last executing test programs: 10.119776013s ago: executing program 1 (id=9506): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x6}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8d0}, 0x8000) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000]}}}}]}, 0x88}}, 0x20000000) 6.122363982s ago: executing program 0 (id=9526): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendfile(r3, r4, 0x0, 0xffffffff000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.183586494s ago: executing program 2 (id=9529): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x80000001, 0x5, 0x3, 0xfffffff7, 0x1, 0x26d6}}}}]}, 0x4c}}, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef59510525ba56dcd79a36c23d3b9844e1571a86ea1698fa51f60a64c9f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748fdb8021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4040004) 4.783180782s ago: executing program 0 (id=9530): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb4, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 4.741625006s ago: executing program 1 (id=9531): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7fc}], 0x2c) sendto$inet6(r4, &(0x7f0000000040)="e4", 0x1, 0x10, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x40000023, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000500)={0x0, 0xab1}, 0x8) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 4.553821371s ago: executing program 2 (id=9533): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x2, {{0x43, 0x3}, 0x1}}, 0x80, 0x0}}], 0x1, 0x8000) recvmmsg$unix(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/211, 0xd3}], 0x1}}], 0x1, 0x40000100, 0x0) socketpair(0x26, 0x800, 0x6, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r4], 0x20, 0x6044}, 0x6) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={r4, 0x40}, &(0x7f0000000140)=0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r5) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff7) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$TUNGETVNETLE(r5, 0x40047451, &(0x7f0000000180)) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r6, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000400)={0x24, 0x1402, 0x1, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x4850) close(r5) 4.436370622s ago: executing program 0 (id=9535): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'veth1_to_bridge\x00', 0x20}, 0x18) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000002c0)={0x1, 'bridge0\x00', 0x1}, 0x18) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001300010029bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="073000000904000008001300", @ANYRES32=0x0, @ANYBLOB="6763efe48edd4b47d6442b14d6a1e52bb6ceb40697e06680d7c23ab85e965fd3b9b6d788b0cd4d074b020db1091184e17f311f68d963c757d6948719b9100dff66ed6d19c73ac66dec5bc5dc4fd328ff26bdef73d1aee164d3fe9b83fa538ecc786fc87d60d7377dfbcd9586a44ff032eed345702857d82b01683db0fb7703e65e62e19856e7915e623c5a31f72c07b879167a5f287022d7ed88ba1ce18d99e6f53e02b725bcdf1e909dac6c27f4374acc00"/191], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={r6, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x48, r7, 0x801, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac02}]}]}, 0x48}}, 0x0) 4.212861105s ago: executing program 0 (id=9538): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read(r1, &(0x7f0000000080)=""/38, 0x26) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r3, 0x0, 0x0, 0xffffffff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0x7, 0x403}]}) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r4, &(0x7f0000000040)=ANY=[], 0x6) 4.117134689s ago: executing program 4 (id=9539): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x24, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x128, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0xff, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x3a, 0x2f, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xffff}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1001, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff000000, 0xff, 'syz_tun\x00', 'sit0\x00', {0xff}, {}, 0x6c, 0x1, 0x77}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x3, 0x3, 0x7, 0x0, 0xb0d452e9002af204}, {0x2}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv4=@empty, [0xff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x0, 0x1, 0x7, 0x2, 0x5], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x0, 0x2, 0x7, 0x1, 0x2], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) 3.997021558s ago: executing program 2 (id=9541): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendfile(r3, r4, 0x0, 0xffffffff000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r6, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20008081}, 0x4000054) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan1\x00'}) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.82437033s ago: executing program 1 (id=9542): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000200000000000000008001e8040000000", 0x24) r2 = socket$kcm(0xa, 0x2, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x100, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) close(0x4) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'rr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_timeval(r6, 0x1, 0x43, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', r7, 0x2f, 0x1, 0x2, 0x1, 0x26, @remote, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80, 0x1, 0x1000}}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYRESHEX, @ANYRES64, @ANYRES64=r2, @ANYRESDEC=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 3.673235945s ago: executing program 4 (id=9543): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.399298147s ago: executing program 4 (id=9545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffcb4, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f742f5f62726964676500140001007767320000000000000000000000000014000100766574683069746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x659e2417a3274cbf, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.279091764s ago: executing program 1 (id=9546): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000002d00)={0x0, 0x0, 0x0}, 0x4000004) syz_emit_ethernet(0xbe, &(0x7f0000001340)=ANY=[], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0xe6, 0xfc, 0x0, 0x62, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x40, 0x10, 0x4, 0xb23}}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r4, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$SIOCX25SCAUSEDIAG(r5, 0x89ec, &(0x7f0000000180)={0x5, 0x6}) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) setsockopt$packet_add_memb(r4, 0x107, 0x1, 0x0, 0x0) listen(r0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) 3.237262838s ago: executing program 4 (id=9547): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x8253, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r4, &(0x7f0000000a40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x1c4, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0x42, 0xa8, @random="0958302d28aaa1b9ae41d96b4ff0c49c65fc92ee8d1e54e8fb3b558b1131496986cea096c1dd9f5f645b82583fd7c60d8ad95d6bce12d63fb6dab2ffd5dc"}, @DEVLINK_ATTR_RATE_NODE_NAME={0xda, 0xa8, @random="a57a415076e6beea43e9839b15e38d4f20b6302d9a14edae9e1d7aec6179f8938730dee1bb064452acb3c06009ca2fc922d5cede23746efa1e61265f421f81af897005abb7b0b7ae4677d3a4ea3c84fe5c43b094e25e5b15d4441426b03a11628e8be543b859787b80988db860081442307640f52c83b14b3453c991fc3bb67a9477a05857bc180f31ae6bf18dedd2aa8d7a1987d45e3bff778867566de9369962fbff0f79b8c7b10eef23f260a66e9f5ae39f6b06b6753e3491880da75758148d54260b0eb8e800ae2bde58f658abd8627c3c36ffb4"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @handle=@pci={{0x8}, {0x11}}]}, 0x1c4}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) setsockopt$inet6_int(r3, 0x29, 0x31, 0x0, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000080)=0x13) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0x713, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000011, 0x6, 0xa, 0x4, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x830, &(0x7f0000000180)={0x11, 0x8100, r5, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}}, 0x14) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socket$rds(0x15, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) 3.190037517s ago: executing program 0 (id=9548): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0x86, @mcast2, 0x3}}, 0x4, 0x6b1, 0x3, 0x502, 0x0, 0x1, 0xfc}, 0x9c) unshare(0x6a040000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x34}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x1, 0xffffffff, 0x2000003, 0x1, 0x1, 0x800, 0xb0}, 0x1c) socketpair(0x21, 0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d3, &(0x7f0000000100)) 2.767220201s ago: executing program 2 (id=9551): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c000000400007012bbd7000fedbdf25037c0008000b000a01010204000800"], 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd2", 0x59}], 0x3, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_audit(0x10, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) unshare(0x400) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400), 0x0, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) recvmmsg(r1, &(0x7f0000006fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=""/72, 0x48}, 0x81}], 0x1, 0x20000020, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@broadcast, @in=@multicast2}}, {{@in=@empty}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) 2.107566576s ago: executing program 3 (id=9553): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x24, 0x0, 0x9, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) recvfrom$llc(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x128, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0xff, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x3a, 0x2f, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xffff}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1001, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000002000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff000000, 0xff, 'syz_tun\x00', 'sit0\x00', {0xff}, {}, 0x6c, 0x1, 0x77}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x3, 0x3, 0x7, 0x0, 0xb0d452e9002af204}, {0x2}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv4=@empty, [0xff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x0, 0x1, 0x7, 0x2, 0x5], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x0, 0x2, 0x7, 0x1, 0x2], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r2, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) 1.862487501s ago: executing program 3 (id=9554): socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0x3) socket$inet6(0xa, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000440)) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$rds(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 1.696191628s ago: executing program 1 (id=9555): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.607507949s ago: executing program 3 (id=9556): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r1, 0x1ffd1684a4a9b69d, 0x70bd25, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r2, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000002200)=[{0x0}, {&(0x7f0000000b40)=""/4, 0x4}, {&(0x7f0000002100)=""/212, 0x90}], 0x3}, 0xa}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6dafe0900"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}}, 0x20}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x4000860) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r1, 0x800, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44801) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) r5 = socket$kcm(0x2b, 0x1, 0x0) close(r5) 1.477962231s ago: executing program 2 (id=9558): r0 = socket(0x10, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, 0x0) syz_emit_ethernet(0x66, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x3, 0x33) socket$unix(0x1, 0x5, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40810}, 0x4040000) socket$inet6_sctp(0xa, 0x801, 0x84) socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x46, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf200000000000001600020038e873a23d030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_audit(0x10, 0x3, 0x9) socket$can_bcm(0x1d, 0x2, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = gettid() r4 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r2, @ANYBLOB="089805000750050008001300", @ANYRES32=r3, @ANYBLOB="08002c0005000000140003"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4040010) 1.296559929s ago: executing program 4 (id=9559): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x17d4}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x7, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000fd0500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) listen(r1, 0x0) socket$netlink(0x10, 0x3, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000100)) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000280)={'mangle\x00', 0x0, [0x6, 0x1000, 0x3, 0x6, 0x380]}, &(0x7f0000000240)=0x54) 1.167446906s ago: executing program 2 (id=9560): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e0001ff070000000000000006"], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00.'], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) read(r3, &(0x7f0000000080)=""/38, 0x26) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000980)=[{r5, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r5, &(0x7f00000003c0)=[{}], 0x1, 0xffffffff) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x85, 0x7, 0x403}]}) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000040)=ANY=[], 0x6) 1.090268987s ago: executing program 1 (id=9561): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x17d4}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x7, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x4000000, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r1, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x10, &(0x7f0000003980)=[@in={0x2, 0x4e21, @loopback}]}, &(0x7f0000000100)=0x10) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) ioctl$sock_SIOCGIFINDEX(r0, 0x61d0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000280)={'nat\x00', 0x0, [0x6, 0x1000, 0x3, 0x6, 0x380]}, &(0x7f0000000240)=0x54) 655.581617ms ago: executing program 3 (id=9562): socket(0x10, 0x803, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x800) listen(r0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto(r1, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, 0xffffffffffffffff, 0x913e0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0xa2ec9000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) sendmmsg(r1, &(0x7f0000002bc0), 0x2a0, 0x20004840) 446.655647ms ago: executing program 3 (id=9563): recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x7c}}, 0x0) 271.160022ms ago: executing program 3 (id=9564): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@bloom_filter={0x1e, 0xcf8, 0x6, 0xc, 0x8000, 0x1, 0x80, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x3, 0x5}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) socket(0x40000000015, 0x5, 0x0) unshare(0x62040200) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfc, {0x2, 0x10, 0x20, 0x0, 0x0, 0x4, 0xfe, 0x6, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000000800010001"], 0x20}}, 0x4000000) syz_genetlink_get_family_id$l2tp(0x0, r1) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 67.121648ms ago: executing program 4 (id=9565): sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYRES16=0x0, @ANYBLOB="000229bd7000fedbdf25040000004000078008000100a40f00000c00040007000000000000000c00030002080000000000000c000400000c000077000000080001007400000008000100050000002c000580140002800800"], 0x80}, 0x1, 0x0, 0x0, 0x200008c0}, 0xcc00) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x4, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d8ba7c43"]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x5}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xcac7c5895bbe9331}, 0xc010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r3 = socket(0x10, 0x803, 0x0) socket(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xfe, 0x0, 0xfd, 0x9}}, 0x1c}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) sendmmsg$inet6(r6, &(0x7f0000004f00)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0}}], 0x1, 0x0) 0s ago: executing program 0 (id=9566): bind$llc(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x85, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e24, @empty}}}, 0x90) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), r1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r8, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) kernel console output (not intermixed with test programs): 6][T17244] bond2: entered allmulticast mode [ 356.282889][T17244] 8021q: adding VLAN 0 to HW filter on device bond2 [ 356.543340][T17268] validate_nla: 2 callbacks suppressed [ 356.543373][T17268] netlink: 'syz.3.5110': attribute type 19 has an invalid length. [ 356.558116][T17268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5110'. [ 356.568562][T17268] netlink: 'syz.3.5110': attribute type 19 has an invalid length. [ 356.577288][T17268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5110'. [ 358.259004][T17350] syzkaller1: entered promiscuous mode [ 358.264852][T17350] syzkaller1: entered allmulticast mode [ 358.426183][T17356] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 359.377440][T17397] __nla_validate_parse: 2 callbacks suppressed [ 359.377458][T17397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5162'. [ 359.734143][T17413] netlink: 'syz.4.5170': attribute type 11 has an invalid length. [ 360.186898][T17444] netlink: 5000 bytes leftover after parsing attributes in process `syz.2.5183'. [ 360.898810][T17485] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5200'. [ 361.047179][T17491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5203'. [ 361.128929][T17491] xfrm1: entered promiscuous mode [ 361.140730][T17499] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5207'. [ 361.150345][T17491] xfrm1: entered allmulticast mode [ 361.158758][T17491] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5203'. [ 361.179777][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 361.366145][T17509] netlink: 51 bytes leftover after parsing attributes in process `syz.2.5213'. [ 361.457411][ T30] audit: type=1800 audit(1780762630.300:13): pid=17507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5211" name=20 dev="tmpfs" ino=5347 res=0 errno=0 [ 361.853640][T17536] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5222'. [ 362.027075][T17544] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5224'. [ 362.053252][T17544] netlink: 'syz.0.5224': attribute type 7 has an invalid length. [ 362.075997][T17544] netlink: 'syz.0.5224': attribute type 8 has an invalid length. [ 362.095069][T17544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5224'. [ 362.136060][T17544] erspan0: entered promiscuous mode [ 362.149681][T17544] gretap0: entered promiscuous mode [ 362.157827][T17544] erspan0: left promiscuous mode [ 362.166474][T17544] gretap0: left promiscuous mode [ 362.287884][T17554] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 362.537262][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c631800: rx timeout, send abort [ 363.037520][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c631400: rx timeout, send abort [ 363.046082][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c631800: abort rx timeout. Force session deactivation [ 363.545921][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c631400: abort rx timeout. Force session deactivation [ 364.329867][T17619] netlink: 'syz.0.5254': attribute type 5 has an invalid length. [ 364.350675][T17619] geneve2: entered promiscuous mode [ 364.359201][T17619] geneve2: entered allmulticast mode [ 364.372025][ T60] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 364.382502][ T60] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 364.402362][ T60] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 364.424662][ T60] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 364.902576][T17641] syzkaller1: entered promiscuous mode [ 364.910347][T17641] syzkaller1: entered allmulticast mode [ 365.047809][T17645] netlink: 'syz.1.5266': attribute type 13 has an invalid length. [ 365.111601][T17645] netlink: 'syz.1.5266': attribute type 13 has an invalid length. [ 366.538807][T17592] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.280210][T17727] syzkaller1: entered promiscuous mode [ 367.292780][T17727] syzkaller1: entered allmulticast mode [ 368.008588][T17774] Bluetooth: MGMT ver 1.23 [ 368.094171][T17779] __nla_validate_parse: 3 callbacks suppressed [ 368.094191][T17779] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5318'. [ 368.152543][T17779] netlink: Conntrack attr has 4 unknown bytes [ 368.221647][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 370.059863][ T4949] Bluetooth: hci2: command 0x0406 tx timeout [ 370.072898][ T5641] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 370.951248][T17868] netlink: 'syz.1.5346': attribute type 1 has an invalid length. [ 370.998370][T17868] bond1: entered promiscuous mode [ 371.011025][T17868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.062885][T17875] bond1: (slave veth3): making interface the new active one [ 371.089647][T17875] veth3: entered promiscuous mode [ 371.099280][T17875] bond1: (slave veth3): Enslaving as an active interface with an up link [ 371.316569][T17891] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5355'. [ 372.228878][T17945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5380'. [ 372.418420][T17959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5386'. [ 372.430551][T17959] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5386'. [ 372.997622][T17970] netlink: 10 bytes leftover after parsing attributes in process `syz.4.5391'. [ 373.617883][T18003] netlink: 'syz.2.5402': attribute type 12 has an invalid length. [ 373.639074][T18003] netlink: 'syz.2.5402': attribute type 29 has an invalid length. [ 373.671995][T18003] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5402'. [ 373.697832][T18003] netlink: 'syz.2.5402': attribute type 1 has an invalid length. [ 373.719971][T18003] netlink: 'syz.2.5402': attribute type 2 has an invalid length. [ 373.732973][T18003] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5402'. [ 373.751471][T18005] netlink: 'syz.2.5402': attribute type 12 has an invalid length. [ 373.769797][T18005] netlink: 'syz.2.5402': attribute type 29 has an invalid length. [ 373.782657][T18005] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5402'. [ 373.800398][T18005] netlink: 'syz.2.5402': attribute type 1 has an invalid length. [ 373.819978][T18005] netlink: 'syz.2.5402': attribute type 2 has an invalid length. [ 373.832176][T18005] netlink: 11 bytes leftover after parsing attributes in process `syz.2.5402'. [ 374.843981][T18029] netlink: 'syz.2.5410': attribute type 1 has an invalid length. [ 374.928803][T18029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.028851][T18035] bond0: (slave geneve3): making interface the new active one [ 375.104960][T18035] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 375.547207][T18053] netlink: 148 bytes leftover after parsing attributes in process `syz.2.5420'. [ 375.968754][T18057] ip6tnl2: entered promiscuous mode [ 376.140553][T18063] sctp: [Deprecated]: syz.2.5424 (pid 18063) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.140553][T18063] Use struct sctp_sack_info instead [ 376.529144][T18072] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 378.140147][T18108] gtp1: entered promiscuous mode [ 378.157925][T18108] gtp1: entered allmulticast mode [ 378.182248][T18108] team0: Device gtp1 is of different type [ 378.472935][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.036450][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5462'. [ 379.046544][T18153] netlink: 'syz.3.5462': attribute type 8 has an invalid length. [ 379.061129][T18153] geneve3: entered promiscuous mode [ 379.066447][T18153] geneve3: entered allmulticast mode [ 379.243602][T18159] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 6 [ 380.087754][T18206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5488'. [ 380.119159][T18207] netlink: 'syz.4.5487': attribute type 1 has an invalid length. [ 380.227591][T18207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 380.422036][T18227] netlink: 'syz.2.5495': attribute type 2 has an invalid length. [ 380.844642][T18247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5503'. [ 381.379780][T18262] bridge1: entered promiscuous mode [ 381.385667][T18262] bridge1: entered allmulticast mode [ 381.865182][T18275] sctp: [Deprecated]: syz.3.5516 (pid 18275) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.865182][T18275] Use struct sctp_sack_info instead [ 381.946602][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5517'. [ 381.958214][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5517'. [ 381.967460][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5517'. [ 381.976620][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5517'. [ 381.985937][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5517'. [ 381.995738][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5517'. [ 382.005962][T18277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5517'. [ 383.068584][T18317] IPv4: Oversized IP packet from 127.202.26.0 [ 383.381138][T18221] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 384.232446][T18365] syzkaller1: entered promiscuous mode [ 384.242890][T18365] syzkaller1: entered allmulticast mode [ 384.480623][T18370] __nla_validate_parse: 8 callbacks suppressed [ 384.480641][T18370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5557'. [ 384.547979][T18370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5557'. [ 385.466080][T18396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5569'. [ 385.635361][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5572'. [ 386.026688][T18414] netlink: 'syz.1.5578': attribute type 11 has an invalid length. [ 386.668755][T18443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5589'. [ 386.701487][T18443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5589'. [ 386.971877][T18456] bridge0: entered allmulticast mode [ 387.001910][T18456] bridge_slave_1: left allmulticast mode [ 387.029766][T18456] bridge_slave_1: left promiscuous mode [ 387.041465][T18456] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.210349][T18456] bridge_slave_0: left allmulticast mode [ 387.227180][T18456] bridge_slave_0: left promiscuous mode [ 387.257905][T18456] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.622724][T18477] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 387.938747][T18494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5615'. [ 387.948395][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5615'. [ 388.062098][T18494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5615'. [ 388.090606][T18494] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5615'. [ 388.528642][T18518] bond5: entered promiscuous mode [ 388.534255][T18518] 8021q: adding VLAN 0 to HW filter on device bond5 [ 388.718849][T18530] netlink: 'syz.4.5629': attribute type 1 has an invalid length. [ 388.902821][T18530] 8021q: adding VLAN 0 to HW filter on device bond6 [ 388.931059][T18535] bond6: option lp_interval: invalid value (18446744073709551607) [ 388.974203][T18535] bond6: option lp_interval: allowed values 1 - 2147483647 [ 389.553868][T18554] netlink: 'syz.3.5638': attribute type 1 has an invalid length. [ 389.623100][T18554] 8021q: adding VLAN 0 to HW filter on device bond5 [ 389.678136][T18562] bond5: (slave geneve4): making interface the new active one [ 389.698014][T18562] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 390.553313][T18598] syzkaller1: entered promiscuous mode [ 390.586141][T18598] syzkaller1: entered allmulticast mode [ 391.603887][T18642] netlink: 'syz.1.5669': attribute type 3 has an invalid length. [ 391.814463][T18649] xt_hashlimit: size too large, truncated to 1048576 [ 392.495455][T18675] netlink: 'syz.2.5676': attribute type 2 has an invalid length. [ 392.528681][T18675] __nla_validate_parse: 2 callbacks suppressed [ 392.528699][T18675] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5676'. [ 393.179761][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.256625][T18695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5685'. [ 393.281106][T18695] bridge_slave_0: entered promiscuous mode [ 393.297115][T18695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5685'. [ 393.892611][T18717] netlink: 'syz.2.5694': attribute type 4 has an invalid length. [ 393.954465][T18718] netlink: 'syz.2.5694': attribute type 4 has an invalid length. [ 394.365979][T18739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5703'. [ 394.458846][T18743] netlink: 7 bytes leftover after parsing attributes in process `syz.2.5705'. [ 394.676129][T18760] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.5709'. [ 394.966431][T18764] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.973931][T18764] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.982558][T18764] bridge0: entered allmulticast mode [ 395.011379][T18766] bridge_slave_1: left allmulticast mode [ 395.041933][T18766] bridge_slave_1: left promiscuous mode [ 395.059116][T18766] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.097487][T18766] bridge_slave_0: left allmulticast mode [ 395.127002][T18766] bridge_slave_0: left promiscuous mode [ 395.141987][T18766] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.663677][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5724'. [ 395.702032][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5724'. [ 395.712563][T18798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5724'. [ 395.727914][T18798] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5724'. [ 396.382457][T18834] netlink: 'syz.3.5741': attribute type 22 has an invalid length. [ 396.512137][T18834] netlink: 'syz.3.5741': attribute type 22 has an invalid length. [ 399.016918][T18916] Bluetooth: hci1: too big key_count value 29096 [ 399.583659][T18937] debugfs: 'netdev:syzkaller0' already exists in 'phy9' [ 400.565086][T18965] netlink: 'syz.2.5797': attribute type 1 has an invalid length. [ 400.639339][T18968] __nla_validate_parse: 6 callbacks suppressed [ 400.639358][T18968] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5794'. [ 400.707566][T18965] 8021q: adding VLAN 0 to HW filter on device bond4 [ 400.885238][T18978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5800'. [ 400.911705][T18978] netlink: 'syz.1.5800': attribute type 9 has an invalid length. [ 401.337662][T18995] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 401.562924][T19007] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5813'. [ 401.687281][T19011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5816'. [ 401.978835][T19025] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 402.023661][T19025] bond7: (slave lo): Enslaving as an active interface with an up link [ 402.040156][T19025] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 402.268000][T19041] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5828'. [ 402.477285][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5833'. [ 402.893528][T19074] block nbd9: server does not support multiple connections per device. [ 402.918053][T19074] block nbd9: shutting down sockets [ 403.760140][T19104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5850'. [ 403.853567][T19109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5853'. [ 403.892205][T19109] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5853'. [ 403.922965][T19113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5855'. [ 404.458457][T19138] vlan3: entered promiscuous mode [ 404.469120][T19138] geneve1: entered promiscuous mode [ 404.482966][T19138] vlan3: entered allmulticast mode [ 404.497327][T19138] geneve1: entered allmulticast mode [ 404.656171][T19153] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 404.677397][T19153] syzkaller1: Refused to change device type [ 405.716874][T19196] tls_set_device_offload_rx: netdev not found [ 406.022567][T19207] __nla_validate_parse: 3 callbacks suppressed [ 406.022585][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5896'. [ 406.047026][T19207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5896'. [ 406.216024][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5899'. [ 406.238561][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5899'. [ 406.259689][T19214] netlink: 'syz.0.5899': attribute type 12 has an invalid length. [ 406.296747][T19214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5899'. [ 406.319662][T19214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5899'. [ 406.367440][T19214] netlink: 'syz.0.5899': attribute type 12 has an invalid length. [ 407.557474][T19292] syzkaller1: entered promiscuous mode [ 407.570119][T19292] syzkaller1: entered allmulticast mode [ 407.670687][T19298] tipc: Started in network mode [ 407.675774][T19298] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 407.684009][T19298] tipc: Enabled bearer , priority 16 [ 408.689865][ T5750] tipc: Node number set to 10005162 [ 408.765577][T19353] pim6reg1: entered promiscuous mode [ 408.783588][T19353] pim6reg1: entered allmulticast mode [ 409.382401][ T30] audit: type=1800 audit(1780762678.230:14): pid=19378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5967" name="r" dev="tmpfs" ino=6047 res=0 errno=0 [ 409.821224][ C1] vcan0: j1939_tp_rxtimer: 0xffff888066af3c00: rx timeout, send abort [ 410.321237][ C1] vcan0: j1939_tp_rxtimer: 0xffff888066af3800: rx timeout, send abort [ 410.329867][ C1] vcan0: j1939_tp_rxtimer: 0xffff888066af3c00: abort rx timeout. Force session deactivation [ 410.520149][T19434] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5994'. [ 410.829719][ C1] vcan0: j1939_tp_rxtimer: 0xffff888066af3800: abort rx timeout. Force session deactivation [ 410.869387][T19447] netlink: del zone limit has 8 unknown bytes [ 411.510247][T19474] netlink: 'syz.0.6013': attribute type 1 has an invalid length. [ 411.575950][T19474] 8021q: adding VLAN 0 to HW filter on device bond3 [ 411.876161][T19489] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6019'. [ 411.914228][T19490] netlink: 'syz.0.6020': attribute type 4 has an invalid length. [ 412.008246][T19490] netlink: 'syz.0.6020': attribute type 4 has an invalid length. [ 412.884456][T19523] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 412.919009][T19523] bond2: (slave lo): Enslaving as an active interface with an up link [ 412.943882][T19523] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 413.192561][T19531] netlink: 'syz.0.6038': attribute type 1 has an invalid length. [ 413.289632][T19534] gretap1: entered allmulticast mode [ 413.300214][T19534] bond4: (slave gretap1): making interface the new active one [ 413.310919][T19534] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 413.411875][T19538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6041'. [ 413.816140][T19547] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6045'. [ 414.300629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.102229][T19581] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6059'. [ 416.532940][T19632] syzkaller1: entered promiscuous mode [ 416.549633][T19632] syzkaller1: entered allmulticast mode [ 416.817253][T19636] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 417.418910][T19566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 418.688277][T19694] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6100'. [ 419.729544][T19726] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6113'. [ 420.152076][T19744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6121'. [ 420.207638][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6122'. [ 420.218143][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6122'. [ 420.321297][T19749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6122'. [ 420.335088][T19746] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.345971][T19746] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.356016][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6122'. [ 420.358457][T19746] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 420.519361][T19757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6126'. [ 420.591675][T19746] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.610053][T19746] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.621056][T19746] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 420.623164][T19760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6126'. [ 420.729288][T19757] team1: entered promiscuous mode [ 420.758434][T19757] team1: entered allmulticast mode [ 420.772555][T19757] 8021q: adding VLAN 0 to HW filter on device team1 [ 420.845461][T19760] team2: entered promiscuous mode [ 420.851449][T19760] team2: entered allmulticast mode [ 420.857112][T19760] 8021q: adding VLAN 0 to HW filter on device team2 [ 420.900485][T19746] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.919646][T19746] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.931166][T19774] netlink: 276 bytes leftover after parsing attributes in process `syz.0.6131'. [ 420.943725][T19746] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 421.051426][T19771] syzkaller1: entered promiscuous mode [ 421.063250][T19771] syzkaller1: entered allmulticast mode [ 421.202281][T19746] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.214199][T19746] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.226816][T19746] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 421.410800][ T177] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.434579][ T177] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 421.454845][ T177] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 421.472208][T19794] netlink: 'syz.3.6138': attribute type 1 has an invalid length. [ 421.493824][ T177] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.502338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.502464][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.524546][ T177] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 421.535128][ T177] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 421.574191][ T177] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.583212][ T177] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 421.597651][ T177] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 421.624128][T19804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.741398][T19794] 8021q: adding VLAN 0 to HW filter on device bond6 [ 421.787860][T13179] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.805180][T13179] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 421.834463][T13179] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 421.961877][T19818] bridge0: entered allmulticast mode [ 422.069124][T19820] IPVS: dh: FWM 3 0x00000003 - no destination available [ 423.672352][T19852] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 423.758890][T19873] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1467760375/1467760377 [ 423.771016][T19873] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1467760375/1467760377 [ 423.895868][ T177] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.917234][ T177] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.949622][ T177] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 424.009286][ T177] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.019726][ T177] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.028694][ T177] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 424.028724][T19882] __nla_validate_parse: 1 callbacks suppressed [ 424.028755][T19882] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6167'. [ 424.039808][ T177] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.063408][ T177] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.068652][T19877] netlink: 'syz.1.6168': attribute type 3 has an invalid length. [ 424.092344][ T177] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 424.233103][T19892] netlink: 'syz.1.6173': attribute type 21 has an invalid length. [ 424.234605][T19882] 8021q: adding VLAN 0 to HW filter on device bond5 [ 424.241441][T19892] netlink: 'syz.1.6173': attribute type 22 has an invalid length. [ 424.241459][T19892] netlink: 'syz.1.6173': attribute type 23 has an invalid length. [ 424.241474][T19892] netlink: 'syz.1.6173': attribute type 25 has an invalid length. [ 424.241488][T19892] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6173'. [ 424.294522][ T177] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.304188][ T177] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.313395][ T177] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 424.353772][T19888] bond5: option mode: unable to set because the bond device is up [ 424.464977][T19903] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 424.728122][T19911] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6179'. [ 424.905289][T19915] veth0: entered promiscuous mode [ 424.920918][T19915] bond0: entered promiscuous mode [ 424.929771][T19915] bond_slave_0: entered promiscuous mode [ 425.016106][T19912] bond0: left promiscuous mode [ 425.034819][T19912] bond_slave_0: left promiscuous mode [ 425.050393][T19912] veth0: left promiscuous mode [ 425.458564][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6187'. [ 425.510794][T19933] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6187'. [ 425.544054][T19933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6187'. [ 425.783164][T19942] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6193'. [ 426.980686][T19986] sctp: [Deprecated]: syz.1.6212 (pid 19986) Use of int in max_burst socket option. [ 426.980686][T19986] Use struct sctp_assoc_value instead [ 427.465238][T20003] netlink: 'syz.4.6217': attribute type 1 has an invalid length. [ 427.501972][T20003] netlink: 'syz.4.6217': attribute type 4 has an invalid length. [ 427.525324][T20003] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6217'. [ 427.740409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.748840][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.988551][T20016] tipc: Resetting bearer [ 429.265610][T20061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6239'. [ 429.651169][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6245'. [ 429.661803][T20074] netlink: 'syz.2.6245': attribute type 29 has an invalid length. [ 429.669707][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6245'. [ 429.680587][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6245'. [ 429.689850][T20074] netlink: 'syz.2.6245': attribute type 29 has an invalid length. [ 429.697805][T20074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6245'. [ 430.352334][T19996] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.525058][T20103] vlan2: entered allmulticast mode [ 430.531234][T20103] bond0: entered allmulticast mode [ 430.536458][T20103] bond_slave_0: entered allmulticast mode [ 430.548348][T20103] bond_slave_1: entered allmulticast mode [ 430.560378][T20103] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6257'. [ 430.615613][T20103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.628962][T20103] bond_slave_0: left allmulticast mode [ 430.650532][T20103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.663354][T20103] bond_slave_1: left allmulticast mode [ 430.669380][T20103] bond0 (unregistering): Released all slaves [ 431.734120][T20140] netlink: 27 bytes leftover after parsing attributes in process `syz.2.6271'. [ 432.361226][T20151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6274'. [ 432.385297][T20151] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 432.652870][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6277'. [ 433.229098][T20176] netlink: 'syz.4.6285': attribute type 39 has an invalid length. [ 434.306510][T20129] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 434.757064][T20211] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 435.191383][T20211] bond6 (unregistering): Released all slaves [ 435.648552][T20250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6306'. [ 435.964957][T20265] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6310'. [ 436.040689][T20267] netlink: 36764 bytes leftover after parsing attributes in process `syz.2.6311'. [ 436.075724][T20267] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6311'. [ 437.780446][T20334] syzkaller1: entered promiscuous mode [ 437.791899][T20336] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6338'. [ 437.800467][T20334] syzkaller1: entered allmulticast mode [ 437.849362][T20336] 8021q: adding VLAN 0 to HW filter on device bond8 [ 437.908646][T20336] 8021q: adding VLAN 0 to HW filter on device bond9 [ 437.919935][T20336] bond8: (slave bond9): Enslaving as an active interface with an up link [ 437.940087][T20336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6338'. [ 437.971915][T20336] bond8 (unregistering): (slave bond9): Releasing backup interface [ 437.989752][T20336] bond8 (unregistering): Released all slaves [ 438.080411][T20348] netlink: 'syz.1.6341': attribute type 1 has an invalid length. [ 438.093752][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6342'. [ 438.103329][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6342'. [ 438.113885][T20348] netlink: 'syz.1.6341': attribute type 4 has an invalid length. [ 438.123458][T20348] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6341'. [ 438.194310][T20352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6344'. [ 438.253455][T20356] gtp4: entered allmulticast mode [ 439.901602][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.783455][T20338] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 440.983728][T20421] __nla_validate_parse: 4 callbacks suppressed [ 440.983749][T20421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6371'. [ 441.000748][T20421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6371'. [ 441.010639][T20421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6371'. [ 441.032065][T20421] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6371'. [ 441.817186][T20454] netlink: 'syz.0.6383': attribute type 1 has an invalid length. [ 441.877328][T20454] bond6: entered promiscuous mode [ 441.883074][T20454] 8021q: adding VLAN 0 to HW filter on device bond6 [ 441.913027][T20454] 8021q: adding VLAN 0 to HW filter on device bond6 [ 441.926743][T20454] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 441.937478][T20454] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 441.955958][T20454] bond6: (slave vti0): making interface the new active one [ 441.963677][T20454] vti0: entered promiscuous mode [ 441.971629][T20454] bond6: (slave vti0): Enslaving as an active interface with an up link [ 442.198350][T20468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6390'. [ 442.242370][T20468] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6390'. [ 442.681984][T20493] bridge0: port 3(vlan3) entered blocking state [ 442.690174][T20493] bridge0: port 3(vlan3) entered disabled state [ 442.715512][T20493] vlan3: entered allmulticast mode [ 442.721298][T20493] geneve0: entered allmulticast mode [ 442.743137][T20493] vlan3: entered promiscuous mode [ 442.751287][T20493] geneve0: entered promiscuous mode [ 443.092053][T20504] : entered promiscuous mode [ 443.384087][T20519] syzkaller1: entered promiscuous mode [ 443.396612][T20519] syzkaller1: entered allmulticast mode [ 443.472308][T20523] sock: sock_set_timeout: `syz.0.6415' (pid 20523) tries to set negative timeout [ 444.372419][T20549] syzkaller1: entered promiscuous mode [ 444.386738][T20549] syzkaller1: entered allmulticast mode [ 445.218812][ T5652] IPVS: starting estimator thread 0... [ 445.226951][T20569] IPVS: nq: FWM 3 0x00000003 - no destination available [ 445.344434][T20570] IPVS: using max 28 ests per chain, 67200 per kthread [ 445.766553][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.796498][ T13] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.832249][ T13] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.861449][ T13] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.337411][T20592] netlink: 'syz.4.6442': attribute type 1 has an invalid length. [ 446.445245][T20592] bond8: entered promiscuous mode [ 446.474476][T20592] 8021q: adding VLAN 0 to HW filter on device bond8 [ 446.583297][T20599] 8021q: adding VLAN 0 to HW filter on device bond8 [ 446.605694][T20599] bond8: (slave gre3): The slave device specified does not support setting the MAC address [ 446.639883][T20599] bond8: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 446.676517][T20599] bond8: (slave gre3): making interface the new active one [ 446.696813][T20599] gre3: entered promiscuous mode [ 446.724303][T20599] bond8: (slave gre3): Enslaving as an active interface with an up link [ 447.123742][T20611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6449'. [ 447.535747][T20622] netlink: 'syz.4.6453': attribute type 21 has an invalid length. [ 447.631690][T20622] netlink: 'syz.4.6453': attribute type 21 has an invalid length. [ 448.032180][T20640] openvswitch: : Dropping previously announced user features [ 448.054216][T20640] openvswitch: : Dropping previously announced user features [ 448.548049][T20653] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 449.662569][T20694] gretap1: entered promiscuous mode [ 449.821935][T20701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6484'. [ 450.116906][T20706] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6486'. [ 450.588095][T20720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6492'. [ 450.677166][T20728] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 450.695049][T20728] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 450.871073][T20737] netlink: 'syz.2.6498': attribute type 20 has an invalid length. [ 450.957549][T20741] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.981504][T20737] netlink: 'syz.2.6498': attribute type 20 has an invalid length. [ 451.000987][T20744] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.008288][T20744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 451.037540][T20744] bridge0: entered promiscuous mode [ 451.046100][T20744] bridge0: entered allmulticast mode [ 451.274995][T20754] netlink: 'syz.1.6505': attribute type 4 has an invalid length. [ 451.290669][T20756] netlink: 'syz.3.6507': attribute type 83 has an invalid length. [ 451.316565][T20754] netlink: 'syz.1.6505': attribute type 4 has an invalid length. [ 452.706376][T20822] ip6gre1: entered promiscuous mode [ 452.723801][T20822] ip6gre1: entered allmulticast mode [ 453.460111][T20855] block nbd9: server does not support multiple connections per device. [ 453.522251][T20855] block nbd9: shutting down sockets [ 454.458053][T20900] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6550'. [ 454.889221][T20912] netlink: 'syz.1.6555': attribute type 1 has an invalid length. [ 454.952696][T20912] bond0: entered promiscuous mode [ 454.965284][T20912] bond0: entered allmulticast mode [ 454.975597][T20912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.035090][T20914] erspan1: entered allmulticast mode [ 455.058805][T20914] bond0: (slave erspan1): making interface the new active one [ 455.073504][T20914] erspan1: entered promiscuous mode [ 455.089389][T20914] bond0: (slave erspan1): Enslaving as an active interface with an up link [ 455.431730][T20922] netlink: 'syz.4.6558': attribute type 1 has an invalid length. [ 455.597690][T20922] 8021q: adding VLAN 0 to HW filter on device bond10 [ 455.643065][T20923] bond10: option tlb_dynamic_lb: unable to set because the bond device is up [ 455.928181][T20935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6563'. [ 455.940081][T20935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6563'. [ 458.162481][T21011] netlink: 'syz.1.6590': attribute type 1 has an invalid length. [ 458.339946][T21011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 458.522545][T21026] bond3: (slave gretap0): making interface the new active one [ 458.561563][T21026] bond3: (slave gretap0): Enslaving as an active interface with an up link [ 458.844718][T21041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6596'. [ 459.584417][T21074] tipc: Failed to remove unknown binding: 66,1,1/4278255617:1572345667/1572345669 [ 460.996165][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6627'. [ 461.040969][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6627'. [ 461.050620][T21131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6627'. [ 461.345145][T21149] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6635'. [ 461.601191][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6641'. [ 461.701982][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6641'. [ 462.464913][T21206] sctp: [Deprecated]: syz.0.6660 (pid 21206) Use of int in max_burst socket option deprecated. [ 462.464913][T21206] Use struct sctp_assoc_value instead [ 462.697520][T21218] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6661'. [ 462.872276][T21225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6666'. [ 463.213640][T21243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6674'. [ 463.226850][T21243] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6674'. [ 463.503551][T21255] syz_tun: left promiscuous mode [ 463.626294][T21255] vxlan0: left promiscuous mode [ 463.657365][T21255] ip6gre1: left promiscuous mode [ 463.673015][T21255] xfrm1: left promiscuous mode [ 463.695999][T21255] bond1: left promiscuous mode [ 463.741624][T21255] veth3: left promiscuous mode [ 463.768375][T21255] team1: left promiscuous mode [ 463.780691][T21255] team2: left promiscuous mode [ 463.794847][T21255] bond0: left promiscuous mode [ 463.804475][T21255] erspan1: left promiscuous mode [ 463.901779][T21272] netlink: 'syz.3.6683': attribute type 1 has an invalid length. [ 463.921826][T21272] netlink: 'syz.3.6683': attribute type 1 has an invalid length. [ 463.967664][T21272] netlink: 'syz.3.6683': attribute type 1 has an invalid length. [ 463.991155][T21272] netlink: 'syz.3.6683': attribute type 1 has an invalid length. [ 464.634543][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.668259][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.308280][T21366] __nla_validate_parse: 7 callbacks suppressed [ 467.308299][T21366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6719'. [ 467.408046][T21366] 8021q: adding VLAN 0 to HW filter on device bond11 [ 468.087645][T21386] netlink: 'syz.1.6727': attribute type 1 has an invalid length. [ 468.154292][T21386] 8021q: adding VLAN 0 to HW filter on device bond4 [ 468.711570][T21414] bridge3: entered promiscuous mode [ 468.717127][T21414] bridge3: entered allmulticast mode [ 468.732199][T21418] syzkaller1: entered promiscuous mode [ 468.744723][T21418] syzkaller1: entered allmulticast mode [ 469.217191][T21440] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.6749'. [ 471.171145][T21505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6775'. [ 471.207538][T21503] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6776'. [ 471.241134][T21505] gtp1: entered promiscuous mode [ 471.246287][T21505] gtp1: entered allmulticast mode [ 471.267634][T21503] netlink: 192 bytes leftover after parsing attributes in process `syz.0.6776'. [ 471.303722][T21512] netlink: 'syz.1.6778': attribute type 1 has an invalid length. [ 471.311791][T21512] netlink: 'syz.1.6778': attribute type 4 has an invalid length. [ 471.320007][T21512] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.6778'. [ 472.253710][T21540] tipc: Enabling of bearer rejected, failed to enable media [ 473.386652][T21581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6807'. [ 473.406444][T21581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6807'. [ 473.570632][T21584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.134733][T21603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6817'. [ 474.506047][T21613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6822'. [ 474.813960][T21628] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6829'. [ 475.181069][T21645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6835'. [ 475.710222][T21631] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 476.103568][T21682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6843'. [ 476.237814][T21682] 8021q: adding VLAN 0 to HW filter on device bond5 [ 476.325321][T21687] bond5: (slave veth7): Enslaving as an active interface with an up link [ 476.358171][T21695] netlink: 'syz.4.6846': attribute type 1 has an invalid length. [ 476.376930][T21697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6847'. [ 476.388297][T21695] netlink: 'syz.4.6846': attribute type 4 has an invalid length. [ 476.397072][T21695] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6846'. [ 476.407320][T21689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.416158][T21695] netlink: 'syz.4.6846': attribute type 1 has an invalid length. [ 476.431663][T21689] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 476.449273][T21695] netlink: 'syz.4.6846': attribute type 4 has an invalid length. [ 476.470829][T21695] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.6846'. [ 477.709604][T21760] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 478.282790][T21746] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 478.463737][T21778] syzkaller1: entered promiscuous mode [ 478.478135][T21778] syzkaller1: entered allmulticast mode [ 480.885169][T21831] syzkaller0: entered promiscuous mode [ 480.900518][T21831] syzkaller0: entered allmulticast mode [ 483.024248][T21872] __nla_validate_parse: 3 callbacks suppressed [ 483.024267][T21872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6908'. [ 484.594582][T21930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6926'. [ 484.884175][T21939] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6929'. [ 485.404281][T21965] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6935'. [ 485.666422][T21976] netlink: 'syz.3.6938': attribute type 1 has an invalid length. [ 485.705887][T21976] bond7: entered promiscuous mode [ 485.711469][T21976] bond7: entered allmulticast mode [ 485.717051][T21976] 8021q: adding VLAN 0 to HW filter on device bond7 [ 485.742288][T21976] macvlan5: entered promiscuous mode [ 485.747721][T21976] macvlan5: entered allmulticast mode [ 485.755220][T21976] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 486.179173][T21999] RDS: rds_bind could not find a transport for 0:b3::, load rds_tcp or rds_rdma? [ 486.367593][T22011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6945'. [ 486.427546][T22016] netlink: 'syz.2.6946': attribute type 1 has an invalid length. [ 486.649039][T22016] bond5: entered promiscuous mode [ 486.676175][T22016] 8021q: adding VLAN 0 to HW filter on device bond5 [ 486.854830][T22023] bond5: (slave veth7): making interface the new active one [ 486.886520][T22023] veth7: entered promiscuous mode [ 486.917210][T22023] bond5: (slave veth7): Enslaving as an active interface with an up link [ 486.936141][T22033] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6950'. [ 486.985677][T22041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6949'. [ 487.542829][T22057] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 487.574210][T22065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6955'. [ 487.655095][T22065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6955'. [ 487.787971][T22038] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.119267][T22091] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 489.199127][T22126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6967'. [ 489.354095][T22134] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6969'. [ 489.438499][T22134] netlink: 'syz.2.6969': attribute type 1 has an invalid length. [ 489.648013][T22145] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6973'. [ 489.748996][T22153] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6975'. [ 489.970081][T22157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6976'. [ 490.388990][T22171] netlink: 'syz.4.6978': attribute type 30 has an invalid length. [ 490.403635][T22171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6978'. [ 490.442505][T22171] netlink: 'syz.4.6978': attribute type 30 has an invalid length. [ 490.479058][T22171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6978'. [ 490.516414][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.544127][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.569486][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.616656][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.635230][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.660117][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.686990][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.713363][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.727402][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.738957][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.751361][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.763221][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.788300][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.811762][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.837640][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.850223][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.872793][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.884020][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.900818][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.932675][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.944220][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.955648][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.968157][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.981687][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 490.992716][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.017117][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.028413][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.040100][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.051204][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.071495][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.082907][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.094166][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.106335][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.117574][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.131333][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.142935][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.154451][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.166137][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.177404][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.201378][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.226307][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.249661][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.275199][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.306600][T22174] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 491.589007][T22213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6997'. [ 491.881435][T22220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6999'. [ 492.133744][T22225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7001'. [ 494.098554][T22267] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.106079][T22267] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.449103][T13187] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.457768][T13187] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.469335][T13187] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 495.478937][T13187] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.487879][T13187] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.496650][T13187] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 495.507107][T13187] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.531650][T13187] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.555714][T13187] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 495.587834][T13187] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.608269][T13187] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.625467][T13187] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 495.809091][T22298] __nla_validate_parse: 5 callbacks suppressed [ 495.809110][T22298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7025'. [ 496.017891][T22249] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 496.196653][T22313] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7037'. [ 496.592954][T22331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7035'. [ 496.809627][T22341] netlink: 'syz.2.7040': attribute type 1 has an invalid length. [ 496.857931][T22341] 8021q: adding VLAN 0 to HW filter on device bond6 [ 496.988826][T22348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7043'. [ 497.311743][T22364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7049'. [ 497.348394][T22368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7051'. [ 497.766385][T22387] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7057'. [ 497.905559][ T177] nci: nci_rsp_packet: unknown rsp opcode 0x606 [ 497.936491][T22403] syzkaller1: entered promiscuous mode [ 497.942467][T22403] syzkaller1: entered allmulticast mode [ 498.163193][T22407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7062'. [ 498.205082][T22409] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7063'. [ 498.453784][T22421] netlink: 'syz.2.7070': attribute type 1 has an invalid length. [ 498.482827][T22421] bond7: entered promiscuous mode [ 498.488224][T22421] 8021q: adding VLAN 0 to HW filter on device bond7 [ 498.524761][T22421] bond7: (slave bridge5): making interface the new active one [ 498.532727][T22421] bridge5: entered promiscuous mode [ 498.542595][T22421] bridge5: left promiscuous mode [ 498.621288][T22389] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 498.650855][T22419] netlink: 'syz.0.7067': attribute type 1 has an invalid length. [ 498.669706][T22419] netlink: 476 bytes leftover after parsing attributes in process `syz.0.7067'. [ 499.217772][T22450] netlink: 'syz.2.7074': attribute type 30 has an invalid length. [ 499.227867][T22449] netlink: 'syz.0.7075': attribute type 1 has an invalid length. [ 499.268949][ T60] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.277470][T22450] netlink: 'syz.2.7074': attribute type 30 has an invalid length. [ 499.351707][T22449] bond8: entered promiscuous mode [ 499.365231][T22449] 8021q: adding VLAN 0 to HW filter on device bond8 [ 499.381977][ T60] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.390436][ T60] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 499.482747][T22456] bond8: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 499.555725][T22456] bond8: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 499.598234][T22456] bond8: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 499.728785][T22467] netlink: 'syz.2.7077': attribute type 1 has an invalid length. [ 499.737094][T22467] netlink: 'syz.2.7077': attribute type 4 has an invalid length. [ 499.747394][T22467] netlink: 'syz.2.7077': attribute type 1 has an invalid length. [ 499.756904][T22467] netlink: 'syz.2.7077': attribute type 4 has an invalid length. [ 499.937974][ T60] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 500.416929][T22485] 8021q: adding VLAN 0 to HW filter on device bond8 [ 500.482980][T22485] bond8: (slave macvlan0): making interface the new active one [ 500.515618][T22485] bond8: (slave macvlan0): Enslaving as an active interface with an up link [ 501.096218][T22514] __nla_validate_parse: 7 callbacks suppressed [ 501.096241][T22514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7096'. [ 501.162268][T22511] bond13: entered promiscuous mode [ 501.182891][T22511] 8021q: adding VLAN 0 to HW filter on device bond13 [ 501.202728][T22514] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7096'. [ 501.341121][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.411929][T22520] bond13: (slave bridge4): making interface the new active one [ 501.444186][T22520] bridge4: entered promiscuous mode [ 501.467067][T22520] bond13: (slave bridge4): Enslaving as an active interface with an up link [ 501.545841][T22532] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7101'. [ 501.668445][T22538] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7103'. [ 501.855160][T22545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7106'. [ 502.188180][T22561] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7112'. [ 502.956403][T22593] validate_nla: 2 callbacks suppressed [ 502.956422][T22593] netlink: 'syz.1.7125': attribute type 4 has an invalid length. [ 503.016291][T22595] netlink: 'syz.1.7125': attribute type 4 has an invalid length. [ 503.517709][T22614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7133'. [ 504.164873][ T177] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 504.778352][T22657] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7144'. [ 504.887804][T22660] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7145'. [ 504.915416][T22657] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7144'. [ 506.946449][T22628] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 507.124058][T22708] __nla_validate_parse: 3 callbacks suppressed [ 507.124078][T22708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7158'. [ 507.429787][T22719] netlink: 'syz.0.7163': attribute type 13 has an invalid length. [ 507.460674][T22719] gretap0: refused to change device tx_queue_len [ 507.491583][T22722] GUP no longer grows the stack in syz.0.7163 (22722): 200000003000-20000000a000 (200000001000) [ 507.500111][T22719] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 507.533888][T22722] CPU: 1 UID: 0 PID: 22722 Comm: syz.0.7163 Not tainted syzkaller #0 PREEMPT(full) [ 507.533932][T22722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 507.533963][T22722] Call Trace: [ 507.533975][T22722] [ 507.533984][T22722] dump_stack_lvl+0xe8/0x150 [ 507.534159][T22722] __get_user_pages+0x2378/0x2730 [ 507.534238][T22722] ? __gup_longterm_locked+0xc4e/0x1630 [ 507.534265][T22722] ? down_read_killable+0x1bb/0x340 [ 507.534388][T22722] __gup_longterm_locked+0xdcf/0x1630 [ 507.534419][T22722] ? lock_acquire+0x106/0x350 [ 507.534483][T22722] gup_fast_fallback+0x1d84/0x20d0 [ 507.534544][T22722] ? __pfx_gup_fast_fallback+0x10/0x10 [ 507.534573][T22722] ? is_valid_gup_args+0x11f/0x200 [ 507.534601][T22722] ? get_user_pages_fast+0x4d/0xb0 [ 507.534629][T22722] __iov_iter_get_pages_alloc+0x370/0xa10 [ 507.534748][T22722] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 507.534799][T22722] iov_iter_get_pages2+0x5e/0xa0 [ 507.534828][T22722] __se_sys_vmsplice+0x7c7/0x1620 [ 507.534877][T22722] ? tomoyo_path_number_perm+0x219/0x630 [ 507.534975][T22722] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 507.535006][T22722] ? do_vfs_ioctl+0x1166/0x1530 [ 507.535040][T22722] ? __lock_acquire+0x6b5/0x2cf0 [ 507.535066][T22722] ? cgroup1_freezing+0x20/0x350 [ 507.535147][T22722] ? kfree+0x4d/0x640 [ 507.535182][T22722] ? __pfx_kcov_ioctl+0x10/0x10 [ 507.535220][T22722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.535257][T22722] do_syscall_64+0x174/0x580 [ 507.535299][T22722] ? trace_irq_disable+0x3b/0x140 [ 507.535337][T22722] ? clear_bhb_loop+0x40/0x90 [ 507.535363][T22722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.535384][T22722] RIP: 0033:0x7f8041f9ce59 [ 507.535404][T22722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.535422][T22722] RSP: 002b:00007f8042eeb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 507.535443][T22722] RAX: ffffffffffffffda RBX: 00007f8042216090 RCX: 00007f8041f9ce59 [ 507.535458][T22722] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 507.535472][T22722] RBP: 00007f8042032d6f R08: 0000000000000000 R09: 0000000000000000 [ 507.535485][T22722] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 507.535497][T22722] R13: 00007f8042216128 R14: 00007f8042216090 R15: 00007ffc4aab62d8 [ 507.535531][T22722] [ 507.941298][T22727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7166'. [ 508.166960][T22731] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.7169'. [ 508.675734][T22745] netlink: 'syz.2.7175': attribute type 4 has an invalid length. [ 508.720247][T22745] netlink: 'syz.2.7175': attribute type 4 has an invalid length. [ 509.240234][T22757] netlink: 'syz.2.7179': attribute type 13 has an invalid length. [ 509.255498][T22755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7180'. [ 509.702159][T22773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7186'. [ 509.800558][T22773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7186'. [ 509.892401][T22756] infiniband syz1: set down [ 509.899797][T22756] infiniband syz1: added bond0 [ 509.933003][T22756] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 509.949068][T22756] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 509.967210][T22756] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 510.039221][T22756] RDS/IB: syz1: added [ 510.052632][T22756] smc: adding ib device syz1 with port count 1 [ 510.067888][T22756] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 510.180189][T22784] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.7190'. [ 512.858472][T22838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7211'. [ 513.095173][T22843] netlink: 'syz.0.7213': attribute type 1 has an invalid length. [ 513.187112][T22843] 8021q: adding VLAN 0 to HW filter on device bond9 [ 513.301661][T22845] bond9: (slave veth15): Enslaving as an active interface with a down link [ 513.354562][T22843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.380992][T22843] bond9: (slave batadv0): making interface the new active one [ 513.402676][T22843] batadv0: entered promiscuous mode [ 513.431820][T22843] bond9: (slave batadv0): Enslaving as an active interface with an up link [ 513.722608][T22856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7219'. [ 513.905861][T22866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7222'. [ 514.082522][T22876] netlink: 'syz.2.7226': attribute type 1 has an invalid length. [ 514.257618][T22876] gretap4: entered allmulticast mode [ 514.307840][T22876] bond8: (slave gretap4): making interface the new active one [ 514.341035][T22876] bond8: (slave gretap4): Enslaving as an active interface with an up link [ 514.523052][T22894] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 515.693245][T22927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7242'. [ 515.726817][T22927] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7242'. [ 516.046719][T22946] syzkaller1: entered promiscuous mode [ 516.074923][T22946] syzkaller1: entered allmulticast mode [ 516.199150][T22952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7247'. [ 516.276495][T22952] 8021q: adding VLAN 0 to HW filter on device bond10 [ 516.333708][T22957] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 516.592265][T22972] netlink: 'syz.0.7251': attribute type 2 has an invalid length. [ 516.939398][T22989] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7258'. [ 517.485508][T23026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7272'. [ 518.349803][T23057] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7281'. [ 518.396816][T23058] syzkaller1: entered promiscuous mode [ 518.428433][T23058] syzkaller1: entered allmulticast mode [ 518.513518][T23063] netlink: 'syz.4.7283': attribute type 1 has an invalid length. [ 518.544280][T23057] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7281'. [ 518.565615][T23065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7283'. [ 518.652256][T23065] 8021q: adding VLAN 0 to HW filter on device bond15 [ 518.900726][T23087] syzkaller1: entered promiscuous mode [ 518.907363][T23087] syzkaller1: entered allmulticast mode [ 519.202866][T23100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7296'. [ 519.215376][T23100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7296'. [ 519.287877][T23102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7297'. [ 519.300125][T23102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7297'. [ 519.521305][T23072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.767121][T23115] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7302'. [ 520.134290][T23132] syzkaller1: entered promiscuous mode [ 520.153834][T23132] syzkaller1: entered allmulticast mode [ 520.175091][T23127] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 520.407559][T23137] bond9 (unregistering): Released all slaves [ 520.510432][T23145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.560160][T23145] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.696219][T23152] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7316'. [ 521.088850][T23163] netlink: 'syz.2.7318': attribute type 4 has an invalid length. [ 521.140819][T23163] netlink: 'syz.2.7318': attribute type 4 has an invalid length. [ 521.286833][T23165] syzkaller0: entered promiscuous mode [ 522.180011][T23200] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 522.313676][T23204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7336'. [ 523.025237][T23224] netlink: 'syz.3.7344': attribute type 1 has an invalid length. [ 523.150896][T23224] 8021q: adding VLAN 0 to HW filter on device bond9 [ 523.216695][T23229] vlan2: entered promiscuous mode [ 523.236919][T23229] syz_tun: entered promiscuous mode [ 523.388034][T23232] bond9: (slave veth13): Enslaving as an active interface with a down link [ 523.474111][T23234] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 523.501890][T23234] bond9: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 523.654913][T23240] bond16: entered promiscuous mode [ 523.727677][T23246] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7350'. [ 523.816111][T23246] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7350'. [ 524.110159][ T48] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 524.335008][T23272] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7359'. [ 524.498952][T23275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7360'. [ 524.536264][ T177] batadv0: left promiscuous mode [ 524.549282][T23275] netlink: 'syz.3.7360': attribute type 7 has an invalid length. [ 524.582736][T23275] netlink: 'syz.3.7360': attribute type 8 has an invalid length. [ 524.601020][T23275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7360'. [ 525.193058][T23298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7368'. [ 525.216839][T23298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7368'. [ 525.772219][T23324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7378'. [ 526.140187][T23329] syzkaller1: entered promiscuous mode [ 526.153942][T23329] syzkaller1: entered allmulticast mode [ 526.573676][T23340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7385'. [ 526.683632][T23340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7385'. [ 527.354738][T23361] syz_tun: entered allmulticast mode [ 527.369267][T23361] pimreg: entered allmulticast mode [ 527.486641][T23360] syz_tun: left allmulticast mode [ 527.626364][T23373] netlink: 'syz.1.7399': attribute type 1 has an invalid length. [ 527.673391][T23373] 8021q: adding VLAN 0 to HW filter on device bond6 [ 527.681663][T23376] netlink: 'syz.4.7400': attribute type 1 has an invalid length. [ 527.714174][T23373] 8021q: adding VLAN 0 to HW filter on device bond6 [ 527.731698][T23373] bond6: (slave gre4): The slave device specified does not support setting the MAC address [ 527.754543][T23373] bond6: (slave gre4): Error -95 calling set_mac_address [ 527.827807][T23376] 8021q: adding VLAN 0 to HW filter on device bond17 [ 527.855020][T23379] vlan4: entered allmulticast mode [ 527.872987][T23379] bond17: entered allmulticast mode [ 527.916246][T23378] gretap3: entered promiscuous mode [ 527.925865][T23378] bond6: (slave gretap3): making interface the new active one [ 527.934132][T23378] bond6: (slave gretap3): Enslaving as an active interface with an up link [ 527.975834][T23381] bond17: (slave geneve3): making interface the new active one [ 528.006833][T23381] geneve3: entered allmulticast mode [ 528.033400][T23381] bond17: (slave geneve3): Enslaving as an active interface with an up link [ 529.243609][T23413] netlink: 'syz.1.7409': attribute type 4 has an invalid length. [ 530.792228][T23457] netlink: 'syz.0.7423': attribute type 1 has an invalid length. [ 530.862384][T23457] bond11: (slave veth19): Enslaving as an active interface with a down link [ 530.908606][T23457] bond11: (slave dummy0): making interface the new active one [ 530.920577][T23457] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 530.946179][T23457] netlink: 'syz.0.7423': attribute type 10 has an invalid length. [ 530.964463][T23457] __nla_validate_parse: 3 callbacks suppressed [ 530.964481][T23457] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7423'. [ 530.982131][T23457] dummy0: entered promiscuous mode [ 530.991802][T23457] bond11: (slave dummy0): Releasing active interface [ 533.046379][T23530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7441'. [ 533.089598][T23530] 8021q: adding VLAN 0 to HW filter on device bond18 [ 533.118473][T23530] ipvlan3: entered allmulticast mode [ 533.124060][T23530] bond18: entered allmulticast mode [ 533.141192][T23530] bond18: (slave ipip0): refused to change device type [ 533.748561][T23451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 533.871460][T23551] netlink: 'syz.2.7448': attribute type 11 has an invalid length. [ 533.939674][T23551] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.004806][T23551] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 534.015348][T23551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 534.033717][T23551] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 534.060248][T23551] veth1_vlan: left promiscuous mode [ 534.067147][T23551] veth0_vlan: left promiscuous mode [ 534.073884][T23551] veth0_vlan: entered promiscuous mode [ 534.084406][T23551] veth1_vlan: entered promiscuous mode [ 534.095521][T23551] veth1_macvtap: left promiscuous mode [ 534.104337][T23551] veth0_macvtap: left promiscuous mode [ 534.113264][T23551] veth0_macvtap: entered promiscuous mode [ 534.120589][T23551] veth1_macvtap: entered promiscuous mode [ 534.132025][T23551] bridge0: port 3(vlan3) entered blocking state [ 534.138522][T23551] bridge0: port 3(vlan3) entered listening state [ 534.154499][T23551] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 534.294603][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.301818][ T60] bridge0: port 1(bridge_slave_0) entered listening state [ 534.329051][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.336268][ T60] bridge0: port 2(bridge_slave_1) entered listening state [ 534.446081][T23555] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 534.460710][T23555] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 534.477977][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.487841][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.505730][T23565] scsi_nl_rcv_msg: discarding partial skb [ 534.585203][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.604593][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.822618][T23580] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.7460'. [ 537.360837][T23666] syzkaller1: entered promiscuous mode [ 537.367913][T23666] syzkaller1: entered allmulticast mode [ 537.995658][T23682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7497'. [ 538.179638][T23687] syzkaller1: entered promiscuous mode [ 538.193433][T23687] syzkaller1: entered allmulticast mode [ 538.476622][T23701] netlink: 'syz.4.7505': attribute type 1 has an invalid length. [ 538.517872][T23701] 8021q: adding VLAN 0 to HW filter on device bond19 [ 538.569336][T23701] bond19: (slave dummy0): making interface the new active one [ 538.602841][T23701] bond19: (slave dummy0): Enslaving as an active interface with an up link [ 538.698114][T23708] netlink: 'syz.2.7509': attribute type 13 has an invalid length. [ 539.081982][T23725] netlink: 'syz.4.7515': attribute type 4 has an invalid length. [ 539.136658][T23732] netlink: 'syz.4.7515': attribute type 4 has an invalid length. [ 539.454335][T23748] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.005505][T23804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7536'. [ 541.028870][T23804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7536'. [ 542.103717][T23841] tipc: Enabled bearer , priority 0 [ 542.468595][T23850] bond9: entered allmulticast mode [ 542.547106][T23853] bond20: entered allmulticast mode [ 542.586974][T23854] macvlan2: entered promiscuous mode [ 542.592857][T23854] macvlan2: entered allmulticast mode [ 542.599395][T23854] bond9: (slave macvlan2): Opening slave failed [ 543.502148][T23870] IPVS: dh: FWM 3 0x00000003 - no destination available [ 544.662629][T23905] netlink: 'syz.4.7573': attribute type 11 has an invalid length. [ 544.766567][T23905] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 544.951616][T23909] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 544.969706][T23909] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 545.825573][T23932] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 546.060873][T23945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7585'. [ 546.079579][T23945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7585'. [ 546.416974][T23960] netlink: 27 bytes leftover after parsing attributes in process `syz.2.7592'. [ 546.596885][T23935] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 546.686472][T23975] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 546.748620][T23977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7598'. [ 547.236593][T23986] netlink: 'syz.2.7602': attribute type 1 has an invalid length. [ 547.338053][T23986] bond10: (slave veth19): Enslaving as an active interface with a down link [ 547.352211][T23982] netlink: set zone limit has 4 unknown bytes [ 547.357736][T23989] netlink: 'syz.4.7603': attribute type 4 has an invalid length. [ 547.435714][T23995] netlink: 'syz.4.7603': attribute type 4 has an invalid length. [ 547.445196][T23991] bond10: (slave veth21): Enslaving as an active interface with a down link [ 547.619210][T24002] netlink: 1484 bytes leftover after parsing attributes in process `syz.4.7608'. [ 547.629382][T24002] netlink: 1484 bytes leftover after parsing attributes in process `syz.4.7608'. [ 548.973491][T24050] tipc: Enabled bearer , priority 0 [ 548.994710][T24050] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 549.017145][T24050] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 549.276677][T24061] netlink: 'syz.3.7632': attribute type 2 has an invalid length. [ 549.301464][T24061] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7632'. [ 549.911249][T24082] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7638'. [ 549.934971][T24069] syzkaller1: entered promiscuous mode [ 549.950376][T24069] syzkaller1: entered allmulticast mode [ 551.395030][T24124] tipc: Enabling of bearer rejected, already enabled [ 552.287887][T24152] netlink: 'syz.4.7663': attribute type 1 has an invalid length. [ 552.397698][T24155] netlink: 'syz.4.7663': attribute type 10 has an invalid length. [ 552.420128][T24155] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7663'. [ 552.452043][T24152] 8021q: adding VLAN 0 to HW filter on device bond21 [ 552.473027][T24154] bond19: (slave dummy0): Releasing active interface [ 552.500555][T24154] bond21: (slave dummy0): Enslaving as a backup interface with an up link [ 552.524437][T24155] dummy0: entered promiscuous mode [ 552.549153][T24155] bond21: (slave dummy0): Releasing backup interface [ 553.303249][T24171] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7670'. [ 553.570113][T24176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7672'. [ 553.593440][T24176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7672'. [ 554.684961][T24205] netlink: 'syz.0.7684': attribute type 1 has an invalid length. [ 554.737499][T24205] 8021q: adding VLAN 0 to HW filter on device bond12 [ 554.783172][T24205] bond12: (slave veth21): Enslaving as a backup interface with a down link [ 554.802799][T24205] dummy0: left promiscuous mode [ 554.816690][T24205] bond12: (slave dummy0): Enslaving as a backup interface with an up link [ 554.839640][ T48] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 554.858059][T24205] netlink: 'syz.0.7684': attribute type 10 has an invalid length. [ 554.867771][T24205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7684'. [ 554.877255][T24205] dummy0: entered promiscuous mode [ 554.888208][T24205] bond12: (slave dummy0): Removing an active aggregator [ 554.900391][T24205] bond12: (slave dummy0): Releasing backup interface [ 555.007460][T24212] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7687'. [ 555.455101][T24235] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1366025597/1366025599 [ 555.535903][T24237] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1366025597/1366025599 [ 555.554450][T24237] tipc: Failed to remove unknown binding: 66,1,1/2886997007:1366025597/1366025599 [ 556.355526][T24245] bond7: entered promiscuous mode [ 557.327691][T24270] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.128651][T24308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7720'. [ 558.141868][T24270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.236770][T24270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.857258][T24270] batman_adv: batadv0: Interface deactivated: macvtap1 [ 559.317643][T24312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7720'. [ 559.349254][ T177] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.376267][ T177] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.409263][ T177] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.454595][ T177] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.486972][ T177] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.523410][ T177] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.552497][ T177] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 559.584995][ T177] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.967588][T24344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7729'. [ 559.985507][T24344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7729'. [ 560.207293][T24354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7732'. [ 560.722564][T24384] kÿ: entered promiscuous mode [ 560.732008][T24385] netlink: 'syz.4.7737': attribute type 10 has an invalid length. [ 560.752824][T24385] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7737'. [ 560.771483][T24385] team0: Port device geneve1 added [ 561.274522][T24399] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 561.798376][T24410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7750'. [ 561.897928][T24416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7750'. [ 561.924134][T24415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7752'. [ 562.782468][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.816178][T24454] syz_tun: entered allmulticast mode [ 562.859580][ T4949] Bluetooth: hci4: command 0x0406 tx timeout [ 562.903517][T24458] netlink: zone id is out of range [ 562.908894][T24458] netlink: zone id is out of range [ 562.914387][T24458] netlink: zone id is out of range [ 562.919981][T24458] netlink: zone id is out of range [ 562.925230][T24458] netlink: zone id is out of range [ 562.931194][T24458] netlink: zone id is out of range [ 562.936503][T24458] netlink: zone id is out of range [ 562.941992][T24458] netlink: zone id is out of range [ 562.947359][T24458] netlink: zone id is out of range [ 563.083467][T24463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7772'. [ 563.244857][T24474] lo: Caught tx_queue_len zero misconfig [ 563.269912][T24474] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.7776'. [ 563.361256][T24478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7778'. [ 563.374182][T24479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7777'. [ 563.385527][T24479] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7777'. [ 563.659603][T24492] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7784'. [ 563.817305][T24497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7787'. [ 563.971990][T24505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.035363][T24505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.098457][T24505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.163211][T24511] syzkaller1: entered promiscuous mode [ 564.169209][T24511] syzkaller1: entered allmulticast mode [ 564.515821][T24530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7800'. [ 564.701504][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 564.710827][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 564.718052][ C1] bridge0: port 3(vlan3) entered learning state [ 564.944139][T24556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7806'. [ 565.520397][T24560] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7807'. [ 565.521446][T24579] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7811'. [ 565.542338][T24560] l2tp_ppp: sess 2/0: no socket in recv [ 565.871987][T13187] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xd3 [ 566.193233][T24612] bond13: option ad_user_port_key: invalid value (65535) [ 566.216180][T24612] bond13: option ad_user_port_key: allowed values 0 - 1023 [ 566.245327][T24612] bond13 (unregistering): Released all slaves [ 566.622817][T24589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 566.817391][T24630] netlink: 'syz.3.7829': attribute type 1 has an invalid length. [ 566.855243][T24631] IPVS: Scheduler module ip_vs_sip not found [ 571.473731][T24739] __nla_validate_parse: 6 callbacks suppressed [ 571.473750][T24739] netlink: 180 bytes leftover after parsing attributes in process `syz.0.7868'. [ 571.503558][T24749] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7872'. [ 571.894974][T24776] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7881'. [ 571.987372][T13181] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 572.256406][T24789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7885'. [ 572.537213][T24802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7889'. [ 572.547117][T24802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7889'. [ 572.622608][T24808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7888'. [ 573.319116][T24838] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 573.328359][T24838] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 573.337684][T24838] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 574.015061][T24851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7904'. [ 574.835556][T24770] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 575.016290][T24878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7910'. [ 575.532351][T24899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7915'. [ 576.262675][T24924] netlink: 'syz.3.7923': attribute type 21 has an invalid length. [ 576.305820][T19870] hsr0: entered promiscuous mode [ 576.319325][T24921] Cannot find set identified by id 0 to match [ 577.347820][T24969] __nla_validate_parse: 3 callbacks suppressed [ 577.347839][T24969] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7942'. [ 577.413980][T24972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7943'. [ 577.607429][T24976] syzkaller1: entered promiscuous mode [ 577.617714][T24976] syzkaller1: entered allmulticast mode [ 577.883173][T24984] netlink: 'syz.2.7949': attribute type 4 has an invalid length. [ 577.908080][T24984] netlink: 'syz.2.7949': attribute type 4 has an invalid length. [ 578.009620][T24984] bridge0: port 3(vlan3) entered disabled state [ 578.016142][T24984] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.023402][T24984] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.232326][T24986] syzkaller0: entered promiscuous mode [ 578.237937][T24986] syzkaller0: entered allmulticast mode [ 578.246545][T13181] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.255710][T13181] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.275447][T13181] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 578.290297][T13181] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.378676][T25014] xt_hashlimit: size too large, truncated to 1048576 [ 579.645043][T25020] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7959'. [ 580.317454][T13181] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.325975][T13181] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.334600][T13181] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 580.343123][T13181] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.425343][T25030] tipc: Enabling of bearer rejected, already enabled [ 580.437308][T25032] tipc: Resetting bearer [ 580.652688][T25040] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 580.668796][T25040] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 580.767857][T25045] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.7968'. [ 580.867600][T25052] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7971'. [ 580.966212][T25052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7971'. [ 581.166774][T25066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7975'. [ 581.181754][T25067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7974'. [ 581.644447][T25089] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7984'. [ 581.690599][T25089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7984'. [ 581.938659][T25102] netlink: 'syz.0.7989': attribute type 1 has an invalid length. [ 581.998396][T25102] 8021q: adding VLAN 0 to HW filter on device bond13 [ 582.013775][T25108] bond13: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 582.055432][T25102] macvlan6: entered promiscuous mode [ 582.064123][T25102] macvlan6: entered allmulticast mode [ 582.070921][T25102] bond13: entered promiscuous mode [ 582.082155][T25102] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 582.090937][T25102] bond13: (slave macvlan6): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 582.107609][T25102] bond13: left promiscuous mode [ 582.296830][T25116] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.549153][T25132] __nla_validate_parse: 1 callbacks suppressed [ 582.549166][T25132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8002'. [ 582.567164][T25132] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8002'. [ 582.623037][T25134] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8004'. [ 582.980980][T25149] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8009'. [ 584.508171][T25197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8022'. [ 584.757762][T25215] syzkaller0: entered promiscuous mode [ 584.763612][T25215] syzkaller0: entered allmulticast mode [ 585.049307][T25227] netlink: 'syz.0.8030': attribute type 10 has an invalid length. [ 585.196822][T25230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8031'. [ 585.309714][T25230] 8021q: adding VLAN 0 to HW filter on device bond15 [ 585.329822][T25230] bond15 (unregistering): Released all slaves [ 586.407351][T25253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8039'. [ 587.555001][T25199] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 587.945776][T25269] netlink: 'syz.1.8045': attribute type 1 has an invalid length. [ 588.023859][T25269] 8021q: adding VLAN 0 to HW filter on device bond8 [ 588.448137][T25280] vlan2: entered allmulticast mode [ 588.453803][T25280] bond8: entered allmulticast mode [ 588.471221][T25269] bond8: (slave geneve2): making interface the new active one [ 588.478737][T25269] geneve2: entered allmulticast mode [ 588.486077][T25269] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 588.546875][ T177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.558880][ T177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.570604][ T177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.579790][ T177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 588.639600][T25294] netlink: 'syz.4.8051': attribute type 1 has an invalid length. [ 588.701156][T25294] 8021q: adding VLAN 0 to HW filter on device bond22 [ 588.720568][T25298] vlan5: entered allmulticast mode [ 588.725796][T25298] bond22: entered allmulticast mode [ 588.809346][T25294] bond22: (slave geneve4): making interface the new active one [ 588.836085][T25294] geneve4: entered allmulticast mode [ 588.854477][T25294] bond22: (slave geneve4): Enslaving as an active interface with an up link [ 588.884956][T25307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8056'. [ 588.894736][T25306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8055'. [ 588.980948][T25306] bond9: entered promiscuous mode [ 588.986570][T25306] 8021q: adding VLAN 0 to HW filter on device bond9 [ 589.085240][T25306] 8021q: adding VLAN 0 to HW filter on device bond9 [ 589.095652][T25306] bond9: (slave sit2): The slave device specified does not support setting the MAC address [ 589.107694][T25306] bond9: (slave sit2): Error -95 calling set_mac_address [ 589.138061][T25317] netlink: 'syz.0.8060': attribute type 3 has an invalid length. [ 589.146372][T25317] netlink: 'syz.0.8060': attribute type 3 has an invalid length. [ 589.223333][T25322] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 589.232128][T25322] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 591.537462][T25408] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8092'. [ 591.706474][T25418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8092'. [ 592.158294][T25439] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8102'. [ 592.687333][T25458] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8107'. [ 592.991560][T25474] netlink: 'syz.3.8109': attribute type 1 has an invalid length. [ 593.067830][T25474] 8021q: adding VLAN 0 to HW filter on device bond10 [ 593.085477][T25478] bond10: entered allmulticast mode [ 593.163028][T25474] bond10: (slave ip6gretap1): making interface the new active one [ 593.181664][T25474] ip6gretap1: entered allmulticast mode [ 593.196013][T25474] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 593.218763][T25484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8112'. [ 593.258916][T25484] xt_TCPMSS: Only works on TCP SYN packets [ 593.414591][T25487] IPVS: persistence engine module ip_vs_pe_À not found [ 593.790249][T25504] netlink: 'syz.2.8119': attribute type 4 has an invalid length. [ 593.874964][T25512] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.8123'. [ 594.030858][T25523] xt_hashlimit: size too large, truncated to 1048576 [ 594.596771][T25537] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.775316][T25537] veth1_vlan: left promiscuous mode [ 594.795414][T25537] veth0_vlan: left promiscuous mode [ 594.807978][T25537] veth0_vlan: entered promiscuous mode [ 594.823886][T25537] veth1_vlan: entered promiscuous mode [ 594.845077][T25537] veth1_macvtap: left promiscuous mode [ 594.873203][T25537] veth0_macvtap: left promiscuous mode [ 594.894482][T25537] veth0_macvtap: entered promiscuous mode [ 594.905407][T25537] veth1_macvtap: entered promiscuous mode [ 594.943366][T25537] bridge0: port 3(vlan3) entered blocking state [ 594.949862][T25537] bridge0: port 3(vlan3) entered listening state [ 594.962054][T25537] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 594.968928][T25537] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 594.978509][T25537] net_ratelimit: 45 callbacks suppressed [ 594.978526][T25537] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 595.025412][ T163] bridge0: port 1(bridge_slave_0) entered blocking state [ 595.032638][ T163] bridge0: port 1(bridge_slave_0) entered listening state [ 595.081538][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.088806][ T163] bridge0: port 2(bridge_slave_1) entered listening state [ 595.282596][T25540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 595.316584][T13181] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.357542][T13181] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.385904][T13181] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.422970][T13181] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.442534][T25580] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8139'. [ 595.728766][T25604] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8145'. [ 595.806706][T25598] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 596.646147][T25635] netlink: 'syz.1.8151': attribute type 1 has an invalid length. [ 596.770090][T25635] 8021q: adding VLAN 0 to HW filter on device bond10 [ 596.807803][T25637] bond10: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 596.834638][T25637] bond10: entered allmulticast mode [ 596.901338][T25638] bond10: (slave ip6gretap2): Enslaving as an active interface with an up link [ 597.081208][T25649] netlink: 'syz.1.8153': attribute type 1 has an invalid length. [ 597.140828][T25649] 8021q: adding VLAN 0 to HW filter on device bond11 [ 597.222523][T25649] bond11: (slave geneve3): making interface the new active one [ 597.234659][T25649] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 597.539170][T25669] netlink: 'syz.1.8158': attribute type 11 has an invalid length. [ 597.695013][T25678] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8160'. [ 597.778933][T25682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8161'. [ 598.636532][T25593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 599.034294][T25716] netlink: 'syz.4.8173': attribute type 10 has an invalid length. [ 599.064156][T25716] team0: Port device veth1_to_hsr added [ 599.194116][T25724] netlink: 272 bytes leftover after parsing attributes in process `syz.4.8177'. [ 600.298458][T25737] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 600.682936][T25761] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 600.690242][T25761] IPv6: NLM_F_CREATE should be set when creating new route [ 600.802418][T25761] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.962685][T25761] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 601.275636][T25761] tipc: Resetting bearer [ 601.722113][T25765] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 601.775261][ T163] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.800932][ T163] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 256 - 0 [ 601.825468][ T163] netdevsim netdevsim4 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 601.864768][ T163] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.891430][ T163] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 256 - 0 [ 601.917602][ T163] netdevsim netdevsim4 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 601.927325][T25774] netlink: 200 bytes leftover after parsing attributes in process `syz.2.8194'. [ 601.944809][ T163] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 601.965849][ T163] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 256 - 0 [ 601.985551][ T163] netdevsim netdevsim4 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 602.006318][ T163] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 602.023804][ T163] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 256 - 0 [ 602.039674][ T163] netdevsim netdevsim4 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 603.027194][T25809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8206'. [ 603.656232][T25824] xt_CT: You must specify a L4 protocol and not use inversions on it [ 603.736245][T25827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8214'. [ 603.831302][T25829] syzkaller0: entered promiscuous mode [ 603.849926][T25829] syzkaller0: entered allmulticast mode [ 604.121698][T25838] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8219'. [ 604.589730][T25863] netlink: 'syz.4.8225': attribute type 1 has an invalid length. [ 604.666085][T25863] 8021q: adding VLAN 0 to HW filter on device bond23 [ 604.686225][T25866] : entered promiscuous mode [ 606.783763][T25906] netlink: 'syz.0.8240': attribute type 11 has an invalid length. [ 607.373368][T25938] IPv6: Can't replace route, no match found [ 607.393087][T25938] IPv6: Can't replace route, no match found [ 607.455793][T25943] tipc: Failed to remove unknown binding: 66,0,0/5:3334705171/3334705173 [ 607.468945][T25943] tipc: Failed to remove unknown binding: 66,0,0/5:3334705171/3334705172 [ 607.481176][T25943] tipc: Failed to remove unknown binding: 66,0,0/5:3334705171/3334705173 [ 607.490580][T25943] tipc: Failed to remove unknown binding: 66,0,0/5:3334705171/3334705172 [ 607.538455][T25947] ip6gre1: entered promiscuous mode [ 607.548324][T25947] ip6gre1: entered allmulticast mode [ 607.703698][T25957] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8262'. [ 607.793867][T25957] bond11: entered promiscuous mode [ 607.808011][T25957] 8021q: adding VLAN 0 to HW filter on device bond11 [ 607.860230][T25961] bridge7: entered promiscuous mode [ 607.866351][T25961] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 607.938011][T25957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8262'. [ 607.998326][T25957] bond11 (unregistering): (slave bridge7): Releasing backup interface [ 608.023825][T25973] atomic_op ffff888024c17998 conn xmit_atomic 0000000000000000 [ 608.049990][T25957] bridge7: left promiscuous mode [ 608.071048][T25957] bond11 (unregistering): Released all slaves [ 608.143633][T25976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8270'. [ 608.230183][T25976] bridge10: port 1(vlan7) entered blocking state [ 608.247548][T25976] bridge10: port 1(vlan7) entered disabled state [ 608.269916][T25976] vlan7: entered allmulticast mode [ 608.284230][T25976] bridge10: entered allmulticast mode [ 608.351328][T25976] vlan7: left allmulticast mode [ 608.358015][T25976] bridge10: left allmulticast mode [ 608.957070][T25996] netlink: 'syz.2.8277': attribute type 1 has an invalid length. [ 609.064229][T25996] 8021q: adding VLAN 0 to HW filter on device bond12 [ 609.093564][T25996] bond11: (slave bond12): making interface the new active one [ 609.113483][T25996] bond11: (slave bond12): Enslaving as an active interface with an up link [ 609.151908][T26007] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8277'. [ 609.184901][T26007] 8021q: adding VLAN 0 to HW filter on device bond11 [ 609.204923][T26006] bond11: (slave gretap5): Enslaving as a backup interface with an up link [ 609.217406][T26009] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 609.509679][T26024] block nbd9: server does not support multiple connections per device. [ 609.538570][T26024] block nbd9: shutting down sockets [ 610.244697][T26031] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 610.252123][T26031] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 610.282095][T26031] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 610.298353][T26031] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 610.357014][T26031] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 610.378482][T26031] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 610.399168][T26031] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 610.406467][T26031] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 610.460386][T26031] tipc: Resetting bearer [ 611.271259][T26083] syzkaller0: entered promiscuous mode [ 611.283635][T26083] syzkaller0: entered allmulticast mode [ 611.445741][T26090] tipc: Resetting bearer [ 611.514599][T26092] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8309'. [ 611.536387][T26092] openvswitch: netlink: Message has 16 unknown bytes. [ 611.584210][T26094] syzkaller0: entered promiscuous mode [ 611.599316][T26094] syzkaller0: entered allmulticast mode [ 611.713449][T26081] netlink: 45 bytes leftover after parsing attributes in process `syz.1.8303'. [ 611.964592][T26105] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 612.275238][T26120] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8317'. [ 612.792703][T26126] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.913199][T26126] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.027563][T26126] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.106434][T26126] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.270469][T26159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8332'. [ 613.283330][ T177] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.316137][T26157] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8331'. [ 613.326095][T26157] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8331'. [ 613.337456][ T177] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.397038][T13187] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.439033][T13187] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.516846][T26165] syzkaller1: entered promiscuous mode [ 613.553856][T26165] syzkaller1: entered allmulticast mode [ 613.740470][T26180] syzkaller0: entered promiscuous mode [ 613.762198][T26180] syzkaller0: entered allmulticast mode [ 614.336879][T26204] gretap0: left promiscuous mode [ 614.357430][T26204] erspan0: left promiscuous mode [ 614.435496][T26204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.467587][T26204] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.488264][T26204] dummy0: left promiscuous mode [ 614.513802][T26204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.583501][T26204] veth1_to_batadv: left promiscuous mode [ 614.597788][T26204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.653163][T26204] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 614.749253][T26209] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.828738][T13187] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.835964][T13187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.881856][T13187] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.889089][T13187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.957680][T26226] syzkaller0: entered promiscuous mode [ 614.971121][T26226] syzkaller0: entered allmulticast mode [ 614.981155][T19866] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 615.120522][T26234] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8356'. [ 615.135191][T26234] netlink: 'syz.4.8356': attribute type 10 has an invalid length. [ 615.238057][T26238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8358'. [ 615.251127][T26238] netlink: 'syz.4.8358': attribute type 7 has an invalid length. [ 615.258922][T26238] netlink: 'syz.4.8358': attribute type 8 has an invalid length. [ 615.270490][T13187] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 615.300152][T26238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8358'. [ 615.319979][T26238] ip6gretap0: entered promiscuous mode [ 615.326910][T26238] syz_tun: entered promiscuous mode [ 615.335557][T26238] erspan0: entered promiscuous mode [ 615.342543][T26238] erspan0: left promiscuous mode [ 615.351746][T26238] ip6gretap0: left promiscuous mode [ 615.370373][T26238] syz_tun: left promiscuous mode [ 615.397068][T26241] syzkaller0: entered promiscuous mode [ 615.403147][T26241] syzkaller0: entered allmulticast mode [ 615.584149][T26253] lo speed is unknown, defaulting to 1000 [ 615.596115][T26253] lo speed is unknown, defaulting to 1000 [ 615.605148][T26253] lo speed is unknown, defaulting to 1000 [ 615.611309][T19866] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 615.770938][T26259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8366'. [ 615.887530][T26259] bond15: entered promiscuous mode [ 615.898401][T26259] bond15: entered allmulticast mode [ 615.986155][T26268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8368'. [ 616.013864][T26253] infiniband syz0: set down [ 616.018630][T26268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8368'. [ 616.028426][T26253] infiniband syz0: added lo [ 616.044450][T19870] lo speed is unknown, defaulting to 1000 [ 616.109069][T26253] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 616.151756][T26253] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 616.184816][T26253] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 616.225987][T26253] RDS/IB: syz0: added [ 616.258088][T26253] smc: adding ib device syz0 with port count 1 [ 616.283223][T26253] smc: ib device syz0 port 1 has no pnetid [ 616.300713][T13187] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 616.325150][T13187] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 616.345777][T19870] lo speed is unknown, defaulting to 1000 [ 616.371255][T26253] lo speed is unknown, defaulting to 1000 [ 616.429903][T26288] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8375'. [ 616.514430][T26290] tap0: tun_chr_ioctl cmd 2148553947 [ 616.820770][T26253] lo speed is unknown, defaulting to 1000 [ 616.862375][T26296] block nbd9: server does not support multiple connections per device. [ 616.881620][T26296] block nbd9: shutting down sockets [ 617.026071][T26300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.065314][T26300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 617.101054][T19866] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 617.128229][T26306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.387622][T26306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 617.398525][T26306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.414035][T26306] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 617.453241][T13181] bond13: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 617.466637][T13181] bond13: (slave veth0_to_bond): making interface the new active one [ 617.479759][T13181] bond13: active interface up! [ 617.486892][T26253] lo speed is unknown, defaulting to 1000 [ 617.822828][T26253] lo speed is unknown, defaulting to 1000 [ 618.272672][T26253] lo speed is unknown, defaulting to 1000 [ 618.447885][T26331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8386'. [ 618.477818][T26331] netlink: 'syz.2.8386': attribute type 1 has an invalid length. [ 618.574551][T26331] 8021q: adding VLAN 0 to HW filter on device bond13 [ 619.121548][T26341] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 619.142821][T26341] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 619.155909][T26344] tipc: Enabling of bearer rejected, already enabled [ 619.417746][T26358] netlink: 'syz.4.8392': attribute type 10 has an invalid length. [ 619.447627][T26348] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8394'. [ 619.472298][T26360] netlink: 'syz.4.8392': attribute type 10 has an invalid length. [ 619.483937][T26348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8394'. [ 619.544422][T26358] team0: Port device dummy0 added [ 619.604452][T26360] team0: Port device dummy0 removed [ 619.630102][T26360] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 619.787229][T26368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8398'. [ 619.864768][T26374] syzkaller0: entered promiscuous mode [ 619.871221][T26374] syzkaller0: entered allmulticast mode [ 619.987427][T26376] syzkaller0: entered promiscuous mode [ 619.995996][T26376] syzkaller0: entered allmulticast mode [ 620.086917][T26355] lo speed is unknown, defaulting to 1000 [ 620.459685][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 620.485357][T26398] netlink: 'syz.0.8408': attribute type 4 has an invalid length. [ 621.514310][T26427] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8416'. [ 621.591992][T26431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8416'. [ 621.926174][T26441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8417'. [ 622.115762][T26447] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8420'. [ 622.202445][T26449] syzkaller0: entered promiscuous mode [ 622.212646][T26449] syzkaller0: entered allmulticast mode [ 622.495003][T26465] syzkaller0: entered promiscuous mode [ 622.508638][T26465] syzkaller0: entered allmulticast mode [ 623.524366][T26508] syzkaller0: entered promiscuous mode [ 623.554223][T26508] syzkaller0: entered allmulticast mode [ 623.962075][T26527] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8445'. [ 624.226499][T26542] tipc: Enabling of bearer rejected, failed to enable media [ 624.492726][T26557] syzkaller0: entered promiscuous mode [ 624.498335][T26557] syzkaller0: entered allmulticast mode [ 624.607043][T26563] bond7: (slave lo): Releasing backup interface [ 624.630946][T26563] bond7: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 624.680734][T26563] bond0: (slave dummy0): Releasing backup interface [ 624.693732][T26566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8454'. [ 624.703973][ T5737] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 624.708298][T26563] bridge_slave_0: left allmulticast mode [ 624.712246][T26566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8454'. [ 624.729258][T26563] bridge_slave_0: left promiscuous mode [ 624.739559][T26563] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.750361][T26563] bridge_slave_1: left allmulticast mode [ 624.756164][T26563] bridge_slave_1: left promiscuous mode [ 624.762729][T26563] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.776607][T26563] bond0: (slave bond_slave_0): Releasing backup interface [ 624.794973][T26563] bond0: (slave bond_slave_1): Releasing backup interface [ 624.815710][T26563] team0: Port device team_slave_1 removed [ 624.830644][T26563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.843092][T26563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.871322][T26563] team0: Port device veth1_to_hsr removed [ 624.892597][T26563] team0: Port device geneve1 removed [ 624.909920][T26563] bond8: (slave gre3): Releasing backup interface [ 624.917961][T26563] gre3: left promiscuous mode [ 624.930010][T26563] bond13: (slave bridge4): Releasing backup interface [ 624.949438][T26563] bridge4: left promiscuous mode [ 624.958692][T26563] bond17: (slave geneve3): Releasing active interface [ 624.966218][T26563] geneve3: left allmulticast mode [ 624.974990][T26563] bond22: (slave geneve4): Releasing active interface [ 624.982616][T26563] geneve4: left allmulticast mode [ 625.056937][T26568] tipc: Resetting bearer [ 625.215358][T26577] syzkaller0: entered promiscuous mode [ 625.221857][T26577] syzkaller0: entered allmulticast mode [ 625.284719][T26581] syzkaller0: entered promiscuous mode [ 625.286669][T26582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8461'. [ 625.291122][T26581] syzkaller0: entered allmulticast mode [ 625.334096][T26582] netlink: 'syz.2.8461': attribute type 5 has an invalid length. [ 625.343211][T26582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8461'. [ 625.413702][T26584] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8462'. [ 625.422017][T19870] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 625.500780][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 625.510510][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 625.517833][ C0] bridge0: port 3(vlan3) entered learning state [ 626.050426][T26602] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 626.248338][T26612] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 626.352759][T26615] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8472'. [ 626.541220][T26621] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8475'. [ 626.576079][T26621] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8475'. [ 626.609501][T26621] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 627.011206][T26646] syzkaller0: entered promiscuous mode [ 627.030733][T26646] syzkaller0: entered allmulticast mode [ 627.139351][T26651] syzkaller0: entered promiscuous mode [ 627.151622][T26651] syzkaller0: entered allmulticast mode [ 627.302756][T26659] syzkaller0: entered promiscuous mode [ 627.326836][T26659] syzkaller0: entered allmulticast mode [ 627.676257][T26643] lo speed is unknown, defaulting to 1000 [ 627.766492][T26671] syzkaller0: entered promiscuous mode [ 627.774472][T26671] syzkaller0: entered allmulticast mode [ 628.149150][T26683] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 628.425201][T26690] netlink: 'syz.1.8498': attribute type 1 has an invalid length. [ 628.452773][T26690] netlink: 'syz.1.8498': attribute type 1 has an invalid length. [ 628.614288][T26694] netlink: 'syz.0.8500': attribute type 13 has an invalid length. [ 628.624100][T26692] syzkaller0: entered promiscuous mode [ 628.644892][T26692] syzkaller0: entered allmulticast mode [ 628.815737][T26698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8500'. [ 629.093019][T26711] netlink: 149 bytes leftover after parsing attributes in process `syz.1.8505'. [ 629.108814][T26710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8504'. [ 629.130744][T26713] syzkaller0: entered promiscuous mode [ 629.136335][T26713] syzkaller0: entered allmulticast mode [ 629.346039][T26721] syzkaller0: entered promiscuous mode [ 629.351721][T26721] syzkaller0: entered allmulticast mode [ 629.479046][T26703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8502'. [ 629.841653][T26739] netlink: 'syz.1.8513': attribute type 1 has an invalid length. [ 629.912743][T26747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8513'. [ 630.083599][T26747] bond12: entered promiscuous mode [ 630.109125][T26747] bond12: entered allmulticast mode [ 630.205724][T26752] bond12: (slave geneve4): making interface the new active one [ 630.239547][T26752] geneve4: entered promiscuous mode [ 630.254125][T26752] geneve4: entered allmulticast mode [ 630.268429][T26752] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 630.294035][ T177] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 630.315469][ T177] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 630.337383][T26723] lo speed is unknown, defaulting to 1000 [ 630.338667][ T177] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 630.393957][ T177] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 630.932076][T26784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8521'. [ 630.961846][T26784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8521'. [ 631.232104][T26795] netlink: 'syz.2.8525': attribute type 11 has an invalid length. [ 631.658094][T26799] syzkaller0: entered promiscuous mode [ 631.676296][T26799] syzkaller0: entered allmulticast mode [ 631.844665][T26823] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8531'. [ 634.258264][T26860] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 634.501118][T26866] team0 (unregistering): Failed to send options change via netlink (err -105) [ 634.530316][T26866] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 634.547796][T26866] team0 (unregistering): Port device team_slave_0 removed [ 634.562918][T26866] team0 (unregistering): Failed to send options change via netlink (err -105) [ 634.572713][T26866] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 634.587193][T26866] team0 (unregistering): Port device team_slave_1 removed [ 634.602315][T26866] team0 (unregistering): Failed to send options change via netlink (err -105) [ 634.627144][T26866] team0 (unregistering): Failed to send port change of device syz_tun via netlink (err -105) [ 634.662916][T26866] team0 (unregistering): Port device syz_tun removed [ 634.719167][T26877] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 634.813002][T26871] syzkaller0: entered promiscuous mode [ 634.818739][T26871] syzkaller0: entered allmulticast mode [ 636.037261][T26923] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8555'. [ 636.997968][T26909] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 637.005790][T26909] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 637.106414][T26931] netlink: 'syz.4.8557': attribute type 4 has an invalid length. [ 637.126973][T26931] netlink: 'syz.4.8557': attribute type 4 has an invalid length. [ 637.183097][T26934] netlink: 'syz.0.8558': attribute type 1 has an invalid length. [ 637.465738][T26934] bond16: entered promiscuous mode [ 637.481001][T26934] 8021q: adding VLAN 0 to HW filter on device bond16 [ 637.522249][T26941] vlan3: entered allmulticast mode [ 637.530102][T26941] bond16: entered allmulticast mode [ 637.547210][T26945] bond16: (slave bridge6): making interface the new active one [ 637.555198][T26945] bridge6: entered promiscuous mode [ 637.560934][T26945] bridge6: entered allmulticast mode [ 637.567753][T26945] bond16: (slave bridge6): Enslaving as an active interface with an up link [ 637.643046][T26939] syzkaller0: entered promiscuous mode [ 637.648596][T26939] syzkaller0: entered allmulticast mode [ 637.702938][T26959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8563'. [ 637.735512][T26959] team1: entered promiscuous mode [ 637.740866][T26959] team1: entered allmulticast mode [ 637.746466][T26959] 8021q: adding VLAN 0 to HW filter on device team1 [ 639.758727][T26978] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8566'. [ 639.768553][T26979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8567'. [ 639.789452][T26979] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8567'. [ 639.829137][T26979] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8567'. [ 639.850199][T26979] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8567'. [ 639.868204][T26985] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8568'. [ 639.918013][T26988] xt_TCPMSS: Only works on TCP SYN packets [ 639.955519][T26993] netlink: 'syz.3.8570': attribute type 2 has an invalid length. [ 639.963560][T26993] netlink: 'syz.3.8570': attribute type 8 has an invalid length. [ 639.971444][T26993] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8570'. [ 640.031843][T26994] bond24: entered promiscuous mode [ 640.037216][T26994] bond24: entered allmulticast mode [ 640.051320][T26993] netlink: 'syz.3.8570': attribute type 2 has an invalid length. [ 640.065799][T26991] syzkaller0: entered promiscuous mode [ 640.076477][T26998] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8572'. [ 640.087075][T26993] netlink: 'syz.3.8570': attribute type 8 has an invalid length. [ 640.095616][T26991] syzkaller0: entered allmulticast mode [ 640.221428][T27000] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.306874][T27000] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.392518][T27000] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.537266][T27000] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.627697][T27030] lo speed is unknown, defaulting to 1000 [ 640.655255][T27030] lo speed is unknown, defaulting to 1000 [ 640.696379][T27030] lo speed is unknown, defaulting to 1000 [ 640.797330][T13183] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.857558][T13183] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.908305][T13183] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.951438][T13183] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.113619][T27023] lo speed is unknown, defaulting to 1000 [ 641.523031][T27030] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 641.547779][T27030] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 641.566277][T27030] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 641.616368][T27030] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 641.676891][T27030] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 641.748042][T27030] lo speed is unknown, defaulting to 1000 [ 641.774529][T27030] lo speed is unknown, defaulting to 1000 [ 641.801494][T27030] lo speed is unknown, defaulting to 1000 [ 641.812434][T27030] lo speed is unknown, defaulting to 1000 [ 641.824932][T27030] lo speed is unknown, defaulting to 1000 [ 641.832861][T27030] lo speed is unknown, defaulting to 1000 [ 642.077174][T27066] vlan4: entered promiscuous mode [ 642.145172][T27068] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 642.164104][T27068] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 642.584559][T27081] netlink: 'syz.3.8595': attribute type 1 has an invalid length. [ 642.680876][T27084] __nla_validate_parse: 1 callbacks suppressed [ 642.680895][T27084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8595'. [ 642.868360][T27081] 8021q: adding VLAN 0 to HW filter on device bond11 [ 642.879126][T27082] tipc: Enabling of bearer rejected, already enabled [ 642.888352][T27084] bond11: entered promiscuous mode [ 642.897743][T27084] bond11: entered allmulticast mode [ 643.005134][T27093] syzkaller0: entered promiscuous mode [ 643.013370][T27093] syzkaller0: entered allmulticast mode [ 643.175250][T27101] syzkaller0: entered promiscuous mode [ 643.181885][T27101] syzkaller0: entered allmulticast mode [ 643.395150][T27106] syzkaller0: entered promiscuous mode [ 643.400875][T27106] syzkaller0: entered allmulticast mode [ 643.443717][T27111] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 643.451083][T27111] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 643.538116][T27117] sctp: [Deprecated]: syz.2.8608 (pid 27117) Use of struct sctp_assoc_value in delayed_ack socket option. [ 643.538116][T27117] Use struct sctp_sack_info instead [ 643.622668][T27122] syz_tun: entered allmulticast mode [ 643.643258][T27122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8610'. [ 643.693205][T27122] syz_tun (unregistering): left allmulticast mode [ 643.904709][T27136] netlink: 'syz.0.8616': attribute type 1 has an invalid length. [ 644.005434][T27136] 8021q: adding VLAN 0 to HW filter on device bond17 [ 644.039936][T27139] bond17: (slave macvlan0): Enslaving as an active interface with a down link [ 644.112681][T27143] syzkaller0: entered promiscuous mode [ 644.118247][T27143] syzkaller0: entered allmulticast mode [ 644.144885][T27145] netlink: 'syz.2.8618': attribute type 1 has an invalid length. [ 644.297762][T27145] 8021q: adding VLAN 0 to HW filter on device bond14 [ 644.357881][T27162] netlink: 14 bytes leftover after parsing attributes in process `syz.2.8618'. [ 644.495573][T27147] bond14: (slave veth31): Enslaving as an active interface with a down link [ 644.563308][T27150] bond14: (slave dummy0): making interface the new active one [ 644.587440][T27150] dummy0: entered promiscuous mode [ 644.600052][T27150] bond14: (slave dummy0): Enslaving as an active interface with an up link [ 644.719274][T27162] bond14: (slave dummy0): Releasing active interface [ 644.749452][T27162] dummy0 (unregistering): left promiscuous mode [ 644.998322][T27180] syzkaller0: entered promiscuous mode [ 645.016864][T27180] syzkaller0: entered allmulticast mode [ 645.232592][T27191] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8628'. [ 645.329034][T27199] netlink: 'syz.1.8630': attribute type 1 has an invalid length. [ 645.355263][ T5295] veth0_vlan: left promiscuous mode [ 645.373413][ T5295] veth0_vlan: entered promiscuous mode [ 645.414574][T27205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8631'. [ 645.428471][T27199] bond13: entered promiscuous mode [ 645.435769][T27199] 8021q: adding VLAN 0 to HW filter on device bond13 [ 645.447623][T27192] syzkaller0: entered promiscuous mode [ 645.453605][T27192] syzkaller0: entered allmulticast mode [ 645.477223][T27204] bond13: (slave bridge11): making interface the new active one [ 645.485386][T27204] bridge11: entered promiscuous mode [ 645.492563][T27204] bond13: (slave bridge11): Enslaving as an active interface with an up link [ 645.546463][T27199] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 645.563880][T27199] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 645.616470][T27209] bond12: entered promiscuous mode [ 645.629658][T27209] bond12: entered allmulticast mode [ 645.672713][T27211] tipc: Enabling of bearer rejected, already enabled [ 645.824439][T27216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8634'. [ 645.843243][T27217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8633'. [ 645.895202][T27220] syzkaller0: entered promiscuous mode [ 645.909751][T27220] syzkaller0: entered allmulticast mode [ 645.927503][T27222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8636'. [ 646.324774][T27234] syzkaller0: entered promiscuous mode [ 646.332231][T27234] syzkaller0: entered allmulticast mode [ 646.500917][T27246] netlink: 'syz.0.8641': attribute type 1 has an invalid length. [ 646.546785][T27241] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 646.566113][T27241] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 646.686351][T27246] bond18: entered promiscuous mode [ 646.704432][T27246] 8021q: adding VLAN 0 to HW filter on device bond18 [ 646.791840][T27249] vlan4: entered allmulticast mode [ 646.818621][T27249] bond18: entered allmulticast mode [ 646.863752][ T30] audit: type=1804 audit(1780762915.710:15): pid=27257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8643" name="/newroot/1706/cgroup.controllers" dev="tmpfs" ino=8668 res=1 errno=0 [ 646.928333][ T30] audit: type=1800 audit(1780762915.730:16): pid=27257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.8643" name="cgroup.controllers" dev="tmpfs" ino=8668 res=0 errno=0 [ 646.950725][T27252] bond18: (slave bridge7): making interface the new active one [ 646.950751][T27252] bridge7: entered promiscuous mode [ 646.975594][T27252] bridge7: entered allmulticast mode [ 646.990384][T27252] bond18: (slave bridge7): Enslaving as an active interface with an up link [ 647.114373][T27262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8645'. [ 647.217034][T27262] 8021q: adding VLAN 0 to HW filter on device bond26 [ 647.237649][T27265] bond26: entered promiscuous mode [ 647.294097][T27265] bond26: entered allmulticast mode [ 647.338175][T27265] 8021q: adding VLAN 0 to HW filter on device bond26 [ 647.357613][T27265] team0: Port device bond26 added [ 647.384366][T27262] team_slave_1: entered promiscuous mode [ 647.428252][T27262] team_slave_1: entered allmulticast mode [ 647.466080][T27262] bond26: (slave team_slave_1): Enslaving as an active interface with an up link [ 647.484731][T27280] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8649'. [ 647.507229][T27273] syzkaller0: entered promiscuous mode [ 647.518880][T27273] syzkaller0: entered allmulticast mode [ 648.504178][T27331] syzkaller0: entered promiscuous mode [ 648.521698][T27331] syzkaller0: entered allmulticast mode [ 648.558039][T27331] sch_tbf: burst 185 is lower than device syzkaller0 mtu (1500) ! [ 649.106649][T27342] __nla_validate_parse: 1 callbacks suppressed [ 649.106668][T27342] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8667'. [ 649.136001][T27345] lo: Caught tx_queue_len zero misconfig [ 649.199738][T27347] netlink: 52 bytes leftover after parsing attributes in process `syz.3.8669'. [ 649.221216][T27347] netlink: 'syz.3.8669': attribute type 1 has an invalid length. [ 649.402189][T27352] syzkaller0: entered promiscuous mode [ 649.412111][T27355] netlink: 284 bytes leftover after parsing attributes in process `syz.0.8672'. [ 649.417483][T27352] syzkaller0: entered allmulticast mode [ 649.579815][T27359] syzkaller0: entered promiscuous mode [ 649.600999][T27359] syzkaller0: entered allmulticast mode [ 649.730427][T27362] syzkaller0: entered promiscuous mode [ 649.736052][T27362] syzkaller0: entered allmulticast mode [ 649.952041][T27368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8676'. [ 650.042745][T27372] netlink: 'syz.3.8677': attribute type 1 has an invalid length. [ 650.157793][T27372] 8021q: adding VLAN 0 to HW filter on device bond13 [ 650.219890][T27378] vlan4: entered promiscuous mode [ 650.225172][T27378] bond13: entered promiscuous mode [ 650.231259][T27378] vlan4: entered allmulticast mode [ 650.236520][T27378] bond13: entered allmulticast mode [ 650.275668][T27380] bond13: (slave bridge8): making interface the new active one [ 650.289084][T27380] bridge8: entered promiscuous mode [ 650.300345][T27380] bridge8: entered allmulticast mode [ 650.313823][T27380] bond13: (slave bridge8): Enslaving as an active interface with an up link [ 650.323409][T27384] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8680'. [ 650.341348][T27383] syzkaller0: entered promiscuous mode [ 650.349309][T27383] syzkaller0: entered allmulticast mode [ 650.535390][T27390] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 650.547126][T27390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 650.558064][T27390] IPVS: set_ctl: invalid protocol: 92 127.0.0.1:20000 [ 650.641620][T27393] netlink: 'syz.1.8684': attribute type 1 has an invalid length. [ 650.676000][T27393] bond14: entered promiscuous mode [ 650.681908][T27393] 8021q: adding VLAN 0 to HW filter on device bond14 [ 650.731831][T27393] bond14: (slave bridge12): making interface the new active one [ 650.741031][T27393] bridge12: entered promiscuous mode [ 650.748038][T27393] bond14: (slave bridge12): Enslaving as an active interface with an up link [ 650.862626][T27400] syzkaller0: entered promiscuous mode [ 650.868294][T27400] syzkaller0: entered allmulticast mode [ 651.196724][T27411] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8689'. [ 651.280289][T27406] tipc: Enabled bearer , priority 0 [ 651.324297][T27402] tipc: Resetting bearer [ 651.369278][T27409] syzkaller0: entered promiscuous mode [ 651.390354][T27409] syzkaller0: entered allmulticast mode [ 651.455612][T27401] tipc: Resetting bearer [ 651.461348][T27417] netlink: 'syz.3.8690': attribute type 1 has an invalid length. [ 651.536668][T27401] tipc: Disabling bearer [ 651.649629][T27417] bond14: entered promiscuous mode [ 651.680648][T27417] 8021q: adding VLAN 0 to HW filter on device bond14 [ 651.757598][T27420] ipvlan2: entered allmulticast mode [ 651.781769][T27420] bond14: entered allmulticast mode [ 651.896466][T27422] bond14: (slave bridge9): making interface the new active one [ 651.923032][T27422] bridge9: entered promiscuous mode [ 651.939691][T27422] bridge9: entered allmulticast mode [ 651.958811][T27422] bond14: (slave bridge9): Enslaving as an active interface with an up link [ 652.000989][T27428] sctp: [Deprecated]: syz.1.8693 (pid 27428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 652.000989][T27428] Use struct sctp_sack_info instead [ 652.076554][T27430] netlink: 'syz.2.8695': attribute type 1 has an invalid length. [ 652.153602][T27430] bond15: entered promiscuous mode [ 652.160554][T27430] 8021q: adding VLAN 0 to HW filter on device bond15 [ 652.257832][T27434] macvtap1: entered allmulticast mode [ 652.322072][T27430] bond15: (slave bridge9): making interface the new active one [ 652.343683][T27430] bridge9: entered promiscuous mode [ 652.357779][T27430] bond15: (slave bridge9): Enslaving as an active interface with an up link [ 652.377151][T27440] syzkaller0: entered promiscuous mode [ 652.399464][T27440] syzkaller0: entered allmulticast mode [ 652.405860][T27442] netlink: 'syz.3.8699': attribute type 1 has an invalid length. [ 652.505293][T27442] 8021q: adding VLAN 0 to HW filter on device bond15 [ 652.534891][T27454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8700'. [ 652.604373][T27450] bond15: (slave veth19): Enslaving as an active interface with a down link [ 652.678698][T27442] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 652.705590][T27442] bond15: (slave batadv2): making interface the new active one [ 652.717769][T27442] batadv2: entered promiscuous mode [ 652.724022][T27442] bond15: (slave batadv2): Enslaving as an active interface with an up link [ 652.782949][T27450] bond15 (unregistering): (slave veth19): Releasing active interface [ 652.789768][T27466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8705'. [ 652.811891][T27450] bond15 (unregistering): (slave batadv2): Releasing active interface [ 652.838076][T27450] bond15 (unregistering): Released all slaves [ 652.992752][T27466] 8021q: adding VLAN 0 to HW filter on device bond19 [ 653.045695][T27471] macvlan6: entered promiscuous mode [ 653.053698][T27471] macvlan6: entered allmulticast mode [ 653.192939][T27480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8709'. [ 653.278925][T27480] bridge10: port 1(veth33) entered blocking state [ 653.302991][T27480] bridge10: port 1(veth33) entered disabled state [ 653.321383][T27480] veth33: entered allmulticast mode [ 653.334956][T27480] veth33: entered promiscuous mode [ 653.361763][T27479] netlink: 'syz.3.8708': attribute type 14 has an invalid length. [ 653.403691][T27490] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 653.458431][T27488] bridge10: port 2(veth0_to_bond) entered blocking state [ 653.495994][T27488] bridge10: port 2(veth0_to_bond) entered disabled state [ 653.510067][T27488] veth0_to_bond: entered allmulticast mode [ 653.529533][T27488] veth0_to_bond: entered promiscuous mode [ 653.661010][T27489] bridge10: port 3(veth35) entered blocking state [ 653.687371][T27489] bridge10: port 3(veth35) entered disabled state [ 653.713575][T27489] veth35: entered allmulticast mode [ 653.733701][ T30] audit: type=1107 audit(1780762922.580:17): pid=27498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 653.746352][T27489] veth35: entered promiscuous mode [ 653.768483][T27500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8713'. [ 653.810768][T27502] syzkaller1: entered promiscuous mode [ 653.817466][T27500] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 653.838833][T27502] syzkaller1: entered allmulticast mode [ 653.970320][T27505] syzkaller0: entered promiscuous mode [ 653.981735][T27505] syzkaller0: entered allmulticast mode [ 654.063769][T27509] rdma_rxe: rxe_newlink: failed to add bond0 [ 654.235056][T27510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.264261][T27510] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.331906][T22286] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 654.396551][T27525] syzkaller0: entered promiscuous mode [ 654.419503][T27525] syzkaller0: entered allmulticast mode [ 654.481716][T27532] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8726'. [ 654.538190][T27535] tipc: Enabling of bearer rejected, already enabled [ 654.562753][T27532] vlan7: entered allmulticast mode [ 654.568076][T27532] bridge11: entered allmulticast mode [ 654.580560][ T60] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 654.594510][T27528] syzkaller0: entered promiscuous mode [ 654.605197][T27528] syzkaller0: entered allmulticast mode [ 654.632531][T27532] bridge11: port 1(erspan0) entered blocking state [ 654.648032][T27532] bridge11: port 1(erspan0) entered disabled state [ 654.655666][T27532] erspan0: entered allmulticast mode [ 654.663658][T27532] erspan0: entered promiscuous mode [ 654.670103][T27532] bridge11: port 1(erspan0) entered blocking state [ 654.676799][T27532] bridge11: port 1(erspan0) entered forwarding state [ 654.688829][T27535] tipc: Enabling of bearer rejected, failed to enable media [ 654.710514][T27528] tipc: Enabled bearer , priority 0 [ 654.725798][T27527] tipc: Resetting bearer [ 654.792690][T27527] tipc: Disabling bearer [ 655.173778][T27562] netlink: 'syz.2.8735': attribute type 1 has an invalid length. [ 655.189771][T19866] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 655.285216][T27562] bond16: entered promiscuous mode [ 655.299601][T27562] bond16: entered allmulticast mode [ 655.321607][T27562] 8021q: adding VLAN 0 to HW filter on device bond16 [ 655.411892][T27565] bridge12: entered promiscuous mode [ 655.417572][T27565] bridge12: entered allmulticast mode [ 655.424527][T27565] bond16: (slave bridge12): Enslaving as a backup interface with an up link [ 655.478142][T27562] bridge13: entered promiscuous mode [ 655.493033][T13187] bond16: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 655.500166][T27562] bridge13: entered allmulticast mode [ 655.523079][T27562] bond16: (slave bridge13): Enslaving as a backup interface with a down link [ 655.579467][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.586767][ C1] bridge0: topology change detected, propagating [ 655.593476][ C0] bridge0: port 3(vlan3) entered forwarding state [ 655.599960][ C0] bridge0: topology change detected, propagating [ 655.606527][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.613809][ C0] bridge0: topology change detected, propagating [ 655.630156][ T48] bond16: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 655.958240][ T1170] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 655.966864][ T1170] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 656.779790][ T5737] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 657.195302][T27613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8753'. [ 657.229345][T27612] syzkaller0: entered promiscuous mode [ 657.235016][T27612] syzkaller0: entered allmulticast mode [ 657.303499][T27616] syzkaller0: entered promiscuous mode [ 657.309095][T27616] syzkaller0: entered allmulticast mode [ 657.334161][T27618] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 657.478444][T27627] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8758'. [ 657.606942][T27630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8760'. [ 657.673076][T27630] vlan5: entered allmulticast mode [ 657.678345][T27630] bridge8: entered allmulticast mode [ 657.687459][T27630] bridge8: port 1(erspan0) entered blocking state [ 657.694666][T27630] bridge8: port 1(erspan0) entered disabled state [ 657.701580][T27630] erspan0: entered allmulticast mode [ 657.708800][T27630] erspan0: entered promiscuous mode [ 657.716380][T27630] bridge8: port 1(erspan0) entered blocking state [ 657.722990][T27630] bridge8: port 1(erspan0) entered forwarding state [ 657.792080][T27636] tipc: Enabled bearer , priority 0 [ 657.804386][T27636] syzkaller0: entered promiscuous mode [ 657.816543][T27636] syzkaller0: entered allmulticast mode [ 657.843275][T27638] syzkaller0: entered promiscuous mode [ 657.849809][T27638] syzkaller0: entered allmulticast mode [ 657.877173][T27636] tipc: Resetting bearer [ 657.884859][T27638] tipc: Enabled bearer , priority 0 [ 657.892885][T27635] tipc: Resetting bearer [ 657.915311][T27635] tipc: Disabling bearer [ 657.928997][T27637] tipc: Resetting bearer [ 657.958410][T27637] tipc: Disabling bearer [ 658.217507][T27650] netlink: 'syz.4.8768': attribute type 1 has an invalid length. [ 658.289137][T27650] 8021q: adding VLAN 0 to HW filter on device bond27 [ 658.335391][T27644] lo speed is unknown, defaulting to 1000 [ 658.374895][T27647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8767'. [ 658.503728][T27644] lo speed is unknown, defaulting to 1000 [ 658.710230][T27659] netlink: 'syz.1.8770': attribute type 2 has an invalid length. [ 658.786990][T27661] syzkaller0: entered promiscuous mode [ 658.793013][T27661] syzkaller0: entered allmulticast mode [ 659.187544][T27668] tipc: Enabling of bearer rejected, already enabled [ 659.200379][T27670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8774'. [ 659.209578][T27670] netlink: 'syz.1.8774': attribute type 1 has an invalid length. [ 659.217418][T27670] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8774'. [ 659.454519][T27683] netlink: 180 bytes leftover after parsing attributes in process `syz.1.8780'. [ 659.802331][T27704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8787'. [ 660.139582][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 660.276927][T27726] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.8792'. [ 660.313631][T27726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8792'. [ 660.473298][T27735] netlink: 'syz.0.8795': attribute type 1 has an invalid length. [ 660.539300][T27735] 8021q: adding VLAN 0 to HW filter on device bond20 [ 660.592904][T27740] 8021q: adding VLAN 0 to HW filter on device bond20 [ 660.619273][T27740] bond20: (slave gre5): The slave device specified does not support setting the MAC address [ 660.654898][T27740] bond20: (slave gre5): Error -95 calling set_mac_address [ 660.764858][T27735] gretap3: entered promiscuous mode [ 660.773218][T27749] tipc: Can't bind to reserved service type 2 [ 660.807543][T27735] bond20: (slave gretap3): making interface the new active one [ 660.846101][T27735] bond20: (slave gretap3): Enslaving as an active interface with an up link [ 660.883832][T27747] macvlan7: entered promiscuous mode [ 660.894819][T27747] macvlan7: entered allmulticast mode [ 660.931863][T27747] bond20: entered promiscuous mode [ 660.942614][T27747] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 660.959604][T27747] bond20: (slave macvlan7): the slave hw address is in use by the bond; giving it the hw address of gretap3 [ 660.975544][T27747] bond20: left promiscuous mode [ 661.213958][T27746] syzkaller0: entered promiscuous mode [ 661.247017][T27746] syzkaller0: entered allmulticast mode [ 661.609520][ T1170] bond16: (slave bridge12): link status up again after 0 ms [ 661.659530][ T1170] bond16: (slave bridge12): link status up again after 0 ms [ 661.689917][ T1170] bond16: (slave bridge12): link status up again after 0 ms [ 661.741914][ T1170] bond16: (slave bridge12): link status up again after 0 ms [ 661.770267][T13181] bond16: (slave bridge12): link status up again after 0 ms [ 661.802307][T13181] bond16: (slave bridge12): link status up again after 0 ms [ 661.826319][T27802] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.8807'. [ 661.837736][T13181] bond16: (slave bridge12): link status up again after 0 ms [ 661.872100][T13181] bond16: (slave bridge12): link status up again after 0 ms [ 661.900039][T13187] bond16: (slave bridge12): link status up again after 0 ms [ 661.939561][ T1170] bond16: (slave bridge12): link status up again after 0 ms [ 663.781553][T27762] syzkaller0: entered promiscuous mode [ 663.787061][T27762] syzkaller0: entered allmulticast mode [ 663.794614][T27782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8803'. [ 665.813123][T27816] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 665.826353][T27819] bond2: (slave lo): Releasing backup interface [ 665.842327][T27819] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 665.854738][T27820] tipc: Enabling of bearer rejected, failed to enable media [ 665.906246][T27810] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.031335][T27845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8813'. [ 666.069927][T27843] syzkaller0: entered promiscuous mode [ 666.078777][T27843] syzkaller0: entered allmulticast mode [ 666.102500][T27845] bridge13: port 1(dummy0) entered blocking state [ 666.111239][T27845] bridge13: port 1(dummy0) entered disabled state [ 666.118175][T27845] dummy0: entered allmulticast mode [ 666.143981][T27851] netlink: 'syz.1.8813': attribute type 10 has an invalid length. [ 666.145440][T27845] dummy0: entered promiscuous mode [ 666.204915][T27851] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8813'. [ 666.238920][T27851] dummy0: left allmulticast mode [ 666.273799][T27851] bridge13: port 1(dummy0) entered disabled state [ 667.005002][T27810] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.050671][ T1170] net_ratelimit: 190 callbacks suppressed [ 667.050698][ T1170] bond16: (slave bridge12): failed to get link speed/duplex [ 667.191364][T27865] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8823'. [ 667.281493][T27810] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.345927][T27871] syzkaller0: entered promiscuous mode [ 667.355145][T27871] syzkaller0: entered allmulticast mode [ 667.376937][T27810] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.539305][ T60] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.565643][T27884] netlink: zone id is out of range [ 667.575581][T27884] netlink: zone id is out of range [ 667.581039][ T60] bond16: (slave bridge12): failed to get link speed/duplex [ 667.613033][ T60] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.618364][T27884] netlink: zone id is out of range [ 667.629514][T27884] netlink: zone id is out of range [ 667.642950][T27884] netlink: zone id is out of range [ 667.658170][T27884] netlink: zone id is out of range [ 667.671598][ T60] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.684147][T27884] netlink: zone id is out of range [ 667.692213][T27884] netlink: zone id is out of range [ 667.714691][T13181] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.810620][T27888] syzkaller0: entered promiscuous mode [ 667.816417][T27888] syzkaller0: entered allmulticast mode [ 668.035704][T27898] syzkaller0: entered promiscuous mode [ 668.050784][T27898] syzkaller0: entered allmulticast mode [ 668.229222][T27907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8836'. [ 668.274914][T27907] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8836'. [ 668.389540][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 668.440019][T27918] tipc: Enabling of bearer rejected, already enabled [ 668.668177][T27892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8830'. [ 668.913890][T27932] netlink: 'syz.1.8847': attribute type 1 has an invalid length. [ 668.988746][T27932] 8021q: adding VLAN 0 to HW filter on device bond15 [ 669.194509][T27937] bond15: (slave veth21): Enslaving as an active interface with a down link [ 669.292552][T27932] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 669.307520][T27932] bond15: (slave batadv1): making interface the new active one [ 669.317896][T27958] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8852'. [ 669.329801][T27932] batadv1: entered promiscuous mode [ 669.335974][T27932] bond15: (slave batadv1): Enslaving as an active interface with an up link [ 669.361455][T27948] bond15 (unregistering): (slave veth21): Releasing active interface [ 669.375070][T27948] bond15 (unregistering): (slave batadv1): Releasing active interface [ 669.387127][T27948] bond15 (unregistering): Released all slaves [ 669.475122][T27961] bridge10: port 1(veth21) entered blocking state [ 669.498739][T27961] bridge10: port 1(veth21) entered disabled state [ 669.517929][T27961] veth21: entered allmulticast mode [ 669.525611][T27961] veth21: entered promiscuous mode [ 669.587316][T27966] bridge10: port 2(veth23) entered blocking state [ 669.603838][T27966] bridge10: port 2(veth23) entered disabled state [ 669.620250][T27966] veth23: entered allmulticast mode [ 669.638572][T27966] veth23: entered promiscuous mode [ 669.683710][T27971] tipc: Enabled bearer , priority 0 [ 669.707268][T27967] syzkaller0: entered promiscuous mode [ 669.719167][T27967] syzkaller0: entered allmulticast mode [ 669.826016][T27967] tipc: Resetting bearer [ 669.838655][T27976] netlink: 'syz.3.8858': attribute type 16 has an invalid length. [ 669.853206][T27965] tipc: Resetting bearer [ 669.900516][T27965] tipc: Disabling bearer [ 670.254175][T27964] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8854'. [ 670.413866][T28001] syzkaller0: entered promiscuous mode [ 670.431067][T28001] syzkaller0: entered allmulticast mode [ 670.509158][T27997] netlink: 196 bytes leftover after parsing attributes in process `syz.4.8865'. [ 670.839097][T27963] lo speed is unknown, defaulting to 1000 [ 671.163589][T28012] tipc: Enabled bearer , priority 0 [ 671.201626][T28012] syzkaller0: entered promiscuous mode [ 671.221196][T28012] syzkaller0: entered allmulticast mode [ 671.248884][T28012] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 671.321530][T28014] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8870'. [ 671.331653][T28012] tipc: Resetting bearer [ 671.372427][T28010] tipc: Resetting bearer [ 671.502052][T28010] tipc: Disabling bearer [ 671.539743][T27963] lo speed is unknown, defaulting to 1000 [ 671.559158][T28022] xt_hashlimit: size too large, truncated to 1048576 [ 671.636033][T28020] bond15: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 671.754349][T28020] bond15 (unregistering): Released all slaves [ 672.119622][T28036] syzkaller0: entered promiscuous mode [ 672.127489][T28036] syzkaller0: entered allmulticast mode [ 672.356840][T28044] syzkaller0: entered promiscuous mode [ 672.368966][T28044] syzkaller0: entered allmulticast mode [ 672.689503][ T48] net_ratelimit: 411 callbacks suppressed [ 672.689523][ T48] bond16: (slave bridge12): failed to get link speed/duplex [ 672.747651][T28054] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8882'. [ 672.849641][ T1170] bond16: (slave bridge12): failed to get link speed/duplex [ 672.961874][T28062] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8885'. [ 673.031382][T13187] bond16: (slave bridge12): failed to get link speed/duplex [ 673.159744][T13187] bond16: (slave bridge12): failed to get link speed/duplex [ 673.235597][T28068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8887'. [ 673.290192][ T60] bond16: (slave bridge12): failed to get link speed/duplex [ 673.419608][T13187] bond16: (slave bridge12): failed to get link speed/duplex [ 673.437280][T28075] tipc: Enabling of bearer rejected, already enabled [ 673.579524][ T60] bond16: (slave bridge12): failed to get link speed/duplex [ 673.630187][T28076] bridge8: port 1(erspan0) entered disabled state [ 673.647499][T28076] erspan0: left allmulticast mode [ 673.653390][T28076] erspan0: left promiscuous mode [ 673.658690][T28076] bridge8: port 1(erspan0) entered disabled state [ 673.747141][T28076] bond13: (slave veth0_to_bond): Releasing active interface [ 673.760060][T28076] bond0: (slave bond_slave_0): Releasing backup interface [ 673.796501][T28076] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 673.850397][ T60] bond16: (slave bridge12): failed to get link speed/duplex [ 673.964844][T28092] netlink: 'syz.1.8894': attribute type 1 has an invalid length. [ 674.000749][T28092] 8021q: adding VLAN 0 to HW filter on device bond15 [ 674.019617][T13187] bond16: (slave bridge12): failed to get link speed/duplex [ 674.126498][T28092] veth23: entered allmulticast mode [ 674.147401][T28092] bond15: (slave veth23): Enslaving as an active interface with an up link [ 674.157335][T28098] ip6tnl0: Caught tx_queue_len zero misconfig [ 674.176438][T28099] bond15 (unregistering): (slave veth23): Releasing backup interface [ 674.197795][T28099] bond15 (unregistering): Released all slaves [ 674.262689][T28102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8897'. [ 674.288567][T28102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8897'. [ 674.326527][T28102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8897'. [ 674.519695][T28105] syzkaller0: entered promiscuous mode [ 674.556322][T28105] syzkaller0: entered allmulticast mode [ 674.583511][T28104] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 674.596391][T28104] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 674.617194][T28120] syzkaller0: entered promiscuous mode [ 674.623211][T28120] syzkaller0: entered allmulticast mode [ 674.772002][T28126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.828511][T28126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.887365][T28128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8903'. [ 674.946647][T28127] xt_CT: You must specify a L4 protocol and not use inversions on it [ 675.194826][T28136] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8904'. [ 675.746764][T28156] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8907'. [ 677.400175][T28168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8908'. [ 677.439833][T28168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8908'. [ 677.442036][T28171] syzkaller0: entered promiscuous mode [ 677.468586][T28171] syzkaller0: entered allmulticast mode [ 677.549321][T28178] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 677.573204][T28178] netlink: 'syz.4.8913': attribute type 10 has an invalid length. [ 677.581642][T28178] netlink: 228 bytes leftover after parsing attributes in process `syz.4.8913'. [ 677.683117][T28178] smc: removing net device wlan0 with user defined pnetid SYZ0 [ 677.772744][T28189] netlink: 'syz.2.8916': attribute type 16 has an invalid length. [ 677.829473][ T177] net_ratelimit: 4 callbacks suppressed [ 677.829491][ T177] bond16: (slave bridge12): failed to get link speed/duplex [ 677.865630][T28194] syzkaller0: entered promiscuous mode [ 677.887789][T28194] syzkaller0: entered allmulticast mode [ 678.063829][T28199] syzkaller0: entered promiscuous mode [ 678.093625][T28199] syzkaller0: entered allmulticast mode [ 678.132635][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 678.161848][T28206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8920'. [ 678.372893][ T177] bond16: (slave bridge12): failed to get link speed/duplex [ 678.656816][T13181] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.666829][T28232] netlink: 'syz.0.8925': attribute type 1 has an invalid length. [ 678.690670][T13181] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 678.808104][T28232] bond22: entered promiscuous mode [ 678.813767][T28232] 8021q: adding VLAN 0 to HW filter on device bond22 [ 678.824124][T13181] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.854115][T13181] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 678.863114][T13181] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.871607][T13181] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 678.912054][T28234] ipvlan3: entered allmulticast mode [ 678.934096][T28234] bond22: entered allmulticast mode [ 678.961508][T13183] bond16: (slave bridge12): failed to get link speed/duplex [ 678.997070][T28251] netlink: 'syz.3.8928': attribute type 3 has an invalid length. [ 679.012033][T28238] ipvlan4: entered allmulticast mode [ 679.023420][T28251] netlink: 666 bytes leftover after parsing attributes in process `syz.3.8928'. [ 679.065810][T13181] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.101128][T13181] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 679.184265][T28232] bond22: (slave bridge9): making interface the new active one [ 679.210773][T28232] bridge9: entered promiscuous mode [ 679.219717][T28232] bridge9: entered allmulticast mode [ 679.245538][T28232] bond22: (slave bridge9): Enslaving as an active interface with an up link [ 679.257494][T28242] tipc: Enabling of bearer rejected, already enabled [ 679.272911][T28250] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 679.290011][T28250] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 679.297845][T28237] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 679.386360][T28248] syzkaller0: entered promiscuous mode [ 679.403326][T28248] syzkaller0: entered allmulticast mode [ 679.590828][T28275] Cannot find set identified by id 65534 to match [ 679.641143][T28269] tipc: Enabled bearer , priority 0 [ 679.663351][T28274] syzkaller0: entered promiscuous mode [ 679.681882][T28274] syzkaller0: entered allmulticast mode [ 679.919131][T28289] tipc: Resetting bearer [ 679.977504][T28265] tipc: Resetting bearer [ 680.082811][T28265] tipc: Disabling bearer [ 680.113959][T28291] syzkaller1: entered promiscuous mode [ 680.119987][T28291] syzkaller1: entered allmulticast mode [ 680.180227][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 680.299681][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 680.318760][T28307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8936'. [ 680.421873][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 680.547031][T28314] xt_CT: You must specify a L4 protocol and not use inversions on it [ 680.689507][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 680.714799][T28316] netlink: 'syz.2.8940': attribute type 2 has an invalid length. [ 680.734960][T28316] netlink: 'syz.2.8940': attribute type 2 has an invalid length. [ 680.771765][T28318] syzkaller0: entered promiscuous mode [ 680.780938][T28318] syzkaller0: entered allmulticast mode [ 680.939751][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 681.026240][T28329] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 681.101677][T28334] netlink: 'syz.2.8947': attribute type 1 has an invalid length. [ 681.136041][T28337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8949'. [ 681.159960][T19866] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 681.183240][T28334] 8021q: adding VLAN 0 to HW filter on device bond17 [ 681.306220][T28344] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8947'. [ 681.359643][T28340] bond17: (slave veth39): Enslaving as an active interface with a down link [ 681.443899][T28334] bond17: (slave veth41): Enslaving as an active interface with a down link [ 681.523850][T28344] bond17: (slave bridge14): Enslaving as an active interface with a down link [ 681.635029][T28359] tipc: Enabling of bearer rejected, already enabled [ 681.766431][T28363] netlink: 'syz.2.8955': attribute type 4 has an invalid length. [ 682.154868][T28358] lo speed is unknown, defaulting to 1000 [ 682.430606][T28360] netlink: 'syz.3.8952': attribute type 4 has an invalid length. [ 682.466998][T28384] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 682.852732][T28358] lo speed is unknown, defaulting to 1000 [ 682.870091][T28355] lo speed is unknown, defaulting to 1000 [ 682.901604][T28396] netlink: 'syz.0.8967': attribute type 1 has an invalid length. [ 682.950988][T28396] 8021q: adding VLAN 0 to HW filter on device bond23 [ 683.072149][T13181] net_ratelimit: 15 callbacks suppressed [ 683.072168][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 683.098204][T28400] netlink: 'syz.2.8968': attribute type 1 has an invalid length. [ 683.146365][T28400] bond18: entered promiscuous mode [ 683.159282][T28400] 8021q: adding VLAN 0 to HW filter on device bond18 [ 683.195976][T28400] macvtap2: entered allmulticast mode [ 683.210018][ T177] bond16: (slave bridge12): failed to get link speed/duplex [ 683.261022][T28400] macvtap3: entered allmulticast mode [ 683.320555][T28403] bond18: (slave bridge15): making interface the new active one [ 683.328360][T28403] bridge15: entered promiscuous mode [ 683.340231][T28403] bond18: (slave bridge15): Enslaving as an active interface with an up link [ 683.351429][ T48] bond16: (slave bridge12): failed to get link speed/duplex [ 683.369331][T28355] lo speed is unknown, defaulting to 1000 [ 683.514266][T28415] netlink: 'syz.2.8972': attribute type 1 has an invalid length. [ 683.727171][T28415] 8021q: adding VLAN 0 to HW filter on device bond19 [ 683.956190][T28421] macvlan2: entered promiscuous mode [ 683.961890][T28421] macvlan2: entered allmulticast mode [ 684.051594][T28424] bond19: (slave ip6gretap0): making interface the new active one [ 684.078935][T28424] bond19: (slave ip6gretap0): Enslaving as an active interface with an up link [ 684.129902][ T48] bond16: (slave bridge12): failed to get link speed/duplex [ 684.251013][ T60] bond16: (slave bridge12): failed to get link speed/duplex [ 684.331398][T28432] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8977'. [ 684.459613][ T60] bond16: (slave bridge12): failed to get link speed/duplex [ 684.589514][ T60] bond16: (slave bridge12): failed to get link speed/duplex [ 684.678248][T28437] tipc: Enabling of bearer rejected, already enabled [ 684.759932][ T48] bond16: (slave bridge12): failed to get link speed/duplex [ 684.889639][ T60] bond16: (slave bridge12): failed to get link speed/duplex [ 684.968352][T28449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8984'. [ 685.009527][ T60] bond16: (slave bridge12): failed to get link speed/duplex [ 685.052124][T28451] syzkaller0: entered promiscuous mode [ 685.069215][T28451] syzkaller0: entered allmulticast mode [ 685.278210][T28442] netlink: 64 bytes leftover after parsing attributes in process `syz.2.8982'. [ 685.704642][T28466] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 686.010736][T28475] tc action pedit 'at' offset 6 out of bounds [ 686.166470][T28472] macsec1: entered promiscuous mode [ 686.262199][T28482] syzkaller0: entered promiscuous mode [ 686.267874][T28482] syzkaller0: entered allmulticast mode [ 686.295362][T28482] tipc: Enabled bearer , priority 0 [ 686.325417][T28482] tipc: Resetting bearer [ 686.348750][T28481] tipc: Resetting bearer [ 686.397524][T28481] tipc: Disabling bearer [ 686.515156][T28491] netlink: 200 bytes leftover after parsing attributes in process `syz.1.8998'. [ 686.534785][T28491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8998'. [ 686.816702][T28498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.845776][T28498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 687.249730][T28522] netlink: 52 bytes leftover after parsing attributes in process `syz.4.9005'. [ 687.713106][T28535] vlan7: entered promiscuous mode [ 687.718344][T28535] hsr0: entered promiscuous mode [ 687.725211][T28535] vlan7: entered allmulticast mode [ 687.737619][T28535] hsr0: entered allmulticast mode [ 687.745228][T28535] hsr_slave_0: entered allmulticast mode [ 687.751432][T28535] hsr_slave_1: entered allmulticast mode [ 687.771937][T28536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9006'. [ 687.833732][T28537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9007'. [ 687.854918][T28537] hsr_slave_0: left promiscuous mode [ 687.880747][T28537] hsr_slave_1: left promiscuous mode [ 688.100286][ T177] net_ratelimit: 26 callbacks suppressed [ 688.100305][ T177] bond16: (slave bridge12): failed to get link speed/duplex [ 688.242042][ T1170] bond16: (slave bridge12): failed to get link speed/duplex [ 688.390308][ T60] bond16: (slave bridge12): failed to get link speed/duplex [ 688.520441][ T1170] bond16: (slave bridge12): failed to get link speed/duplex [ 688.639827][ T1170] bond16: (slave bridge12): failed to get link speed/duplex [ 688.780248][ T1170] bond16: (slave bridge12): failed to get link speed/duplex [ 688.849770][T28579] netlink: 'syz.0.9020': attribute type 1 has an invalid length. [ 689.010964][T28579] bond24: (slave gretap4): making interface the new active one [ 689.022203][T28588] xt_CT: You must specify a L4 protocol and not use inversions on it [ 689.055570][T28579] bond24: (slave gretap4): Enslaving as an active interface with an up link [ 689.110681][T28582] macvlan7: entered promiscuous mode [ 689.118807][T28582] macvlan7: entered allmulticast mode [ 689.125365][T28582] bond24: entered promiscuous mode [ 689.133197][T28582] gretap4: entered promiscuous mode [ 689.139856][T28582] 8021q: adding VLAN 0 to HW filter on device macvlan7 [ 689.158558][T28582] bond24: (slave macvlan7): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 689.175140][T28582] bond24: left promiscuous mode [ 689.180459][T28582] gretap4: left promiscuous mode [ 689.204302][T28590] tipc: Enabled bearer , priority 0 [ 689.215295][T28585] syzkaller0: entered promiscuous mode [ 689.226745][T28596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9024'. [ 689.227484][T28585] syzkaller0: entered allmulticast mode [ 689.276840][T28590] tipc: Resetting bearer [ 689.297137][T28592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.308001][T28596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9024'. [ 689.322891][T28592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 689.335583][T28584] tipc: Resetting bearer [ 689.409201][T28584] tipc: Disabling bearer [ 689.432604][ T1170] bond16: (slave bridge12): failed to get link speed/duplex [ 689.474524][T28602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9025'. [ 689.551321][ T1170] bond16: (slave bridge12): failed to get link speed/duplex [ 689.671527][T28611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9028'. [ 689.680826][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 689.800643][ T1170] bond16: (slave bridge12): failed to get link speed/duplex [ 689.998081][T28628] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9031'. [ 690.035523][T28628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9031'. [ 690.151837][T28634] netlink: 164 bytes leftover after parsing attributes in process `syz.4.9032'. [ 690.176591][T28640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 690.180860][T28634] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9032'. [ 690.374153][T28646] syzkaller0: entered promiscuous mode [ 690.391679][T28646] syzkaller0: entered allmulticast mode [ 690.444052][T28651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9036'. [ 690.509151][T28658] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9036'. [ 690.671125][T28651] 8021q: adding VLAN 0 to HW filter on device bond25 [ 690.885509][T28679] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 690.911342][T28681] xt_CT: You must specify a L4 protocol and not use inversions on it [ 691.517418][T28701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 691.566642][T28703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.579081][T28703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 691.637627][T28706] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 691.653826][T28710] netlink: 'syz.0.9050': attribute type 1 has an invalid length. [ 691.660735][T28706] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 691.677249][T28710] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9050'. [ 691.826717][T28721] netlink: 'syz.4.9053': attribute type 27 has an invalid length. [ 691.838141][ T30] audit: type=1800 audit(1780762960.680:18): pid=28716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9050" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=9386 res=0 errno=0 [ 692.557884][T28752] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9057'. [ 692.574441][T28752] tipc: Enabling of bearer rejected, already enabled [ 692.644582][T28754] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 692.656368][T28754] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 692.827816][T28764] netlink: 'syz.0.9062': attribute type 1 has an invalid length. [ 693.094713][T28781] xt_CT: You must specify a L4 protocol and not use inversions on it [ 693.179936][T13183] net_ratelimit: 28 callbacks suppressed [ 693.179956][T13183] bond16: (slave bridge12): failed to get link speed/duplex [ 693.330369][ T163] bond16: (slave bridge12): failed to get link speed/duplex [ 693.450268][ T163] bond16: (slave bridge12): failed to get link speed/duplex [ 693.580060][ T1170] bond16: (slave bridge12): failed to get link speed/duplex [ 693.709477][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 693.839490][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 693.961604][ T163] bond16: (slave bridge12): failed to get link speed/duplex [ 694.079544][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 694.109563][ T30] audit: type=1804 audit(1780762962.950:19): pid=28815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.9075" name="/newroot/1860/memory.events" dev="tmpfs" ino=9488 res=1 errno=0 [ 694.181551][ T30] audit: type=1800 audit(1780762962.950:20): pid=28815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9075" name="memory.events" dev="tmpfs" ino=9488 res=0 errno=0 [ 694.213720][ T60] bond16: (slave bridge12): failed to get link speed/duplex [ 694.370941][T13187] bond16: (slave bridge12): failed to get link speed/duplex [ 694.598257][T28835] tun0: tun_chr_ioctl cmd 1074025675 [ 694.618763][T28835] tun0: persist enabled [ 694.656145][T28835] tun0: tun_chr_ioctl cmd 1074025675 [ 694.675260][T28835] tun0: persist enabled [ 694.727698][T28830] tun0: tun_chr_ioctl cmd 1074025673 [ 694.894449][T28850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 695.100814][T28858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 695.134266][T28855] __nla_validate_parse: 3 callbacks suppressed [ 695.134286][T28855] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9086'. [ 695.504464][T28869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9090'. [ 695.576194][T28869] team2: entered promiscuous mode [ 695.586381][T28869] team2: entered allmulticast mode [ 695.600834][T28869] 8021q: adding VLAN 0 to HW filter on device team2 [ 695.616940][T28877] pim6reg1: entered promiscuous mode [ 695.622970][T28877] pim6reg1: entered allmulticast mode [ 695.633349][T28879] tipc: Enabling of bearer rejected, already enabled [ 695.887978][T28888] xt_CT: You must specify a L4 protocol and not use inversions on it [ 696.065347][T28894] netlink: 204 bytes leftover after parsing attributes in process `syz.4.9098'. [ 696.110948][T28903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9100'. [ 696.138897][T28904] netlink: 732 bytes leftover after parsing attributes in process `syz.0.9101'. [ 696.173379][T28904] netlink: 732 bytes leftover after parsing attributes in process `syz.0.9101'. [ 696.275443][T28908] netlink: 'syz.0.9101': attribute type 10 has an invalid length. [ 696.312753][T28908] dummy0: left promiscuous mode [ 696.472546][T28913] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 696.810413][T28924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9106'. [ 696.938940][T28928] tc action pedit 'at' offset 46 out of bounds [ 697.061422][T28932] syzkaller0: entered promiscuous mode [ 697.080085][T28932] syzkaller0: entered allmulticast mode [ 697.168091][T28938] syzkaller0: entered promiscuous mode [ 697.188150][T28938] syzkaller0: entered allmulticast mode [ 697.209006][ T30] audit: type=1804 audit(1780762966.050:21): pid=28940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9112" name="/newroot/1794/cgroup.controllers" dev="tmpfs" ino=9112 res=1 errno=0 [ 697.257634][ T30] audit: type=1800 audit(1780762966.080:22): pid=28940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9112" name="cgroup.controllers" dev="tmpfs" ino=9112 res=0 errno=0 [ 697.421963][T28948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.437077][T28948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 697.474020][T28950] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9115'. [ 697.580085][T13183] Unknown metaid 0 dlen 28 [ 697.800708][T28969] syzkaller0: entered promiscuous mode [ 697.814969][T28969] syzkaller0: entered allmulticast mode [ 697.924845][T28972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 698.250189][T13183] net_ratelimit: 25 callbacks suppressed [ 698.250209][T13183] bond16: (slave bridge12): failed to get link speed/duplex [ 698.369718][ T163] bond16: (slave bridge12): failed to get link speed/duplex [ 698.499831][T13183] bond16: (slave bridge12): failed to get link speed/duplex [ 698.523863][T29008] netlink: 'syz.3.9132': attribute type 1 has an invalid length. [ 698.649737][T29008] bond15: (slave geneve5): making interface the new active one [ 698.677210][T29008] bond15: (slave geneve5): Enslaving as an active interface with an up link [ 698.720587][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 698.750006][ T163] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 698.789133][ T163] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 698.861460][T29019] bond15 (unregistering): (slave geneve5): Releasing active interface [ 698.906239][T29019] bond15 (unregistering): Released all slaves [ 698.950110][ T163] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 698.959805][ T163] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 699.004196][ T163] bond16: (slave bridge12): failed to get link speed/duplex [ 699.023482][T29008] syz.3.9132 (29008) used greatest stack depth: 16864 bytes left [ 699.129827][ T163] bond16: (slave bridge12): failed to get link speed/duplex [ 699.212098][T29034] pimreg9: entered allmulticast mode [ 699.262572][T29041] netlink: 104 bytes leftover after parsing attributes in process `syz.1.9138'. [ 699.269807][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 699.389764][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 699.462665][T29047] syzkaller0: entered promiscuous mode [ 699.481686][T29047] syzkaller0: entered allmulticast mode [ 699.590547][T29052] xt_CT: You must specify a L4 protocol and not use inversions on it [ 699.600312][T13183] bond16: (slave bridge12): failed to get link speed/duplex [ 699.656184][T29046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9140'. [ 699.740697][T13187] bond16: (slave bridge12): failed to get link speed/duplex [ 700.255790][ T30] audit: type=1800 audit(1780762969.100:23): pid=29077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.9149" name="memory.events" dev="tmpfs" ino=9541 res=0 errno=0 [ 700.428472][T29084] __nla_validate_parse: 4 callbacks suppressed [ 700.428493][T29084] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9151'. [ 701.293061][T29089] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 701.371479][T29089] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 701.616534][T29105] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 701.994531][T29122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9162'. [ 702.042604][T13187] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.051734][T13187] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.061002][T13187] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.072008][T29122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9162'. [ 702.081684][T13187] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.093015][T29122] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9162'. [ 702.202592][T29127] netlink: 'syz.0.9165': attribute type 1 has an invalid length. [ 702.258949][T29128] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9163'. [ 702.304405][T29127] bond26: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 702.342592][T29131] syzkaller0: entered promiscuous mode [ 702.361143][T29131] syzkaller0: entered allmulticast mode [ 702.375613][T29133] xt_CT: You must specify a L4 protocol and not use inversions on it [ 702.414916][T29127] veth25: entered promiscuous mode [ 702.422638][T29133] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9166'. [ 702.441850][T29127] bond26: (slave veth25): Enslaving as a backup interface with a down link [ 702.445795][T29137] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9165'. [ 702.528551][T29137] 8021q: adding VLAN 0 to HW filter on device bond26 [ 702.669276][T29143] xt_CT: You must specify a L4 protocol and not use inversions on it [ 702.702828][T29143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9169'. [ 702.778125][T29149] syzkaller0: entered promiscuous mode [ 702.804736][T29149] syzkaller0: entered allmulticast mode [ 702.997229][T29162] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 703.033936][T29162] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 703.299579][ T163] net_ratelimit: 23 callbacks suppressed [ 703.299599][ T163] bond16: (slave bridge12): failed to get link speed/duplex [ 703.439604][T13183] bond16: (slave bridge12): failed to get link speed/duplex [ 703.484912][T29152] lo speed is unknown, defaulting to 1000 [ 703.559851][T13183] bond16: (slave bridge12): failed to get link speed/duplex [ 703.689652][ T163] bond16: (slave bridge12): failed to get link speed/duplex [ 703.822070][ T1170] bond16: (slave bridge12): failed to get link speed/duplex [ 704.004503][T29183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 704.033593][T29183] 8021q: adding VLAN 0 to HW filter on device team0 [ 704.113507][T29183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 704.191969][T29187] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9179'. [ 704.314729][T29183] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 704.351420][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 704.403199][T29152] lo speed is unknown, defaulting to 1000 [ 704.415612][T29158] lo speed is unknown, defaulting to 1000 [ 704.639535][ T1170] bond16: (slave bridge12): failed to get link speed/duplex [ 704.839580][ T163] bond16: (slave bridge12): failed to get link speed/duplex [ 704.911782][T29193] team0: No ports can be present during mode change [ 704.952038][T29195] syzkaller0: entered promiscuous mode [ 704.970181][T29195] syzkaller0: entered allmulticast mode [ 705.044393][T29158] lo speed is unknown, defaulting to 1000 [ 705.054501][T29197] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 705.077244][T29197] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 705.096203][T29201] xt_CT: You must specify a L4 protocol and not use inversions on it [ 705.122023][T29201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9184'. [ 705.466125][T29215] sctp: [Deprecated]: syz.3.9189 (pid 29215) Use of int in max_burst socket option. [ 705.466125][T29215] Use struct sctp_assoc_value instead [ 705.505898][T29208] tipc: Enabling of bearer rejected, already enabled [ 705.535327][T29213] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9188'. [ 705.559654][ T13] bond16: (slave bridge12): failed to get link speed/duplex [ 705.837418][T29225] xt_CT: You must specify a L4 protocol and not use inversions on it [ 705.893499][T29225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9190'. [ 706.441350][T29243] xt_CT: You must specify a L4 protocol and not use inversions on it [ 706.473654][T29238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9196'. [ 706.643421][T29247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9199'. [ 706.696007][T29218] lo speed is unknown, defaulting to 1000 [ 706.802023][T29249] syzkaller0: entered promiscuous mode [ 706.812053][T29249] syzkaller0: entered allmulticast mode [ 707.013780][T29258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9204'. [ 707.076080][T29218] lo speed is unknown, defaulting to 1000 [ 708.443021][ T163] net_ratelimit: 17 callbacks suppressed [ 708.443044][ T163] bond16: (slave bridge12): failed to get link speed/duplex [ 708.589480][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 708.721738][ T1170] bond16: (slave bridge12): failed to get link speed/duplex [ 708.859520][ T1170] bond16: (slave bridge12): failed to get link speed/duplex [ 708.989472][ T1170] bond16: (slave bridge12): failed to get link speed/duplex [ 709.083558][T29286] lo speed is unknown, defaulting to 1000 [ 709.109584][T13181] bond16: (slave bridge12): failed to get link speed/duplex [ 709.218008][T29309] netlink: 75 bytes leftover after parsing attributes in process `syz.4.9218'. [ 709.229779][ T1170] bond16: (slave bridge12): failed to get link speed/duplex [ 709.261387][T29309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.270655][T29309] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.277775][T29311] IPv6: Can't replace route, no match found [ 709.290744][T29311] IPv6: Can't replace route, no match found [ 709.297116][T29309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.411037][T29309] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 709.491475][ T177] bond16: (slave bridge12): failed to get link speed/duplex [ 709.534464][T29286] lo speed is unknown, defaulting to 1000 [ 709.640198][T13183] bond16: (slave bridge12): failed to get link speed/duplex [ 709.994003][T29310] lo speed is unknown, defaulting to 1000 [ 709.998826][T29325] syzkaller0: entered promiscuous mode [ 710.015576][T29325] syzkaller0: entered allmulticast mode [ 710.052522][T29325] simple: basic_1 [ 710.057347][T29325] simple: basic_2 [ 710.061076][T29325] simple: basic_3 [ 710.064769][T29325] simple: basic_4 [ 710.068435][T29325] simple: basic_5 [ 710.072128][T29325] simple: basic_6 [ 710.075775][T29325] simple: basic_7 [ 710.079461][T29325] simple: basic_8 [ 710.083123][T29325] simple: basic_9 [ 710.086778][T29325] simple: basic_10 [ 710.090568][T29325] simple: basic_11 [ 710.094332][T29325] simple: basic_12 [ 710.098070][T29325] simple: basic_13 [ 710.101849][T29325] simple: basic_14 [ 710.105630][T29325] simple: basic_15 [ 710.109401][T29325] simple: basic_16 [ 710.113147][T29325] simple: basic_17 [ 710.476522][T29331] bridge11: port 1(erspan0) entered disabled state [ 710.664927][T29331] bridge0: port 3(vlan3) entered disabled state [ 710.671475][T29331] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.678712][T29331] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.148562][T29331] veth0_vlan: left promiscuous mode [ 711.427266][T29345] netlink: 'syz.4.9227': attribute type 1 has an invalid length. [ 711.449480][T29345] netlink: 244 bytes leftover after parsing attributes in process `syz.4.9227'. [ 711.477605][T29345] NCSI netlink: No device for ifindex 0 [ 711.615420][T29310] lo speed is unknown, defaulting to 1000 [ 711.628025][ T177] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.656726][ T177] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.754389][ T177] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.796385][ T177] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.923429][T29351] netlink: 'syz.4.9229': attribute type 11 has an invalid length. [ 711.941741][T29351] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.9229'. [ 712.161065][T29350] bond20 (unregistering): Released all slaves [ 712.373738][T29339] lo speed is unknown, defaulting to 1000 [ 712.595437][T29379] tipc: Enabled bearer , priority 0 [ 712.618274][T29379] tipc: Resetting bearer [ 712.767395][T29386] netlink: 'syz.3.9237': attribute type 1 has an invalid length. [ 713.128526][T29339] lo speed is unknown, defaulting to 1000 [ 713.411682][T29403] tipc: Enabling of bearer rejected, already enabled [ 713.637757][T29406] net_ratelimit: 5 callbacks suppressed [ 713.637776][T29406] syzkaller0: mtu less than device minimum [ 713.739638][ C1] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 714.959276][T29462] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.200617][T29462] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.218680][T29473] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9249'. [ 715.334098][T29462] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.445865][T29477] netlink: 'syz.1.9252': attribute type 4 has an invalid length. [ 715.470866][T29477] netlink: 'syz.1.9252': attribute type 4 has an invalid length. [ 715.479591][T29462] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 715.512944][T29477] netlink: 'syz.1.9252': attribute type 4 has an invalid length. [ 715.656357][ T163] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.717702][T13181] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.771716][T13181] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.819111][T13181] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 715.842014][T29484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.866130][T29484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 716.273219][T29499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9257'. [ 717.172705][T29521] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9260'. [ 717.334909][T29527] tipc: Enabling of bearer rejected, failed to enable media [ 717.846272][T29555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9266'. [ 717.887448][T29557] netlink: 'syz.3.9267': attribute type 1 has an invalid length. [ 717.938435][T29557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.033461][T29561] syzkaller0: entered promiscuous mode [ 718.039236][T29561] syzkaller0: entered allmulticast mode [ 718.724017][T29572] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9271'. [ 718.777005][T29570] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9272'. [ 719.341351][T29581] netlink: 'syz.3.9275': attribute type 1 has an invalid length. [ 719.370639][T29459] Set syz1 is full, maxelem 65536 reached [ 719.491216][T29588] netlink: 'syz.4.9278': attribute type 13 has an invalid length. [ 719.555926][T29593] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 719.574802][T29593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.585053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.657987][T29589] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 719.818268][T29602] syzkaller0: entered promiscuous mode [ 719.829897][T29602] syzkaller0: entered allmulticast mode [ 720.044623][T29600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9283'. [ 720.076201][T29615] syzkaller0: entered promiscuous mode [ 720.081939][T29615] syzkaller0: entered allmulticast mode [ 720.175442][T29600] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9283'. [ 720.231091][T29615] tipc: Enabled bearer , priority 0 [ 720.250043][T29621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9287'. [ 720.269777][T29614] tipc: Resetting bearer [ 720.277766][T29622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9288'. [ 720.289829][T29622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9288'. [ 720.316600][T29621] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 720.382079][T29614] tipc: Disabling bearer [ 720.559509][T29605] lo speed is unknown, defaulting to 1000 [ 720.581954][T29634] sctp: [Deprecated]: syz.1.9292 (pid 29634) Use of int in max_burst socket option. [ 720.581954][T29634] Use struct sctp_assoc_value instead [ 720.708424][T29642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9291'. [ 720.833291][T29643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 720.942150][T29648] ipvlan3: entered allmulticast mode [ 720.957354][T29648] gretap0: entered allmulticast mode [ 721.394394][T29605] lo speed is unknown, defaulting to 1000 [ 722.119882][T29681] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 722.139488][T29681] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 722.156533][T29640] lo speed is unknown, defaulting to 1000 [ 722.542751][T29640] lo speed is unknown, defaulting to 1000 [ 723.851447][T29715] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 724.658152][T29746] __nla_validate_parse: 5 callbacks suppressed [ 724.658170][T29746] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9309'. [ 724.694906][T29746] openvswitch: netlink: Key type 769 is out of range max 32 [ 725.082767][T29751] tipc: Failed to remove unknown binding: 66,0,0/10005162:49483264/49483266 [ 725.118986][T29751] tipc: Failed to remove unknown binding: 66,0,0/10005162:49483264/49483265 [ 725.324162][T29757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9312'. [ 725.351114][T29757] mac80211_hwsim hwsim9 syzkaller0: Caught tx_queue_len zero misconfig [ 725.366658][T29759] tipc: Failed to remove unknown binding: 66,0,0/10005162:49483264/49483266 [ 725.410179][T29759] tipc: Failed to remove unknown binding: 66,0,0/10005162:49483264/49483265 [ 725.632639][T29753] lo speed is unknown, defaulting to 1000 [ 725.910004][T29769] syzkaller0: entered promiscuous mode [ 725.924109][T29769] syzkaller0: entered allmulticast mode [ 726.123679][T29753] lo speed is unknown, defaulting to 1000 [ 726.190472][T29774] syzkaller0: entered promiscuous mode [ 726.196129][T29774] syzkaller0: entered allmulticast mode [ 727.210414][T29790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9322'. [ 727.257817][T29793] netlink: 'syz.2.9320': attribute type 1 has an invalid length. [ 727.374764][T29800] netlink: 'syz.1.9323': attribute type 13 has an invalid length. [ 727.400349][T29799] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9320'. [ 727.478371][T29797] bond20: (slave geneve4): making interface the new active one [ 727.499164][T29797] bond20: (slave geneve4): Enslaving as an active interface with an up link [ 727.649270][T29799] 8021q: adding VLAN 0 to HW filter on device bond20 [ 727.664699][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 727.696507][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 727.767987][T29803] netlink: 'syz.1.9323': attribute type 2 has an invalid length. [ 727.782180][T29793] tipc: Resetting bearer [ 727.803394][T29803] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9323'. [ 727.878857][ T13] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 727.934704][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 728.115408][T29809] netlink: 'syz.2.9325': attribute type 1 has an invalid length. [ 728.142795][T29809] netlink: 'syz.2.9325': attribute type 1 has an invalid length. [ 728.175568][T29809] sctp: [Deprecated]: syz.2.9325 (pid 29809) Use of struct sctp_assoc_value in delayed_ack socket option. [ 728.175568][T29809] Use struct sctp_sack_info instead [ 728.481228][T29827] bond17: (slave macvlan0): Releasing active interface [ 728.500510][T29827] bond4: (slave gretap1): Releasing active interface [ 728.515090][T29827] bond6: (slave vti0): Releasing backup interface [ 728.521750][T29827] vti0: left promiscuous mode [ 728.531581][T29827] bond9: (slave veth15): Releasing active interface [ 728.547155][T29827] bond9: (slave veth15): the permanent HWaddr of slave - ce:b0:a6:7f:1e:ff - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 728.565142][T29827] batadv0: entered promiscuous mode [ 728.579806][T29827] bond9: (slave batadv0): Releasing active interface [ 728.586577][T29827] batadv0: left promiscuous mode [ 728.593649][T29834] netlink: 'syz.0.9331': attribute type 10 has an invalid length. [ 728.619930][T29827] bond11: (slave veth19): Releasing active interface [ 728.646478][T29827] bond12: (slave veth21): Releasing backup interface [ 728.667888][T29827] bond16: (slave bridge6): Releasing backup interface [ 728.689415][T29827] bridge6: left promiscuous mode [ 728.700079][T29827] bridge6: left allmulticast mode [ 728.711860][T29827] bond18: (slave bridge7): Releasing backup interface [ 728.718950][T29827] bridge7: left promiscuous mode [ 728.724952][T29827] bridge7: left allmulticast mode [ 728.735692][T29827] bond20: (slave gretap3): Releasing active interface [ 728.747014][T29827] bond22: (slave bridge9): Releasing backup interface [ 728.754655][T29827] bridge9: left promiscuous mode [ 728.760760][T29827] bridge9: left allmulticast mode [ 728.771952][T29827] bond24: (slave gretap4): Releasing active interface [ 728.787966][T29827] bond26: (slave ip6gretap1): Removing an active aggregator [ 728.797591][T29827] bond26: (slave ip6gretap1): Releasing backup interface [ 728.805443][T29827] bond26: (slave ip6gretap1): the permanent HWaddr of slave - 1a:97:2e:6d:52:7f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 728.833920][T29827] bond26: (slave veth25): Releasing backup interface [ 728.846547][T29828] batadv_slave_0: Caught tx_queue_len zero misconfig [ 728.982574][T29839] netlink: 'syz.1.9332': attribute type 1 has an invalid length. [ 728.991094][T29839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 729.014702][T29839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9332'. [ 729.033647][T29839] veth1_to_hsr (unregistering): left promiscuous mode [ 729.045532][T29841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9333'. [ 729.054749][T29841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9333'. [ 729.064397][T29841] netlink: 58 bytes leftover after parsing attributes in process `syz.2.9333'. [ 729.477761][T29847] macsec1: entered promiscuous mode [ 729.515054][T29860] batadv0: entered promiscuous mode [ 729.529629][T29860] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 729.928118][T29868] geneve3: entered promiscuous mode [ 729.937391][T13181] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 55041 - 0 [ 729.946379][T13181] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 55041 - 0 [ 729.955900][T13181] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 55041 - 0 [ 729.965878][T13181] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 55041 - 0 [ 730.138414][T29876] tipc: Enabled bearer , priority 0 [ 730.147629][T29876] syzkaller0: entered promiscuous mode [ 730.153553][T29876] syzkaller0: entered allmulticast mode [ 730.178378][T29876] tipc: Resetting bearer [ 730.187591][T29874] tipc: Resetting bearer [ 730.198149][T29878] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9341'. [ 730.214517][T29874] tipc: Disabling bearer [ 730.650317][T29892] block nbd9: server does not support multiple connections per device. [ 730.660260][T29895] lo: Caught tx_queue_len zero misconfig [ 730.682717][T29892] block nbd9: shutting down sockets [ 731.164572][T29909] xt_cgroup: invalid path, errno=-2 [ 731.576906][T29917] xt_CT: You must specify a L4 protocol and not use inversions on it [ 731.599255][T29915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9354'. [ 731.742167][T29924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 731.756895][T29924] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9356'. [ 731.873013][ T30] audit: type=1804 audit(1780763000.720:24): pid=29936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.9360" name="/newroot/1848/cgroup.controllers" dev="tmpfs" ino=9396 res=1 errno=0 [ 731.934190][ T30] audit: type=1800 audit(1780763000.740:25): pid=29936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9360" name="cgroup.controllers" dev="tmpfs" ino=9396 res=0 errno=0 [ 732.603272][T29946] netlink: 'syz.1.9363': attribute type 1 has an invalid length. [ 732.686802][T29946] 8021q: adding VLAN 0 to HW filter on device bond15 [ 732.716148][T29950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9363'. [ 732.792331][T29949] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 732.899239][T29950] bond15: entered allmulticast mode [ 733.166712][T29965] erspan0: left promiscuous mode [ 733.177353][T29965] bridge0: left allmulticast mode [ 733.191972][T29965] team0: left promiscuous mode [ 733.204714][T29965] team_slave_0: left promiscuous mode [ 733.215043][T29965] team_slave_1: left promiscuous mode [ 733.226723][T29965] batadv1: left promiscuous mode [ 733.240338][T29965] team0: left allmulticast mode [ 733.250445][T29965] team_slave_0: left allmulticast mode [ 733.264620][T29965] team_slave_1: left allmulticast mode [ 733.276929][T29965] batadv1: left allmulticast mode [ 733.289080][T29965] hsr1: left allmulticast mode [ 733.300928][T29965] dummy0: left allmulticast mode [ 733.310763][T29965] veth0_to_bond: left allmulticast mode [ 733.321424][T29965] geneve2: left promiscuous mode [ 733.333598][T29965] ip6tnl2: left promiscuous mode [ 733.342601][T29965] geneve3: left promiscuous mode [ 733.352606][T29965] geneve3: left allmulticast mode [ 733.371906][T29965] vlan3: left promiscuous mode [ 733.378926][T29965] geneve1: left promiscuous mode [ 733.385850][T29965] vlan3: left allmulticast mode [ 733.398092][T29965] geneve1: left allmulticast mode [ 733.411068][T29965] ip6gre1: left promiscuous mode [ 733.420443][T29965] ip6gre1: left allmulticast mode [ 733.438811][T29965] bond7: left promiscuous mode [ 733.450300][T29965] bond7: left allmulticast mode [ 733.475918][T29965] bond10: left allmulticast mode [ 733.494882][T29965] ip6gretap1: left allmulticast mode [ 733.517417][T29965] bond11: left promiscuous mode [ 733.537321][T29965] bond11: left allmulticast mode [ 733.552800][T29965] bond12: left promiscuous mode [ 733.565330][T29965] bond12: left allmulticast mode [ 733.577685][T29965] vlan4: left promiscuous mode [ 733.588606][T29965] bond13: left promiscuous mode [ 733.604230][T29965] bridge8: left promiscuous mode [ 733.624680][T29965] vlan4: left allmulticast mode [ 733.639386][T29965] bond13: left allmulticast mode [ 733.657655][T29965] bridge8: left allmulticast mode [ 733.673095][T29965] bond14: left promiscuous mode [ 733.686986][T29965] bridge9: left promiscuous mode [ 733.703738][T29965] ipvlan2: left allmulticast mode [ 733.721704][T29965] bond14: left allmulticast mode [ 733.738521][T29965] bridge9: left allmulticast mode [ 733.754766][T29965] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 733.766767][T29965] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 734.155226][T29978] netlink: 'syz.0.9372': attribute type 1 has an invalid length. [ 734.554727][T29992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9375'. [ 734.873883][T30003] xt_CT: You must specify a L4 protocol and not use inversions on it [ 734.893037][T30007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9381'. [ 734.911893][T30003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9380'. [ 735.376705][T30028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9386'. [ 735.705643][T30040] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9389'. [ 735.744021][T30045] netlink: 108 bytes leftover after parsing attributes in process `syz.4.9388'. [ 735.764599][T30044] netlink: 288 bytes leftover after parsing attributes in process `syz.2.9390'. [ 735.806717][T30044] openvswitch: netlink: Flow key attr not present in new flow. [ 735.978741][T30041] batadv0: left promiscuous mode [ 735.998272][T30058] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 736.041894][T30041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 736.275799][T30041] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 736.443281][T30051] tipc: Enabled bearer , priority 0 [Read from remote host us-central1-ssh-serialport.googleapis.com: Connection reset by peer client_loop: send disconnect: Broken pipe