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13046" name=0A dev="tmpfs" ino=13418 res=0 errno=-22 [ 596.517548][ T1214] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 596.791846][ T1226] syz_tun: entered allmulticast mode [ 596.793211][ T1225] syz_tun: left allmulticast mode [ 596.916964][ T1232] syzkaller1: entered promiscuous mode [ 596.916989][ T1232] syzkaller1: entered allmulticast mode [ 597.184959][ T1256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13067'. [ 597.185000][ T1256] netlink: 'syz.3.13067': attribute type 10 has an invalid length. [ 597.185018][ T1256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13067'. [ 597.304710][ T30] audit: type=1800 audit(1793886683.418:3): pid=1258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.13068" name=680B20 dev="tmpfs" ino=12914 res=0 errno=-22 [ 597.363362][ T1262] netlink: 27 bytes leftover after parsing attributes in process `syz.1.13069'. [ 597.388163][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 597.619907][ T997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.721143][ T1278] gretap1: entered promiscuous mode [ 597.722250][ T1278] batman_adv: batadv0: Adding interface: gretap1 [ 597.722267][ T1278] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 597.722320][ T1278] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 597.983647][ T1286] netdevsim netdevsim3 netdevsim2: IPsec offload requires 128 bit authentication [ 598.258132][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 598.488421][ T1323] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13094'. [ 599.065722][ T1354] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13106'. [ 599.263596][ T1360] netlink: 'syz.4.13109': attribute type 1 has an invalid length. [ 599.289901][ T1360] bond5: entered promiscuous mode [ 599.290276][ T1360] 8021q: adding VLAN 0 to HW filter on device bond5 [ 599.291771][ T1362] mac80211_hwsim hwsim9 syzkaller1: entered promiscuous mode [ 599.291796][ T1362] mac80211_hwsim hwsim9 syzkaller1: entered allmulticast mode [ 599.344815][ T1360] bond5: (slave bridge7): making interface the new active one [ 599.344842][ T1360] bridge7: entered promiscuous mode [ 599.346074][ T1360] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 599.416897][ T1366] netlink: 'syz.2.13111': attribute type 20 has an invalid length. [ 599.416914][ T1366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13111'. [ 599.417107][ T1366] netlink: 'syz.2.13111': attribute type 20 has an invalid length. [ 599.417160][ T1366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13111'. [ 599.587802][ T1373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.814697][ T1382] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13117'. [ 599.829403][ T1382] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13117'. [ 599.829695][ T1382] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13117'. [ 599.829913][ T1382] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13117'. [ 599.830141][ T1382] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13117'. [ 599.830385][ T1382] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13117'. [ 599.830598][ T1382] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13117'. [ 599.830855][ T1382] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13117'. [ 599.831063][ T1382] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13117'. [ 599.831282][ T1382] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13117'. [ 600.345434][ T1411] netlink: 'syz.3.13130': attribute type 18 has an invalid length. [ 600.398044][ T1411] netlink: 'syz.3.13130': attribute type 18 has an invalid length. [ 600.471714][ T1419] mac80211_hwsim hwsim9 syzkaller1: left promiscuous mode [ 600.471746][ T1419] mac80211_hwsim hwsim9 syzkaller1: left allmulticast mode [ 600.610624][ T1423] ip_tables: iptables: counters copy to user failed while replacing table [ 600.714581][ T1431] netlink: 'syz.4.13140': attribute type 11 has an invalid length. [ 600.724657][ T1431] netlink: 'syz.4.13140': attribute type 11 has an invalid length. [ 601.170994][ T1457] xt_hashlimit: size too large, truncated to 1048576 [ 601.601798][ T1474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.738741][T21967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.869865][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.918440][ T1549] netlink: 'syz.1.13193': attribute type 1 has an invalid length. [ 602.956550][ T1549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 603.240238][ T30] audit: type=1800 audit(1793886689.358:4): pid=1564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.13200" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=13547 res=0 errno=-22 [ 603.308806][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.640023][ T1583] ip_tables: iptables: counters copy to user failed while replacing table [ 603.872980][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056fefc00: rx timeout, send abort [ 603.906620][ T1593] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 603.918450][ T1592] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 603.945720][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 603.993844][ T1595] netlink: 'syz.0.13215': attribute type 30 has an invalid length. [ 604.005572][ T1595] netlink: 'syz.0.13215': attribute type 30 has an invalid length. [ 604.149365][ T1597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 604.257228][ T1605] syzkaller1: entered promiscuous mode [ 604.257285][ T1605] syzkaller1: entered allmulticast mode [ 604.373035][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056fefc00: abort rx timeout. Force session deactivation [ 604.374601][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056e0f000: rx timeout, send abort [ 604.457749][ T1612] syzkaller1: entered promiscuous mode [ 604.457777][ T1612] syzkaller1: entered allmulticast mode [ 604.874653][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056e0f000: abort rx timeout. Force session deactivation [ 605.001985][ T1642] __nla_validate_parse: 64 callbacks suppressed [ 605.002009][ T1642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13238'. [ 605.298222][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 605.394020][ T1661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13245'. [ 605.398719][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880459fec00: rx timeout, send abort [ 605.580283][ T4955] block nbd0: Receive control failed (result -107) [ 605.873029][ T1685] net_ratelimit: 4 callbacks suppressed [ 605.873052][ T1685] ip_tables: iptables: counters copy to user failed while replacing table [ 605.898773][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880459fec00: abort rx timeout. Force session deactivation [ 606.443477][ T1718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13263'. [ 606.487796][ T1720] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13262'. [ 606.541344][ T1678] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 606.541500][ T1678] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 606.794934][ T1734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13265'. [ 607.497706][ T1765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.627613][ T1771] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13277'. [ 607.655649][ T1776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13278'. [ 607.778820][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.370498][ T1812] netlink: 'syz.2.13295': attribute type 10 has an invalid length. [ 608.389471][ T1812] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 608.536829][ T1821] netlink: 'syz.3.13299': attribute type 5 has an invalid length. [ 608.536854][ T1821] netlink: 'syz.3.13299': attribute type 9 has an invalid length. [ 608.536871][ T1821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13299'. [ 608.621312][ T1825] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13301'. [ 608.852398][ T1834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13305'. [ 609.016783][ T1842] pim6reg1: entered promiscuous mode [ 609.016800][ T1842] pim6reg1: entered allmulticast mode [ 609.830010][ T1888] vlan2: entered promiscuous mode [ 609.830033][ T1888] bond0: entered promiscuous mode [ 610.158730][ T1906] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 610.316827][ T1913] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 610.564981][ T1925] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.566512][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.604091][ T1931] __nla_validate_parse: 4 callbacks suppressed [ 610.604111][ T1931] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13350'. [ 610.795300][ T1937] pimreg: entered allmulticast mode [ 610.815380][ T1941] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13355'. [ 610.832877][ T1935] pimreg: left allmulticast mode [ 610.875177][ T1944] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13355'. [ 610.899960][ T1941] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.900158][ T1941] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.275189][ T1963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13366'. [ 611.297702][ T1963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.297730][ T1963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.315144][ T1963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.315172][ T1963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.406412][ T1966] netlink: 'syz.4.13367': attribute type 21 has an invalid length. [ 611.406433][ T1966] netlink: 'syz.4.13367': attribute type 22 has an invalid length. [ 611.406446][ T1966] netlink: 'syz.4.13367': attribute type 23 has an invalid length. [ 611.406459][ T1966] netlink: 'syz.4.13367': attribute type 25 has an invalid length. [ 611.406471][ T1966] netlink: 'syz.4.13367': attribute type 26 has an invalid length. [ 611.406484][ T1966] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13367'. [ 611.822015][ T1983] nbd: nbd1 already in use [ 611.826573][ T1983] block nbd1: NBD_DISCONNECT [ 611.826601][ T1983] block nbd1: Send disconnect failed -32 [ 611.826620][ T1983] block nbd1: shutting down sockets [ 612.011948][ T1991] netlink: 'syz.2.13378': attribute type 7 has an invalid length. [ 612.012307][ T1991] netlink: 'syz.2.13378': attribute type 7 has an invalid length. [ 612.387043][ T2012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13384'. [ 612.387066][ T2012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13384'. [ 612.668457][ T2027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13391'. [ 612.668484][ T2027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13391'. [ 612.703817][ T2027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13391'. [ 612.778791][ T62] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 612.778855][ T62] netdevsim netdevsim3 : set [0, 1] type 1 family 0 port 256 - 0 [ 612.778892][ T62] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 612.778945][ T62] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 612.778981][ T62] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 612.779017][ T62] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 612.779053][ T62] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 612.983786][ T2039] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.984799][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.622532][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.227731][ T2113] lo: Caught tx_queue_len zero misconfig [ 614.506399][ T2122] validate_nla: 4 callbacks suppressed [ 614.506419][ T2122] netlink: 'syz.3.13433': attribute type 7 has an invalid length. [ 614.837749][ T2135] tipc: New replicast peer: 172.20.20.187 [ 614.848761][ T2135] tipc: Enabled bearer , priority 10 [ 614.978037][ T5829] page_pool_release_retry() stalled pool shutdown: id 65, 1 inflight 60 sec [ 615.166323][ T2154] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 615.426566][ T2160] syzkaller1: entered promiscuous mode [ 615.426591][ T2160] syzkaller1: entered allmulticast mode [ 615.547297][ T2175] veth0: entered promiscuous mode [ 615.547565][ T2177] veth1_to_bridge: entered promiscuous mode [ 615.562303][ T2173] veth1_to_bridge: left promiscuous mode [ 615.562343][ T2173] veth0: left promiscuous mode [ 615.906414][ T2198] __nla_validate_parse: 8 callbacks suppressed [ 615.906436][ T2198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13464'. [ 616.190672][ T2207] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 616.525732][ T2233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13476'. [ 616.615406][ T2237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13479'. [ 616.658248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.868568][ T5646] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 616.944374][ T2248] netlink: 'syz.3.13484': attribute type 1 has an invalid length. [ 617.140027][ T5769] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 617.167414][ T2263] netlink: 'syz.2.13491': attribute type 1 has an invalid length. [ 617.331761][ T2263] bond5: entered promiscuous mode [ 617.335467][ T2263] 8021q: adding VLAN 0 to HW filter on device bond5 [ 617.481500][ T2278] 8021q: adding VLAN 0 to HW filter on device bond5 [ 617.482614][ T2278] bond5: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 617.482638][ T2278] bond5: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 617.522271][ T2278] bond5: (slave ip6gre3): making interface the new active one [ 617.522298][ T2278] ip6gre3: entered promiscuous mode [ 617.524080][ T2278] bond5: (slave ip6gre3): Enslaving as an active interface with an up link [ 617.698337][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.018686][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.018940][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.019391][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.019772][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.136152][ T2313] netlink: 'syz.2.13504': attribute type 1 has an invalid length. [ 618.233590][ T2318] bond6: (slave gretap2): making interface the new active one [ 618.234413][ T2318] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 618.415975][ T2332] netlink: 'syz.3.13510': attribute type 1 has an invalid length. [ 618.415992][ T2332] netlink: 'syz.3.13510': attribute type 4 has an invalid length. [ 618.416001][ T2332] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.13510'. [ 618.639540][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.640628][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.738388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.808350][ T5769] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.809452][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.948293][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.528195][ T2377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13531'. [ 619.931507][ T2395] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13536'. [ 620.131860][ T2406] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13541'. [ 620.313798][ T2413] netlink: 'syz.0.13545': attribute type 8 has an invalid length. [ 620.313821][ T2413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13545'. [ 621.173075][ T2430] netlink: 'syz.1.13551': attribute type 19 has an invalid length. [ 621.173101][ T2430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13551'. [ 621.173388][ T2430] netlink: 'syz.1.13551': attribute type 19 has an invalid length. [ 621.173407][ T2430] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13551'. [ 621.298203][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 622.277652][ T2483] syzkaller1: entered promiscuous mode [ 622.277678][ T2483] syzkaller1: entered allmulticast mode [ 622.439155][ T2491] veth0: entered promiscuous mode [ 622.501130][ T2491] veth0: left promiscuous mode [ 622.814495][ T2519] netlink: 'syz.3.13581': attribute type 1 has an invalid length. [ 622.876475][ T2519] bond1: entered promiscuous mode [ 622.876961][ T2519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 622.917192][ T2519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 622.917573][ T2519] bond1: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 622.917594][ T2519] bond1: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 622.946965][ T2519] bond1: (slave ip6gre2): making interface the new active one [ 622.946988][ T2519] ip6gre2: entered promiscuous mode [ 622.962918][ T2519] bond1: (slave ip6gre2): Enslaving as an active interface with an up link [ 623.587635][ T2571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13599'. [ 623.608972][ T2571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13599'. [ 623.755403][ T2576] IPv6: sit1: Disabled Multicast RS [ 623.938219][ C1] net_ratelimit: 29 callbacks suppressed [ 623.938243][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.196680][ T2599] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13609'. [ 624.374877][ T2595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13608'. [ 624.507437][ T1000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.656593][ T2618] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13613'. [ 624.988142][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 625.048982][ T2650] netlink: 'syz.2.13627': attribute type 4 has an invalid length. [ 625.079941][ T5756] C speed is unknown, defaulting to 1000 [ 625.079972][ T5756] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 625.080172][ T2650] netlink: 'syz.2.13627': attribute type 4 has an invalid length. [ 625.091503][ T5756] C speed is unknown, defaulting to 1000 [ 625.091577][ T5756] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 625.256487][ T2654] netlink: 'syz.2.13629': attribute type 5 has an invalid length. [ 625.645740][ T2675] GUP no longer grows the stack in syz.1.13636 (2675): 200000003000-20000000a000 (200000001000) [ 625.645801][ T2675] CPU: 1 UID: 0 PID: 2675 Comm: syz.1.13636 Not tainted syzkaller #0 PREEMPT(full) [ 625.645854][ T2675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 625.645876][ T2675] Call Trace: [ 625.645908][ T2675] [ 625.645975][ T2675] dump_stack_lvl+0xe8/0x150 [ 625.646120][ T2675] __get_user_pages+0x23b1/0x2750 [ 625.646183][ T2675] ? lock_acquire+0x115/0x350 [ 625.646290][ T2675] ? __gup_longterm_locked+0xcb2/0x16f0 [ 625.646324][ T2675] ? rcu_is_watching+0x16/0xb0 [ 625.646370][ T2675] __gup_longterm_locked+0xe24/0x16f0 [ 625.646431][ T2675] gup_fast_fallback+0x360/0x27a0 [ 625.646539][ T2675] ? __pfx_gup_fast_fallback+0x10/0x10 [ 625.646574][ T2675] ? is_valid_gup_args+0x11f/0x200 [ 625.646609][ T2675] ? get_user_pages_fast+0x4d/0xb0 [ 625.646643][ T2675] __iov_iter_get_pages_alloc+0x378/0xa40 [ 625.646752][ T2675] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 625.646897][ T2675] ? __fget_files+0x2a/0x420 [ 625.646956][ T2675] iov_iter_get_pages2+0x5e/0xa0 [ 625.646987][ T2675] __se_sys_vmsplice+0x844/0x16f0 [ 625.647040][ T2675] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 625.647070][ T2675] ? __pfx_futex_wait+0x10/0x10 [ 625.647198][ T2675] do_syscall_64+0x166/0x520 [ 625.647263][ T2675] ? trace_irq_disable+0x3b/0x140 [ 625.647300][ T2675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.647338][ T2675] ? clear_bhb_loop+0x70/0xc0 [ 625.647367][ T2675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.647396][ T2675] RIP: 0033:0x7f0f6119fb19 [ 625.647424][ T2675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.647444][ T2675] RSP: 002b:00007f0f62084028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 625.647505][ T2675] RAX: ffffffffffffffda RBX: 00007f0f61425fa0 RCX: 00007f0f6119fb19 [ 625.647522][ T2675] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 625.647536][ T2675] RBP: 00007f0f61237b70 R08: 0000000000000000 R09: 0000000000000000 [ 625.647551][ T2675] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 625.647563][ T2675] R13: 00007f0f61426038 R14: 00007f0f61425fa0 R15: 00007ffea4589888 [ 625.647602][ T2675] [ 625.709077][ T2680] syzkaller1: entered promiscuous mode [ 625.709099][ T2680] syzkaller1: entered allmulticast mode [ 626.018149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.705838][ T2732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.830026][ T2736] syzkaller1: entered promiscuous mode [ 626.830050][ T2736] syzkaller1: entered allmulticast mode [ 626.840670][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.898519][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.998281][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.058358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.071385][ T5756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.367542][ T2759] tipc: Enabled bearer , priority 10 [ 627.381457][ T2755] tipc: Resetting bearer [ 627.420584][ T2766] netlink: 'syz.4.13662': attribute type 1 has an invalid length. [ 627.460437][ T2755] tipc: Disabling bearer [ 627.544120][ T2769] 8021q: adding VLAN 0 to HW filter on device bond7 [ 627.556238][ T2769] bond6: (slave bond7): making interface the new active one [ 627.576046][ T2769] bond6: (slave bond7): Enslaving as an active interface with an up link [ 627.635172][ T2779] mac80211_hwsim hwsim9 syzkaller1: entered promiscuous mode [ 627.635203][ T2779] mac80211_hwsim hwsim9 syzkaller1: entered allmulticast mode [ 627.759251][ T2792] netlink: 76 bytes leftover after parsing attributes in process `syz.4.13668'. [ 627.985926][ T2803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13674'. [ 628.007460][ T2805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13672'. [ 628.007594][ T2805] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 628.082243][ T2805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 628.279164][ T2820] netlink: 'syz.3.13679': attribute type 1 has an invalid length. [ 628.279188][ T2820] netlink: 'syz.3.13679': attribute type 4 has an invalid length. [ 628.279203][ T2820] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.13679'. [ 628.280011][ T2820] netlink: 'syz.3.13679': attribute type 1 has an invalid length. [ 628.280031][ T2820] netlink: 'syz.3.13679': attribute type 4 has an invalid length. [ 628.280046][ T2820] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.13679'. [ 628.434478][ T2827] netlink: 'syz.4.13681': attribute type 1 has an invalid length. [ 628.517957][ T2827] bond8: (slave geneve3): making interface the new active one [ 628.518717][ T2827] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 628.529499][ T50] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 628.529629][ T50] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 628.529715][ T50] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 628.529807][ T50] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 20004 - 0 [ 628.765951][ T2851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13685'. [ 629.138018][ C1] net_ratelimit: 11 callbacks suppressed [ 629.138041][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.447780][ T2892] ip_tables: iptables: counters copy to user failed while replacing table [ 629.621337][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.687396][ T2905] Bluetooth: ISO socket layer initialized [ 630.178096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.676740][ T2937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13718'. [ 630.711965][ T2937] ipvlan3: entered allmulticast mode [ 630.711990][ T2937] virt_wifi0: entered allmulticast mode [ 630.724182][ T2937] batman_adv: batadv0: Adding interface: ipvlan3 [ 630.724243][ T2937] batman_adv: batadv0: Interface activated: ipvlan3 [ 630.779204][ T2937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13718'. [ 630.832889][ T2937] ipvlan4: entered allmulticast mode [ 630.840763][ T2937] batman_adv: batadv0: Adding interface: ipvlan4 [ 630.840783][ T2937] batman_adv: The newly added mac address (0e:06:ad:1a:60:1d) already exists on: ipvlan3 [ 630.840801][ T2937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.840815][ T2937] batman_adv: batadv0: Interface activated: ipvlan4 [ 630.890657][ T2947] ip_tables: iptables: counters copy to user failed while replacing table [ 630.918172][ T2947] syzkaller1: entered promiscuous mode [ 630.918196][ T2947] syzkaller1: entered allmulticast mode [ 631.218151][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.258028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.570629][ T3026] batman_adv: batadv0: Adding interface: syzkaller0 [ 632.570649][ T3026] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.570682][ T3026] batman_adv: batadv0: Interface activated: syzkaller0 [ 632.599672][ T3025] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 632.672429][ T3028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13757'. [ 632.702452][ T3025] batman_adv: batadv0: Removing interface: syzkaller0 [ 633.173420][ T3047] syzkaller1: entered promiscuous mode [ 633.173459][ T3047] syzkaller1: entered allmulticast mode [ 633.197780][ T3049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13765'. [ 633.197982][ T3049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13765'. [ 633.198219][ T3049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13765'. [ 633.198239][ T3049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13765'. [ 633.298136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.129362][ T3096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13786'. [ 634.129624][ T3096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13786'. [ 634.459207][ T3109] netlink: 'syz.1.13791': attribute type 1 has an invalid length. [ 634.991057][ T3130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13799'. [ 635.144123][ T3138] syzkaller1: entered promiscuous mode [ 635.144149][ T3138] syzkaller1: entered allmulticast mode [ 635.612865][ T3158] mac80211_hwsim hwsim9 syzkaller1: left promiscuous mode [ 635.612895][ T3158] mac80211_hwsim hwsim9 syzkaller1: left allmulticast mode [ 635.669888][ T3162] trusted_key: syz.4.13814 sent an empty control message without MSG_MORE. [ 636.064708][ T3181] batman_adv: batadv0: Adding interface: syzkaller0 [ 636.064727][ T3181] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.064760][ T3181] batman_adv: batadv0: Interface activated: syzkaller0 [ 636.110742][ T3180] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 636.179811][ T3180] batman_adv: batadv0: Removing interface: syzkaller0 [ 636.424346][ T3199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13832'. [ 637.064073][ T3239] netlink: 21 bytes leftover after parsing attributes in process `syz.3.13845'. [ 637.177769][ T3251] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13849'. [ 637.391607][ T3258] netlink: 'syz.0.13851': attribute type 21 has an invalid length. [ 637.391633][ T3258] netlink: 'syz.0.13851': attribute type 22 has an invalid length. [ 637.391648][ T3258] netlink: 'syz.0.13851': attribute type 23 has an invalid length. [ 637.391663][ T3258] netlink: 'syz.0.13851': attribute type 25 has an invalid length. [ 637.753330][ T3278] only policy match revision 0 supported [ 637.753345][ T3278] unable to load match [ 638.431308][ T3307] tipc: Failed to remove unknown binding: 66,1,1/1593835523:3690235563/3690235565 [ 638.431345][ T3307] tipc: Failed to remove unknown binding: 66,1,1/1593835523:3690235563/3690235565 [ 638.541979][ T3309] veth1_to_bond: entered allmulticast mode [ 638.542036][ T3313] veth1_to_bond: left allmulticast mode [ 638.939682][ T3335] __nla_validate_parse: 2 callbacks suppressed [ 638.939705][ T3335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13885'. [ 638.985182][ T3338] sit0: entered promiscuous mode [ 639.001523][ T3338] netlink: 'syz.1.13887': attribute type 1 has an invalid length. [ 639.001547][ T3338] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13887'. [ 639.757447][ T3361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13897'. [ 640.722215][ T3404] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 640.823657][ T3407] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 640.993264][ T3417] ip_tables: iptables: counters copy to user failed while replacing table [ 641.200501][ T3429] syzkaller1: entered promiscuous mode [ 641.200525][ T3429] syzkaller1: entered allmulticast mode [ 641.403999][ T3436] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13926'. [ 641.404456][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.404569][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 641.404879][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 641.404989][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 641.452437][ T3436] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13926'. [ 641.578260][ T3441] PKCS7: Unknown OID: [4] (bad) [ 641.578307][ T3441] PKCS7: Only support pkcs7_signedData type [ 641.861721][ T3459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13937'. [ 641.862687][ T3459] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13937'. [ 641.993858][ T3465] netlink: 'syz.4.13940': attribute type 1 has an invalid length. [ 642.213064][ T3473] netlink: 'syz.2.13942': attribute type 1 has an invalid length. [ 643.071560][ T3514] netlink: 'syz.1.13958': attribute type 15 has an invalid length. [ 644.966259][ T3578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13982'. [ 645.005077][ T3578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13982'. [ 645.271742][ T3584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13985'. [ 645.343080][ T3588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13986'. [ 645.387218][ T3588] 8021q: adding VLAN 0 to HW filter on device team1 [ 645.524701][ T3601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13989'. [ 645.774947][ T3614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13995'. [ 645.934884][ T3618] l2tp_ppp: sess 2/0: no socket in recv [ 646.028331][ T3625] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.028359][ T3625] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.105958][ T3628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14003'. [ 646.178101][ T3625] batman_adv: batadv0: Removing interface: gretap1 [ 646.178915][ T3625] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 646.178937][ T3625] batman_adv: batadv0: Removing interface: ipvlan3 [ 646.184033][ T3625] batman_adv: batadv0: Interface deactivated: ipvlan4 [ 646.184053][ T3625] batman_adv: batadv0: Removing interface: ipvlan4 [ 646.566265][ T3642] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 646.752465][ T3655] netlink: 'syz.4.14011': attribute type 4 has an invalid length. [ 646.752494][ T3655] netlink: 17 bytes leftover after parsing attributes in process `syz.4.14011'. [ 647.572005][ T3674] netlink: 'syz.1.14019': attribute type 1 has an invalid length. [ 647.641344][ T3674] bond3: entered promiscuous mode [ 647.641868][ T3674] 8021q: adding VLAN 0 to HW filter on device bond3 [ 647.686423][ T3674] 8021q: adding VLAN 0 to HW filter on device bond3 [ 647.699763][ T3674] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 647.699788][ T3674] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 647.733018][ T3674] bond3: (slave xfrm1): making interface the new active one [ 647.733045][ T3674] xfrm1: entered promiscuous mode [ 647.761017][ T3674] xfrm1: left promiscuous mode [ 648.065587][ T3683] netlink: 9 bytes leftover after parsing attributes in process `syz.1.14021'. [ 648.079088][ T3683] gretap0: entered promiscuous mode [ 648.102459][ T3683] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14021'. [ 648.102674][ T3683] 0ªî{X¹¦: renamed from gretap0 [ 648.106667][ T3683] 0ªî{X¹¦: left promiscuous mode [ 648.106687][ T3683] 0ªî{X¹¦: entered allmulticast mode [ 648.137604][ T3683] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 648.801531][ T5769] rxe_eth0 speed is unknown, defaulting to 1000 [ 649.543672][ T3725] Timeout policy `syz1' can only be used by L3 protocol number 34948 [ 650.200133][ T3744] nbd4: detected capacity change from 0 to 63 [ 650.203439][ T3744] block nbd4: NBD_DISCONNECT [ 650.232857][ T3744] block nbd4: Disconnected due to user request. [ 650.236598][ T3744] block nbd4: shutting down sockets [ 650.256535][ T2117] [ 650.258916][ T2117] ====================================================== [ 650.266031][ T2117] WARNING: possible circular locking dependency detected [ 650.273155][ T2117] syzkaller #0 Not tainted [ 650.277605][ T2117] ------------------------------------------------------ [ 650.284644][ T2117] kworker/1:1H/2117 is trying to acquire lock: [ 650.290877][ T2117] ffff888059a47a68 (&nsock->tx_lock){+.+.}-{4:4}, at: nbd_queue_rq+0x373/0xff0 [ 650.300001][ T2117] [ 650.300001][ T2117] but task is already holding lock: [ 650.307395][ T2117] ffff88802862e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 650.315885][ T2117] [ 650.315885][ T2117] which lock already depends on the new lock. [ 650.315885][ T2117] [ 650.326314][ T2117] [ 650.326314][ T2117] the existing dependency chain (in reverse order) is: [ 650.335381][ T2117] [ 650.335381][ T2117] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 650.342754][ T2117] __mutex_lock+0x197/0x15a0 [ 650.347909][ T2117] nbd_queue_rq+0xc1/0xff0 [ 650.352894][ T2117] blk_mq_dispatch_rq_list+0x499/0x1990 [ 650.359085][ T2117] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 650.366054][ T2117] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 650.372641][ T2117] blk_mq_run_work_fn+0x167/0x2f0 [ 650.378230][ T2117] process_scheduled_works+0xc3d/0x1630 [ 650.384392][ T2117] worker_thread+0xa47/0xfb0 [ 650.389638][ T2117] kthread+0x38b/0x480 [ 650.394267][ T2117] ret_from_fork+0x514/0xb70 [ 650.399531][ T2117] ret_from_fork_asm+0x1a/0x30 [ 650.404864][ T2117] [ 650.404864][ T2117] -> #5 (set->srcu){.+.+}-{0:0}: [ 650.412030][ T2117] __synchronize_srcu+0xca/0x2f0 [ 650.417538][ T2117] elevator_switch+0x1e8/0x7b0 [ 650.422989][ T2117] elevator_change+0x2fa/0x480 [ 650.428391][ T2117] elevator_set_default+0x375/0x440 [ 650.434169][ T2117] blk_register_queue+0x404/0x4f0 [ 650.439829][ T2117] __add_disk+0x6b8/0xdb0 [ 650.444823][ T2117] add_disk_fwnode+0x100/0x3a0 [ 650.450166][ T2117] nbd_dev_add+0x733/0xb60 [ 650.455151][ T2117] nbd_init+0x168/0x1f0 [ 650.459980][ T2117] do_one_initcall+0x250/0x870 [ 650.465322][ T2117] do_initcall_level+0x10a/0x1a0 [ 650.470933][ T2117] do_initcalls+0x59/0xa0 [ 650.475830][ T2117] kernel_init_freeable+0x29d/0x3e0 [ 650.481602][ T2117] kernel_init+0x22/0x1d0 [ 650.486515][ T2117] ret_from_fork+0x514/0xb70 [ 650.491674][ T2117] ret_from_fork_asm+0x1a/0x30 [ 650.497041][ T2117] [ 650.497041][ T2117] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 650.504920][ T2117] __mutex_lock+0x197/0x15a0 [ 650.510170][ T2117] elevator_change+0x1af/0x480 [ 650.515514][ T2117] elevator_set_none+0xb5/0x140 [ 650.520944][ T2117] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 650.527347][ T2117] nbd_start_device+0x189/0xb30 [ 650.532767][ T2117] nbd_genl_connect+0x167d/0x1cd0 [ 650.538441][ T2117] genl_family_rcv_msg_doit+0x233/0x340 [ 650.544825][ T2117] genl_rcv_msg+0x614/0x7a0 [ 650.549900][ T2117] netlink_rcv_skb+0x226/0x4a0 [ 650.555298][ T2117] genl_rcv+0x28/0x40 [ 650.559843][ T2117] netlink_unicast+0x8ef/0xa80 [ 650.565177][ T2117] netlink_sendmsg+0x7f0/0xb20 [ 650.570534][ T2117] sock_sendmsg_nosec+0x14e/0x190 [ 650.576273][ T2117] ____sys_sendmsg+0x54e/0x850 [ 650.581609][ T2117] ___sys_sendmsg+0x2a5/0x360 [ 650.586847][ T2117] __x64_sys_sendmsg+0x1b1/0x290 [ 650.592334][ T2117] do_syscall_64+0x166/0x520 [ 650.597484][ T2117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.603977][ T2117] [ 650.603977][ T2117] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 650.612688][ T2117] blk_alloc_queue+0x544/0x690 [ 650.618043][ T2117] __blk_mq_alloc_disk+0x194/0x390 [ 650.623709][ T2117] nbd_dev_add+0x494/0xb60 [ 650.628675][ T2117] nbd_init+0x168/0x1f0 [ 650.633376][ T2117] do_one_initcall+0x250/0x870 [ 650.638789][ T2117] do_initcall_level+0x10a/0x1a0 [ 650.644271][ T2117] do_initcalls+0x59/0xa0 [ 650.649158][ T2117] kernel_init_freeable+0x29d/0x3e0 [ 650.654931][ T2117] kernel_init+0x22/0x1d0 [ 650.659812][ T2117] ret_from_fork+0x514/0xb70 [ 650.664953][ T2117] ret_from_fork_asm+0x1a/0x30 [ 650.670252][ T2117] [ 650.670252][ T2117] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 650.677479][ T2117] fs_reclaim_acquire+0x71/0x100 [ 650.682962][ T2117] __kmalloc_cache_noprof+0x61/0x600 [ 650.688820][ T2117] tcp_sendmsg_fastopen+0x1e7/0x5f0 [ 650.694657][ T2117] tcp_sendmsg_locked+0x4d2b/0x53c0 [ 650.700403][ T2117] tcp_sendmsg+0x2f/0x50 [ 650.705201][ T2117] sock_sendmsg_nosec+0x10f/0x190 [ 650.710778][ T2117] __sys_sendto+0x408/0x5a0 [ 650.715892][ T2117] __x64_sys_sendto+0xde/0x100 [ 650.721238][ T2117] do_syscall_64+0x166/0x520 [ 650.726395][ T2117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.732829][ T2117] [ 650.732829][ T2117] -> #1 (sk_lock-AF_INET-NBD){+.+.}-{0:0}: [ 650.740846][ T2117] lock_sock_nested+0x41/0x100 [ 650.746161][ T2117] inet_shutdown+0x6a/0x390 [ 650.751313][ T2117] nbd_mark_nsock_dead+0x2cb/0x550 [ 650.756974][ T2117] recv_work+0x1d14/0x1e30 [ 650.761932][ T2117] process_scheduled_works+0xc3d/0x1630 [ 650.768029][ T2117] worker_thread+0xa47/0xfb0 [ 650.773187][ T2117] kthread+0x38b/0x480 [ 650.777803][ T2117] ret_from_fork+0x514/0xb70 [ 650.782938][ T2117] ret_from_fork_asm+0x1a/0x30 [ 650.788238][ T2117] [ 650.788238][ T2117] -> #0 (&nsock->tx_lock){+.+.}-{4:4}: [ 650.795987][ T2117] __lock_acquire+0x164c/0x2de0 [ 650.801375][ T2117] lock_acquire+0x115/0x350 [ 650.806420][ T2117] __mutex_lock+0x197/0x15a0 [ 650.811547][ T2117] nbd_queue_rq+0x373/0xff0 [ 650.816589][ T2117] blk_mq_dispatch_rq_list+0x499/0x1990 [ 650.822723][ T2117] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 650.829602][ T2117] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 650.836126][ T2117] blk_mq_run_work_fn+0x167/0x2f0 [ 650.841718][ T2117] process_scheduled_works+0xc3d/0x1630 [ 650.847818][ T2117] worker_thread+0xa47/0xfb0 [ 650.853488][ T2117] kthread+0x38b/0x480 [ 650.858108][ T2117] ret_from_fork+0x514/0xb70 [ 650.863241][ T2117] ret_from_fork_asm+0x1a/0x30 [ 650.868542][ T2117] [ 650.868542][ T2117] other info that might help us debug this: [ 650.868542][ T2117] [ 650.878786][ T2117] Chain exists of: [ 650.878786][ T2117] &nsock->tx_lock --> set->srcu --> &cmd->lock [ 650.878786][ T2117] [ 650.890889][ T2117] Possible unsafe locking scenario: [ 650.890889][ T2117] [ 650.898426][ T2117] CPU0 CPU1 [ 650.903837][ T2117] ---- ---- [ 650.909233][ T2117] lock(&cmd->lock); [ 650.913235][ T2117] lock(set->srcu); [ 650.919677][ T2117] lock(&cmd->lock); [ 650.926217][ T2117] lock(&nsock->tx_lock); [ 650.930831][ T2117] [ 650.930831][ T2117] *** DEADLOCK *** [ 650.930831][ T2117] [ 650.938982][ T2117] locks held by kworker/1:1H/2117: 4, last CPU#1: [ 650.945483][ T2117] #0: ffff8880212c6148 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 650.956562][ T2117] #1: ffffc90006f6fc40 ((work_completion)(&(&hctx->run_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 650.969489][ T2117] #2: ffff888028491798 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_work_fn+0x13f/0x2f0 [ 650.979002][ T2117] #3: ffff88802862e178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 650.987932][ T2117] [ 650.987932][ T2117] stack backtrace: [ 650.993835][ T2117] CPU: 1 UID: 0 PID: 2117 Comm: kworker/1:1H Not tainted syzkaller #0 PREEMPT(full) [ 651.003304][ T2117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 651.013372][ T2117] Workqueue: kblockd blk_mq_run_work_fn [ 651.018947][ T2117] Call Trace: [ 651.022242][ T2117] [ 651.025216][ T2117] dump_stack_lvl+0xe8/0x150 [ 651.029866][ T2117] print_circular_bug+0x2e2/0x300 [ 651.034956][ T2117] check_noncircular+0x12f/0x150 [ 651.039931][ T2117] __lock_acquire+0x164c/0x2de0 [ 651.044812][ T2117] ? irqentry_exit+0x2a0/0x9b0 [ 651.049626][ T2117] ? lockdep_hardirqs_on+0x7b/0x110 [ 651.054852][ T2117] ? irqentry_exit+0x2a0/0x9b0 [ 651.059635][ T2117] ? trace_irq_disable+0x3b/0x140 [ 651.064688][ T2117] lock_acquire+0x115/0x350 [ 651.069211][ T2117] ? nbd_queue_rq+0x373/0xff0 [ 651.073914][ T2117] __mutex_lock+0x197/0x15a0 [ 651.078550][ T2117] ? nbd_queue_rq+0x373/0xff0 [ 651.083254][ T2117] ? ret_from_fork_asm+0x1a/0x30 [ 651.088218][ T2117] ? unwind_next_frame+0x8f/0x2550 [ 651.093390][ T2117] ? nbd_queue_rq+0x373/0xff0 [ 651.098103][ T2117] ? __pfx___mutex_lock+0x10/0x10 [ 651.103158][ T2117] ? ret_from_fork_asm+0x1a/0x30 [ 651.108125][ T2117] ? stack_trace_save+0xa9/0x100 [ 651.113102][ T2117] ? __pfx_stack_trace_save+0x10/0x10 [ 651.118494][ T2117] nbd_queue_rq+0x373/0xff0 [ 651.123034][ T2117] ? __lock_acquire+0x1511/0x2de0 [ 651.128104][ T2117] ? __pfx_nbd_queue_rq+0x10/0x10 [ 651.133162][ T2117] blk_mq_dispatch_rq_list+0x499/0x1990 [ 651.138781][ T2117] ? sbitmap_get+0x229/0x390 [ 651.143529][ T2117] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 651.149533][ T2117] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 651.155367][ T2117] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 651.161720][ T2117] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 651.168505][ T2117] ? lock_acquire+0x115/0x350 [ 651.173209][ T2117] ? process_scheduled_works+0x97a/0x1630 [ 651.178960][ T2117] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 651.185136][ T2117] ? blk_mq_run_work_fn+0x13f/0x2f0 [ 651.190355][ T2117] blk_mq_run_work_fn+0x167/0x2f0 [ 651.195398][ T2117] ? process_scheduled_works+0x97a/0x1630 [ 651.201147][ T2117] process_scheduled_works+0xc3d/0x1630 [ 651.206739][ T2117] ? __pfx_process_scheduled_works+0x10/0x10 [ 651.212751][ T2117] ? assign_work+0x3cf/0x5d0 [ 651.217370][ T2117] worker_thread+0xa47/0xfb0 [ 651.222010][ T2117] ? __kthread_parkme+0x71/0x1f0 [ 651.226982][ T2117] kthread+0x38b/0x480 [ 651.231072][ T2117] ? __pfx_worker_thread+0x10/0x10 [ 651.236227][ T2117] ? __pfx_kthread+0x10/0x10 [ 651.240842][ T2117] ret_from_fork+0x514/0xb70 [ 651.245454][ T2117] ? __pfx_ret_from_fork+0x10/0x10 [ 651.250583][ T2117] ? __switch_to+0xc78/0x1410 [ 651.255288][ T2117] ? __pfx_kthread+0x10/0x10 [ 651.259906][ T2117] ret_from_fork_asm+0x1a/0x30 [ 651.264731][ T2117] [ 651.277892][ T2117] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 651.277929][ T2117] Buffer I/O error on dev nbd4, logical block 0, async page read [ 651.277953][ T2117] Buffer I/O error on dev nbd4, logical block 1, async page read [ 651.278010][ T2117] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 651.278034][ T2117] Buffer I/O error on dev nbd4, logical block 2, async page read [ 651.278050][ T2117] Buffer I/O error on dev nbd4, logical block 3, async page read [ 651.354118][ T827] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 651.354153][ T827] Buffer I/O error on dev nbd4, logical block 0, async page read [ 651.354245][ T827] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 651.354273][ T827] Buffer I/O error on dev nbd4, logical block 1, async page read [ 651.354346][ T827] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 651.354372][ T827] Buffer I/O error on dev nbd4, logical block 2, async page read [ 651.354455][ T827] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 651.354480][ T827] Buffer I/O error on dev nbd4, logical block 3, async page read [ 651.354558][ T827] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 651.354583][ T827] Buffer I/O error on dev nbd4, logical block 0, async page read [ 651.354650][ T827] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 651.354684][ T827] Buffer I/O error on dev nbd4, logical block 1, async page read [ 651.354751][ T827] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 651.355077][ T827] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 651.413155][ T3749] ldm_validate_partition_table(): Disk read failed. [ 651.416224][ T3749] Dev nbd4: unable to read RDB block 0 [ 651.447403][ T3749] nbd4: unable to read partition table [ 651.493868][ T3749] ldm_validate_partition_table(): Disk read failed. [ 651.497736][ T3749] Dev nbd4: unable to read RDB block 0 [ 651.502867][ T3749] nbd4: unable to read partition table [ 652.658239][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 652.660800][T21966] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 652.661158][T21966] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 652.661315][T21966] bond0: now running without any active interface!