last executing test programs: 3.386386196s ago: executing program 0 (id=13355): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) socket$inet6_mptcp(0xa, 0x1, 0x106) listen(0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x40, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 3.131210599s ago: executing program 0 (id=13358): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1, 0x800, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0), &(0x7f00000001c0)=0x8) 2.344802783s ago: executing program 2 (id=13369): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=@newtfilter={0x50, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_EMATCHES={0x1c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7}}}]}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) 2.273667827s ago: executing program 1 (id=13370): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 2.090902926s ago: executing program 0 (id=13372): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='batadv0\x00', 0xfc46) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="82", 0x1}, {&(0x7f0000000280)="399b76", 0x3}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000180)="583c485f2587569b2b3f6c5961168177f242f81057", 0x15, 0x3b00, 0x0, 0x0) 1.975443688s ago: executing program 0 (id=13373): setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x1ac, 0x65, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x180, 0x2, [@TCA_BPF_ACT={0x17c, 0x1, [@m_skbmod={0x178, 0x18, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x1, 0x0, 0xab6d}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="addd8ec7b991"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="c42d89d0476d"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6e2, 0x6, 0x3, 0x7fa80, 0x7}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0xd5, 0x6, "0c5720b707e41992f7d3e03eb0a83101ab1330a7c10ee2be34aa729f8f7f65d3fd4b0a3be1976c3538da2fa427f5a41285ad8376e443f0471df1a6abb6bf6be48dac58dd2b082bacfab3bcd53757683c1c0d212191fa3f0ec2d327fed0b2eab4bc9a2c74b4134ca0c5a9c1d5271da9a31296bde60257f2440d5e2a30e4e80d2148172961982fa14afb0c1e46c90998b87dcb9fe848ca94cccb28a2548a07b4f6c66706c6972ec9af1e162134eaa471dae8349e2457250eb954363e269d1ff96cfe0d1ff0455bc96168072b0c7f2371622c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.893674874s ago: executing program 1 (id=13374): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x2, 0x6a, 0xfffff034}, {0x6, 0x0, 0x0, 0xffff}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)={@val, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3e, 0x40, 0x67, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x86dd, 0x2c, 0x0, @gue={{0x1, 0x0, 0x1, 0x7, 0x8106, @void}, "134a318536459f4c076600ffeffff600000000111740a673d82a5c006694d13f"}}}}}}}, 0x52) 1.806537971s ago: executing program 2 (id=13376): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @random="7c6a97bead69"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x1, 0xfffffffc, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44090) 1.613731558s ago: executing program 1 (id=13377): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x1008}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x34041043}, 0x4004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.610608974s ago: executing program 3 (id=13378): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f00000002c0)}, 0x10) 1.357192424s ago: executing program 3 (id=13380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x44004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x20004810}, 0x200040d4) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) 1.345407204s ago: executing program 3 (id=13381): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4104"], 0x7) 939.473675ms ago: executing program 2 (id=13385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@setlink={0x44, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}, @IFLA_CARRIER={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) 938.510447ms ago: executing program 4 (id=13386): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, 0x0, 0xc) write$nci(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="400109", @ANYRES16=r3, @ANYRES64=r4], 0x87) 845.143034ms ago: executing program 1 (id=13387): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x40, r1, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x40}}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) 844.521129ms ago: executing program 3 (id=13388): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, 0x0, 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f00000007c0), &(0x7f0000000640)=r0}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r1, &(0x7f00000004c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r1, 0x0, &(0x7f0000000400)=""/154}, 0x20) 812.126705ms ago: executing program 4 (id=13389): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r0, 0x0, 0x40004) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0x20008000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 655.936299ms ago: executing program 1 (id=13390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xc2300, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$alg(0x26, 0x5, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x4, {0x0, 0x0, 0x0, r2, {0x4, 0x2}, {}, {0x1, 0x6}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_DST={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}]}}]}, 0x4c}}, 0x20040054) 600.957589ms ago: executing program 0 (id=13391): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000080)=0xb) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000140)={0x9, 0x5, 0x7}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000203010000000000000000000a000000080001000100000a09000200000000080200000008000400000000020800050000000002"], 0x38}}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4d2, 0x0, @remote}, 0x1c) 599.440491ms ago: executing program 4 (id=13392): r0 = socket$kcm(0x10, 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0003002000000000000072000000000000000000", 0x39}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010006000d0000000000010000000000000001410000001c001700000000000000006574683a73797a5f74756e"], 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca5b500028003a0000000000000100100200001267"], 0x0) syz_emit_ethernet(0x46, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaabbccddeeff88ca4f40003820000000"], 0x0) 532.702993ms ago: executing program 2 (id=13393): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000e0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 532.331299ms ago: executing program 3 (id=13394): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10012, r1, 0x0) 385.528292ms ago: executing program 4 (id=13395): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) shutdown(r0, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) 372.744688ms ago: executing program 2 (id=13396): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 254.080944ms ago: executing program 0 (id=13397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 239.446335ms ago: executing program 4 (id=13398): socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) pipe(&(0x7f00000001c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000600)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xffff, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="fffffffffffffff6b702040001"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 190.949627ms ago: executing program 1 (id=13399): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, 0x0, 0x4850) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000700)={0x70, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x3b, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x7}, @device_b, @broadcast, @random="bc7dd4e39344", {0x1, 0xff}}, 0x2, @default, 0x0, @void, @void, @val={0x3, 0x1, 0x8c}, @void, @void, @void, @val={0x72, 0x6}, @void, [{0xdd, 0x6, "739ae2e111e7"}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004}, 0xc000) 181.156419ms ago: executing program 3 (id=13400): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000002c0)=[{0x20, 0x2, 0x40, 0xfffff034}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x5, 0xfc0, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1, {[@ra={0x94, 0x4}]}}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x10, 0x7, 0x0, 0x8, {[@md5sig={0x13, 0x12, "570ae7f0b905a456f064db0300ffe61e"}]}}, {"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"}}}}, 0xfce) 56.44364ms ago: executing program 2 (id=13401): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r0) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000080030800400018008000300", @ANYRES32=r2], 0x24}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x114, 0x30, 0x1, 0x70bd28, 0x25dfdbfb, "", [@nested={0x103, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061d000017c8", @typed={0x4, 0xeb}, @nested={0x4, 0xaf}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x2000}, 0x20000000) 0s ago: executing program 4 (id=13402): r0 = socket(0x400000000010, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x620b}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xf, 0x0, 0x0, 0x2, 0x0, 0xc, 0x0, 0x0, 0x8}}) kernel console output (not intermixed with test programs): bute type 83 has an invalid length. [ 431.220928][T25086] team0: No ports can be present during mode change [ 431.443857][T25097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9255'. [ 431.443907][T25097] block nbd2: Unsupported socket: should be TCP or UNIX. [ 431.798509][T25115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9263'. [ 432.331612][T25143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9277'. [ 432.503980][T25152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9282'. [ 433.204325][T25175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9292'. [ 433.377565][T25182] Cannot find set identified by id 4 to match [ 433.491581][ T5620] Bluetooth: hci1: unexpected event 0x1d length: 10 > 5 [ 433.693546][T25196] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9299'. [ 434.264246][T25222] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 8 [ 434.900119][T25235] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9320'. [ 435.519084][T25253] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9327'. [ 435.519308][T25249] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.9327'. [ 436.238293][T25271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9337'. [ 437.459801][T25324] netlink: 'syz.2.9363': attribute type 3 has an invalid length. [ 437.604920][T25330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9367'. [ 437.605009][T25330] netlink: 2 bytes leftover after parsing attributes in process `syz.4.9367'. [ 437.836712][T25342] Bluetooth: hci1: too big key_count value 32778 [ 438.063334][T25350] veth0: entered promiscuous mode [ 438.063800][T25350] veth0: left promiscuous mode [ 438.500073][T25370] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9386'. [ 438.616936][T25378] xt_hashlimit: size too large, truncated to 1048576 [ 438.695675][T25381] netlink: 45349 bytes leftover after parsing attributes in process `syz.0.9391'. [ 438.695987][T25381] 0ªX¹¦Dö»: renamed from gretap0 [ 438.738485][T25381] 0ªX¹¦Dö»: left promiscuous mode [ 438.738701][T25381] 0ªX¹¦Dö»: entered allmulticast mode [ 438.790596][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 439.361517][T25398] netlink: 72 bytes leftover after parsing attributes in process `syz.1.9398'. [ 439.801989][T25422] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9410'. [ 440.074611][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.074677][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.078825][T25546] tipc: Enabled bearer , priority 10 [ 443.088424][T25546] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 443.592135][T25563] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9478'. [ 443.968735][T25585] netlink: 'syz.1.9488': attribute type 30 has an invalid length. [ 445.026424][T25628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9509'. [ 445.399088][T25647] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9518'. [ 446.062608][T25678] netlink: 'syz.1.9533': attribute type 10 has an invalid length. [ 446.065105][T25678] netlink: 'syz.1.9533': attribute type 10 has an invalid length. [ 446.144264][T25680] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9534'. [ 446.712977][T25705] netlink: 'syz.3.9545': attribute type 29 has an invalid length. [ 446.717286][T25705] netlink: 'syz.3.9545': attribute type 29 has an invalid length. [ 446.980446][T25717] sctp: [Deprecated]: syz.0.9553 (pid 25717) Use of int in maxseg socket option. [ 446.980446][T25717] Use struct sctp_assoc_value instead [ 447.386116][ T5620] block nbd2: Receive control failed (result -32) [ 448.426686][T25784] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9585'. [ 448.806073][T25802] sctp: [Deprecated]: syz.3.9594 (pid 25802) Use of struct sctp_assoc_value in delayed_ack socket option. [ 448.806073][T25802] Use struct sctp_sack_info instead [ 449.016160][T25811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9596'. [ 449.118000][T25811] netlink: 'syz.4.9596': attribute type 1 has an invalid length. [ 449.118025][T25811] netlink: 'syz.4.9596': attribute type 2 has an invalid length. [ 450.494006][T25874] ip6tnl0: Caught tx_queue_len zero misconfig [ 450.516374][T25875] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9627'. [ 451.032844][T25892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9636'. [ 452.217900][T25946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9662'. [ 452.241472][ T136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 453.242035][ T5620] block nbd3: Receive control failed (result -32) [ 453.459616][T25999] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9685'. [ 454.170802][T26028] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9698'. [ 454.923679][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 455.162585][T26053] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 455.231101][ T5721] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 455.303048][T26067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9717'. [ 455.311527][T26063] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9715'. [ 455.558946][T26073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9718'. [ 455.967279][T26091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9727'. [ 456.466360][T26109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9736'. [ 457.045178][T26139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9749'. [ 457.186483][T26147] xt_hashlimit: size too large, truncated to 1048576 [ 458.085533][T26181] netlink: 'syz.0.9765': attribute type 2 has an invalid length. [ 458.085559][T26181] netlink: 'syz.0.9765': attribute type 2 has an invalid length. [ 458.097260][T26183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9764'. [ 458.214007][T26183] bond0 (unregistering): Released all slaves [ 458.922641][T26207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9776'. [ 458.922665][T26207] netlink: 176 bytes leftover after parsing attributes in process `syz.0.9776'. [ 460.392527][T26272] syzkaller1: entered promiscuous mode [ 460.392749][T26272] syzkaller1: entered allmulticast mode [ 460.689460][T26278] __nla_validate_parse: 2 callbacks suppressed [ 460.689481][T26278] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9808'. [ 461.031607][T26295] ªªªªª»: renamed from dummy0 (while UP) [ 461.398263][T26309] sctp: [Deprecated]: syz.2.9822 (pid 26309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 461.398263][T26309] Use struct sctp_sack_info instead [ 461.676959][T26319] veth0: entered promiscuous mode [ 461.698547][T26317] veth0: left promiscuous mode [ 462.808235][T26362] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9846'. [ 462.808272][T26362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9846'. [ 462.987818][T26370] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9849'. [ 463.074554][ T5620] Bluetooth: hci4: unexpected cc 0x1003 length: 10 > 9 [ 463.074607][ T5620] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 464.238190][T26430] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9877'. [ 464.238225][T26430] bond0: ARP target 8.4.0.0 is already present [ 464.238244][T26430] bond0: option arp_ip_target: invalid value (1032) [ 464.273969][T26427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9875'. [ 464.274031][T26427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9875'. [ 464.310324][T26431] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.029184][T26456] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 465.212748][T26469] netlink: 'syz.2.9895': attribute type 1 has an invalid length. [ 465.212771][T26469] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9895'. [ 465.457067][T26473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9900'. [ 465.563792][T26480] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9901'. [ 465.873950][T26492] __nla_validate_parse: 1 callbacks suppressed [ 465.873971][T26492] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9906'. [ 466.317945][T26497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9906'. [ 466.317975][T26497] nbd: nbd64 already in use [ 466.349734][T26507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9913'. [ 466.349817][T26507] bridge_slave_1: left allmulticast mode [ 466.349837][T26507] bridge_slave_1: left promiscuous mode [ 466.350163][T26507] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.419639][T26507] bridge_slave_0: left allmulticast mode [ 466.419667][T26507] bridge_slave_0: left promiscuous mode [ 466.419895][T26507] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.809239][T26393] udevd[26393]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 466.977080][T26526] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 467.962402][T26564] 0ªX¹¦Dö»: entered promiscuous mode [ 468.362884][T26580] bridge0: port 3(veth0) entered blocking state [ 468.363871][T26580] bridge0: port 3(veth0) entered disabled state [ 468.364040][T26580] veth0: entered allmulticast mode [ 468.397454][T26580] veth0: entered promiscuous mode [ 468.399707][T26580] bridge0: port 3(veth0) entered blocking state [ 468.399824][T26580] bridge0: port 3(veth0) entered forwarding state [ 468.793476][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.880931][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.076927][T26604] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 469.212272][T26602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9955'. [ 469.477157][T26620] ip_tables: iptables: counters copy to user failed while replacing table [ 469.536918][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.545259][T17565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.115963][T26574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.349387][T26574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.438175][T26644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.645293][T26574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.769190][T26657] bond5: option mode: invalid value (10) [ 470.787153][T26657] bond5 (unregistering): Released all slaves [ 470.790843][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 471.243342][T11847] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.306568][T26674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9977'. [ 471.330082][T11847] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.347937][T11847] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.354211][T11847] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.334635][T26701] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9988'. [ 472.798522][ T10] dummy0 speed is unknown, defaulting to 1000 [ 472.919645][T26727] blkio.reset_stats is deprecated [ 473.656176][T26759] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10013'. [ 474.239631][T26786] netlink: 'syz.4.10023': attribute type 11 has an invalid length. [ 474.328314][T26789] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 474.633787][T17564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.634184][T17564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.640087][T11850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.284041][T11850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.531515][T17564] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.532120][T17564] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.532154][T17564] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.532184][T17564] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 477.206201][T26912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10073'. [ 477.206244][T26912] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10073'. [ 477.561178][T11847] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.562558][T11847] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.562591][T11847] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 477.562621][T11847] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.009155][T26935] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10081'. [ 478.605298][T26973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10095'. [ 478.645818][T26976] vcan0: tx address claim with dlc 0 [ 478.734732][T26973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10095'. [ 479.419749][T27005] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 479.755323][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.085773][T27015] macvlan0: entered promiscuous mode [ 480.359368][T27027] sctp: [Deprecated]: syz.1.10117 (pid 27027) Use of struct sctp_assoc_value in delayed_ack socket option. [ 480.359368][T27027] Use struct sctp_sack_info instead [ 480.421936][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.440011][T11850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.452415][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.698239][T27038] vcan0: tx address claim with broadcast sa [ 482.150583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.151049][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.151364][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.151684][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.153438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.153813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.986673][T27130] syzkaller1: entered promiscuous mode [ 482.986697][T27130] syzkaller1: entered allmulticast mode [ 484.152704][T27186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10183'. [ 484.152727][T27186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10183'. [ 484.253932][ T136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 484.985513][T27218] vcan0: tx address claim with different name [ 485.015613][T27220] netlink: 'syz.0.10199': attribute type 4 has an invalid length. [ 485.365429][T27236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10206'. [ 485.514483][T17564] net_ratelimit: 131 callbacks suppressed [ 485.514503][T17564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.151285][T17564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.151816][T17564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.152303][T11850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.177541][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880337dac00: rx timeout, send abort [ 486.502793][T27271] lo: left promiscuous mode [ 486.599681][T27271] 0ªX¹¦Dö»: left allmulticast mode [ 486.674092][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079fd6800: rx timeout, send abort [ 486.679102][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880337dac00: abort rx timeout. Force session deactivation [ 487.174145][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079fd6800: abort rx timeout. Force session deactivation [ 487.178502][T27271] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.178709][T27271] bridge0: port 1(1¾x9ÿ) entered disabled state [ 487.337896][T27271] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 487.470523][T27296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10232'. [ 489.848061][T27405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10266'. [ 490.573803][T27434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10276'. [ 490.740261][T27440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10277'. [ 490.955123][T27449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10280'. [ 491.199134][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.284915][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.402152][T27462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10285'. [ 491.918072][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.918515][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.005343][T27495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10295'. [ 492.006606][T27493] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10294'. [ 492.006941][T27495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10295'. [ 493.654728][T27559] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10325'. [ 493.835500][T27568] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 493.849122][T27568] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 493.974140][T27569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10329'. [ 494.008082][T27574] ieee802154 phy0 wpan0: encryption failed: -126 [ 494.409676][ T5620] block nbd4: Receive control failed (result -107) [ 494.595363][T27601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.678647][T27603] bond0: invalid NS target ff00:: specified for addition [ 494.678677][T27603] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 495.538770][T27640] batman_adv: batadv0: Adding interface: syz_tun [ 495.538788][T27640] batman_adv: batadv0: The MTU of interface syz_tun is too small (257) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.538819][T27640] batman_adv: batadv0: Interface activated: syz_tun [ 496.019724][T27657] __nla_validate_parse: 7 callbacks suppressed [ 496.019745][T27657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10369'. [ 496.019772][T27657] netlink: 'syz.0.10369': attribute type 7 has an invalid length. [ 496.019784][T27657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10369'. [ 496.391551][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.502574][T27675] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 496.582991][T27678] block nbd0: Unsupported socket: should be TCP or UNIX. [ 496.667348][T27680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10381'. [ 497.033408][ T987] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.568526][T27715] sctp: [Deprecated]: syz.0.10397 (pid 27715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.568526][T27715] Use struct sctp_sack_info instead [ 497.672902][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.673419][ T50] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.802317][T27719] netlink: 7 bytes leftover after parsing attributes in process `syz.3.10398'. [ 498.798255][T27758] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.10416'. [ 499.784997][T27806] trusted_key: syz.2.10439 sent an empty control message without MSG_MORE. [ 500.355603][T27833] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10449'. [ 500.382188][T27832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10451'. [ 501.130703][T27856] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 501.514709][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.514767][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.870567][T27890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10465'. [ 502.181530][ T160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.318911][T27904] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10473'. [ 502.319008][T27904] netlink: 'syz.0.10473': attribute type 7 has an invalid length. [ 502.319022][T27904] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10473'. [ 502.792727][ T160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.793613][ T160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.210095][T27914] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.285577][T27914] bridge_slave_0 (unregistering): left allmulticast mode [ 503.285605][T27914] bridge_slave_0 (unregistering): left promiscuous mode [ 503.285883][T27914] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.365648][T27886] wg1 speed is unknown, defaulting to 1000 [ 503.436722][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.178068][T27886] dummy0 speed is unknown, defaulting to 1000 [ 504.757578][T27958] netlink: 'syz.4.10498': attribute type 2 has an invalid length. [ 504.942392][T27967] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10501'. [ 507.911121][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.940829][T28056] netlink: 'syz.1.10540': attribute type 1 has an invalid length. [ 508.227824][T28065] block nbd0: Unsupported socket: should be TCP or UNIX. [ 508.553973][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.557176][T17564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.557562][T17564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.741178][T28083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10553'. [ 510.182254][T28123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10570'. [ 510.182291][T28123] netlink: 'syz.2.10570': attribute type 10 has an invalid length. [ 510.182305][T28123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10570'. [ 510.765714][T28146] erspan0: entered promiscuous mode [ 510.765885][T28146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10581'. [ 510.973437][T28157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10584'. [ 510.973475][T28157] netlink: 'syz.0.10584': attribute type 7 has an invalid length. [ 510.973488][T28157] netlink: 'syz.0.10584': attribute type 8 has an invalid length. [ 510.973499][T28157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10584'. [ 511.188166][T28167] netlink: 'syz.3.10592': attribute type 17 has an invalid length. [ 511.188190][T28167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10592'. [ 511.188215][T28167] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10592'. [ 511.258829][T28169] netlink: 4384 bytes leftover after parsing attributes in process `syz.0.10590'. [ 511.455775][T28174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10594'. [ 511.532418][T28180] netlink: 'syz.3.10597': attribute type 2 has an invalid length. [ 511.729617][T28188] netlink: 'syz.3.10600': attribute type 39 has an invalid length. [ 512.016707][T28185] syzkaller1: entered promiscuous mode [ 512.016925][T28185] syzkaller1: entered allmulticast mode [ 512.557019][T28212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.596702][T28207] netlink: 'syz.3.10607': attribute type 1 has an invalid length. [ 512.596725][T28207] netlink: 'syz.3.10607': attribute type 2 has an invalid length. [ 512.785803][T28215] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 513.524503][T28246] vcan0: tx address claim with dest, not broadcast [ 513.684139][ T160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.235329][T28266] netlink: 'syz.4.10632': attribute type 17 has an invalid length. [ 514.235354][T28266] __nla_validate_parse: 1 callbacks suppressed [ 514.235365][T28266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10632'. [ 514.235391][T28266] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10632'. [ 514.311622][T17564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.312164][ T160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.312642][ T160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.315409][T28266] gretap0: entered promiscuous mode [ 514.366356][T28266] gretap0: left promiscuous mode [ 514.815912][T28280] netlink: 'syz.4.10638': attribute type 1 has an invalid length. [ 516.233298][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 516.472185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.562699][T28340] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 516.787633][T28350] bond0: (slave bond_slave_1): Releasing backup interface [ 516.804954][T28350] bond_slave_1: left allmulticast mode [ 516.838062][T28346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.343880][T28376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10683'. [ 518.550908][T28415] veth0: Caught tx_queue_len zero misconfig [ 518.722089][ T160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.018240][T28427] netlink: 'syz.0.10707': attribute type 1 has an invalid length. [ 519.018266][T28427] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.10707'. [ 519.018281][T28427] netlink: 'syz.0.10707': attribute type 1 has an invalid length. [ 519.018293][T28427] netlink: 2016 bytes leftover after parsing attributes in process `syz.0.10707'. [ 519.351741][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.432822][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.783836][T28455] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 519.868571][T28457] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10720'. [ 519.895414][T28457] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10720'. [ 519.895739][T28457] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10720'. [ 520.080299][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.415114][T28523] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.766000][T28537] netlink: 40 bytes leftover after parsing attributes in process `syz.3.10756'. [ 522.462037][T28556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.394963][T28601] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10785'. [ 523.556782][T28607] netlink: 6 bytes leftover after parsing attributes in process `syz.2.10789'. [ 523.755175][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.806001][T28622] netlink: 'syz.3.10791': attribute type 2 has an invalid length. [ 523.811487][T28622] netlink: 'syz.3.10791': attribute type 2 has an invalid length. [ 523.811506][T28622] netlink: 67 bytes leftover after parsing attributes in process `syz.3.10791'. [ 524.207056][T28641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10802'. [ 524.207092][T28641] netlink: 'syz.4.10802': attribute type 7 has an invalid length. [ 524.207105][T28641] netlink: 'syz.4.10802': attribute type 8 has an invalid length. [ 524.207116][T28641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10802'. [ 524.263312][T28641] erspan0: entered promiscuous mode [ 524.264502][T28641] erspan0: left promiscuous mode [ 524.320482][T28645] ip_tables: iptables: counters copy to user failed while replacing table [ 524.321511][T28645] C: renamed from lo (while UP) [ 524.364551][T28645] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 524.486321][T28648] netlink: 'syz.1.10805': attribute type 7 has an invalid length. [ 524.560346][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.717503][T28661] netlink: 'syz.4.10812': attribute type 16 has an invalid length. [ 524.717524][T28661] netlink: 'syz.4.10812': attribute type 17 has an invalid length. [ 524.856876][T28668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10814'. [ 524.892502][ T5620] block nbd5: Receive control failed (result -107) [ 524.897898][T28661] erspan0: entered promiscuous mode [ 524.971156][T28661] bond0: left allmulticast mode [ 524.971181][T28661] bond_slave_0: left allmulticast mode [ 524.971206][T28661] bond_slave_1: left allmulticast mode [ 525.145945][T28661] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 525.146394][T28661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 525.193413][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.198022][T28661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 525.239972][T28661] gretap1: left promiscuous mode [ 525.239995][T28661] gretap1: left allmulticast mode [ 525.439255][T28661] ip6gre2: left allmulticast mode [ 525.460769][T28661] bridge2: left promiscuous mode [ 525.460795][T28661] bridge2: left allmulticast mode [ 525.489030][T28661] 8021q: adding VLAN 0 to HW filter on device bond2 [ 525.511867][T28661] 8021q: adding VLAN 0 to HW filter on device bond3 [ 525.614715][T28661] 8021q: adding VLAN 0 to HW filter on device bond4 [ 525.830935][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.870259][ T136] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.882964][ T136] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.887838][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.887922][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 525.971564][ T136] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 525.973785][ T136] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.002761][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.038551][T28691] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 526.164617][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 526.166490][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 526.196175][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 526.228329][T28697] netlink: 'syz.1.10826': attribute type 11 has an invalid length. [ 526.328935][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.473576][ T25] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 526.560730][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 526.847183][T28722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10837'. [ 526.847223][T28722] netlink: 'syz.3.10837': attribute type 10 has an invalid length. [ 526.847239][T28722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10837'. [ 527.030443][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 527.132540][T28728] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 527.136902][T28728] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 527.192120][ T5620] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 527.486079][T28743] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.974522][T28766] pim6reg1: entered promiscuous mode [ 527.974736][T28766] pim6reg1: entered allmulticast mode [ 528.551312][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 528.793322][ T31] audit: type=1800 audit(1791561485.733:6): pid=28790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10861" name=0A dev="tmpfs" ino=11148 res=0 errno=0 [ 529.031521][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.498687][T28823] bond0: invalid NS target :: specified for addition [ 529.498848][T28823] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 529.673522][T17564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.692499][T28828] netlink: 'syz.2.10878': attribute type 1 has an invalid length. [ 529.831553][T28836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.873216][T28838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10882'. [ 530.008760][T28842] syzkaller0: entered promiscuous mode [ 530.008781][T28842] syzkaller0: entered allmulticast mode [ 530.138499][T28844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10884'. [ 530.448562][T28852] xt_CT: No such helper "netbios-ns" [ 530.479374][T28858] netlink: 'syz.0.10890': attribute type 1 has an invalid length. [ 530.572169][T28858] 8021q: adding VLAN 0 to HW filter on device bond2 [ 530.575255][T28860] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10892'. [ 530.624979][T28861] bond2: (slave gretap0): making interface the new active one [ 530.628899][T28861] bond2: (slave gretap0): Enslaving as an active interface with an up link [ 530.962669][T17564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.068014][T28876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10898'. [ 531.419868][T28892] netlink: 'syz.2.10905': attribute type 15 has an invalid length. [ 531.419891][T28892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10905'. [ 531.473163][T28892] netlink: 'syz.2.10905': attribute type 15 has an invalid length. [ 531.473186][T28892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10905'. [ 531.473365][T11847] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 531.508974][ T12] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 531.509198][ T12] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 531.509365][ T12] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 531.591100][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.620645][T28895] netlink: 'syz.3.10906': attribute type 21 has an invalid length. [ 531.620668][T28895] netlink: 128 bytes leftover after parsing attributes in process `syz.3.10906'. [ 531.620717][T28895] netlink: 'syz.3.10906': attribute type 5 has an invalid length. [ 531.620729][T28895] netlink: 'syz.3.10906': attribute type 6 has an invalid length. [ 531.620740][T28895] netlink: 3 bytes leftover after parsing attributes in process `syz.3.10906'. [ 531.839779][T28902] netlink: 'syz.3.10910': attribute type 1 has an invalid length. [ 531.928485][T28905] nbd: nbd1 already in use [ 531.936248][T28905] block nbd1: NBD_DISCONNECT [ 531.936329][T28905] block nbd1: Send disconnect failed -32 [ 532.296902][T28917] hsr0: entered allmulticast mode [ 532.296924][T28917] hsr_slave_0: entered allmulticast mode [ 532.296950][T28917] hsr_slave_1: entered allmulticast mode [ 532.299876][T28917] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10917'. [ 532.328185][T28917] hsr_slave_0: left promiscuous mode [ 532.331021][T28917] hsr_slave_1: left promiscuous mode [ 532.348125][T28917] hsr0 (unregistering): left allmulticast mode [ 532.681615][T28936] IPv4: Oversized IP packet from 127.202.26.0 [ 532.690929][T28939] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10926'. [ 532.901921][T28945] xt_hashlimit: size too large, truncated to 1048576 [ 533.482864][T28962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10933'. [ 533.482901][T28962] netlink: 'syz.2.10933': attribute type 9 has an invalid length. [ 533.482914][T28962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10933'. [ 533.506462][T28962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10933'. [ 533.506495][T28962] netlink: 'syz.2.10933': attribute type 9 has an invalid length. [ 533.506507][T28962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10933'. [ 533.705335][T28969] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.10936'. [ 534.042747][T28980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10941'. [ 534.080065][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.080860][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803fbb5000: rx timeout, send abort [ 534.339831][T28990] veth0_to_bond: entered allmulticast mode [ 534.580904][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803fbb5000: abort rx timeout. Force session deactivation [ 534.710911][T17564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.047511][T29009] validate_nla: 2 callbacks suppressed [ 535.047533][T29009] netlink: 'syz.2.10954': attribute type 1 has an invalid length. [ 535.127110][T29009] 8021q: adding VLAN 0 to HW filter on device bond5 [ 535.160359][T29011] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10955'. [ 535.206842][T29013] bond5: (slave gretap1): making interface the new active one [ 535.210125][T29013] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 535.291931][T29016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10956'. [ 535.678044][T29031] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 535.696882][T29031] bond5: (slave lo): Enslaving as an active interface with an up link [ 535.723368][T29031] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 535.940423][T28948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.445565][T29041] netlink: 'syz.3.10966': attribute type 20 has an invalid length. [ 536.612188][T29041] netlink: 'syz.3.10966': attribute type 20 has an invalid length. [ 537.350766][ C0] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 537.350790][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 537.990541][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 538.108514][T29108] netlink: 'syz.3.10998': attribute type 4 has an invalid length. [ 538.167013][T29109] netlink: 'syz.3.10998': attribute type 4 has an invalid length. [ 538.556773][T29123] __nla_validate_parse: 3 callbacks suppressed [ 538.556792][T29123] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11004'. [ 538.556806][T29123] bridge: RTM_NEWNEIGH with invalid ether address [ 538.564794][T29123] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11004'. [ 538.564817][T29123] bridge: RTM_NEWNEIGH with invalid ether address [ 538.837044][T29133] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11007'. [ 538.890779][T29135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11009'. [ 539.190662][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.190990][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.272366][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 539.912888][T11847] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.704203][T29209] netlink: 'syz.4.11038': attribute type 7 has an invalid length. [ 541.771924][T29209] netlink: 'syz.4.11038': attribute type 7 has an invalid length. [ 542.032044][T29147] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 542.390692][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.391008][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.529553][T29226] ip6gre1: entered promiscuous mode [ 542.529578][T29226] ip6gre1: entered allmulticast mode [ 542.576348][T29226] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 543.095204][T11847] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.095415][T11847] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.121016][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.171898][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.204810][T29254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11057'. [ 543.370669][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 543.547678][ T43] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 543.549044][T29265] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 543.843367][T29281] bridge3: entered promiscuous mode [ 543.843392][T29281] bridge3: entered allmulticast mode [ 544.489174][T29299] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11077'. [ 544.689611][T29310] sch_tbf: burst 0 is lower than device gre0 mtu (1306) ! [ 546.230539][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.870627][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 546.975095][T29395] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11115'. [ 547.910713][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 547.993506][T29436] netlink: 80 bytes leftover after parsing attributes in process `syz.0.11126'. [ 548.481196][T29451] gretap2: entered promiscuous mode [ 548.483440][T29451] batman_adv: batadv0: Adding interface: gretap2 [ 548.483458][T29451] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 548.483481][T29451] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 549.231761][T29481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11146'. [ 549.409383][T29484] netlink: 112 bytes leftover after parsing attributes in process `syz.4.11147'. [ 549.430489][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.430772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.431060][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.517414][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.963581][T29504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11156'. [ 550.489330][T29518] netlink: 'syz.3.11163': attribute type 5 has an invalid length. [ 550.489352][T29518] netlink: 'syz.3.11163': attribute type 9 has an invalid length. [ 550.489365][T29518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11163'. [ 550.658636][T29522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11165'. [ 550.658690][T29522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11165'. [ 550.718249][T29522] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11165'. [ 550.718271][T29522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11165'. [ 550.738235][T29524] ip_tables: iptables: counters copy to user failed while replacing table [ 550.742213][ T136] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.742802][ T136] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.742857][ T136] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.742888][ T136] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.125616][T29541] netlink: 'syz.4.11171': attribute type 1 has an invalid length. [ 551.140546][T29536] netlink: 'syz.0.11169': attribute type 1 has an invalid length. [ 551.242397][T29536] 8021q: adding VLAN 0 to HW filter on device bond3 [ 551.305313][T29544] bond3: (slave geneve3): making interface the new active one [ 551.309609][T29544] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 551.391386][T29550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11174'. [ 552.181854][T29572] ip_tables: iptables: counters copy to user failed while replacing table [ 552.472500][T29556] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 552.596580][T29584] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 552.727157][T29592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11193'. [ 553.003602][T29597] syzkaller1: entered promiscuous mode [ 553.003626][T29597] syzkaller1: entered allmulticast mode [ 554.317199][T29658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11219'. [ 554.550507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.550805][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.551138][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.630439][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 555.089119][T29693] mac80211_hwsim hwsim24 syzkaller1: entered promiscuous mode [ 555.089161][T29693] mac80211_hwsim hwsim24 syzkaller1: entered allmulticast mode [ 555.292268][T11850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.532548][T29710] netlink: 'syz.2.11242': attribute type 2 has an invalid length. [ 556.510284][T29754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11261'. [ 556.510307][T29754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11261'. [ 556.510331][T29754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11261'. [ 556.555374][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 557.239194][T29777] netlink: 'syz.3.11269': attribute type 13 has an invalid length. [ 557.239218][T29777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11269'. [ 557.264858][T29777] netlink: 'syz.3.11269': attribute type 13 has an invalid length. [ 557.264881][T29777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11269'. [ 557.555367][T29792] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 558.075032][T29816] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11288'. [ 558.692505][T29840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11298'. [ 559.045590][T29857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11305'. [ 559.048493][T29857] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11305'. [ 559.590518][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.590782][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.895985][T29898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11324'. [ 559.999499][T29899] bridge5: entered promiscuous mode [ 559.999526][T29899] bridge5: entered allmulticast mode [ 561.406181][T29957] bridge0: port 1(veth1_to_bridge) entered blocking state [ 561.406330][T29957] bridge0: port 1(veth1_to_bridge) entered listening state [ 561.687966][T29973] netlink: 'syz.2.11356': attribute type 16 has an invalid length. [ 561.687990][T29973] __nla_validate_parse: 7 callbacks suppressed [ 561.688001][T29973] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11356'. [ 562.206310][T29994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11364'. [ 562.765834][ T31] audit: type=1800 audit(1791561519.703:7): pid=30013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11375" name=680B20 dev="tmpfs" ino=11569 res=0 errno=0 [ 562.870776][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.871089][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.958729][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.958787][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.659422][T30049] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 564.071588][T30066] netlink: 'syz.4.11401': attribute type 14 has an invalid length. [ 564.071613][T30066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11401'. [ 564.125641][T30066] netlink: 'syz.4.11401': attribute type 14 has an invalid length. [ 564.125665][T30066] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11401'. [ 564.304014][T30074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11402'. [ 564.361232][T30077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11405'. [ 564.361268][T30077] netlink: 'syz.1.11405': attribute type 10 has an invalid length. [ 564.361283][T30077] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11405'. [ 564.616776][T30077] geneve7: entered promiscuous mode [ 564.616799][T30077] geneve7: entered allmulticast mode [ 564.909624][T30094] syzkaller1: entered promiscuous mode [ 564.909647][T30094] syzkaller1: entered allmulticast mode [ 565.523508][T17564] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 566.356435][T30140] netlink: 27 bytes leftover after parsing attributes in process `syz.3.11432'. [ 566.562987][ T31] audit: type=1800 audit(1791561523.503:8): pid=30144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11434" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=11629 res=0 errno=0 [ 566.769295][T30148] netlink: 'syz.3.11435': attribute type 1 has an invalid length. [ 566.964054][T30150] bond0: (slave gretap2): making interface the new active one [ 566.986562][T30150] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 567.162959][T30159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11439'. [ 567.315134][T30165] IPVS: rr: UDP [::1]:8080 - no destination available [ 567.667145][T30184] netlink: 'syz.3.11447': attribute type 2 has an invalid length. [ 567.785424][ T43] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x3f [ 567.891887][T30186] mac80211_hwsim hwsim24 syzkaller1: left promiscuous mode [ 567.892110][T30186] mac80211_hwsim hwsim24 syzkaller1: left allmulticast mode [ 567.990482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.990744][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.062814][T30197] 8021q: adding VLAN 0 to HW filter on device bond6 [ 568.627140][T30221] netlink: 27 bytes leftover after parsing attributes in process `syz.0.11462'. [ 569.094730][T30234] siw: device registration error -23 [ 570.630614][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 571.190480][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.190724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.592491][T30355] netlink: 76 bytes leftover after parsing attributes in process `syz.0.11510'. [ 572.742798][T30361] syz_tun: entered allmulticast mode [ 572.744490][T30359] syz_tun: left allmulticast mode [ 573.191756][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 574.352318][T30410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11533'. [ 574.390482][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.390752][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.462033][T30410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11533'. [ 574.601490][T30417] syzkaller1: entered promiscuous mode [ 574.601513][T30417] syzkaller1: entered allmulticast mode [ 575.900645][T30463] syzkaller1: entered promiscuous mode [ 575.900668][T30463] syzkaller1: entered allmulticast mode [ 575.994236][T30468] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11551'. [ 576.059127][T30465] bond4: entered promiscuous mode [ 576.059150][T30465] bond4: entered allmulticast mode [ 576.077977][T30469] bond4: left allmulticast mode [ 576.095466][T30469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 576.276536][T30474] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.11552'. [ 576.665534][T30485] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 576.665580][T30485] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 576.665611][T30485] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 576.665641][T30485] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 576.665671][T30485] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 576.665701][T30485] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 576.665730][T30485] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 576.665860][T30485] aoe: error packet from 2806.99@lo; ecode=101 'no such error' [ 576.998318][T30499] netlink: 'syz.0.11563': attribute type 1 has an invalid length. [ 577.102958][T30503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11564'. [ 577.566263][T30501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11564'. [ 577.644795][T30502] bond5: (slave gretap1): making interface the new active one [ 577.665073][T30502] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 577.976196][T30518] tipc: Resetting bearer [ 578.036661][T30518] tipc: Disabling bearer [ 578.094782][T30518] v: renamed from veth0_vlan [ 578.186867][T30528] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 579.226372][T30569] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 579.510537][ C0] net_ratelimit: 14573 callbacks suppressed [ 579.510560][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.510887][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.835407][T30628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11606'. [ 581.595016][T30648] netlink: 'syz.0.11614': attribute type 1 has an invalid length. [ 581.755766][T30648] bond6: entered promiscuous mode [ 581.756219][T30648] 8021q: adding VLAN 0 to HW filter on device bond6 [ 581.987800][T30663] 8021q: adding VLAN 0 to HW filter on device bond6 [ 581.988974][T30663] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 581.988995][T30663] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 582.008802][T30663] bond6: (slave ip6gre2): making interface the new active one [ 582.008825][T30663] ip6gre2: entered promiscuous mode [ 582.031679][T30663] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 582.275934][T30675] netlink: 21 bytes leftover after parsing attributes in process `syz.3.11622'. [ 582.373293][T30682] netlink: 'syz.2.11624': attribute type 4 has an invalid length. [ 582.428142][T30685] netlink: 'syz.2.11624': attribute type 4 has an invalid length. [ 582.712013][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 582.713666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 584.069925][T30734] sctp: [Deprecated]: syz.3.11645 (pid 30734) Use of int in max_burst socket option deprecated. [ 584.069925][T30734] Use struct sctp_assoc_value instead [ 584.125953][T30737] netlink: 76 bytes leftover after parsing attributes in process `syz.1.11647'. [ 584.914626][T30770] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11660'. [ 585.071075][T30779] ip_tables: iptables: counters copy to user failed while replacing table [ 585.354698][T28677] Bluetooth: hci4: command 0x0406 tx timeout [ 585.754276][T30799] netlink: 'syz.0.11670': attribute type 8 has an invalid length. [ 585.754298][T30799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11670'. [ 585.801600][T30799] veth1_to_team: entered promiscuous mode [ 585.804466][T30799] gretap0: entered promiscuous mode [ 585.804617][T30799] gretap0: left promiscuous mode [ 585.806913][T30799] veth1_to_team: left promiscuous mode [ 585.876973][T30801] netlink: 'syz.4.11672': attribute type 15 has an invalid length. [ 585.910612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.910922][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.101837][T30808] netlink: 'syz.1.11673': attribute type 1 has an invalid length. [ 586.212094][T30808] bond6: entered promiscuous mode [ 586.214239][T30808] 8021q: adding VLAN 0 to HW filter on device bond6 [ 586.358077][T30818] 8021q: adding VLAN 0 to HW filter on device bond6 [ 586.358418][T30818] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 586.358438][T30818] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 586.408403][T30818] bond6: (slave ip6gre2): making interface the new active one [ 586.408428][T30818] ip6gre2: entered promiscuous mode [ 586.438465][T30818] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 586.760918][T30835] batman_adv: batadv0: Adding interface: syzkaller0 [ 586.760937][T30835] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.761483][T30835] batman_adv: batadv0: Interface activated: syzkaller0 [ 586.821193][T30838] batman_adv: batadv0: Adding interface: syzkaller0 [ 586.821210][T30838] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 586.821240][T30838] batman_adv: batadv0: Interface activated: syzkaller0 [ 586.825236][T30829] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 586.911140][T30829] batman_adv: batadv0: Removing interface: syzkaller0 [ 586.988425][T30832] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 587.060040][T30832] batman_adv: batadv0: Removing interface: syzkaller0 [ 587.217163][T30844] xfrm0: entered promiscuous mode [ 587.297666][T30851] netlink: 240 bytes leftover after parsing attributes in process `syz.0.11688'. [ 587.430593][T28677] Bluetooth: hci4: command 0x0406 tx timeout [ 587.570736][T30860] veth1_to_bond: entered allmulticast mode [ 587.591761][T30860] veth1_to_bond: left allmulticast mode [ 588.813240][T30903] batman_adv: batadv0: Adding interface: syzkaller0 [ 588.813263][T30903] batman_adv: batadv0: Interface activated: syzkaller0 [ 588.859769][T30901] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 589.058765][T30916] Bluetooth: ISO socket layer initialized [ 589.073945][T30901] batman_adv: batadv0: Removing interface: syzkaller0 [ 589.298905][T30921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11716'. [ 589.414705][T30923] nbd: nbd4 already in use [ 589.415281][T30923] block nbd4: NBD_DISCONNECT [ 589.434964][T30923] block nbd4: Send disconnect failed -32 [ 589.434992][T30923] block nbd4: shutting down sockets [ 590.151012][T30952] netlink: 'syz.2.11729': attribute type 1 has an invalid length. [ 590.151036][T30952] netlink: 'syz.2.11729': attribute type 4 has an invalid length. [ 590.151048][T30952] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.11729'. [ 590.157111][T30952] netlink: 'syz.2.11729': attribute type 1 has an invalid length. [ 590.157133][T30952] netlink: 'syz.2.11729': attribute type 4 has an invalid length. [ 590.157144][T30952] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.11729'. [ 590.390479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.390880][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 590.717313][T30964] syzkaller1: entered promiscuous mode [ 590.717335][T30964] syzkaller1: entered allmulticast mode [ 591.752835][ C0] bridge0: port 1(veth1_to_bridge) entered learning state [ 591.851355][T31007] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 591.958901][T31013] sit0: entered promiscuous mode [ 591.971750][T31013] netlink: 'syz.4.11753': attribute type 1 has an invalid length. [ 591.971772][T31013] netlink: 1 bytes leftover after parsing attributes in process `syz.4.11753'. [ 592.547324][T31037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11765'. [ 592.548211][T31037] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11765'. [ 592.610804][T31038] batman_adv: batadv0: Interface deactivated: syz_tun [ 592.747465][T31038] batman_adv: batadv0: Removing interface: syz_tun [ 593.002561][T31049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11768'. [ 593.015640][T31049] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11768'. [ 593.361613][T31061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11770'. [ 593.567233][T31072] sctp: [Deprecated]: syz.1.11773 (pid 31072) Use of int in maxseg socket option. [ 593.567233][T31072] Use struct sctp_assoc_value instead [ 593.590988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.591289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.569755][T31115] PKCS7: Unknown OID: [4] (bad) [ 594.569774][T31115] PKCS7: Only support pkcs7_signedData type [ 594.711921][T31120] netlink: 'syz.3.11790': attribute type 1 has an invalid length. [ 595.091660][T31128] bond5: (slave geneve3): making interface the new active one [ 595.098735][T31128] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 595.201393][ T61] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 20004 - 0 [ 595.202990][T17565] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 20004 - 0 [ 595.212422][ T61] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 20004 - 0 [ 596.323022][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 596.723306][T31193] batman_adv: batadv0: Adding interface: syzkaller0 [ 596.723325][T31193] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 596.723353][T31193] batman_adv: batadv0: Interface activated: syzkaller0 [ 596.870989][ T43] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 597.008916][T31197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11810'. [ 597.112595][T31192] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 597.171879][T31192] batman_adv: batadv0: Removing interface: syzkaller0 [ 597.317330][T31201] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11812'. [ 597.351913][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 597.430614][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.430959][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.696665][T31126] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 597.987015][T31216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11817'. [ 597.987041][T31216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11817'. [ 597.987070][T31216] netlink: 'syz.3.11817': attribute type 6 has an invalid length. [ 598.038528][T31216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11817'. [ 598.038550][T31216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11817'. [ 598.039137][T31212] netlink: 176 bytes leftover after parsing attributes in process `syz.2.11818'. [ 598.045668][T31216] netlink: 'syz.3.11817': attribute type 6 has an invalid length. [ 598.294092][T31227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11821'. [ 598.295021][T31227] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11821'. [ 598.526268][T31234] ip_tables: iptables: counters copy to user failed while replacing table [ 598.624422][T31238] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 599.101655][T31258] xt_CT: You must specify a L4 protocol and not use inversions on it [ 600.420336][T31287] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.420447][T31287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.420741][T31287] bridge0: port 1(1¾x9ÿ) entered blocking state [ 600.420863][T31287] bridge0: port 1(1¾x9ÿ) entered forwarding state [ 600.447053][T31287] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.478939][T31287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.490739][T31306] netlink: 60 bytes leftover after parsing attributes in process `syz.2.11853'. [ 600.836598][T31287] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 601.190550][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.190864][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.191127][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.449835][T31343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 602.630805][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 602.814186][T31354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11870'. [ 604.318632][T31381] veth1_to_bridge: left allmulticast mode [ 604.318660][T31381] veth1_to_bridge: left promiscuous mode [ 604.318892][T31381] bridge0: port 1(veth1_to_bridge) entered disabled state [ 604.541943][T31381] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 604.576758][T31387] netlink: 9 bytes leftover after parsing attributes in process `syz.4.11885'. [ 604.627335][T31392] netlink: 5 bytes leftover after parsing attributes in process `syz.4.11885'. [ 604.671805][T31387] gretap0: entered promiscuous mode [ 604.692179][T31392] 0ªî{X¹¦: renamed from gretap0 [ 604.715720][T31392] 0ªî{X¹¦: left promiscuous mode [ 604.715744][T31392] 0ªî{X¹¦: entered allmulticast mode [ 604.732387][T31392] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 605.830439][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 607.030477][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.030791][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.031105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.279120][T31468] syzkaller0: left promiscuous mode [ 607.279337][T31468] syzkaller0: left allmulticast mode [ 608.769552][T31430] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 609.779768][T31517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11929'. [ 610.031182][T31523] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 610.034647][T31523] xt_hashlimit: size too large, truncated to 1048576 [ 610.150398][T28677] Bluetooth: hci4: command 0x0406 tx timeout [ 611.719283][T31543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11938'. [ 611.719319][T31543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11938'. [ 611.856834][T31568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11945'. [ 611.857131][T31543] bridge0: entered promiscuous mode [ 611.857311][T31543] bridge0: entered allmulticast mode [ 612.070543][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.070841][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.071083][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.612605][T31583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11949'. [ 612.652531][T31586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11948'. [ 612.677399][T31563] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 613.890510][T31613] ip_tables: iptables: counters copy to user failed while replacing table [ 614.198825][T31623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11964'. [ 614.369717][T31627] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.11966'. [ 614.457540][T31633] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 614.605651][T31639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11969'. [ 615.322865][T31654] netlink: 9 bytes leftover after parsing attributes in process `syz.4.11974'. [ 615.341324][T31654] netlink: 9 bytes leftover after parsing attributes in process `syz.4.11974'. [ 616.755154][T31694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11990'. [ 617.110638][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.111022][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.116728][T31720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11998'. [ 619.492794][T31750] netlink: 'syz.4.12007': attribute type 4 has an invalid length. [ 619.492839][T31750] netlink: 17 bytes leftover after parsing attributes in process `syz.4.12007'. [ 620.473826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.474103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.095586][T31783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12018'. [ 621.117577][T31786] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12020'. [ 621.159777][T31787] tipc: Failed to remove unknown binding: 66,1,1/10136234:2439518242/2439518244 [ 621.717470][T31808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12027'. [ 621.885130][T31816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12029'. [ 622.587371][T31834] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.12037'. [ 622.588500][T31839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12040'. [ 622.873155][T31848] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 623.139291][T31853] netlink: 'syz.1.12044': attribute type 4 has an invalid length. [ 623.852513][T31866] bond6: entered allmulticast mode [ 623.852536][T31866] ip6gre2: entered allmulticast mode [ 623.965225][T31865] bond6: left allmulticast mode [ 623.965250][T31865] ip6gre2: left allmulticast mode [ 624.310438][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.310736][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.400956][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.401017][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.271552][T31903] bridge0: port 1(syz_tun) entered blocking state [ 625.271676][T31903] bridge0: port 1(syz_tun) entered disabled state [ 625.271930][T31903] syz_tun: entered allmulticast mode [ 625.278266][T31903] syz_tun: entered promiscuous mode [ 625.308329][T31903] bridge0: port 1(syz_tun) entered blocking state [ 625.308460][T31903] bridge0: port 1(syz_tun) entered forwarding state [ 625.589349][T31911] mac80211_hwsim hwsim24 syzkaller1: entered promiscuous mode [ 625.589378][T31911] mac80211_hwsim hwsim24 syzkaller1: entered allmulticast mode [ 626.170021][T31933] mac80211_hwsim hwsim24 syzkaller1: left promiscuous mode [ 626.170049][T31933] mac80211_hwsim hwsim24 syzkaller1: left allmulticast mode [ 626.335471][T31943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12080'. [ 626.382102][T31943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12080'. [ 626.844533][T31968] sctp: [Deprecated]: syz.2.12092 (pid 31968) Use of int in maxseg socket option. [ 626.844533][T31968] Use struct sctp_assoc_value instead [ 627.088675][T31971] pim6reg: entered allmulticast mode [ 627.146610][T31976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12095'. [ 627.312272][T31982] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12097'. [ 627.493569][T31986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12097'. [ 627.784420][T32001] batman_adv: batadv0: Adding interface: veth0 [ 627.784436][T32001] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 627.784464][T32001] batman_adv: batadv0: Interface activated: veth0 [ 627.800929][T32002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12101'. [ 627.805429][T32001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 627.805454][T32001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 627.867306][T32001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 627.867331][T32001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 627.875382][T32001] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 627.875403][T32001] batman_adv: batadv0: Removing interface: ipvlan2 [ 627.919085][T32001] batman_adv: batadv0: Interface deactivated: veth0 [ 627.919108][T32001] batman_adv: batadv0: Removing interface: veth0 [ 628.150482][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.150729][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.232364][T11847] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 628.458253][T32018] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12107'. [ 628.863134][T32007] ip_tables: iptables: counters copy to user failed while replacing table [ 629.449588][T32029] ip_tables: iptables: counters copy to user failed while replacing table [ 629.451142][T32029] netlink: 'syz.3.12109': attribute type 4 has an invalid length. [ 630.668456][T31993] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 630.914877][T32066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12122'. [ 631.067303][T32071] netlink: 'syz.3.12124': attribute type 1 has an invalid length. [ 631.067326][T32071] netlink: 'syz.3.12124': attribute type 4 has an invalid length. [ 631.067337][T32071] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.12124'. [ 631.107498][T32071] netlink: 'syz.3.12124': attribute type 1 has an invalid length. [ 631.107518][T32071] netlink: 'syz.3.12124': attribute type 4 has an invalid length. [ 631.107530][T32071] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.12124'. [ 631.725028][T32086] netlink: 'syz.1.12131': attribute type 1 has an invalid length. [ 631.798277][T32086] bond7: entered promiscuous mode [ 631.798720][T32086] 8021q: adding VLAN 0 to HW filter on device bond7 [ 632.000457][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.000767][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.001025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.141920][T32086] 8021q: adding VLAN 0 to HW filter on device bond7 [ 632.142269][T32086] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 632.142287][T32086] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 632.178734][T32086] bond7: (slave xfrm1): making interface the new active one [ 632.178759][T32086] xfrm1: entered promiscuous mode [ 632.193517][T32086] xfrm1: left promiscuous mode [ 632.669722][T32117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12142'. [ 633.248936][T32135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12150'. [ 633.327060][T32135] netlink: 92 bytes leftover after parsing attributes in process `syz.0.12150'. [ 633.587906][T32147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12155'. [ 633.676034][T32154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12153'. [ 634.055880][T32162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12157'. [ 634.056115][T32162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12157'. [ 635.190755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.191085][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.191348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.245672][T32181] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12165'. [ 636.081484][T32204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12171'. [ 636.238141][T32204] 8021q: adding VLAN 0 to HW filter on device team1 [ 637.293160][T32222] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.702003][T32239] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12182'. [ 637.957118][T32246] RDS: rds_bind could not find a transport for fe88::102, load rds_tcp or rds_rdma? [ 638.390515][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.390845][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.808228][T32267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12192'. [ 638.808256][T32267] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12192'. [ 638.808270][T32267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12192'. [ 639.195377][T32279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12196'. [ 639.728209][T32302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12206'. [ 639.904752][T32313] ip_tables: iptables: counters copy to user failed while replacing table [ 640.295021][T32322] dvmrp8: entered allmulticast mode [ 640.433773][T32327] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12214'. [ 640.472471][T32327] mac80211_hwsim hwsim24 syzkaller1: entered promiscuous mode [ 640.472499][T32327] mac80211_hwsim hwsim24 syzkaller1: entered allmulticast mode [ 640.809461][T32338] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12220'. [ 641.427237][T32354] team0: Device xfrm0 is of different type [ 641.564974][T32358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.588955][T32358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 641.928737][T32373] ip_tables: iptables: counters copy to user failed while replacing table [ 643.510453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.510715][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.510964][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.802294][T32439] netlink: 'syz.3.12257': attribute type 2 has an invalid length. [ 644.776344][T32475] syzkaller1: entered promiscuous mode [ 644.776569][T32475] syzkaller1: entered allmulticast mode [ 645.071996][T32479] netlink: 'syz.0.12273': attribute type 1 has an invalid length. [ 645.120167][T32479] 8021q: adding VLAN 0 to HW filter on device bond7 [ 645.656598][T32497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12278'. [ 645.656626][T32497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12278'. [ 646.169334][T32419] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 646.169360][T32419] nci: nci_start_poll: failed to set local general bytes [ 646.205988][T32411] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 646.635397][T32519] ip_tables: iptables: counters copy to user failed while replacing table [ 646.710474][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.710741][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.711033][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 647.559174][T32537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12296'. [ 647.893237][T32549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12301'. [ 648.544417][T32572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12309'. [ 648.545714][T32572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12309'. [ 648.545736][T32572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12309'. [ 649.910490][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.910837][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.914605][T32611] netlink: 15051 bytes leftover after parsing attributes in process `syz.1.12323'. [ 650.687241][T32628] netlink: 'syz.1.12330': attribute type 1 has an invalid length. [ 650.757721][T32628] 8021q: adding VLAN 0 to HW filter on device bond8 [ 652.668614][T32599] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 653.771327][T32689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12351'. [ 653.771356][T32689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12351'. [ 653.859912][T32694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12353'. [ 653.873091][T32694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12353'. [ 653.883821][T32694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12353'. [ 654.147884][T32701] netlink: 'syz.0.12356': attribute type 10 has an invalid length. [ 654.310473][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.310754][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.311007][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.327523][T32701] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.344735][T32701] team0: entered allmulticast mode [ 654.344757][T32701] team_slave_0: entered allmulticast mode [ 654.345149][T32701] team_slave_1: entered allmulticast mode [ 654.348175][T32701] bond0: (slave team0): Enslaving as an active interface with an up link [ 654.363066][T32699] syzkaller1: entered promiscuous mode [ 654.363271][T32699] syzkaller1: entered allmulticast mode [ 654.658046][T32711] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12359'. [ 654.921900][T32712] syzkaller1: entered promiscuous mode [ 654.921925][T32712] syzkaller1: entered allmulticast mode [ 655.952921][T32741] netlink: 'syz.1.12366': attribute type 1 has an invalid length. [ 655.952946][T32741] netlink: 224 bytes leftover after parsing attributes in process `syz.1.12366'. [ 656.422695][T32762] netlink: 'syz.4.12372': attribute type 1 has an invalid length. [ 656.518860][T32762] 8021q: adding VLAN 0 to HW filter on device bond5 [ 656.677046][T32767] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 657.057561][ T316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12379'. [ 657.081727][ T316] netlink: 68 bytes leftover after parsing attributes in process `syz.1.12379'. [ 657.261468][ T326] tipc: Enabled bearer , priority 0 [ 657.262915][ T326] syzkaller0: entered promiscuous mode [ 657.262934][ T326] syzkaller0: entered allmulticast mode [ 657.590437][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.737049][ T339] netlink: 'syz.4.12389': attribute type 1 has an invalid length. [ 657.946004][ T345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12391'. [ 658.632815][ T359] vlan3: entered allmulticast mode [ 658.632836][ T359] veth1_virt_wifi: entered allmulticast mode [ 658.738787][ T364] mac80211_hwsim hwsim24 syzkaller1: left promiscuous mode [ 658.739016][ T364] mac80211_hwsim hwsim24 syzkaller1: left allmulticast mode [ 659.248896][ T382] __nla_validate_parse: 2 callbacks suppressed [ 659.248916][ T382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12405'. [ 659.248934][ T382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12405'. [ 659.468006][ T387] tipc: Enabled bearer , priority 0 [ 659.572965][ T390] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.12408'. [ 659.602896][ T387] syzkaller0: entered promiscuous mode [ 659.602924][ T387] syzkaller0: entered allmulticast mode [ 659.604877][ T387] tipc: Resetting bearer [ 659.757056][ T386] tipc: Resetting bearer [ 659.851446][ T396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12410'. [ 660.019708][ T403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12412'. [ 660.206815][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880337db400: rx timeout, send abort [ 660.240000][T11847] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 660.716801][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880337db400: abort rx timeout. Force session deactivation [ 661.440435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.440700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.440929][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.178933][ T386] tipc: Disabling bearer [ 663.193098][ T398] netlink: 168 bytes leftover after parsing attributes in process `syz.3.12410'. [ 663.498691][ T413] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12418'. [ 663.764119][ T420] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12420'. [ 663.791638][ T420] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12420'. [ 664.041221][ T433] netlink: 'syz.3.12425': attribute type 1 has an invalid length. [ 664.101514][ T433] bond6: entered promiscuous mode [ 664.101962][ T433] 8021q: adding VLAN 0 to HW filter on device bond6 [ 664.399625][ T433] bond6: (slave bridge6): making interface the new active one [ 664.399653][ T433] bridge6: entered promiscuous mode [ 664.409139][ T433] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 664.834255][ T455] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12432'. [ 664.861469][ T457] ip_tables: iptables: counters copy to user failed while replacing table [ 664.886999][ T455] syzkaller1: entered promiscuous mode [ 664.887024][ T455] syzkaller1: entered allmulticast mode [ 665.331627][ T465] tipc: Enabled bearer , priority 0 [ 665.350420][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 665.480003][ T465] syzkaller0: entered promiscuous mode [ 665.480038][ T465] syzkaller0: entered allmulticast mode [ 665.501483][ T465] tipc: Resetting bearer [ 665.873918][T11847] tipc: Resetting bearer [ 665.887121][ T464] tipc: Resetting bearer [ 666.254204][ T470] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 667.270435][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.270701][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.270923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.500846][ T505] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12445'. [ 669.960874][ T464] tipc: Disabling bearer [ 670.341355][ T520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12447'. [ 670.470681][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 670.470969][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 670.646808][ T528] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12453'. [ 670.802594][ T528] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12453'. [ 671.168554][ T546] syzkaller0: left promiscuous mode [ 671.168576][ T546] syzkaller0: left allmulticast mode [ 672.310499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.310814][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.311097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.690166][ T601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12480'. [ 672.709075][ T604] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12481'. [ 672.899309][ T601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12480'. [ 673.287950][ T617] syzkaller0: entered promiscuous mode [ 673.287974][ T617] syzkaller0: entered allmulticast mode [ 673.311642][ T617] tipc: Enabled bearer , priority 0 [ 673.317601][ T616] tipc: Resetting bearer [ 673.378328][ T616] tipc: Disabling bearer [ 674.536399][ T645] netlink: 256 bytes leftover after parsing attributes in process `syz.4.12494'. [ 675.341646][ T665] syzkaller1: entered promiscuous mode [ 675.341669][ T665] syzkaller1: entered allmulticast mode [ 675.860927][ T677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 675.949558][ T679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.027810][ T680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.048437][ T680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.121651][ T682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.252470][ T683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.314595][ T682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 676.494894][ T692] netlink: 'syz.2.12512': attribute type 1 has an invalid length. [ 676.546365][ T693] syzkaller1: entered promiscuous mode [ 676.546388][ T693] syzkaller1: entered allmulticast mode [ 676.652261][ T692] block nbd296: server does not support multiple connections per device. [ 676.654756][ T692] block nbd296: shutting down sockets [ 676.981045][ T703] netlink: 'syz.0.12515': attribute type 1 has an invalid length. [ 677.057714][ T703] 8021q: adding VLAN 0 to HW filter on device bond8 [ 677.163402][ T708] bond8: (slave veth0_to_bond): making interface the new active one [ 677.184942][ T708] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 677.222944][ T703] macvlan2: entered promiscuous mode [ 677.223163][ T703] macvlan2: entered allmulticast mode [ 677.229196][ T703] bond8: entered promiscuous mode [ 677.229220][ T703] veth0_to_bond: entered promiscuous mode [ 677.277894][ T703] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 677.287656][ T703] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 677.294518][ T703] bond8: left promiscuous mode [ 677.294541][ T703] veth0_to_bond: left promiscuous mode [ 677.430504][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.430800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.431061][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.431307][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.704886][ T726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12522'. [ 679.418174][ T779] ip_tables: iptables: counters copy to user failed while replacing table [ 682.769602][ T794] syzkaller0: entered promiscuous mode [ 682.769626][ T794] syzkaller0: entered allmulticast mode [ 683.117141][ T814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12553'. [ 683.737531][ T828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12560'. [ 683.971133][ T805] wg1 speed is unknown, defaulting to 1000 [ 684.033597][ T835] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12562'. [ 684.444944][ T846] syzkaller0: entered promiscuous mode [ 684.444967][ T846] syzkaller0: entered allmulticast mode [ 684.738095][ T805] dummy0 speed is unknown, defaulting to 1000 [ 685.380061][ T873] netlink: 'syz.1.12577': attribute type 19 has an invalid length. [ 685.380085][ T873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12577'. [ 685.403253][ T873] netlink: 'syz.1.12577': attribute type 19 has an invalid length. [ 685.403275][ T873] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12577'. [ 685.833833][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.366930][ T907] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12588'. [ 688.077446][ T938] netlink: 'syz.2.12598': attribute type 2 has an invalid length. [ 688.095063][ T941] netlink: 'syz.0.12599': attribute type 4 has an invalid length. [ 688.769929][ T966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12606'. [ 688.782354][ T964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12605'. [ 688.782378][ T964] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12605'. [ 689.392253][ T983] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12611'. [ 689.393871][ T962] syzkaller0: entered promiscuous mode [ 689.393893][ T962] syzkaller0: entered allmulticast mode [ 690.124385][ T1009] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12618'. [ 690.845441][ T1026] netlink: 'syz.4.12624': attribute type 1 has an invalid length. [ 690.895205][ T1013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12620'. [ 690.895230][ T1013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12620'. [ 690.895242][ T1013] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 691.578892][ T1066] netlink: 'syz.4.12634': attribute type 1 has an invalid length. [ 691.696903][ T1066] 8021q: adding VLAN 0 to HW filter on device bond6 [ 691.797109][ T1071] macvlan3: entered promiscuous mode [ 691.799188][ T1071] macvlan3: entered allmulticast mode [ 691.804729][ T1071] bond6: entered allmulticast mode [ 691.805544][ T1071] bond6: entered promiscuous mode [ 691.812724][ T1071] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 691.844396][ T1071] team0: Port device macvlan3 added [ 692.232036][T17565] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 692.693173][ T1088] syzkaller0: entered promiscuous mode [ 692.693389][ T1088] syzkaller0: entered allmulticast mode [ 692.715523][ T1094] syzkaller0: entered promiscuous mode [ 692.715740][ T1094] syzkaller0: entered allmulticast mode [ 693.185424][ T1108] syz_tun: entered allmulticast mode [ 693.261742][ T1106] syz_tun: left allmulticast mode [ 693.803638][ T1130] syzkaller0: entered promiscuous mode [ 693.803662][ T1130] syzkaller0: entered allmulticast mode [ 693.825310][ T1130] tipc: Started in network mode [ 693.825352][ T1130] tipc: Node identity aef31d6bec77, cluster identity 4711 [ 693.848382][ T1130] tipc: Enabled bearer , priority 0 [ 693.895133][ T1128] tipc: Resetting bearer [ 693.961474][ T1128] tipc: Disabling bearer [ 694.309716][ T1143] mac80211_hwsim hwsim24 syzkaller1: entered promiscuous mode [ 694.309986][ T1143] mac80211_hwsim hwsim24 syzkaller1: entered allmulticast mode [ 694.575010][ T1156] sctp: [Deprecated]: syz.2.12659 (pid 1156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 694.575010][ T1156] Use struct sctp_sack_info instead [ 695.179353][ T1174] syzkaller0: entered promiscuous mode [ 695.179565][ T1174] syzkaller0: entered allmulticast mode [ 695.220595][ T1173] bridge0: port 1(dummy0) entered blocking state [ 695.220804][ T1173] bridge0: port 1(dummy0) entered disabled state [ 695.220960][ T1173] dummy0: entered allmulticast mode [ 695.229328][ T1173] dummy0: entered promiscuous mode [ 695.229886][ T1173] bridge0: port 1(dummy0) entered blocking state [ 695.229993][ T1173] bridge0: port 1(dummy0) entered listening state [ 695.307264][ T10] dummy0 speed is unknown, defaulting to 1000 [ 695.309897][ T1168] syzkaller0: entered promiscuous mode [ 695.309918][ T1168] syzkaller0: entered allmulticast mode [ 695.968372][ T1200] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12670'. [ 696.059835][ T1207] netlink: 'syz.2.12671': attribute type 1 has an invalid length. [ 696.354422][ T1207] bond7: entered promiscuous mode [ 696.358116][ T1207] 8021q: adding VLAN 0 to HW filter on device bond7 [ 696.378690][ T1208] bond9: entered promiscuous mode [ 696.378915][ T1208] bond9: entered allmulticast mode [ 696.718595][ T1212] 8021q: adding VLAN 0 to HW filter on device bond7 [ 696.724878][ T1212] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 696.724901][ T1212] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 696.875199][ T1229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12677'. [ 697.378437][ T1212] bond7: (slave wireguard0): making interface the new active one [ 697.378466][ T1212] wireguard0: entered promiscuous mode [ 697.395603][ T1212] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 698.045679][ T1254] netlink: 'syz.4.12682': attribute type 1 has an invalid length. [ 698.174838][ T1261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12683'. [ 698.174859][ T1261] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12683'. [ 698.229855][ T1268] netlink: 'syz.0.12683': attribute type 4 has an invalid length. [ 698.229878][ T1268] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12683'. [ 698.273070][ T1267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12685'. [ 698.326875][ T1255] 8021q: adding VLAN 0 to HW filter on device bond10 [ 698.488600][ T1259] 8021q: adding VLAN 0 to HW filter on device bond8 [ 698.507517][ T1259] bond7: (slave bond8): making interface the new active one [ 698.518336][ T1259] bond7: (slave bond8): Enslaving as an active interface with an up link [ 698.625031][ T1279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12687'. [ 698.648377][ T1261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 698.665884][ T1261] bond10: (slave bond0): making interface the new active one [ 698.687659][ T1261] bond10: (slave bond0): Enslaving as an active interface with an up link [ 698.733914][ T1254] bond7: (slave gretap0): Enslaving as a backup interface with an up link [ 698.755924][ T1268] wlan0: mtu less than device minimum [ 698.755960][ T1268] team0: Device wlan0 failed to change mtu [ 699.123615][ T1302] netlink: 'syz.0.12690': attribute type 1 has an invalid length. [ 699.437114][ T1319] netlink: 'syz.3.12694': attribute type 1 has an invalid length. [ 699.515495][ T1302] bond11: entered promiscuous mode [ 699.515997][ T1302] 8021q: adding VLAN 0 to HW filter on device bond11 [ 699.532600][ T1323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12694'. [ 700.094754][ T1303] macvtap1: entered allmulticast mode [ 700.134359][ T1313] macvtap2: entered allmulticast mode [ 700.188860][ T1320] bond11: (slave bridge6): making interface the new active one [ 700.188885][ T1320] bridge6: entered promiscuous mode [ 700.199861][ T1320] bond11: (slave bridge6): Enslaving as an active interface with an up link [ 700.319307][ T1319] bond7: entered promiscuous mode [ 700.322417][ T1319] 8021q: adding VLAN 0 to HW filter on device bond7 [ 700.367709][ T1323] bond7: entered allmulticast mode [ 700.407897][ T1334] bond7: (slave bridge8): making interface the new active one [ 700.407921][ T1334] bridge8: entered promiscuous mode [ 700.408107][ T1334] bridge8: entered allmulticast mode [ 700.423433][ T1334] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 701.895338][ T1371] syzkaller0: entered promiscuous mode [ 701.895541][ T1371] syzkaller0: entered allmulticast mode [ 702.348172][ T1393] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12708'. [ 702.542858][ T1403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12708'. [ 702.736221][ T1409] netlink: 'syz.1.12712': attribute type 1 has an invalid length. [ 702.755372][ T1405] syzkaller0: entered promiscuous mode [ 702.755398][ T1405] syzkaller0: entered allmulticast mode [ 703.085504][ T1413] 8021q: adding VLAN 0 to HW filter on device bond10 [ 703.089020][ T1413] bond9: (slave bond10): making interface the new active one [ 703.089607][ T1413] bond9: (slave bond10): Enslaving as an active interface with an up link [ 703.119970][ T1409] bond9: (slave gretap2): Enslaving as a backup interface with an up link [ 703.126786][ T1420] 8021q: adding VLAN 0 to HW filter on device bond9 [ 703.141301][ T5276] veth1_vlan: left promiscuous mode [ 703.400498][ T1430] netlink: 'syz.2.12714': attribute type 1 has an invalid length. [ 703.601234][ T1430] bond8: entered promiscuous mode [ 703.602404][ T1434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12716'. [ 703.603347][ T1430] 8021q: adding VLAN 0 to HW filter on device bond8 [ 703.675350][ T1435] ipvlan2: entered allmulticast mode [ 703.675373][ T1435] bond8: entered allmulticast mode [ 703.675553][ T1435] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 703.675570][ T1435] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 703.675584][ T1435] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 703.679636][ T1435] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 704.197681][ T1456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12721'. [ 704.425505][ T1461] syzkaller0: entered promiscuous mode [ 704.425528][ T1461] syzkaller0: entered allmulticast mode [ 704.448707][ T1462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12722'. [ 705.252252][ T1475] syzkaller0: entered promiscuous mode [ 705.252276][ T1475] syzkaller0: entered allmulticast mode [ 705.344087][ T1489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12728'. [ 705.634697][ T1499] netlink: 'syz.3.12729': attribute type 1 has an invalid length. [ 705.807630][ T1507] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12733'. [ 705.854572][ T1507] netlink: 'syz.4.12733': attribute type 4 has an invalid length. [ 705.854596][ T1507] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.12733'. [ 709.976660][ T1499] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 710.164191][ T1508] syzkaller0: left promiscuous mode [ 710.164217][ T1508] syzkaller0: left allmulticast mode [ 710.275036][ T1531] netlink: 'syz.1.12739': attribute type 10 has an invalid length. [ 710.433934][ T1535] syzkaller0: left promiscuous mode [ 710.433957][ T1535] syzkaller0: left allmulticast mode [ 710.706824][ T1549] syzkaller0: entered promiscuous mode [ 710.707035][ T1549] syzkaller0: entered allmulticast mode [ 710.719818][ T1549] tipc: Enabled bearer , priority 0 [ 710.784252][ T1550] bridge0: port 3(vlan0) entered blocking state [ 710.784623][ T1550] bridge0: port 3(vlan0) entered disabled state [ 710.784868][ T1550] vlan0: entered allmulticast mode [ 710.784880][ T1550] geneve0: entered allmulticast mode [ 710.786788][ T1550] vlan0: entered promiscuous mode [ 710.786806][ T1550] geneve0: entered promiscuous mode [ 710.925510][ T1555] syzkaller0: entered promiscuous mode [ 710.925531][ T1555] syzkaller0: entered allmulticast mode [ 711.005212][ T1559] bond6: entered allmulticast mode [ 711.005236][ T1559] ip6gre2: entered allmulticast mode [ 711.103748][ T1558] bond6: left allmulticast mode [ 711.103800][ T1558] ip6gre2: left allmulticast mode [ 711.618504][ T1570] tipc: Enabled bearer , priority 0 [ 711.619976][ T1570] syzkaller0: entered promiscuous mode [ 711.620158][ T1570] syzkaller0: entered allmulticast mode [ 711.771181][ T1570] tipc: Resetting bearer [ 711.798372][ T1569] tipc: Resetting bearer [ 711.882616][ T1569] tipc: Disabling bearer [ 712.222320][ T1563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12749'. [ 712.770420][ T1604] syzkaller0: entered promiscuous mode [ 712.770642][ T1604] syzkaller0: entered allmulticast mode [ 712.827979][ T1609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12758'. [ 712.849638][ T1604] tipc: Enabled bearer , priority 0 [ 712.915560][ T1603] tipc: Resetting bearer [ 713.132433][ T1603] tipc: Disabling bearer [ 713.399856][ T1618] netlink: 550 bytes leftover after parsing attributes in process `syz.1.12763'. [ 713.580086][ T1627] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 713.608500][ T1626] ip_tables: iptables: counters copy to user failed while replacing table [ 714.326193][ T1634] syzkaller0: entered promiscuous mode [ 714.326414][ T1634] syzkaller0: entered allmulticast mode [ 714.756454][ T1650] syzkaller0: entered promiscuous mode [ 714.756478][ T1650] syzkaller0: entered allmulticast mode [ 715.092936][ T1667] netlink: 'syz.2.12775': attribute type 4 has an invalid length. [ 715.127344][ T1667] netlink: 'syz.2.12775': attribute type 4 has an invalid length. [ 715.224392][ T1673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12779'. [ 715.260844][ T1673] 8021q: adding VLAN 0 to HW filter on device bond9 [ 715.281797][ T1673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12779'. [ 715.314656][ T1673] ipvlan2: entered allmulticast mode [ 715.314678][ T1673] bond9: entered allmulticast mode [ 715.388270][ T1675] syzkaller0: entered promiscuous mode [ 715.388293][ T1675] syzkaller0: entered allmulticast mode [ 715.863743][ T1681] syzkaller0: entered promiscuous mode [ 715.863797][ T1681] syzkaller0: entered allmulticast mode [ 716.065824][ T1695] netlink: 'syz.3.12787': attribute type 1 has an invalid length. [ 716.124989][ T1695] bond8: (slave ip6gretap0): Enslaving as a backup interface with an up link [ 716.168922][ T1697] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 716.206229][ T1695] veth17: entered promiscuous mode [ 716.209511][ T1700] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 716.235461][ T1695] bond8: (slave veth17): Enslaving as a backup interface with a down link [ 716.464818][ T1703] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 717.129120][ T1720] syzkaller0: entered promiscuous mode [ 717.129144][ T1720] syzkaller0: entered allmulticast mode [ 717.168553][ T1720] tc action pedit 'at' offset 5 out of bounds [ 717.959805][ T1737] ip_tables: iptables: counters copy to user failed while replacing table [ 718.615432][ T1749] netlink: 'syz.2.12804': attribute type 1 has an invalid length. [ 718.681051][ T1749] bond10: entered promiscuous mode [ 718.681547][ T1749] 8021q: adding VLAN 0 to HW filter on device bond10 [ 718.839892][ T1749] ipvlan2: entered allmulticast mode [ 718.839915][ T1749] bond10: entered allmulticast mode [ 718.889864][ T1749] ipvlan3: entered allmulticast mode [ 718.989817][ T1749] bond10: (slave bridge9): making interface the new active one [ 718.989843][ T1749] bridge9: entered promiscuous mode [ 718.990036][ T1749] bridge9: entered allmulticast mode [ 719.041074][ T1749] bond10: (slave bridge9): Enslaving as an active interface with an up link [ 719.056917][ T1757] syzkaller0: entered promiscuous mode [ 719.056945][ T1757] syzkaller0: entered allmulticast mode [ 719.067528][ T1753] tc action pedit unable to extract header offset for header type (0x5) [ 719.067553][ T1753] tc action pedit unable to extract header offset for header type (0x5) [ 719.067564][ T1753] tc action pedit unable to extract header offset for header type (0x5) [ 719.067574][ T1753] tc action pedit unable to extract header offset for header type (0x5) [ 719.067585][ T1753] tc action pedit unable to extract header offset for header type (0x5) [ 719.067596][ T1753] tc action pedit unable to extract header offset for header type (0x5) [ 719.067607][ T1753] tc action pedit unable to extract header offset for header type (0x5) [ 719.067617][ T1753] tc action pedit unable to extract header offset for header type (0x5) [ 719.067628][ T1753] tc action pedit unable to extract header offset for header type (0x5) [ 719.067639][ T1753] tc action pedit unable to extract header offset for header type (0x5) [ 719.067660][ T1753] 0: reclassify loop, rule prio 0, protocol 800 [ 719.206583][ T31] audit: type=1804 audit(1791561676.143:9): pid=1762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.12808" name="/newroot/2586/cgroup.controllers" dev="tmpfs" ino=13048 res=1 errno=0 [ 719.206878][ T31] audit: type=1800 audit(1791561676.143:10): pid=1762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12808" name="cgroup.controllers" dev="tmpfs" ino=13048 res=0 errno=0 [ 719.568914][ T1766] syzkaller0: entered promiscuous mode [ 719.568938][ T1766] syzkaller0: entered allmulticast mode [ 720.401252][ T1784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12815'. [ 720.421955][ T1784] netlink: 'syz.2.12815': attribute type 1 has an invalid length. [ 720.421977][ T1784] netlink: 224 bytes leftover after parsing attributes in process `syz.2.12815'. [ 720.944050][ T1800] netlink: 'syz.1.12819': attribute type 1 has an invalid length. [ 721.245809][ T1802] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 721.272951][ T1802] bond13 (unregistering): Released all slaves [ 721.444633][ T1813] bridge6: entered promiscuous mode [ 721.458233][ T1813] bond12: (slave bridge6): making interface the new active one [ 721.459364][ T1813] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 721.923903][ T1828] syzkaller0: entered promiscuous mode [ 721.923927][ T1828] syzkaller0: entered allmulticast mode [ 722.457241][ T1841] syzkaller0: entered promiscuous mode [ 722.457264][ T1841] syzkaller0: entered allmulticast mode [ 722.479976][ T1837] syzkaller0: entered promiscuous mode [ 722.479999][ T1837] syzkaller0: entered allmulticast mode [ 722.505384][ T1837] 0: reclassify loop, rule prio 0, protocol 700 [ 722.519297][ T1837] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12826'. [ 723.429107][ T1856] tipc: Enabling of bearer rejected, already enabled [ 723.533899][ T1866] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 724.234434][ T50] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 724.350047][ T1898] syzkaller0: entered promiscuous mode [ 724.350069][ T1898] syzkaller0: entered allmulticast mode [ 724.555154][ T1901] syzkaller0: entered promiscuous mode [ 724.555176][ T1901] syzkaller0: entered allmulticast mode [ 724.715231][ T1909] netlink: 'syz.4.12849': attribute type 1 has an invalid length. [ 724.792191][ T1910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12849'. [ 725.044595][ T1909] 8021q: adding VLAN 0 to HW filter on device bond9 [ 725.235759][ T1924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 725.510312][ C0] bridge0: port 1(dummy0) entered learning state [ 725.609661][ T1936] syzkaller1: entered promiscuous mode [ 725.609683][ T1936] syzkaller1: entered allmulticast mode [ 726.505152][ T1961] syzkaller0: entered promiscuous mode [ 726.505176][ T1961] syzkaller0: entered allmulticast mode [ 726.548939][ T1964] syzkaller0: entered promiscuous mode [ 726.548961][ T1964] syzkaller0: entered allmulticast mode [ 726.758557][ T1977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 726.845222][ T1979] syzkaller0: left promiscuous mode [ 726.845247][ T1979] syzkaller0: left allmulticast mode [ 727.450126][ T2002] netlink: 1192 bytes leftover after parsing attributes in process `syz.3.12877'. [ 727.543324][ T2008] syzkaller0: entered promiscuous mode [ 727.543345][ T2008] syzkaller0: entered allmulticast mode [ 727.865085][ T2016] netlink: 'syz.2.12883': attribute type 10 has an invalid length. [ 727.868626][ T2016] bridge0: port 1(dummy0) entered disabled state [ 727.921182][ T2016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12883'. [ 727.921268][ T2016] dummy0: left allmulticast mode [ 727.921435][ T2016] dummy0: left promiscuous mode [ 727.921736][ T2016] bridge0: port 1(dummy0) entered disabled state [ 727.967200][ T9] dummy0 speed is unknown, defaulting to 1000 [ 727.980408][ T2024] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 730.022298][ T2083] syzkaller0: entered promiscuous mode [ 730.022320][ T2083] syzkaller0: entered allmulticast mode [ 730.062146][ T2083] tipc: Enabled bearer , priority 0 [ 730.151668][ T2083] tipc: Resetting bearer [ 730.199305][ T2082] tipc: Resetting bearer [ 730.297794][ T2082] tipc: Disabling bearer [ 730.914886][ T2107] tipc: Enabling of bearer rejected, already enabled [ 730.915856][ T2107] syzkaller0: entered promiscuous mode [ 730.915875][ T2107] syzkaller0: entered allmulticast mode [ 732.888889][ T2201] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 732.997222][ T2199] syzkaller0: entered promiscuous mode [ 732.997434][ T2199] syzkaller0: entered allmulticast mode [ 733.012966][ T2203] net wpan0: Using DEBUGing ioctl SIOCSIFADDR isn't recommended! [ 733.048257][ T2199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12937'. [ 734.023861][ T2243] block nbd1: not configured, cannot reconfigure [ 734.411898][ T2259] netlink: 'syz.3.12960': attribute type 21 has an invalid length. [ 734.411923][ T2259] IPv6: NLM_F_CREATE should be specified when creating new route [ 734.412021][ T2259] netlink: 'syz.3.12960': attribute type 1 has an invalid length. [ 734.728108][ T2267] netlink: 1028 bytes leftover after parsing attributes in process `syz.3.12962'. [ 735.480061][ T2298] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 735.767670][ T2310] ip_tables: iptables: counters copy to user failed while replacing table [ 735.789582][ T2311] syzkaller0: left promiscuous mode [ 735.789603][ T2311] syzkaller0: left allmulticast mode [ 735.938935][ T2313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12984'. [ 736.249547][ T2317] syzkaller0: entered promiscuous mode [ 736.249570][ T2317] syzkaller0: entered allmulticast mode [ 736.956951][ T2348] ip_tables: iptables: counters copy to user failed while replacing table [ 737.237684][ T2356] ip_tables: iptables: counters copy to user failed while replacing table [ 737.383849][ T2364] netlink: 'syz.0.13007': attribute type 1 has an invalid length. [ 737.440936][ T2364] bond12: entered promiscuous mode [ 737.441335][ T2364] 8021q: adding VLAN 0 to HW filter on device bond12 [ 737.600665][ T2373] ip_tables: iptables: counters copy to user failed while replacing table [ 737.608259][ T2364] ipvlan3: entered allmulticast mode [ 737.608282][ T2364] bond12: entered allmulticast mode [ 737.778037][ T2364] bond12: (slave bridge7): making interface the new active one [ 737.778066][ T2364] bridge7: entered promiscuous mode [ 737.778261][ T2364] bridge7: entered allmulticast mode [ 737.816059][ T2364] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 738.134679][ T2389] ip_tables: iptables: counters copy to user failed while replacing table [ 738.297474][ T2396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13021'. [ 738.561616][ T2413] netlink: 'syz.3.13028': attribute type 1 has an invalid length. [ 738.618048][ T2413] bond9: entered promiscuous mode [ 738.618449][ T2413] 8021q: adding VLAN 0 to HW filter on device bond9 [ 738.633922][ T2411] ip_tables: iptables: counters copy to user failed while replacing table [ 738.659074][ T2413] ipvlan2: entered allmulticast mode [ 738.659095][ T2413] bond9: entered allmulticast mode [ 738.733674][ T2413] bond9: (slave bridge9): making interface the new active one [ 738.733700][ T2413] bridge9: entered promiscuous mode [ 738.735463][ T2413] bridge9: entered allmulticast mode [ 738.875241][ T2413] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 739.022006][ T2423] bridge0: port 2(vlan3) entered blocking state [ 739.022194][ T2423] bridge0: port 2(vlan3) entered disabled state [ 739.022350][ T2423] vlan3: entered allmulticast mode [ 739.022366][ T2423] geneve0: entered allmulticast mode [ 739.068896][ T2423] vlan3: entered promiscuous mode [ 739.068919][ T2423] geneve0: entered promiscuous mode [ 739.480817][ T2432] ip_tables: iptables: counters copy to user failed while replacing table [ 739.977581][ T2455] ip_tables: iptables: counters copy to user failed while replacing table [ 740.152353][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 740.324316][ T2465] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 741.696371][ T2537] syzkaller0: entered promiscuous mode [ 741.696394][ T2537] syzkaller0: entered allmulticast mode [ 742.343290][ T2571] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 742.343940][ T2572] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 742.624542][ T2587] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 743.047589][ T2609] netlink: 'syz.2.13092': attribute type 25 has an invalid length. [ 743.163335][ T2613] Bluetooth: MGMT ver 1.23 [ 743.980952][ T2659] ip_tables: iptables: counters copy to user failed while replacing table [ 744.719862][ T2708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13123'. [ 744.919042][ T2714] syzkaller0: entered promiscuous mode [ 744.919065][ T2714] syzkaller0: entered allmulticast mode [ 744.970062][ T2710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13125'. [ 745.196075][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 745.822865][ T2769] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 747.796727][ T2859] Cannot find set identified by id 0 to match [ 748.791715][ T2909] mac80211_hwsim hwsim24 syzkaller1: left promiscuous mode [ 748.791747][ T2909] mac80211_hwsim hwsim24 syzkaller1: left allmulticast mode [ 749.335946][ T2930] netlink: 'syz.4.13193': attribute type 1 has an invalid length. [ 749.335968][ T2930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13193'. [ 749.475191][ T2938] xt_hashlimit: size too large, truncated to 1048576 [ 749.949923][ T2946] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 750.761223][ T2976] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 750.911595][ T2982] netlink: 'syz.2.13214': attribute type 64 has an invalid length. [ 750.913944][ T2982] netlink: 'syz.2.13214': attribute type 64 has an invalid length. [ 750.949336][ T2972] tipc: Enabling of bearer rejected, already enabled [ 751.311550][ T2999] netlink: 168 bytes leftover after parsing attributes in process `syz.0.13219'. [ 751.934315][ T3019] tipc: Enabling of bearer rejected, already enabled [ 752.493477][ T3047] syzkaller1: entered promiscuous mode [ 752.493500][ T3047] syzkaller1: entered allmulticast mode [ 753.250959][ T3066] syzkaller0: entered promiscuous mode [ 753.251173][ T3066] syzkaller0: entered allmulticast mode [ 753.339644][ T3070] netlink: 'syz.3.13252': attribute type 1 has an invalid length. [ 753.378796][ T3070] bond10: entered promiscuous mode [ 753.379541][ T3070] 8021q: adding VLAN 0 to HW filter on device bond10 [ 753.561778][ T3070] bond10: (slave bridge10): making interface the new active one [ 753.561805][ T3070] bridge10: entered promiscuous mode [ 753.564804][ T3070] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 754.247565][ T3094] ip_tables: iptables: counters copy to user failed while replacing table [ 754.492845][ T3106] netlink: 'syz.3.13266': attribute type 1 has an invalid length. [ 754.529815][ T3106] bond11: entered promiscuous mode [ 754.531555][ T3106] 8021q: adding VLAN 0 to HW filter on device bond11 [ 754.561477][ T3106] bond11: (slave bridge11): making interface the new active one [ 754.561503][ T3106] bridge11: entered promiscuous mode [ 754.562844][ T3106] bond11: (slave bridge11): Enslaving as an active interface with an up link [ 754.783945][ T3116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13269'. [ 755.874680][ T3149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13283'. [ 756.282603][ T3166] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 756.551142][ T3173] netlink: 'syz.4.13291': attribute type 25 has an invalid length. [ 757.554300][ T3217] syzkaller1: entered promiscuous mode [ 757.554324][ T3217] syzkaller1: entered allmulticast mode [ 757.671286][ T3228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13304'. [ 757.689719][ T3227] netlink: 'syz.3.13303': attribute type 25 has an invalid length. [ 757.819420][ T3228] ipvlan4: entered allmulticast mode [ 757.819443][ T3228] virt_wifi0: entered allmulticast mode [ 757.842314][ T3228] batman_adv: batadv0: Adding interface: ipvlan4 [ 757.842332][ T3228] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.842607][ T3228] batman_adv: batadv0: Interface activated: ipvlan4 [ 758.875183][ T3254] xt_hashlimit: size too large, truncated to 1048576 [ 759.502313][ T3277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13325'. [ 759.543899][ T3277] bridge7: entered promiscuous mode [ 759.544126][ T3277] bridge7: entered allmulticast mode [ 759.775148][ T3287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13329'. [ 760.486226][ T3311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13336'. [ 760.562611][ T3312] ip_tables: iptables: counters copy to user failed while replacing table [ 760.563192][ T3309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13337'. [ 760.657646][ T5620] block nbd1: Receive control failed (result -107) [ 761.432535][ T3346] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13352'. [ 761.786610][ T3359] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13356'. [ 761.925144][ T3363] ip_tables: iptables: counters copy to user failed while replacing table [ 762.816067][ T3394] bond13: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 762.854629][ T3394] bond13 (unregistering): Released all slaves [ 763.220523][ T3406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13375'. [ 763.252334][ T3406] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13375'. [ 763.332794][ T3408] batadv_slave_0: entered promiscuous mode [ 763.337267][ T3408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13376'. [ 763.519139][ T3412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13377'. [ 763.519173][ T3412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13377'. [ 763.927296][ T3412] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13377'. [ 763.927332][ T3412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13377'. [ 763.942880][ T1795] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.942922][ T1795] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.951894][ T1795] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 763.952025][ T1797] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 764.474178][ T3448] tunl0: entered promiscuous mode [ 764.486335][ T3448] netlink: 'syz.4.13392': attribute type 3 has an invalid length. [ 764.486357][ T3448] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13392'. [ 764.518530][ T3448] tipc: Enabled bearer , priority 0 [ 765.003730][ T3470] [ 765.006131][ T3470] ====================================================== [ 765.013158][ T3470] WARNING: possible circular locking dependency detected [ 765.020200][ T3470] syzkaller #0 Not tainted [ 765.024631][ T3470] ------------------------------------------------------ [ 765.031834][ T3470] syz.2.13401/3470 is trying to acquire lock: [ 765.037900][ T3470] ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 765.047833][ T3470] [ 765.047833][ T3470] but task is already holding lock: [ 765.055208][ T3470] ffffffff90804320 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 765.064067][ T3470] [ 765.064067][ T3470] which lock already depends on the new lock. [ 765.064067][ T3470] [ 765.074479][ T3470] [ 765.074479][ T3470] the existing dependency chain (in reverse order) is: [ 765.083501][ T3470] [ 765.083501][ T3470] -> #11 (gdp_mutex){+.+.}-{4:4}: [ 765.091441][ T3470] __mutex_lock+0x19d/0x1550 [ 765.096708][ T3470] get_device_parent+0x16f/0x3a0 [ 765.102181][ T3470] device_add+0x2d4/0xb80 [ 765.107085][ T3470] device_create+0x269/0x300 [ 765.112215][ T3470] msr_device_create+0x33/0x50 [ 765.117581][ T3470] cpuhp_invoke_callback+0x434/0x810 [ 765.123455][ T3470] cpuhp_thread_fun+0x362/0x780 [ 765.128858][ T3470] smpboot_thread_fn+0x565/0xa70 [ 765.134350][ T3470] kthread+0x38b/0x480 [ 765.138968][ T3470] ret_from_fork+0x514/0xb70 [ 765.144153][ T3470] ret_from_fork_asm+0x1a/0x30 [ 765.149492][ T3470] [ 765.149492][ T3470] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 765.157154][ T3470] cpuhp_thread_fun+0x127/0x780 [ 765.162557][ T3470] smpboot_thread_fn+0x565/0xa70 [ 765.168042][ T3470] kthread+0x38b/0x480 [ 765.172670][ T3470] ret_from_fork+0x514/0xb70 [ 765.177791][ T3470] ret_from_fork_asm+0x1a/0x30 [ 765.183084][ T3470] [ 765.183084][ T3470] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 765.190922][ T3470] cpus_read_lock+0x42/0x160 [ 765.196080][ T3470] static_key_slow_inc+0x12/0x30 [ 765.201602][ T3470] setup_udp_tunnel_sock+0x2eb/0x4f0 [ 765.207465][ T3470] gtp_encap_enable_socket+0x3d3/0x5c0 [ 765.213664][ T3470] gtp_newlink+0x7df/0x16e0 [ 765.218710][ T3470] rtnl_newlink_create+0x305/0x7b0 [ 765.224395][ T3470] rtnl_newlink+0x166d/0x1c30 [ 765.229732][ T3470] rtnetlink_rcv_msg+0x802/0xc00 [ 765.235212][ T3470] netlink_rcv_skb+0x226/0x4a0 [ 765.240547][ T3470] netlink_unicast+0x7bd/0x940 [ 765.245843][ T3470] netlink_sendmsg+0x813/0xb40 [ 765.251152][ T3470] sock_sendmsg_nosec+0x13a/0x180 [ 765.256796][ T3470] ____sys_sendmsg+0x54e/0x850 [ 765.262124][ T3470] ___sys_sendmsg+0x2a5/0x360 [ 765.267336][ T3470] __x64_sys_sendmsg+0x1b1/0x290 [ 765.272807][ T3470] do_syscall_64+0x166/0x520 [ 765.278144][ T3470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.284598][ T3470] [ 765.284598][ T3470] -> #8 (sk_lock-AF_INET){+.+.}-{0:0}: [ 765.292259][ T3470] lock_sock_nested+0x41/0x100 [ 765.297630][ T3470] inet_shutdown+0x6a/0x390 [ 765.302743][ T3470] nbd_mark_nsock_dead+0x2cb/0x550 [ 765.308470][ T3470] recv_work+0x1cee/0x1e10 [ 765.313424][ T3470] process_scheduled_works+0xc3d/0x1630 [ 765.319512][ T3470] worker_thread+0xa47/0xfb0 [ 765.324640][ T3470] kthread+0x38b/0x480 [ 765.329249][ T3470] ret_from_fork+0x514/0xb70 [ 765.334392][ T3470] ret_from_fork_asm+0x1a/0x30 [ 765.339696][ T3470] [ 765.339696][ T3470] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 765.347363][ T3470] __mutex_lock+0x19d/0x1550 [ 765.352498][ T3470] nbd_queue_rq+0x373/0xff0 [ 765.357554][ T3470] blk_mq_dispatch_rq_list+0x499/0x1990 [ 765.363767][ T3470] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 765.370730][ T3470] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 765.377257][ T3470] blk_mq_run_work_fn+0x16c/0x300 [ 765.382815][ T3470] process_scheduled_works+0xc3d/0x1630 [ 765.388891][ T3470] worker_thread+0xa47/0xfb0 [ 765.394010][ T3470] kthread+0x38b/0x480 [ 765.398606][ T3470] ret_from_fork+0x514/0xb70 [ 765.403720][ T3470] ret_from_fork_asm+0x1a/0x30 [ 765.409005][ T3470] [ 765.409005][ T3470] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 765.416223][ T3470] __mutex_lock+0x19d/0x1550 [ 765.421342][ T3470] nbd_queue_rq+0xc1/0xff0 [ 765.426289][ T3470] blk_mq_dispatch_rq_list+0x499/0x1990 [ 765.432369][ T3470] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 765.439237][ T3470] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 765.445793][ T3470] blk_mq_run_work_fn+0x16c/0x300 [ 765.451429][ T3470] process_scheduled_works+0xc3d/0x1630 [ 765.457515][ T3470] worker_thread+0xa47/0xfb0 [ 765.462638][ T3470] kthread+0x38b/0x480 [ 765.467233][ T3470] ret_from_fork+0x514/0xb70 [ 765.472345][ T3470] ret_from_fork_asm+0x1a/0x30 [ 765.477635][ T3470] [ 765.477635][ T3470] -> #5 (set->srcu){.+.+}-{0:0}: [ 765.484764][ T3470] __synchronize_srcu+0xc9/0x2f0 [ 765.490271][ T3470] elevator_switch+0x1e8/0x7b0 [ 765.495589][ T3470] elevator_change+0x2fa/0x480 [ 765.500886][ T3470] elevator_set_default+0x375/0x440 [ 765.506618][ T3470] blk_register_queue+0x3f3/0x4e0 [ 765.512263][ T3470] __add_disk+0x6b8/0xdb0 [ 765.517206][ T3470] add_disk_fwnode+0x100/0x3a0 [ 765.522505][ T3470] nbd_dev_add+0x733/0xb60 [ 765.527457][ T3470] nbd_init+0x168/0x1f0 [ 765.532291][ T3470] do_one_initcall+0x250/0x870 [ 765.537596][ T3470] do_initcall_level+0x10a/0x1a0 [ 765.543213][ T3470] do_initcalls+0x59/0xa0 [ 765.548251][ T3470] kernel_init_freeable+0x29d/0x3e0 [ 765.553982][ T3470] kernel_init+0x22/0x1d0 [ 765.558849][ T3470] ret_from_fork+0x514/0xb70 [ 765.563969][ T3470] ret_from_fork_asm+0x1a/0x30 [ 765.569262][ T3470] [ 765.569262][ T3470] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 765.577090][ T3470] __mutex_lock+0x19d/0x1550 [ 765.582221][ T3470] elevator_change+0x1af/0x480 [ 765.587520][ T3470] elevator_set_none+0xb5/0x140 [ 765.592901][ T3470] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 765.599245][ T3470] nbd_start_device+0x189/0xb30 [ 765.604630][ T3470] nbd_genl_connect+0x167d/0x1cd0 [ 765.610182][ T3470] genl_family_rcv_msg_doit+0x233/0x340 [ 765.616265][ T3470] genl_rcv_msg+0x614/0x7a0 [ 765.621314][ T3470] netlink_rcv_skb+0x226/0x4a0 [ 765.626603][ T3470] genl_rcv+0x28/0x40 [ 765.631107][ T3470] netlink_unicast+0x7bd/0x940 [ 765.636402][ T3470] netlink_sendmsg+0x813/0xb40 [ 765.641705][ T3470] sock_sendmsg_nosec+0x13a/0x180 [ 765.647259][ T3470] ____sys_sendmsg+0x54e/0x850 [ 765.652549][ T3470] ___sys_sendmsg+0x2a5/0x360 [ 765.657759][ T3470] __x64_sys_sendmsg+0x1b1/0x290 [ 765.663592][ T3470] do_syscall_64+0x166/0x520 [ 765.668798][ T3470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.675228][ T3470] [ 765.675228][ T3470] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 765.683843][ T3470] blk_alloc_queue+0x544/0x690 [ 765.689158][ T3470] __blk_mq_alloc_disk+0x194/0x390 [ 765.694800][ T3470] nbd_dev_add+0x494/0xb60 [ 765.699757][ T3470] nbd_init+0x168/0x1f0 [ 765.704440][ T3470] do_one_initcall+0x250/0x870 [ 765.709753][ T3470] do_initcall_level+0x10a/0x1a0 [ 765.715236][ T3470] do_initcalls+0x59/0xa0 [ 765.720112][ T3470] kernel_init_freeable+0x29d/0x3e0 [ 765.725855][ T3470] kernel_init+0x22/0x1d0 [ 765.730723][ T3470] ret_from_fork+0x514/0xb70 [ 765.735846][ T3470] ret_from_fork_asm+0x1a/0x30 [ 765.741137][ T3470] [ 765.741137][ T3470] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 765.748433][ T3470] fs_reclaim_acquire+0x71/0x100 [ 765.753965][ T3470] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 765.760249][ T3470] alloc_inode+0xb8/0x1b0 [ 765.765217][ T3470] iget_locked+0x131/0x6a0 [ 765.770169][ T3470] kernfs_get_inode+0x4f/0x770 [ 765.775463][ T3470] kernfs_get_tree+0x5cd/0x980 [ 765.780754][ T3470] vfs_get_tree+0x92/0x2a0 [ 765.785701][ T3470] do_new_mount+0x319/0xdc0 [ 765.790805][ T3470] __se_sys_mount+0x31d/0x420 [ 765.796022][ T3470] do_syscall_64+0x166/0x520 [ 765.801140][ T3470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.807560][ T3470] [ 765.807560][ T3470] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 765.815562][ T3470] down_write+0x96/0x200 [ 765.820340][ T3470] kernfs_remove_by_name_ns+0x4e/0x140 [ 765.826337][ T3470] device_links_driver_bound+0x4ab/0x1440 [ 765.832604][ T3470] driver_bound+0xd8/0x2e0 [ 765.837748][ T3470] really_probe+0x774/0xae0 [ 765.842789][ T3470] __driver_probe_device+0x1e8/0x360 [ 765.848609][ T3470] driver_probe_device+0x4f/0x240 [ 765.854166][ T3470] __device_attach_driver+0x270/0x410 [ 765.860070][ T3470] bus_for_each_drv+0x258/0x2f0 [ 765.865446][ T3470] __device_attach+0x2c4/0x450 [ 765.870752][ T3470] device_initial_probe+0xa1/0xd0 [ 765.876307][ T3470] bus_probe_device+0x12a/0x220 [ 765.881687][ T3470] device_add+0x7d7/0xb80 [ 765.886543][ T3470] faux_device_create_with_groups+0x1a5/0x2b0 [ 765.893261][ T3470] regulator_dummy_init+0x19/0x40 [ 765.898890][ T3470] regulator_init+0xca/0x110 [ 765.904018][ T3470] do_one_initcall+0x250/0x870 [ 765.909315][ T3470] do_initcall_level+0x10a/0x1a0 [ 765.914786][ T3470] do_initcalls+0x59/0xa0 [ 765.919654][ T3470] kernel_init_freeable+0x29d/0x3e0 [ 765.925383][ T3470] kernel_init+0x22/0x1d0 [ 765.930244][ T3470] ret_from_fork+0x514/0xb70 [ 765.935360][ T3470] ret_from_fork_asm+0x1a/0x30 [ 765.940648][ T3470] [ 765.940648][ T3470] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 765.949254][ T3470] __lock_acquire+0x164c/0x2de0 [ 765.954667][ T3470] lock_acquire+0x115/0x350 [ 765.959697][ T3470] down_read+0x4a/0x330 [ 765.964390][ T3470] kernfs_remove+0x35/0x80 [ 765.969336][ T3470] __kobject_del+0xe0/0x310 [ 765.974461][ T3470] kobject_del+0x45/0x60 [ 765.979232][ T3470] cleanup_glue_dir+0x1a3/0x220 [ 765.984615][ T3470] device_del+0x77d/0x8f0 [ 765.989477][ T3470] unregister_netdevice_many_notify+0x1be1/0x2140 [ 765.996505][ T3470] unregister_netdevice_queue+0x2f5/0x340 [ 766.002774][ T3470] ieee802154_del_iface+0x19/0x30 [ 766.008625][ T3470] nl802154_del_interface+0x1b9/0x340 [ 766.014626][ T3470] genl_family_rcv_msg_doit+0x233/0x340 [ 766.020713][ T3470] genl_rcv_msg+0x614/0x7a0 [ 766.025752][ T3470] netlink_rcv_skb+0x226/0x4a0 [ 766.031043][ T3470] genl_rcv+0x28/0x40 [ 766.035562][ T3470] netlink_unicast+0x7bd/0x940 [ 766.040850][ T3470] netlink_sendmsg+0x813/0xb40 [ 766.046141][ T3470] sock_sendmsg_nosec+0x13a/0x180 [ 766.051701][ T3470] ____sys_sendmsg+0x54e/0x850 [ 766.056990][ T3470] ___sys_sendmsg+0x2a5/0x360 [ 766.062809][ T3470] __x64_sys_sendmsg+0x1b1/0x290 [ 766.068285][ T3470] do_syscall_64+0x166/0x520 [ 766.073402][ T3470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.079821][ T3470] [ 766.079821][ T3470] other info that might help us debug this: [ 766.079821][ T3470] [ 766.090054][ T3470] Chain exists of: [ 766.090054][ T3470] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 766.090054][ T3470] [ 766.103446][ T3470] Possible unsafe locking scenario: [ 766.103446][ T3470] [ 766.110901][ T3470] CPU0 CPU1 [ 766.116338][ T3470] ---- ---- [ 766.121708][ T3470] lock(gdp_mutex); [ 766.125612][ T3470] lock(cpuhp_state-up); [ 766.132463][ T3470] lock(gdp_mutex); [ 766.138890][ T3470] rlock(&root->kernfs_supers_rwsem); [ 766.144363][ T3470] [ 766.144363][ T3470] *** DEADLOCK *** [ 766.144363][ T3470] [ 766.152509][ T3470] locks held by syz.2.13401/3470: 4, last CPU#0: [ 766.158851][ T3470] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 766.167063][ T3470] #1: ffffffff912c6480 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 766.176062][ T3470] #2: ffffffff91255a80 (rtnl_mutex){+.+.}-{4:4}, at: nl802154_pre_doit+0xbc/0x9c0 [ 766.185385][ T3470] #3: ffffffff90804320 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 766.194550][ T3470] [ 766.194550][ T3470] stack backtrace: [ 766.200473][ T3470] CPU: 0 UID: 0 PID: 3470 Comm: syz.2.13401 Not tainted syzkaller #0 PREEMPT(full) [ 766.209850][ T3470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 766.219943][ T3470] Call Trace: [ 766.223235][ T3470] [ 766.226263][ T3470] dump_stack_lvl+0xe8/0x150 [ 766.230873][ T3470] print_circular_bug+0x2e2/0x300 [ 766.235905][ T3470] check_noncircular+0x12f/0x150 [ 766.240857][ T3470] __lock_acquire+0x164c/0x2de0 [ 766.245725][ T3470] ? lockdep_hardirqs_on+0x7b/0x110 [ 766.251022][ T3470] ? __pfx___schedule+0x10/0x10 [ 766.255877][ T3470] lock_acquire+0x115/0x350 [ 766.260381][ T3470] ? kernfs_remove+0x35/0x80 [ 766.264993][ T3470] down_read+0x4a/0x330 [ 766.269165][ T3470] ? kernfs_remove+0x35/0x80 [ 766.273756][ T3470] kernfs_remove+0x35/0x80 [ 766.278219][ T3470] __kobject_del+0xe0/0x310 [ 766.282740][ T3470] kobject_del+0x45/0x60 [ 766.287004][ T3470] cleanup_glue_dir+0x1a3/0x220 [ 766.291888][ T3470] device_del+0x77d/0x8f0 [ 766.296241][ T3470] ? __pfx_device_del+0x10/0x10 [ 766.301117][ T3470] ? pm_runtime_set_memalloc_noio+0x1f5/0x260 [ 766.307276][ T3470] ? netdev_unregister_kobject+0x347/0x450 [ 766.313157][ T3470] unregister_netdevice_many_notify+0x1be1/0x2140 [ 766.319605][ T3470] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 766.326478][ T3470] ? irqentry_exit+0x218/0x920 [ 766.331253][ T3470] ? lockdep_hardirqs_on+0x7b/0x110 [ 766.336459][ T3470] unregister_netdevice_queue+0x2f5/0x340 [ 766.342202][ T3470] ? ieee802154_if_remove+0x1b3/0x210 [ 766.347583][ T3470] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 766.354009][ T3470] ? ieee802154_if_remove+0x1b3/0x210 [ 766.359421][ T3470] ? __local_bh_enable_ip+0xd6/0x140 [ 766.364728][ T3470] ? ieee802154_if_remove+0x1b3/0x210 [ 766.370107][ T3470] ieee802154_del_iface+0x19/0x30 [ 766.375140][ T3470] nl802154_del_interface+0x1b9/0x340 [ 766.380523][ T3470] genl_family_rcv_msg_doit+0x233/0x340 [ 766.386088][ T3470] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 766.392184][ T3470] ? bpf_lsm_capable+0x9/0x20 [ 766.396875][ T3470] ? security_capable+0x7e/0x2c0 [ 766.401969][ T3470] genl_rcv_msg+0x614/0x7a0 [ 766.406503][ T3470] ? __pfx_genl_rcv_msg+0x10/0x10 [ 766.411532][ T3470] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 766.417014][ T3470] ? __pfx_nl802154_del_interface+0x10/0x10 [ 766.422928][ T3470] ? __pfx_nl802154_post_doit+0x10/0x10 [ 766.428503][ T3470] netlink_rcv_skb+0x226/0x4a0 [ 766.433287][ T3470] ? __pfx_genl_rcv_msg+0x10/0x10 [ 766.438320][ T3470] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 766.443623][ T3470] ? down_read+0x2be/0x330 [ 766.448042][ T3470] genl_rcv+0x28/0x40 [ 766.452053][ T3470] netlink_unicast+0x7bd/0x940 [ 766.456829][ T3470] netlink_sendmsg+0x813/0xb40 [ 766.461607][ T3470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.466902][ T3470] ? apparmor_socket_sendmsg+0x98/0x360 [ 766.472610][ T3470] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.477906][ T3470] sock_sendmsg_nosec+0x13a/0x180 [ 766.482950][ T3470] ____sys_sendmsg+0x54e/0x850 [ 766.487719][ T3470] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.493004][ T3470] ? import_iovec+0x73/0xa0 [ 766.497657][ T3470] ___sys_sendmsg+0x2a5/0x360 [ 766.502337][ T3470] ? __lock_acquire+0x747/0x2de0 [ 766.507283][ T3470] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.512483][ T3470] ? futex_wake+0x51b/0x5f0 [ 766.517067][ T3470] ? __fget_files+0x2a/0x420 [ 766.521670][ T3470] ? __fget_files+0x3a2/0x420 [ 766.526371][ T3470] __x64_sys_sendmsg+0x1b1/0x290 [ 766.531426][ T3470] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 766.536889][ T3470] do_syscall_64+0x166/0x520 [ 766.541482][ T3470] ? trace_irq_disable+0x3b/0x140 [ 766.546544][ T3470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.552625][ T3470] ? clear_bhb_loop+0x70/0xc0 [ 766.557356][ T3470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.563254][ T3470] RIP: 0033:0x7fc3b4d9e1d9 [ 766.567683][ T3470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.587304][ T3470] RSP: 002b:00007fc3b5c35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.595735][ T3470] RAX: ffffffffffffffda RBX: 00007fc3b5025fa0 RCX: 00007fc3b4d9e1d9 [ 766.603717][ T3470] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000004 [ 766.611702][ T3470] RBP: 00007fc3b4e35888 R08: 0000000000000000 R09: 0000000000000000 [ 766.619682][ T3470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.627650][ T3470] R13: 00007fc3b5026038 R14: 00007fc3b5025fa0 R15: 00007fff687fb968 [ 766.635633][ T3470] [ 766.700285][ T3472] netlink: 'syz.2.13401': attribute type 1 has an invalid length. [ 766.700305][ T3472] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13401'.