last executing test programs: 3.297376379s ago: executing program 0 (id=4054): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x38, r1, 0x3, 0x70bd29, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 3.121003988s ago: executing program 2 (id=4059): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000012c0)=@newtaction={0x210, 0x30, 0xa20, 0x70bd26, 0x25dfdbfd, {}, [{0x1fc, 0x1, [@m_ipt={0x158, 0x7, 0x0, 0x0, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x85, 0x6, {0x400, 'raw\x00', 0x5, 0x7, "e7baf755bed1ecc3f5fc2df03b3d0f06d09ccf684e4411ebfca469e487dfafc236a2bd68996c4dd4ae902cbfc9d7f59928859ad2d968df34a1ed9135ff9e64c3c00d2e5d74e326e9476228c1aadf95b61690dc9047103ce3b7c636"}}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x81, 0x6, "3d0155179af52c218360f63b587b119bad958e13fdbef37483f1f2edf990373f1d7af2b17f247597099a981c0d86da1867e12c5be84d558a41eeaa0b3557e239bac0e1583360beff1ca128be336489bdfc2a0e7d3aed52c86121b03ee2a4749a645e0e58b3a42c39d715850ac9db2347e25ec5f4a6640029c120edb0bb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ipt={0xa0, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x75, 0x6, "b45c3e50999e0ff8b7cd267bd965c50b99594ae946a060b65c67ba37c0725f48dfc5713acdb126ac4fea463fdc8a72f0d8febaebccde90bfc89a2328790a2e1f3e4a8ec650f40dd2685113c4394824707942abe9ad835a1f6128ba736e738d0124901995773000610ee900ae766d905ff4"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x210}}, 0x40c1) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0xb}], 0x2, 0x10, 0x0) 3.09675824s ago: executing program 0 (id=4060): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfffffffffffffe79, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb392) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 2.965507451s ago: executing program 2 (id=4063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 2.825921029s ago: executing program 0 (id=4066): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000006180)={0x0, 0x0, &(0x7f0000006140)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="110026bd7000fddbdf2507002600"/26, @ANYRES32, @ANYBLOB="0c0099"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x20004014) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x9c, 0x7b5, 0x0, 0x0, 0x7579e159, 0x0, 0xfffffdfc, 0xef4}}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x100002, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1000b, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) 2.823948138s ago: executing program 2 (id=4067): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000080)) 2.649950063s ago: executing program 1 (id=4069): syz_open_procfs$namespace(0x0, 0x0) unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x2, 0x4) sendmmsg(r0, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)="b1b70e1e7c709d44a654032a137645d37c92f60f38fd7175e639fb", 0x1b}], 0x1}}, {{&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000280)="fc71c2bb16894d00331b19db9962a45105da6cea8fe8ba2455a95676845b4a003ced2cc8fc594285b80359736c808f98ce17647a162df35f4b7766f28c24fbe8de80fd9a04a2f97e688c612a0a0193", 0x4f}], 0x1}}], 0x2, 0x4040) 2.313309676s ago: executing program 3 (id=4071): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x3, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @empty}, 0x10) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) sendmmsg$inet(r0, &(0x7f0000000140)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000380)="885fec2e72c56542d8a7a3c63e598a354755c27793f2bc59c65980a0dd", 0x1d}], 0x1}}], 0x1, 0x24008001) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "05bef2a0ba57e8c1", "6dae7fd38fb2a187322e750f0c24a985", "9b99a3c8", "d3b30d165d678510"}, 0x28) 2.136297346s ago: executing program 1 (id=4072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000000821bd468000300000a580000000c0a010100000000000000000a00000a0900020073797a31000000000900010073797a31000000002c000380280000800c00018006000100d10300000c"], 0x80}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.019699799s ago: executing program 0 (id=4073): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltaction={0x14, 0x31, 0x8, 0x70bd26, 0x25dfdbfb}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000007000010010ab4be68e8da23507000000", @ANYRES32=r2, @ANYBLOB="10000180", @ANYRES8], 0x28}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.915911523s ago: executing program 2 (id=4075): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6400000010003904fdffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0198050043130500440012800b000100677265746170000034000280080004000600000006000e00020000000500160002000000060010004e230000060018000200000006000f"], 0x64}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 1.845740734s ago: executing program 1 (id=4076): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f00000046c0)="ed570924a04076e7a05c9a1df4a4a8d74d272701a3ba496b677d44c4c2d3edff29d6fd12b7bc1c6f6468bd8eafdb74f63756a83a66caed8d0c2d56439cad4bbd4100e0b6df3d3c157810df6b90da489a81c7bc48c00c9995b65c79006b47cac6171712d78259c1d5a433", 0x6a}], 0x1}, 0x400c000) 1.800960178s ago: executing program 0 (id=4078): r0 = socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000003340)=[{{&(0x7f00000003c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x9}, 0x1c, &(0x7f0000001b00)=[{&(0x7f0000001a80)='g', 0x1}], 0x1}}, {{&(0x7f0000001bc0)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f00000021c0)=[{&(0x7f0000001c00)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x134}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000011) 1.799271176s ago: executing program 2 (id=4079): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000001c0)=0x7f, 0x4) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) 1.685380047s ago: executing program 1 (id=4080): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x1, 0x0, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, &(0x7f00000000c0)='C', 0x5dc, 0x30048841, &(0x7f00000002c0)={0x11, 0x88a8, r2, 0x1, 0xe, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}}, 0x14) 1.629005839s ago: executing program 1 (id=4082): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/57, 0x39}, {&(0x7f0000000300)=""/171, 0xab}, {&(0x7f0000000200)=""/55, 0x37}, {&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f00000004c0)=""/11, 0xb}, {&(0x7f0000000500)=""/29, 0x1d}], 0x7}, 0x3}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000900)=""/210, 0xd2}], 0x1}}], 0x2, 0x10100, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 1.478793429s ago: executing program 1 (id=4083): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r1, &(0x7f0000000080)=""/47, 0x2f) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x801}, 0x20000000) 1.3404274s ago: executing program 2 (id=4084): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000340)=[{}], 0x1, 0xfe, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) 1.340303869s ago: executing program 3 (id=4085): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_128={{0x304}, "0000650381c66e54", "27c8291a0f479e020000002cb3237cb1", '\x00', "38cb8a873cfcabba"}, 0x28) shutdown(r0, 0x0) poll(&(0x7f0000000080)=[{r0, 0x400}], 0x1, 0x2) 1.29358024s ago: executing program 3 (id=4087): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000001400b59508000000000000000a400000", @ANYRES32=r2, @ANYBLOB="14000200ff020000000000000000000000000001080008000207"], 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400a59500000000000000000a6800c8", @ANYRES32=r2, @ANYBLOB="14000200ff02000000000000000000000000000114000100fe"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.187715896s ago: executing program 3 (id=4089): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r3 = socket(0x1d, 0x2, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0xb8, r1, 0x9, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x200}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24004420}, 0x24000004) 1.156042445s ago: executing program 4 (id=4090): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0xc) 1.020965416s ago: executing program 4 (id=4091): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b", 0x2b}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_raw(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000340)=""/7, 0x7}, {&(0x7f0000000540)=""/110, 0x6e}], 0x2}, 0x2103) recvmsg$unix(r1, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001800)=""/130, 0x82}], 0x1}, 0x74519d7d64e0eda6) 981.96726ms ago: executing program 3 (id=4092): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000540)="8cc5a877977c8e1ab624fcd14491", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) 918.42937ms ago: executing program 4 (id=4093): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {}, {0xa, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x64, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4, 0x21}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x54, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x2a, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xfff2}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8001}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xad}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x0, 0x3, 0x9}]}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 878.029493ms ago: executing program 0 (id=4094): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x52) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) 780.701502ms ago: executing program 3 (id=4095): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 642.869893ms ago: executing program 4 (id=4096): close(0x4) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0x30000040, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028"], 0xb0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 443.950559ms ago: executing program 4 (id=4097): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000001a00)=[{&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xc921d000) 0s ago: executing program 4 (id=4098): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}, {&(0x7f0000002140)=""/4096, 0x1000}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) kernel console output (not intermixed with test programs): 21q: adding VLAN 0 to HW filter on device team0 [ 75.520972][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.534495][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.541610][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.557532][ T5648] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.583450][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.590567][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.599556][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.606667][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.657993][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.681066][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.688254][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.725740][ T139] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.732936][ T139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.769688][ T139] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.776886][ T139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.584253][ T5637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.691407][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.732720][ T5633] Bluetooth: hci0: command tx timeout [ 76.812360][ T5633] Bluetooth: hci1: command tx timeout [ 76.824695][ T5637] veth0_vlan: entered promiscuous mode [ 76.881306][ T5637] veth1_vlan: entered promiscuous mode [ 76.892621][ T5633] Bluetooth: hci2: command tx timeout [ 76.931094][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.970450][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.978234][ T5633] Bluetooth: hci4: command tx timeout [ 76.986539][ T5631] veth0_vlan: entered promiscuous mode [ 77.008790][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.031202][ T5631] veth1_vlan: entered promiscuous mode [ 77.053146][ T5633] Bluetooth: hci3: command tx timeout [ 77.095426][ T5637] veth0_macvtap: entered promiscuous mode [ 77.119998][ T5637] veth1_macvtap: entered promiscuous mode [ 77.157974][ T5638] veth0_vlan: entered promiscuous mode [ 77.228863][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.253320][ T5648] veth0_vlan: entered promiscuous mode [ 77.261494][ T5638] veth1_vlan: entered promiscuous mode [ 77.274506][ T5637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.303997][ T5631] veth0_macvtap: entered promiscuous mode [ 77.327130][ T1345] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.337090][ T1345] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.353098][ T5631] veth1_macvtap: entered promiscuous mode [ 77.361542][ T5648] veth1_vlan: entered promiscuous mode [ 77.368288][ T1345] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.377685][ T1345] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.466747][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.481631][ T5644] veth0_vlan: entered promiscuous mode [ 77.492986][ T5638] veth0_macvtap: entered promiscuous mode [ 77.510089][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.534522][ T5638] veth1_macvtap: entered promiscuous mode [ 77.544605][ T5644] veth1_vlan: entered promiscuous mode [ 77.576401][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.586205][ T136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.601420][ T5648] veth0_macvtap: entered promiscuous mode [ 77.611305][ T136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.621124][ T136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.639717][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.643910][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.653292][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.669271][ T5648] veth1_macvtap: entered promiscuous mode [ 77.684452][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.747970][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.757673][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.769124][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.782199][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.791495][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.800475][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.819677][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.852320][ T5644] veth0_macvtap: entered promiscuous mode [ 77.869699][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.884891][ T5637] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.910956][ T5644] veth1_macvtap: entered promiscuous mode [ 77.939644][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.947042][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.961399][ T1345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.970617][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.982978][ T1345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.994415][ T1345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.029582][ T1345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.081649][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.132191][ T1345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.142945][ T1345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.206387][ T3385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.207468][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.226047][ T3385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.274333][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.356831][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.399307][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.401756][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.431980][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.568411][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.607465][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.699756][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.720738][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.813356][ T5633] Bluetooth: hci0: command tx timeout [ 78.878993][ T139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.902539][ T5633] Bluetooth: hci1: command tx timeout [ 78.914632][ T139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.972344][ T5633] Bluetooth: hci2: command tx timeout [ 79.052904][ T5633] Bluetooth: hci4: command tx timeout [ 79.079140][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.101377][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.133819][ T5633] Bluetooth: hci3: command tx timeout [ 79.720670][ T5871] ip6tnl1: entered promiscuous mode [ 79.729303][ T5871] ip6tnl1: entered allmulticast mode [ 80.551338][ T5902] Zero length message leads to an empty skb [ 80.790334][ T5913] syz.4.41: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 80.805826][ T5913] CPU: 1 UID: 0 PID: 5913 Comm: syz.4.41 Not tainted syzkaller #0 PREEMPT(full) [ 80.805848][ T5913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 80.805864][ T5913] Call Trace: [ 80.805875][ T5913] [ 80.805883][ T5913] dump_stack_lvl+0xe8/0x150 [ 80.805915][ T5913] warn_alloc+0x249/0x340 [ 80.805941][ T5913] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 80.805962][ T5913] ? __pfx_warn_alloc+0x10/0x10 [ 80.805983][ T5913] ? kasan_save_track+0x4f/0x80 [ 80.806000][ T5913] ? kasan_save_track+0x3e/0x80 [ 80.806015][ T5913] ? __kasan_kmalloc+0x93/0xb0 [ 80.806030][ T5913] ? __kmalloc_cache_noprof+0x31c/0x660 [ 80.806047][ T5913] ? xskq_create+0x56/0x170 [ 80.806063][ T5913] ? xsk_setsockopt+0x54c/0x990 [ 80.806077][ T5913] ? do_sock_setsockopt+0x17c/0x1b0 [ 80.806089][ T5913] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 80.806100][ T5913] ? do_syscall_64+0x174/0x580 [ 80.806114][ T5913] __vmalloc_node_range_noprof+0x132/0x1750 [ 80.806151][ T5913] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 80.806171][ T5913] ? __kasan_kmalloc+0x93/0xb0 [ 80.806202][ T5913] vmalloc_user_noprof+0xad/0xe0 [ 80.806219][ T5913] ? xskq_create+0xbf/0x170 [ 80.806237][ T5913] xskq_create+0xbf/0x170 [ 80.806256][ T5913] xsk_init_queue+0x8a/0xe0 [ 80.806275][ T5913] xsk_setsockopt+0x54c/0x990 [ 80.806294][ T5913] ? __pfx_xsk_setsockopt+0x10/0x10 [ 80.806310][ T5913] ? __pfx_aa_sk_perm+0x10/0x10 [ 80.806329][ T5913] ? aa_sock_opt_perm+0xff/0x1a0 [ 80.806347][ T5913] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 80.806362][ T5913] ? __pfx_xsk_setsockopt+0x10/0x10 [ 80.806378][ T5913] do_sock_setsockopt+0x17c/0x1b0 [ 80.806394][ T5913] __x64_sys_setsockopt+0x13d/0x1b0 [ 80.806408][ T5913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.806422][ T5913] do_syscall_64+0x174/0x580 [ 80.806435][ T5913] ? clear_bhb_loop+0x40/0x90 [ 80.806449][ T5913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.806461][ T5913] RIP: 0033:0x7fe2a9f9ce59 [ 80.806480][ T5913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.806490][ T5913] RSP: 002b:00007fe2aade4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 80.806504][ T5913] RAX: ffffffffffffffda RBX: 00007fe2aa215fa0 RCX: 00007fe2a9f9ce59 [ 80.806512][ T5913] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 80.806519][ T5913] RBP: 00007fe2aa032d6f R08: 0000000000000004 R09: 0000000000000000 [ 80.806526][ T5913] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.806533][ T5913] R13: 00007fe2aa216038 R14: 00007fe2aa215fa0 R15: 00007fff9e583618 [ 80.806554][ T5913] [ 80.807477][ T5913] Mem-Info: [ 81.083236][ T5913] active_anon:5443 inactive_anon:0 isolated_anon:0 [ 81.083236][ T5913] active_file:3140 inactive_file:39943 isolated_file:0 [ 81.083236][ T5913] unevictable:768 dirty:1601 writeback:0 [ 81.083236][ T5913] slab_reclaimable:10026 slab_unreclaimable:93559 [ 81.083236][ T5913] mapped:29177 shmem:1288 pagetables:1149 [ 81.083236][ T5913] sec_pagetables:0 bounce:0 [ 81.083236][ T5913] kernel_misc_reclaimable:0 [ 81.083236][ T5913] free:1333586 free_pcp:16082 free_cma:0 [ 81.155758][ T5913] Node 0 active_anon:21772kB inactive_anon:0kB active_file:12560kB inactive_file:159568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116708kB dirty:6388kB writeback:0kB shmem:3616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11932kB pagetables:4448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 81.246266][ T5913] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 81.303249][ T5913] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 81.346849][ T5913] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 81.365041][ T5913] Node 0 DMA32 free:1373616kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21772kB inactive_anon:0kB active_file:12560kB inactive_file:159568kB unevictable:1536kB writepending:6388kB zspages:0kB present:3129332kB managed:2552592kB mlocked:0kB bounce:0kB free_pcp:67316kB local_pcp:34212kB free_cma:0kB [ 81.424952][ T5913] lowmem_reserve[]: 0 0 0 0 0 [ 81.441751][ T5913] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:672kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 81.507630][ T5924] warning: `syz.2.47' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.525782][ T5913] lowmem_reserve[]: 0 0 0 0 0 [ 81.534822][ T5913] Node 1 Normal free:3944600kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:16kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB [ 81.673484][ T5913] lowmem_reserve[]: 0 0 0 0 0 [ 81.702385][ T5913] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 81.779725][ T5913] Node 0 DMA32: 655*4kB (UM) 161*8kB (UME) 46*16kB (UM) 12*32kB (UM) 1*64kB (M) 4*128kB (UM) 3*256kB (M) 2*512kB (M) 1*1024kB (M) 2*2048kB (M) 333*4096kB (M) = 1376484kB [ 81.806784][ T5913] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 81.819090][ T5913] Node 1 Normal: 1*4kB (M) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 1*64kB (M) 6*128kB (UM) 5*256kB (UM) 2*512kB (M) 3*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944596kB [ 81.892169][ T5913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.910397][ T5913] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.930324][ T5913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 81.964311][ T5913] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 81.995026][ T5913] 44367 total pagecache pages [ 81.996264][ T5945] netlink: 'syz.0.56': attribute type 2 has an invalid length. [ 82.016034][ T5913] 0 pages in swap cache [ 82.034821][ T5913] Free swap = 124996kB [ 82.047877][ T5945] netlink: 14 bytes leftover after parsing attributes in process `syz.0.56'. [ 82.058691][ T5913] Total swap = 124996kB [ 82.074294][ T5913] 2097051 pages RAM [ 82.085711][ T5913] 0 pages HighMem/MovableOnly [ 82.116966][ T5913] 427120 pages reserved [ 82.136132][ T5913] 0 pages cma reserved [ 82.299880][ T5955] netlink: 136 bytes leftover after parsing attributes in process `syz.1.61'. [ 82.364007][ T5955] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 82.471109][ T5962] netlink: 12 bytes leftover after parsing attributes in process `syz.3.64'. [ 82.526035][ T5962] netlink: 60 bytes leftover after parsing attributes in process `syz.3.64'. [ 82.681656][ T5972] netlink: 'syz.4.68': attribute type 1 has an invalid length. [ 82.990996][ T5980] netpci0: tun_chr_ioctl cmd 1074025678 [ 83.002131][ T5980] netpci0: group set to 0 [ 83.187967][ T5993] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 83.211452][ T5993] pim6reg0: persist disabled [ 83.583166][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 83.618804][ T6011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.85'. [ 84.504523][ T6051] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 85.155031][ T6072] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 85.690024][ T30] audit: type=1804 audit(1780586027.642:2): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.122" name="/newroot/27/cgroup.controllers" dev="tmpfs" ino=153 res=1 errno=0 [ 85.745254][ T30] audit: type=1800 audit(1780586027.672:3): pid=6089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.122" name="cgroup.controllers" dev="tmpfs" ino=153 res=0 errno=0 [ 86.615982][ T9] cfg80211: failed to load regulatory.db [ 87.126684][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 87.428537][ T6157] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 87.529698][ T6161] netlink: 72 bytes leftover after parsing attributes in process `syz.0.156'. [ 87.931770][ T6183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.166'. [ 88.487818][ T6211] netlink: 'syz.4.179': attribute type 30 has an invalid length. [ 88.889863][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.4.189'. [ 88.945461][ T6221] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.493551][ T6228] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 89.503601][ T6228] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 89.520647][ T6228] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 89.547889][ T6228] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 89.578896][ T6228] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 89.586779][ T6228] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 89.594732][ T6228] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 89.595591][ T6238] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.193'. [ 89.602516][ T6228] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 89.602533][ T6228] netlink: 'syz.3.188': attribute type 1 has an invalid length. [ 89.711242][ T6221] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.914006][ T6221] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.078079][ T6221] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.376723][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.449032][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.547541][ T1345] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.587894][ T6277] bond0: (slave ip6tnl0): refused to change device type [ 90.653659][ T6280] ip6erspan0: entered allmulticast mode [ 90.678928][ T48] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.039845][ T6298] nbd0: detected capacity change from 0 to 127 [ 91.068070][ T5633] block nbd0: Receive control failed (result -104) [ 91.961448][ T6334] C: renamed from veth1_to_team (while UP) [ 92.202451][ T6334] netlink: 116 bytes leftover after parsing attributes in process `syz.2.235'. [ 92.222159][ T6334] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 94.116176][ T6391] Bluetooth: MGMT ver 1.23 [ 94.299618][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 94.321122][ T6398] validate_nla: 46 callbacks suppressed [ 94.321139][ T6398] netlink: 'syz.4.263': attribute type 15 has an invalid length. [ 94.413799][ T1695] block nbd0: Connection timed out, retrying (0/1 alive) [ 94.421912][ T1695] block nbd0: Connection timed out, retrying (0/1 alive) [ 94.430259][ T1695] block nbd0: Connection timed out, retrying (0/1 alive) [ 94.437533][ T1695] block nbd0: Connection timed out, retrying (0/1 alive) [ 94.447095][ T11] block nbd0: Dead connection, failed to find a fallback [ 94.454718][ T11] block nbd0: shutting down sockets [ 94.460186][ T11] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.471573][ T11] Buffer I/O error on dev nbd0, logical block 2, async page read [ 94.480215][ T11] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.489391][ T11] Buffer I/O error on dev nbd0, logical block 1, async page read [ 94.497772][ T11] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.507275][ T11] Buffer I/O error on dev nbd0, logical block 0, async page read [ 94.515893][ T11] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.525375][ T11] Buffer I/O error on dev nbd0, logical block 3, async page read [ 94.534359][ T5960] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.559483][ T5960] Buffer I/O error on dev nbd0, logical block 0, async page read [ 94.570503][ T5960] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.579741][ T5960] Buffer I/O error on dev nbd0, logical block 1, async page read [ 94.587956][ T5960] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.598034][ T5960] Buffer I/O error on dev nbd0, logical block 2, async page read [ 94.606132][ T5960] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.615604][ T5960] Buffer I/O error on dev nbd0, logical block 3, async page read [ 94.623598][ T5960] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.632818][ T5960] Buffer I/O error on dev nbd0, logical block 0, async page read [ 94.641510][ T5960] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 94.653457][ T5960] Buffer I/O error on dev nbd0, logical block 1, async page read [ 94.664105][ T5960] ldm_validate_partition_table(): Disk read failed. [ 94.674096][ T5960] Dev nbd0: unable to read RDB block 0 [ 94.683564][ T5960] nbd0: unable to read partition table [ 94.707992][ T6412] tipc: Started in network mode [ 94.737182][ T5960] ldm_validate_partition_table(): Disk read failed. [ 94.745283][ T6412] tipc: Node identity ac14140f, cluster identity 4711 [ 94.746313][ T5960] Dev nbd0: unable to read RDB block 0 [ 94.768498][ T5960] nbd0: unable to read partition table [ 94.775589][ T6412] tipc: New replicast peer: 255.255.255.255 [ 94.789870][ T6412] tipc: Enabled bearer , priority 10 [ 94.883272][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 94.944130][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 95.903307][ T10] tipc: Node number set to 2886997007 [ 96.407491][ T6477] netlink: 'syz.2.297': attribute type 4 has an invalid length. [ 96.521600][ T6482] netlink: 64 bytes leftover after parsing attributes in process `syz.4.300'. [ 96.659330][ T6486] netlink: 48 bytes leftover after parsing attributes in process `syz.3.302'. [ 97.311326][ T6518] netlink: 48 bytes leftover after parsing attributes in process `syz.1.315'. [ 97.819634][ T6539] netlink: 104 bytes leftover after parsing attributes in process `syz.0.326'. [ 98.726675][ T6569] netlink: 40 bytes leftover after parsing attributes in process `syz.2.337'. [ 98.753536][ T6568] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 101.589321][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.598549][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.775441][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.809775][ T6668] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.038740][ T6676] netlink: 24 bytes leftover after parsing attributes in process `syz.4.389'. [ 102.059707][ T48] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.088467][ T48] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.122967][ T48] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.146051][ T48] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.394602][ T6709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.403'. [ 102.765103][ T6729] netlink: 'syz.0.412': attribute type 1 has an invalid length. [ 102.779452][ T6729] netlink: 'syz.0.412': attribute type 2 has an invalid length. [ 102.791195][ T6729] netlink: 'syz.0.412': attribute type 1 has an invalid length. [ 103.667485][ T6768] xt_hashlimit: max too large, truncated to 1048576 [ 103.680566][ T6768] No such timeout policy "syz1" [ 104.324490][ T6802] netlink: 28 bytes leftover after parsing attributes in process `syz.3.448'. [ 105.530988][ T6860] netlink: 104 bytes leftover after parsing attributes in process `syz.4.476'. [ 105.591931][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.478'. [ 105.884791][ T6881] netlink: 209808 bytes leftover after parsing attributes in process `syz.1.485'. [ 105.892768][ T6882] netlink: 'syz.4.486': attribute type 1 has an invalid length. [ 105.896009][ T6878] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 106.236124][ T6899] netlink: 67 bytes leftover after parsing attributes in process `syz.4.494'. [ 106.671057][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.503'. [ 107.227998][ T6947] nicvf0: tun_chr_ioctl cmd 1074025677 [ 107.243509][ T6947] nicvf0: linktype set to 780 [ 107.507658][ T6960] netlink: 36 bytes leftover after parsing attributes in process `syz.1.523'. [ 107.609346][ T6966] bond0: entered promiscuous mode [ 107.620189][ T6966] bond_slave_0: entered promiscuous mode [ 107.627084][ T6966] bond_slave_1: entered promiscuous mode [ 107.637214][ T6966] batadv0: entered promiscuous mode [ 108.042742][ T6991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.536'. [ 108.213737][ T6996] tun0: tun_chr_ioctl cmd 2148553947 [ 108.360937][ T7010] netlink: 32 bytes leftover after parsing attributes in process `syz.1.543'. [ 108.494264][ T7014] macsec1: entered promiscuous mode [ 108.507510][ T7014] vlan0: entered promiscuous mode [ 108.530271][ T7014] vlan0: left promiscuous mode [ 108.733035][ T1345] wlan1: Trigger new scan to find an IBSS to join [ 109.298896][ T7054] vxcan0: tx address claim with dlc 0 [ 110.061395][ T7092] netlink: 40 bytes leftover after parsing attributes in process `syz.3.581'. [ 110.585794][ T7124] xt_connbytes: Forcing CT accounting to be enabled [ 110.735204][ T7132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.598'. [ 110.811045][ T7132] veth1_to_team: entered promiscuous mode [ 110.884333][ T7139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.600'. [ 110.949610][ T7132] veth1_to_team: left promiscuous mode [ 111.590867][ T7157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.610'. [ 112.337824][ T7184] netlink: 28 bytes leftover after parsing attributes in process `syz.4.621'. [ 112.675227][ T7199] netlink: 'syz.0.628': attribute type 2 has an invalid length. [ 113.072900][ T7218] netlink: 'syz.1.636': attribute type 4 has an invalid length. [ 113.245173][ T7224] pim6reg: entered allmulticast mode [ 113.305012][ T7224] pim6reg: left allmulticast mode [ 113.370329][ T7231] tipc: Started in network mode [ 113.386040][ T7231] tipc: Node identity ac14140f, cluster identity 4711 [ 113.401968][ T7231] tipc: New replicast peer: 255.255.255.255 [ 113.421609][ T7231] tipc: Enabled bearer , priority 10 [ 113.584389][ T7240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.646'. [ 113.693586][ T3385] wlan1: Trigger new scan to find an IBSS to join [ 113.747171][ T7249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.651'. [ 113.769719][ T7249] netlink: 'syz.0.651': attribute type 7 has an invalid length. [ 113.795104][ T7249] netlink: 'syz.0.651': attribute type 8 has an invalid length. [ 113.822112][ T7249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.651'. [ 113.927809][ T7249] gretap0: entered promiscuous mode [ 113.957159][ T7249] gretap0: left promiscuous mode [ 113.985617][ T7259] netlink: 20 bytes leftover after parsing attributes in process `syz.2.655'. [ 114.374820][ T7277] netlink: 16 bytes leftover after parsing attributes in process `syz.1.665'. [ 114.533749][ T5743] tipc: Node number set to 2886997007 [ 114.599527][ T48] wlan1: Creating new IBSS network, BSSID 96:6d:65:37:fd:d3 [ 114.799114][ T7298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.673'. [ 115.173903][ T7311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 115.713405][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.691'. [ 116.073176][ T7346] veth1: entered promiscuous mode [ 116.088323][ T7346] macsec1: entered promiscuous mode [ 116.104718][ T7348] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.112838][ T7348] IPv6: NLM_F_CREATE should be set when creating new route [ 116.120106][ T7348] IPv6: NLM_F_CREATE should be set when creating new route [ 116.127408][ T7348] IPv6: NLM_F_CREATE should be set when creating new route [ 116.135097][ T7346] macsec1: entered allmulticast mode [ 116.149318][ T7346] veth1: entered allmulticast mode [ 116.204970][ T7346] veth1: left allmulticast mode [ 116.223364][ T7346] veth1: left promiscuous mode [ 116.240093][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'. [ 116.581785][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.708'. [ 119.347389][ T7500] __nla_validate_parse: 7 callbacks suppressed [ 119.347406][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.770'. [ 119.809316][ T7524] netlink: 'syz.0.781': attribute type 2 has an invalid length. [ 120.038424][ T7537] C: renamed from veth1_to_team (while UP) [ 120.049449][ T7537] netlink: 'syz.0.787': attribute type 4 has an invalid length. [ 120.060278][ T7537] netlink: 116 bytes leftover after parsing attributes in process `syz.0.787'. [ 120.072577][ T7537] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 120.515233][ T7560] tipc: Started in network mode [ 120.538147][ T7560] tipc: Node identity ff, cluster identity 4711 [ 120.555827][ T7560] tipc: Enabling of bearer rejected, failed to enable media [ 121.511811][ T7604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.817'. [ 121.546041][ T7606] netlink: 52 bytes leftover after parsing attributes in process `syz.0.818'. [ 122.024933][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'. [ 122.071143][ T7630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'. [ 122.270440][ T7645] tun0: tun_chr_ioctl cmd 1074025681 [ 122.389206][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.840'. [ 122.425464][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.840'. [ 122.451635][ T7653] netlink: 'syz.3.840': attribute type 20 has an invalid length. [ 122.676808][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.2.845'. [ 122.806920][ T7672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.850'. [ 124.363146][ T7713] __nla_validate_parse: 1 callbacks suppressed [ 124.363163][ T7713] netlink: 84 bytes leftover after parsing attributes in process `syz.0.869'. [ 124.814659][ T5633] block nbd1: Receive control failed (result -32) [ 124.822153][ T50] block nbd1: Receive control failed (result -32) [ 124.926607][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 124.935660][ T7737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.881'. [ 124.947451][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 124.957185][ T7737] netlink: 28 bytes leftover after parsing attributes in process `syz.1.881'. [ 124.966222][ T7737] netlink: 'syz.1.881': attribute type 6 has an invalid length. [ 125.097425][ T7743] batadv0: entered promiscuous mode [ 125.118127][ T7743] veth1_to_hsr: entered promiscuous mode [ 125.145292][ T7743] debugfs: 'hsr1' already exists in 'hsr' [ 125.169686][ T7743] Cannot create hsr debugfs directory [ 125.184875][ T7743] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 125.224856][ T7743] hsr1: Slave B (veth1_to_hsr) is not up; please bring it up to get a fully working HSR network [ 125.273475][ T7743] hsr1: entered allmulticast mode [ 125.289618][ T7743] batadv0: entered allmulticast mode [ 125.306058][ T7743] veth1_to_hsr: entered allmulticast mode [ 125.336335][ T7754] macvlan0: entered promiscuous mode [ 125.346838][ T7754] netlink: 52 bytes leftover after parsing attributes in process `syz.0.888'. [ 125.600305][ T7765] netlink: 40 bytes leftover after parsing attributes in process `syz.4.893'. [ 126.907179][ T7817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.912'. [ 126.942290][ T7815] syz.4.915 uses obsolete (PF_INET,SOCK_PACKET) [ 126.992038][ T7815] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 127.201470][ T7828] netlink: 72 bytes leftover after parsing attributes in process `syz.2.920'. [ 127.318150][ T7834] netlink: 'syz.3.923': attribute type 1 has an invalid length. [ 127.338111][ T7834] netlink: 60 bytes leftover after parsing attributes in process `syz.3.923'. [ 129.467927][ T7924] __nla_validate_parse: 5 callbacks suppressed [ 129.467943][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 129.528388][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.965'. [ 129.863673][ T7945] netlink: 'syz.2.975': attribute type 1 has an invalid length. [ 129.980688][ T7952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.978'. [ 130.702581][ T7977] Bluetooth: MGMT ver 1.23 [ 132.658609][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.666956][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.341846][ T8093] netlink: 'syz.3.1043': attribute type 22 has an invalid length. [ 133.369903][ T8093] netlink: 'syz.3.1043': attribute type 22 has an invalid length. [ 133.396274][ T8093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1043'. [ 133.465460][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'. [ 133.495024][ T8098] netlink: 'syz.2.1046': attribute type 30 has an invalid length. [ 133.524547][ T3385] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.533616][ T8098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1046'. [ 133.537098][ T3385] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.543593][ T8098] netlink: 'syz.2.1046': attribute type 30 has an invalid length. [ 133.560894][ T3385] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 133.579650][ T3385] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 134.766367][ T8142] netlink: 'syz.4.1064': attribute type 4 has an invalid length. [ 134.914154][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d2cec00: rx timeout, send abort [ 135.021666][ T8150] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1068'. [ 135.424594][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d2cec00: abort rx timeout. Force session deactivation [ 135.971794][ T8189] syzkaller1: entered promiscuous mode [ 135.997601][ T8189] syzkaller1: entered allmulticast mode [ 136.579055][ T8219] syzkaller1: entered promiscuous mode [ 136.592633][ T8219] syzkaller1: entered allmulticast mode [ 136.740944][ T8230] netlink: 'syz.0.1105': attribute type 2 has an invalid length. [ 137.588832][ T8270] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.1122'. [ 137.607054][ T29] IPVS: starting estimator thread 0... [ 137.614110][ T8269] IPVS: lc: FWM 3 0x00000003 - no destination available [ 137.628131][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 137.655120][ T8266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.733025][ T8272] IPVS: using max 28 ests per chain, 67200 per kthread [ 137.845282][ T8279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1127'. [ 138.077617][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1135'. [ 138.147589][ T8298] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1136'. [ 138.401320][ T8310] batadv_slave_1: entered promiscuous mode [ 138.427825][ T8309] batadv_slave_1: left promiscuous mode [ 139.176886][ T8335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1154'. [ 139.205002][ T8335] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1154'. [ 139.253927][ T8334] IPVS: Scheduler module ip_vs_sip not found [ 139.662658][ T8361] syzkaller1: entered promiscuous mode [ 139.668300][ T8361] syzkaller1: entered allmulticast mode [ 139.689281][ T8368] trusted_key: syz.1.1169 sent an empty control message without MSG_MORE. [ 139.971066][ T8381] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 140.059958][ T8385] syzkaller1: entered promiscuous mode [ 140.069132][ T8385] syzkaller1: entered allmulticast mode [ 140.580946][ T8409] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1188'. [ 140.918699][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 141.268112][ T8441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1202'. [ 141.268257][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1203'. [ 141.279064][ T8441] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1202'. [ 141.648662][ T8454] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1210'. [ 141.763990][ T8454] nbd2: detected capacity change from 0 to 1 [ 141.806658][ T50] block nbd2: Receive control failed (result -32) [ 141.826830][ T5960] buffer_io_error: 138 callbacks suppressed [ 141.826846][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 141.901350][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 141.942337][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 141.978179][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 142.008425][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 142.020417][ T50] block nbd3: Receive control failed (result -32) [ 142.055819][ T5960] ldm_validate_partition_table(): Disk read failed. [ 142.107204][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 142.128233][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 142.142166][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 142.153051][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 142.172358][ T5960] Dev nbd2: unable to read RDB block 0 [ 142.179823][ T5960] Buffer I/O error on dev nbd2, logical block 0, async page read [ 142.192794][ T5960] nbd2: unable to read partition table [ 142.202909][ T5960] nbd2: partition table beyond EOD, truncated [ 142.652426][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1228'. [ 142.868503][ T8505] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1231'. [ 142.896603][ T8507] syzkaller1: entered promiscuous mode [ 142.902315][ T8500] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 48 [ 142.910802][ T8507] syzkaller1: entered allmulticast mode [ 142.976000][ T8509] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.1234'. [ 143.125742][ T8518] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1239'. [ 143.452508][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.277915][ T8579] syzkaller1: entered promiscuous mode [ 144.308267][ T8579] syzkaller1: entered allmulticast mode [ 144.334834][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.492450][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.621891][ T1345] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 144.834065][ T8605] netlink: 'syz.1.1277': attribute type 4 has an invalid length. [ 145.425222][ T8637] netlink: ct family unspecified [ 145.454036][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 145.502868][ T8641] syzkaller1: entered promiscuous mode [ 145.520653][ T8641] syzkaller1: entered allmulticast mode [ 145.532490][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.582238][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.733587][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.246463][ T8722] __nla_validate_parse: 9 callbacks suppressed [ 147.246483][ T8722] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1333'. [ 147.356524][ T8727] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1334'. [ 147.372527][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 147.445408][ T8734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1337'. [ 147.457962][ T8734] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1337'. [ 147.514318][ T8736] ip6_tunnel: non-ECT from fe88:a43d:e1a4:0000:0000:0000:0000:7d01 with DS=0x2 [ 147.536592][ T8740] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1339'. [ 147.545910][ T8740] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1339'. [ 147.629191][ T8738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1334'. [ 147.682077][ T8738] nbd: device at index 64 is going down [ 147.896624][ T8749] syzkaller1: entered promiscuous mode [ 147.919636][ T8749] syzkaller1: entered allmulticast mode [ 148.085023][ T8756] syzkaller1: entered promiscuous mode [ 148.114255][ T8756] syzkaller1: entered allmulticast mode [ 148.271025][ T8762] syzkaller1: entered promiscuous mode [ 148.295714][ T8762] syzkaller1: entered allmulticast mode [ 148.502302][ T808] net_ratelimit: 1 callbacks suppressed [ 148.502318][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 148.656506][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.266831][ T8820] netlink: 'syz.3.1373': attribute type 1 has an invalid length. [ 149.304621][ T8820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.559892][ T8793] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 149.594117][ T8841] tun0: tun_chr_ioctl cmd 1074025675 [ 149.599608][ T8841] tun0: persist enabled [ 149.604995][ T8841] tun0: tun_chr_ioctl cmd 1074025675 [ 149.610719][ T8841] tun0: persist disabled [ 149.692929][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 149.818416][ T8852] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 149.838526][ T8852] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 149.859221][ T8852] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1385'. [ 149.870801][ T8852] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1385'. [ 149.935242][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.173279][ T8872] block nbd4: Unsupported socket: should be TCP or UNIX. [ 150.176719][ T8873] netlink: 'syz.0.1394': attribute type 3 has an invalid length. [ 150.374384][ T8879] gtp0: entered promiscuous mode [ 150.396002][ T8879] gtp0: entered allmulticast mode [ 150.420918][ T8879] team0: Device gtp0 is of different type [ 150.734940][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 150.893028][ T50] Bluetooth: hci0: command 0x0401 tx timeout [ 151.168324][ T8922] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'. [ 151.533103][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.772535][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.111967][ T8983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.180424][ T8989] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 152.447022][ T8998] __nla_validate_parse: 1 callbacks suppressed [ 152.447040][ T8998] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.1432'. [ 152.812670][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.126402][ T5743] IPVS: starting estimator thread 0... [ 153.225190][ T9031] IPVS: using max 32 ests per chain, 76800 per kthread [ 153.543770][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1456'. [ 153.565170][ T9050] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1456'. [ 153.853750][ T5743] net_ratelimit: 1 callbacks suppressed [ 153.853766][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.896712][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1451'. [ 153.993460][ T9069] xt_hashlimit: size too large, truncated to 1048576 [ 154.247639][ T9078] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.1468'. [ 154.573211][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.897503][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.183273][ T9113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 155.290454][ T9113] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1484'. [ 155.534618][ T9103] netlink: 45 bytes leftover after parsing attributes in process `syz.2.1480'. [ 155.623749][ T9131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 155.932818][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 155.969780][ T9] IPVS: starting estimator thread 0... [ 156.079165][ T9144] IPVS: using max 33 ests per chain, 79200 per kthread [ 156.723138][ T9171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.763898][ T9171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.787572][ T9171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.807904][ T9171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.831527][ T9171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.862364][ T9171] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.938905][ T9180] netlink: 'syz.0.1513': attribute type 2 has an invalid length. [ 157.287317][ T9190] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1518'. [ 157.576702][ T9193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1518'. [ 157.619316][ T9193] nbd: device at index 64 is going down [ 157.902846][ T5960] udevd[5960]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 158.037842][ T9219] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1529'. [ 158.254468][ T9231] tipc: Enabling of bearer rejected, failed to enable media [ 158.335702][ T9236] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1538'. [ 158.470364][ T9242] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1538'. [ 158.522745][ T9242] nbd: nbd64 already in use [ 158.928078][ T9263] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1549'. [ 159.055664][ T1224] net_ratelimit: 1024 callbacks suppressed [ 159.055681][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.111927][ T9270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1553'. [ 159.191455][ T9270] bond1: option ad_actor_sys_prio: invalid value (0) [ 159.201680][ T9270] bond1: option ad_actor_sys_prio: allowed values 1 - 65535 [ 159.218693][ T9270] bond1 (unregistering): Released all slaves [ 159.290766][ T9285] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 159.533241][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 159.630244][ T1224] IPVS: starting estimator thread 0... [ 159.723065][ T9301] IPVS: using max 35 ests per chain, 84000 per kthread [ 159.973229][ T9317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1573'. [ 160.095315][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.562350][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1585'. [ 160.658811][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 160.992334][ T9362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1593'. [ 161.133428][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.252512][ T9372] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.1598'. [ 162.193982][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.671740][ T9453] smc: net device lo applied user defined pnetid SYZ2 [ 162.690134][ T9453] smc: net device lo erased user defined pnetid SYZ2 [ 162.979972][ T9469] __nla_validate_parse: 2 callbacks suppressed [ 162.979991][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1640'. [ 163.000220][ T9469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.047219][ T9469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.120569][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.141786][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.180711][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.212398][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.212763][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.336208][ T9488] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.659945][ T9499] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1653'. [ 163.695495][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.070044][ T9523] syzkaller1: entered promiscuous mode [ 164.091803][ T9523] syzkaller1: entered allmulticast mode [ 164.118769][ T9527] netlink: 'syz.3.1664': attribute type 2 has an invalid length. [ 164.133484][ T9527] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1664'. [ 164.159817][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1664'. [ 164.254700][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.002770][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1684'. [ 165.171455][ T9581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1689'. [ 165.198558][ T9581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1689'. [ 165.292547][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.334515][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.428464][ T9641] netlink: 'syz.0.1712': attribute type 1 has an invalid length. [ 166.525064][ T5960] block nbd2: Dead connection, failed to find a fallback [ 166.645990][ T9650] xt_hashlimit: max too large, truncated to 1048576 [ 166.665320][ T9650] xt_hashlimit: overflow, try lower: 2/0 [ 166.732369][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.943500][ T9663] syzkaller1: entered promiscuous mode [ 166.972551][ T9663] syzkaller1: entered allmulticast mode [ 167.296403][ T9674] syzkaller1: entered promiscuous mode [ 167.313326][ T9674] syzkaller1: entered allmulticast mode [ 167.381245][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.628776][ T9693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1736'. [ 167.650526][ T9693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1736'. [ 167.999804][ T9701] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.262641][ T9701] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.298937][ T9718] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1749'. [ 168.412530][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.459290][ T9701] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 168.793753][ T9701] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 169.098283][ T1031] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.134328][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.147851][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.185759][ T9755] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.196187][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.244603][ T13] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.321825][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.453120][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.590222][ T9773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1772'. [ 169.654537][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1773'. [ 169.665406][ T9777] netlink: 'syz.3.1773': attribute type 20 has an invalid length. [ 169.683342][ T9777] netlink: 'syz.3.1773': attribute type 21 has an invalid length. [ 169.779741][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.874521][ T9785] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.884709][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.106966][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1781'. [ 170.141065][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1781'. [ 170.385977][ T9813] netlink: 'syz.2.1788': attribute type 62 has an invalid length. [ 170.504263][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.610357][ T9788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 170.638441][ T9823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 171.137931][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1799'. [ 171.148144][ T9842] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1799'. [ 171.197688][ T9845] netlink: 'syz.4.1801': attribute type 22 has an invalid length. [ 171.226690][ T9845] bond0: option ad_select: unable to set because the bond device is up [ 171.291295][ T9847] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1803'. [ 171.335727][ T9847] gretap0: entered promiscuous mode [ 171.366567][ T9854] 0ªî{X¹¦: renamed from gretap0 [ 171.415795][ T9854] 0ªî{X¹¦: left promiscuous mode [ 171.436105][ T9854] 0ªî{X¹¦: entered allmulticast mode [ 171.469298][ T9854] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 171.542980][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.987179][ T9891] tipc: Enabling of bearer rejected, already enabled [ 171.995651][ T9891] tipc: New replicast peer: 224.0.0.1 [ 172.447345][ T9917] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 172.572675][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.683043][ T9931] sctp: [Deprecated]: syz.0.1831 (pid 9931) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.683043][ T9931] Use struct sctp_sack_info instead [ 172.812361][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.616333][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.980154][T10002] __nla_validate_parse: 2 callbacks suppressed [ 173.980171][T10002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1856'. [ 174.653049][ T5721] net_ratelimit: 3 callbacks suppressed [ 174.653065][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.927162][T10053] netlink: 738 bytes leftover after parsing attributes in process `syz.2.1878'. [ 175.484365][T10079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1889'. [ 175.650501][ T66] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 175.693156][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 175.854724][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.088282][T10113] pim6reg1: entered promiscuous mode [ 176.102701][T10113] pim6reg1: entered allmulticast mode [ 176.118343][T10115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.149633][T10115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.174890][T10115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.191122][T10115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.200305][T10115] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.217546][T10114] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.231795][T10121] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 176.256453][T10121] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.266050][T10121] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.732536][ T1224] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.985214][T10143] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1918'. [ 176.994817][T10143] netlink: 'syz.4.1918': attribute type 7 has an invalid length. [ 177.003979][T10143] netlink: 'syz.4.1918': attribute type 8 has an invalid length. [ 177.012254][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1918'. [ 177.710260][T10171] sctp: [Deprecated]: syz.4.1931 (pid 10171) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.710260][T10171] Use struct sctp_sack_info instead [ 177.911146][T10185] veth1_to_bond: entered allmulticast mode [ 177.931439][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1937'. [ 177.985538][T10185] veth1_to_bond (unregistering): left allmulticast mode [ 178.045403][T10185] bond0: (slave bond_slave_1): Releasing backup interface [ 178.046225][T10192] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1939'. [ 178.070234][T10185] bond_slave_1 (unregistering): left promiscuous mode [ 179.783874][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1970'. [ 179.793872][T10264] netlink: 'syz.1.1970': attribute type 21 has an invalid length. [ 179.852640][ T5743] net_ratelimit: 7 callbacks suppressed [ 179.852655][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.943443][T10271] netlink: 'syz.3.1971': attribute type 10 has an invalid length. [ 179.976210][T10271] team0: Port device dummy0 added [ 180.084873][T10278] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 180.097173][T10278] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1977'. [ 180.117077][T10278] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1977'. [ 180.127653][T10278] netlink: 'syz.3.1977': attribute type 1 has an invalid length. [ 180.136812][T10278] netlink: 634 bytes leftover after parsing attributes in process `syz.3.1977'. [ 180.398620][T10295] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.1984'. [ 180.892890][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.056073][T10332] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2000'. [ 181.207946][T10340] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2004'. [ 181.455342][T10355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.470140][T10355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.555806][T10361] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2013'. [ 181.758581][T10375] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2020'. [ 181.932499][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.940642][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.959881][T10388] netlink: 'syz.0.2026': attribute type 1 has an invalid length. [ 182.105613][T10394] netlink: 'syz.0.2028': attribute type 1 has an invalid length. [ 182.118669][T10394] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2028'. [ 182.153637][T10394] netlink: 'syz.0.2028': attribute type 1 has an invalid length. [ 182.275180][T10402] sctp: [Deprecated]: syz.0.2033 (pid 10402) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.275180][T10402] Use struct sctp_sack_info instead [ 182.349751][T10405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 182.565904][T10415] pim6reg1: entered promiscuous mode [ 182.582671][T10415] pim6reg1: entered allmulticast mode [ 182.977785][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.013227][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 184.721998][T10501] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.729726][T10501] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.871744][T10522] netlink: 'syz.0.2071': attribute type 1 has an invalid length. [ 184.944335][T10501] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 184.972304][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.054960][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 185.110374][T10522] bond2: entered promiscuous mode [ 185.137657][T10522] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.247830][T10535] sctp: [Deprecated]: syz.1.2076 (pid 10535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.247830][T10535] Use struct sctp_sack_info instead [ 185.248882][T10523] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.273503][T10523] bond2: (slave bond3): making interface the new active one [ 185.278285][T10535] sctp: [Deprecated]: syz.1.2076 (pid 10535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 185.278285][T10535] Use struct sctp_sack_info instead [ 185.281952][T10523] bond3: entered promiscuous mode [ 185.303921][T10523] bond2: (slave bond3): Enslaving as an active interface with an up link [ 185.326166][T10537] batadv_slave_1: entered promiscuous mode [ 185.350966][T10536] batadv_slave_1: left promiscuous mode [ 186.092592][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 186.908268][T10601] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 186.949361][T10606] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 187.132415][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 187.641736][T10644] x_tables: duplicate entry at hook 1 [ 188.015570][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.096727][ T50] Bluetooth: hci4: command tx timeout [ 188.182405][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.336906][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.455017][T10677] __nla_validate_parse: 3 callbacks suppressed [ 189.455034][T10677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2133'. [ 189.582087][T10677] team0: Port device team_slave_0 removed [ 189.625698][T10683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2137'. [ 189.644242][T10683] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2137'. [ 189.653822][T10683] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2137'. [ 189.681564][T10685] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2138'. [ 190.252626][ T5743] net_ratelimit: 1 callbacks suppressed [ 190.252647][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.556318][T10726] syz_tun: entered allmulticast mode [ 190.616538][T10726] pim6reg: entered allmulticast mode [ 190.627905][T10728] veth1_macvtap: left promiscuous mode [ 190.706005][T10728] veth1_macvtap: entered promiscuous mode [ 190.720201][T10737] netlink: 'syz.0.2157': attribute type 1 has an invalid length. [ 190.940881][T10745] tipc: Started in network mode [ 190.950729][T10745] tipc: Node identity ac1414aa, cluster identity 4711 [ 190.983905][T10745] tipc: Enabled bearer , priority 10 [ 191.052913][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.294900][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 191.304429][ T30] audit: type=1800 audit(1780586133.252:4): pid=10758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2167" name="memory.events" dev="tmpfs" ino=2193 res=0 errno=0 [ 192.102181][ T5743] tipc: Node number set to 2886997162 [ 192.332429][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.376307][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 193.705205][T10869] erspan0: entered promiscuous mode [ 193.733459][T10869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2204'. [ 193.763205][ T3387] tipc: Subscription rejected, illegal request [ 193.851425][T10839] netlink: 45 bytes leftover after parsing attributes in process `syz.4.2191'. [ 194.100895][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.113559][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.124917][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.139658][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.357763][T10898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2213'. [ 194.418059][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 194.463836][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2214'. [ 194.655260][T10916] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2222'. [ 194.664374][T10910] ip6erspan1: entered allmulticast mode [ 194.789892][T10923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2227'. [ 194.803366][T10923] netlink: 'syz.0.2227': attribute type 2 has an invalid length. [ 194.813696][T10923] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2227'. [ 194.849375][T10925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2225'. [ 194.869791][T10916] bond1: Invalid ad_actor_system MAC address. [ 194.882686][T10916] bond1: option ad_actor_system: invalid value (7) [ 194.901704][T10916] bond1 (unregistering): Released all slaves [ 195.454461][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.547043][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2242'. [ 195.586109][T10963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2241'. [ 195.586401][T10962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2242'. [ 195.840120][T10972] IPVS: Scheduler module ip_vs_sip not found [ 196.175945][T10890] Bluetooth: hci2: command 0x0406 tx timeout [ 196.182431][T10890] Bluetooth: hci3: command 0x0406 tx timeout [ 196.188823][ T4952] Bluetooth: hci1: command 0x0406 tx timeout [ 196.196179][T10891] Bluetooth: hci0: command 0x0401 tx timeout [ 196.400722][ T66] tipc: Subscription rejected, illegal request [ 196.492614][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.525585][T11011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.533986][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.868926][T11019] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 197.097985][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2270'. [ 197.107999][T11037] netlink: 'syz.1.2270': attribute type 2 has an invalid length. [ 197.130715][T11039] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 197.216108][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.307786][T11047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.316635][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.534393][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.767774][T11068] IPVS: dh: FWM 3 0x00000003 - no destination available [ 197.934190][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.978644][T11079] netlink: 212336 bytes leftover after parsing attributes in process `syz.2.2290'. [ 198.938129][T11141] hsr_slave_0: left promiscuous mode [ 198.951606][T11141] hsr_slave_1: left promiscuous mode [ 199.520935][T11175] __nla_validate_parse: 3 callbacks suppressed [ 199.520965][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2328'. [ 200.046073][ T30] audit: type=1800 audit(1780586142.002:5): pid=11202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2341" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=2402 res=0 errno=0 [ 200.503964][T11223] net_ratelimit: 4 callbacks suppressed [ 200.503981][T11223] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.660308][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.276941][T11260] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 201.693766][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.732319][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.292631][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.365341][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2410'. [ 203.396978][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2410'. [ 203.422350][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2410'. [ 203.440636][T11378] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.2412'. [ 203.447141][T11374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2410'. [ 203.683958][T11387] netlink: 'syz.3.2413': attribute type 4 has an invalid length. [ 203.733351][T11386] netlink: 'syz.3.2413': attribute type 4 has an invalid length. [ 203.782616][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.258619][T11421] netlink: 'syz.1.2424': attribute type 1 has an invalid length. [ 204.345608][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.371216][ T8941] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x1 [ 204.392204][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.415680][T11366] dvmrp0: entered allmulticast mode [ 204.416029][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.432953][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.654949][T11421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.690035][T11422] bond1: option lp_interval: invalid value (18446744073709551607) [ 204.720671][T11422] bond1: option lp_interval: allowed values 1 - 2147483647 [ 204.767851][T11429] IPv6: sit1: Disabled Multicast RS [ 204.801590][ T8941] dvmrp0: left allmulticast mode [ 204.807798][T11429] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2425'. [ 204.837038][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2426'. [ 205.867343][ T29] net_ratelimit: 2 callbacks suppressed [ 205.867367][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.217019][T11484] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 206.892561][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.966287][T11511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2456'. [ 206.984882][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 207.349808][T11527] netlink: 'syz.4.2464': attribute type 1 has an invalid length. [ 207.497525][T11527] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.531511][T11536] netlink: 'syz.3.2465': attribute type 4 has an invalid length. [ 207.532437][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.585148][T11537] netlink: 'syz.3.2465': attribute type 4 has an invalid length. [ 207.606208][T11531] bond1: (slave geneve2): making interface the new active one [ 207.653565][T11531] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 207.932586][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.226997][T11552] gtp0: entered allmulticast mode [ 208.813272][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.863858][T11572] netlink: del zone limit has 8 unknown bytes [ 208.973962][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.018926][T11576] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 209.476090][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.518940][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.532604][T11562] netlink: 45 bytes leftover after parsing attributes in process `syz.2.2475'. [ 209.535195][T11602] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2489'. [ 210.147779][T11611] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.155035][T11611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.246191][T11614] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 210.316884][T11614] bond2: (slave lo): Enslaving as an active interface with an up link [ 210.763898][T11647] netlink: 'syz.1.2507': attribute type 8 has an invalid length. [ 211.055229][ T5743] net_ratelimit: 8 callbacks suppressed [ 211.055245][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.717785][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'. [ 211.752136][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2525'. [ 211.788786][T11684] netlink: 'syz.2.2525': attribute type 6 has an invalid length. [ 211.833207][T11690] netlink: 'syz.4.2528': attribute type 2 has an invalid length. [ 211.852690][T11690] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2528'. [ 211.904660][T11684] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'. [ 211.918160][T11695] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.2529'. [ 211.925804][T11684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2525'. [ 211.955314][T11684] netlink: 'syz.2.2525': attribute type 6 has an invalid length. [ 212.095020][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.122905][T11704] netlink: 212328 bytes leftover after parsing attributes in process `syz.1.2532'. [ 212.144790][T11704] netlink: Unknown conntrack attr (type=2304, max=9) [ 212.224999][T11711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2534'. [ 212.747067][T11729] erspan0: entered promiscuous mode [ 212.767968][T11726] erspan0: left promiscuous mode [ 213.019751][T11735] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.2544'. [ 213.035670][T11735] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2544'. [ 213.132299][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.214447][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.366126][T11751] netlink: 'syz.3.2551': attribute type 8 has an invalid length. [ 213.427346][T11751] geneve2: entered promiscuous mode [ 213.453466][T11751] geneve2: entered allmulticast mode [ 214.172845][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.578618][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.213347][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.235361][ T3387] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.246336][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.477353][T11839] netlink: 'syz.2.2587': attribute type 7 has an invalid length. [ 215.496698][T11839] netlink: 'syz.2.2587': attribute type 7 has an invalid length. [ 216.253680][ T5641] net_ratelimit: 1 callbacks suppressed [ 216.253695][ T5641] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.267426][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.037308][T11913] __nla_validate_parse: 2 callbacks suppressed [ 217.037325][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2610'. [ 217.061287][T11913] xfrm1: entered promiscuous mode [ 217.091492][T11913] xfrm1: entered allmulticast mode [ 217.111750][T11913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2610'. [ 217.293627][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.335749][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.991937][T11989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.292341][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.373449][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.490932][T12018] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 219.510308][T12018] bond1: (slave lo): Enslaving as an active interface with an up link [ 219.537587][T12018] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 219.694035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.908972][T12034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.953969][T12038] netlink: 'syz.0.2664': attribute type 15 has an invalid length. [ 219.966645][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2664'. [ 220.020224][T12038] netlink: 'syz.0.2664': attribute type 15 has an invalid length. [ 220.021843][ T3387] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 220.048304][T12038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2664'. [ 220.067151][ T3387] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 220.091384][ T3387] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 220.133150][ T3387] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 220.673189][T12074] Bluetooth: MGMT ver 1.23 [ 220.695602][T12074] Bluetooth: hci1: too big key_count value 29096 [ 220.707304][T12076] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2681'. [ 220.997946][T12096] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2688'. [ 221.329497][T12115] netlink: 'syz.3.2696': attribute type 3 has an invalid length. [ 221.363843][T12115] netlink: 'syz.3.2696': attribute type 1 has an invalid length. [ 221.386597][T12115] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2696'. [ 221.406985][T12115] NCSI netlink: No device for ifindex 0 [ 221.676284][T12135] netlink: 'syz.3.2706': attribute type 5 has an invalid length. [ 221.870899][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2711'. [ 221.881315][T12147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2711'. [ 221.898479][T12147] geneve2: entered promiscuous mode [ 221.904153][T12147] geneve2: entered allmulticast mode [ 221.911740][ T3387] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.926185][ T3387] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.945156][ T3387] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.988133][ T3387] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.144488][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2717'. [ 222.154471][T12162] netlink: 'syz.3.2717': attribute type 5 has an invalid length. [ 222.173997][T12162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2717'. [ 222.243633][T12162] geneve3: entered promiscuous mode [ 222.248952][T12162] geneve3: entered allmulticast mode [ 222.259930][ T8941] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 222.276456][ T8941] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 222.300376][ T8941] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 222.327497][ T8941] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 222.615906][T12187] netlink: 'syz.4.2728': attribute type 1 has an invalid length. [ 222.633001][T12187] netlink: 'syz.4.2728': attribute type 4 has an invalid length. [ 222.647565][T12187] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.2728'. [ 222.769244][T12194] netlink: 750 bytes leftover after parsing attributes in process `syz.4.2733'. [ 222.780342][T12195] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2732'. [ 223.020439][T12164] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 223.052907][T12164] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 223.797208][T12244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2754'. [ 223.834009][T12247] netlink: 'syz.4.2756': attribute type 7 has an invalid length. [ 223.852664][ T48] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.861607][T12247] netlink: 'syz.4.2756': attribute type 7 has an invalid length. [ 223.880162][ T48] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.892766][ T48] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.908508][ T48] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 223.928492][T12250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2757'. [ 223.957525][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2735'. [ 223.968203][T12250] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2757'. [ 223.986549][T12250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2757'. [ 224.520042][T12277] net_ratelimit: 3 callbacks suppressed [ 224.520058][T12277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.580420][T12277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.619347][T12277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.804816][T12275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.856818][T12275] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.990558][T12303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 226.381926][T12346] hsr_slave_1 (unregistering): left promiscuous mode [ 227.273770][T12399] sctp: [Deprecated]: syz.0.2822 (pid 12399) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.273770][T12399] Use struct sctp_sack_info instead [ 227.394380][T12393] ip6tnl1: entered promiscuous mode [ 227.477312][T12404] syzkaller1: entered promiscuous mode [ 227.493068][T12404] syzkaller1: entered allmulticast mode [ 227.617129][T12416] __nla_validate_parse: 7 callbacks suppressed [ 227.617149][T12416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2827'. [ 228.244796][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2841'. [ 228.293898][T12445] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2841'. [ 228.586700][T12459] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2847'. [ 229.654865][T12522] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2873'. [ 229.825343][T12531] syzkaller1: entered promiscuous mode [ 229.861305][T12531] syzkaller1: entered allmulticast mode [ 230.186625][T12554] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2884'. [ 230.435871][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2891'. [ 230.449130][T12571] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2891'. [ 230.572972][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.820040][T12585] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2895'. [ 231.053043][T12598] validate_nla: 2 callbacks suppressed [ 231.053060][T12598] netlink: 'syz.2.2899': attribute type 1 has an invalid length. [ 231.140155][T12598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.491016][T12619] netlink: 5000 bytes leftover after parsing attributes in process `syz.2.2907'. [ 232.168776][T12657] netlink: 'syz.2.2923': attribute type 13 has an invalid length. [ 232.291034][T12665] xt_hashlimit: size too large, truncated to 1048576 [ 232.305038][T12660] sch_tbf: burst 6 is lower than device gretap0 mtu (32783) ! [ 232.538633][T12676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.545948][T12676] IPv6: NLM_F_CREATE should be set when creating new route [ 232.606015][T12676] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 232.618328][T12677] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 232.635401][T12677] bond2: (slave lo): Enslaving as an active interface with an up link [ 232.689818][T12677] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 232.697211][T12684] __nla_validate_parse: 1 callbacks suppressed [ 232.697229][T12684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2934'. [ 233.031031][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2938'. [ 233.229832][T12703] netlink: 'syz.1.2942': attribute type 2 has an invalid length. [ 233.448137][T12713] netlink: 'syz.3.2945': attribute type 83 has an invalid length. [ 233.614244][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2951'. [ 233.626082][T12725] netlink: 204 bytes leftover after parsing attributes in process `syz.3.2950'. [ 233.657133][T12725] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2950'. [ 233.684339][T12726] bond4: entered promiscuous mode [ 233.713841][T12726] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.815724][T12731] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.850642][T12731] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 233.865202][T12731] bond4: (slave ip6gre1): Error -95 calling set_mac_address [ 234.171038][T12749] netlink: 'syz.4.2961': attribute type 25 has an invalid length. [ 234.179434][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2961'. [ 234.189372][T12749] netlink: 'syz.4.2961': attribute type 25 has an invalid length. [ 234.197693][T12749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2961'. [ 234.948976][T12781] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2974'. [ 234.984894][T12784] pim6reg1: entered promiscuous mode [ 234.995152][T12784] pim6reg1: entered allmulticast mode [ 235.261815][T12803] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2985'. [ 235.465886][T12813] pim6reg1: entered promiscuous mode [ 235.487358][T12813] pim6reg1: entered allmulticast mode [ 235.902334][T12825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2994'. [ 235.960815][ T13] netdevsim netdevsim0 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 235.973749][ T13] netdevsim netdevsim0 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 235.985797][ T13] netdevsim netdevsim0 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 236.001702][ T13] netdevsim netdevsim0 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 236.680809][T12857] netlink: 'syz.1.3011': attribute type 7 has an invalid length. [ 237.326141][T12895] netlink: 'syz.0.3026': attribute type 18 has an invalid length. [ 237.335633][T12895] netlink: 'syz.0.3026': attribute type 18 has an invalid length. [ 237.910843][ T8941] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 238.640482][T12949] __nla_validate_parse: 9 callbacks suppressed [ 238.640500][T12949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3047'. [ 239.044243][T12966] veth0: entered promiscuous mode [ 239.050317][T12966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3054'. [ 239.158008][T12967] IPv6: sit3: Disabled Multicast RS [ 239.575555][T12990] netlink: 'syz.4.3064': attribute type 21 has an invalid length. [ 239.601559][T12990] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3064'. [ 239.668041][T12994] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3066'. [ 239.799485][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3068'. [ 239.803586][T12999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3069'. [ 239.825172][T13001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3068'. [ 239.845432][T13001] netlink: 'syz.4.3068': attribute type 12 has an invalid length. [ 239.983569][T13001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3068'. [ 239.998894][T13009] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3073'. [ 240.022329][T13001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3068'. [ 240.068162][T13001] netlink: 'syz.4.3068': attribute type 12 has an invalid length. [ 240.209684][T13012] block nbd4: server does not support multiple connections per device. [ 240.239760][T13012] block nbd4: shutting down sockets [ 241.936524][T13082] IPVS: Scheduler module ip_vs_ not found [ 243.565870][T13157] netlink: 'syz.0.3133': attribute type 1 has an invalid length. [ 243.584534][T13157] netlink: 'syz.0.3133': attribute type 3 has an invalid length. [ 243.670354][T13161] ip6gre2: entered promiscuous mode [ 243.682034][T13161] ip6gre2: entered allmulticast mode [ 243.711819][T13161] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.092446][T13176] syzkaller1: entered promiscuous mode [ 244.100628][T13176] syzkaller1: entered allmulticast mode [ 244.829128][T13221] __nla_validate_parse: 5 callbacks suppressed [ 244.829145][T13221] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3160'. [ 245.344660][T13250] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 245.364857][T13250] bond3 (unregistering): Released all slaves [ 246.238228][T13288] atomic_op ffff8880341d7998 conn xmit_atomic 0000000000000000 [ 246.629060][T13313] netlink: 240 bytes leftover after parsing attributes in process `syz.4.3192'. [ 246.721220][T13315] ip6tnl0: Caught tx_queue_len zero misconfig [ 247.527520][T13366] netlink: 'syz.1.3214': attribute type 1 has an invalid length. [ 247.551444][T13366] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.570416][T13366] bond3: (slave geneve3): making interface the new active one [ 247.579735][T13366] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 248.237535][T13246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.691329][T13402] bridge1: entered promiscuous mode [ 248.704314][T13402] bridge1: entered allmulticast mode [ 249.865765][T13473] syzkaller1: entered promiscuous mode [ 249.882307][T13473] syzkaller1: entered allmulticast mode [ 250.152473][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3269'. [ 250.162917][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3269'. [ 250.233748][T13489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3269'. [ 250.253464][T13489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3269'. [ 250.420991][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3274'. [ 250.432415][T13501] netlink: 'syz.4.3274': attribute type 5 has an invalid length. [ 250.453000][T13501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3274'. [ 250.509642][T13501] geneve3: entered promiscuous mode [ 250.531230][T13501] geneve3: entered allmulticast mode [ 250.550612][ T8941] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 250.559781][ T8941] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 250.582931][ T8941] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 250.611699][ T8941] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 251.109884][T13522] netlink: 'syz.4.3283': attribute type 1 has an invalid length. [ 251.284125][T13529] gtp1: entered promiscuous mode [ 251.302000][T13529] gtp1: entered allmulticast mode [ 251.311479][T13529] team0: Device gtp1 is of different type [ 251.899306][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3293'. [ 251.909500][T13546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3293'. [ 251.996060][T13546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3293'. [ 252.015441][T13546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3293'. [ 252.561578][T13556] netlink: Conntrack attr has 4 unknown bytes [ 253.468782][T13579] 8021q: adding VLAN 0 to HW filter on device bond2 [ 253.540185][T13579] bond2: (slave batadv1): Opening slave failed [ 254.606348][T13637] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 255.177825][T13661] netlink: 'syz.1.3344': attribute type 11 has an invalid length. [ 255.534536][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.540884][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.887289][T13685] __nla_validate_parse: 4 callbacks suppressed [ 255.887309][T13685] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.3355'. [ 256.118063][T13691] netlink: 'syz.2.3358': attribute type 9 has an invalid length. [ 256.126580][T13691] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.3358'. [ 257.078838][T13721] bond4: entered promiscuous mode [ 257.084468][T13721] 8021q: adding VLAN 0 to HW filter on device bond4 [ 257.204332][T13732] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 257.265218][T13735] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3375'. [ 257.881829][T13765] netlink: 'syz.2.3388': attribute type 8 has an invalid length. [ 257.905775][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3388'. [ 258.062636][T13773] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3391'. [ 258.640303][T13789] : entered promiscuous mode [ 258.861628][T13805] syzkaller1: entered promiscuous mode [ 258.871401][T13805] syzkaller1: entered allmulticast mode [ 258.985557][T13810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3408'. [ 259.097272][ T3387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.132175][ T3387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.178881][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3414'. [ 259.205405][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3414'. [ 259.245421][T13828] netlink: 'syz.2.3415': attribute type 1 has an invalid length. [ 259.466851][T13828] 8021q: adding VLAN 0 to HW filter on device bond3 [ 259.634614][T13830] bond3: (slave geneve2): making interface the new active one [ 259.664432][T13830] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 260.339376][T13853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3425'. [ 260.357774][T13853] netlink: 121 bytes leftover after parsing attributes in process `syz.4.3425'. [ 260.584316][T13860] IPVS: dh: FWM 3 0x00000003 - no destination available [ 261.316939][T13890] IPVS: sed: FWM 3 0x00000003 - no destination available [ 261.422456][T13898] netlink: 'syz.4.3444': attribute type 1 has an invalid length. [ 261.490787][T13898] 8021q: adding VLAN 0 to HW filter on device bond3 [ 261.549181][T13905] lo: Caught tx_queue_len zero misconfig [ 262.086787][T13920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3452'. [ 262.234434][T13924] : entered promiscuous mode [ 262.474662][T13934] netlink: 'syz.0.3458': attribute type 1 has an invalid length. [ 262.535063][T13934] 8021q: adding VLAN 0 to HW filter on device bond5 [ 262.542771][T13941] team0: entered allmulticast mode [ 262.557113][T13941] team_slave_0: entered allmulticast mode [ 262.573069][T13941] team_slave_1: entered allmulticast mode [ 262.626116][T13940] bond5: (slave gretap1): making interface the new active one [ 262.651093][T13940] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 262.677634][T13941] team0: left allmulticast mode [ 262.687375][T13941] team_slave_0: left allmulticast mode [ 262.709546][T13941] team_slave_1: left allmulticast mode [ 263.026745][T13955] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.3466'. [ 263.475392][T13973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3474'. [ 263.554879][T13973] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.745086][T13978] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3475'. [ 264.154833][T13985] netlink: 'syz.2.3478': attribute type 1 has an invalid length. [ 264.309810][T13985] 8021q: adding VLAN 0 to HW filter on device bond5 [ 264.386350][T13988] bond5: option tlb_dynamic_lb: unable to set because the bond device is up [ 264.610242][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3485'. [ 264.644156][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3485'. [ 264.878292][T14018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3491'. [ 265.130623][T14020] syzkaller1: entered promiscuous mode [ 265.153738][T14020] syzkaller1: entered allmulticast mode [ 265.994867][ T36] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 266.211390][T14062] syzkaller1: entered promiscuous mode [ 266.235259][T14062] syzkaller1: entered allmulticast mode [ 266.756878][T14086] netlink: 'syz.1.3518': attribute type 1 has an invalid length. [ 266.915251][T14077] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.925117][T14077] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.390874][T14077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.478351][T14077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.574899][T14086] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 268.598652][T14088] erspan1: entered allmulticast mode [ 268.680342][ T136] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.709789][ T136] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 268.762163][ T136] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.795163][ T136] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 268.835263][ T136] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.854781][ T136] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 268.914412][ T136] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.942652][ T136] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 269.063853][T14138] netlink: 'syz.3.3537': attribute type 83 has an invalid length. [ 269.087970][T14134] syzkaller1: entered promiscuous mode [ 269.101071][T14134] syzkaller1: entered allmulticast mode [ 269.505657][T14150] bond2: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 269.581002][T14150] bond2 (unregistering): Released all slaves [ 269.694719][T14153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.705921][T14153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.716881][T14153] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 269.900844][T14153] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.911294][T14153] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.923444][T14153] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 270.021546][T14153] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.054906][T14153] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.090296][T14153] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 270.248531][T14153] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 270.259319][T14153] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.274260][T14153] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 270.476746][ T1031] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.495012][ T1031] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 270.516615][ T1031] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.592681][ T1031] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.607212][ T1031] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 270.623221][ T1031] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.692313][ T66] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.700624][ T66] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 270.709891][ T66] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.763110][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.776758][ T36] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 270.787289][ T36] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 270.797957][T14204] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3560'. [ 272.391794][T14276] netlink: 181256 bytes leftover after parsing attributes in process `syz.1.3580'. [ 272.562219][T14278] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3581'. [ 275.752231][T14298] syzkaller1: entered promiscuous mode [ 275.757825][T14298] syzkaller1: entered allmulticast mode [ 275.771216][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3593'. [ 276.014730][T14326] netlink: 'syz.3.3598': attribute type 10 has an invalid length. [ 276.024713][T14326] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 276.059799][T14326] team0: Port device netdevsim1 added [ 276.084798][T14328] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3599'. [ 276.794616][T14350] pim6reg1: entered promiscuous mode [ 276.808473][T14350] pim6reg1: entered allmulticast mode [ 277.136523][T14361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3611'. [ 277.168709][T14367] netlink: 'syz.3.3614': attribute type 4 has an invalid length. [ 277.204724][T14366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3613'. [ 277.214008][T14367] netlink: 'syz.3.3614': attribute type 4 has an invalid length. [ 277.273071][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.812272][ T5743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 277.935957][T14388] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 278.247467][T14408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3630'. [ 278.307068][T14408] 8021q: adding VLAN 0 to HW filter on device bond4 [ 278.318077][T14411] bond4: option mode: unable to set because the bond device is up [ 278.783264][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3634'. [ 279.926726][T14464] macvlan0: left promiscuous mode [ 280.034231][T14464] bond2: left promiscuous mode [ 280.057606][T14464] bond3: left promiscuous mode [ 281.115832][T14493] netlink: 'syz.4.3664': attribute type 4 has an invalid length. [ 281.281235][T14504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3670'. [ 281.300143][T14504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3670'. [ 281.326202][T14504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3670'. [ 281.361881][T14504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3670'. [ 281.557486][T14521] netlink: 'syz.1.3676': attribute type 4 has an invalid length. [ 282.269475][T14552] sctp: [Deprecated]: syz.3.3687 (pid 14552) Use of int in max_burst socket option. [ 282.269475][T14552] Use struct sctp_assoc_value instead [ 282.314277][T14557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3691'. [ 283.370258][T14598] erspan0: left promiscuous mode [ 283.494812][T14598] geneve2: left promiscuous mode [ 283.518219][T14598] geneve3: left promiscuous mode [ 283.534553][T14598] ip6tnl1: left promiscuous mode [ 283.543366][T14598] ip6gre2: left promiscuous mode [ 283.752716][T14613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.777317][T14613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.810281][T14613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.840078][T14613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.862595][T14613] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.871101][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.881017][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.889246][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.897450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 283.905634][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.000527][T14626] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3715'. [ 284.054263][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3713'. [ 284.392978][T14646] vlan0: entered allmulticast mode [ 284.399382][T14646] bond0: entered allmulticast mode [ 284.405528][T14646] bond_slave_0: entered allmulticast mode [ 284.417029][T14646] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3720'. [ 284.465028][T14646] bond0 (unregistering): left promiscuous mode [ 284.471543][T14646] bond_slave_0: left promiscuous mode [ 284.480225][T14646] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.491074][T14646] bond_slave_0: left allmulticast mode [ 284.500468][T14646] bond0 (unregistering): Released all slaves [ 284.710587][T14656] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3724'. [ 284.875938][T14671] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3732'. [ 285.251406][T14684] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.347614][T14684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.361694][T14684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.491750][T14684] xfrm1: left promiscuous mode [ 285.497070][T14684] xfrm1: left allmulticast mode [ 285.531395][T14684] bridge1: left promiscuous mode [ 285.538823][T14684] bridge1: left allmulticast mode [ 285.594198][ T36] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.622587][ T36] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.653735][ T36] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.672123][ T36] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.704459][ T36] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.714288][ T36] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.733583][ T36] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.752758][ T36] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.853386][T14709] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.760711][T14745] __nla_validate_parse: 1 callbacks suppressed [ 286.760723][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3761'. [ 286.801153][T14745] 8021q: adding VLAN 0 to HW filter on device bond6 [ 286.824470][T14745] bond6: (slave hsr0): The slave device specified does not support setting the MAC address [ 286.835688][T14745] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 286.848422][T14745] bond6: (slave hsr0): Error -22 calling dev_set_mtu [ 287.070646][T14755] netlink: 'syz.0.3765': attribute type 1 has an invalid length. [ 287.080333][T14755] netlink: 'syz.0.3765': attribute type 4 has an invalid length. [ 287.088377][T14755] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3765'. [ 288.131020][T14804] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.3786'. [ 288.175424][ T3387] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 288.422316][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3787'. [ 288.673908][T14828] sctp: [Deprecated]: syz.3.3793 (pid 14828) Use of int in maxseg socket option. [ 288.673908][T14828] Use struct sctp_assoc_value instead [ 289.469148][T14849] netlink: 'syz.3.3803': attribute type 10 has an invalid length. [ 289.781646][T14874] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3815'. [ 289.986264][T14880] block nbd4: server does not support multiple connections per device. [ 289.995047][T14888] bridge0: entered allmulticast mode [ 290.038653][T14880] block nbd4: shutting down sockets [ 290.045835][T14888] bridge_slave_1: left allmulticast mode [ 290.053523][T14888] bridge_slave_1: left promiscuous mode [ 290.068058][T14888] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.126379][T14888] bridge_slave_0: left allmulticast mode [ 290.140407][T14888] bridge_slave_0: left promiscuous mode [ 290.144450][T14892] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3823'. [ 290.156013][T14892] net_ratelimit: 61 callbacks suppressed [ 290.156029][T14892] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 290.171322][T14888] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.701522][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3828'. [ 290.823786][T14916] tipc: Failed to remove unknown binding: 66,1,1/0:2127365654/2127365656 [ 292.007451][T14951] GUP no longer grows the stack in syz.1.3842 (14951): 200000003000-20000000a000 (200000001000) [ 292.052210][T14951] CPU: 0 UID: 0 PID: 14951 Comm: syz.1.3842 Not tainted syzkaller #0 PREEMPT(full) [ 292.052236][T14951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 292.052251][T14951] Call Trace: [ 292.052259][T14951] [ 292.052267][T14951] dump_stack_lvl+0xe8/0x150 [ 292.052295][T14951] __get_user_pages+0x2378/0x2730 [ 292.052339][T14951] ? __gup_longterm_locked+0xc4e/0x1630 [ 292.052360][T14951] ? down_read_killable+0x1bb/0x340 [ 292.052387][T14951] __gup_longterm_locked+0xdcf/0x1630 [ 292.052413][T14951] ? lock_acquire+0x106/0x350 [ 292.052450][T14951] gup_fast_fallback+0x1d84/0x20d0 [ 292.052511][T14951] ? __pfx_gup_fast_fallback+0x10/0x10 [ 292.052534][T14951] ? is_valid_gup_args+0x11f/0x200 [ 292.052557][T14951] ? get_user_pages_fast+0x4d/0xb0 [ 292.052580][T14951] __iov_iter_get_pages_alloc+0x370/0xa10 [ 292.052609][T14951] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 292.052638][T14951] iov_iter_get_pages2+0x5e/0xa0 [ 292.052662][T14951] __se_sys_vmsplice+0x7c7/0x1620 [ 292.052702][T14951] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 292.052723][T14951] ? __pfx_futex_wait+0x10/0x10 [ 292.052810][T14951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.052829][T14951] do_syscall_64+0x174/0x580 [ 292.052845][T14951] ? trace_irq_disable+0x3b/0x140 [ 292.052868][T14951] ? clear_bhb_loop+0x40/0x90 [ 292.052888][T14951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.052905][T14951] RIP: 0033:0x7faa6f19ce59 [ 292.052921][T14951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.052935][T14951] RSP: 002b:00007faa70103028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 292.052953][T14951] RAX: ffffffffffffffda RBX: 00007faa6f415fa0 RCX: 00007faa6f19ce59 [ 292.052966][T14951] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 292.052976][T14951] RBP: 00007faa6f232d6f R08: 0000000000000000 R09: 0000000000000000 [ 292.052987][T14951] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 292.052996][T14951] R13: 00007faa6f416038 R14: 00007faa6f415fa0 R15: 00007ffdec0129c8 [ 292.053027][T14951] [ 292.407807][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3845'. [ 292.436238][T14955] netlink: 'syz.4.3845': attribute type 29 has an invalid length. [ 292.444744][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3845'. [ 292.457418][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3845'. [ 292.492188][T14955] netlink: 'syz.4.3845': attribute type 29 has an invalid length. [ 292.500112][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3845'. [ 292.550464][T14959] netlink: 'syz.4.3846': attribute type 1 has an invalid length. [ 292.611191][T14959] 8021q: adding VLAN 0 to HW filter on device bond5 [ 293.396428][T14994] ip6gre1: entered promiscuous mode [ 293.401752][T14994] ip6gre1: entered allmulticast mode [ 293.905103][T15022] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3867'. [ 293.915556][T14919] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 294.129971][T15030] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3873'. [ 295.320058][T15060] netlink: 'syz.3.3885': attribute type 20 has an invalid length. [ 295.371210][T15060] netlink: 'syz.3.3885': attribute type 20 has an invalid length. [ 295.379242][ T3387] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.379304][ T3387] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.379336][ T3387] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.379366][ T3387] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 295.499432][T15067] netlink: 'syz.0.3888': attribute type 21 has an invalid length. [ 295.521811][T15067] netlink: 'syz.0.3888': attribute type 22 has an invalid length. [ 295.542275][T15067] netlink: 'syz.0.3888': attribute type 23 has an invalid length. [ 295.558998][T15067] netlink: 'syz.0.3888': attribute type 25 has an invalid length. [ 295.572015][T15067] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3888'. [ 296.748882][T15110] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3904'. [ 296.855702][T15114] sock: sock_set_timeout: `syz.4.3905' (pid 15114) tries to set negative timeout [ 297.774719][T15138] syzkaller1: entered promiscuous mode [ 297.780761][T15138] syzkaller1: entered allmulticast mode [ 298.194466][T15152] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3923'. [ 298.431426][T15169] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 298.593051][T15177] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3930'. [ 298.647873][T15173] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3930'. [ 299.389001][T15100] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 299.636889][T15209] netlink: 'syz.1.3943': attribute type 1 has an invalid length. [ 299.748567][T15213] netlink: 208240 bytes leftover after parsing attributes in process `syz.0.3944'. [ 299.765437][T15209] bond5: entered promiscuous mode [ 299.795455][T15209] 8021q: adding VLAN 0 to HW filter on device bond5 [ 299.880748][T15216] 8021q: adding VLAN 0 to HW filter on device bond5 [ 299.895236][T15216] bond5: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 299.916417][T15216] bond5: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 299.959723][T15216] bond5: (slave ip6gre1): making interface the new active one [ 299.994377][T15216] ip6gre1: entered promiscuous mode [ 300.053137][T15216] bond5: (slave ip6gre1): Enslaving as an active interface with an up link [ 300.106270][T15222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3948'. [ 300.835265][T15232] 0ªî{X¹¦: left allmulticast mode [ 301.027276][T15232] hsr1: left allmulticast mode [ 301.032472][T15232] batadv0: left allmulticast mode [ 301.037782][T15232] veth1_to_hsr: left allmulticast mode [ 301.081855][T15232] geneve2: left promiscuous mode [ 301.092563][T15232] geneve2: left allmulticast mode [ 301.133022][T15232] bond4: left promiscuous mode [ 301.145102][T15232] bond5: left promiscuous mode [ 301.150131][T15232] ip6gre1: left promiscuous mode [ 301.238543][ T36] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.249054][ T36] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.257895][ T36] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.266488][ T36] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.290483][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3959'. [ 301.300198][T15258] netlink: 'syz.1.3959': attribute type 11 has an invalid length. [ 301.337602][ T36] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.347128][ T36] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.356541][ T36] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.369727][ T36] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.406638][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3959'. [ 301.423453][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.446515][T15258] netlink: 'syz.1.3959': attribute type 11 has an invalid length. [ 301.524360][T15268] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3964'. [ 301.551878][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.570557][T15270] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.577833][T15270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.586878][T15270] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.594088][T15270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.610541][T15270] bridge0: entered promiscuous mode [ 301.637117][T15270] bridge0: entered allmulticast mode [ 301.679528][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.695891][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.510225][T15302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3972'. [ 304.366146][T15363] bridge0: entered allmulticast mode [ 304.422607][T15363] bridge_slave_1: left allmulticast mode [ 304.443748][T15363] bridge_slave_1: left promiscuous mode [ 304.468427][T15363] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.507577][T15363] bridge_slave_0: left allmulticast mode [ 304.532999][T15363] bridge_slave_0: left promiscuous mode [ 304.554820][T15363] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.979898][T15378] netlink: 192 bytes leftover after parsing attributes in process `syz.1.3998'. [ 305.626832][T15393] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4004'. [ 305.870763][T15401] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 305.968805][T15401] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.046999][T15401] team0: Port device netdevsim1 removed [ 306.055993][T15401] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.144781][T15401] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 306.251089][ T66] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.281051][ T66] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.307542][ T66] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.331753][ T66] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.711027][T15413] netlink: 'syz.0.4010': attribute type 1 has an invalid length. [ 306.846001][T15419] gretap2: entered allmulticast mode [ 306.856647][T15419] bond7: (slave gretap2): making interface the new active one [ 306.874392][T15419] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 306.974279][T15431] netlink: 'syz.0.4016': attribute type 1 has an invalid length. [ 307.040658][T15431] bond8: entered promiscuous mode [ 307.046563][T15431] 8021q: adding VLAN 0 to HW filter on device bond8 [ 307.151565][T15431] 8021q: adding VLAN 0 to HW filter on device bond8 [ 307.178999][T15431] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 307.200377][T15431] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 307.216343][T15431] bond8: (slave vti0): making interface the new active one [ 307.224415][T15431] vti0: entered promiscuous mode [ 307.230652][T15431] bond8: (slave vti0): Enslaving as an active interface with an up link [ 307.349177][T15444] bridge0: entered promiscuous mode [ 307.374005][T15444] bridge0: entered allmulticast mode [ 307.442662][T15454] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 307.774450][T15471] netlink: 'syz.2.4033': attribute type 1 has an invalid length. [ 307.783594][T15471] netlink: 'syz.2.4033': attribute type 4 has an invalid length. [ 307.793832][T15472] xt_hashlimit: size too large, truncated to 1048576 [ 307.794202][T15471] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.4033'. [ 308.801755][T15522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4052'. [ 308.816672][T15522] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4052'. [ 309.187247][T15543] netlink: 'syz.0.4060': attribute type 1 has an invalid length. [ 309.217488][T15543] netlink: 'syz.0.4060': attribute type 4 has an invalid length. [ 309.249655][T15543] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.4060'. [ 310.157072][T15569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4072'. [ 310.189682][T15569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4072'. [ 310.242577][T15569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4072'. [ 310.254675][T15573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4073'. [ 310.274012][T15569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4072'. [ 311.114270][T15613] block nbd3: reconnected socket [ 311.130627][T15613] block nbd3: Unsupported socket: should be TCP or UNIX. [ 311.154549][ T5645] block nbd3: Receive control failed (result -32) [ 311.392893][T15623] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4093'. [ 312.492350][ T31] INFO: task udevd:5960 blocked for more than 143 seconds. [ 312.517867][ T31] Not tainted syzkaller #0 [ 312.544476][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.584302][ T31] task:udevd state:D stack:21448 pid:5960 tgid:5960 ppid:5001 task_flags:0x400140 flags:0x00080000 [ 312.646443][ T31] Call Trace: [ 312.655843][ T31] [ 312.662294][ T31] __schedule+0x1821/0x5740 [ 312.666981][ T31] ? irqentry_exit+0x218/0x8b0 [ 312.671825][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 312.678425][ T31] ? __blk_flush_plug+0x416/0x4d0 [ 312.688004][ T31] ? __pfx___schedule+0x10/0x10 [ 312.697772][ T31] ? schedule+0x90/0x360 [ 312.706023][ T31] schedule+0x164/0x360 [ 312.715235][ T31] schedule_timeout+0x158/0x2c0 [ 312.725067][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 312.736547][ T31] ? __pfx_process_timeout+0x10/0x10 [ 312.748046][ T31] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 312.760233][ T31] ? prepare_to_wait_event+0x436/0x480 [ 312.775628][ T31] nbd_queue_rq+0x857/0x1100 [ 312.785246][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 312.796004][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 312.806456][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 312.816651][ T31] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 312.823390][ T31] ? sbitmap_get+0x229/0x390 [ 312.828138][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 312.842543][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 312.851691][ T31] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 312.858916][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 312.868094][ T31] ? blk_mq_hw_queue_need_run+0x13c/0x680 [ 312.874977][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 312.880365][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 312.886772][ T31] ? blk_mq_run_hw_queue+0x31f/0x4f0 [ 312.896288][ T31] blk_mq_run_hw_queue+0x348/0x4f0 [ 312.906617][ T31] blk_mq_dispatch_list+0xd16/0xe10 [ 312.916899][ T31] ? bdev_count_inflight+0x1cf/0x210 [ 312.928062][ T31] ? blk_mq_dispatch_list+0x1b0/0xe10 [ 312.940591][ T31] ? __pfx_blk_mq_dispatch_list+0x10/0x10 [ 312.952290][ T31] ? rcu_is_watching+0x15/0xb0 [ 312.962142][ T31] blk_mq_flush_plug_list+0x48d/0x570 [ 312.979842][ T31] ? blk_add_rq_to_plug+0x300/0x450 [ 312.985378][ T31] ? blk_mq_submit_bio+0x1b9f/0x29a0 [ 312.995321][ T31] ? __pfx_blk_mq_flush_plug_list+0x10/0x10 [ 313.011987][ T31] ? blk_mq_submit_bio+0x2fa/0x29a0 [ 313.017288][ T31] __blk_flush_plug+0x3ed/0x4d0 [ 313.027396][ T31] ? __pfx___blk_flush_plug+0x10/0x10 [ 313.038963][ T31] __submit_bio+0x28d/0x580 [ 313.047607][ T31] ? __pfx___submit_bio+0x10/0x10 [ 313.061949][ T31] ? bio_associate_blkg+0x6d/0x230 [ 313.070074][ T31] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 313.076218][ T31] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 313.082626][ T31] block_read_full_folio+0x7b7/0x830 [ 313.087958][ T31] ? __pfx_blkdev_get_block+0x10/0x10 [ 313.093625][ T31] filemap_read_folio+0x137/0x3b0 [ 313.098685][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 313.104398][ T31] ? __pfx_filemap_read_folio+0x10/0x10 [ 313.109987][ T31] ? filemap_add_folio+0x356/0x530 [ 313.116241][ T31] do_read_cache_folio+0x358/0x590 [ 313.121396][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 313.127204][ T31] read_part_sector+0xb6/0x2b0 [ 313.134015][ T31] adfspart_check_ICS+0xb1/0x960 [ 313.139048][ T31] ? seq_buf_printf+0x212/0x2d0 [ 313.149161][ T31] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 313.161965][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 313.172547][ T31] bdev_disk_changed+0x817/0x1770 [ 313.189609][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 313.195398][ T31] blkdev_get_whole+0x380/0x510 [ 313.210449][ T31] bdev_open+0x31e/0xd30 [ 313.214987][ T31] blkdev_open+0x470/0x610 [ 313.220941][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 313.226225][ T31] do_dentry_open+0x822/0x13a0 [ 313.231108][ T31] vfs_open+0x3b/0x340 [ 313.235598][ T31] ? path_openat+0x2df0/0x3860 [ 313.240399][ T31] path_openat+0x2e08/0x3860 [ 313.245407][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 313.250818][ T31] ? stack_depot_save_flags+0x33/0x810 [ 313.256590][ T31] ? __pfx_path_openat+0x10/0x10 [ 313.261563][ T31] ? __x64_sys_openat+0x138/0x170 [ 313.274937][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 313.284531][ T31] do_file_open+0x23e/0x4a0 [ 313.294518][ T31] ? __pfx_do_file_open+0x10/0x10 [ 313.311996][ T31] ? _raw_spin_unlock+0x28/0x50 [ 313.316965][ T31] ? alloc_fd+0x64b/0x6c0 [ 313.327091][ T31] do_sys_openat2+0x113/0x200 [ 313.333953][ T31] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 313.349621][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 313.356615][ T31] ? rcu_is_watching+0x15/0xb0 [ 313.371603][ T31] __x64_sys_openat+0x138/0x170 [ 313.376817][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.391964][ T31] do_syscall_64+0x174/0x580 [ 313.398133][ T31] ? clear_bhb_loop+0x40/0x90 [ 313.408242][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.421965][ T31] RIP: 0033:0x7f36784a7407 [ 313.431972][ T31] RSP: 002b:00007fffba95beb0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 313.450618][ T31] RAX: ffffffffffffffda RBX: 00007f3678c6d880 RCX: 00007f36784a7407 [ 313.461693][ T31] RDX: 00000000000a0800 RSI: 00005645fa005930 RDI: ffffffffffffff9c [ 313.469925][ T31] RBP: 00005645f9ff1910 R08: 0000000000000000 R09: 0000000000000000 [ 313.478030][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005645fa01b360 [ 313.486495][ T31] R13: 00005645f9fff190 R14: 0000000000000000 R15: 00005645fa01b360 [ 313.494613][ T31] [ 313.497855][ T31] [ 313.497855][ T31] Showing all locks held in the system: [ 313.507606][ T31] 1 lock held by khungtaskd/31: [ 313.512626][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 313.522631][ T31] 3 locks held by kworker/u8:4/66: [ 313.527765][ T31] #0: ffff88803255f940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 313.586552][ T31] #1: ffffc900015e7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 313.620705][ T31] #2: ffffffff8fdc8f40 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 313.642816][ T31] 3 locks held by kworker/u8:10/3387: [ 313.654359][ T31] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 313.679181][ T31] #1: ffffc9000d96fc40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 313.702458][ T31] #2: ffffffff8fdc8f40 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 313.723281][ T31] 2 locks held by getty/5389: [ 313.732239][ T31] #0: ffff88803733f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 313.752277][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 313.770257][ T31] 3 locks held by udevd/5960: [ 313.780526][ T31] #0: ffff888027671350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 313.799456][ T31] #1: ffff8880274c6518 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x31f/0x4f0 [ 313.819772][ T31] #2: ffff888027747178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc6/0x1100 [ 313.842059][ T31] 2 locks held by syz.4.4098/15643: [ 313.848457][ T31] #0: ffffffff8fdc8f40 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 313.863007][ T31] #1: ffffffff8e962fa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 313.878310][ T31] [ 313.880727][ T31] ============================================= [ 313.880727][ T31] [ 313.890636][ T31] NMI backtrace for cpu 1 [ 313.890650][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 313.890665][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 313.890673][ T31] Call Trace: [ 313.890679][ T31] [ 313.890685][ T31] dump_stack_lvl+0xe8/0x150 [ 313.890707][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 313.890730][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 313.890750][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 313.890773][ T31] sys_info+0x135/0x170 [ 313.890791][ T31] watchdog+0xfd3/0x1030 [ 313.890820][ T31] ? watchdog+0x1c9/0x1030 [ 313.890846][ T31] kthread+0x389/0x470 [ 313.890866][ T31] ? __pfx_watchdog+0x10/0x10 [ 313.890892][ T31] ? __pfx_kthread+0x10/0x10 [ 313.890912][ T31] ret_from_fork+0x514/0xb70 [ 313.890932][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 313.890949][ T31] ? __switch_to+0xc79/0x1410 [ 313.890973][ T31] ? __pfx_kthread+0x10/0x10 [ 313.890993][ T31] ret_from_fork_asm+0x1a/0x30 [ 313.891024][ T31] [ 313.891031][ T31] Sending NMI from CPU 1 to CPUs 0: [ 314.002804][ C0] NMI backtrace for cpu 0 [ 314.002821][ C0] CPU: 0 UID: 0 PID: 15596 Comm: syz.1.4083 Not tainted syzkaller #0 PREEMPT(full) [ 314.002839][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.002849][ C0] RIP: 0010:__lock_acquire+0xfb/0x2cf0 [ 314.002871][ C0] Code: 30 40 0f 93 c6 40 20 ce 40 80 fe 01 0f 84 21 01 00 00 8b 9c 24 40 01 00 00 44 8b a4 24 30 01 00 00 89 d5 48 c7 c1 70 33 e2 93 <48> 29 c8 48 c1 f8 03 48 be 29 5c 8f c2 f5 28 5c 8f 48 0f af f0 85 [ 314.002887][ C0] RSP: 0018:ffffc900102174e8 EFLAGS: 00000097 [ 314.002902][ C0] RAX: ffffffff93e91e88 RBX: 0000000000000000 RCX: ffffffff93e23370 [ 314.002914][ C0] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff88805aa1d1e8 [ 314.002924][ C0] RBP: 0000000000000001 R08: 0000000000000001 R09: ffff88805aa1d1e8 [ 314.002934][ C0] R10: dffffc0000000000 R11: fffffbfff206115f R12: 0000000000000000 [ 314.002945][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 314.002954][ C0] FS: 00007faa701036c0(0000) GS:ffff88812528a000(0000) knlGS:0000000000000000 [ 314.002968][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 314.002978][ C0] CR2: 0000200000aff030 CR3: 0000000052982000 CR4: 00000000003526f0 [ 314.002992][ C0] Call Trace: [ 314.002998][ C0] [ 314.003010][ C0] ? handle_mm_fault+0xf1/0x3170 [ 314.003034][ C0] ? lock_sock_nested+0x6a/0x100 [ 314.003055][ C0] lock_acquire+0x106/0x350 [ 314.003070][ C0] ? lock_sock_nested+0x6a/0x100 [ 314.003096][ C0] ? lock_sock_nested+0x6a/0x100 [ 314.003116][ C0] _raw_spin_lock_bh+0x36/0x50 [ 314.003139][ C0] ? lock_sock_nested+0x6a/0x100 [ 314.003159][ C0] lock_sock_nested+0x6a/0x100 [ 314.003180][ C0] skcipher_recvmsg+0xbe/0x1140 [ 314.003198][ C0] ? reacquire_held_locks+0x104/0x190 [ 314.003217][ C0] ? release_sock+0x2f/0x260 [ 314.003241][ C0] ? skcipher_check_key+0x173/0x1e0 [ 314.003259][ C0] ? skcipher_check_key+0x173/0x1e0 [ 314.003277][ C0] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 314.003294][ C0] ? skcipher_check_key+0x173/0x1e0 [ 314.003310][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 314.003327][ C0] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 314.003345][ C0] ? __pfx_skcipher_recvmsg_nokey+0x10/0x10 [ 314.003364][ C0] sock_recvmsg_nosec+0x10c/0x140 [ 314.003393][ C0] ____sys_recvmsg+0x3e3/0x4a0 [ 314.003414][ C0] ? __pfx_____sys_recvmsg+0x10/0x10 [ 314.003437][ C0] ? import_iovec+0x73/0xa0 [ 314.003457][ C0] ___sys_recvmsg+0x215/0x590 [ 314.003476][ C0] ? __pfx____sys_recvmsg+0x10/0x10 [ 314.003509][ C0] do_recvmmsg+0x334/0x800 [ 314.003530][ C0] ? __pfx_do_recvmmsg+0x10/0x10 [ 314.003552][ C0] ? __pfx_do_futex+0x10/0x10 [ 314.003577][ C0] __x64_sys_recvmmsg+0x198/0x250 [ 314.003596][ C0] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 314.003617][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.003633][ C0] do_syscall_64+0x174/0x580 [ 314.003649][ C0] ? trace_irq_disable+0x3b/0x140 [ 314.003671][ C0] ? clear_bhb_loop+0x40/0x90 [ 314.003689][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.003704][ C0] RIP: 0033:0x7faa6f19ce59 [ 314.003718][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.003731][ C0] RSP: 002b:00007faa70103028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 314.003746][ C0] RAX: ffffffffffffffda RBX: 00007faa6f415fa0 RCX: 00007faa6f19ce59 [ 314.003757][ C0] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 314.003768][ C0] RBP: 00007faa6f232d6f R08: 0000000000000000 R09: 0000000000000000 [ 314.003777][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.003786][ C0] R13: 00007faa6f416038 R14: 00007faa6f415fa0 R15: 00007ffdec0129c8 [ 314.003805][ C0] [ 314.379043][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 314.385905][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 314.394996][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 314.405036][ T31] Call Trace: [ 314.408300][ T31] [ 314.411216][ T31] vpanic+0x56c/0xa60 [ 314.415190][ T31] ? __pfx___schedule+0x10/0x10 [ 314.420023][ T31] ? __pfx_vpanic+0x10/0x10 [ 314.424511][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 314.430657][ T31] panic+0xc5/0xd0 [ 314.434360][ T31] ? __pfx_panic+0x10/0x10 [ 314.438762][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 314.444123][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 314.450265][ T31] watchdog+0x102c/0x1030 [ 314.454586][ T31] ? watchdog+0x1c9/0x1030 [ 314.458990][ T31] kthread+0x389/0x470 [ 314.463041][ T31] ? __pfx_watchdog+0x10/0x10 [ 314.467703][ T31] ? __pfx_kthread+0x10/0x10 [ 314.472276][ T31] ret_from_fork+0x514/0xb70 [ 314.476852][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 314.481946][ T31] ? __switch_to+0xc79/0x1410 [ 314.486618][ T31] ? __pfx_kthread+0x10/0x10 [ 314.491194][ T31] ret_from_fork_asm+0x1a/0x30 [ 314.495951][ T31] [ 314.499251][ T31] Kernel Offset: disabled [ 314.503563][ T31] Rebooting in 86400 seconds..