last executing test programs: 3.078847942s ago: executing program 1 (id=3810): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe3}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd33848702930", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c1", 0x2a}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f5312", 0x95}], 0x4}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acbcb2fb79a7d7857d41bca238e0548c5e955d74bbb106fe965274cbb3a29b895df0b4e028b6d65c115b81328e0b660253f1c9a359dde67917fa232e2f566483ddbb93ff9b103c1cac356c9f0f6ab5fe77ea4610f71ec6dc988fddf29b8d0b6aaa82752580b62b5f51800d10077f07319b6ffeff06e4dea184fd7a0a0f4d441763e30d1bc475502a1de1ffbc0e30cb1", 0x161}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e15361", 0x84}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.158144606s ago: executing program 1 (id=3822): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.968915464s ago: executing program 1 (id=3826): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x0, 0xfffffffe, 0x693fffd, 0x80, 0x9}, &(0x7f0000000380)=0x9c) 1.486070835s ago: executing program 3 (id=3841): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) unshare(0x8040480) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, 0x0, 0x8) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x14, r2, 0x701, 0x70bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) 1.380708819s ago: executing program 3 (id=3844): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x1, 0x7fff}, 0x2) 1.196594883s ago: executing program 3 (id=3849): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 1.040101345s ago: executing program 1 (id=3853): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x2803}, 0xe) 963.308615ms ago: executing program 1 (id=3855): sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, 0x0, 0x735}, 0x14}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000400010000001c001a8018000a80140007"], 0x58}, 0x1, 0x2}, 0x80) 857.999547ms ago: executing program 0 (id=3856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001000)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0xc854}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8849}, 0x20004804) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 809.48271ms ago: executing program 3 (id=3857): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x100}}], 0x18}, 0x4044) 756.870654ms ago: executing program 1 (id=3858): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de2500", 0x39}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0db", 0xb7}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 728.938493ms ago: executing program 2 (id=3860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f00000013c0)=ANY=[@ANYBLOB="3000000007060103000000000000000005000007080006400000000205000100"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x800) 703.367621ms ago: executing program 4 (id=3861): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x3, 0x0, 0x3, 0x4, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x7ffffffe}]}, 0x20}, 0x1, 0x7}, 0x0) 615.822701ms ago: executing program 0 (id=3862): r0 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) listen(r0, 0xffffffff) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) 615.625008ms ago: executing program 3 (id=3863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000fc0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 566.194112ms ago: executing program 4 (id=3864): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f0000000e80)="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", 0x11e}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d340", 0x30}, {&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6", 0x5f}], 0x4}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="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", 0x161}, {&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a2", 0x53}], 0x2}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 563.987993ms ago: executing program 0 (id=3865): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e23, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0xfffffffffffff11c, 0x81, 0x9, 0x7}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x0) 520.784636ms ago: executing program 2 (id=3866): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 520.653564ms ago: executing program 3 (id=3867): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @remote, @remote}}}}, 0x0) 440.25536ms ago: executing program 4 (id=3868): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x404) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602019900000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 432.174096ms ago: executing program 2 (id=3869): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth1_to_bond\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x57, 0x0, 0x0, 0x0, 0x1, '\x00', r1}, 0x94) 380.95247ms ago: executing program 0 (id=3870): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f000000aa40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f000000aa80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f000000af00)={0x0, 0x0, &(0x7f000000aec0)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000000}, 0x80) 364.699178ms ago: executing program 4 (id=3871): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x40880) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x7}, &(0x7f00000001c0)=0x8) 337.893166ms ago: executing program 2 (id=3872): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000580), r0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8804) 216.19341ms ago: executing program 4 (id=3873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="997425bd7000fbdbdf2515000000400001800d0001"], 0x54}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) 131.002901ms ago: executing program 4 (id=3874): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xd0, 0x0, &(0x7f0000000940)) 125.857813ms ago: executing program 0 (id=3875): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x38, r3, 0x1, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x52}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]]}, 0x38}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000140)={@null, @null, @null, 0x63, 0xcff5, 0x6, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) 72.706646ms ago: executing program 2 (id=3876): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000240)=""/4098, 0x1002}], 0x1}}], 0x1, 0x10002, 0x0) 41.300809ms ago: executing program 0 (id=3877): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x5, 0x2}, {0x10, 0x9}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 0s ago: executing program 2 (id=3878): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x24, r1, 0x5, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x200008d5}, 0x8080) kernel console output (not intermixed with test programs): 5.150060][T14915] netlink: 'syz.3.2302': attribute type 1 has an invalid length. [ 365.270353][T14916] xfrm0: Caught tx_queue_len zero misconfig [ 365.436435][T14929] dvmrp1: entered allmulticast mode [ 366.087502][T14956] netlink: 'syz.4.2317': attribute type 1 has an invalid length. [ 366.272558][T14966] net_ratelimit: 2026 callbacks suppressed [ 366.272580][T14966] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.146771][T15021] lo speed is unknown, defaulting to 1000 [ 367.268291][T15035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.277597][T15035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.286613][T15035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.316142][T15021] lo speed is unknown, defaulting to 1000 [ 367.349633][T15034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.409789][T15034] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.473101][T15042] netlink: 'syz.2.2339': attribute type 7 has an invalid length. [ 367.507408][T15042] netlink: 'syz.2.2339': attribute type 5 has an invalid length. [ 367.551268][ T29] audit: type=1107 audit(1771491667.808:7): pid=15039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 367.944677][T15063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.605992][T15080] lo speed is unknown, defaulting to 1000 [ 370.637732][T15080] lo speed is unknown, defaulting to 1000 [ 370.866575][T15107] __nla_validate_parse: 16 callbacks suppressed [ 370.866598][T15107] netlink: 708 bytes leftover after parsing attributes in process `syz.3.2355'. [ 370.954686][T15107] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 372.027712][T15142] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2364'. [ 372.049437][T15142] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2364'. [ 372.670139][T15192] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2378'. [ 372.725002][T15195] netlink: 'syz.1.2379': attribute type 1 has an invalid length. [ 373.181409][T15219] raw_sendmsg: syz.1.2385 forgot to set AF_INET. Fix it! [ 373.257132][T15224] netlink: 'syz.2.2387': attribute type 3 has an invalid length. [ 373.276972][T15224] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2387'. [ 373.339446][T15227] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2388'. [ 373.356648][T15215] lo speed is unknown, defaulting to 1000 [ 373.375008][T15215] lo speed is unknown, defaulting to 1000 [ 373.378268][T15227] bpq0: left promiscuous mode [ 373.558776][T15241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2390'. [ 373.641833][T15243] netlink: 'syz.1.2393': attribute type 1 has an invalid length. [ 374.142763][T15264] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2397'. [ 374.467643][T15273] netlink: 'syz.0.2398': attribute type 4 has an invalid length. [ 374.511234][T15273] netlink: 'syz.0.2398': attribute type 4 has an invalid length. [ 374.531667][T15277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2400'. [ 374.602204][T15278] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2400'. [ 374.656948][T15277] macvlan2: entered allmulticast mode [ 374.703170][T15278] macvlan3: entered allmulticast mode [ 374.749594][T15284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.781209][T15284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.856628][T15284] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.928620][T15291] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.941822][T15287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.953281][T15287] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.070366][T15291] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.185282][T15287] syzkaller1: entered promiscuous mode [ 375.191104][T15287] syzkaller1: entered allmulticast mode [ 375.215451][T15283] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.302707][T15291] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.452473][T15291] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.659923][ T41] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.733608][ T41] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.788071][T15320] vlan4: entered allmulticast mode [ 375.793403][T15320] team0: entered allmulticast mode [ 375.802117][T15320] team_slave_0: entered allmulticast mode [ 375.809727][T15320] žÿ: entered allmulticast mode [ 375.860468][ T41] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.911578][ T41] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.943351][T15331] xt_hashlimit: size too large, truncated to 1048576 [ 376.045780][T15340] netlink: 'syz.0.2415': attribute type 89 has an invalid length. [ 376.099923][T15340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.116580][T15335] __nla_validate_parse: 2 callbacks suppressed [ 376.116600][T15335] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2414'. [ 376.125752][T15340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.153237][T15341] bond6: Removing last arp target with arp_interval on [ 376.262183][T15340] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.441594][T15350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.524168][T15342] lo speed is unknown, defaulting to 1000 [ 376.569582][T15342] lo speed is unknown, defaulting to 1000 [ 377.341918][T15390] lo speed is unknown, defaulting to 1000 [ 377.376181][T15386] syzkaller0: entered promiscuous mode [ 377.388176][T15386] syzkaller0: entered allmulticast mode [ 377.939355][T15390] lo speed is unknown, defaulting to 1000 [ 378.001479][T15403] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2425'. [ 378.311768][T15410] lo speed is unknown, defaulting to 1000 [ 378.419362][T15410] lo speed is unknown, defaulting to 1000 [ 378.668687][T15423] netlink: 'syz.1.2430': attribute type 1 has an invalid length. [ 378.719225][T15423] 8021q: adding VLAN 0 to HW filter on device bond10 [ 378.749271][T15423] bond10: (slave syz_tun): making interface the new active one [ 378.760643][T15423] bond10: (slave syz_tun): Enslaving as an active interface with an up link [ 378.839854][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.846958][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.932180][T15427] IPVS: length: 120 != 24 [ 379.067544][T15430] mac80211_hwsim hwsim3 wlan1: Caught tx_queue_len zero misconfig [ 379.083597][T15430] netlink: 'syz.0.2432': attribute type 3 has an invalid length. [ 379.097428][T15430] netlink: 'syz.0.2432': attribute type 21 has an invalid length. [ 379.124458][T15430] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2432'. [ 379.345353][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 379.376007][T15438] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2435'. [ 379.440831][T15445] netlink: 'syz.0.2436': attribute type 11 has an invalid length. [ 379.452637][T15446] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2434'. [ 379.550819][T15448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2434'. [ 380.038528][T15459] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2439'. [ 380.139824][T15473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2444'. [ 380.146016][T15465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2442'. [ 380.451342][T15488] team0 (unregistering): Failed to send options change via netlink (err -105) [ 380.485059][T15488] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 380.505583][T15488] team0 (unregistering): Port device team_slave_0 removed [ 380.523974][T15488] team0 (unregistering): Failed to send options change via netlink (err -105) [ 380.563944][T15488] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 380.605227][T15488] team0 (unregistering): Port device team_slave_1 removed [ 380.625781][T15488] team0 (unregistering): Failed to send options change via netlink (err -105) [ 380.651537][T15488] team0 (unregistering): Failed to send port change of device erspan0 via netlink (err -105) [ 380.674955][T15488] team0 (unregistering): Port device erspan0 removed [ 380.696997][T15505] sctp: [Deprecated]: syz.4.2451 (pid 15505) Use of int in max_burst socket option deprecated. [ 380.696997][T15505] Use struct sctp_assoc_value instead [ 380.731434][T15501] ip6tnl0: Caught tx_queue_len zero misconfig [ 381.519251][T15544] __nla_validate_parse: 4 callbacks suppressed [ 381.519272][T15544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2462'. [ 381.869318][T15557] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2466'. [ 381.929109][T15561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2467'. [ 381.944522][T15561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2467'. [ 382.036038][T15567] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2470'. [ 382.051246][T15567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2470'. [ 382.075792][T15569] nbd: must specify a device to reconfigure [ 382.208627][T15571] SET target dimension over the limit! [ 382.228352][T15575] lo speed is unknown, defaulting to 1000 [ 382.240144][T15575] lo speed is unknown, defaulting to 1000 [ 382.376389][T15584] net_ratelimit: 261 callbacks suppressed [ 382.376412][T15584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.397547][T15579] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.412836][T15579] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2472'. [ 382.690570][T15595] netlink: 'syz.0.2477': attribute type 6 has an invalid length. [ 382.734943][T15598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2475'. [ 383.090670][T15611] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2481'. [ 383.108628][T15611] veth1_to_bond: entered allmulticast mode [ 383.503622][T15636] syzkaller0: entered promiscuous mode [ 383.527178][T15636] syzkaller0: entered allmulticast mode [ 383.812290][T15643] lo speed is unknown, defaulting to 1000 [ 383.835573][T15643] lo speed is unknown, defaulting to 1000 [ 383.867523][T15605] veth1_to_bond: left allmulticast mode [ 383.931000][T15657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2498'. [ 384.069978][T15667] netlink: 'syz.0.2501': attribute type 1 has an invalid length. [ 384.103853][T15660] lo speed is unknown, defaulting to 1000 [ 384.635973][T15660] lo speed is unknown, defaulting to 1000 [ 385.036410][T15709] netlink: 'syz.3.2510': attribute type 2 has an invalid length. [ 385.058955][T15713] netlink: 'syz.3.2510': attribute type 2 has an invalid length. [ 385.142443][T15709] : entered promiscuous mode [ 385.216586][T15716] veth19: entered promiscuous mode [ 385.222168][T15713] : left promiscuous mode [ 385.680881][T15736] xt_HMARK: proto mask must be zero with L3 mode [ 386.587887][T15788] __nla_validate_parse: 7 callbacks suppressed [ 386.587911][T15788] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2534'. [ 386.625391][T15788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'. [ 386.662567][T15790] bond4: option fail_over_mac: invalid value (127) [ 386.664418][T15788] netlink: 'syz.3.2534': attribute type 21 has an invalid length. [ 386.679572][T15790] bond4 (unregistering): Released all slaves [ 386.745090][T15795] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2534'. [ 387.200696][T15812] lo speed is unknown, defaulting to 1000 [ 387.219809][T15812] lo speed is unknown, defaulting to 1000 [ 387.331958][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 387.342234][T15823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2544'. [ 387.405108][T15823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2544'. [ 387.414112][T15823] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2544'. [ 387.661255][T15830] IPVS: length: 169 != 4584 [ 387.820507][T15840] batadv0: mtu less than device minimum [ 387.847383][T15840] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2546'. [ 388.583931][T15852] bond0: left promiscuous mode [ 388.592373][T15852] bond_slave_0: left promiscuous mode [ 388.610959][T15852] bond_slave_1: left promiscuous mode [ 388.662563][T15852] wg1: left promiscuous mode [ 388.674856][T15852] wg1: left allmulticast mode [ 388.707291][T15852] vlan0: left promiscuous mode [ 388.732100][T15852] macvtap0: left allmulticast mode [ 388.756134][T15852] gtp0: left allmulticast mode [ 388.774877][T15852] macsec1: left allmulticast mode [ 388.780320][T15852] xfrm1: left allmulticast mode [ 388.799018][T15852] bond4: left allmulticast mode [ 388.820007][T15852] vlan3: left allmulticast mode [ 388.826783][T15852] bridge6: left allmulticast mode [ 388.841455][T15852] gtp2: left promiscuous mode [ 388.847569][T15852] gtp2: left allmulticast mode [ 388.877250][T15852] ip6gretap1: left promiscuous mode [ 388.893150][T15852] ip6gretap1: left allmulticast mode [ 388.920459][T15852] veth13: left promiscuous mode [ 388.946144][T15852] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 388.959005][T15852] macvtap1: left promiscuous mode [ 389.000849][T15852] xfrm2: left promiscuous mode [ 389.021861][T15852] xfrm2: left allmulticast mode [ 389.043682][T15852] ip6tnl2: left promiscuous mode [ 389.054673][T15852] ip6tnl2: left allmulticast mode [ 389.066135][T15852] macvlan2: left allmulticast mode [ 389.090703][T15852] macvlan3: left allmulticast mode [ 389.132087][T15858] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2549'. [ 389.143807][T15858] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 389.170940][ T7116] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.204923][ T7116] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.238328][ T7116] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.309633][T15878] pim6reg: entered allmulticast mode [ 389.341887][T15881] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3 [ 389.344514][ T7116] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.367301][T15885] netlink: 364 bytes leftover after parsing attributes in process `syz.0.2557'. [ 389.442675][T15885] syzkaller0: entered promiscuous mode [ 389.449852][T15885] syzkaller0: entered allmulticast mode [ 389.460412][T15876] pim6reg: left allmulticast mode [ 389.483036][T15890] netlink: 'syz.4.2558': attribute type 3 has an invalid length. [ 390.328117][T15928] syzkaller0: entered promiscuous mode [ 390.333653][T15928] syzkaller0: entered allmulticast mode [ 390.359039][T15933] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 390.637483][T15952] netlink: 'syz.0.2570': attribute type 3 has an invalid length. [ 393.474949][T15993] __nla_validate_parse: 5 callbacks suppressed [ 393.474970][T15993] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2578'. [ 393.507589][T15992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2577'. [ 393.716576][T16006] netlink: 'syz.1.2582': attribute type 3 has an invalid length. [ 393.743901][T16006] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2582'. [ 394.092464][T16027] tipc: Enabled bearer , priority 0 [ 394.578679][T16028] tipc: Disabling bearer [ 394.846746][T16054] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2590'. [ 394.886813][T16054] netlink: 'syz.4.2590': attribute type 2 has an invalid length. [ 394.916509][T16054] netlink: 'syz.4.2590': attribute type 1 has an invalid length. [ 394.952759][T16064] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2590'. [ 394.976339][T16054] netlink: 'syz.4.2590': attribute type 2 has an invalid length. [ 394.995843][T16054] netlink: 'syz.4.2590': attribute type 2 has an invalid length. [ 395.005958][T16054] netlink: 'syz.4.2590': attribute type 1 has an invalid length. [ 395.021222][T16054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2590'. [ 395.057378][T16064] netlink: 'syz.4.2590': attribute type 2 has an invalid length. [ 395.066622][T16064] netlink: 'syz.4.2590': attribute type 1 has an invalid length. [ 395.076706][T16064] netlink: 'syz.4.2590': attribute type 2 has an invalid length. [ 395.129636][T16064] netlink: 'syz.4.2590': attribute type 2 has an invalid length. [ 395.164465][T16072] nft_compat: unsupported protocol 0 [ 395.173112][T16064] netlink: 'syz.4.2590': attribute type 1 has an invalid length. [ 395.203780][T16064] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2590'. [ 395.229604][T16075] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 395.713070][T16099] lo speed is unknown, defaulting to 1000 [ 395.737847][T16099] lo speed is unknown, defaulting to 1000 [ 395.755563][T16099] lo speed is unknown, defaulting to 1000 [ 395.766335][T16101] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2603'. [ 395.776185][T16103] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2604'. [ 395.812260][T16105] IPVS: stopping backup sync thread 7693 ... [ 395.841339][T16105] IPv6: addrconf: prefix option has invalid lifetime [ 396.245879][T16114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2608'. [ 396.353729][T16118] lo speed is unknown, defaulting to 1000 [ 396.413492][T16118] lo speed is unknown, defaulting to 1000 [ 397.079055][T16151] netlink: 'syz.2.2610': attribute type 11 has an invalid length. [ 397.370311][T16099] infiniband syz0: set active [ 397.375914][ T5834] lo speed is unknown, defaulting to 1000 [ 397.383370][T16099] infiniband syz0: added lo [ 397.402060][T16099] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 397.410805][T16099] infiniband syz0: Couldn't open port 1 [ 397.545419][T16099] RDS/IB: syz0: added [ 397.549532][T16099] smc: adding ib device syz0 with port count 1 [ 397.583579][T16099] smc: ib device syz0 port 1 has no pnetid [ 397.672394][ T5834] lo speed is unknown, defaulting to 1000 [ 397.684610][T16099] lo speed is unknown, defaulting to 1000 [ 398.137977][T16099] lo speed is unknown, defaulting to 1000 [ 398.486492][T16194] tipc: Enabled bearer , priority 0 [ 398.496909][T16099] lo speed is unknown, defaulting to 1000 [ 398.504225][T16195] tipc: Enabling of bearer rejected, already enabled [ 398.520124][T16194] syzkaller0: entered promiscuous mode [ 398.527786][T16194] syzkaller0: entered allmulticast mode [ 398.561422][T16194] tipc: Resetting bearer [ 398.585094][T16194] macsec0: entered allmulticast mode [ 398.590943][T16194] veth1_macvtap: entered allmulticast mode [ 398.597198][T16194] macsec0: left allmulticast mode [ 398.602366][T16194] veth1_macvtap: left allmulticast mode [ 398.617219][T16193] tipc: Resetting bearer [ 398.646011][T16193] tipc: Disabling bearer [ 398.809651][T16099] lo speed is unknown, defaulting to 1000 [ 398.829037][T16203] Bluetooth: MGMT ver 1.23 [ 399.243120][T16099] lo speed is unknown, defaulting to 1000 [ 399.302921][T16220] __nla_validate_parse: 3 callbacks suppressed [ 399.302950][T16220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2632'. [ 399.323228][T16220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2632'. [ 399.718637][T16099] lo speed is unknown, defaulting to 1000 [ 399.890294][T16251] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2640'. [ 400.176486][T16099] lo speed is unknown, defaulting to 1000 [ 400.630072][T16179] lo speed is unknown, defaulting to 1000 [ 400.681156][T16179] lo speed is unknown, defaulting to 1000 [ 400.864130][T16273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2646'. [ 400.888518][T16273] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2646'. [ 401.138553][T16288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2651'. [ 401.185340][T16291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2652'. [ 401.217952][T16289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2650'. [ 401.275768][T16289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2650'. [ 401.731368][T16307] lo speed is unknown, defaulting to 1000 [ 401.739948][T16307] lo speed is unknown, defaulting to 1000 [ 402.165650][T16307] lo speed is unknown, defaulting to 1000 [ 402.391865][T16330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2662'. [ 402.455780][T16332] tipc: New replicast peer: 255.255.255.255 [ 402.535205][T16332] tipc: Enabled bearer , priority 10 [ 402.565152][T16332] validate_nla: 1 callbacks suppressed [ 402.565173][T16332] netlink: 'syz.3.2661': attribute type 13 has an invalid length. [ 402.979011][T16042] udevd[16042]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 403.350204][T16347] lo speed is unknown, defaulting to 1000 [ 403.372099][T16347] lo speed is unknown, defaulting to 1000 [ 403.524884][ T5903] tipc: Node number set to 2366242440 [ 403.540749][T16360] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 403.608350][T16360] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 403.742053][T16347] lo speed is unknown, defaulting to 1000 [ 403.907430][ T5834] IPVS: starting estimator thread 0... [ 403.955826][T16372] lo speed is unknown, defaulting to 1000 [ 403.975507][T16372] lo speed is unknown, defaulting to 1000 [ 404.014861][T16375] IPVS: using max 29 ests per chain, 69600 per kthread [ 404.788563][T16372] lo speed is unknown, defaulting to 1000 [ 405.350497][T16398] lo speed is unknown, defaulting to 1000 [ 405.350643][T16413] __nla_validate_parse: 4 callbacks suppressed [ 405.350659][T16413] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2686'. [ 405.357869][T16412] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2686'. [ 405.436271][T16398] lo speed is unknown, defaulting to 1000 [ 406.394812][T16398] lo speed is unknown, defaulting to 1000 [ 406.548299][T16439] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2693'. [ 406.619382][T16442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2694'. [ 406.674927][T16442] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2694'. [ 406.895509][T16449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2691'. [ 407.410695][T16470] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2699'. [ 407.879163][T16461] netlink: 'syz.3.2698': attribute type 3 has an invalid length. [ 407.888333][T16461] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2698'. [ 408.045725][T16470] block nbd3: server does not support multiple connections per device. [ 408.061858][T16470] block nbd3: shutting down sockets [ 408.261007][T16478] tipc: Failed to remove unknown binding: 66,0,0/2366242440:663122981/663122982 [ 408.271671][T16478] tipc: Failed to remove unknown binding: 66,0,0/2366242440:663122981/663122982 [ 408.558859][T16490] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2703'. [ 408.830486][T16501] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2707'. [ 408.945183][T16509] netlink: 'syz.4.2710': attribute type 3 has an invalid length. [ 408.979337][T16510] nbd: device at index 64 is going down [ 408.996316][T16513] netlink: 'syz.3.2711': attribute type 16 has an invalid length. [ 409.005151][T16513] netlink: 'syz.3.2711': attribute type 17 has an invalid length. [ 409.063386][T16513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.085087][T16513] 8021q: adding VLAN 0 to HW filter on device ` [ 409.160139][T16443] udevd[16443]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 409.177178][T16042] udevd[16042]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 409.777080][T16513] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.420132][T16552] netlink: 'syz.3.2722': attribute type 3 has an invalid length. [ 410.453208][T16552] __nla_validate_parse: 9 callbacks suppressed [ 410.453226][T16552] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2722'. [ 410.524620][T16564] syzkaller0: left promiscuous mode [ 410.561261][T16564] syzkaller0: left allmulticast mode [ 410.665468][T16568] netlink: 576 bytes leftover after parsing attributes in process `syz.1.2726'. [ 410.985654][ T5823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 410.998100][ T5823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 411.008958][ T5823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.029964][ T5823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.040173][ T5823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 411.146671][T16579] delete_channel: no stack [ 411.150098][T16572] lo speed is unknown, defaulting to 1000 [ 411.172347][T16572] lo speed is unknown, defaulting to 1000 [ 411.225829][T16582] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2731'. [ 411.433069][T16587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2734'. [ 411.451165][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2735'. [ 411.819681][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2736'. [ 412.085611][T16605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2739'. [ 412.096911][T16572] lo speed is unknown, defaulting to 1000 [ 412.183031][T16607] netlink: 'syz.3.2740': attribute type 1 has an invalid length. [ 412.247643][T16605] syzkaller0: entered promiscuous mode [ 412.253297][T16605] syzkaller0: entered allmulticast mode [ 412.320221][T16607] bond7: entered promiscuous mode [ 412.326194][T16607] 8021q: adding VLAN 0 to HW filter on device bond7 [ 412.403860][T16609] bond7: (slave bridge8): making interface the new active one [ 412.438648][T16609] bridge8: entered promiscuous mode [ 412.455617][T16609] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 412.601014][T16613] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 412.616239][T16613] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 412.879298][T16618] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2741'. [ 413.009365][T16622] netlink: 'syz.3.2742': attribute type 3 has an invalid length. [ 413.025431][T16622] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2742'. [ 413.075133][ T5138] Bluetooth: hci5: command tx timeout [ 413.433467][T16634] netlink: 'syz.4.2745': attribute type 1 has an invalid length. [ 413.484841][T16634] netlink: 'syz.4.2745': attribute type 1 has an invalid length. [ 413.513205][T16634] netlink: 'syz.4.2745': attribute type 2 has an invalid length. [ 413.535770][T16636] delete_channel: no stack [ 413.547597][T16634] netlink: 'syz.4.2745': attribute type 2 has an invalid length. [ 413.549651][T16572] chnl_net:caif_netlink_parms(): no params data found [ 413.577486][T16639] lo speed is unknown, defaulting to 1000 [ 413.596970][T16639] lo speed is unknown, defaulting to 1000 [ 413.798582][T16572] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.806277][T16572] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.813872][T16572] bridge_slave_0: entered allmulticast mode [ 413.823830][T16572] bridge_slave_0: entered promiscuous mode [ 413.834028][T16572] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.841881][T16572] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.849747][T16572] bridge_slave_1: entered allmulticast mode [ 413.858507][T16572] bridge_slave_1: entered promiscuous mode [ 413.908731][T16572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.922435][T16572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 413.959163][T16639] lo speed is unknown, defaulting to 1000 [ 413.980090][T16572] team0: Port device team_slave_0 added [ 413.989858][T16572] team0: Port device team_slave_1 added [ 414.157541][T16572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.173540][T16572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.201204][T16572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.320299][T16653] netlink: 'syz.4.2749': attribute type 1 has an invalid length. [ 414.334054][T16572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.343838][T16572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 414.372124][T16572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.433798][T16652] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 414.437859][T16661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2751'. [ 414.707339][T16572] hsr_slave_0: entered promiscuous mode [ 414.718225][T16572] hsr_slave_1: entered promiscuous mode [ 414.735623][T16572] debugfs: 'hsr0' already exists in 'hsr' [ 414.741636][T16572] Cannot create hsr debugfs directory [ 414.746958][T16679] netlink: 'syz.4.2753': attribute type 13 has an invalid length. [ 415.112885][ T7116] bridge_slave_1: left allmulticast mode [ 415.135146][ T7116] bridge_slave_1: left promiscuous mode [ 415.153913][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.161698][ T5138] Bluetooth: hci5: command tx timeout [ 415.192991][T16697] atomic_op ffff8880636cd998 conn xmit_atomic 0000000000000000 [ 415.202708][ T7116] bridge_slave_0: left allmulticast mode [ 415.220859][ T7116] bridge_slave_0: left promiscuous mode [ 415.240081][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.869819][T16707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.999330][T16709] __nla_validate_parse: 3 callbacks suppressed [ 415.999351][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'. [ 416.021618][T16709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2762'. [ 416.032539][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'. [ 416.045191][T16709] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2762'. [ 416.592761][ T7116] bond7 (unregistering): (slave gretap1): Releasing active interface [ 416.654728][ T7116] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 416.790165][ T7116] bond3 (unregistering): (slave bridge3): Releasing active interface [ 416.879796][ T7116] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 417.170387][ T7116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.181493][ T7116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.191639][ T7116] bond0 (unregistering): Released all slaves [ 417.202130][ T7116] bond1 (unregistering): Released all slaves [ 417.224714][ T7116] bond2 (unregistering): Released all slaves [ 417.234671][ T5138] Bluetooth: hci5: command tx timeout [ 417.243535][ T7116] bond3 (unregistering): Released all slaves [ 417.262295][ T7116] bond4 (unregistering): (slave vxcan3): Releasing backup interface [ 417.271115][ T7116] bond4 (unregistering): Released all slaves [ 417.286049][ T7116] bond5 (unregistering): Released all slaves [ 417.300318][ T7116] bond6 (unregistering): Released all slaves [ 417.315956][ T7116] bond7 (unregistering): Released all slaves [ 417.359046][T16695] netlink: 'syz.4.2759': attribute type 3 has an invalid length. [ 417.367731][T16695] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2759'. [ 417.377148][T16703] tc_dump_action: action bad kind [ 417.512276][ T7116] : left promiscuous mode [ 417.565811][T16716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2764'. [ 417.581279][T16718] netlink: 'syz.3.2765': attribute type 1 has an invalid length. [ 417.594873][T16718] netlink: 6368 bytes leftover after parsing attributes in process `syz.3.2765'. [ 417.605419][T16711] lo speed is unknown, defaulting to 1000 [ 417.624168][ T7116] tipc: Left network mode [ 417.628307][T16711] lo speed is unknown, defaulting to 1000 [ 417.887868][T16725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2766'. [ 417.914095][T16725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2766'. [ 417.973253][T16725] netlink: 'syz.4.2766': attribute type 83 has an invalid length. [ 418.507070][T16730] lo speed is unknown, defaulting to 1000 [ 418.656479][T16711] lo speed is unknown, defaulting to 1000 [ 418.664709][T16730] lo speed is unknown, defaulting to 1000 [ 418.853316][T16751] ip6t_srh: unknown srh invflags 4000 [ 418.880801][T16572] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 418.927959][T16572] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 419.030508][T16572] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 419.038403][T16754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2771'. [ 419.088430][T16572] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 419.314454][ T5138] Bluetooth: hci5: command tx timeout [ 419.585075][T16572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.737622][T16572] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.761938][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.769157][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.815826][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.823090][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 419.847640][T16776] netlink: 'syz.2.2773': attribute type 3 has an invalid length. [ 419.862540][T16730] lo speed is unknown, defaulting to 1000 [ 420.596758][T16572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.458296][T16572] veth0_vlan: entered promiscuous mode [ 421.491505][T16572] veth1_vlan: entered promiscuous mode [ 421.555109][T16572] veth0_macvtap: entered promiscuous mode [ 421.583916][T16572] veth1_macvtap: entered promiscuous mode [ 421.631884][T16815] netlink: 'syz.2.2780': attribute type 1 has an invalid length. [ 421.644014][T16572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.665964][T16815] __nla_validate_parse: 1 callbacks suppressed [ 421.665986][T16815] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2780'. [ 421.698273][T16572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.738662][ T9005] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.775426][ T9005] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.803645][ T9005] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.831413][ T9005] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.994931][ T7116] hsr_slave_0: left promiscuous mode [ 422.075538][ T7116] hsr_slave_1: left promiscuous mode [ 422.113226][ T7116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.151097][ T7116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.185278][ T7116] batman_adv: batadv0: Removing interface: macvlan0 [ 422.438702][ T7116] pimreg (unregistering): left allmulticast mode [ 422.741274][T16830] gretap0: refused to change device tx_queue_len [ 422.771737][T16830] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 422.801754][ T5954] lo speed is unknown, defaulting to 1000 [ 422.815542][T16827] lo speed is unknown, defaulting to 1000 [ 422.864829][T16827] lo speed is unknown, defaulting to 1000 [ 423.007313][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.043482][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.115933][T16843] netlink: 'syz.2.2784': attribute type 13 has an invalid length. [ 423.261081][ T8243] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.271860][ T8243] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.280528][T16846] netlink: 'syz.1.2785': attribute type 3 has an invalid length. [ 423.295783][T16846] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2785'. [ 423.344270][T16843] syzkaller0: entered promiscuous mode [ 423.349899][T16843] syzkaller0: entered allmulticast mode [ 424.117835][T16827] lo speed is unknown, defaulting to 1000 [ 424.325078][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2727'. [ 424.375862][T16855] netlink: 121 bytes leftover after parsing attributes in process `syz.0.2727'. [ 424.467767][ T7116] IPVS: stop unused estimator thread 0... [ 424.542912][T16860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2787'. [ 424.951758][T16885] openvswitch: netlink: IP tunnel dst address not specified [ 425.412849][T16903] bridge_slave_1: Caught tx_queue_len zero misconfig [ 425.450738][T16903] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2796'. [ 425.674639][T16909] netlink: 'syz.0.2797': attribute type 3 has an invalid length. [ 425.704353][T16909] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2797'. [ 425.836276][ T5881] IPVS: starting estimator thread 0... [ 425.924417][T16916] IPVS: using max 32 ests per chain, 76800 per kthread [ 426.751391][T16922] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2802'. [ 426.830136][T16920] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.038801][T16927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2802'. [ 427.078400][T16920] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.286954][T16920] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.386165][T16954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2808'. [ 427.462361][T16920] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.497567][ T5138] block nbd3: Receive control failed (result -1) [ 427.701620][ T9005] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.772725][ T9005] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.795052][ T9005] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.864279][ T9005] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.062906][T16972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2815'. [ 428.078288][T16974] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2814'. [ 428.110858][T16972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2815'. [ 428.150627][T16972] netlink: 'syz.3.2815': attribute type 12 has an invalid length. [ 428.206103][T16972] netlink: 'syz.3.2815': attribute type 11 has an invalid length. [ 428.335131][T16980] sctp: [Deprecated]: syz.4.2816 (pid 16980) Use of int in max_burst socket option deprecated. [ 428.335131][T16980] Use struct sctp_assoc_value instead [ 428.383634][T16982] netlink: 'syz.3.2818': attribute type 1 has an invalid length. [ 428.453798][T16982] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 428.466415][T16982] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 428.860077][T16999] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 428.979808][T17007] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2822'. [ 429.068647][T17010] netlink: 'syz.2.2825': attribute type 4 has an invalid length. [ 429.251603][T17018] ip6tnl0: Caught tx_queue_len zero misconfig [ 429.261844][T17017] netlink: 'syz.1.2826': attribute type 21 has an invalid length. [ 429.281337][T17017] netlink: 'syz.1.2826': attribute type 22 has an invalid length. [ 429.291150][T17017] netlink: 'syz.1.2826': attribute type 23 has an invalid length. [ 429.319813][T17017] netlink: 'syz.1.2826': attribute type 25 has an invalid length. [ 429.334763][T17017] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2826'. [ 429.371293][T17021] vlan6: entered promiscuous mode [ 429.381055][T17021] gretap0: entered promiscuous mode [ 429.433892][T17023] netlink: 'syz.4.2829': attribute type 1 has an invalid length. [ 429.477211][T17023] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2829'. [ 429.933926][T17051] bridge10: entered promiscuous mode [ 429.942717][T17051] bridge10: entered allmulticast mode [ 429.949397][T17055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2839'. [ 429.952186][T17051] team0: Port device bridge10 added [ 429.959844][T17055] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 430.281275][T17071] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 430.349216][T17077] syzkaller0: entered promiscuous mode [ 430.389720][T17077] syzkaller0: entered allmulticast mode [ 430.434712][T17080] bond6: Unable to set down delay as MII monitoring is disabled [ 430.449339][T17080] bond6 (unregistering): Released all slaves [ 430.680509][T17071] lo speed is unknown, defaulting to 1000 [ 430.708388][T17071] lo speed is unknown, defaulting to 1000 [ 430.956701][T17071] lo speed is unknown, defaulting to 1000 [ 431.239115][T17099] netlink: 'syz.4.2852': attribute type 1 has an invalid length. [ 431.375479][T17103] tipc: Enabled bearer , priority 0 [ 431.417355][T17103] syzkaller0: entered promiscuous mode [ 431.432949][T17103] syzkaller0: entered allmulticast mode [ 431.495820][T17105] syzkaller1: entered promiscuous mode [ 431.503284][T17105] syzkaller1: entered allmulticast mode [ 431.548419][T17111] netlink: 'syz.1.2856': attribute type 1 has an invalid length. [ 431.562075][T17103] tipc: Resetting bearer [ 431.571757][T17102] tipc: Resetting bearer [ 431.591775][T17102] tipc: Disabling bearer [ 431.655115][T17111] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 431.757622][T17112] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 432.168730][T14843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.188351][T14843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.246784][T17121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.489725][T17137] netlink: 'syz.2.2862': attribute type 2 has an invalid length. [ 432.508647][T17137] netlink: 'syz.2.2862': attribute type 1 has an invalid length. [ 432.620250][T17147] __nla_validate_parse: 2 callbacks suppressed [ 432.620273][T17147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2865'. [ 432.655410][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 432.676996][T17145] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2866'. [ 432.704776][T17145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2866'. [ 432.724034][T17145] netlink: 'syz.1.2866': attribute type 5 has an invalid length. [ 433.019268][T17164] xt_recent: Unsupported userspace flags (000000b1) [ 433.607542][T17202] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2885'. [ 433.769356][T17208] netlink: 'syz.4.2887': attribute type 1 has an invalid length. [ 433.851165][T17215] xt_CT: No such helper "pptp" [ 433.864209][T17208] 8021q: adding VLAN 0 to HW filter on device bond6 [ 433.892505][T17213] netlink: 'syz.1.2889': attribute type 309 has an invalid length. [ 433.923597][T17217] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 433.938628][T17217] bond6: (slave batadv1): making interface the new active one [ 433.949156][T17217] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 433.998814][T17217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2887'. [ 434.049506][T17229] x_tables: duplicate underflow at hook 1 [ 434.070457][T17217] bond6 (unregistering): (slave batadv1): Releasing active interface [ 434.088247][T17217] bond6 (unregistering): Released all slaves [ 434.339108][T17244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2896'. [ 434.349106][T17244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2896'. [ 434.360307][T17244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2896'. [ 434.370772][T17244] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2896'. [ 434.388302][T17244] batadv_slave_0: entered promiscuous mode [ 434.419235][T17244] batadv_slave_0: left promiscuous mode [ 436.103150][T17346] ip6tnl0: Caught tx_queue_len zero misconfig [ 436.118012][T17345] netlink: zone id is out of range [ 436.123282][T17345] netlink: zone id is out of range [ 436.159141][T17345] netlink: zone id is out of range [ 436.170812][T17345] netlink: zone id is out of range [ 436.176570][T17345] netlink: zone id is out of range [ 436.182002][T17345] netlink: zone id is out of range [ 436.192135][T17345] netlink: zone id is out of range [ 436.234737][T17348] tipc: Enabled bearer , priority 0 [ 436.257145][T17348] syzkaller0: entered promiscuous mode [ 436.266130][T17348] syzkaller0: entered allmulticast mode [ 436.350092][T17354] netlink: 'syz.2.2928': attribute type 13 has an invalid length. [ 436.370578][T17354] netlink: 'syz.2.2928': attribute type 62 has an invalid length. [ 436.582098][T17364] tipc: Enabled bearer , priority 0 [ 436.591949][T17364] syzkaller0: entered promiscuous mode [ 436.604601][T17364] syzkaller0: entered allmulticast mode [ 436.664903][T17364] tipc: Resetting bearer [ 436.699377][T17362] tipc: Resetting bearer [ 436.742076][T17362] tipc: Disabling bearer [ 436.857769][ T9005] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.882405][ T9005] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.924773][T17367] lo speed is unknown, defaulting to 1000 [ 436.930945][ T9005] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.945937][ T9005] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 436.970148][T17367] lo speed is unknown, defaulting to 1000 [ 436.997011][T17347] tipc: Resetting bearer [ 437.053628][T17347] tipc: Disabling bearer [ 437.662250][T17382] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.669858][T17382] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.826498][T17382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.846911][T17382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.944143][T17367] lo speed is unknown, defaulting to 1000 [ 437.952279][ T5138] block nbd4: Receive control failed (result -32) [ 437.977248][ T8243] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 437.996817][ T8243] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.019194][ T8243] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.057722][ T8243] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.107383][ T8243] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.133070][ T8243] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.164017][ T8243] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 438.195481][ T8243] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.548843][T17416] tipc: Enabled bearer , priority 0 [ 438.753479][T17416] tipc: Resetting bearer [ 438.996536][T17437] __nla_validate_parse: 14 callbacks suppressed [ 438.996558][T17437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2950'. [ 439.041047][T17440] vlan5: entered promiscuous mode [ 439.059560][T17440] vlan5: entered allmulticast mode [ 439.545801][T17471] ip6tnl0: Caught tx_queue_len zero misconfig [ 439.574925][T17471] netem: change failed [ 439.751265][T17480] syzkaller0: entered promiscuous mode [ 439.760687][T17480] syzkaller0: entered allmulticast mode [ 439.890880][T17472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.018080][T17493] batadv_slave_0: Caught tx_queue_len zero misconfig [ 440.080879][T17499] netlink: 'syz.2.2969': attribute type 2 has an invalid length. [ 440.106650][T17499] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2969'. [ 440.162234][T17493] tipc: Enabled bearer , priority 10 [ 440.280257][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.464168][T17517] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2973'. [ 440.495905][T17521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2975'. [ 440.568135][T17524] vlan2: left allmulticast mode [ 440.590006][T17524] erspan0: left allmulticast mode [ 440.599863][T17529] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2978'. [ 440.610088][T17524] vlan4: left allmulticast mode [ 440.615183][T17524] bond1: left allmulticast mode [ 440.627521][T17524] batadv1: left allmulticast mode [ 440.646256][T17532] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2979'. [ 440.651057][T17533] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2974'. [ 440.695005][T17524] bond2: left allmulticast mode [ 440.715005][T17524] bridge5: left allmulticast mode [ 440.748927][T17529] ..0ªî{X¹¦: renamed from gretap0 (while UP) [ 440.757818][T17529] ..0ªî{X¹¦: entered allmulticast mode [ 440.763624][T17529] A link change request failed with some changes committed already. Interface ..0ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 440.784432][ T7116] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.793407][T17533] hsr_slave_0: left promiscuous mode [ 440.807618][T17533] hsr_slave_1: left promiscuous mode [ 440.816496][T17533] hsr0 (unregistering): left allmulticast mode [ 440.822733][T17533] hsr0 (unregistering): left promiscuous mode [ 440.829244][T17533] bridge0: port 1(hsr0) entered disabled state [ 440.930478][T17535] tipc: Started in network mode [ 440.935700][T17535] tipc: Node identity 0662a7b4a28e, cluster identity 4711 [ 440.944646][T17535] tipc: Enabled bearer , priority 0 [ 441.016666][T17538] bond11: Removing last arp target with arp_interval on [ 441.024765][T17539] syzkaller0: entered promiscuous mode [ 441.043300][T17539] syzkaller0: entered allmulticast mode [ 441.080381][ T7116] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.098500][ T7116] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.163080][T17529] syzkaller0: entered promiscuous mode [ 441.169832][T17529] syzkaller0: entered allmulticast mode [ 441.179601][T17556] tipc: Resetting bearer [ 441.195946][ T7116] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.227654][T17525] tipc: Resetting bearer [ 441.260395][T17525] tipc: Disabling bearer [ 441.336861][T17571] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2984'. [ 441.441755][T17582] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2987'. [ 441.488871][T17582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2987'. [ 441.507366][T17586] netlink: 'syz.4.2989': attribute type 10 has an invalid length. [ 441.532265][T17585] syzkaller0: entered promiscuous mode [ 441.543350][T17585] syzkaller0: entered allmulticast mode [ 441.649933][ T5138] block nbd5: Receive control failed (result -32) [ 441.896786][T17605] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 441.918100][T17604] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 441.924409][T17604] syzkaller1: linktype set to 768 [ 441.978896][T17610] tipc: Enabled bearer , priority 0 [ 441.987916][T17610] syzkaller0: entered promiscuous mode [ 441.993548][T17610] syzkaller0: entered allmulticast mode [ 442.076662][T17610] tipc: Resetting bearer [ 442.089100][T17609] tipc: Resetting bearer [ 442.124004][T17609] tipc: Disabling bearer [ 442.645581][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 442.665563][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 442.673947][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 442.683512][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 442.693741][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 442.842492][T17630] lo speed is unknown, defaulting to 1000 [ 442.869997][T17630] lo speed is unknown, defaulting to 1000 [ 443.060207][T17640] lo speed is unknown, defaulting to 1000 [ 443.133968][ T5832] bond10: (slave syz_tun): Releasing active interface [ 443.302288][T17653] pimreg: entered allmulticast mode [ 443.330358][T17653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.341203][T17653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.353617][T17653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.405935][T17640] lo speed is unknown, defaulting to 1000 [ 443.423442][T17630] lo speed is unknown, defaulting to 1000 [ 443.437693][T17653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.459838][T17653] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.480678][T17653] pimreg: left allmulticast mode [ 443.666139][T17661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.675156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.880823][T17671] netlink: 'syz.4.3016': attribute type 1 has an invalid length. [ 443.926897][T17640] lo speed is unknown, defaulting to 1000 [ 444.026430][T17671] 8021q: adding VLAN 0 to HW filter on device bond7 [ 444.046395][T17671] bond6: (slave bond7): making interface the new active one [ 444.056282][T17671] bond6: (slave bond7): Enslaving as an active interface with an up link [ 444.075804][T17671] __nla_validate_parse: 6 callbacks suppressed [ 444.075825][T17671] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3016'. [ 444.119393][T17676] bond6: (slave gretap0): Enslaving as a backup interface with an up link [ 444.159321][T17678] bridge1: port 1(veth5) entered blocking state [ 444.166089][T17678] bridge1: port 1(veth5) entered disabled state [ 444.172733][T17678] veth5: entered allmulticast mode [ 444.189017][T17679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3016'. [ 444.223190][T17678] veth5: entered promiscuous mode [ 444.248385][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3017'. [ 444.276591][T17671] 8021q: adding VLAN 0 to HW filter on device bond6 [ 444.291710][T17676] vlan6: entered promiscuous mode [ 444.306973][T17676] bond6: entered promiscuous mode [ 444.322292][T17676] bond7: entered promiscuous mode [ 444.696040][T17686] lo speed is unknown, defaulting to 1000 [ 444.758628][ T5138] Bluetooth: hci1: command tx timeout [ 444.792357][T17686] lo speed is unknown, defaulting to 1000 [ 444.858003][T17698] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3021'. [ 445.019460][T17701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3022'. [ 445.035105][T17630] chnl_net:caif_netlink_parms(): no params data found [ 446.142066][T17686] lo speed is unknown, defaulting to 1000 [ 446.255354][T17716] netlink: 'syz.4.3025': attribute type 2 has an invalid length. [ 446.287779][T17630] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.316213][T17630] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.323511][T17630] bridge_slave_0: entered allmulticast mode [ 446.350163][T17630] bridge_slave_0: entered promiscuous mode [ 446.381521][T17630] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.405261][T17630] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.421528][T17630] bridge_slave_1: entered allmulticast mode [ 446.437389][T17630] bridge_slave_1: entered promiscuous mode [ 446.535628][T17630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.558351][T17630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.647613][T17630] team0: Port device team_slave_0 added [ 446.668042][T17630] team0: Port device team_slave_1 added [ 446.834563][ T5138] Bluetooth: hci1: command tx timeout [ 446.852589][T17630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.871038][T17630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.943966][T17630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 447.015248][T17630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 447.034408][T17630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.108847][T17630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.233955][T17732] netlink: 'syz.4.3030': attribute type 10 has an invalid length. [ 447.275666][T17630] hsr_slave_0: entered promiscuous mode [ 447.291489][T17630] hsr_slave_1: entered promiscuous mode [ 447.452768][T17738] netlink: 'syz.2.3033': attribute type 18 has an invalid length. [ 447.621419][T17746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3035'. [ 447.647005][T17748] netlink: 296 bytes leftover after parsing attributes in process `syz.2.3036'. [ 447.656589][T17748] openvswitch: netlink: Flow key attr not present in new flow. [ 447.671294][T17743] lo speed is unknown, defaulting to 1000 [ 447.853500][T17743] lo speed is unknown, defaulting to 1000 [ 447.949620][T17630] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 447.961767][T17630] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.047010][T17630] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 448.057788][T17630] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.090183][T17743] lo speed is unknown, defaulting to 1000 [ 448.147532][T17630] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 448.158385][T17630] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.242462][T17630] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 448.253201][T17630] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.683530][T17759] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3037'. [ 448.914613][ T5138] Bluetooth: hci1: command tx timeout [ 448.917660][T17761] syzkaller1: entered promiscuous mode [ 448.927817][T17761] syzkaller1: entered allmulticast mode [ 449.053310][T17630] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 449.104637][T17630] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 449.139916][T17765] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3039'. [ 449.178994][T17630] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 449.218832][T17630] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 449.353788][T17779] syzkaller1: entered promiscuous mode [ 449.359607][T17779] syzkaller1: entered allmulticast mode [ 449.369251][T17779] syzkaller1: left promiscuous mode [ 449.374604][T17779] syzkaller1: left allmulticast mode [ 449.574074][T17630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.633259][T17630] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.699884][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.707251][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.722443][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.729738][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.875587][T17792] netlink: 'syz.3.3044': attribute type 29 has an invalid length. [ 449.998980][T17781] syzkaller0: entered promiscuous mode [ 450.006649][T17781] syzkaller0: entered allmulticast mode [ 450.027657][T17803] netlink: 'syz.0.3046': attribute type 83 has an invalid length. [ 450.182553][T17812] netlink: 'syz.3.3048': attribute type 4 has an invalid length. [ 450.210312][T17808] veth0_macvtap: entered allmulticast mode [ 450.294210][T17820] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:0 [ 450.313853][T17820] gretap1: entered promiscuous mode [ 450.447787][T17630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 450.516640][T17829] syzkaller0: entered promiscuous mode [ 450.524143][T17829] syzkaller0: entered allmulticast mode [ 450.556506][T17833] netlink: 34 bytes leftover after parsing attributes in process `syz.2.3053'. [ 450.568959][T17630] veth0_vlan: entered promiscuous mode [ 450.668687][T17630] veth1_vlan: entered promiscuous mode [ 450.732821][T17838] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3054'. [ 450.739424][T17630] veth0_macvtap: entered promiscuous mode [ 450.807651][T17630] veth1_macvtap: entered promiscuous mode [ 450.826073][T17840] bond0: Caught tx_queue_len zero misconfig [ 450.845902][T17838] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 450.869145][T17840] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3055'. [ 450.885555][T17840] xt_TCPMSS: Only works on TCP SYN packets [ 450.918550][T17630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.995248][ T5138] Bluetooth: hci1: command tx timeout [ 451.006876][T17630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.050707][ T8243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.064522][ T8243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.074196][T17827] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.083855][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.105550][ T8243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.188934][ T8243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.352625][T17858] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 451.387074][T17858] batman_adv: batadv0: Adding interface: gretap1 [ 451.394586][T17858] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.426255][T17858] batman_adv: batadv0: Interface activated: gretap1 [ 451.454218][T17862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3061'. [ 451.464915][T17862] tipc: Enabled bearer , priority 0 [ 451.532226][T17862] batadv_slave_0: entered promiscuous mode [ 451.572108][T17870] vlan5: entered allmulticast mode [ 451.580105][T17870] bridge_slave_0: entered allmulticast mode [ 451.604919][T17789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.612804][T17789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.633592][T17857] batadv_slave_0: left promiscuous mode [ 451.676763][T17872] bond8: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 451.689406][T17872] bond8 (unregistering): Released all slaves [ 451.752751][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 451.761366][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 451.816246][T17879] tipc: Enabled bearer , priority 0 [ 451.825220][T17878] syzkaller0: entered promiscuous mode [ 451.830729][T17878] syzkaller0: entered allmulticast mode [ 451.853825][T17876] tipc: Resetting bearer [ 451.915769][T17876] tipc: Disabling bearer [ 451.949087][T17889] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3069'. [ 451.963091][T17889] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3069'. [ 452.121746][T17900] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.421363][T17916] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3075'. [ 452.432163][T17913] syzkaller1: entered promiscuous mode [ 452.464937][T17913] syzkaller1: entered allmulticast mode [ 452.491511][T17920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3074'. [ 452.550127][T17918] lo speed is unknown, defaulting to 1000 [ 452.597424][T17918] lo speed is unknown, defaulting to 1000 [ 452.639225][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 452.650861][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 452.667209][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 452.679850][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 452.688931][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 452.894510][ T6147] tipc: Node number set to 2766972852 [ 452.933529][T17925] lo speed is unknown, defaulting to 1000 [ 453.040651][T17918] lo speed is unknown, defaulting to 1000 [ 453.040662][T17925] lo speed is unknown, defaulting to 1000 [ 453.060732][T17930] syzkaller0: entered promiscuous mode [ 453.103118][T17930] syzkaller0: entered allmulticast mode [ 453.479081][T17935] veth8: entered allmulticast mode [ 453.599188][T17937] netlink: 'syz.0.3082': attribute type 2 has an invalid length. [ 453.609791][T17925] lo speed is unknown, defaulting to 1000 [ 453.630090][T17937] netlink: 'syz.0.3082': attribute type 1 has an invalid length. [ 453.655457][T17937] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3082'. [ 453.907023][T17951] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 453.948911][T17950] netlink: 'syz.1.3084': attribute type 3 has an invalid length. [ 454.193856][T17960] tc_dump_action: action bad kind [ 454.321187][T17967] __nla_validate_parse: 1 callbacks suppressed [ 454.321226][T17967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3089'. [ 454.754523][ T5823] Bluetooth: hci4: command tx timeout [ 454.779831][T17925] chnl_net:caif_netlink_parms(): no params data found [ 454.982439][T17925] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.989948][T17925] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.997942][T17925] bridge_slave_0: entered allmulticast mode [ 455.008032][T17925] bridge_slave_0: entered promiscuous mode [ 455.018036][T17925] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.025467][T17925] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.032853][T17925] bridge_slave_1: entered allmulticast mode [ 455.042420][T17925] bridge_slave_1: entered promiscuous mode [ 455.090039][T17925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.103649][T17925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.223770][T17925] team0: Port device team_slave_0 added [ 455.242536][T17925] team0: Port device team_slave_1 added [ 455.299802][T17925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.307349][T17925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.354450][T17925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.377893][T17925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.391063][T17925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.476204][T17925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.582879][T17925] hsr_slave_0: entered promiscuous mode [ 455.611544][T17925] hsr_slave_1: entered promiscuous mode [ 455.624217][T17925] debugfs: 'hsr0' already exists in 'hsr' [ 455.645306][T17925] Cannot create hsr debugfs directory [ 455.854116][T18020] tipc: Enabled bearer , priority 0 [ 455.875997][T18020] syzkaller0: entered promiscuous mode [ 455.882473][T18020] syzkaller0: entered allmulticast mode [ 455.977958][T18020] tipc: Resetting bearer [ 456.011342][T18019] tipc: Resetting bearer [ 456.078416][T18019] tipc: Disabling bearer [ 456.239273][T18028] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3101'. [ 456.363142][T18035] netlink: 'syz.0.3102': attribute type 1 has an invalid length. [ 456.404973][T18038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3104'. [ 456.485895][T18035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 456.576944][T17925] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.591857][T17925] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.697456][T18047] bond1: (slave dummy0): making interface the new active one [ 456.726847][T18047] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 456.795827][T18041] bond1: (slave veth7): Enslaving as an active interface with a down link [ 456.835085][ T5823] Bluetooth: hci4: command tx timeout [ 456.863524][T17925] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.879626][T17925] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.976752][T17925] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.006281][T17925] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.046320][T18080] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3112'. [ 457.067375][T18081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3110'. [ 457.089043][T17925] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.091613][T18081] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3110'. [ 457.108651][T17925] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.928023][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3117'. [ 457.928023][T18098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3117'. [ 457.938020][T18098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3117'. [ 457.947146][T18099] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3117'. [ 457.990226][ T8243] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.014594][ T8243] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.045132][ T8243] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.073890][ T8243] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 458.924589][ T5823] Bluetooth: hci4: command tx timeout [ 459.879360][T18068] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 459.890898][T17925] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 459.945651][T17925] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 460.013909][T17925] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 460.038702][T17925] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 460.078272][T18112] Cannot find map_set index 135 as target [ 460.258388][T17925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.281858][T18126] netlink: 'syz.3.3126': attribute type 1 has an invalid length. [ 460.291774][T17925] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.299296][T18126] netlink: 'syz.3.3126': attribute type 3 has an invalid length. [ 460.311145][T18126] __nla_validate_parse: 5 callbacks suppressed [ 460.311162][T18126] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3126'. [ 460.342424][T17788] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.349756][T17788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.380738][T17788] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.388071][T17788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.481948][T18137] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3129'. [ 460.529628][T18137] syzkaller1: entered promiscuous mode [ 460.540160][T18137] syzkaller1: entered allmulticast mode [ 460.722381][T18148] netlink: 'syz.3.3131': attribute type 1 has an invalid length. [ 460.730695][T18148] netlink: 240 bytes leftover after parsing attributes in process `syz.3.3131'. [ 460.810296][T17925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.822453][T18152] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3131'. [ 460.996342][ T5823] Bluetooth: hci4: command tx timeout [ 461.172488][T17925] veth0_vlan: entered promiscuous mode [ 461.210738][T17925] veth1_vlan: entered promiscuous mode [ 461.263989][T18164] nbd: socks must be embedded in a SOCK_ITEM attr [ 461.276645][T17925] veth0_macvtap: entered promiscuous mode [ 461.298509][T17925] veth1_macvtap: entered promiscuous mode [ 461.390728][T17925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.423715][T17925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.490128][ T8243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.514608][ T8243] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.546113][ T8243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.559556][ T8243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.818285][T18177] lo speed is unknown, defaulting to 1000 [ 461.831647][T17788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.861617][T17788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.992806][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.024450][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.235461][T18195] netlink: 'syz.1.3141': attribute type 3 has an invalid length. [ 462.258275][T18195] netlink: 'syz.1.3141': attribute type 3 has an invalid length. [ 462.405591][T18201] netlink: 'syz.4.3073': attribute type 29 has an invalid length. [ 462.543279][T18204] delete_channel: no stack [ 462.762024][T18204] netlink: 'syz.1.3144': attribute type 4 has an invalid length. [ 462.842785][T18214] batman_adv: batadv0: Adding interface: macvlan2 [ 462.864433][T18214] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 462.886902][T18219] netlink: 'syz.4.3148': attribute type 10 has an invalid length. [ 462.894883][ T5138] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 462.896415][ T5138] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 462.908212][T18219] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3148'. [ 462.912306][ T5138] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 462.929428][ T5138] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 462.937573][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.972287][T18177] lo speed is unknown, defaulting to 1000 [ 463.000552][T18220] lo speed is unknown, defaulting to 1000 [ 463.048183][T18219] team0: Port device geneve0 added [ 463.126582][T18224] netlink: 'syz.2.3149': attribute type 21 has an invalid length. [ 463.136869][T18224] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3149'. [ 463.650367][T18220] lo speed is unknown, defaulting to 1000 [ 463.747545][T18248] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 463.758826][T18243] tipc: Started in network mode [ 463.763897][T18243] tipc: Node identity 56ff09206d2, cluster identity 4711 [ 463.775872][T18243] tipc: Enabled bearer , priority 0 [ 463.831807][T18250] netlink: 71 bytes leftover after parsing attributes in process `syz.2.3156'. [ 463.897098][T18252] netlink: 'syz.2.3156': attribute type 1 has an invalid length. [ 463.919632][T18252] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3156'. [ 463.953346][T18243] syzkaller0: entered promiscuous mode [ 463.964754][T18243] syzkaller0: entered allmulticast mode [ 463.971400][T18243] tipc: Resetting bearer [ 464.040628][T18241] tipc: Resetting bearer [ 465.009408][ T5823] Bluetooth: hci3: command tx timeout [ 466.186127][T18241] tipc: Disabling bearer [ 466.269357][ T5834] tipc: Node number set to 1004472608 [ 466.494678][T18273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3161'. [ 466.645038][T18220] chnl_net:caif_netlink_parms(): no params data found [ 466.793318][T18290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3165'. [ 466.857340][T18220] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.864736][T18220] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.869166][T18290] openvswitch: netlink: Flow actions attr not present in new flow. [ 466.872019][T18220] bridge_slave_0: entered allmulticast mode [ 466.889824][T18220] bridge_slave_0: entered promiscuous mode [ 466.912278][T18220] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.923405][T18220] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.950527][T18220] bridge_slave_1: entered allmulticast mode [ 466.961727][T18220] bridge_slave_1: entered promiscuous mode [ 467.076167][ T5823] Bluetooth: hci3: command tx timeout [ 467.096904][T18308] netlink: 124 bytes leftover after parsing attributes in process `syz.1.3170'. [ 467.119988][T18220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.134531][T18220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.181361][T18220] team0: Port device team_slave_0 added [ 467.188791][T18313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3172'. [ 467.190547][T18220] team0: Port device team_slave_1 added [ 467.300815][T18320] nbd: nbd1 already in use [ 467.321552][T18320] block nbd1: NBD_DISCONNECT [ 467.334983][T18320] block nbd1: Send disconnect failed -32 [ 467.350022][T18320] block nbd1: shutting down sockets [ 467.483649][T18220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.496479][T18220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.539947][T18220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.601451][T18220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.617619][T18220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.659923][T18220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.783211][T18220] hsr_slave_0: entered promiscuous mode [ 467.790992][T18220] hsr_slave_1: entered promiscuous mode [ 467.797888][T18220] debugfs: 'hsr0' already exists in 'hsr' [ 467.803819][T18220] Cannot create hsr debugfs directory [ 467.825714][T18336] netlink: 'syz.0.3177': attribute type 1 has an invalid length. [ 468.090555][T18345] netlink: 340 bytes leftover after parsing attributes in process `syz.0.3180'. [ 468.256717][T18348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3179'. [ 469.061243][T18220] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 469.117402][T18220] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 469.143517][T18220] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 469.154596][ T5823] Bluetooth: hci3: command tx timeout [ 469.232856][T18220] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 469.460330][T18393] netlink: 'syz.2.3189': attribute type 1 has an invalid length. [ 469.476250][T18220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.483564][T18393] netlink: 'syz.2.3189': attribute type 11 has an invalid length. [ 469.509410][T18393] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3189'. [ 469.543008][T18220] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.582421][ T8243] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.589821][ T8243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.645241][ T8243] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.652450][ T8243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.773936][T18398] syzkaller0: entered promiscuous mode [ 469.779784][T18398] syzkaller0: entered allmulticast mode [ 469.929893][T18395] syzkaller1: entered promiscuous mode [ 469.935833][T18395] syzkaller1: entered allmulticast mode [ 470.758980][T18220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.800698][T18418] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 470.807601][T18418] syzkaller1: linktype set to 778 [ 471.037978][T18220] veth0_vlan: entered promiscuous mode [ 471.074138][T18220] veth1_vlan: entered promiscuous mode [ 471.197230][T18220] veth0_macvtap: entered promiscuous mode [ 471.226387][T18434] netlink: 'syz.1.3200': attribute type 1 has an invalid length. [ 471.244656][ T5823] Bluetooth: hci3: command tx timeout [ 471.246238][T18220] veth1_macvtap: entered promiscuous mode [ 471.324605][T18439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3200'. [ 471.333034][T18220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.354947][T18220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.457174][T18439] bond1: (slave bridge1): making interface the new active one [ 471.498966][T18439] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 471.502048][T18440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3200'. [ 471.617207][T18434] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 471.643869][T18440] macvlan2: entered promiscuous mode [ 471.650147][T18440] macvlan2: entered allmulticast mode [ 471.660545][ T3528] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.684464][ T3528] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.689798][T18442] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3201'. [ 471.749258][ T3528] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.774951][ T3528] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.000952][ T7116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.035388][ T7116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.147680][T17788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.164494][T17788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.385619][T18462] netlink: 34 bytes leftover after parsing attributes in process `syz.3.3143'. [ 472.960781][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 472.971938][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 472.980959][ T5138] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 472.989352][ T5138] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 473.000189][ T5138] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 473.107880][T18485] lo speed is unknown, defaulting to 1000 [ 473.162156][T18487] netlink: 'syz.4.3212': attribute type 1 has an invalid length. [ 473.217682][T18487] gretap1: entered allmulticast mode [ 473.531061][T17788] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.604147][T18499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3214'. [ 473.668674][T17788] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.763457][T17788] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.805615][T18482] lo speed is unknown, defaulting to 1000 [ 473.815648][T18485] lo speed is unknown, defaulting to 1000 [ 473.842258][T17788] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 475.074711][ T5823] Bluetooth: hci0: command tx timeout [ 475.263062][T17788] bond0 (unregistering): Released all slaves [ 475.288592][T17788] bond1 (unregistering): Released all slaves [ 475.314826][T17788] bond2 (unregistering): Released all slaves [ 475.332278][T17788] bond3 (unregistering): Released all slaves [ 475.360257][T17788] bond4 (unregistering): Released all slaves [ 475.372831][T18527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3222'. [ 475.379020][T17788] bond5 (unregistering): Released all slaves [ 475.421780][T18482] lo speed is unknown, defaulting to 1000 [ 475.470115][T18527] bond0: option arp_all_targets: invalid value (16777215) [ 475.743284][T17788] tipc: Left network mode [ 475.984851][T18544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3225'. [ 476.124114][T18552] netlink: 'syz.0.3227': attribute type 1 has an invalid length. [ 476.150025][T18552] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3227'. [ 476.161607][T18554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3228'. [ 476.166624][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3227'. [ 476.264469][ T5881] IPVS: starting estimator thread 0... [ 476.384587][T18560] IPVS: using max 24 ests per chain, 57600 per kthread [ 477.155579][ T5823] Bluetooth: hci0: command tx timeout [ 477.220586][T18584] geneve3: entered promiscuous mode [ 477.266888][T18588] lo speed is unknown, defaulting to 1000 [ 477.304040][ T8243] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 477.325452][ T8243] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 477.432509][ T8243] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 477.459908][T18602] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3237'. [ 477.505584][ T8243] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 477.568533][T18482] chnl_net:caif_netlink_parms(): no params data found [ 478.140198][T18624] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3242'. [ 478.172650][T18588] lo speed is unknown, defaulting to 1000 [ 478.198809][T18616] netlink: 'syz.3.3241': attribute type 1 has an invalid length. [ 478.498279][T18482] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.506987][T18482] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.528480][T18482] bridge_slave_0: entered allmulticast mode [ 478.563358][T18482] bridge_slave_0: entered promiscuous mode [ 478.602879][T18482] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.624510][T18482] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.641104][T18482] bridge_slave_1: entered allmulticast mode [ 478.667713][T18482] bridge_slave_1: entered promiscuous mode [ 478.953701][T18482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.133912][T18482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.247351][ T5823] Bluetooth: hci0: command tx timeout [ 479.454577][T18482] team0: Port device team_slave_0 added [ 479.603504][T18482] team0: Port device team_slave_1 added [ 479.672440][T17788] batman_adv: batadv0: Removing interface: macvlan2 [ 479.945554][T17788] pim6reg99999999 (unregistering): left allmulticast mode [ 480.423107][T18684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3255'. [ 480.538350][ T7116] smc: removing ib device sqz0 [ 480.668004][T18689] netlink: 'syz.3.3256': attribute type 8 has an invalid length. [ 480.681050][T18482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.708737][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.756894][T18696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3258'. [ 480.774492][T18482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.021904][T18482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.034158][T18482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.087189][T18482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.317416][ T5823] Bluetooth: hci0: command tx timeout [ 481.517474][T18722] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3261'. [ 481.526253][T18721] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3261'. [ 481.538379][T18726] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3262'. [ 481.592455][T18482] hsr_slave_0: entered promiscuous mode [ 481.630816][T18482] hsr_slave_1: entered promiscuous mode [ 481.661555][T18482] debugfs: 'hsr0' already exists in 'hsr' [ 481.685303][T18482] Cannot create hsr debugfs directory [ 481.851223][ C1] vcan0: j1939_tp_rxtimer: 0xffff888077f96000: rx timeout, send abort [ 482.002673][T18735] lo speed is unknown, defaulting to 1000 [ 482.034076][T18749] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3266'. [ 482.279676][T18753] netlink: 'syz.1.3267': attribute type 1 has an invalid length. [ 482.351957][ C1] vcan0: j1939_tp_rxtimer: 0xffff888077f96400: rx timeout, send abort [ 482.361147][ C1] vcan0: j1939_tp_rxtimer: 0xffff888077f96000: abort rx timeout. Force session deactivation [ 482.381506][T18753] 8021q: adding VLAN 0 to HW filter on device bond2 [ 482.700429][T18758] netlink: 'syz.4.3268': attribute type 1 has an invalid length. [ 482.860411][ C1] vcan0: j1939_tp_rxtimer: 0xffff888077f96400: abort rx timeout. Force session deactivation [ 482.872683][T18758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 483.401025][T18734] lo speed is unknown, defaulting to 1000 [ 483.571135][T18773] netlink: 'syz.4.3271': attribute type 1 has an invalid length. [ 483.600366][T18773] netlink: 'syz.4.3271': attribute type 2 has an invalid length. [ 483.641588][T18773] netlink: 'syz.4.3271': attribute type 1 has an invalid length. [ 483.667949][T18773] netlink: 'syz.4.3271': attribute type 3 has an invalid length. [ 483.684366][T18773] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3271'. [ 484.153233][T18788] netlink: 'syz.1.3274': attribute type 1 has an invalid length. [ 484.432005][T18795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3275'. [ 485.852142][T18482] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 485.893540][T17788] IPVS: stop unused estimator thread 0... [ 485.940679][T18482] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 485.973927][T18482] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 485.999840][T18832] tipc: Enabling of bearer rejected, failed to enable media [ 486.019375][T18482] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 486.121604][T18845] IPv6: NLM_F_REPLACE set, but no existing node found! [ 486.420106][T18482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.629693][T18482] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.656423][T17788] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.663655][T17788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.704828][T17788] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.712050][T17788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.753180][T18866] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 486.786614][T18866] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 486.848351][T18866] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 487.183091][T18888] Bluetooth: MGMT ver 1.23 [ 487.197558][T18884] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 487.203641][T18884] pim6reg1: linktype set to 805 [ 487.252491][T18891] nbd: nbd3 already in use [ 487.266951][T18891] block nbd3: NBD_DISCONNECT [ 487.272432][T18891] block nbd3: Send disconnect failed -32 [ 487.301980][T18891] block nbd3: shutting down sockets [ 487.360742][T18895] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3293'. [ 487.385696][T18895] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3293'. [ 487.386937][T18482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.462672][T18895] siw: device registration error -23 [ 487.590067][T18482] veth0_vlan: entered promiscuous mode [ 487.647277][T18482] veth1_vlan: entered promiscuous mode [ 487.717428][T18482] veth0_macvtap: entered promiscuous mode [ 487.742349][T18482] veth1_macvtap: entered promiscuous mode [ 487.799162][T18910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3295'. [ 487.809508][T18910] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3295'. [ 487.810830][T18482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.882827][T18482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.946404][ T9005] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.967932][ T9005] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.019395][ T9005] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.057868][ T9005] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 488.442702][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3300'. [ 488.507969][T18927] lo speed is unknown, defaulting to 1000 [ 488.548149][T17788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.564111][T17788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.670668][ T9005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.690205][ T9005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.923000][T18945] netlink: 'syz.2.3206': attribute type 9 has an invalid length. [ 490.105496][T18982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 490.125255][T18982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 490.679461][T19002] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3314'. [ 490.709987][T19002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3314'. [ 491.024524][T19013] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3318'. [ 491.077295][T19019] xt_socket: unknown flags 0xfc [ 491.147880][T19013] bridge1: entered promiscuous mode [ 491.153236][T19013] macsec1: entered promiscuous mode [ 491.200406][T19013] bridge1: port 1(macsec1) entered blocking state [ 491.208797][T19013] bridge1: port 1(macsec1) entered disabled state [ 491.215638][T19013] macsec1: entered allmulticast mode [ 491.264872][T19013] bridge1: entered allmulticast mode [ 491.295862][T19013] macsec1: left allmulticast mode [ 491.311320][T19013] bridge1: left allmulticast mode [ 491.337502][T19013] bridge1: left promiscuous mode [ 491.519499][T19045] netlink: 'syz.0.3326': attribute type 1 has an invalid length. [ 491.527660][T19045] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3326'. [ 492.006437][T19080] pimreg: tun_chr_ioctl cmd 1074025677 [ 492.013133][T19080] pimreg: linktype set to 780 [ 492.209883][T19091] syzkaller0: entered promiscuous mode [ 492.237321][T19091] syzkaller0: entered allmulticast mode [ 492.262009][T19096] 0: reclassify loop, rule prio 0, protocol 800 [ 492.307533][T19092] lo speed is unknown, defaulting to 1000 [ 492.346959][T19099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3343'. [ 492.502197][T19101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3343'. [ 492.609813][T19095] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 492.658254][T19103] wg1: entered promiscuous mode [ 492.663532][T19103] wg1: entered allmulticast mode [ 492.690856][T19103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3344'. [ 493.576245][T19128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3350'. [ 493.941117][T19136] macvlan2: entered allmulticast mode [ 494.129834][T19146] 8021q: VLANs not supported on ipvlan0 [ 494.168835][T19146] netlink: 'syz.0.3353': attribute type 2 has an invalid length. [ 494.247081][T19146] : entered promiscuous mode [ 494.327323][T19151] xt_bpf: check failed: parse error [ 494.396877][T19153] lo speed is unknown, defaulting to 1000 [ 494.965484][T19174] netlink: 'syz.3.3361': attribute type 4 has an invalid length. [ 494.983847][T19174] netlink: 'syz.3.3361': attribute type 8 has an invalid length. [ 495.251371][T19182] __nla_validate_parse: 7 callbacks suppressed [ 495.251391][T19182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3362'. [ 495.349142][T19192] netlink: 'syz.3.3364': attribute type 1 has an invalid length. [ 495.450567][T19178] lo speed is unknown, defaulting to 1000 [ 495.556489][T19203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3365'. [ 495.559317][T19197] gretap1: entered allmulticast mode [ 495.575414][T19197] bond2: (slave gretap1): making interface the new active one [ 495.584056][T19197] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 495.602841][T19196] geneve2: entered promiscuous mode [ 495.608230][T19196] geneve2: entered allmulticast mode [ 495.800078][T19210] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 496.068278][T19216] syzkaller0: entered promiscuous mode [ 496.090972][T19216] syzkaller0: entered allmulticast mode [ 496.804040][T19235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3376'. [ 496.849686][T19235] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3376'. [ 497.225930][T19245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3379'. [ 497.260330][T19245] 8021q: VLANs not supported on vxcan0 [ 497.272583][T19247] tipc: Enabled bearer , priority 0 [ 497.291816][T19247] syzkaller0: entered promiscuous mode [ 497.299739][T19249] sctp: [Deprecated]: syz.2.3381 (pid 19249) Use of struct sctp_assoc_value in delayed_ack socket option. [ 497.299739][T19249] Use struct sctp_sack_info instead [ 497.336020][T19247] syzkaller0: entered allmulticast mode [ 497.440211][T19250] tipc: Resetting bearer [ 497.451000][T19254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3382'. [ 497.516670][T19250] tipc: Disabling bearer [ 497.600334][T19262] netlink: 'syz.4.3384': attribute type 58 has an invalid length. [ 497.694504][T19266] xt_hashlimit: max too large, truncated to 1048576 [ 497.729544][T19266] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 497.781563][T19271] netlink: 'syz.2.3385': attribute type 4 has an invalid length. [ 497.816399][T19275] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3389'. [ 497.823293][T19273] tipc: Enabling of bearer rejected, failed to enable media [ 497.854746][T19266] netlink: 'syz.2.3385': attribute type 4 has an invalid length. [ 497.979571][T19276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3388'. [ 498.239518][T19290] xt_TCPMSS: Only works on TCP SYN packets [ 498.307190][T19293] bond1: entered promiscuous mode [ 498.324948][T19292] vcan1: entered promiscuous mode [ 498.338076][T19292] vcan1: entered allmulticast mode [ 498.345097][T19292] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 498.358698][T19292] bond1: (slave vcan1): Error -95 calling set_mac_address [ 498.521687][T19300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3398'. [ 498.597252][T19302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 498.708279][T19306] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3400'. [ 499.060551][T19322] syzkaller0: entered promiscuous mode [ 499.080911][T19322] syzkaller0: entered allmulticast mode [ 499.096071][T19322] TCP: TCP_TX_DELAY enabled [ 499.717074][T19358] syzkaller0: entered promiscuous mode [ 499.722605][T19358] syzkaller0: entered allmulticast mode [ 499.747500][T19358] bridge: RTM_NEWNEIGH with invalid ether address [ 500.099079][T19379] syzkaller0: entered promiscuous mode [ 500.104881][T19379] syzkaller0: entered allmulticast mode [ 500.128237][T19380] tipc: Enabled bearer , priority 0 [ 500.142070][T19379] tipc: Enabling of bearer rejected, already enabled [ 500.188981][T19378] tipc: Resetting bearer [ 500.289305][T19378] tipc: Disabling bearer [ 500.466221][T19389] netlink: 'syz.1.3424': attribute type 4 has an invalid length. [ 500.683425][T19399] __nla_validate_parse: 8 callbacks suppressed [ 500.683445][T19399] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3428'. [ 500.730595][T19399] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.738563][T19399] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.836355][T19394] delete_channel: no stack [ 501.144405][T19422] sctp: [Deprecated]: syz.0.3429 (pid 19422) Use of struct sctp_assoc_value in delayed_ack socket option. [ 501.144405][T19422] Use struct sctp_sack_info instead [ 501.209750][T19430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3432'. [ 501.231572][T19430] openvswitch: netlink: Flow actions attr not present in new flow. [ 501.420189][T19442] netlink: 'syz.2.3432': attribute type 33 has an invalid length. [ 501.448157][T19442] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3432'. [ 501.581740][T19442] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3432'. [ 501.884719][ T41] dummy0: left allmulticast mode [ 501.894314][ T41] bridge0: port 2(dummy0) entered disabled state [ 501.911085][T19463] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3440'. [ 501.931870][ T41] bridge_slave_0: left promiscuous mode [ 501.951119][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.007700][ T41] veth9: left allmulticast mode [ 502.023975][ T41] veth9: left promiscuous mode [ 502.054787][ T41] bridge5: port 2(veth9) entered disabled state [ 502.093913][ T41] veth7: left allmulticast mode [ 502.111729][ T41] veth7: left promiscuous mode [ 502.129920][ T41] bridge5: port 1(veth7) entered disabled state [ 502.192759][ T41] tipc: Resetting bearer [ 502.268594][ T41] bridge_slave_1: left promiscuous mode [ 502.393161][T19474] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3443'. [ 502.528026][ T41] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 502.537341][ T41] ip6gretap1 (unregistering): left allmulticast mode [ 502.755961][ T41] dvmrp0 (unregistering): left allmulticast mode [ 502.768596][ T41] dvmrp1 (unregistering): left allmulticast mode [ 502.799981][ T41] tipc: Disabling bearer [ 502.958055][ T41] bond8 (unregistering): (slave bridge3): Removing an active aggregator [ 502.969318][ T41] bond8 (unregistering): (slave bridge3): Releasing backup interface [ 502.977502][ T41] bond8 (unregistering): (slave bridge3): the permanent HWaddr of slave - 5a:24:eb:56:d2:c0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 503.001175][ T41] bridge3 (unregistering): left promiscuous mode [ 503.008784][ T41] bridge3 (unregistering): left allmulticast mode [ 503.057770][ T41] bond8 (unregistering): (slave bridge4): Releasing backup interface [ 503.066584][ T41] bridge4 (unregistering): left promiscuous mode [ 503.074021][ T41] bridge4 (unregistering): left allmulticast mode [ 503.346475][ T41] tipc: Disabling bearer [ 503.388009][ T41] team0: Port device bridge10 removed [ 503.448576][ T41] team0: Port device bond0 removed [ 503.456052][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.466493][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.480063][ T41] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 503.492044][ T41] bond0 (unregistering): Released all slaves [ 503.502663][ T41] bond1 (unregistering): Released all slaves [ 503.516117][ T41] bond2 (unregistering): Released all slaves [ 503.533113][ T41] bond3 (unregistering): Released all slaves [ 503.552515][ T41] bond4 (unregistering): left allmulticast mode [ 503.559422][ T41] bond4 (unregistering): left promiscuous mode [ 503.568409][ T41] team0: Port device macvlan2 removed [ 503.582659][ T41] bond4 (unregistering): Released all slaves [ 503.603866][ T41] bond5 (unregistering): Released all slaves [ 503.620012][ T41] bond6 (unregistering): Released all slaves [ 503.633112][ T41] bond7 (unregistering): Released all slaves [ 503.651355][ T41] bond8 (unregistering): Released all slaves [ 503.664425][ T41] bond9 (unregistering): Released all slaves [ 503.685570][ T41] bond10 (unregistering): Released all slaves [ 503.700962][ T41] bond11 (unregistering): Released all slaves [ 503.931408][ T41] mÿ5nè‹Ò: left promiscuous mode [ 504.083151][ T41] !: left promiscuous mode [ 504.175010][T19505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3451'. [ 504.212522][T19492] lo speed is unknown, defaulting to 1000 [ 504.255158][ T41] tipc: Left network mode [ 504.472415][T19514] geneve4: entered promiscuous mode [ 504.485633][T19514] geneve4: entered allmulticast mode [ 504.744070][T19516] syzkaller0: entered promiscuous mode [ 504.758686][T19516] syzkaller0: entered allmulticast mode [ 504.834146][T19516] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3454'. [ 504.851281][T19511] lo speed is unknown, defaulting to 1000 [ 505.189872][T19534] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3458'. [ 507.217606][T19549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3461'. [ 507.320351][T19552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3462'. [ 507.809700][T19573] netlink: 'syz.4.3468': attribute type 1 has an invalid length. [ 508.026576][T19573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3468'. [ 508.134555][T19582] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3470'. [ 508.204221][T19577] macvlan2: entered promiscuous mode [ 508.223501][T19577] macvlan2: entered allmulticast mode [ 508.431279][T19604] dvmrp6: entered allmulticast mode [ 508.502202][T19610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3474'. [ 508.554822][T19610] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 508.562098][T19610] IPv6: NLM_F_CREATE should be set when creating new route [ 508.585059][T19610] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3474'. [ 508.666832][T19614] veth2: entered allmulticast mode [ 508.697846][T19619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3480'. [ 509.163389][T19630] netlink: 'syz.3.3484': attribute type 1 has an invalid length. [ 509.219711][T19633] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3484'. [ 509.230597][T19625] syzkaller0: entered promiscuous mode [ 509.237681][T19625] syzkaller0: entered allmulticast mode [ 509.500480][T19653] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3493'. [ 509.516866][T19653] netlink: 'syz.1.3493': attribute type 1 has an invalid length. [ 510.476317][T19668] xt_CONNSECMARK: invalid mode: 253 [ 512.199022][T19678] syzkaller0: entered promiscuous mode [ 512.227117][T19678] syzkaller0: entered allmulticast mode [ 512.250408][T19678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3498'. [ 512.392891][T19690] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3498'. [ 512.424527][T19689] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 512.709945][ T41] hsr_slave_0: left promiscuous mode [ 512.725289][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.926925][ T41] pim6reg99999999 (unregistering): left allmulticast mode [ 513.175733][ T41] team0 (unregistering): Port device team_slave_1 removed [ 513.219898][ T41] team0 (unregistering): Port device team_slave_0 removed [ 513.608508][ T4506] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.634727][ T4506] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.685022][ T4506] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.706184][ T4506] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.858770][T19737] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3515'. [ 514.143124][ T41] IPVS: stop unused estimator thread 0... [ 514.156196][T19748] netlink: 'syz.0.3519': attribute type 7 has an invalid length. [ 514.174716][T19748] netlink: 'syz.0.3519': attribute type 8 has an invalid length. [ 514.220065][T19751] netlink: 'syz.1.3520': attribute type 1 has an invalid length. [ 514.268324][T19752] bond3 (unregistering): Released all slaves [ 514.329652][T19751] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 514.537788][T19759] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 514.664620][T19771] netlink: 'syz.1.3526': attribute type 10 has an invalid length. [ 514.678890][T19771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.688706][T19771] team0: Port device bond0 added [ 514.724113][T19772] bridge0: port 3(batadv0) entered blocking state [ 514.742185][T19772] bridge0: port 3(batadv0) entered disabled state [ 514.760374][T19772] batadv0: entered allmulticast mode [ 514.786458][T19772] batadv0: entered promiscuous mode [ 514.803498][T19772] bridge0: port 3(batadv0) entered blocking state [ 514.810598][T19772] bridge0: port 3(batadv0) entered forwarding state [ 515.042648][T19785] netlink: 'syz.1.3529': attribute type 89 has an invalid length. [ 515.284839][T14843] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 515.294690][T14843] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 516.012005][T19808] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3537'. [ 516.100523][T19813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3538'. [ 516.287290][T19818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3536'. [ 516.433962][T19828] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3541'. [ 516.461140][T19828] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3541'. [ 516.533816][T19830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3541'. [ 516.554706][T19828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3541'. [ 516.901182][T19842] xt_TCPMSS: Only works on TCP SYN packets [ 516.929468][T19804] infiniband syz1: set active [ 516.944360][T19804] infiniband syz1: added bond_slave_0 [ 516.965490][T19804] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 516.968045][T19804] infiniband syz1: Couldn't open port 1 [ 517.062151][T19804] RDS/IB: syz1: added [ 517.082861][T19804] smc: adding ib device syz1 with port count 1 [ 517.105334][T19804] smc: ib device syz1 port 1 has no pnetid [ 517.636651][T19865] tipc: Enabled bearer , priority 0 [ 517.654537][T19865] syzkaller0: entered promiscuous mode [ 517.660048][T19865] syzkaller0: entered allmulticast mode [ 517.713765][T19864] tipc: Resetting bearer [ 517.786099][T19864] tipc: Disabling bearer [ 518.060564][T19867] lo speed is unknown, defaulting to 1000 [ 518.549842][T19891] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3556'. [ 518.555816][T19886] lo speed is unknown, defaulting to 1000 [ 518.559719][T19891] netlink: 'syz.3.3556': attribute type 3 has an invalid length. [ 518.573243][T19891] netlink: 'syz.3.3556': attribute type 3 has an invalid length. [ 518.575871][T19890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3555'. [ 518.610622][T19889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3555'. [ 518.760902][T19895] bond_slave_0: entered promiscuous mode [ 518.767023][T19895] bond_slave_1: entered promiscuous mode [ 518.774181][T19895] vlan2: entered promiscuous mode [ 518.779938][T19895] bond0: entered promiscuous mode [ 519.645182][T19898] netlink: 'syz.3.3559': attribute type 11 has an invalid length. [ 519.653200][T19898] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.3559'. [ 519.732868][T19901] syzkaller0: entered promiscuous mode [ 519.764436][T19901] syzkaller0: entered allmulticast mode [ 520.108843][T19912] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3562'. [ 520.181464][T19912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3562'. [ 520.193662][T19912] netlink: 'syz.3.3562': attribute type 1 has an invalid length. [ 520.771770][T19938] sctp: [Deprecated]: syz.4.3567 (pid 19938) Use of struct sctp_assoc_value in delayed_ack socket option. [ 520.771770][T19938] Use struct sctp_sack_info instead [ 520.883636][T19931] lo speed is unknown, defaulting to 1000 [ 521.097184][T19946] netlink: 7060 bytes leftover after parsing attributes in process `syz.3.3571'. [ 521.119872][T19944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.736345][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3572'. [ 521.745929][T19949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3572'. [ 521.776340][T19948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3572'. [ 521.856750][T19954] netlink: 'syz.1.3574': attribute type 11 has an invalid length. [ 521.967448][T19958] netlink: 'syz.3.3575': attribute type 12 has an invalid length. [ 522.120355][T19962] ipvlan2: entered allmulticast mode [ 522.126326][T19962] veth0_vlan: entered allmulticast mode [ 522.145505][T19962] netlink: 'syz.1.3577': attribute type 1 has an invalid length. [ 522.787276][T19979] netlink: 'syz.1.3583': attribute type 1 has an invalid length. [ 523.918966][T20037] __nla_validate_parse: 4 callbacks suppressed [ 523.918987][T20037] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3596'. [ 523.938463][T20034] ip6tnl0: Caught tx_queue_len zero misconfig [ 523.986670][T20039] netlink: 'syz.1.3597': attribute type 4 has an invalid length. [ 523.995541][T20039] netlink: 'syz.1.3597': attribute type 4 has an invalid length. [ 524.033861][T20034] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3595'. [ 524.130211][T20050] IPv6: NLM_F_CREATE should be specified when creating new route [ 524.353044][T20065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.587265][T20069] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3603'. [ 524.605666][T20075] lo speed is unknown, defaulting to 1000 [ 524.679114][T20079] tipc: Started in network mode [ 524.684060][T20079] tipc: Node identity 4ac678c92c28, cluster identity 4711 [ 524.727946][T20079] tipc: Enabled bearer , priority 0 [ 524.749941][T20079] syzkaller0: entered promiscuous mode [ 524.784562][T20079] syzkaller0: entered allmulticast mode [ 524.868177][T20079] tipc: Resetting bearer [ 524.886018][T20078] tipc: Resetting bearer [ 524.925121][T20078] tipc: Disabling bearer [ 524.967236][T20099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3612'. [ 524.991789][T20099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3612'. [ 525.054721][T20099] geneve2: entered promiscuous mode [ 525.069980][T20099] geneve2: entered allmulticast mode [ 525.366366][T20118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3616'. [ 525.481387][T20118] ip6gretap0: entered promiscuous mode [ 525.529854][T20118] ip6gretap0: left promiscuous mode [ 525.586098][T20122] sch_tbf: burst 2976 is lower than device lo mtu (11337746) ! [ 525.628158][T20127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 525.802804][T20135] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3620'. [ 525.840096][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3620'. [ 526.155027][T20148] IPv6: addrconf: prefix option has invalid lifetime [ 526.805147][T20168] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3630'. [ 526.830670][T20170] x_tables: duplicate underflow at hook 3 [ 526.905306][T20170] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.954535][T20170] netlink: 'syz.1.3631': attribute type 8 has an invalid length. [ 527.226350][T20191] IPVS: set_ctl: invalid protocol: 26 255.255.255.255:20004 [ 527.253477][T20193] netlink: zone id is out of range [ 527.258884][T20193] netlink: zone id is out of range [ 527.268503][T20193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3637'. [ 528.046330][T20214] lo speed is unknown, defaulting to 1000 [ 528.091866][T20234] netlink: 'syz.0.3644': attribute type 1 has an invalid length. [ 528.108089][T20229] bond2: entered promiscuous mode [ 528.134131][T20229] 8021q: adding VLAN 0 to HW filter on device bond2 [ 528.207163][T20229] bond2 (unregistering): Released all slaves [ 528.508733][T20250] xt_TCPMSS: Only works on TCP SYN packets [ 528.579714][T20249] bond2: option lacp_active: invalid value (8) [ 528.626342][T20249] bond2 (unregistering): Released all slaves [ 528.936194][T20259] geneve3: entered promiscuous mode [ 528.956290][ T9005] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 528.973223][ T9005] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 529.021460][ T9005] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 529.039593][T20264] __nla_validate_parse: 4 callbacks suppressed [ 529.039613][T20264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3652'. [ 529.055179][ T9005] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 529.188138][T20267] batadv_slave_0: entered promiscuous mode [ 529.298521][T20267] batadv1: entered promiscuous mode [ 529.470523][T20278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.497198][T20266] batadv_slave_0: left promiscuous mode [ 530.349363][T20288] IPVS: Error connecting to the multicast addr [ 530.505958][T20296] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3660'. [ 531.020642][T20339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3667'. [ 531.024743][T20334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3669'. [ 531.189085][T20328] lo speed is unknown, defaulting to 1000 [ 531.311387][T20357] veth1_to_bond: entered allmulticast mode [ 531.332425][T20356] veth1_to_bond: left allmulticast mode [ 531.691017][T20368] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3679'. [ 532.279296][T20391] syz_tun: entered promiscuous mode [ 532.290234][T20391] vlan2: entered promiscuous mode [ 532.931355][T20415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3700'. [ 533.038833][T20415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.206602][T20427] netlink: 211856 bytes leftover after parsing attributes in process `syz.2.3706'. [ 533.346066][T20436] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3711'. [ 533.863375][T20464] netlink: 'syz.4.3725': attribute type 1 has an invalid length. [ 533.872889][T20464] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3725'. [ 533.927829][T20469] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3726'. [ 534.111509][T20481] __nla_validate_parse: 1 callbacks suppressed [ 534.111530][T20481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3731'. [ 534.131813][T20481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.226221][T20481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.815667][T20522] lo: Caught tx_queue_len zero misconfig [ 535.694914][T20564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3764'. [ 535.811172][T20567] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3766'. [ 535.854541][T20572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3767'. [ 535.890747][T20572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3767'. [ 536.353727][T20600] netlink: 'syz.2.3778': attribute type 11 has an invalid length. [ 536.384931][T20600] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3778'. [ 536.405073][T20600] netlink: 'syz.2.3778': attribute type 11 has an invalid length. [ 536.413416][T20600] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3778'. [ 536.549392][T20608] netlink: 'syz.1.3781': attribute type 10 has an invalid length. [ 536.652554][T20608] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 536.875244][T20624] netlink: 'syz.4.3786': attribute type 10 has an invalid length. [ 536.985362][T20624] team0: Port device netdevsim0 added [ 537.124372][T20640] sock: sock_timestamping_bind_phc: sock not bind to device [ 537.452306][T20656] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 537.504177][T20658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3802'. [ 537.660318][T20670] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3806'. [ 538.556095][T20700] netlink: 'syz.0.3817': attribute type 8 has an invalid length. [ 538.563891][T20700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3817'. [ 538.620923][T20700] bond0: entered promiscuous mode [ 538.651484][T20700] bond_slave_0: entered promiscuous mode [ 538.671919][T20700] bond_slave_1: entered promiscuous mode [ 538.705084][T20700] gretap0: entered promiscuous mode [ 538.721679][T20700] bond0: left promiscuous mode [ 538.734104][T20700] bond_slave_0: left promiscuous mode [ 538.745844][T20700] bond_slave_1: left promiscuous mode [ 538.767190][T20700] gretap0: left promiscuous mode [ 538.784088][T20708] bond0: option miimon: invalid value (18446744073709488821) [ 538.794574][T20708] bond0: option miimon: allowed values 0 - 2147483647 [ 538.814086][T20714] netlink: 'syz.2.3823': attribute type 28 has an invalid length. [ 540.202894][T20789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3860'. [ 540.341914][T20800] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3865'. [ 540.659696][T20822] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3873'. [ 540.809321][ T58] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 540.821272][ T58] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 540.829728][ T58] CPU: 0 UID: 0 PID: 58 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 540.839133][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 540.849396][ T58] Workqueue: krdsd rds_tcp_accept_worker [ 540.855072][ T58] RIP: 0010:rds_tcp_accept_one+0xa5b/0xd70 [ 540.861016][ T58] Code: 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 93 2f 46 f7 48 8b 1b 48 83 c3 12 49 89 de 49 c1 ee 03 <43> 0f b6 04 2e 84 c0 0f 85 53 02 00 00 44 0f b6 2b bf 08 00 00 00 [ 540.880640][ T58] RSP: 0018:ffffc900015f7960 EFLAGS: 00010202 [ 540.886815][ T58] RAX: 1ffff1100ee2c8a3 RBX: 0000000000000012 RCX: 0000000000000000 [ 540.894800][ T58] RDX: 0000000000000006 RSI: ffffffff8dee2508 RDI: 00000000ffffffff [ 540.902777][ T58] RBP: ffffc900015f7ad8 R08: ffffffff90109077 R09: 1ffffffff202120e [ 540.910752][ T58] R10: dffffc0000000000 R11: fffffbfff202120f R12: ffff888056cd7998 [ 540.918822][ T58] R13: dffffc0000000000 R14: 0000000000000002 R15: 1ffff920002bef34 [ 540.926799][ T58] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 540.935784][ T58] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 540.942375][ T58] CR2: 000000110c2c7117 CR3: 000000000e54a000 CR4: 00000000003526f0 [ 540.950355][ T58] Call Trace: [ 540.953633][ T58] [ 540.956576][ T58] ? __pfx_rds_tcp_accept_one+0x10/0x10 [ 540.962136][ T58] ? do_raw_spin_lock+0x12b/0x2f0 [ 540.967169][ T58] ? lock_acquire+0x106/0x330 [ 540.971942][ T58] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 540.977323][ T58] ? process_scheduled_works+0xa0f/0x17a0 [ 540.983046][ T58] ? process_scheduled_works+0xa0f/0x17a0 [ 540.988781][ T58] rds_tcp_accept_worker+0x1d/0x70 [ 540.993921][ T58] ? process_scheduled_works+0xa0f/0x17a0 [ 540.999750][ T58] process_scheduled_works+0xaec/0x17a0 [ 541.005334][ T58] ? __pfx_process_scheduled_works+0x10/0x10 [ 541.011325][ T58] ? assign_work+0x3d5/0x5e0 [ 541.015929][ T58] worker_thread+0xa50/0xfc0 [ 541.020536][ T58] kthread+0x388/0x470 [ 541.024651][ T58] ? __pfx_worker_thread+0x10/0x10 [ 541.029764][ T58] ? __pfx_kthread+0x10/0x10 [ 541.034362][ T58] ret_from_fork+0x51e/0xb90 [ 541.038957][ T58] ? __pfx_ret_from_fork+0x10/0x10 [ 541.044082][ T58] ? __switch_to+0xc7d/0x1400 [ 541.048793][ T58] ? __pfx_kthread+0x10/0x10 [ 541.053391][ T58] ret_from_fork_asm+0x1a/0x30 [ 541.058170][ T58] [ 541.061197][ T58] Modules linked in: [ 541.066253][ T58] ---[ end trace 0000000000000000 ]--- [ 541.134040][ T58] RIP: 0010:rds_tcp_accept_one+0xa5b/0xd70 [ 541.140016][ T58] Code: 00 00 48 83 c3 18 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 93 2f 46 f7 48 8b 1b 48 83 c3 12 49 89 de 49 c1 ee 03 <43> 0f b6 04 2e 84 c0 0f 85 53 02 00 00 44 0f b6 2b bf 08 00 00 00 [ 541.160677][ T58] RSP: 0018:ffffc900015f7960 EFLAGS: 00010202 [ 541.167261][ T58] RAX: 1ffff1100ee2c8a3 RBX: 0000000000000012 RCX: 0000000000000000 [ 541.175792][ T58] RDX: 0000000000000006 RSI: ffffffff8dee2508 RDI: 00000000ffffffff [ 541.183882][ T58] RBP: ffffc900015f7ad8 R08: ffffffff90109077 R09: 1ffffffff202120e [ 541.192549][ T58] R10: dffffc0000000000 R11: fffffbfff202120f R12: ffff888056cd7998 [ 541.202006][ T58] R13: dffffc0000000000 R14: 0000000000000002 R15: 1ffff920002bef34 [ 541.210407][ T58] FS: 0000000000000000(0000) GS:ffff8881254b0000(0000) knlGS:0000000000000000 [ 541.219694][ T58] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 541.226393][ T58] CR2: 00007f09f55e6158 CR3: 0000000022e48000 CR4: 00000000003526f0 [ 541.234628][ T58] Kernel panic - not syncing: Fatal exception [ 541.241373][ T58] Kernel Offset: disabled [ 541.245702][ T58] Rebooting in 86400 seconds..