last executing test programs: 8.814059223s ago: executing program 4 (id=9928): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x800) read$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40), 0x0, 0x20044894) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x20000, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 8.682714117s ago: executing program 0 (id=9930): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010007b0000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 8.500506s ago: executing program 0 (id=9933): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000003c0), &(0x7f0000000080)=@udp=r1, 0x1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r2, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x16, &(0x7f0000000340)=ANY=[], 0x0) 8.42106703s ago: executing program 4 (id=9934): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f00000000c0)=0x800, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) write$tun(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="0800080007030300020014"], 0xf76) 3.908861288s ago: executing program 4 (id=9948): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 3.854826497s ago: executing program 0 (id=9949): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 3.677182332s ago: executing program 4 (id=9951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmmsg(r2, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 3.542520574s ago: executing program 0 (id=9953): socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x14, 0x2, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, 0x0, &(0x7f0000000780)) 3.524046221s ago: executing program 1 (id=9954): socket$netlink(0x10, 0x3, 0x0) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x29, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000009c0)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0, @ANYBLOB="000000000040ead008001d00c3"], 0x28}}, 0x0) 2.596045069s ago: executing program 4 (id=9960): epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x8a3, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.559626501s ago: executing program 3 (id=9961): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2.313647425s ago: executing program 3 (id=9962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000000200), 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000003c0)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) close(0x3) 2.097414578s ago: executing program 1 (id=9964): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) 2.043952588s ago: executing program 3 (id=9965): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r1, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) 1.943105914s ago: executing program 3 (id=9966): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f0000002880)=[{&(0x7f00000000c0)=""/91, 0x5b}], 0x1, 0xa2e1, 0xc) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="dc010000100000001800000000000000000000000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = openat$cgroup_procs(r3, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r5, 0x0, 0x3ffffffffffffa) 1.821848867s ago: executing program 1 (id=9967): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4a61, 0x2, @loopback, 0xaa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "8aee8aad3300", "000000dfffffff00", '\x00\t\x00', "2300ff0400"}, 0x28) writev(r0, &(0x7f0000000400)=[{&(0x7f00000006c0)="f0fecb55d93446ef61dea4ee2ff3cf2852355efbb6bb41dabd3e1e70d2673777770e3feaddc3018e71326c8c4fb6ea7264ac8003df7b38672e265d8a38206d98bf39b40f36118fc3e59804e6f1a945deafabbf21d947adca50662159df62955b60dd315b1456a02377c0a2c42f8d3852a6f402cb0cc2bedcff400c2e89bcab82bd5683a6f3df58dd29a0464285fcdfd082361d603b97b9", 0x97}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) 1.800383596s ago: executing program 3 (id=9968): openat$ppp(0xffffffffffffff9c, 0x0, 0x88802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0xa, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c0001800600050088a80000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 1.692549135s ago: executing program 0 (id=9969): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x108) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 1.679836855s ago: executing program 1 (id=9970): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000440)="bad330fbc9b55400040000ea07", 0xd, 0x6000040, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) 1.617740074s ago: executing program 4 (id=9971): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={0x0, 0x3, 0x6, @remote}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d07420008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 1.501095398s ago: executing program 3 (id=9973): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000002c0)=0x200000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000380)={0x0, 0x21d000, 0x1000, 0x1, 0x2}, 0x20) 1.431525154s ago: executing program 1 (id=9974): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe}, 0x9, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.200968357s ago: executing program 1 (id=9976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x2, 0x4a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 797.697584ms ago: executing program 2 (id=9977): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)="0900f82a190cb90000", 0x9}], 0x1}}], 0x1, 0x40000d1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 678.211569ms ago: executing program 0 (id=9978): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x4, 0xfd, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfb, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) close(0x3) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 641.683319ms ago: executing program 2 (id=9979): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x2}, 0x8) 498.300367ms ago: executing program 2 (id=9980): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x402}, 0x38) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xf1c1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "629fe25e06f600", "2fd672a2d0ffff00", "ace06e88"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@ccm_128={{0x303}, "63a970f9c96b9919", "68c9fa3999daf8c4c237c8b534397b2d", "f8cb0071", "a664d6946aab5f1e"}, 0x28) 471.378565ms ago: executing program 2 (id=9981): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)='\x00', 0x1}], 0x1}}], 0x1, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) 400.048618ms ago: executing program 2 (id=9982): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) recvmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x12160, 0x0) 0s ago: executing program 2 (id=9983): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r3, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r2, &(0x7f0000000000)={0x23, 0x4}, 0x10) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) kernel console output (not intermixed with test programs): T14335] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 279.782773][T14335] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 280.534987][T14372] __nla_validate_parse: 3 callbacks suppressed [ 280.535008][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3960'. [ 280.584905][T14374] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3961'. [ 280.706325][T14382] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3965'. [ 280.742919][T14384] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3967'. [ 280.754401][T14384] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3967'. [ 280.965690][T14393] Driver unsupported XDP return value 0 on prog (id 271) dev N/A, expect packet loss! [ 281.933281][T14445] netlink: 'syz.2.3996': attribute type 23 has an invalid length. [ 282.369906][T14467] vcan1: entered promiscuous mode [ 282.379077][T14466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4003'. [ 282.388540][T14467] vcan1: entered allmulticast mode [ 282.448296][T14471] Zero length message leads to an empty skb [ 283.256869][T14509] Bluetooth: MGMT ver 1.23 [ 283.769428][T14539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4040'. [ 284.056661][T14553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4046'. [ 285.305802][T14603] net_ratelimit: 44 callbacks suppressed [ 285.305823][T14603] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 286.893898][T14692] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4111'. [ 287.119071][ T5756] IPVS: starting estimator thread 0... [ 287.119213][T14705] IPVS: ip_vs_add_dest(): server weight less than zero [ 287.201615][T14708] sit1: entered promiscuous mode [ 287.219755][T14708] sit1: entered allmulticast mode [ 287.226271][T14706] IPVS: using max 27 ests per chain, 64800 per kthread [ 287.539411][T14729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4129'. [ 287.781202][T14744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4137'. [ 287.969676][T14750] netlink: 'syz.1.4141': attribute type 4 has an invalid length. [ 287.988631][T14750] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4141'. [ 288.201523][T14765] netlink: 'syz.3.4147': attribute type 3 has an invalid length. [ 288.236246][T14765] netlink: 'syz.3.4147': attribute type 1 has an invalid length. [ 288.268627][T14765] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4147'. [ 288.382633][T14776] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4153'. [ 288.676469][T14790] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 288.684842][T14791] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4159'. [ 288.706225][T14791] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4159'. [ 289.274435][T14820] xt_l2tp: missing protocol rule (udp|l2tpip) [ 289.337438][T14827] netlink: 'syz.4.4176': attribute type 2 has an invalid length. [ 289.452937][T14832] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4179'. [ 289.499556][T14836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.819641][T14852] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.4187'. [ 289.966899][T14859] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 290.076731][T14864] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.670971][T14900] netlink: 'syz.2.4209': attribute type 5 has an invalid length. [ 290.982199][T14914] netlink: 'syz.0.4218': attribute type 1 has an invalid length. [ 291.009961][T14914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 291.933214][T14961] netlink: 'syz.2.4237': attribute type 2 has an invalid length. [ 292.726461][T15001] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 292.726461][T15001] Please contact the netfilter-devel mailing list or update your nftables rules. [ 292.760155][T15004] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 293.665542][T15054] __nla_validate_parse: 5 callbacks suppressed [ 293.665562][T15054] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4284'. [ 293.794254][T15061] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4289'. [ 294.968327][T15121] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 295.216235][T15132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4323'. [ 295.701036][T15162] netlink: 'syz.0.4338': attribute type 1 has an invalid length. [ 295.709742][T15162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.889809][T15172] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 261 [ 295.977167][T15176] vlan0: entered promiscuous mode [ 296.029560][T15176] team0: Port device vlan0 added [ 296.594726][T15210] nftables ruleset with unbound set [ 296.944387][T15232] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.4371'. [ 297.116472][T15240] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4375'. [ 297.645520][T15266] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4387'. [ 297.778645][T15273] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4391'. [ 298.436912][ T5772] IPVS: starting estimator thread 0... [ 298.545636][T15306] IPVS: using max 31 ests per chain, 74400 per kthread [ 298.630663][T15316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4411'. [ 298.655405][T15316] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4411'. [ 298.682788][T15316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4411'. [ 298.889930][T15332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4419'. [ 300.441706][T15416] netlink: 'syz.2.4460': attribute type 1 has an invalid length. [ 300.463836][T15416] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4460'. [ 300.987596][T15443] netlink: 'syz.0.4473': attribute type 4 has an invalid length. [ 301.009819][T15448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4474'. [ 301.019026][T15448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4474'. [ 301.432829][T15468] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4486'. [ 302.035398][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 302.475952][T15521] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4510'. [ 302.503817][T15521] netlink: 'syz.3.4510': attribute type 9 has an invalid length. [ 302.599084][T15527] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4513'. [ 302.625929][T15527] netlink: 'syz.1.4513': attribute type 2 has an invalid length. [ 302.780250][T15533] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4514'. [ 304.221105][T15606] netlink: 'syz.1.4550': attribute type 7 has an invalid length. [ 304.547513][T15624] sctp: [Deprecated]: syz.1.4558 (pid 15624) Use of int in max_burst socket option deprecated. [ 304.547513][T15624] Use struct sctp_assoc_value instead [ 304.936168][T15642] netlink: 13 bytes leftover after parsing attributes in process `syz.2.4568'. [ 305.968257][T15701] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4594'. [ 306.006427][T15701] xt_policy: neither incoming nor outgoing policy selected [ 306.448842][T15721] netlink: 'syz.2.4603': attribute type 1 has an invalid length. [ 306.738178][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4610'. [ 306.756742][T15739] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4611'. [ 306.807731][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4610'. [ 306.922536][T15747] xt_hashlimit: size too large, truncated to 1048576 [ 306.997198][T15752] Bluetooth: MGMT ver 1.23 [ 307.499196][T15775] netlink: 212304 bytes leftover after parsing attributes in process `syz.3.4625'. [ 307.510771][T15773] bridge0: port 4(ipvlan2) entered blocking state [ 307.530863][T15773] bridge0: port 4(ipvlan2) entered disabled state [ 307.537700][T15775] openvswitch: netlink: Message has 6 unknown bytes. [ 307.547991][T15773] ipvlan2: entered allmulticast mode [ 307.565403][T15773] bridge0: entered allmulticast mode [ 307.607887][T15773] ipvlan2: left allmulticast mode [ 307.623976][T15773] bridge0: left allmulticast mode [ 309.065728][T15853] netlink: zone id is out of range [ 309.088443][T15853] netlink: zone id is out of range [ 309.104886][T15853] netlink: zone id is out of range [ 309.116616][T15853] netlink: zone id is out of range [ 309.127204][T15853] netlink: zone id is out of range [ 309.141638][T15853] netlink: zone id is out of range [ 309.163157][T15853] netlink: zone id is out of range [ 309.174182][T15853] netlink: zone id is out of range [ 309.185762][T15853] netlink: zone id is out of range [ 309.443314][T15873] Cannot find add_set index 46338 as target [ 309.894235][T15893] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4671'. [ 310.959230][T15948] tipc: Started in network mode [ 310.973888][T15948] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 310.989101][T15948] tipc: Enabled bearer , priority 14 [ 311.484611][T15977] netlink: 'syz.3.4705': attribute type 3 has an invalid length. [ 312.107768][ T10] tipc: Node number set to 10463914 [ 312.832682][T16042] net_ratelimit: 45 callbacks suppressed [ 312.832704][T16042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.948824][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4736'. [ 312.979525][T16048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4736'. [ 313.913765][T16094] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4755'. [ 314.111315][T16107] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 314.124593][T16107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.866356][T16142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4775'. [ 315.640654][T16173] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4788'. [ 315.663015][T16175] atomic_op ffff888025929198 conn xmit_atomic 0000000000000000 [ 317.399446][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.455012][T16286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4842'. [ 318.494804][T16286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4842'. [ 318.752857][T16295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4846'. [ 319.526605][T16322] netlink: 'syz.0.4858': attribute type 1 has an invalid length. [ 319.553966][T16322] netlink: 'syz.0.4858': attribute type 1 has an invalid length. [ 319.955037][T16345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4870'. [ 319.959702][T16342] pimreg3: entered allmulticast mode [ 319.964862][T16345] netlink: 176 bytes leftover after parsing attributes in process `syz.2.4870'. [ 319.979778][T16345] netlink: 'syz.2.4870': attribute type 5 has an invalid length. [ 320.402824][T16369] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4880'. [ 320.981151][T16398] tipc: Enabling not permitted [ 320.997876][T16398] tipc: Enabling of bearer rejected, failed to enable media [ 321.506079][T16434] netlink: 88 bytes leftover after parsing attributes in process `syz.1.4912'. [ 321.517150][T16434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4912'. [ 321.527482][T16434] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4912'. [ 321.535138][T16430] vlan0: entered promiscuous mode [ 321.557414][T16430] bridge0: entered promiscuous mode [ 321.894361][T16454] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4920'. [ 322.484701][T16489] netlink: 'syz.4.4936': attribute type 1 has an invalid length. [ 322.649653][T16495] netlink: 'syz.4.4940': attribute type 142 has an invalid length. [ 325.283791][T16627] __nla_validate_parse: 2 callbacks suppressed [ 325.283811][T16627] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5005'. [ 325.367780][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5010'. [ 325.965320][T16668] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 326.223350][T16685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5033'. [ 326.402705][T16693] veth3: entered allmulticast mode [ 326.515954][T16705] netlink: 176 bytes leftover after parsing attributes in process `syz.3.5041'. [ 326.536882][T16705] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5041'. [ 326.735087][T16716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5048'. [ 326.748548][T16717] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 326.954080][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5052'. [ 326.978508][T16729] netlink: 'syz.1.5055': attribute type 11 has an invalid length. [ 326.996656][T16729] netlink: 'syz.1.5055': attribute type 4 has an invalid length. [ 327.009883][T16729] netlink: 199768 bytes leftover after parsing attributes in process `syz.1.5055'. [ 327.150370][T16737] netlink: 'syz.2.5058': attribute type 1 has an invalid length. [ 327.174490][T16737] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5058'. [ 327.199690][T16737] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5058'. [ 327.233160][T16737] netlink: 'syz.2.5058': attribute type 1 has an invalid length. [ 327.434760][T16751] sctp: [Deprecated]: syz.0.5066 (pid 16751) Use of int in maxseg socket option. [ 327.434760][T16751] Use struct sctp_assoc_value instead [ 327.659047][T16766] netlink: 'syz.1.5073': attribute type 11 has an invalid length. [ 327.711533][T16766] netlink: 'syz.1.5073': attribute type 11 has an invalid length. [ 328.049757][T16787] pim6reg527: entered allmulticast mode [ 328.602930][T16819] netlink: 'syz.3.5094': attribute type 1 has an invalid length. [ 328.621649][T16819] netlink: 'syz.3.5094': attribute type 1 has an invalid length. [ 330.540606][T16931] tipc: Enabling of bearer rejected, media not registered [ 331.073961][T16962] netlink: 'syz.3.5161': attribute type 10 has an invalid length. [ 331.250810][T16972] __nla_validate_parse: 8 callbacks suppressed [ 331.250831][T16972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5168'. [ 331.511066][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5175'. [ 331.520609][T16992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5175'. [ 331.565709][T16982] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 331.635886][T16982] bond4 (unregistering): Released all slaves [ 331.744051][T17001] netlink: 'syz.4.5179': attribute type 3 has an invalid length. [ 332.079295][T17019] netlink: 'syz.2.5191': attribute type 1 has an invalid length. [ 332.092669][T17019] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5191'. [ 332.284472][T17030] netlink: 640 bytes leftover after parsing attributes in process `syz.2.5196'. [ 332.318129][T17030] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 333.331273][T17083] nbd: must specify a size in bytes for the device [ 333.729794][T17103] netlink: 'syz.4.5232': attribute type 29 has an invalid length. [ 334.404397][T17141] netlink: 'syz.1.5251': attribute type 3 has an invalid length. [ 335.605697][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5279'. [ 335.627201][T17202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5279'. [ 336.007718][T17224] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5289'. [ 337.163981][T17281] tipc: Enabled bearer , priority 24 [ 337.165109][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 337.295078][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 337.486408][T17293] netlink: 'syz.2.5325': attribute type 1 has an invalid length. [ 337.524297][T17293] netlink: 96 bytes leftover after parsing attributes in process `syz.2.5325'. [ 337.533427][T17293] netlink: 'syz.2.5325': attribute type 1 has an invalid length. [ 337.541738][T17293] netlink: 'syz.2.5325': attribute type 8 has an invalid length. [ 337.550799][T17293] netlink: 606 bytes leftover after parsing attributes in process `syz.2.5325'. [ 337.567385][T17293] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5325'. [ 337.577035][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 337.704714][T17300] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5327'. [ 338.094739][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 338.604043][T17350] netlink: 'syz.4.5351': attribute type 1 has an invalid length. [ 338.619440][T17350] netlink: 232 bytes leftover after parsing attributes in process `syz.4.5351'. [ 339.154708][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 339.540385][T17399] Dead loop on virtual device ip6_vti0 (net 38), fix it urgently! [ 339.558974][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5374'. [ 339.743729][T17413] netlink: 'syz.1.5380': attribute type 16 has an invalid length. [ 339.755674][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5382'. [ 339.774097][T17413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5380'. [ 339.783342][T17414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5382'. [ 339.799564][T17414] netlink: 'syz.4.5382': attribute type 12 has an invalid length. [ 339.819577][T17414] netlink: 'syz.4.5382': attribute type 11 has an invalid length. [ 340.195472][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 340.553172][T17452] netlink: 'syz.1.5400': attribute type 10 has an invalid length. [ 341.235467][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 341.381111][T17500] netlink: 'syz.3.5423': attribute type 3 has an invalid length. [ 342.101675][T17547] netlink: 'syz.0.5446': attribute type 2 has an invalid length. [ 342.275808][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 342.839094][T17585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 343.319822][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 343.804805][T17641] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5492'. [ 344.261084][T17669] validate_nla: 1 callbacks suppressed [ 344.261102][T17669] netlink: 'syz.0.5506': attribute type 1 has an invalid length. [ 344.313808][T17669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 344.356413][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 345.234279][T17726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 345.397835][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 346.000420][T17770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5556'. [ 346.278926][T17788] "syz.3.5565" (17788) uses obsolete ecb(arc4) skcipher [ 346.434830][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 346.602487][T17808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5575'. [ 346.684928][T17812] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 346.867817][T17824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5583'. [ 347.408634][T17857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5597'. [ 347.476800][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 348.514596][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 348.991208][T17942] netlink: 'syz.3.5638': attribute type 1 has an invalid length. [ 349.059701][T17942] netlink: 'syz.3.5638': attribute type 3 has an invalid length. [ 349.086425][T17942] netlink: 172 bytes leftover after parsing attributes in process `syz.3.5638'. [ 349.109480][T17942] NCSI netlink: No device for ifindex 813332851 [ 349.133608][T17950] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 349.556989][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 350.289716][T18016] netlink: 212 bytes leftover after parsing attributes in process `syz.2.5673'. [ 350.594253][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 350.850636][T18049] Bluetooth: MGMT ver 1.23 [ 350.942742][T18053] netlink: 'syz.2.5689': attribute type 25 has an invalid length. [ 351.278957][T18068] netlink: 96 bytes leftover after parsing attributes in process `syz.0.5697'. [ 351.635448][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 351.759126][T18097] nbd: must specify a device to reconfigure [ 352.073465][T18115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5721'. [ 352.478313][T18141] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 352.511412][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5735'. [ 352.541538][T18143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5735'. [ 352.675449][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 352.930760][T18163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5745'. [ 353.370450][T18188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5757'. [ 353.716729][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 353.851919][T18220] veth0_to_bond: entered allmulticast mode [ 354.116599][T18234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5776'. [ 354.129189][T18235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5777'. [ 354.139310][T18234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5776'. [ 354.756001][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 354.835487][T18276] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5798'. [ 354.857678][T18277] tipc: Enabling of bearer rejected, media not registered [ 355.172041][T18294] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5806'. [ 355.203852][T18294] netlink: 'syz.4.5806': attribute type 3 has an invalid length. [ 355.265177][T18298] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5808'. [ 355.400019][T18308] netlink: 'syz.2.5813': attribute type 1 has an invalid length. [ 355.516243][T18314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.774661][T18334] netlink: 272 bytes leftover after parsing attributes in process `syz.0.5826'. [ 355.799434][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 355.880519][T18338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5829'. [ 355.984595][T18344] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.5828'. [ 356.000440][T18340] lo speed is unknown, defaulting to 1000 [ 356.019369][T18344] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 356.070198][T18344] 0ªX¹¦Dö»: entered allmulticast mode [ 356.641544][T18383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5848'. [ 356.837773][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 356.889122][T18393] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.875066][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 358.065552][T18456] nbd: must specify an index to disconnect [ 358.575349][T18486] : entered promiscuous mode [ 358.795352][T18505] tipc: Started in network mode [ 358.811163][T18505] tipc: Node identity ac14140f, cluster identity 3 [ 358.856308][T18505] tipc: Enabled bearer , priority 10 [ 358.914996][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 359.208599][T18530] netlink: 'syz.3.5918': attribute type 1 has an invalid length. [ 359.851020][T18571] netlink: 'syz.3.5937': attribute type 58 has an invalid length. [ 359.885861][T18571] __nla_validate_parse: 4 callbacks suppressed [ 359.885882][T18571] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5937'. [ 359.954564][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 360.102609][ T3575] tipc: Node number set to 2886997007 [ 360.951526][T18636] netlink: 'syz.1.5972': attribute type 1 has an invalid length. [ 360.996058][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 362.037838][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 362.184636][T18713] ieee802154 phy1 wpan1: encryption failed: -22 [ 362.722916][T18738] syz.0.6020 (18738) used greatest stack depth: 17144 bytes left [ 363.074998][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 363.362519][T18789] netlink: 'syz.0.6046': attribute type 4 has an invalid length. [ 363.745722][T18810] tipc: Enabling of bearer rejected, failed to enable media [ 364.128018][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 365.154843][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 365.451784][T18916] netlink: 100 bytes leftover after parsing attributes in process `syz.0.6108'. [ 365.540084][T18922] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 365.686077][T18932] netlink: 'syz.1.6115': attribute type 8 has an invalid length. [ 365.703085][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6115'. [ 366.022192][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.045901][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.066753][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.089303][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 366.168155][T18954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6125'. [ 366.197014][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 366.210171][T18958] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 366.306119][T18963] veth1_macvtap: left promiscuous mode [ 366.322829][T18963] macsec0: entered promiscuous mode [ 366.336415][T18963] macsec0: entered allmulticast mode [ 366.397325][T18966] veth1_macvtap: entered promiscuous mode [ 366.423036][T18966] veth1_macvtap: entered allmulticast mode [ 366.448393][T18966] macsec0: left promiscuous mode [ 366.477498][T18966] macsec0: left allmulticast mode [ 366.503190][T18966] veth1_macvtap: left allmulticast mode [ 366.855067][T18989] netlink: 'syz.3.6141': attribute type 3 has an invalid length. [ 367.002838][T18999] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6146'. [ 367.031090][T18999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6146'. [ 367.050977][T18999] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6146'. [ 367.088939][T19005] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6149'. [ 367.246458][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 367.319279][T19016] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6154'. [ 367.916768][T19043] netlink: 277 bytes leftover after parsing attributes in process `syz.0.6167'. [ 368.277770][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 368.868510][T19086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.001203][T19093] lo speed is unknown, defaulting to 1000 [ 369.314944][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 369.623091][T19135] netlink: 'syz.4.6211': attribute type 18 has an invalid length. [ 369.637485][ T30] audit: type=1800 audit(1778927118.733:3): pid=19134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6212" name="memory.events" dev="tmpfs" ino=6362 res=0 errno=0 [ 369.707722][ T30] audit: type=1804 audit(1778927118.753:4): pid=19134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.6212" name="/newroot/1267/memory.events" dev="tmpfs" ino=6362 res=1 errno=0 [ 369.898709][T19147] bond3: entered promiscuous mode [ 369.913183][T19147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6218'. [ 370.356119][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 370.485375][T19177] __nla_validate_parse: 1 callbacks suppressed [ 370.485396][T19177] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6230'. [ 370.701531][T19185] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 370.720226][T19185] syzkaller1: linktype set to 823 [ 370.797963][T19192] netlink: 'syz.1.6238': attribute type 4 has an invalid length. [ 370.816000][T19193] ip6gre0: Master is either lo or non-ether device [ 371.050788][T19208] sctp: [Deprecated]: syz.0.6247 (pid 19208) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.050788][T19208] Use struct sctp_sack_info instead [ 371.106872][T19208] sctp: [Deprecated]: syz.0.6247 (pid 19208) Use of struct sctp_assoc_value in delayed_ack socket option. [ 371.106872][T19208] Use struct sctp_sack_info instead [ 371.395997][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 371.718633][T19247] netlink: 'syz.0.6266': attribute type 83 has an invalid length. [ 371.746374][T19251] vcan0: tx address claim with dest, not broadcast [ 371.963919][T19266] netlink: 'syz.4.6274': attribute type 14 has an invalid length. [ 372.251586][T19280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6281'. [ 372.269535][T19284] netem: change failed [ 372.273969][T19280] netlink: 176 bytes leftover after parsing attributes in process `syz.3.6281'. [ 372.284982][T19280] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6281'. [ 372.436757][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 372.552920][T19300] netlink: 'syz.4.6290': attribute type 33 has an invalid length. [ 372.655370][T19300] bond3: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 372.677964][T19300] bond3 (unregistering): Released all slaves [ 373.075139][T19330] team0: No ports can be present during mode change [ 373.225798][T19340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6309'. [ 373.475925][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 373.969608][T19385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6328'. [ 373.995713][ T50] block nbd0: Receive control failed (result -32) [ 374.301100][T19399] netlink: 232 bytes leftover after parsing attributes in process `syz.1.6335'. [ 374.514999][T19413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6341'. [ 374.525195][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 375.014128][T19445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6358'. [ 375.416717][T19463] IPv6: NLM_F_CREATE should be specified when creating new route [ 375.556159][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 375.875240][T19492] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6379'. [ 376.029474][T19498] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6382'. [ 376.353093][T19514] team0: Cannot enslave team device to itself [ 376.594867][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 377.119127][T19554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6408'. [ 377.249244][T19560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6411'. [ 377.279883][T19560] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6411'. [ 377.635309][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 378.565812][T19632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6444'. [ 378.620160][T19632] macvlan2: entered allmulticast mode [ 378.642264][T19632] dummy0: entered allmulticast mode [ 378.675909][T19632] dummy0: entered promiscuous mode [ 378.678243][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 378.843582][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.117852][T19660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6458'. [ 379.319307][T19674] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6464'. [ 379.718612][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 379.816656][T19702] sctp: [Deprecated]: syz.1.6476 (pid 19702) Use of int in max_burst socket option deprecated. [ 379.816656][T19702] Use struct sctp_assoc_value instead [ 380.145440][T19721] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6486'. [ 380.642322][T19753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6500'. [ 380.758505][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 381.578451][T19810] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6527'. [ 381.795988][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 381.995557][T19835] netlink: 'syz.2.6540': attribute type 1 has an invalid length. [ 382.024753][T19835] netlink: 'syz.2.6540': attribute type 3 has an invalid length. [ 382.036699][T19835] netlink: 'syz.2.6540': attribute type 7 has an invalid length. [ 382.056831][T19835] netlink: 'syz.2.6540': attribute type 8 has an invalid length. [ 382.070564][T19835] netlink: 184 bytes leftover after parsing attributes in process `syz.2.6540'. [ 382.079403][T19842] netlink: 'syz.3.6543': attribute type 3 has an invalid length. [ 382.097206][T19835] NCSI netlink: No device for ifindex 131092 [ 382.552524][T19870] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6558'. [ 382.835760][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 383.115919][T19903] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.6571'. [ 383.411812][T19915] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6577'. [ 383.446116][T19921] netlink: 'syz.1.6581': attribute type 11 has an invalid length. [ 383.876807][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 384.024818][T19960] netlink: 'syz.0.6599': attribute type 30 has an invalid length. [ 384.917277][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 385.086438][T20017] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.658363][T20053] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6642'. [ 385.693609][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6644'. [ 385.958466][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 386.039311][T20078] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6653'. [ 386.230712][T20087] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 386.432407][T20100] tipc: Started in network mode [ 386.443953][T20100] tipc: Node identity ac14140f, cluster identity 4711 [ 386.463168][T20100] tipc: New replicast peer: 255.255.255.255 [ 386.480183][T20100] tipc: Enabled bearer , priority 10 [ 386.512783][T20106] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6666'. [ 386.725822][T20118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6669'. [ 386.996706][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 387.593836][ T3575] tipc: Node number set to 2886997007 [ 387.661079][T20158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6692'. [ 387.734063][T20158] vlan2: entered allmulticast mode [ 387.745391][T20158] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 388.037913][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 388.437280][T20202] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6713'. [ 388.448159][T20202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6713'. [ 388.459152][T20202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6713'. [ 388.579502][T20208] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6717'. [ 388.589265][T20208] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6717'. [ 389.009933][T20226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6725'. [ 389.047689][T20226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6725'. [ 389.075311][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 389.088281][T20232] netlink: 'syz.1.6728': attribute type 1 has an invalid length. [ 389.108291][T20232] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6728'. [ 389.127594][T20232] netlink: 'syz.1.6728': attribute type 1 has an invalid length. [ 389.160090][T20232] netlink: 'syz.1.6728': attribute type 8 has an invalid length. [ 389.176822][T20234] netlink: 'syz.0.6729': attribute type 1 has an invalid length. [ 389.196068][T20234] netlink: 'syz.0.6729': attribute type 7 has an invalid length. [ 389.214131][T20234] netlink: 'syz.0.6729': attribute type 8 has an invalid length. [ 389.232205][T20234] NCSI netlink: No device for ifindex 65584 [ 389.345810][T20241] Bluetooth: hci1: too big key_count value 32778 [ 389.392070][T20238] IPVS: persistence engine module ip_vs_pe_À not found [ 390.114820][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 391.156948][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 392.198487][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 393.239085][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 393.432149][T20460] netlink: 'syz.3.6833': attribute type 10 has an invalid length. [ 393.823737][T20486] __nla_validate_parse: 3 callbacks suppressed [ 393.823760][T20486] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6846'. [ 394.273365][T20514] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6855'. [ 394.298464][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 394.346233][T20518] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6858'. [ 394.517724][T20526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6863'. [ 394.527865][T20527] tipc: Enabled bearer , priority 4 [ 394.673375][T20531] tipc: Started in network mode [ 394.700558][T20531] tipc: Node identity ac14140f, cluster identity 4711 [ 394.719557][T20531] tipc: New replicast peer: 255.255.255.255 [ 394.745963][T20531] tipc: Enabled bearer , priority 10 [ 394.981217][T20548] netlink: 232 bytes leftover after parsing attributes in process `syz.3.6871'. [ 395.033995][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6873'. [ 395.243249][T20563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6879'. [ 395.266085][T20563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6879'. [ 395.314598][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 395.339959][T20568] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 395.864439][ T3575] tipc: Node number set to 2886997007 [ 395.971379][T20608] netlink: 'syz.2.6899': attribute type 83 has an invalid length. [ 396.147616][T20615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6901'. [ 396.178783][T20615] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6901'. [ 396.329633][T20624] netlink: 'syz.4.6905': attribute type 28 has an invalid length. [ 396.356859][T20624] netlink: 'syz.4.6905': attribute type 3 has an invalid length. [ 396.356898][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 396.975196][T20666] netlink: 'syz.4.6925': attribute type 83 has an invalid length. [ 396.984182][ T5782] tipc: Subscription rejected, illegal request [ 397.115898][T20672] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.125514][T20672] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.399989][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 397.975355][T20707] bond2 (unregistering): Released all slaves [ 398.027888][T20717] bond0: (slave bond_slave_1): Releasing backup interface [ 398.287121][T20727] veth0: entered promiscuous mode [ 398.311885][T20727] veth0: left promiscuous mode [ 398.410368][T20734] netlink: 'syz.0.6957': attribute type 4 has an invalid length. [ 398.436587][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 399.065295][T20774] __nla_validate_parse: 6 callbacks suppressed [ 399.065315][T20774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6977'. [ 399.119435][T20778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6977'. [ 399.462433][T20797] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6986'. [ 399.479418][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 399.817986][T20821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6998'. [ 399.836073][T20821] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6998'. [ 400.518980][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 400.864891][T20879] ipvlan2: entered allmulticast mode [ 400.870522][T20879] batadv_slave_1: entered allmulticast mode [ 400.881334][T20879] batman_adv: batadv0: Adding interface: ipvlan2 [ 400.888415][T20879] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 400.928503][T20879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 400.943564][T20879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 400.954885][T20879] batman_adv: batadv0: Interface activated: ipvlan2 [ 401.381849][T20894] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7032'. [ 401.394925][T20894] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7032'. [ 401.554731][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 401.893895][T20913] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 402.132792][T20925] nbd: nbd0 already in use [ 402.197781][T20928] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7049'. [ 402.595888][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 403.634573][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 404.029921][T20984] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7076'. [ 404.164852][T20994] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7080'. [ 404.589415][T21019] netlink: 'syz.0.7092': attribute type 5 has an invalid length. [ 404.623873][T21024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.631691][T21024] IPv6: NLM_F_CREATE should be set when creating new route [ 404.639039][T21024] IPv6: NLM_F_CREATE should be set when creating new route [ 404.677887][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 404.715402][T21024] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 404.788330][T21030] netlink: 232 bytes leftover after parsing attributes in process `syz.0.7097'. [ 405.086142][T21048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7105'. [ 405.117640][T21053] syz.3.7107 uses obsolete (PF_INET,SOCK_PACKET) [ 405.377349][T21069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7113'. [ 405.718346][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 405.779935][T21093] sctp: [Deprecated]: syz.0.7123 (pid 21093) Use of struct sctp_assoc_value in delayed_ack socket option. [ 405.779935][T21093] Use struct sctp_sack_info instead [ 405.855867][T21095] netem: change failed [ 406.053344][T21106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7130'. [ 406.756237][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 406.844193][ T30] audit: type=1804 audit(1778927155.943:5): pid=21142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7145" name="/newroot/1414/cgroup.controllers" dev="tmpfs" ino=7116 res=1 errno=0 [ 406.923820][ T30] audit: type=1800 audit(1778927155.953:6): pid=21142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7145" name="cgroup.controllers" dev="tmpfs" ino=7116 res=0 errno=0 [ 407.145694][T21164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7156'. [ 407.162550][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7156'. [ 407.448632][T21178] netlink: 'syz.3.7163': attribute type 1 has an invalid length. [ 407.459508][T21178] netlink: 'syz.3.7163': attribute type 2 has an invalid length. [ 407.470377][T21178] netlink: 'syz.3.7163': attribute type 1 has an invalid length. [ 407.536713][T21184] sctp: [Deprecated]: syz.4.7164 (pid 21184) Use of int in maxseg socket option. [ 407.536713][T21184] Use struct sctp_assoc_value instead [ 407.558061][T21186] tap0: tun_chr_ioctl cmd 1074025676 [ 407.574039][T21186] tap0: owner set to 0 [ 407.795625][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 408.036257][T21214] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7181'. [ 408.152020][T21214] ip6erspan0: entered allmulticast mode [ 408.158818][T21215] netem: incorrect ge model size [ 408.167798][T21222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7184'. [ 408.836698][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 409.052073][T21269] netlink: 96 bytes leftover after parsing attributes in process `syz.3.7207'. [ 409.582050][T21297] wg1: entered promiscuous mode [ 409.585155][T21302] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.7222'. [ 409.601897][T21297] wg1: entered allmulticast mode [ 409.771765][T21310] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7227'. [ 409.877618][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 409.929217][T21320] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7232'. [ 410.081024][T21330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7236'. [ 410.421626][T21342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7241'. [ 410.885169][T21361] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7252'. [ 410.917104][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 411.020511][T21371] netlink: 'syz.3.7255': attribute type 19 has an invalid length. [ 411.071849][T21374] block nbd1: Unsupported socket: should be TCP or UNIX. [ 411.533155][T21400] netlink: 'syz.1.7268': attribute type 3 has an invalid length. [ 411.550572][T21400] netlink: 'syz.1.7268': attribute type 1 has an invalid length. [ 411.559921][T21400] netlink: 212 bytes leftover after parsing attributes in process `syz.1.7268'. [ 411.571129][T21400] NCSI netlink: No device for ifindex 813332851 [ 411.956532][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 412.462367][T21440] netem: change failed [ 412.711357][T21453] skbuff: bad partial csum: csum=65535/0 headroom=64 headlen=65537 [ 412.885592][T21465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7302'. [ 412.937883][T21472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7303'. [ 413.006175][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 413.125455][T21480] netlink: 92 bytes leftover after parsing attributes in process `syz.2.7305'. [ 413.157281][T21480] netlink: 'syz.2.7305': attribute type 1 has an invalid length. [ 414.049225][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 414.361669][T21557] netlink: 'syz.4.7343': attribute type 6 has an invalid length. [ 415.077473][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 415.334366][T21619] netlink: 'syz.1.7371': attribute type 83 has an invalid length. [ 415.518925][T21631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7377'. [ 415.690594][T21638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7380'. [ 415.964819][T21655] netlink: 'syz.2.7388': attribute type 29 has an invalid length. [ 415.987290][T21655] netlink: 'syz.2.7388': attribute type 29 has an invalid length. [ 416.003328][T21655] netlink: 'syz.2.7388': attribute type 29 has an invalid length. [ 416.029344][T21655] netlink: 'syz.2.7388': attribute type 29 has an invalid length. [ 416.052217][T21655] netlink: 'syz.2.7388': attribute type 29 has an invalid length. [ 416.068959][T21655] netlink: 'syz.2.7388': attribute type 29 has an invalid length. [ 416.079143][T21655] netlink: 'syz.2.7388': attribute type 29 has an invalid length. [ 416.114454][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 416.126331][T21661] h: entered promiscuous mode [ 416.335264][T21676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7398'. [ 416.486626][T21681] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7401'. [ 416.583466][T21686] netlink: 'syz.0.7403': attribute type 2 has an invalid length. [ 416.631409][T21688] netlink: 'syz.1.7404': attribute type 1 has an invalid length. [ 416.660488][T21688] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7404'. [ 416.698959][T21688] netlink: 'syz.1.7404': attribute type 1 has an invalid length. [ 416.732486][T21688] netlink: 'syz.1.7404': attribute type 8 has an invalid length. [ 416.783831][T21688] netlink: 582 bytes leftover after parsing attributes in process `syz.1.7404'. [ 416.812638][T21688] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7404'. [ 416.818621][T21700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7409'. [ 416.911715][T21703] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.7410'. [ 417.164426][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 417.570905][T21744] tipc: New replicast peer: 172.20.20.187 [ 417.582920][T21744] tipc: Enabled bearer , priority 10 [ 417.721932][T21757] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7436'. [ 418.135619][T21783] veth1_to_bridge: entered allmulticast mode [ 418.196486][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 418.693841][ T5756] tipc: Node number set to 758005887 [ 419.234918][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 420.274602][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 420.876509][T21931] __nla_validate_parse: 9 callbacks suppressed [ 420.876529][T21931] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7515'. [ 421.052750][T21937] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7518'. [ 421.256024][T21946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7522'. [ 421.282708][T21946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7522'. [ 421.315866][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 422.360474][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 422.476064][T22020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7558'. [ 422.758060][T22038] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7566'. [ 422.783370][T22038] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7566'. [ 423.007730][T22053] tipc: New replicast peer: 255.255.255.255 [ 423.024716][T22053] tipc: Enabled bearer , priority 10 [ 423.038829][T22053] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7573'. [ 423.090488][T22056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7575'. [ 423.384976][T22076] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7583'. [ 423.400324][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 424.440766][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 424.634998][T22154] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 424.706414][T22161] netlink: 'syz.1.7624': attribute type 5 has an invalid length. [ 425.479091][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 425.883886][T22221] veth1_macvtap: left promiscuous mode [ 426.085210][T22233] __nla_validate_parse: 5 callbacks suppressed [ 426.085232][T22233] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7657'. [ 426.207682][T22239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7661'. [ 426.494530][T22257] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7669'. [ 426.515392][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 426.522966][T22259] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.7670'. [ 426.785573][T22273] netlink: 'syz.3.7676': attribute type 1 has an invalid length. [ 426.815893][T22273] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7676'. [ 426.852090][T22273] netlink: 'syz.3.7676': attribute type 1 has an invalid length. [ 426.877407][T22273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7676'. [ 427.108787][T22293] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7687'. [ 427.235910][T22300] netlink: 'syz.0.7690': attribute type 83 has an invalid length. [ 427.559140][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 427.853481][T22336] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7705'. [ 427.885310][T22336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7705'. [ 428.597165][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 428.599934][T22374] netlink: 'syz.1.7719': attribute type 10 has an invalid length. [ 428.658585][T22374] team0: Port device dummy0 added [ 429.018137][ T5287] veth0_macvtap: left promiscuous mode [ 429.135497][T22395] gtp0: entered promiscuous mode [ 429.156933][T22395] gtp0: entered allmulticast mode [ 429.381964][T22414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7736'. [ 429.468177][T22417] IPv6: NLM_F_CREATE should be specified when creating new route [ 429.636095][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 430.057497][T22450] lo: left promiscuous mode [ 430.214762][T22450] 0ªX¹¦Dö»: left allmulticast mode [ 430.633581][T22450] bridge0: port 3(syz_tun) entered disabled state [ 430.675170][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 430.972130][T22450] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 430.999590][ T3575] lo speed is unknown, defaulting to 1000 [ 431.019107][ T3575] syz0: Port: 1 Link DOWN [ 431.398818][T22515] __nla_validate_parse: 3 callbacks suppressed [ 431.398838][T22515] netlink: 284 bytes leftover after parsing attributes in process `syz.0.7765'. [ 431.714946][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 432.755799][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 432.886806][T22593] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.936407][T22602] netem: change failed [ 433.208314][T22613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7810'. [ 433.316584][T22621] netem: change failed [ 433.478867][T22631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7819'. [ 433.795247][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 433.809285][T22652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7828'. [ 434.833953][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 435.080432][T22715] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 435.524624][T22734] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7865'. [ 435.573797][T22734] gtp1: entered promiscuous mode [ 435.584419][T22734] gtp1: entered allmulticast mode [ 435.601362][T22736] netlink: 'syz.3.7866': attribute type 1 has an invalid length. [ 435.877669][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 436.172434][T22764] syzkaller1: entered allmulticast mode [ 436.915103][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 437.180063][T22808] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7896'. [ 437.592139][T22824] netlink: 'syz.1.7904': attribute type 12 has an invalid length. [ 437.621482][T22824] netlink: 'syz.1.7904': attribute type 29 has an invalid length. [ 437.652215][T22824] netlink: 148 bytes leftover after parsing attributes in process `syz.1.7904'. [ 437.679218][T22831] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.7907'. [ 437.694149][T22824] netlink: 'syz.1.7904': attribute type 3 has an invalid length. [ 437.729690][T22824] netlink: 'syz.1.7904': attribute type 2 has an invalid length. [ 437.768709][T22824] netlink: 35 bytes leftover after parsing attributes in process `syz.1.7904'. [ 437.956298][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 438.655892][T22863] erspan0: entered promiscuous mode [ 438.671625][T22863] erspan0: left allmulticast mode [ 438.698643][T22863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7922'. [ 438.995558][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 439.469271][T22900] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7938'. [ 440.044362][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 440.276498][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.642803][T22942] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.650142][T22942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.657848][T22942] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.665105][T22942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.781772][T22952] syzkaller1: entered promiscuous mode [ 440.811450][T22952] syzkaller1: entered allmulticast mode [ 440.980945][T22958] syzkaller1: entered promiscuous mode [ 440.993185][T22958] syzkaller1: entered allmulticast mode [ 441.073972][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 441.242909][T22964] netlink: 'syz.4.7966': attribute type 2 has an invalid length. [ 442.115609][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 442.946880][T23052] netlink: 'syz.4.8000': attribute type 4 has an invalid length. [ 443.154864][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 443.690517][T23093] xt_hashlimit: max too large, truncated to 1048576 [ 444.038498][T23111] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8019'. [ 444.195602][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 444.742803][T23145] netlink: 'syz.1.8034': attribute type 1 has an invalid length. [ 444.789597][T23145] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8034'. [ 444.815512][T23145] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8034'. [ 444.832332][T23145] netlink: 'syz.1.8034': attribute type 1 has an invalid length. [ 444.865153][T23145] netlink: 634 bytes leftover after parsing attributes in process `syz.1.8034'. [ 444.892832][T23155] netlink: 168 bytes leftover after parsing attributes in process `syz.0.8039'. [ 445.005463][T23162] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8042'. [ 445.029858][T23162] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8042'. [ 445.161668][T23169] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 445.239893][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 445.831287][T23206] sctp: [Deprecated]: syz.4.8063 (pid 23206) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.831287][T23206] Use struct sctp_sack_info instead [ 446.275364][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 446.642809][T23251] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8082'. [ 447.151048][T23279] batadv_slave_1: entered promiscuous mode [ 447.156599][T23278] netlink: 'syz.2.8095': attribute type 9 has an invalid length. [ 447.164672][T23276] batadv_slave_1: left promiscuous mode [ 447.170973][T23278] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8095'. [ 447.211375][T23282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8097'. [ 447.251205][T23282] netlink: 'syz.3.8097': attribute type 7 has an invalid length. [ 447.319898][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.331104][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 448.042227][T23324] xt_connbytes: Forcing CT accounting to be enabled [ 448.355223][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 449.096889][T23371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.107998][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.395447][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 449.574329][T23392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 449.849154][T23408] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 449.894795][T23408] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 449.897211][T23412] syzkaller1: entered promiscuous mode [ 449.926895][T23408] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 449.952273][T23412] syzkaller1: entered allmulticast mode [ 449.977619][T23408] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 450.328909][ T78] smbdirect: ib_dev[syz2] removed [ 450.438442][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 451.036557][T23468] xt_hashlimit: size too large, truncated to 1048576 [ 451.084166][T23472] __nla_validate_parse: 2 callbacks suppressed [ 451.084187][T23472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8182'. [ 451.154200][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.477293][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 451.899876][T23516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8200'. [ 451.915708][T23516] netlink: 'syz.4.8200': attribute type 7 has an invalid length. [ 451.931724][T23516] netlink: 'syz.4.8200': attribute type 8 has an invalid length. [ 451.951682][T23516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8200'. [ 452.153065][T23532] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 452.514729][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 452.558917][T23544] netlink: 'syz.0.8214': attribute type 1 has an invalid length. [ 452.568072][T23544] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8214'. [ 453.076201][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.192522][T23582] ipvlan0: entered promiscuous mode [ 453.203260][T23582] ipvlan0: entered allmulticast mode [ 453.210275][T23582] bridge0: entered allmulticast mode [ 453.558910][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 453.567916][T23598] syzkaller1: entered promiscuous mode [ 453.567941][T23598] syzkaller1: entered allmulticast mode [ 454.598889][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 454.856084][T23649] netlink: 'syz.4.8264': attribute type 63 has an invalid length. [ 454.893375][T23649] netlink: 'syz.4.8264': attribute type 63 has an invalid length. [ 455.053496][T23659] syzkaller1: entered promiscuous mode [ 455.060371][T23659] syzkaller1: entered allmulticast mode [ 455.635358][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 456.205320][T23718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8286'. [ 456.262168][T23719] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8287'. [ 456.367738][T23721] netem: change failed [ 456.674557][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 456.810332][T23742] netlink: 'syz.4.8297': attribute type 29 has an invalid length. [ 456.824225][T23742] netlink: 'syz.4.8297': attribute type 29 has an invalid length. [ 456.834576][T23742] netlink: 500 bytes leftover after parsing attributes in process `syz.4.8297'. [ 456.847780][T23742] unsupported nla_type 58 [ 456.880887][T23748] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 457.449583][T23781] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8316'. [ 457.657698][T23794] sock: sock_set_timeout: `syz.4.8323' (pid 23794) tries to set negative timeout [ 457.718896][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 458.276395][T23831] netlink: 27 bytes leftover after parsing attributes in process `syz.4.8339'. [ 458.452449][T23842] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.8342'. [ 458.681763][T23840] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.691887][T23852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8346'. [ 458.721309][T23840] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.757749][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 458.834364][T19042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.958132][T23863] netlink: 'syz.3.8352': attribute type 1 has an invalid length. [ 458.975188][T23863] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8352'. [ 459.001213][T23840] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.017316][T23840] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.040832][T23869] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8355'. [ 459.148489][T23840] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.172959][T23840] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.293879][T23840] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.307022][T23840] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 459.556747][T23890] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.8366'. [ 459.599829][T19042] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.610139][T19042] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.760219][ T78] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.784651][ T78] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.796894][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 459.808994][T23897] syzkaller1: entered promiscuous mode [ 459.838197][T23897] syzkaller1: entered allmulticast mode [ 459.932007][ T78] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 459.941458][ T78] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.012467][ T78] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 460.039545][ T78] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 460.129761][T23916] syzkaller1: entered promiscuous mode [ 460.152370][T23916] syzkaller1: entered allmulticast mode [ 460.754365][T23951] pim6reg1: entered promiscuous mode [ 460.760060][T23951] pim6reg1: entered allmulticast mode [ 460.835243][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 461.088059][T23961] netlink: 'syz.4.8395': attribute type 17 has an invalid length. [ 461.112276][T23961] gretap0: entered promiscuous mode [ 461.140069][T23961] gretap0: left promiscuous mode [ 461.222817][T23969] netlink: 'syz.3.8397': attribute type 4 has an invalid length. [ 461.884098][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 462.107032][T24005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.116790][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.446701][T24016] __nla_validate_parse: 5 callbacks suppressed [ 462.446725][T24016] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8418'. [ 462.478426][T24016] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8418'. [ 462.495976][T24016] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8418'. [ 462.932523][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 463.177824][T24051] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8435'. [ 463.190520][T24051] netlink: 'syz.0.8435': attribute type 7 has an invalid length. [ 463.199076][T24051] netlink: 'syz.0.8435': attribute type 8 has an invalid length. [ 463.209979][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8435'. [ 463.380303][T24060] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.8438'. [ 463.416377][T24065] pimreg: left allmulticast mode [ 463.495048][T24067] geneve0: entered promiscuous mode [ 463.502802][ T78] netdevsim netdevsim2 netdevsim0: set [1, 2] type 2 family 0 port 43549 - 0 [ 463.524520][ T78] netdevsim netdevsim2 netdevsim1: set [1, 2] type 2 family 0 port 43549 - 0 [ 463.547962][ T78] netdevsim netdevsim2 netdevsim2: set [1, 2] type 2 family 0 port 43549 - 0 [ 463.560453][ T78] netdevsim netdevsim2 netdevsim3: set [1, 2] type 2 family 0 port 43549 - 0 [ 463.960505][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 464.080236][T24094] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 464.093405][T24094] gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 464.102612][T24094] gretap0: entered promiscuous mode [ 464.108750][T24094] gretap0: entered allmulticast mode [ 464.594922][T19042] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.997338][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 465.706075][T24188] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.8496'. [ 465.716039][T24188] netlink: ct family unspecified [ 465.872072][T24196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8501'. [ 465.886304][T24196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8501'. [ 465.908037][T24196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8501'. [ 466.036823][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 467.074851][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 467.717488][T24288] tipc: Resetting bearer [ 467.739357][T24288] tipc: Resetting bearer [ 468.116133][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 468.327390][T24318] veth1_macvtap: entered allmulticast mode [ 468.338749][T24318] __nla_validate_parse: 3 callbacks suppressed [ 468.338770][T24318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8554'. [ 468.428201][T24318] veth1_macvtap (unregistering): left allmulticast mode [ 468.606066][T24337] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8560'. [ 468.632161][T24337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8560'. [ 468.686222][T24339] tipc: Enabled bearer , priority 10 [ 469.163447][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 469.910021][T24403] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.8593'. [ 469.966053][T24400] block nbd1: server does not support multiple connections per device. [ 469.984765][T24400] block nbd1: shutting down sockets [ 470.196376][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 470.223563][T24420] netlink: 67 bytes leftover after parsing attributes in process `syz.0.8601'. [ 470.348535][T24427] IPv6: NLM_F_CREATE should be specified when creating new route [ 470.786932][T24451] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8615'. [ 470.906571][T24458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8619'. [ 470.921210][T24458] netlink: 'syz.1.8619': attribute type 1 has an invalid length. [ 470.930287][T24458] netlink: 'syz.1.8619': attribute type 2 has an invalid length. [ 471.187572][T24472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8626'. [ 471.234603][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 471.398550][T24478] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8626'. [ 471.413751][T24478] nbd: nbd64 already in use [ 471.418499][T24446] block nbd64: NBD_DISCONNECT [ 471.945110][T24508] vlan2: entered allmulticast mode [ 471.959680][T24508] hsr0: entered allmulticast mode [ 471.971749][T24508] hsr_slave_0: entered allmulticast mode [ 471.989645][T24508] hsr_slave_1: entered allmulticast mode [ 472.278542][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 473.005544][T24559] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8665'. [ 473.313938][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 473.480942][T24589] __nla_validate_parse: 3 callbacks suppressed [ 473.480964][T24589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8678'. [ 473.525950][T24592] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8681'. [ 474.179314][T24630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.197139][ T1097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.218153][T24630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.238474][T24630] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.266874][T24634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.287904][T24634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.297063][T24634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.320950][T24640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8703'. [ 474.331228][T24634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.340789][T24634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.366941][T24634] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.381624][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 474.569371][T24652] netlink: 27 bytes leftover after parsing attributes in process `syz.1.8707'. [ 474.750531][T24662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8713'. [ 474.777755][T24662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8713'. [ 474.799323][T24662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8713'. [ 474.821122][T24662] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8713'. [ 475.142568][T24678] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8722'. [ 475.321841][T24689] netlink: 7 bytes leftover after parsing attributes in process `syz.2.8728'. [ 475.394749][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 475.973145][T24724] atomic_op ffff888076e2c198 conn xmit_atomic 0000000000000000 [ 476.009784][T24731] netlink: 'syz.0.8744': attribute type 1 has an invalid length. [ 476.112695][T24735] netlink: 'syz.1.8747': attribute type 13 has an invalid length. [ 476.136612][T24735] netlink: 'syz.1.8747': attribute type 13 has an invalid length. [ 476.286026][T24747] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 476.307600][T24747] bond0: (slave lo): Enslaving as an active interface with an up link [ 476.434460][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 476.459189][T24755] veth0_macvtap: left promiscuous mode [ 476.633089][T24763] bridge4: entered promiscuous mode [ 476.653703][T24763] bridge4: entered allmulticast mode [ 476.709112][T24768] netlink: 'syz.1.8759': attribute type 1 has an invalid length. [ 476.784724][T24768] 8021q: adding VLAN 0 to HW filter on device bond4 [ 477.050050][T24787] netlink: 'syz.1.8766': attribute type 15 has an invalid length. [ 477.089624][T24787] netlink: 'syz.1.8766': attribute type 15 has an invalid length. [ 477.099987][ T78] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 477.118193][ T78] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 477.134120][ T78] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 477.156683][ T78] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 477.221337][T24792] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 477.342114][T24800] syzkaller1: entered promiscuous mode [ 477.350923][T24800] syzkaller1: entered allmulticast mode [ 477.439717][T24804] veth0: entered promiscuous mode [ 477.458131][T24804] veth0 (unregistering): left promiscuous mode [ 477.474323][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 477.709987][T24817] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 478.095804][T24833] IPVS: Scheduler module ip_vs_sip not found [ 478.321010][T24853] trusted_key: syz.3.8795 sent an empty control message without MSG_MORE. [ 478.514080][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 478.570446][T24868] __nla_validate_parse: 11 callbacks suppressed [ 478.570468][T24868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8802'. [ 478.587599][T24867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8801'. [ 478.628031][T24868] netlink: 'syz.4.8802': attribute type 6 has an invalid length. [ 478.666643][T24868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8802'. [ 478.693356][T24868] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8802'. [ 478.719363][T24868] netlink: 'syz.4.8802': attribute type 6 has an invalid length. [ 478.739502][T24868] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8802'. [ 478.802250][T24882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8809'. [ 479.438710][T24916] netlink: 240 bytes leftover after parsing attributes in process `syz.3.8823'. [ 479.545781][T24920] netlink: 512 bytes leftover after parsing attributes in process `syz.3.8826'. [ 479.556350][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 479.636934][T24923] netlink: 'syz.2.8827': attribute type 29 has an invalid length. [ 479.662320][T24923] netlink: 'syz.2.8827': attribute type 29 has an invalid length. [ 479.692160][T24923] netlink: 500 bytes leftover after parsing attributes in process `syz.2.8827'. [ 479.734855][T24925] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 479.754964][T24925] bond4: (slave lo): Enslaving as an active interface with an up link [ 479.791180][T24925] net_ratelimit: 26 callbacks suppressed [ 479.791211][T24925] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 480.330399][T24950] bond1: entered promiscuous mode [ 480.340485][T24950] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.400031][T24956] bond1: (slave bridge5): making interface the new active one [ 480.408579][T24956] bridge5: entered promiscuous mode [ 480.419127][T24956] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 480.551987][T24965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.596248][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 480.711353][T24969] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.028452][T24982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8852'. [ 481.329819][T24995] validate_nla: 2 callbacks suppressed [ 481.329839][T24995] netlink: 'syz.1.8857': attribute type 1 has an invalid length. [ 481.636127][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 482.336028][T25045] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 482.674404][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 482.792457][T25066] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 483.086413][T25075] netlink: 'syz.0.8889': attribute type 1 has an invalid length. [ 483.520036][T25092] 8021q: VLANs not supported on bond0 [ 483.558125][T25092]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 483.596408][T25092]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 483.622321][T25092]  (unregistering): Released all slaves [ 483.714404][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 483.799676][T25098] __nla_validate_parse: 10 callbacks suppressed [ 483.799696][T25098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8900'. [ 483.835404][T25098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8900'. [ 484.197281][T25121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8910'. [ 484.226655][T25121] netlink: 'syz.2.8910': attribute type 1 has an invalid length. [ 484.250174][T25121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8910'. [ 484.276056][T25121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8910'. [ 484.299606][T25121] netlink: 'syz.2.8910': attribute type 1 has an invalid length. [ 484.318764][T25121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8910'. [ 484.757268][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 485.074227][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.796372][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 486.150566][T25207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8933'. [ 486.268334][T25213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.295854][T25213] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.327768][T25213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.436676][T25213] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 486.457686][T22493] lo speed is unknown, defaulting to 1000 [ 486.457711][T25217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.466024][T22493] syz0: Port: 1 Link ACTIVE [ 486.476491][T25217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.492963][T25217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.510041][T25217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.528814][T25217] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 486.536843][T25217] batman_adv: batadv0: Removing interface: ipvlan2 [ 486.572027][T25220] veth0: entered promiscuous mode [ 486.585916][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.593184][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.611220][T25219] veth0: left promiscuous mode [ 486.750431][T25231] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8943'. [ 486.839898][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 487.120604][T25249] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.8951'. [ 487.144022][T25249] netlink: Conntrack attr has 4 unknown bytes [ 487.167350][T25245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8950'. [ 487.229381][T25253] netlink: 'syz.4.8953': attribute type 12 has an invalid length. [ 487.242882][T25253] netlink: 'syz.4.8953': attribute type 29 has an invalid length. [ 487.251506][T25253] netlink: 'syz.4.8953': attribute type 1 has an invalid length. [ 487.260925][T25253] netlink: 'syz.4.8953': attribute type 2 has an invalid length. [ 487.555455][T25272] syzkaller1: entered promiscuous mode [ 487.587769][T25272] syzkaller1: entered allmulticast mode [ 487.605506][T25272] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 487.610062][T25274] netlink: 'syz.0.8962': attribute type 14 has an invalid length. [ 487.689954][T25274] netlink: 'syz.0.8962': attribute type 14 has an invalid length. [ 487.875037][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 487.990570][T25292] lo: entered allmulticast mode [ 488.597442][T25333] netlink: 'syz.3.8987': attribute type 20 has an invalid length. [ 488.634591][ T1097] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.644649][T25333] netlink: 'syz.3.8987': attribute type 20 has an invalid length. [ 488.658770][ T1097] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.695305][ T1097] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.720404][ T1097] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.751262][T25335] syz_tun: entered allmulticast mode [ 488.925786][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 488.964835][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.034588][T25350] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 489.179350][T25362] xt_hashlimit: size too large, truncated to 1048576 [ 489.207147][T25366] netlink: 'syz.0.9003': attribute type 11 has an invalid length. [ 489.766977][T25378] __nla_validate_parse: 9 callbacks suppressed [ 489.766999][T25378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9007'. [ 489.958904][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 490.160961][T25401] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9016'. [ 490.670614][T25427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9028'. [ 490.997330][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 491.152272][T25452] netlink: 'syz.1.9040': attribute type 1 has an invalid length. [ 491.558430][T25476] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9051'. [ 491.641552][T25480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9052'. [ 491.643464][T25481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9053'. [ 492.047781][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 492.409014][T25514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9065'. [ 492.449468][T25514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9065'. [ 492.515285][T25514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9065'. [ 492.541379][T25514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9065'. [ 492.680093][T25526] netlink: 'syz.3.9069': attribute type 1 has an invalid length. [ 492.797811][T25533] netlink: 'syz.4.9071': attribute type 1 has an invalid length. [ 492.895318][T25526] 8021q: adding VLAN 0 to HW filter on device bond5 [ 492.971376][T25534] bond5: (slave gretap1): making interface the new active one [ 492.986675][T25534] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 493.042241][T25545] netlink: 'syz.0.9075': attribute type 21 has an invalid length. [ 493.074239][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 493.117420][T25533] 8021q: adding VLAN 0 to HW filter on device bond3 [ 493.147085][T25545] netlink: 'syz.0.9075': attribute type 5 has an invalid length. [ 493.165977][T25545] netlink: 'syz.0.9075': attribute type 6 has an invalid length. [ 493.571778][T25569] syzkaller1: entered promiscuous mode [ 493.586318][T25569] syzkaller1: entered allmulticast mode [ 493.743435][T25581] netlink: Unknown conntrack attr (0) [ 493.878976][ T30] audit: type=1800 audit(1778927242.983:7): pid=25587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9089" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=9012 res=0 errno=0 [ 494.063036][T25596] syzkaller1: entered promiscuous mode [ 494.069485][T25596] syzkaller1: entered allmulticast mode [ 494.082052][T25601] netlink: 'syz.0.9097': attribute type 21 has an invalid length. [ 494.092198][T25601] netlink: 'syz.0.9097': attribute type 22 has an invalid length. [ 494.107522][T25601] netlink: 'syz.0.9097': attribute type 23 has an invalid length. [ 494.127968][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 494.137816][T25601] netlink: 'syz.0.9097': attribute type 25 has an invalid length. [ 494.157516][T25601] netlink: 'syz.0.9097': attribute type 26 has an invalid length. [ 495.159006][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 495.858933][ T3575] lo speed is unknown, defaulting to 1000 [ 495.883414][ T3575] syz0: Port: 1 Link DOWN [ 496.075316][T25705] __nla_validate_parse: 11 callbacks suppressed [ 496.075337][T25705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9137'. [ 496.194528][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 496.257249][T25716] netlink: 51 bytes leftover after parsing attributes in process `syz.3.9142'. [ 496.416186][T25721] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.438239][T25721] bond0: (slave team0): Enslaving as an active interface with an up link [ 497.008403][T25751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9158'. [ 497.062996][T25751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9158'. [ 497.235319][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 497.242904][T25761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9162'. [ 497.447934][T25766] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9165'. [ 497.631082][T25773] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 497.644056][T25773] syzkaller0: group set to 10 [ 497.880929][T25789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9175'. [ 498.274874][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 498.351847][T25810] xt_hashlimit: size too large, truncated to 1048576 [ 498.392438][T25813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9185'. [ 498.420224][T25817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9188'. [ 498.423091][T25813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9185'. [ 499.317710][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 499.337701][T25851] bond4: entered promiscuous mode [ 499.368143][T25851] 8021q: adding VLAN 0 to HW filter on device bond4 [ 499.672340][T25873] validate_nla: 3 callbacks suppressed [ 499.672360][T25873] netlink: 'syz.1.9211': attribute type 1 has an invalid length. [ 499.693737][T25873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 499.701049][T25873] IPv6: NLM_F_CREATE should be set when creating new route [ 499.712956][T25873] netlink: 'syz.1.9211': attribute type 1 has an invalid length. [ 499.724058][T25873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 500.355134][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 501.396583][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 501.444517][T25918] netlink: 'syz.4.9230': attribute type 12 has an invalid length. [ 501.464492][T25918] __nla_validate_parse: 6 callbacks suppressed [ 501.464513][T25918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9230'. [ 501.733521][T25928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9232'. [ 501.733826][T25918] netlink: 'syz.4.9230': attribute type 12 has an invalid length. [ 501.752053][T25918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9230'. [ 502.208269][T25941] netlink: 'syz.2.9238': attribute type 5 has an invalid length. [ 502.436484][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 502.702030][T25956] netlink: 'syz.4.9246': attribute type 1 has an invalid length. [ 502.905863][T25962] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9248'. [ 502.921806][T25962] netlink: 'syz.4.9248': attribute type 7 has an invalid length. [ 502.930079][T25962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9248'. [ 502.948284][T25962] erspan0: entered promiscuous mode [ 502.956667][T25962] gretap0: entered promiscuous mode [ 503.484749][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 503.510908][T25975] syzkaller1: entered promiscuous mode [ 503.538635][T25975] syzkaller1: entered allmulticast mode [ 504.498676][T26013] netlink: 'syz.1.9270': attribute type 15 has an invalid length. [ 504.517706][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 504.852444][T26034] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9280'. [ 504.885173][T26036] netlink: 32 bytes leftover after parsing attributes in process `syz.4.9281'. [ 505.121671][T26048] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9287'. [ 505.131118][T26048] netem: invalid attributes len -5 [ 505.136809][T26048] netem: change failed [ 505.303103][T26056] netlink: 'syz.4.9290': attribute type 1 has an invalid length. [ 505.556713][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 505.791446][T26076] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9299'. [ 506.369654][T26083] gretap3: entered promiscuous mode [ 506.378578][T26083] batman_adv: batadv0: Adding interface: gretap3 [ 506.386145][T26083] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 506.426682][T26083] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 506.595080][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 507.230704][T26115] xt_hashlimit: size too large, truncated to 1048576 [ 507.658416][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 508.618892][T26149] netlink: 19 bytes leftover after parsing attributes in process `syz.4.9318'. [ 508.685333][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 509.070111][T26163] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.9323'. [ 509.173035][T26164] ip6tnl3: entered allmulticast mode [ 509.718557][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 510.754305][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 511.654156][T26212] netlink: 'syz.2.9342': attribute type 4 has an invalid length. [ 511.796568][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 511.957977][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 512.070687][T26223] netlink: 'syz.2.9347': attribute type 4 has an invalid length. [ 512.589374][T26235] netlink: 'syz.3.9353': attribute type 1 has an invalid length. [ 512.674066][T26241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9355'. [ 512.709264][T26241] netlink: 'syz.1.9355': attribute type 29 has an invalid length. [ 512.747298][T26241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9355'. [ 512.800011][T26245] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9357'. [ 512.854282][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 512.862531][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9355'. [ 512.902500][T26243] netlink: 'syz.1.9355': attribute type 29 has an invalid length. [ 512.919971][T26243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9355'. [ 512.944381][T26237] lo speed is unknown, defaulting to 1000 [ 513.250243][T26256] netlink: 'syz.3.9361': attribute type 1 has an invalid length. [ 513.339726][T26256] 8021q: adding VLAN 0 to HW filter on device bond6 [ 513.370073][T26258] ip_vti0: entered promiscuous mode [ 513.549940][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9363'. [ 513.887341][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 514.519317][T26287] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 514.917882][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 515.532120][T26309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9381'. [ 515.956944][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 516.067317][T26315] netlink: 'syz.3.9384': attribute type 21 has an invalid length. [ 516.104291][T26315] netlink: 'syz.3.9384': attribute type 22 has an invalid length. [ 516.126076][T26315] netlink: 'syz.3.9384': attribute type 23 has an invalid length. [ 516.148778][T26315] netlink: 'syz.3.9384': attribute type 25 has an invalid length. [ 516.165332][T26315] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9384'. [ 516.366400][T26321] rdma_rxe: rxe_newlink: failed to add lo [ 516.408268][T26326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9389'. [ 516.995201][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 518.006685][T26377] netlink: 'syz.3.9407': attribute type 1 has an invalid length. [ 518.034918][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 518.458328][T26377] 8021q: adding VLAN 0 to HW filter on device bond7 [ 519.085706][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 519.322854][T26408] syzkaller0: entered promiscuous mode [ 519.342186][T26408] syzkaller0: entered allmulticast mode [ 520.118277][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 520.447385][T26453] netlink: 'syz.0.9426': attribute type 1 has an invalid length. [ 521.166693][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 522.201788][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 523.249661][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 523.645890][T26453] 8021q: adding VLAN 0 to HW filter on device bond2 [ 523.671693][T26456] team0: Port device team_slave_0 removed [ 523.708278][T26456] bond2: (slave team_slave_0): Enslaving as a backup interface with an up link [ 524.014162][T26473] netlink: 'syz.0.9431': attribute type 1 has an invalid length. [ 524.276091][ C0] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 524.308782][T26479] bond3: (slave bridge6): making interface the new active one [ 524.342693][T26479] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 524.389974][T26482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9435'. [ 524.518727][T26491] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9438'. [ 524.649367][T26494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9439'. [ 524.679851][T26494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9439'. [ 525.317577][T26518] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9448'. [ 525.325467][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 526.052672][T26536] bridge0: port 3(syz_tun) entered disabled state [ 526.087562][T26536] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.358128][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 527.010323][T26536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.344987][T26536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.418228][ C1] tipc: Duplicate 9faaaa using eth(aa:aa:aa:aa:aa:32) seen on [ 527.786385][T26536] tipc: Resetting bearer [ 527.878517][T26536] tipc: Resetting bearer [ 528.600673][T26445] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.616494][T26445] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 528.628912][T26445] netdevsim netdevsim2 netdevsim0: unset [1, 2] type 2 family 0 port 43549 - 0 [ 528.661137][T26569] only policy match revision 0 supported [ 528.661195][T26569] unable to load match [ 528.706187][T26445] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.738757][T26445] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 528.774741][T26445] netdevsim netdevsim2 netdevsim1: unset [1, 2] type 2 family 0 port 43549 - 0 [ 528.803799][T26445] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.830901][T26445] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 528.863407][T26445] netdevsim netdevsim2 netdevsim2: unset [1, 2] type 2 family 0 port 43549 - 0 [ 528.893949][T26445] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.944088][T26445] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 528.973805][T26445] netdevsim netdevsim2 netdevsim3: unset [1, 2] type 2 family 0 port 43549 - 0 [ 530.000534][T26622] netlink: 'syz.1.9483': attribute type 1 has an invalid length. [ 530.140416][T26622] 8021q: adding VLAN 0 to HW filter on device bond5 [ 530.198548][T26627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9485'. [ 530.321992][T26627] bond5: entered promiscuous mode [ 530.727849][T26646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9490'. [ 530.795725][ T78] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 530.805240][T26646] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9490'. [ 531.121354][ T78] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.179689][ T78] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.211925][ T78] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 531.437004][T26658] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9497'. [ 532.868042][T26693] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.9509'. [ 533.610465][T26724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9522'. [ 533.657774][T26724] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9522'. [ 534.100938][T26740] veth1_to_bond: entered allmulticast mode [ 534.111937][T26740] veth1_to_bond: left allmulticast mode [ 534.253245][T26743] batadv_slave_0: entered promiscuous mode [ 534.654495][T26753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9535'. [ 534.668238][T26753] netlink: 'syz.2.9535': attribute type 7 has an invalid length. [ 534.690431][T26753] netlink: 'syz.2.9535': attribute type 8 has an invalid length. [ 534.704013][T26753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9535'. [ 535.004417][T26762] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9539'. [ 535.545610][T26781] __nla_validate_parse: 1 callbacks suppressed [ 535.545656][T26781] netlink: 208 bytes leftover after parsing attributes in process `syz.2.9549'. [ 536.633403][T26817] sctp: [Deprecated]: syz.0.9564 (pid 26817) Use of int in maxseg socket option. [ 536.633403][T26817] Use struct sctp_assoc_value instead [ 537.196949][T26843] policy can only be matched on NF_INET_PRE_ROUTING [ 537.196972][T26843] unable to load match [ 537.224910][T26844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9572'. [ 537.246473][T26844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9572'. [ 537.397567][T26849] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9574'. [ 537.438196][T26849] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 538.207875][T26876] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9588'. [ 539.397067][T26917] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9604'. [ 540.377549][T26939] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.9614'. [ 540.975575][T26960] sock: sock_set_timeout: `syz.3.9624' (pid 26960) tries to set negative timeout [ 541.292982][T26971] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9631'. [ 543.684863][T27039] nbd1: detected capacity change from 0 to 63 [ 543.735671][T27058] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.9652'. [ 543.802836][ T50] block nbd1: Receive control failed (result -104) [ 543.811703][ T5645] block nbd1: Receive control failed (result -32) [ 544.025547][T27064] netlink: 'syz.2.9655': attribute type 2 has an invalid length. [ 544.036041][T27064] netlink: 'syz.2.9655': attribute type 2 has an invalid length. [ 546.060806][T27108] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9671'. [ 546.271966][T27112] netlink: 'syz.4.9672': attribute type 1 has an invalid length. [ 546.298248][T27112] netlink: 'syz.4.9672': attribute type 1 has an invalid length. [ 546.479747][T27117] netem: change failed [ 546.938730][T27126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9679'. [ 547.712969][T27151] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9689'. [ 548.111185][T27165] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9694'. [ 548.124107][T27166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9696'. [ 549.081225][T27193] netdevsim netdevsim1: Direct firmware load for r1 failed with error -2 [ 549.093988][T27193] netdevsim netdevsim1: Falling back to sysfs fallback for: r1 [ 556.968455][T27206] syzkaller1: entered promiscuous mode [ 556.979033][T27206] syzkaller1: entered allmulticast mode [ 558.209941][T27266] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 559.698253][T27291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9736'. [ 559.841894][T27295] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 559.886343][T27295] xt_hashlimit: size too large, truncated to 1048576 [ 560.295599][T27283] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 560.341415][T27306] netlink: 'syz.3.9740': attribute type 1 has an invalid length. [ 560.424273][T27309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9740'. [ 560.473228][T27306] bond8: entered promiscuous mode [ 560.490926][T27309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9740'. [ 560.494530][T27306] 8021q: adding VLAN 0 to HW filter on device bond8 [ 560.528313][T27313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9741'. [ 560.574054][T27312] bond8: (slave bridge5): making interface the new active one [ 560.605640][T27312] bridge5: entered promiscuous mode [ 560.638649][T27312] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 560.687932][T27313] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9741'. [ 560.886459][T27319] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9743'. [ 561.538314][T27344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9755'. [ 562.568382][T27366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9765'. [ 563.836135][T27405] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.9781'. [ 563.986443][T27408] netlink: 'syz.0.9782': attribute type 39 has an invalid length. [ 564.676473][T27424] netlink: 'syz.4.9790': attribute type 1 has an invalid length. [ 564.830477][T27394] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 564.855762][T27424] 8021q: adding VLAN 0 to HW filter on device bond6 [ 564.919804][T27429] bond6: (slave veth11): Enslaving as an active interface with a down link [ 565.035653][T27431] bond6: (slave veth0_to_bond): making interface the new active one [ 565.061669][T27431] veth0_to_bond: entered promiscuous mode [ 565.086438][T27431] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 565.172204][T27430] netdevsim netdevsim1 : renamed from netdevsim0 [ 565.824138][T27450] netlink: 'syz.1.9800': attribute type 1 has an invalid length. [ 565.900780][T27454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9802'. [ 565.991921][T27450] netlink: 'syz.1.9800': attribute type 4 has an invalid length. [ 566.009542][T27450] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.9800'. [ 567.623862][T27473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9810'. [ 567.919383][T27479] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.9813'. [ 568.041516][T27481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9812'. [ 568.307333][T27496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9817'. [ 568.333170][T27496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9817'. [ 569.723239][T27533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9827'. [ 569.802149][T27535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9828'. [ 569.886481][T27535] netlink: 92 bytes leftover after parsing attributes in process `syz.2.9828'. [ 570.917565][T27565] __nla_validate_parse: 1 callbacks suppressed [ 570.917607][T27565] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9839'. [ 571.323306][T27578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9845'. [ 571.368228][T27580] netlink: 'syz.0.9846': attribute type 1 has an invalid length. [ 571.501653][T27580] bond4: entered promiscuous mode [ 571.507905][T27580] 8021q: adding VLAN 0 to HW filter on device bond4 [ 571.789770][T27580] bond4: (slave bridge7): making interface the new active one [ 571.809951][T27580] bridge7: entered promiscuous mode [ 571.863393][T27580] bridge7: left promiscuous mode [ 572.160708][T27603] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 572.226708][T27603] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 572.255187][T27603] team0: Failed to send options change via netlink (err -105) [ 572.280283][T27603] team0: Port device batadv1 added [ 572.452796][T27599] syzkaller0: entered promiscuous mode [ 572.464940][T27599] syzkaller0: entered allmulticast mode [ 573.107646][T27618] netlink: 'syz.0.9858': attribute type 1 has an invalid length. [ 574.045600][ T1705] block nbd1: Connection timed out, retrying (0/2 alive) [ 574.060362][ T1705] block nbd1: Connection timed out, retrying (0/2 alive) [ 574.071474][ T1705] block nbd1: Connection timed out, retrying (0/2 alive) [ 574.081153][ T1705] block nbd1: Connection timed out, retrying (0/2 alive) [ 574.089711][ T1705] block nbd1: Dead connection, failed to find a fallback [ 574.101313][ T1705] block nbd1: shutting down sockets [ 574.109973][ T1705] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.123107][ T1705] Buffer I/O error on dev nbd1, logical block 3, async page read [ 574.132501][ T1705] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.142480][ T1705] Buffer I/O error on dev nbd1, logical block 2, async page read [ 574.151604][ T1705] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.162553][ T1705] Buffer I/O error on dev nbd1, logical block 1, async page read [ 574.171642][ T1705] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.181025][ T1705] Buffer I/O error on dev nbd1, logical block 0, async page read [ 574.190960][T27005] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.206760][T27005] Buffer I/O error on dev nbd1, logical block 0, async page read [ 574.215818][T27005] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.226745][T27005] Buffer I/O error on dev nbd1, logical block 1, async page read [ 574.234999][T27005] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.244691][T27005] Buffer I/O error on dev nbd1, logical block 2, async page read [ 574.254377][T27005] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.263470][T27005] Buffer I/O error on dev nbd1, logical block 3, async page read [ 574.271735][T27005] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.281950][T27005] Buffer I/O error on dev nbd1, logical block 0, async page read [ 574.290241][T27005] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 574.299834][T27005] Buffer I/O error on dev nbd1, logical block 1, async page read [ 574.314246][T27005] ldm_validate_partition_table(): Disk read failed. [ 574.325857][T27005] Dev nbd1: unable to read RDB block 0 [ 574.334221][T27005] nbd1: unable to read partition table [ 574.369997][T27005] ldm_validate_partition_table(): Disk read failed. [ 574.379103][T27005] Dev nbd1: unable to read RDB block 0 [ 574.388959][T27005] nbd1: unable to read partition table [ 577.024842][T27618] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 577.203909][ T78] veth0_to_bond: left promiscuous mode [ 577.316972][T27632] team0: Port device dummy0 removed [ 577.336077][T27632] bridge_slave_0: left allmulticast mode [ 577.353071][T27632] bridge_slave_0: left promiscuous mode [ 577.372703][T27632] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.424274][T27632] bridge_slave_1: left allmulticast mode [ 577.446062][T27632] bridge_slave_1: left promiscuous mode [ 577.472612][T27632] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.533140][T27632] bond0: (slave bond_slave_0): Releasing backup interface [ 577.629726][T27632] team0: Port device team_slave_0 removed [ 577.660133][T27647] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.9866'. [ 577.689196][T27649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9867'. [ 577.739895][T27632] team0: Port device team_slave_1 removed [ 577.760593][T27651] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9868'. [ 577.763251][T27632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.787842][T27632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.797924][T27632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.806340][T27632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.817072][T27632] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 578.371449][T27661] netlink: 'syz.3.9872': attribute type 12 has an invalid length. [ 579.224630][T27685] tipc: Enabled bearer , priority 0 [ 579.581896][T27685] syzkaller0: entered promiscuous mode [ 579.594993][T27685] syzkaller0: entered allmulticast mode [ 579.602035][T27685] tipc: Resetting bearer [ 579.637306][T27682] tipc: Resetting bearer [ 579.985289][T27695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9883'. [ 581.216582][T27714] nbd4: detected capacity change from 0 to 63 [ 581.229970][T27715] block nbd4: NBD_DISCONNECT [ 581.265479][T27715] block nbd4: Disconnected due to user request. [ 581.305842][T27716] blk_print_req_error: 138 callbacks suppressed [ 581.305865][T27716] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.336365][T27716] buffer_io_error: 138 callbacks suppressed [ 581.336388][T27716] Buffer I/O error on dev nbd4, logical block 0, async page read [ 581.341863][T27715] block nbd4: shutting down sockets [ 581.342810][T27716] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.366463][T27716] Buffer I/O error on dev nbd4, logical block 1, async page read [ 581.437605][ T4957] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 581.450913][ T4957] Buffer I/O error on dev nbd4, logical block 2, async page read [ 581.460245][ T4957] Buffer I/O error on dev nbd4, logical block 3, async page read [ 581.469366][T27716] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.480337][T27716] Buffer I/O error on dev nbd4, logical block 0, async page read [ 581.492954][T27716] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.504598][T27716] Buffer I/O error on dev nbd4, logical block 1, async page read [ 581.516220][T27716] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.527923][T27716] Buffer I/O error on dev nbd4, logical block 2, async page read [ 581.539359][T27716] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.550298][T27716] Buffer I/O error on dev nbd4, logical block 3, async page read [ 581.560963][T27716] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.571964][T27716] Buffer I/O error on dev nbd4, logical block 0, async page read [ 581.581629][T27716] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.592775][T27716] Buffer I/O error on dev nbd4, logical block 1, async page read [ 581.602113][T27716] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 581.623313][T27716] ldm_validate_partition_table(): Disk read failed. [ 581.638716][T27716] Dev nbd4: unable to read RDB block 0 [ 581.648155][T27716] nbd4: unable to read partition table [ 581.681277][T27716] ldm_validate_partition_table(): Disk read failed. [ 581.696684][T27716] Dev nbd4: unable to read RDB block 0 [ 581.725584][T27716] nbd4: unable to read partition table [ 583.750025][T27682] tipc: Disabling bearer [ 583.892696][T27709] wg1: left promiscuous mode [ 583.921666][T27709] wg1: left allmulticast mode [ 584.022025][T27722] netlink: 'syz.3.9892': attribute type 1 has an invalid length. [ 584.081905][T27709] vlan0: left promiscuous mode [ 584.135804][T27709] netdevsim netdevsim1 : left promiscuous mode [ 584.149319][T27709] A link change request failed with some changes committed already. Interface netdevsim1 may have been left with an inconsistent configuration, please check. [ 584.459764][T27722] 8021q: adding VLAN 0 to HW filter on device bond9 [ 584.560943][T27725] vlan2: entered allmulticast mode [ 584.581787][T27725] bond9: entered allmulticast mode [ 584.598076][ T58] netdevsim netdevsim1 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.619061][T27734] tipc: Disabling bearer [ 584.629543][ T58] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.666010][ T58] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.697109][ T58] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.081636][T27777] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9910'. [ 586.089214][T27779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9912'. [ 586.128280][T27779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9912'. [ 586.172410][T27781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9913'. [ 586.207589][T27781] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9913'. [ 586.497804][T27790] bond7: entered promiscuous mode [ 586.541549][T27794] netlink: 'syz.2.9917': attribute type 1 has an invalid length. [ 586.617974][T27790] macvlan2: entered promiscuous mode [ 586.623763][T27790] macvlan2: entered allmulticast mode [ 586.630250][T27790] bond7: (slave macvlan2): Opening slave failed [ 586.888491][T27798] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 586.933319][T27798] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 586.988742][T27798] bond2: (slave vxcan3): making interface the new active one [ 587.028066][T27798] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 587.318822][T27800] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 587.388489][T27800] bond2: (slave vxcan5): Enslaving as a backup interface with an up link [ 587.837828][T27817] tipc: Enabled bearer , priority 0 [ 587.994283][T27817] syzkaller0: entered promiscuous mode [ 588.011790][T27817] syzkaller0: entered allmulticast mode [ 588.035078][T27817] tipc: Resetting bearer [ 588.072827][T27825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9929'. [ 588.085722][T27825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9929'. [ 588.201720][T27829] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9930'. [ 588.280696][T27816] tipc: Resetting bearer [ 592.611782][T27816] tipc: Disabling bearer [ 592.644440][T27844] syzkaller1: entered promiscuous mode [ 592.650112][T27844] syzkaller1: entered allmulticast mode [ 592.668114][T27852] geneve3: entered promiscuous mode [ 592.811090][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.849693][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.940827][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.969487][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 593.789214][T27911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9958'. [ 594.811233][T27927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9964'. [ 594.888139][ T50] block nbd2: Receive control failed (result -107) [ 595.106438][T27938] openvswitch: netlink: VLAN attribute unexpected. [ 595.255380][T27940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9970'. [ 597.055060][T27946] [ 597.057520][T27946] ====================================================== [ 597.064577][T27946] WARNING: possible circular locking dependency detected [ 597.071808][T27946] syzkaller #0 Not tainted [ 597.076517][T27946] ------------------------------------------------------ [ 597.083656][T27946] syz.4.9971/27946 is trying to acquire lock: [ 597.089835][T27946] ffffffff8ea85520 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x152/0x650 [ 597.099023][T27946] [ 597.099023][T27946] but task is already holding lock: [ 597.106417][T27946] ffffffff8ea5f8c0 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x261/0x19c0 [ 597.116126][T27946] [ 597.116126][T27946] which lock already depends on the new lock. [ 597.116126][T27946] [ 597.126595][T27946] [ 597.126595][T27946] the existing dependency chain (in reverse order) is: [ 597.135641][T27946] [ 597.135641][T27946] -> #7 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 597.143500][T27946] __mutex_lock+0x1a3/0x1550 [ 597.149184][T27946] pcpu_alloc_noprof+0x261/0x19c0 [ 597.154938][T27946] bpf_prog_alloc_no_stats+0x10e/0x4f0 [ 597.160944][T27946] bpf_prog_alloc+0x3c/0x1a0 [ 597.166116][T27946] __get_filter+0xff/0x400 [ 597.171115][T27946] sk_attach_filter+0x24/0x140 [ 597.176451][T27946] sk_setsockopt+0x1fa5/0x2d60 [ 597.181853][T27946] do_sock_setsockopt+0x11b/0x1b0 [ 597.187531][T27946] __x64_sys_setsockopt+0x13d/0x1b0 [ 597.193401][T27946] do_syscall_64+0x15f/0xf80 [ 597.198832][T27946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.205292][T27946] [ 597.205292][T27946] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 597.212973][T27946] lock_sock_nested+0x41/0x100 [ 597.218307][T27946] inet_shutdown+0x6a/0x390 [ 597.223355][T27946] nbd_mark_nsock_dead+0x2e9/0x560 [ 597.229013][T27946] recv_work+0x1c2e/0x1d40 [ 597.234148][T27946] process_scheduled_works+0xb5d/0x1860 [ 597.240244][T27946] worker_thread+0xa53/0xfc0 [ 597.245561][T27946] kthread+0x389/0x470 [ 597.250173][T27946] ret_from_fork+0x514/0xb70 [ 597.255300][T27946] ret_from_fork_asm+0x1a/0x30 [ 597.260623][T27946] [ 597.260623][T27946] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 597.268490][T27946] __mutex_lock+0x1a3/0x1550 [ 597.273660][T27946] nbd_queue_rq+0x37b/0x1100 [ 597.278807][T27946] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 597.284904][T27946] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 597.291793][T27946] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 597.298563][T27946] blk_mq_run_hw_queue+0x348/0x4f0 [ 597.304294][T27946] blk_mq_dispatch_list+0xd16/0xe10 [ 597.310230][T27946] blk_mq_flush_plug_list+0x48d/0x570 [ 597.316165][T27946] __blk_flush_plug+0x3ed/0x4d0 [ 597.321849][T27946] __submit_bio+0x28d/0x580 [ 597.327004][T27946] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 597.333226][T27946] block_read_full_folio+0x599/0x830 [ 597.339081][T27946] filemap_read_folio+0x137/0x3b0 [ 597.344688][T27946] do_read_cache_folio+0x358/0x590 [ 597.350462][T27946] read_part_sector+0xb6/0x2b0 [ 597.355888][T27946] adfspart_check_ICS+0xb1/0x960 [ 597.361871][T27946] bdev_disk_changed+0x817/0x1770 [ 597.367537][T27946] blkdev_get_whole+0x380/0x510 [ 597.372942][T27946] bdev_open+0x31e/0xd30 [ 597.377737][T27946] blkdev_open+0x470/0x610 [ 597.382797][T27946] do_dentry_open+0x785/0x14e0 [ 597.388112][T27946] vfs_open+0x3b/0x340 [ 597.392810][T27946] path_openat+0x2e08/0x3860 [ 597.397943][T27946] do_file_open+0x23e/0x4a0 [ 597.403105][T27946] do_sys_openat2+0x113/0x200 [ 597.408319][T27946] __x64_sys_openat+0x138/0x170 [ 597.413734][T27946] do_syscall_64+0x15f/0xf80 [ 597.418881][T27946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.425508][T27946] [ 597.425508][T27946] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 597.432841][T27946] __mutex_lock+0x1a3/0x1550 [ 597.438192][T27946] nbd_queue_rq+0xc6/0x1100 [ 597.443261][T27946] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 597.449381][T27946] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 597.456545][T27946] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 597.463188][T27946] blk_mq_run_hw_queue+0x348/0x4f0 [ 597.468866][T27946] blk_mq_dispatch_list+0xd16/0xe10 [ 597.474627][T27946] blk_mq_flush_plug_list+0x48d/0x570 [ 597.480554][T27946] __blk_flush_plug+0x3ed/0x4d0 [ 597.485948][T27946] __submit_bio+0x28d/0x580 [ 597.491172][T27946] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 597.497352][T27946] block_read_full_folio+0x599/0x830 [ 597.503347][T27946] filemap_read_folio+0x137/0x3b0 [ 597.508929][T27946] do_read_cache_folio+0x358/0x590 [ 597.514695][T27946] read_part_sector+0xb6/0x2b0 [ 597.520028][T27946] adfspart_check_ICS+0xb1/0x960 [ 597.526093][T27946] bdev_disk_changed+0x817/0x1770 [ 597.531817][T27946] blkdev_get_whole+0x380/0x510 [ 597.537235][T27946] bdev_open+0x31e/0xd30 [ 597.542043][T27946] blkdev_open+0x470/0x610 [ 597.547194][T27946] do_dentry_open+0x785/0x14e0 [ 597.552556][T27946] vfs_open+0x3b/0x340 [ 597.557277][T27946] path_openat+0x2e08/0x3860 [ 597.562545][T27946] do_file_open+0x23e/0x4a0 [ 597.567608][T27946] do_sys_openat2+0x113/0x200 [ 597.572839][T27946] __x64_sys_openat+0x138/0x170 [ 597.578425][T27946] do_syscall_64+0x15f/0xf80 [ 597.583573][T27946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.590197][T27946] [ 597.590197][T27946] -> #3 (set->srcu){.+.+}-{0:0}: [ 597.597364][T27946] __synchronize_srcu+0xca/0x300 [ 597.602860][T27946] elevator_switch+0x1e8/0x7a0 [ 597.608174][T27946] elevator_change+0x2cc/0x450 [ 597.613500][T27946] elevator_set_default+0x36c/0x430 [ 597.619468][T27946] blk_register_queue+0x3e9/0x4e0 [ 597.625046][T27946] __add_disk+0x677/0xd50 [ 597.629947][T27946] add_disk_fwnode+0xfb/0x480 [ 597.635296][T27946] nbd_dev_add+0x72c/0xb50 [ 597.640369][T27946] nbd_init+0x168/0x1f0 [ 597.645164][T27946] do_one_initcall+0x250/0x870 [ 597.650506][T27946] do_initcall_level+0x104/0x190 [ 597.656014][T27946] do_initcalls+0x59/0xa0 [ 597.660893][T27946] kernel_init_freeable+0x2a6/0x3e0 [ 597.666725][T27946] kernel_init+0x1d/0x1d0 [ 597.671600][T27946] ret_from_fork+0x514/0xb70 [ 597.676736][T27946] ret_from_fork_asm+0x1a/0x30 [ 597.682172][T27946] [ 597.682172][T27946] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 597.690454][T27946] __mutex_lock+0x1a3/0x1550 [ 597.695688][T27946] elevator_change+0x1b3/0x450 [ 597.701018][T27946] elevator_set_none+0xb5/0x140 [ 597.706419][T27946] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 597.712772][T27946] nbd_start_device+0x17f/0xb10 [ 597.718342][T27946] nbd_genl_connect+0x165b/0x1cf0 [ 597.724209][T27946] genl_family_rcv_msg_doit+0x22a/0x330 [ 597.730294][T27946] genl_rcv_msg+0x61c/0x7a0 [ 597.735425][T27946] netlink_rcv_skb+0x232/0x4b0 [ 597.740743][T27946] genl_rcv+0x28/0x40 [ 597.745276][T27946] netlink_unicast+0x75c/0x8e0 [ 597.750602][T27946] netlink_sendmsg+0x813/0xb40 [ 597.755937][T27946] ____sys_sendmsg+0x972/0x9f0 [ 597.761255][T27946] ___sys_sendmsg+0x2a5/0x360 [ 597.766501][T27946] __x64_sys_sendmsg+0x1bd/0x2a0 [ 597.772346][T27946] do_syscall_64+0x15f/0xf80 [ 597.777495][T27946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.783931][T27946] [ 597.783931][T27946] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 597.792578][T27946] blk_alloc_queue+0x546/0x680 [ 597.797923][T27946] __blk_mq_alloc_disk+0x197/0x390 [ 597.803857][T27946] nbd_dev_add+0x499/0xb50 [ 597.809117][T27946] nbd_init+0x168/0x1f0 [ 597.813906][T27946] do_one_initcall+0x250/0x870 [ 597.819252][T27946] do_initcall_level+0x104/0x190 [ 597.824742][T27946] do_initcalls+0x59/0xa0 [ 597.829813][T27946] kernel_init_freeable+0x2a6/0x3e0 [ 597.835579][T27946] kernel_init+0x1d/0x1d0 [ 597.840558][T27946] ret_from_fork+0x514/0xb70 [ 597.846046][T27946] ret_from_fork_asm+0x1a/0x30 [ 597.851675][T27946] [ 597.851675][T27946] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 597.859124][T27946] __lock_acquire+0x15a5/0x2cf0 [ 597.864619][T27946] lock_acquire+0x106/0x350 [ 597.869768][T27946] fs_reclaim_acquire+0x71/0x100 [ 597.875647][T27946] prepare_alloc_pages+0x152/0x650 [ 597.881691][T27946] __alloc_frozen_pages_noprof+0x12f/0x380 [ 597.888062][T27946] __alloc_pages_noprof+0x10/0x100 [ 597.893824][T27946] pcpu_populate_chunk+0x182/0xb30 [ 597.899624][T27946] pcpu_alloc_noprof+0xcc2/0x19c0 [ 597.905332][T27946] br_vlan_add+0x24f/0x1080 [ 597.910387][T27946] __vlan_add+0x435/0x2a80 [ 597.915394][T27946] nbp_vlan_add+0x263/0xaf0 [ 597.920547][T27946] br_vlan_info+0x100/0x470 [ 597.925618][T27946] br_process_vlan_info+0x61f/0x8b0 [ 597.931392][T27946] br_afspec+0x39c/0x5f0 [ 597.936201][T27946] br_setlink+0x2d3/0x8c0 [ 597.941169][T27946] rtnl_bridge_setlink+0x5bb/0x7e0 [ 597.946969][T27946] rtnetlink_rcv_msg+0x77e/0xbe0 [ 597.952579][T27946] netlink_rcv_skb+0x232/0x4b0 [ 597.958000][T27946] netlink_unicast+0x75c/0x8e0 [ 597.963313][T27946] netlink_sendmsg+0x813/0xb40 [ 597.968757][T27946] ____sys_sendmsg+0x972/0x9f0 [ 597.974161][T27946] ___sys_sendmsg+0x2a5/0x360 [ 597.979421][T27946] __x64_sys_sendmsg+0x1bd/0x2a0 [ 597.984925][T27946] do_syscall_64+0x15f/0xf80 [ 597.990104][T27946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.996737][T27946] [ 597.996737][T27946] other info that might help us debug this: [ 597.996737][T27946] [ 598.006996][T27946] Chain exists of: [ 598.006996][T27946] fs_reclaim --> sk_lock-AF_INET --> pcpu_alloc_mutex [ 598.006996][T27946] [ 598.020021][T27946] Possible unsafe locking scenario: [ 598.020021][T27946] [ 598.027681][T27946] CPU0 CPU1 [ 598.033159][T27946] ---- ---- [ 598.038540][T27946] lock(pcpu_alloc_mutex); [ 598.043155][T27946] lock(sk_lock-AF_INET); [ 598.050118][T27946] lock(pcpu_alloc_mutex); [ 598.057191][T27946] lock(fs_reclaim); [ 598.061196][T27946] [ 598.061196][T27946] *** DEADLOCK *** [ 598.061196][T27946] [ 598.069414][T27946] 2 locks held by syz.4.9971/27946: [ 598.074642][T27946] #0: ffffffff8fdd0240 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 598.084081][T27946] #1: ffffffff8ea5f8c0 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x261/0x19c0 [ 598.094133][T27946] [ 598.094133][T27946] stack backtrace: [ 598.100207][T27946] CPU: 0 UID: 0 PID: 27946 Comm: syz.4.9971 Not tainted syzkaller #0 PREEMPT(full) [ 598.100228][T27946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 598.100240][T27946] Call Trace: [ 598.100249][T27946] [ 598.100257][T27946] dump_stack_lvl+0xe8/0x150 [ 598.100280][T27946] print_circular_bug+0x2e1/0x300 [ 598.100306][T27946] check_noncircular+0x12e/0x150 [ 598.100331][T27946] __lock_acquire+0x15a5/0x2cf0 [ 598.100352][T27946] ? is_bpf_text_address+0x26/0x2b0 [ 598.100373][T27946] ? __lock_acquire+0x6b5/0x2cf0 [ 598.100392][T27946] ? kernel_text_address+0xa5/0xe0 [ 598.100419][T27946] ? prepare_alloc_pages+0x152/0x650 [ 598.100444][T27946] lock_acquire+0x106/0x350 [ 598.100462][T27946] ? prepare_alloc_pages+0x152/0x650 [ 598.100492][T27946] fs_reclaim_acquire+0x71/0x100 [ 598.100516][T27946] ? prepare_alloc_pages+0x152/0x650 [ 598.100540][T27946] prepare_alloc_pages+0x152/0x650 [ 598.100568][T27946] __alloc_frozen_pages_noprof+0x12f/0x380 [ 598.100595][T27946] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 598.100623][T27946] ? pcpu_chunk_refresh_hint+0x80b/0x950 [ 598.100653][T27946] __alloc_pages_noprof+0x10/0x100 [ 598.100679][T27946] pcpu_populate_chunk+0x182/0xb30 [ 598.100707][T27946] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 598.100733][T27946] pcpu_alloc_noprof+0xcc2/0x19c0 [ 598.100763][T27946] br_vlan_add+0x24f/0x1080 [ 598.100790][T27946] __vlan_add+0x435/0x2a80 [ 598.100812][T27946] ? rcu_is_watching+0x15/0xb0 [ 598.100837][T27946] ? nbp_vlan_add+0x20b/0xaf0 [ 598.100858][T27946] ? __kmalloc_cache_noprof+0x15b/0x660 [ 598.100883][T27946] nbp_vlan_add+0x263/0xaf0 [ 598.100909][T27946] br_vlan_info+0x100/0x470 [ 598.100931][T27946] ? __pfx_br_vlan_info+0x10/0x10 [ 598.100956][T27946] br_process_vlan_info+0x61f/0x8b0 [ 598.100981][T27946] ? __pfx_br_process_vlan_info+0x10/0x10 [ 598.101004][T27946] ? kasan_save_track+0x4f/0x80 [ 598.101026][T27946] ? kasan_save_free_info+0x46/0x50 [ 598.101043][T27946] ? __kasan_slab_free+0x5c/0x80 [ 598.101065][T27946] ? kmem_cache_free+0x182/0x650 [ 598.101097][T27946] br_afspec+0x39c/0x5f0 [ 598.101118][T27946] ? ___sys_sendmsg+0x2a5/0x360 [ 598.101142][T27946] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 598.101164][T27946] ? do_syscall_64+0x15f/0xf80 [ 598.101192][T27946] ? __pfx_br_afspec+0x10/0x10 [ 598.101218][T27946] br_setlink+0x2d3/0x8c0 [ 598.101241][T27946] ? __pfx_br_setlink+0x10/0x10 [ 598.101278][T27946] ? __local_bh_enable_ip+0xd0/0x130 [ 598.101298][T27946] ? mutex_is_locked+0x17/0x50 [ 598.101321][T27946] rtnl_bridge_setlink+0x5bb/0x7e0 [ 598.101347][T27946] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 598.101373][T27946] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 598.101395][T27946] rtnetlink_rcv_msg+0x77e/0xbe0 [ 598.101418][T27946] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 598.101439][T27946] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 598.101458][T27946] ? ref_tracker_free+0x693/0x840 [ 598.101483][T27946] ? __pfx_ref_tracker_free+0x10/0x10 [ 598.101511][T27946] netlink_rcv_skb+0x232/0x4b0 [ 598.101534][T27946] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 598.101556][T27946] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 598.101585][T27946] ? netlink_deliver_tap+0x2e/0x1b0 [ 598.101607][T27946] ? netlink_deliver_tap+0x2e/0x1b0 [ 598.101631][T27946] netlink_unicast+0x75c/0x8e0 [ 598.101656][T27946] netlink_sendmsg+0x813/0xb40 [ 598.101684][T27946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.101709][T27946] ? aa_sock_msg_perm+0xf1/0x1b0 [ 598.101733][T27946] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 598.101757][T27946] ____sys_sendmsg+0x972/0x9f0 [ 598.101780][T27946] ? __might_fault+0xaf/0x130 [ 598.101804][T27946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.101830][T27946] ? import_iovec+0x73/0xa0 [ 598.101857][T27946] ___sys_sendmsg+0x2a5/0x360 [ 598.101880][T27946] ? __lock_acquire+0x6b5/0x2cf0 [ 598.101899][T27946] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.101925][T27946] ? futex_wake+0x4ac/0x580 [ 598.101960][T27946] ? __fget_files+0x2a/0x420 [ 598.101980][T27946] ? __fget_files+0x3a0/0x420 [ 598.102004][T27946] __x64_sys_sendmsg+0x1bd/0x2a0 [ 598.102028][T27946] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.102057][T27946] ? rcu_is_watching+0x15/0xb0 [ 598.102080][T27946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.102105][T27946] do_syscall_64+0x15f/0xf80 [ 598.102129][T27946] ? trace_irq_disable+0x3b/0x140 [ 598.102154][T27946] ? clear_bhb_loop+0x40/0x90 [ 598.102174][T27946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.102191][T27946] RIP: 0033:0x7f2435b9ce59 [ 598.102209][T27946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.102225][T27946] RSP: 002b:00007f2433df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.102245][T27946] RAX: ffffffffffffffda RBX: 00007f2435e15fa0 RCX: 00007f2435b9ce59 [ 598.102258][T27946] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 598.102270][T27946] RBP: 00007f2435c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 598.102282][T27946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.102292][T27946] R13: 00007f2435e16038 R14: 00007f2435e15fa0 R15: 00007ffd1ef8ad38 [ 598.102313][T27946] [ 599.041764][T27971] pimreg: entered allmulticast mode