last executing test programs: 3.764190564s ago: executing program 1 (id=4727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000300)={@null, 0x0, 'syzkaller0\x00'}) bind$x25(r2, &(0x7f0000000400), 0x12) connect$x25(r2, &(0x7f0000000500), 0x12) write$tun(r0, &(0x7f0000000600)={@val={0x0, 0x800}, @void, @x25={0x0, 0x0, 0x0, "123456"}}, 0xd) sendto$x25(r2, &(0x7f0000000700)="1234567890", 0x5, 0x4, 0x0, 0x0) 3.763933067s ago: executing program 2 (id=4728): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x30, 0x30, 0x405, 0x0, 0x0, {}, [{0x14, 0x1, [@m_gact={0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS]}}}]}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x30, 0x30, 0x405, 0x0, 0x0, {}, [{0x14, 0x1, [@m_gact={0x0, 0x1, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x2, [@TCA_GACT_PARMS]}}}]}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@gettaction={0x30, 0x32, 0x301, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x10}]}, 0x30}}, 0x0) 3.67177799s ago: executing program 2 (id=4729): r0 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, &(0x7f0000000500), 0x4) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)='hello', 0x5}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x8000) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "01000000"}], 0x30}, 0x0) shutdown(r0, 0x2) close(r0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 3.420224288s ago: executing program 2 (id=4731): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="88000000000105060100000000000000020000003000018014000180080001007f000001080002007f00000118000280050001000600000006000200303900000600030000150000003000028014000180080001007f000001080002007f000001180002800500010006000000060002000015000006000300303900000c0005800800010066747000080004000000012c"], 0x88}], 0x1}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r1, &(0x7f0000000300)={0x2, 0x1500, @loopback}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r2, &(0x7f0000000400)={0x2, 0x3930, @loopback}, 0x10) connect$inet(r2, &(0x7f0000000500)={0x2, 0x1500, @loopback}, 0x10) 2.784646569s ago: executing program 1 (id=4741): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @local}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x1, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xc, 's'}}}}}, 0x0) syz_emit_ethernet(0x1a, &(0x7f0000000300)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xc, 's'}}}}}, 0x0) 2.554943052s ago: executing program 2 (id=4744): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000300)=@in={0x2, 0x4e21, @loopback}, 0x10) listen(r1, 0x5) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) accept(r1, 0x0, 0x0) close(r2) close(r1) 2.048502509s ago: executing program 3 (id=4750): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x10) listen(r0, 0x5) syz_emit_ethernet(0x11, &(0x7f0000000040)={@remote, @local, @void, {@llc={0x4, {@llc={0x2, 0x2, 'o'}}}}}, 0x0) 2.017035214s ago: executing program 3 (id=4751): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000000)={@multicast2, @loopback, @loopback}, 0xc) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) 1.920858924s ago: executing program 1 (id=4752): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0xb8}, &(0x7f0000000100)=0xc0) 1.920562033s ago: executing program 1 (id=4753): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) bind(r1, &(0x7f0000000100)=@in={0x2, 0x0, @loopback}, 0x10) connect(r1, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x10) accept(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300), 0x14) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x1, 0x1, 0x1}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x9c) nanosleep(&(0x7f0000000600)={0x1}, 0x0) 1.881937255s ago: executing program 3 (id=4754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000000010106000000000000000002000000180001800c000180080001007f0000010c000280080001007f00000110000280050001000600000006000200150000000600030015000000180002800c000180080001007f0000010c000280080001007f000001100002800500010006000000060002001500000006000300150000000c0005800800010066747000000000000800070000000e10"], 0x58}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x1500, @empty}, 0x10) listen(r1, 0x5) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x1500, @loopback}, 0x10) accept(r1, 0x0, 0x0) sendto(r2, &(0x7f0000000300)='USER anonymous\r\n', 0x10, 0x0, 0x0, 0x0) 1.660564863s ago: executing program 2 (id=4758): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}, {0x10, 0x108}], 0x28}, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @local}}, 0x24) sendmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000600)='\x00', 0x1}], 0x1, &(0x7f0000000700)=[{0x18, 0x110, 0x1, "c800000000000000"}], 0x18}, 0x0) sendmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[{0x18, 0x110, 0x1, 'd\x00\x00\x00\x00\x00\x00\x00'}, {0x18, 0x10f, 0x4, "01000000"}], 0x30}, 0x0) recvmsg(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000c00), 0x100}], 0x1}, 0x0) close(r0) close(r1) nanosleep(&(0x7f0000000e00)={0xb}, 0x0) 1.422281667s ago: executing program 4 (id=4762): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x1234, @loopback}, 0x10) bind$rds(r1, &(0x7f0000000100)={0x2, 0x5678, @loopback}, 0x10) connect$rds(r0, &(0x7f0000000200)={0x2, 0x5678, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/6, 0x6}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/6, 0x6}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/6, 0x6}], 0x1}, 0x0) sendmsg$rds(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/6, 0x6}], 0x1}, 0x0) nanosleep(&(0x7f0000000600)={0x0, 0xbebc200}, 0x0) 1.136152172s ago: executing program 4 (id=4763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000200)='\x00\x00\x00\x00', &(0x7f0000000300)=@tcp=r1}, 0x20) 1.13463545s ago: executing program 4 (id=4764): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000040)={0x1c, 0x10, 0x1, 0x0, 0x0, {0x1}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x10}]}, 0x1c}}, 0x0) 1.093500643s ago: executing program 4 (id=4765): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x18) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @loopback}}, 0x18) sendmsg$sock(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)='\x00', 0x1}], 0x1}, 0x0) close(r0) close(r1) nanosleep(&(0x7f0000000600)={0xb}, 0x0) 1.056968285s ago: executing program 1 (id=4766): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="40000000130005000000000000000000000000000000000000000000000000000000000000000000000000000a00"/76], 0x40}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x6) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) listen(r1, 0x5) r2 = socket$inet6(0xa, 0x1, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) 962.960585ms ago: executing program 3 (id=4767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000014000500000000000000000023000000020000000500020004000000"], 0x20}}, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000f5000000000b00000000010000"], 0x10) 896.863648ms ago: executing program 3 (id=4768): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x4}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0x4}, 0x1c) r2 = accept4$inet6(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000100)='hello', 0x5) write(r2, &(0x7f0000000140)='world', 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 733.647545ms ago: executing program 2 (id=4769): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) listen(r0, 0x5) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0xfffffffffffffffc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0xfffffffffffffffc) 628.369011ms ago: executing program 0 (id=4771): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) r1 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000250)='hello', 0x5}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x8000) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000250)=""/100, 0x64}], 0x1}, 0x1) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000250)}], 0x1, &(0x7f0000000300)=[{0x18, 0x110, 0x1, "0100000000000000"}, {0x18, 0x110, 0x2, "0100000000000000"}], 0x30}, 0x0) shutdown(r0, 0x2) close(r0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 488.125555ms ago: executing program 0 (id=4772): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f00000000c0)={'bridge0\x00', @ifru_ivalue=0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000010)={&(0x7f0000000020)=@getlink={0x20, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000000000000000001142420300"/33], 0x0) 393.64765ms ago: executing program 0 (id=4773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x32}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="00112233445566778899aabb08004500001c00000000401100000101010101010102"], 0x22) 256.003356ms ago: executing program 0 (id=4774): r0 = socket(0x8, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r0, 0x40046102, &(0x7f0000000100)="0100") 255.491015ms ago: executing program 0 (id=4775): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000900)=@getlink={0x30, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_EXT_MASK={0x8, 0x1d, 0x1}]}, 0x30}}, 0x0) 211.01235ms ago: executing program 0 (id=4776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000900)={'syzkaller0\x00', 0x41}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x1000001}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x38, r2, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x1, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) write(r0, &(0x7f0000000500)="ffffffffffff00000000000188ca4f4000281000000000000000010000010100000100"/58, 0x36) write(r0, &(0x7f0000000600)="ffffffffffff00000000000188ca4f4000282000000000000000010000010100000100"/58, 0x36) write(r0, &(0x7f0000000800)="ffffffffffff00000000000188ca4f4000280000000000000000010000010100000100"/58, 0x36) 203.682375ms ago: executing program 4 (id=4777): r0 = socket$netlink(0x10, 0x3, 0x6) write(r0, &(0x7f0000000000)="500100001000050401000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000123432000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000a0000000000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000000102030405060708090a0b0c0d0e0f00010203", 0x150) write(r0, &(0x7f0000000000)="fc0000001300050402000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000064000000000000000100000000000000440010000000000000000000000000000000000000001234320000000a0000000000000000000000000000000100000000000000ffffffffffffffffffffffff", 0xfc) r1 = socket$inet6(0xa, 0x2, 0x11) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x1234, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000400)="000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f000102030405060708090a0b0c0d0e0f101112131415161718191a1b1c1d1e1f", 0x40, 0x4000000, &(0x7f0000000300)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 104.31146ms ago: executing program 1 (id=4778): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000100)={0x2}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000300)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) 103.977163ms ago: executing program 4 (id=4779): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0xbe3412, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002000000"], 0x94}}, 0x0) 0s ago: executing program 3 (id=4780): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x49, 0x3, {{'deflate\x00'}, 0x0, '\x00'}}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "000012341234567890123456"}}}}, 0x0) kernel console output (not intermixed with test programs): butes in process `syz.4.2896'. [ 415.359024][T17479] erspan0: left promiscuous mode [ 415.397952][T12489] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.668759][T12487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.688911][T12487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.795634][T12494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.825772][T12494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.275557][T17529] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2907'. [ 416.295408][T17529] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2907'. [ 416.325957][T17530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'. [ 416.373409][T17530] veth0_to_team (unregistering): left promiscuous mode [ 416.389877][T17530] team0: Port device team_slave_0 removed [ 416.435456][T17529] syzkaller1: entered promiscuous mode [ 416.442841][T17529] syzkaller1: entered allmulticast mode [ 416.627352][T17537] virt_wifi0 speed is unknown, defaulting to 1000 [ 416.773407][T17550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2914'. [ 417.004691][T17557] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 417.095456][T17563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2916'. [ 417.117830][T17565] netlink: 'syz.0.2918': attribute type 19 has an invalid length. [ 417.131928][T17563] netlink: 'syz.3.2916': attribute type 1 has an invalid length. [ 417.143496][T17565] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2918'. [ 417.160175][T17563] netlink: 'syz.3.2916': attribute type 2 has an invalid length. [ 417.399716][T17578] netlink: 'syz.0.2920': attribute type 7 has an invalid length. [ 417.423466][T17581] syzkaller0: entered promiscuous mode [ 417.438031][T17581] syzkaller0: entered allmulticast mode [ 417.466227][T17577] tipc: Started in network mode [ 417.479786][T17577] tipc: Node identity 4a4365e13998, cluster identity 4711 [ 417.505867][T17577] tipc: Enabled bearer , priority 0 [ 417.590488][T17577] tipc: Resetting bearer [ 417.642860][T17577] tipc: Disabling bearer [ 417.805008][T17601] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2926'. [ 417.844239][T17603] netlink: 'syz.0.2927': attribute type 2 has an invalid length. [ 417.942392][T17606] netlink: 'syz.3.2929': attribute type 21 has an invalid length. [ 417.967040][T17606] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2929'. [ 417.988339][T17606] netlink: 'syz.3.2929': attribute type 5 has an invalid length. [ 418.006623][T17606] netlink: 'syz.3.2929': attribute type 6 has an invalid length. [ 418.708290][T17631] netlink: 'syz.4.2935': attribute type 13 has an invalid length. [ 418.967882][ T7992] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 419.707989][ T5742] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 419.780952][T17673] netlink: 'syz.3.2945': attribute type 1 has an invalid length. [ 419.939835][T17683] __nla_validate_parse: 5 callbacks suppressed [ 419.939851][T17683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2945'. [ 419.979931][T17683] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 420.018893][T17690] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2949'. [ 420.086533][T17693] syzkaller0: entered promiscuous mode [ 420.106753][T17693] syzkaller0: entered allmulticast mode [ 420.411096][T17703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.510165][T17705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2954'. [ 420.566344][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 420.583797][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 420.586020][T17712] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2956'. [ 420.600800][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 420.613845][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 420.622020][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 420.803518][T17712] vlan2: entered allmulticast mode [ 420.814982][T17712] gretap0: entered allmulticast mode [ 420.821896][T17715] tipc: Enabled bearer , priority 0 [ 420.977787][T17705] tipc: Resetting bearer [ 421.065824][T17704] tipc: Resetting bearer [ 421.257363][T17734] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2959'. [ 421.530564][T17742] xt_HMARK: spi-set and port-set can't be combined [ 421.553451][T17742] IPVS: set_ctl: invalid protocol: 53838 99.180.132.219:46015 [ 421.818541][T17749] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 422.443134][T17753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2963'. [ 422.667368][ T5633] Bluetooth: hci0: command tx timeout [ 423.522023][T17704] tipc: Disabling bearer [ 423.545331][ T5629] bond9: (slave syz_tun): Removing an active aggregator [ 423.554127][ T5629] bond9: (slave syz_tun): Releasing backup interface [ 423.573245][T17734] ip6gre3: entered promiscuous mode [ 423.582040][T17734] ip6gre3: entered allmulticast mode [ 423.592424][T17745] validate_nla: 3 callbacks suppressed [ 423.592439][T17745] netlink: 'syz.1.2961': attribute type 11 has an invalid length. [ 423.613337][ T9] tipc: Node number set to 4278321153 [ 423.930811][T17759] xfrm1: left allmulticast mode [ 423.943361][T17759] geneve4: left promiscuous mode [ 423.962593][T17759] geneve5: left promiscuous mode [ 423.968664][T17759] vlan2: left allmulticast mode [ 423.974109][T17759] gretap0: left allmulticast mode [ 423.989864][T17778] netlink: 'syz.0.2967': attribute type 13 has an invalid length. [ 424.089244][T17764] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.112161][T17764] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.160028][ T9101] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.183258][ T9101] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.316606][T17776] syzkaller1: entered promiscuous mode [ 424.335940][T17776] syzkaller1: entered allmulticast mode [ 424.423967][T17775] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 424.526452][T17775] syzkaller0: entered promiscuous mode [ 424.545650][T17775] syzkaller0: entered allmulticast mode [ 424.562518][ T9101] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.583347][ T9101] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.646278][T17796] netlink: 'syz.1.2968': attribute type 12 has an invalid length. [ 424.740492][T12488] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.747318][ T5633] Bluetooth: hci0: command tx timeout [ 424.858905][T17811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2968'. [ 425.064873][T12488] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.156155][T17709] virt_wifi0 speed is unknown, defaulting to 1000 [ 425.298247][T12488] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.594115][T17838] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2976'. [ 425.665764][T17832] syzkaller0: entered promiscuous mode [ 425.681293][T17832] syzkaller0: entered allmulticast mode [ 425.880891][T17852] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2981'. [ 426.253580][T17849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.374995][T17862] sctp: [Deprecated]: syz.1.2984 (pid 17862) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.374995][T17862] Use struct sctp_sack_info instead [ 426.502976][T17864] sctp: [Deprecated]: syz.1.2984 (pid 17864) Use of struct sctp_assoc_value in delayed_ack socket option. [ 426.502976][T17864] Use struct sctp_sack_info instead [ 426.828294][ T5633] Bluetooth: hci0: command tx timeout [ 428.147916][T17868] syzkaller0: entered promiscuous mode [ 428.153466][T17868] syzkaller0: entered allmulticast mode [ 428.481209][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2989'. [ 428.518524][T17887] netlink: 'syz.1.2989': attribute type 29 has an invalid length. [ 428.533008][T17887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2989'. [ 428.543266][T12488] dvmrp0: left allmulticast mode [ 428.907571][ T5633] Bluetooth: hci0: command tx timeout [ 428.946631][T12488] gretap0 (unregistering): left promiscuous mode [ 429.111388][T12488] team0: Port device bridge1 removed [ 429.122212][T12488] team0: Port device bridge2 removed [ 429.227536][T12488] bond0 (unregistering): left promiscuous mode [ 429.242489][T12488] bond0 (unregistering): Released all slaves [ 429.253330][T12488] bond1 (unregistering): (slave bond2): Releasing backup interface [ 429.262659][T12488] bond1 (unregistering): (slave bond3): Releasing backup interface [ 429.271442][T12488] bond1 (unregistering): Released all slaves [ 429.299293][T12488] bond2 (unregistering): Released all slaves [ 429.342460][T12488] bond3 (unregistering): Released all slaves [ 429.360289][T12488] bond4 (unregistering): Released all slaves [ 429.378440][T12488] bond5 (unregistering): Released all slaves [ 429.392301][T12488] bond6 (unregistering): Released all slaves [ 429.406756][T12488] bond7 (unregistering): Released all slaves [ 429.429729][T12488] bond8 (unregistering): Released all slaves [ 429.443404][T12488] bond9 (unregistering): Released all slaves [ 429.462845][T12488] bond10 (unregistering): (slave v): Releasing active interface [ 429.471057][T12488] v: left promiscuous mode [ 429.478485][T12488] v: left allmulticast mode [ 429.491436][T12488] bond10 (unregistering): Released all slaves [ 429.505859][T12488] bond11 (unregistering): Released all slaves [ 429.520344][T12488] bond12 (unregistering): Released all slaves [ 429.533917][T12488] bond13 (unregistering): Released all slaves [ 429.554565][T12488] bond14 (unregistering): Released all slaves [ 429.583477][T17902] bond0: Caught tx_queue_len zero misconfig [ 429.622685][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 429.687740][T17928] veth0_to_team: Device is already in use. [ 429.803163][T12488] tipc: Left network mode [ 430.044732][T17944] Bluetooth: MGMT ver 1.23 [ 430.445042][T17961] syzkaller0: entered promiscuous mode [ 430.459026][T17961] syzkaller0: entered allmulticast mode [ 430.742150][T17983] netlink: 'syz.0.3005': attribute type 58 has an invalid length. [ 430.863943][T17989] netlink: 5 bytes leftover after parsing attributes in process `syz.3.3006'. [ 430.941790][T17992] netlink: 'syz.3.3006': attribute type 4 has an invalid length. [ 431.071295][T17998] netlink: 'syz.0.3009': attribute type 1 has an invalid length. [ 431.071511][T17985] virt_wifi0 speed is unknown, defaulting to 1000 [ 431.082020][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 431.143080][T18003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3009'. [ 431.219428][T17998] 8021q: adding VLAN 0 to HW filter on device bond10 [ 431.285920][T18003] bond10: entered promiscuous mode [ 431.296622][T18003] bond10: entered allmulticast mode [ 431.329304][T18005] bond10: (slave dummy0): making interface the new active one [ 431.348587][T18005] dummy0: entered promiscuous mode [ 431.360535][T18005] dummy0: entered allmulticast mode [ 431.379642][T18005] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 431.454299][T18018] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3013'. [ 431.541415][T17709] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.550068][T17709] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.570808][T17709] bridge_slave_0: entered allmulticast mode [ 431.586506][T17709] bridge_slave_0: entered promiscuous mode [ 431.595539][T17709] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.603460][T17709] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.613222][T17709] bridge_slave_1: entered allmulticast mode [ 431.634332][T17709] bridge_slave_1: entered promiscuous mode [ 431.795185][T12494] nci: nci_rsp_packet: unknown rsp opcode 0x8 [ 434.595332][T18022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 434.794072][T18031] ip6erspan0: entered allmulticast mode [ 434.824122][T12488] hsr_slave_0: left promiscuous mode [ 434.862083][T12488] hsr_slave_1: left promiscuous mode [ 434.886766][T12488] veth0_macvtap: left promiscuous mode [ 435.195015][T18068] netlink: 'syz.0.3019': attribute type 1 has an invalid length. [ 435.325565][T18072] netlink: 'syz.0.3019': attribute type 10 has an invalid length. [ 435.333575][T18072] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3019'. [ 435.626380][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 435.665395][T17709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.676830][T18053] tipc: Invalid UDP bearer configuration [ 435.679507][T18053] tipc: Enabling of bearer rejected, failed to enable media [ 435.753062][T18072] bond10: (slave dummy0): Releasing active interface [ 435.760241][T18072] dummy0: left allmulticast mode [ 435.798117][T17709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 435.935513][T17709] team0: Port device team_slave_0 added [ 435.949687][T17709] team0: Port device team_slave_1 added [ 436.205988][T17709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.243569][T17709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.296688][T17709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.353090][T17709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.369064][T17709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.424850][T17709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.494983][T12488] IPVS: stop unused estimator thread 0... [ 436.682121][T17709] hsr_slave_0: entered promiscuous mode [ 436.704670][T17709] hsr_slave_1: entered promiscuous mode [ 436.737969][T17709] debugfs: 'hsr0' already exists in 'hsr' [ 436.760173][T17709] Cannot create hsr debugfs directory [ 436.958632][T18108] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3026'. [ 437.068778][T18113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3028'. [ 437.119949][T18117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3028'. [ 437.186786][T18113] team1: entered promiscuous mode [ 437.192235][T18113] team1: entered allmulticast mode [ 437.198624][T18113] 8021q: adding VLAN 0 to HW filter on device team1 [ 437.239121][T18117] team2: entered promiscuous mode [ 437.257068][T18117] team2: entered allmulticast mode [ 437.262788][T18117] 8021q: adding VLAN 0 to HW filter on device team2 [ 437.313320][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 437.501400][T18137] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3034'. [ 437.850045][T18160] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.3037'. [ 437.871981][T18160] openvswitch: netlink: Message has 512 unknown bytes. [ 438.249875][T18180] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3043'. [ 438.458267][T18183] syzkaller0: entered promiscuous mode [ 438.479933][T18183] syzkaller0: entered allmulticast mode [ 439.546464][T17709] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 439.589360][T17709] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 439.609077][T17709] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 439.647989][T17709] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 439.662061][T17709] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 439.703275][T17709] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 439.726402][T17709] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 439.776703][T17709] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 439.867316][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 439.878400][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.961561][T18220] No such timeout policy "syz1" [ 440.041350][T18220] netlink: zone id is out of range [ 440.050805][T17709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.069889][T18220] netlink: zone id is out of range [ 440.092583][T18220] netlink: zone id is out of range [ 440.103703][T18220] netlink: zone id is out of range [ 440.112986][T17709] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.120685][T18220] netlink: zone id is out of range [ 440.129941][T18220] netlink: zone id is out of range [ 440.147877][T18220] netlink: zone id is out of range [ 440.158265][T12488] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.162029][T18220] netlink: zone id is out of range [ 440.166981][T12488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 440.183973][T18220] netlink: zone id is out of range [ 440.226511][T12489] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.233751][T12489] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.713754][T18264] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3055'. [ 441.013637][T18279] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3058'. [ 441.048396][T18279] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3058'. [ 441.094854][T18279] netlink: 596 bytes leftover after parsing attributes in process `syz.4.3058'. [ 441.522723][T18299] : renamed from dummy0 [ 441.758863][T18304] IPv6: Can't replace route, no match found [ 441.848599][T18308] virt_wifi0 speed is unknown, defaulting to 1000 [ 442.022399][T18312] syzkaller0: entered promiscuous mode [ 442.077677][T18312] syzkaller0: entered allmulticast mode [ 442.145821][T17709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.488292][T17709] veth0_vlan: entered promiscuous mode [ 442.514072][T18321] virt_wifi0 speed is unknown, defaulting to 1000 [ 442.533137][T17709] veth1_vlan: entered promiscuous mode [ 442.678034][T17709] veth0_macvtap: entered promiscuous mode [ 442.708585][T17709] veth1_macvtap: entered promiscuous mode [ 442.758698][T17709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.793549][T18349] netlink: 'syz.0.3070': attribute type 83 has an invalid length. [ 442.804283][T17709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.836609][T12489] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.868531][T12489] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.989087][T12489] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.008831][T12489] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 443.176136][T18360] batadv0: Caught tx_queue_len zero misconfig [ 443.191294][T18360] sch_tbf: burst 7 is lower than device batadv0 mtu (1514) ! [ 443.278171][T18365] __nla_validate_parse: 3 callbacks suppressed [ 443.278187][T18365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3072'. [ 443.550804][T12488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.584703][T12488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.172806][T18407] syzkaller0: entered promiscuous mode [ 446.179168][T18407] syzkaller0: entered allmulticast mode [ 446.252169][T18431] Unsupported ieee802154 address type: 0 [ 446.259692][T18431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3078'. [ 446.271118][T18431] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3078'. [ 446.380466][ T3350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.396644][ T3350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.506829][T18437] sctp: [Deprecated]: syz.0.3079 (pid 18437) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.506829][T18437] Use struct sctp_sack_info instead [ 446.791334][T18449] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 446.871940][T18441] bond0: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 446.931767][T18441] tipc: Enabled bearer , priority 0 [ 447.116129][T18440] tipc: Disabling bearer [ 447.755283][ T5619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 447.773872][ T5619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 447.784104][ T5619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 447.801834][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 447.814138][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 448.023199][T18489] bond11: option ad_user_port_key: invalid value (65535) [ 448.047001][T18489] bond11: option ad_user_port_key: allowed values 0 - 1023 [ 448.096431][T18489] bond11 (unregistering): Released all slaves [ 448.179572][T18499] net_ratelimit: 13 callbacks suppressed [ 448.179591][T18499] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.440551][T18513] netlink: 'syz.3.3091': attribute type 1 has an invalid length. [ 448.465067][T18513] openvswitch: netlink: IP tunnel dst address not specified [ 448.622426][T18521] sctp: [Deprecated]: syz.3.3093 (pid 18521) Use of int in max_burst socket option. [ 448.622426][T18521] Use struct sctp_assoc_value instead [ 448.749717][T18524] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 449.030013][T18539] netlink: 'syz.0.3098': attribute type 1 has an invalid length. [ 449.061553][T18539] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3098'. [ 449.077992][T18486] virt_wifi0 speed is unknown, defaulting to 1000 [ 449.094982][T18539] netlink: 'syz.0.3098': attribute type 2 has an invalid length. [ 449.111190][T18539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3098'. [ 449.257323][T18555] netlink: 'syz.0.3102': attribute type 83 has an invalid length. [ 449.371646][T18550] bond13: (slave bond_slave_1): Device is not bonding slave [ 449.406997][T18550] bond13: option active_slave: invalid value (bond_slave_1) [ 449.433615][T18550] bond13 (unregistering): Released all slaves [ 449.921133][T18585] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3107'. [ 449.947917][ T5619] Bluetooth: hci3: command tx timeout [ 450.107115][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 450.422938][T18611] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3109'. [ 450.898254][T18486] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.942321][T18486] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.983162][T18486] bridge_slave_0: entered allmulticast mode [ 451.041752][T18486] bridge_slave_0: entered promiscuous mode [ 451.088568][T18486] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.125544][T18486] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.154661][T18486] bridge_slave_1: entered allmulticast mode [ 451.180624][T18486] bridge_slave_1: entered promiscuous mode [ 451.288890][T18486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.444441][T18486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.530946][T18659] netlink: 'syz.3.3118': attribute type 7 has an invalid length. [ 451.644173][T18486] team0: Port device team_slave_0 added [ 451.668197][T18663] pim6reg1: entered promiscuous mode [ 451.691076][T18663] pim6reg1: entered allmulticast mode [ 451.720193][T18486] team0: Port device team_slave_1 added [ 451.970793][T18486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.998864][T18486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.042818][ T5619] Bluetooth: hci3: command tx timeout [ 452.061424][T18486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.124879][T18486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.185787][T18486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.301977][T18486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.475717][T18486] hsr_slave_0: entered promiscuous mode [ 452.491907][T18486] hsr_slave_1: entered promiscuous mode [ 452.505304][T18692] netlink: 'syz.1.3125': attribute type 1 has an invalid length. [ 452.515718][T18486] debugfs: 'hsr0' already exists in 'hsr' [ 452.522725][T18486] Cannot create hsr debugfs directory [ 452.605031][T18692] 8021q: adding VLAN 0 to HW filter on device bond13 [ 452.842528][T18703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3125'. [ 452.891398][T18696] bond13: (slave veth7): Enslaving as an active interface with a down link [ 452.902016][T18702] netlink: 'syz.0.3123': attribute type 1 has an invalid length. [ 452.939588][T18702] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3123'. [ 452.948519][T18685] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 452.991305][T18702] netlink: 'syz.0.3123': attribute type 1 has an invalid length. [ 453.061753][T18692] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.091467][T18692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.162585][T18692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.199810][T18692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 453.212211][T18692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.224843][T18692] veth1_vlan: left promiscuous mode [ 453.233539][T18692] veth0_vlan: left promiscuous mode [ 453.263400][T18692] veth0_vlan: entered promiscuous mode [ 453.288092][T18692] veth1_vlan: entered promiscuous mode [ 453.297249][T18707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3126'. [ 453.315069][T18707] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.371986][T18692] 8021q: adding VLAN 0 to HW filter on device bond1 [ 453.399005][T18692] 8021q: adding VLAN 0 to HW filter on device bond2 [ 453.455861][T18692] 8021q: adding VLAN 0 to HW filter on device bond3 [ 453.465170][T18692] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 453.482445][T18692] 8021q: adding VLAN 0 to HW filter on device bond4 [ 453.495678][T18692] 8021q: adding VLAN 0 to HW filter on device bond5 [ 453.502562][T12494] bond2: (slave bridge2): link status up again after 0 ms [ 453.513283][T18692] 8021q: adding VLAN 0 to HW filter on device bond6 [ 453.522240][T18692] 8021q: adding VLAN 0 to HW filter on device bond7 [ 453.529582][T12487] bond2: (slave bridge2): link status up again after 0 ms [ 453.531407][T18692] 8021q: adding VLAN 0 to HW filter on device bond8 [ 453.558203][T12487] bond2: (slave bridge2): link status up again after 0 ms [ 453.583303][T18692] 8021q: adding VLAN 0 to HW filter on device bond9 [ 453.587635][T12487] bond2: (slave bridge2): link status up again after 0 ms [ 453.606254][T18692] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 453.647559][T12487] bond2: (slave bridge2): link status up again after 0 ms [ 453.679420][T18699] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 453.703477][T18699] bond13: (slave batadv1): making interface the new active one [ 453.707976][T12487] bond2: (slave bridge2): link status up again after 0 ms [ 453.722188][T18699] batadv1: entered promiscuous mode [ 453.740200][T18699] bond13: (slave batadv1): Enslaving as an active interface with an up link [ 453.798267][T12489] bond2: (slave bridge2): link status up again after 0 ms [ 453.827670][T12487] bond2: (slave bridge2): link status up again after 0 ms [ 454.107168][ T5619] Bluetooth: hci3: command tx timeout [ 454.363810][ T9101] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.371033][ T9101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.398986][ T9101] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.406165][ T9101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.425677][T18721] netlink: 220 bytes leftover after parsing attributes in process `syz.1.3131'. [ 454.556348][T18721] NCSI netlink: No device for ifindex 566712438 [ 454.823848][T12488] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.835030][T12488] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.873339][T12488] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.890455][T12488] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.053211][ T48] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 455.102999][ T7992] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 455.118386][ T48] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 455.257170][ T7992] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 455.337258][ T7992] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 455.511447][T18745] tipc: Started in network mode [ 455.518841][T18751] IPVS: set_ctl: invalid protocol: 137 172.20.20.170:20002 [ 455.534590][T18745] tipc: Node identity 22244029163, cluster identity 4711 [ 455.579487][T18745] tipc: Enabled bearer , priority 0 [ 455.641449][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3139'. [ 455.711389][T18762] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3141'. [ 455.758058][T18756] syzkaller0: entered promiscuous mode [ 455.773697][T18756] syzkaller0: entered allmulticast mode [ 455.786566][T18744] netlink: 'syz.3.3138': attribute type 11 has an invalid length. [ 455.795058][T18756] tipc: Resetting bearer [ 455.877582][T18766] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 455.900725][T18762] macvtap1: entered promiscuous mode [ 455.906386][T18762] macvtap1: entered allmulticast mode [ 455.916126][T18762] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 456.040278][T18486] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 456.088736][T18748] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.187174][ T5619] Bluetooth: hci3: command tx timeout [ 456.224460][T12488] tipc: Resetting bearer [ 456.239656][T18742] tipc: Resetting bearer [ 458.091901][T18742] tipc: Disabling bearer [ 458.115641][ T5776] tipc: Node number set to 873742377 [ 458.148947][T18486] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 458.310325][T18778] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 458.389190][T18780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.404964][T18486] bond0: (slave netdevsim1): Releasing backup interface [ 458.418513][T18486] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 458.431891][T18780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3144'. [ 458.446077][T18486] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 458.512221][T12488] net_ratelimit: 51 callbacks suppressed [ 458.512239][T12488] bond2: (slave bridge2): failed to get link speed/duplex [ 458.987331][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 459.152488][T17432] bond2: (slave bridge2): failed to get link speed/duplex [ 459.158849][T18794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3146'. [ 459.211454][T18794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3146'. [ 459.328129][T18792] virt_wifi0 speed is unknown, defaulting to 1000 [ 459.410899][ T48] bond2: (slave bridge2): failed to get link speed/duplex [ 459.845227][T17432] bond2: (slave bridge2): failed to get link speed/duplex [ 460.007085][T12487] bond2: (slave bridge2): failed to get link speed/duplex [ 460.025484][T18486] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 460.039631][T18813] netlink: 'syz.1.3151': attribute type 1 has an invalid length. [ 460.055404][T18486] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 460.075546][T18486] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 460.138379][T18486] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 460.162949][T18486] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 460.208971][T18486] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 460.416591][T18813] 8021q: adding VLAN 0 to HW filter on device bond14 [ 460.467528][T12487] bond2: (slave bridge2): failed to get link speed/duplex [ 460.481434][T18486] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 460.502299][T18486] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 460.667898][ T48] bond2: (slave bridge2): failed to get link speed/duplex [ 460.863879][T12488] bond2: (slave bridge2): failed to get link speed/duplex [ 460.983539][T18486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.059167][T18486] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.095543][T17432] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.102766][T17432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.139562][ T9101] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.146728][ T9101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 461.297691][T12494] bond2: (slave bridge2): failed to get link speed/duplex [ 461.417885][ T9101] bond2: (slave bridge2): failed to get link speed/duplex [ 461.508209][T18863] netlink: 'syz.1.3163': attribute type 1 has an invalid length. [ 461.598626][T18868] Cannot find del_set index 1 as target [ 462.013217][T18892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3168'. [ 462.114059][T18898] xt_CT: You must specify a L4 protocol and not use inversions on it [ 462.195183][T18486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.338598][T18903] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3170'. [ 462.403217][T18907] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 462.438994][T18907] syzkaller0: entered promiscuous mode [ 462.453226][T18907] syzkaller0: entered allmulticast mode [ 462.455064][T18911] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3173'. [ 462.476272][T18905] sch_tbf: burst 823 is lower than device syzkaller0 mtu (1514) ! [ 462.513439][T18914] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3173'. [ 462.541919][T18911] team1: entered promiscuous mode [ 462.547972][T18911] team1: entered allmulticast mode [ 462.554103][T18911] 8021q: adding VLAN 0 to HW filter on device team1 [ 462.584414][T18911] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3173'. [ 462.738751][T18486] veth0_vlan: entered promiscuous mode [ 462.775895][T18486] veth1_vlan: entered promiscuous mode [ 462.808121][T18922] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 462.844587][T18924] bridge2: entered promiscuous mode [ 462.855873][T18924] bridge2: entered allmulticast mode [ 462.918950][T18929] netlink: 'syz.2.3178': attribute type 4 has an invalid length. [ 462.930775][T18486] veth0_macvtap: entered promiscuous mode [ 462.941678][T18929] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3178'. [ 462.957261][T18486] veth1_macvtap: entered promiscuous mode [ 463.005058][T18486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.025607][T18929] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3178'. [ 463.048903][T18486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.104525][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.114154][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.154089][ T48] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.184474][ T48] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.204124][T18939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3182'. [ 463.334986][T18947] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3183'. [ 463.369101][T18947] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3183'. [ 463.421753][ T9101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.450338][ T9101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.516519][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.559881][T12488] net_ratelimit: 11 callbacks suppressed [ 463.559900][T12488] bond2: (slave bridge2): failed to get link speed/duplex [ 463.575822][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.738254][T17432] bond2: (slave bridge2): failed to get link speed/duplex [ 463.879920][T12487] bond2: (slave bridge2): failed to get link speed/duplex [ 463.997450][T12489] bond2: (slave bridge2): failed to get link speed/duplex [ 464.108355][T18965] netlink: 'syz.0.3189': attribute type 9 has an invalid length. [ 464.122558][T12489] bond2: (slave bridge2): failed to get link speed/duplex [ 464.260356][T17432] bond2: (slave bridge2): failed to get link speed/duplex [ 464.460735][ T5633] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 464.472188][ T5633] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 464.481583][ T5633] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 464.490029][ T5633] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 464.497769][ T5633] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 464.753783][T18992] Bluetooth: MGMT ver 1.23 [ 465.145465][ T30] audit: type=1800 audit(1785135196.459:11): pid=18998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3194" name="memory.events" dev="tmpfs" ino=3195 res=0 errno=0 [ 466.594158][ T5619] Bluetooth: hci4: command tx timeout [ 466.757265][ C1] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 467.550695][T19001] __nla_validate_parse: 5 callbacks suppressed [ 467.550715][T19001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3195'. [ 467.567952][ T9101] bond2: (slave bridge2): failed to get link speed/duplex [ 467.588985][T19001] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3195'. [ 467.639612][T12487] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.666528][T12487] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.720244][T12487] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 467.778038][T12494] bond2: (slave bridge2): failed to get link speed/duplex [ 467.820724][T19044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3203'. [ 467.876135][T12489] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.905018][T12487] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 468.012814][T19050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3204'. [ 468.054461][T19050] veth0_macvtap: left promiscuous mode [ 468.138559][T19055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3204'. [ 468.225502][T12489] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.367084][ T3350] bond2: (slave bridge2): failed to get link speed/duplex [ 468.419641][T12489] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.444373][T18985] virt_wifi0 speed is unknown, defaulting to 1000 [ 468.467818][T19070] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 468.608500][T12489] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.682172][ T5619] Bluetooth: hci4: command tx timeout [ 468.701169][T19077] netlink: 'syz.4.3211': attribute type 39 has an invalid length. [ 468.742078][T19079] sctp: [Deprecated]: syz.2.3212 (pid 19079) Use of int in max_burst socket option. [ 468.742078][T19079] Use struct sctp_assoc_value instead [ 468.798076][T19079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3212'. [ 469.019973][T19076] tipc: Enabled bearer , priority 0 [ 469.078760][T19080] syzkaller0: entered promiscuous mode [ 469.117666][T19080] syzkaller0: entered allmulticast mode [ 469.124772][T19081] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 469.195735][T19072] tipc: Resetting bearer [ 469.253710][T19088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3214'. [ 469.265891][T19072] tipc: Disabling bearer [ 469.473375][T19095] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3216'. [ 469.489692][T12494] net_ratelimit: 1 callbacks suppressed [ 469.489765][T12494] bond2: (slave bridge2): failed to get link speed/duplex [ 469.596044][T19098] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3217'. [ 469.609747][T12494] batadv1: left promiscuous mode [ 469.637965][T19098] netlink: 'syz.0.3217': attribute type 2 has an invalid length. [ 469.665423][T19098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3217'. [ 469.978194][T19125] xt_hashlimit: invalid rate [ 469.997023][ T9101] bond2: (slave bridge2): failed to get link speed/duplex [ 470.511042][T19125] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.518735][T19125] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.747356][ T5633] Bluetooth: hci4: command tx timeout [ 470.815212][T19125] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.844063][T19125] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 471.306591][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 471.312475][T19149] netlink: 'syz.0.3226': attribute type 3 has an invalid length. [ 471.362454][T12488] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.394038][T12488] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.450991][T12489] bridge_slave_1: left allmulticast mode [ 471.460735][T12489] bridge_slave_1: left promiscuous mode [ 471.471114][T12489] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.519311][T12489] bridge_slave_0: left allmulticast mode [ 471.526740][T12489] bridge_slave_0: left promiscuous mode [ 471.545795][T12489] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.554290][T19157] x_tables: duplicate underflow at hook 3 [ 471.582991][T19157] x_tables: duplicate underflow at hook 3 [ 471.936328][T12489] gretap0 (unregistering): left promiscuous mode [ 472.021497][T12489] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 472.030268][T12489] bond2 (unregistering): (slave bridge2): the permanent HWaddr of slave - f6:b4:77:69:8c:32 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 472.063602][T12489] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 472.079664][T12489] bond3 (unregistering): (slave bridge4): Releasing active interface [ 472.125384][T12489] bond1 (unregistering): Released all slaves [ 472.140370][T12489] bond2 (unregistering): Released all slaves [ 472.182724][T12489] bond3 (unregistering): Released all slaves [ 472.200779][T12489] bond4 (unregistering): Released all slaves [ 472.216721][T12489] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 472.231010][T12489] bond5 (unregistering): Released all slaves [ 472.244891][T12489] bond6 (unregistering): Released all slaves [ 472.265442][T12489] bond7 (unregistering): Released all slaves [ 472.283284][T12489] bond8 (unregistering): Released all slaves [ 472.299873][T12489] bond9 (unregistering): Released all slaves [ 472.314355][T12489] bond10 (unregistering): Released all slaves [ 472.331238][T12489] bond11 (unregistering): Released all slaves [ 472.348677][T12489] team0: Port device bond0 removed [ 472.354887][T12489] bond0 (unregistering): Released all slaves [ 472.386603][T12489] bond12 (unregistering): Released all slaves [ 472.441847][T12489] bond13 (unregistering): (slave veth7): Releasing active interface [ 472.463470][T12489] batadv1: entered promiscuous mode [ 472.483115][T12489] bond13 (unregistering): (slave batadv1): Releasing active interface [ 472.498987][T12489] bond13 (unregistering): Released all slaves [ 472.518212][T12489] bond14 (unregistering): Released all slaves [ 472.536759][T12488] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.685979][T19183] netlink: 'syz.3.3232': attribute type 2 has an invalid length. [ 472.715068][T19183] __nla_validate_parse: 151 callbacks suppressed [ 472.715113][T19183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3232'. [ 472.788250][T12488] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.829127][ T5633] Bluetooth: hci4: command tx timeout [ 472.862562][T19183] ¿: entered promiscuous mode [ 473.018023][T19194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3235'. [ 473.032785][T19193] netlink: 'syz.0.3234': attribute type 1 has an invalid length. [ 473.075019][T19194] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3235'. [ 473.095559][T19205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3234'. [ 473.116963][T19194] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 473.152649][T12489] tipc: Disabling bearer [ 473.162907][T12489] tipc: Left network mode [ 473.981264][T18985] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.988646][T18985] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.999682][T18985] bridge_slave_0: entered allmulticast mode [ 474.033695][T18985] bridge_slave_0: entered promiscuous mode [ 474.101084][T18985] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.125200][T18985] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.144395][T19253] netlink: 'syz.3.3246': attribute type 27 has an invalid length. [ 474.155716][T18985] bridge_slave_1: entered allmulticast mode [ 474.173066][T18985] bridge_slave_1: entered promiscuous mode [ 474.452908][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3248'. [ 474.463558][T18985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.483482][T19266] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3248'. [ 474.503874][T18985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.775312][T18985] team0: Port device team_slave_0 added [ 474.841726][T18985] team0: Port device team_slave_1 added [ 475.221436][T18985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.239318][T18985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.318506][T18985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.493434][T18985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.525869][T18985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 475.594654][T18985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.646974][T19320] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3254'. [ 475.840146][T19327] syzkaller0: entered promiscuous mode [ 475.874232][T19327] syzkaller0: entered allmulticast mode [ 476.179000][T18985] hsr_slave_0: entered promiscuous mode [ 476.208391][T18985] hsr_slave_1: entered promiscuous mode [ 476.230107][T18985] debugfs: 'hsr0' already exists in 'hsr' [ 476.255800][T18985] Cannot create hsr debugfs directory [ 476.275883][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 476.394940][T19349] lo: Caught tx_queue_len zero misconfig [ 476.402679][T19349] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 476.763176][T19346] virt_wifi0 speed is unknown, defaulting to 1000 [ 476.802753][T12489] hsr_slave_0: left promiscuous mode [ 476.963478][T19368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3266'. [ 476.999420][T19368] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3266'. [ 477.015167][T12489] hsr_slave_1: left promiscuous mode [ 477.036317][T12489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.064679][T12489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.320921][T12489] veth1_vlan: left promiscuous mode [ 477.336603][T12489] veth0_vlan: left promiscuous mode [ 477.443246][T19394] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3270'. [ 477.798532][T12489] team0 (unregistering): Port device team_slave_1 removed [ 477.819013][T19403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3272'. [ 477.946469][T19375] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 477.963639][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 477.987470][T19375] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 478.013520][T19375] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 478.280110][T19412] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_batadv, syncid = 3, id = 0 [ 478.370992][T19415] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3274'. [ 478.599662][T19423] tipc: New replicast peer: 255.255.255.255 [ 478.612328][T19423] tipc: Enabled bearer , priority 10 [ 478.638301][T12489] IPVS: stop unused estimator thread 0... [ 479.010019][T19446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3278'. [ 479.071399][T19446] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3278'. [ 479.251363][T19454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3280'. [ 479.795557][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3282'. [ 479.831479][ T5776] tipc: Node number set to 1943758305 [ 479.857569][T19470] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 479.893040][T19470] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 479.925644][T19470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3282'. [ 480.031150][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3285'. [ 480.110748][T18985] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 480.211030][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.239057][T18985] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 480.289563][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.314654][T18985] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 480.345777][T19491] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.373588][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 480.394909][T19492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.422620][T18985] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 480.454728][T18985] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 480.921500][T19516] syzkaller0: entered promiscuous mode [ 480.937319][T19527] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3292'. [ 480.946733][T19516] syzkaller0: entered allmulticast mode [ 481.273736][T19541] --map-set only usable from mangle table [ 484.026039][T18985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.049465][T19616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3302'. [ 484.102254][T18985] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.144477][T19623] Cannot find add_set index 0 as target [ 484.152183][T12494] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.159386][T12494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.205255][T12494] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.212462][T12494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.452668][T19633] ip6gretap0: left promiscuous mode [ 484.484292][T19633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.494611][T19633] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.571518][T19633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 484.582949][T19633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.612830][T19640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3307'. [ 484.628399][T19633] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 484.645278][T19640] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3307'. [ 484.649831][T19633] veth1_vlan: left promiscuous mode [ 484.686169][T19633] veth1_vlan: entered promiscuous mode [ 484.699775][T19633] veth1_macvtap: left promiscuous mode [ 484.708253][T19633] veth0_macvtap: left promiscuous mode [ 484.714990][T19633] veth0_macvtap: entered promiscuous mode [ 484.722689][T19633] veth1_macvtap: entered promiscuous mode [ 484.770115][T19633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 484.785681][T19633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 484.795116][T19633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.805347][T19633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.822106][T19633] ip6gretap0: entered promiscuous mode [ 484.852598][T19633] 8021q: adding VLAN 0 to HW filter on device bond1 [ 484.864391][T19633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 484.891293][T19633] 8021q: adding VLAN 0 to HW filter on device bond3 [ 484.908944][T19633] 8021q: adding VLAN 0 to HW filter on device bond4 [ 484.925201][T19633] 8021q: adding VLAN 0 to HW filter on device bond5 [ 484.951670][T19633] 8021q: adding VLAN 0 to HW filter on device bond6 [ 484.963570][T19633] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 484.973958][T19633] batman_adv: batadv0: Interface activated: ip6gretap1 [ 484.983703][T19633] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 485.009893][ T9] syz1: Port: 1 Link ACTIVE [ 485.027693][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.034909][ T48] bridge0: port 1(bridge_slave_0) entered listening state [ 485.155572][T12488] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.182917][T12488] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.212080][T12488] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 485.311647][T12488] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.332263][T12488] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.352544][T12488] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 485.372788][T19670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 485.426772][T12488] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.457215][T12488] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.483747][T12488] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 485.515032][T12488] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.546384][T12488] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.566539][T12488] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 485.659067][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 485.685392][ T48] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 485.694457][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 485.715410][ T48] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 485.730626][ T48] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 485.738686][ T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 485.746681][T19683] tipc: Enabled bearer , priority 0 [ 485.779048][T19688] syzkaller0: entered promiscuous mode [ 485.787224][ T9] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 485.797813][T19688] syzkaller0: entered allmulticast mode [ 485.816421][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 485.896650][T19698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3321'. [ 485.986545][T19699] tipc: Resetting bearer [ 486.088566][T12488] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.099660][T12488] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.112176][T19681] tipc: Resetting bearer [ 486.134544][T19681] tipc: Disabling bearer [ 486.197517][T12488] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.206308][T12488] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.300829][ T30] audit: type=1800 audit(1785135217.619:12): pid=19709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3325" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072636F6E6E6563742061613A61613A61613A61613A61613A31302030 dev="tmpfs" ino=193 res=0 errno=0 [ 486.372834][T19713] ieee802154 phy1 wpan1: encryption failed: -22 [ 486.384410][T19713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3326'. [ 486.408797][T19713] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3326'. [ 486.501744][T19713] 0ªX¹¦À: renamed from batadv0 [ 486.514789][T19713] 0ªX¹¦À: entered allmulticast mode [ 486.522789][T19713] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 486.535034][T19713] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 486.587534][ T5742] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 486.748965][ T5742] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 487.042793][T18985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 487.257309][T18985] veth0_vlan: entered promiscuous mode [ 487.264346][T19743] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3332'. [ 487.295230][T18985] veth1_vlan: entered promiscuous mode [ 487.300872][T19743] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3332'. [ 487.429665][T18985] veth0_macvtap: entered promiscuous mode [ 487.452753][T18985] veth1_macvtap: entered promiscuous mode [ 487.673283][T18985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 487.758415][T18985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.792767][T17432] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.825658][T17432] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.859362][ T3350] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.879636][ T30] audit: type=1107 audit(1785135219.199:13): pid=19766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 487.885527][T19769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3339'. [ 487.900814][ T3350] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.914457][T19770] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3337'. [ 488.407040][T19788] syzkaller1: entered promiscuous mode [ 488.426518][T19788] syzkaller1: entered allmulticast mode [ 488.462169][T12489] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.486427][T12489] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.620938][T12488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.640520][T12488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.834923][T19810] netlink: 'syz.4.3350': attribute type 7 has an invalid length. [ 488.843476][T19810] netlink: 'syz.4.3350': attribute type 8 has an invalid length. [ 488.914541][T19810] syzkaller1: entered promiscuous mode [ 488.929489][T19810] syzkaller1: entered allmulticast mode [ 488.940815][T17432] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.953743][T17432] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.064699][T17432] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.080044][T17432] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.224412][T19825] netlink: 'syz.3.3354': attribute type 1 has an invalid length. [ 489.354478][T19832] __nla_validate_parse: 4 callbacks suppressed [ 489.354496][T19832] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3357'. [ 489.392607][T19833] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3354'. [ 489.418116][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 489.431032][T19825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 489.439000][ T5619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 489.450644][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 489.460777][ T5619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 489.468910][ T5619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 489.479321][T19830] vlan2: entered promiscuous mode [ 489.514849][T19830] bond1: entered promiscuous mode [ 489.553013][T19830] vlan2: entered allmulticast mode [ 489.581774][T19830] bond1: entered allmulticast mode [ 489.792633][T19842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3358'. [ 489.902016][T19850] netlink: 'syz.3.3360': attribute type 1 has an invalid length. [ 489.922947][T19850] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3360'. [ 489.934052][T12494] smc: removing ib device syz1 [ 489.946367][T19849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3358'. [ 489.963422][ T5747] syz1: Port: 1 Link DOWN [ 490.042347][T12494] smbdirect: ib_dev[syz1] removed [ 490.171745][T19861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3363'. [ 490.189352][T19861] netlink: 'syz.3.3363': attribute type 21 has an invalid length. [ 490.378019][T19865] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3364'. [ 490.427659][T19835] virt_wifi0 speed is unknown, defaulting to 1000 [ 490.473491][T19867] block nbd2: server does not support multiple connections per device. [ 490.513076][T19867] block nbd2: shutting down sockets [ 490.871119][ T30] audit: type=1107 audit(1785135222.179:14): pid=19877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 491.101867][T19876] netlink: 'syz.2.3367': attribute type 1 has an invalid length. [ 491.206186][T19876] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3367'. [ 491.253668][T19867] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 491.269145][T19867] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 491.534911][T19867] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 491.546667][T19867] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 491.555897][ T5619] Bluetooth: hci2: command tx timeout [ 491.697903][T19867] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 491.705394][T19867] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 492.059935][T19867] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 492.075150][T19867] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 492.262759][T19867] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 492.270880][T19835] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.289842][T19867] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 492.299024][T19835] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.321110][T19835] bridge_slave_0: entered allmulticast mode [ 492.374456][T19835] bridge_slave_0: entered promiscuous mode [ 492.400244][T19835] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.421818][T19835] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.436636][T19835] bridge_slave_1: entered allmulticast mode [ 492.470360][T19906] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3374'. [ 492.480087][T19906] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3374'. [ 492.511008][T19835] bridge_slave_1: entered promiscuous mode [ 492.942335][T19924] netlink: 'syz.3.3378': attribute type 2 has an invalid length. [ 493.049600][T12496] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.065023][T12496] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.076721][T12496] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 493.103659][T19835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.152998][T19835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.285374][T12496] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.324312][T12496] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.356461][T12496] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 493.403720][T19835] team0: Port device team_slave_0 added [ 493.422244][T19931] syzkaller0: entered promiscuous mode [ 493.444646][T19931] syzkaller0: entered allmulticast mode [ 493.481569][T19835] team0: Port device team_slave_1 added [ 493.803515][T12496] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.819582][T19959] netlink: 'syz.4.3383': attribute type 8 has an invalid length. [ 493.833382][T12496] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.860422][T12496] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 493.902511][T19959] No such timeout policy "syz1" [ 493.908128][T19968] xt_hashlimit: size too large, truncated to 1048576 [ 493.920261][T19835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.937310][T19835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.975254][T19835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.020751][T19835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.044247][T19835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.157307][T19835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.371935][T12496] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.396671][T12496] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.419623][T12496] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 494.453437][T19992] __nla_validate_parse: 3 callbacks suppressed [ 494.453454][T19992] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3391'. [ 494.561614][T19835] hsr_slave_0: entered promiscuous mode [ 494.592045][T19835] hsr_slave_1: entered promiscuous mode [ 494.625374][T19835] debugfs: 'hsr0' already exists in 'hsr' [ 494.639664][T19835] Cannot create hsr debugfs directory [ 494.762762][T20011] netlink: 'syz.1.3395': attribute type 83 has an invalid length. [ 494.824732][T20007] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.064110][T20015] xt_CT: You must specify a L4 protocol and not use inversions on it [ 495.245129][T20021] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3398'. [ 495.761539][T20043] netlink: 'syz.1.3401': attribute type 2 has an invalid length. [ 495.853162][T12496] team0: left allmulticast mode [ 495.865388][T12496] bond7: left allmulticast mode [ 495.900031][T12496] bridge0: port 2(team0) entered disabled state [ 495.925390][T12496] bridge_slave_0: left allmulticast mode [ 495.940914][T12496] bridge_slave_0: left promiscuous mode [ 495.954848][T12496] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.090770][T12496] pimreg: left allmulticast mode [ 496.117669][T12496] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 496.159559][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3405'. [ 496.204693][T20063] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3406'. [ 496.339736][T12496] batman_adv: batadv0: Removing interface: ip6gretap1 [ 496.475300][T12496] bond2 (unregistering): (slave geneve2): Releasing active interface [ 496.536634][T12496] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 496.546463][T12496] bridge4 (unregistering): left promiscuous mode [ 496.561118][T12496] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 496.605496][T12496] team0: Port device bridge10 removed [ 496.664594][T12496] bond0 (unregistering): Released all slaves [ 496.675854][T12496] bond1 (unregistering): Released all slaves [ 496.689785][T12496] bond2 (unregistering): Released all slaves [ 496.707280][T12496] bond3 (unregistering): Released all slaves [ 496.721106][T12496] bond4 (unregistering): Released all slaves [ 496.734951][T12496] bond5 (unregistering): Released all slaves [ 496.755186][T12496] bond6 (unregistering): Released all slaves [ 496.769034][T12496] bond7 (unregistering): left promiscuous mode [ 496.775843][T12496] team0: Port device bond7 removed [ 496.782024][T12496] bond7 (unregistering): Released all slaves [ 496.806202][T12496] bond8 (unregistering): Released all slaves [ 496.820607][T12496] bond9 (unregistering): Released all slaves [ 496.840813][T12496] bond10 (unregistering): Released all slaves [ 496.864388][T20043] : entered promiscuous mode [ 496.928996][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3407'. [ 496.955916][T20060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3405'. [ 496.965596][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 496.984487][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3407'. [ 497.037180][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3407'. [ 497.084248][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3407'. [ 497.116559][T12496] tipc: Left network mode [ 497.272666][T20066] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3407'. [ 497.476126][T20080] can: request_module (can-proto-5) failed. [ 497.894784][T20098] macsec1: entered allmulticast mode [ 497.911660][T20098] dummy0: entered allmulticast mode [ 497.946616][T20098] dummy0: entered promiscuous mode [ 498.521167][T20133] netlink: 'syz.4.3420': attribute type 1 has an invalid length. [ 499.176821][T12496] hsr_slave_0: left promiscuous mode [ 499.205536][T12496] hsr_slave_1: left promiscuous mode [ 499.254641][T12496] veth1_macvtap: left promiscuous mode [ 499.261926][T12496] veth0_macvtap: left promiscuous mode [ 499.268542][T12496] veth1_vlan: left promiscuous mode [ 499.833661][T19835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 499.843570][T19835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 499.859345][T19835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 499.884190][T19835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 499.912927][T19835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 499.986173][T19835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.022791][T19835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 500.094156][T19835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.101299][T20191] __nla_validate_parse: 56 callbacks suppressed [ 500.101316][T20191] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3432'. [ 500.101330][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3432'. [ 500.101344][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3432'. [ 500.101358][T20191] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3432'. [ 500.101374][T20191] netlink: 116 bytes leftover after parsing attributes in process `syz.1.3432'. [ 500.254387][T20202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3435'. [ 500.269013][T20207] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3434'. [ 500.300181][T20186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3433'. [ 500.311044][T20204] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3435'. [ 500.559903][T20225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3437'. [ 500.594856][T20226] sctp: [Deprecated]: syz.1.3439 (pid 20226) Use of struct sctp_assoc_value in delayed_ack socket option. [ 500.594856][T20226] Use struct sctp_sack_info instead [ 500.610896][T20224] vlan2: entered promiscuous mode [ 500.650111][T20224] syz_tun: entered promiscuous mode [ 500.657816][T20225] netlink: 'syz.3.3437': attribute type 10 has an invalid length. [ 500.671551][T20224] vlan2: entered allmulticast mode [ 500.687231][T20224] syz_tun: entered allmulticast mode [ 500.708717][T20231] xt_HMARK: spi-set and port-set can't be combined [ 500.755952][T20225] team0: Device veth1_virt_wifi failed to register rx_handler [ 500.839123][T12496] IPVS: stop unused estimator thread 0... [ 500.910786][T20226] bond1: option updelay: invalid value (18446744073709518847) [ 500.957093][T20226] bond1: option updelay: allowed values 0 - 2147483647 [ 500.968751][T20226] bond1 (unregistering): Released all slaves [ 501.093764][T19835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.210848][T19835] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.245922][ T3350] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.253142][ T3350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.313062][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.375197][ T134] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.382374][ T134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.417063][T20248] netlink: 'syz.1.3442': attribute type 5 has an invalid length. [ 502.382934][T20285] : renamed from bridge_slave_0 (while UP) [ 502.450224][T20288] syzkaller0: entered promiscuous mode [ 502.469091][T20288] syzkaller0: entered allmulticast mode [ 502.763021][T19835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.861279][T19835] veth0_vlan: entered promiscuous mode [ 502.913131][T19835] veth1_vlan: entered promiscuous mode [ 503.031695][T19835] veth0_macvtap: entered promiscuous mode [ 503.076338][T19835] veth1_macvtap: entered promiscuous mode [ 503.169423][T19835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.229234][T19835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.278148][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.301311][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.345036][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.366289][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.629449][T17432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.646961][T17432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.707387][ T9101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.731260][ T9101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.751882][T20357] netlink: 'syz.3.3462': attribute type 1 has an invalid length. [ 503.840979][T20357] bond2: entered promiscuous mode [ 503.873983][T20357] 8021q: adding VLAN 0 to HW filter on device bond2 [ 503.960056][T20357] bond2: entered allmulticast mode [ 504.000488][T20357] bond2: (slave bridge4): making interface the new active one [ 504.016232][T20357] bridge4: entered promiscuous mode [ 504.023491][T20357] bridge4: entered allmulticast mode [ 504.035865][T20357] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 504.409048][T20384] Cannot find add_set index 0 as target [ 504.450283][T20379] bond1: entered promiscuous mode [ 504.455454][T20379] bond1: entered allmulticast mode [ 504.494621][T20387] vlan3: entered promiscuous mode [ 504.500938][T20387] bond0: entered promiscuous mode [ 504.506173][T20387] bond_slave_0: entered promiscuous mode [ 504.514387][T20387] bond_slave_1: entered promiscuous mode [ 507.178253][T20390] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.185629][T20390] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.245436][T20390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.257563][T20390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.327850][T20391] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1500) ! [ 507.337098][T20383] syzkaller0: entered promiscuous mode [ 507.342664][T20383] syzkaller0: entered allmulticast mode [ 507.448128][T20416] sctp: [Deprecated]: syz.0.3475 (pid 20416) Use of int in max_burst socket option. [ 507.448128][T20416] Use struct sctp_assoc_value instead [ 507.505363][T17432] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.531286][T17432] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.554981][T17432] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.645966][T17432] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.759517][T20435] __nla_validate_parse: 8 callbacks suppressed [ 507.759533][T20435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3479'. [ 507.925635][T20442] netlink: 'syz.2.3481': attribute type 4 has an invalid length. [ 507.952320][T20444] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.961345][T20442] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3481'. [ 507.991579][T20442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.194279][T20459] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 508.226248][T20460] netlink: 'syz.2.3488': attribute type 1 has an invalid length. [ 508.584305][T20480] netlink: 'syz.2.3494': attribute type 1 has an invalid length. [ 508.645399][T20486] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3496'. [ 508.681988][T20486] netlink: 236 bytes leftover after parsing attributes in process `syz.4.3496'. [ 508.697979][T20480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 508.753100][T20488] bond2: (slave veth3): Enslaving as an active interface with an up link [ 508.770591][T20482] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 508.793342][T20480] bond2 (unregistering): (slave veth3): Releasing backup interface [ 508.815822][T20480] bond2 (unregistering): Released all slaves [ 508.882116][T20496] netlink: 428 bytes leftover after parsing attributes in process `syz.4.3496'. [ 508.967806][T20486] bond2: option fail_over_mac: invalid value (127) [ 508.985055][T20486] bond2 (unregistering): Released all slaves [ 509.057238][T20496] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3496'. [ 509.108930][T20508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3500'. [ 509.127627][T20502] syzkaller1: entered allmulticast mode [ 509.139397][T20502] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3499'. [ 509.569537][T20538] x_tables: unsorted entry at hook 2 [ 509.607412][T20538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'. [ 509.680902][T20543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3510'. [ 510.733395][T20606] syzkaller0: entered promiscuous mode [ 510.740870][T20606] syzkaller0: entered allmulticast mode [ 510.929395][T20612] netlink: 'syz.0.3529': attribute type 25 has an invalid length. [ 513.116598][T20623] tipc: Enabled bearer , priority 0 [ 513.127666][T20625] syzkaller0: entered promiscuous mode [ 513.137931][T20625] syzkaller0: entered allmulticast mode [ 513.219003][T20641] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 513.318475][T20648] __nla_validate_parse: 7 callbacks suppressed [ 513.318492][T20648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3535'. [ 513.344716][T20641] bond1: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 513.361881][T20641] bond1 (unregistering): Released all slaves [ 513.383200][T20629] tipc: Resetting bearer [ 513.410242][T20629] tipc: Disabling bearer [ 513.528271][T20648] bridge0: port 1(1) entered disabled state [ 513.638471][T20648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.657987][T20648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.812289][T12489] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.828688][T12489] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.860351][T12489] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.882750][T12489] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.895873][T20662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3541'. [ 513.903999][T12489] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.926597][T12489] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.950191][T12489] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 513.971096][T12489] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.992073][T20668] netlink: 'syz.4.3541': attribute type 2 has an invalid length. [ 514.341825][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3544'. [ 514.364711][T20680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3544'. [ 514.746514][T20700] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3549'. [ 514.790655][T20700] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3549'. [ 514.802919][T20707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3551'. [ 514.812874][T20707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3551'. [ 514.833638][T20700] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3549'. [ 515.279685][T20721] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 515.294112][T20721] syzkaller1: linktype set to 823 [ 515.701253][T20745] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3561'. [ 515.969059][T20751] netlink: 'syz.0.3563': attribute type 1 has an invalid length. [ 516.121687][T20751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 516.205724][ T3350] nci: nci_rsp_packet: unknown rsp opcode 0x6 [ 517.255579][T20802] vlan4: entered promiscuous mode [ 517.260980][T20802] bridge0: entered promiscuous mode [ 517.334131][T20802] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.341861][T20802] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.373806][T20802] 0ªX¹¦À: left allmulticast mode [ 517.441813][T20802] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 517.455525][T20802] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 517.732526][T20802] bridge2: left promiscuous mode [ 517.746987][T20802] bridge2: left allmulticast mode [ 517.761063][T20802] vlan2: left promiscuous mode [ 517.778026][T20802] bond1: left promiscuous mode [ 517.783065][T20802] vlan2: left allmulticast mode [ 517.797702][T20802] bond1: left allmulticast mode [ 517.805033][T20802] bond2: left promiscuous mode [ 517.816925][T20802] bridge4: left promiscuous mode [ 517.827262][T20802] bond2: left allmulticast mode [ 517.836948][T20802] bridge4: left allmulticast mode [ 517.852424][T20802] vlan3: left promiscuous mode [ 517.857405][T20802] bond0: left promiscuous mode [ 517.862184][T20802] bond_slave_0: left promiscuous mode [ 517.868281][T20802] bond_slave_1: left promiscuous mode [ 517.876210][T20802] vlan4: left promiscuous mode [ 517.888964][T20802] bridge0: left promiscuous mode [ 517.896933][T12488] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.906809][T12488] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.922283][T12488] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.933004][T12488] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.957152][T12488] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 517.970470][T12488] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 517.998214][T12488] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 518.007229][T12488] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.850817][T20777] Set syz1 is full, maxelem 65536 reached [ 519.092570][T20763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 519.101978][T20760] __nla_validate_parse: 3 callbacks suppressed [ 519.101994][T20760] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3566'. [ 519.329183][T20818] xt_ecn: cannot match TCP bits for non-tcp packets [ 519.452746][T20831] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3584'. [ 519.683762][T20842] Cannot find del_set index 1 as target [ 519.718577][T20842] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002 [ 519.730904][T20849] Bluetooth: MGMT ver 1.23 [ 519.735926][T20848] netlink: 'syz.2.3591': attribute type 1 has an invalid length. [ 519.752466][T20842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3590'. [ 519.774045][T20848] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3591'. [ 519.794575][T20842] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 520.075151][T20871] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3596'. [ 520.508888][T20891] netlink: 'syz.0.3604': attribute type 83 has an invalid length. [ 520.538281][T20879] bond3 (unregistering): Released all slaves [ 520.839452][T20908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 520.848440][T20908] 8021q: adding VLAN 0 to HW filter on device team0 [ 520.883637][T20908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 521.223912][T20908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.233628][T20908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.252862][T20908] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 521.280149][T20908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.295241][T20908] veth1_vlan: left promiscuous mode [ 521.301857][T20908] veth0_vlan: left promiscuous mode [ 521.310655][T20908] veth0_vlan: entered promiscuous mode [ 521.318071][T20908] veth1_vlan: entered promiscuous mode [ 521.328678][T20908] veth1_macvtap: left promiscuous mode [ 521.334860][T20908] veth0_macvtap: left promiscuous mode [ 521.341465][T20908] veth0_macvtap: entered promiscuous mode [ 521.347973][T20908] veth1_macvtap: entered promiscuous mode [ 521.358153][T20908] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 521.366130][T20908] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 521.374207][T20908] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 521.382017][T20908] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 521.421355][ T3350] bridge0: port 1(1) entered blocking state [ 521.427623][ T3350] bridge0: port 1(1) entered forwarding state [ 521.436228][ T3350] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.443419][ T3350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.486164][T12489] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.495599][T12489] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.509072][T12489] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.537905][T12489] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.565449][T12489] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.589467][T12489] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.617939][T12489] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.639827][ C1] bridge0: received packet on 1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 521.662711][T12489] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.695319][T20943] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3615'. [ 521.737611][ C1] bridge0: received packet on 1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 521.752027][T20942] veth0_to_bond: entered promiscuous mode [ 521.773702][T20942] batadv0: entered promiscuous mode [ 521.852018][T20937] virt_wifi0 speed is unknown, defaulting to 1000 [ 521.998398][T20955] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3618'. [ 522.295629][T20941] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3616'. [ 522.328638][T20941] ip6gre1: entered promiscuous mode [ 522.335555][T20955] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3618'. [ 522.350248][T20941] ip6gre1: entered allmulticast mode [ 522.459071][T20946] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 522.525549][ C0] bridge0: received packet on 1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 522.969478][T21003] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3630'. [ 523.042216][T21006] openvswitch: netlink: Message has 16 unknown bytes. [ 523.046111][T21003] gre1: entered allmulticast mode [ 523.362536][T21023] sctp: [Deprecated]: syz.3.3637 (pid 21023) Use of int in max_burst socket option deprecated. [ 523.362536][T21023] Use struct sctp_assoc_value instead [ 523.524374][T21034] netlink: 'syz.3.3639': attribute type 5 has an invalid length. [ 523.720555][T21032] bridge0: entered promiscuous mode [ 523.725931][T21032] bridge0: entered allmulticast mode [ 523.759538][ C1] bridge0: received packet on 1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.772096][ C1] bridge0: received packet on 1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 523.928423][T21053] netlink: 'syz.4.3642': attribute type 63 has an invalid length. [ 524.410565][ T5747] IPVS: starting estimator thread 0... [ 524.443703][T21078] bond3 (unregistering): Released all slaves [ 524.514197][T21080] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 524.529578][T21079] IPVS: using max 56 ests per chain, 134400 per kthread [ 524.612951][T21084] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 524.628739][T21084] xt_bpf: check failed: parse error [ 524.641299][T21084] __nla_validate_parse: 4 callbacks suppressed [ 524.641316][T21084] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3654'. [ 524.667662][ C1] bridge0: received packet on 1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 524.741550][T21086] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 524.822264][T21088] openvswitch: netlink: Duplicate or invalid key (type 0). [ 524.830232][T21088] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 524.982034][T21090] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.472827][T21114] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3665'. [ 525.498304][T21114] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3665'. [ 525.599841][T21128] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3669'. [ 525.656583][T21131] netlink: 'syz.0.3670': attribute type 21 has an invalid length. [ 525.666570][T21133] syzkaller0: entered promiscuous mode [ 525.680859][T21133] syzkaller0: entered allmulticast mode [ 525.688601][T21131] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3670'. [ 525.729221][T21131] netlink: 'syz.0.3670': attribute type 5 has an invalid length. [ 525.743049][T21131] netlink: 'syz.0.3670': attribute type 6 has an invalid length. [ 525.751477][T21131] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3670'. [ 525.827644][T21135] virt_wifi0 speed is unknown, defaulting to 1000 [ 526.152325][T21163] netlink: 'syz.0.3676': attribute type 1 has an invalid length. [ 526.432946][T21168] bridge6: entered promiscuous mode [ 526.452358][T21168] bridge6: entered allmulticast mode [ 526.505076][T21168] team0: Port device bridge6 added [ 526.781699][T21205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3685'. [ 526.813410][T21205] bridge_slave_1: left allmulticast mode [ 526.843529][T21208] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3685'. [ 526.884717][T21205] bridge_slave_1: left promiscuous mode [ 526.905922][T21205] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.940872][T21205] : left allmulticast mode [ 526.959228][T21205] : left promiscuous mode [ 526.969505][T21205] bridge0: port 1(1) entered disabled state [ 527.053151][T21212] netlink: 'syz.3.3688': attribute type 1 has an invalid length. [ 527.073936][T21212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3688'. [ 527.196523][T21223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3688'. [ 527.709699][ T9101] wlan1: Trigger new scan to find an IBSS to join [ 527.931258][T21241] IPv6: Can't replace route, no match found [ 528.329321][T21252] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 528.343010][T21252] batman_adv: batadv0: Adding interface: gretap1 [ 528.351087][T21252] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.377651][T21252] batman_adv: batadv0: Interface activated: gretap1 [ 528.396077][T21256] Cannot find add_set index 1 as target [ 528.688366][T21240] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 529.121573][T21286] team0: Port device team_slave_0 removed [ 529.129788][T21297] xt_hashlimit: size too large, truncated to 1048576 [ 529.177708][T21301] nbd: nbd1 already in use [ 529.874688][T21337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.014821][T21341] __nla_validate_parse: 3 callbacks suppressed [ 530.014838][T21341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3724'. [ 530.055255][T21341] ip6tnl1: entered allmulticast mode [ 530.101363][T21344] syzkaller0: entered promiscuous mode [ 530.109525][T21344] syzkaller0: entered allmulticast mode [ 530.119146][T21346] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 530.377085][T21367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3729'. [ 530.408937][T21369] ªªªªªª: renamed from vlan0 [ 530.632008][T21361] netlink: 'syz.1.3728': attribute type 1 has an invalid length. [ 530.748163][T12489] wlan1: Trigger new scan to find an IBSS to join [ 531.248469][T21361] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 531.861490][T21418] netlink: 'syz.1.3745': attribute type 1 has an invalid length. [ 531.902344][T21414] xt_CT: You must specify a L4 protocol and not use inversions on it [ 531.920098][T21418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.985183][T21418] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 532.023286][T21427] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3748'. [ 532.598567][T21456] netlink: 'syz.1.3755': attribute type 49 has an invalid length. [ 532.784908][T21462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3757'. [ 532.847067][T21456] ip6gretap0: entered promiscuous mode [ 532.867080][T21456] ip6gretap0: entered allmulticast mode [ 533.110058][T21469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3760'. [ 533.313351][T21487] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3763'. [ 533.378662][T21487] ip6gre1: entered promiscuous mode [ 533.395766][T21487] ip6gre1: entered allmulticast mode [ 533.520533][T21497] netlink: 'syz.4.3767': attribute type 2 has an invalid length. [ 533.562346][T21497] netlink: 'syz.4.3767': attribute type 5 has an invalid length. [ 533.681623][T21500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 533.715529][T21495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 533.717224][T17432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.944301][T21524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3773'. [ 534.226418][T21540] netlink: 'syz.2.3776': attribute type 1 has an invalid length. [ 534.371075][T21547] syzkaller0: entered promiscuous mode [ 534.385010][T21547] syzkaller0: entered allmulticast mode [ 534.405740][T21540] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 534.460454][T21542] veth7: entered allmulticast mode [ 534.465979][T21567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3779'. [ 537.468440][T21598] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3782'. [ 537.490636][T21598] openvswitch: netlink: Flow key attr not present in new flow. [ 537.557800][T21609] IPVS: set_ctl: invalid protocol: 242 172.20.20.170:20004 [ 537.577365][T21608] IPVS: set_ctl: invalid protocol: 242 172.20.20.170:20004 [ 537.772312][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'. [ 537.797426][T21622] xt_hashlimit: size too large, truncated to 1048576 [ 537.844229][T21626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'. [ 537.877392][T21626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'. [ 537.899931][T21626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'. [ 537.926020][T21626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3790'. [ 538.311943][T21642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3794'. [ 538.534228][T21657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3798'. [ 538.575951][T21657] sctp: [Deprecated]: syz.4.3798 (pid 21657) Use of int in maxseg socket option. [ 538.575951][T21657] Use struct sctp_assoc_value instead [ 538.614962][T21665] netlink: 'syz.2.3800': attribute type 11 has an invalid length. [ 538.645378][T21665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3800'. [ 538.981701][T21688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3808'. [ 539.112030][T21693] syzkaller0: entered promiscuous mode [ 539.117762][T21693] syzkaller0: entered allmulticast mode [ 539.192960][T21696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.967781][T21713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.020353][T21713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.067761][T21717] erspan0: entered promiscuous mode [ 540.623679][T21739] netlink: 'syz.4.3826': attribute type 1 has an invalid length. [ 541.029799][T21770] netlink: 'syz.3.3835': attribute type 2 has an invalid length. [ 541.564441][T21802] netlink: 'syz.3.3846': attribute type 12 has an invalid length. [ 541.664444][T21812] bridge2: port 1(dummy0) entered blocking state [ 541.685982][T21812] bridge2: port 1(dummy0) entered disabled state [ 541.704502][T21812] dummy0: entered allmulticast mode [ 541.712756][T21812] dummy0: entered promiscuous mode [ 542.225676][T21829] can: request_module (can-proto-0) failed. [ 542.255150][T21827] can: request_module (can-proto-0) failed. [ 542.279664][T21829] bridge2: port 1(dummy0) entered blocking state [ 542.286351][T21829] bridge2: port 1(dummy0) entered forwarding state [ 542.296073][T21829] dummy0: left allmulticast mode [ 542.301645][T21829] dummy0: left promiscuous mode [ 542.307180][T21829] bridge2: port 1(dummy0) entered disabled state [ 542.323350][T21829] batman_adv: batadv0: Adding interface: dummy0 [ 542.331582][T21829] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 542.365410][T21829] batman_adv: batadv0: Interface activated: dummy0 [ 542.619638][T21860] __nla_validate_parse: 15 callbacks suppressed [ 542.619656][T21860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3858'. [ 542.702852][T21860] virt_wifi0 speed is unknown, defaulting to 1000 [ 542.826252][T21867] tipc: Started in network mode [ 542.837747][T21867] tipc: Node identity fec98dd0c3c, cluster identity 4711 [ 542.845029][T21867] tipc: Enabled bearer , priority 0 [ 542.859489][T21867] syzkaller0: entered promiscuous mode [ 542.879851][T21867] syzkaller0: entered allmulticast mode [ 542.997300][T21867] tipc: Resetting bearer [ 543.046439][T21867] tipc: Disabling bearer [ 543.321203][T21909] netlink: 'syz.3.3870': attribute type 1 has an invalid length. [ 543.408927][T21909] bond3: entered promiscuous mode [ 543.414474][T21909] 8021q: adding VLAN 0 to HW filter on device bond3 [ 543.526476][T21909] 8021q: adding VLAN 0 to HW filter on device bond3 [ 543.546631][T21909] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 543.602500][T21909] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 543.616498][T21909] bond3: (slave xfrm1): making interface the new active one [ 543.624608][T21909] xfrm1: entered promiscuous mode [ 543.639747][T21909] xfrm1: left promiscuous mode [ 543.735247][T21933] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.3875'. [ 543.841664][T21933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3875'. [ 543.975174][T21929] netlink: 'syz.4.3875': attribute type 10 has an invalid length. [ 543.994868][T21935] bridge8: port 1(dummy0) entered blocking state [ 544.006339][T21929] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3875'. [ 544.026336][T21935] bridge8: port 1(dummy0) entered disabled state [ 544.342856][T21959] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3880'. [ 544.360216][T21959] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 544.728828][T21984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3888'. [ 544.755998][T21992] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3891'. [ 544.769117][T21993] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3888'. [ 544.784469][T21993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3888'. [ 544.843659][T21984] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3888'. [ 545.721442][T22047] netlink: ct family unspecified [ 545.726802][T22047] openvswitch: netlink: Actions may not be safe on all matching packets [ 545.923266][T22058] virt_wifi0 speed is unknown, defaulting to 1000 [ 545.981473][T22060] virt_wifi0 speed is unknown, defaulting to 1000 [ 547.860961][T22145] __nla_validate_parse: 7 callbacks suppressed [ 547.860972][T22145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3946'. [ 548.526015][T22171] tipc: Enabling of bearer rejected, failed to enable media [ 548.544609][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3959'. [ 548.561181][T22173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3959'. [ 548.572430][T22173] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3959'. [ 548.587458][T22173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3959'. [ 549.144389][T22215] openvswitch: netlink: Key 13 has unexpected len 4 expected 24 [ 549.239958][T22220] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3974'. [ 549.250945][T22220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3974'. [ 549.261177][T22220] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3974'. [ 549.397526][T22224] netlink: 'syz.4.3976': attribute type 4 has an invalid length. [ 549.455866][T22227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3977'. [ 549.469745][T22227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3977'. [ 549.479474][T22227] openvswitch: netlink: Flow key attr not present in new flow. [ 550.125929][T22258] ip_tables: iptables: counters copy to user failed while replacing table [ 550.691755][T22299] x_tables: duplicate underflow at hook 1 [ 551.007175][T22320] ip_tables: iptables: counters copy to user failed while replacing table [ 551.083828][T22325] tipc: New replicast peer: 172.20.20.187 [ 551.090151][T22325] tipc: Enabled bearer , priority 10 [ 551.410544][T22341] virt_wifi0 speed is unknown, defaulting to 1000 [ 552.103906][T22377] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 552.478324][T22392] tipc: Started in network mode [ 552.483546][T22392] tipc: Node identity 1000001, cluster identity 4711 [ 552.490796][T22392] tipc: Node number set to 16777217 [ 552.501607][T22394] tipc: Enabling of bearer rejected, already enabled [ 552.514610][T22392] tipc: Enabled bearer , priority 1 [ 552.550332][T22391] tipc: Resetting bearer [ 552.618043][T22391] tipc: Disabling bearer [ 552.642488][T22401] tipc: New replicast peer: 127.0.0.1 [ 552.648673][T22401] tipc: Enabled bearer , priority 10 [ 552.865951][T22410] tipc: New replicast peer: 127.0.0.1 [ 552.872088][T22410] tipc: Enabled bearer , priority 10 [ 553.765613][T22460] __nla_validate_parse: 3 callbacks suppressed [ 553.765630][T22460] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4058'. [ 553.997800][T11486] tipc: Node number set to 1024036304 [ 554.085884][T22479] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 554.232376][T22487] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 554.322095][T22489] netlink: 'syz.1.4068': attribute type 2 has an invalid length. [ 554.781585][T22512] rdma_rxe: rxe_newlink: failed to add lo [ 554.844430][T22515] smc: net device lo applied user defined pnetid SYZ0 [ 555.392702][T22528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4082'. [ 555.532745][T22532] bridge0: port 3(dummy0) entered blocking state [ 555.540495][T22532] bridge0: port 3(dummy0) entered disabled state [ 555.691295][T22539] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4087'. [ 555.704061][T22539] netlink: 'syz.1.4087': attribute type 1 has an invalid length. [ 555.716554][T22539] netlink: 'syz.1.4087': attribute type 2 has an invalid length. [ 555.725310][T22539] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 555.778855][T22542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4088'. [ 555.855292][T22548] rdma_rxe: rxe_newlink: failed to add veth0 [ 555.933992][T22548] smbdirect: ib_dev[syz0] removed [ 556.188382][T22565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4099'. [ 556.495418][T22584] netlink: 'syz.4.4106': attribute type 2 has an invalid length. [ 556.691251][T22596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4108'. [ 556.838912][T22602] smc: net device veth0 applied user defined pnetid SYZ0 [ 557.247419][T22601] infiniband syz0: set active [ 557.252185][T22601] infiniband syz0: added veth0 [ 557.260201][T22624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4123'. [ 557.281872][T22601] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 557.297073][T22601] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 557.314458][T22601] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 557.370131][T22601] RDS/IB: syz0: added [ 557.394502][T22601] smc: adding ib device syz0 with port count 1 [ 557.406953][T22601] smc: ib device syz0 port 1 has no pnetid [ 557.420316][T22631] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4125'. [ 557.430195][T22631] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4125'. [ 558.294367][T22657] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4136'. [ 559.281815][T22691] rdma_rxe: rxe_newlink: failed to add lo [ 559.452044][T22696] rdma_rxe: rxe_newlink: failed to add veth0 [ 559.566679][T22703] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4154'. [ 559.689083][T22705] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4155'. [ 559.743368][T22709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4157'. [ 559.753048][T22709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4157'. [ 559.806040][T22711] openvswitch: netlink: Key 8 has unexpected len 12 expected 40 [ 560.033588][T22723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4164'. [ 560.207464][T22735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4168'. [ 560.238319][T22735] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4168'. [ 561.241346][T22777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4184'. [ 561.254367][T22780] rdma_rxe: rxe_newlink: failed to add lo [ 561.285946][T22777] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4184'. [ 561.532165][T22797] netlink: 332 bytes leftover after parsing attributes in process `syz.1.4192'. [ 561.567349][T22793] 0: reclassify loop, rule prio 0, protocol 03 [ 561.656396][T22802] tipc: Enabled bearer , priority 1 [ 561.664765][T22800] tipc: Resetting bearer [ 561.731561][T22800] tipc: Disabling bearer [ 561.881570][T22813] bridge0: port 3(syz_tun) entered blocking state [ 561.897175][T22813] bridge0: port 3(syz_tun) entered disabled state [ 561.909499][T22813] syz_tun: entered allmulticast mode [ 561.918800][T22813] syz_tun: entered promiscuous mode [ 562.519309][T22847] openvswitch: netlink: Flow key attr not present in new flow. [ 562.571124][T22849] rdma_rxe: rxe_newlink: failed to add lo [ 562.748466][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.817546][T22894] tipc: Enabling of bearer rejected, already enabled [ 563.877938][T22895] tipc: Disabling bearer [ 564.178489][T22901] tipc: Started in network mode [ 564.183583][T22901] tipc: Node identity 1000001, cluster identity 4711 [ 564.191279][T22901] tipc: Node number set to 16777217 [ 564.564682][T22914] x_tables: duplicate entry at hook 2 [ 565.043086][T22933] rdma_rxe: rxe_newlink: failed to add lo [ 565.712103][T22959] tipc: Enabled bearer , priority 10 [ 565.947247][T17432] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 566.028501][T22977] __nla_validate_parse: 6 callbacks suppressed [ 566.028518][T22977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4261'. [ 566.119006][T22981] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4263'. [ 566.129113][T22981] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4263'. [ 566.725683][T23003] tipc: Enabling of bearer rejected, already enabled [ 566.867918][T23014] smc: net device lo applied user defined pnetid SYZ0 [ 567.163656][T23032] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4285'. [ 567.175737][T23032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4285'. [ 567.185855][T23032] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4285'. [ 567.262578][T23036] tipc: Enabling of bearer rejected, already enabled [ 567.640689][T23060] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4298'. [ 567.651331][T23060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4298'. [ 567.866783][T23072] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4304'. [ 567.877229][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 567.877242][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 567.899187][T23072] openvswitch: netlink: Flow actions attr not present in new flow. [ 567.964168][T23076] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4305'. [ 568.236137][T23090] netlink: 'syz.0.4314': attribute type 2 has an invalid length. [ 568.273888][T23090] : entered promiscuous mode [ 569.070125][T23138] xt_TCPMSS: Only works on TCP SYN packets [ 570.395159][T23213] netlink: 'syz.2.4348': attribute type 4 has an invalid length. [ 570.428044][T23216] bridge0: left promiscuous mode [ 570.433315][T23216] bridge0: left allmulticast mode [ 570.433576][T23213] netlink: 'syz.2.4348': attribute type 2 has an invalid length. [ 570.924491][T23236] rdma_rxe: rxe_newlink: failed to add lo [ 571.026221][T23239] netlink: 'syz.4.4359': attribute type 1 has an invalid length. [ 571.046547][T23242] __nla_validate_parse: 4 callbacks suppressed [ 571.046564][T23242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4358'. [ 571.064610][T23239] netlink: 'syz.4.4359': attribute type 1 has an invalid length. [ 571.075569][T23239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4359'. [ 571.100928][T23239] netlink: 'syz.4.4359': attribute type 1 has an invalid length. [ 571.125225][T23239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4359'. [ 572.419907][T23301] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4380'. [ 572.474113][T23303] netlink: 'syz.1.4381': attribute type 2 has an invalid length. [ 573.735253][T23353] tipc: Enabling of bearer rejected, already enabled [ 574.597673][T23398] tipc: Enabling of bearer rejected, already enabled [ 574.932884][T23413] bridge0: port 3(syz_tun) entered blocking state [ 574.944307][T23413] bridge0: port 3(syz_tun) entered disabled state [ 574.951467][T23413] syz_tun: entered allmulticast mode [ 574.963074][T23413] syz_tun: entered promiscuous mode [ 575.163483][T23423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4430'. [ 575.335995][T23435] syz_tun: entered allmulticast mode [ 575.364901][T23434] syz_tun: left allmulticast mode [ 575.392607][T23437] tipc: Enabled bearer , priority 1 [ 575.412922][T23436] tipc: Resetting bearer [ 575.451082][T23436] tipc: Disabling bearer [ 575.790492][T23453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4445'. [ 575.812754][T23453] netlink: 116 bytes leftover after parsing attributes in process `syz.0.4445'. [ 576.374480][T23480] bridge0: port 3(veth0) entered blocking state [ 576.387558][T23480] bridge0: port 3(veth0) entered disabled state [ 576.406162][T23480] veth0: entered allmulticast mode [ 576.413876][T23480] veth0: entered promiscuous mode [ 576.490264][T23486] tipc: Enabling of bearer rejected, already enabled [ 576.935112][T23514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4469'. [ 577.810416][T23547] rdma_rxe: rxe_newlink: failed to add lo [ 579.204821][T23601] bridge0: port 3(dummy0) entered blocking state [ 579.223819][T23601] bridge0: port 3(dummy0) entered disabled state [ 579.592651][T23613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4498'. [ 579.624939][T23613] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4498'. [ 579.764476][T23621] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4501'. [ 579.900206][T23630] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4504'. [ 579.941450][T23636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4506'. [ 579.976754][T23636] atomic_op ffff888034769998 conn xmit_atomic 0000000000000000 [ 580.150635][T23649] rdma_rxe: rxe_newlink: failed to add veth0 [ 580.267869][T23654] tipc: Enabled bearer , priority 1 [ 581.104296][T23694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4526'. [ 581.124743][T23694] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4526'. [ 582.446045][T23746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4544'. [ 582.512016][T23748] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4545'. [ 582.563518][T23748] netlink: 268 bytes leftover after parsing attributes in process `syz.4.4545'. [ 582.580767][T23752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4547'. [ 582.592246][T23752] openvswitch: netlink: Message has 4 unknown bytes. [ 582.649855][T23756] rdma_rxe: rxe_newlink: failed to add veth0 [ 582.702838][T23758] tipc: Enabling of bearer rejected, failed to enable media [ 582.882732][T23773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4554'. [ 582.904555][T23773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4554'. [ 583.828154][T23811] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4565'. [ 584.074030][T23821] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4570'. [ 584.594086][T23830] rdma_rxe: rxe_newlink: failed to add lo [ 585.044905][T23835] bridge0: port 1(veth1_to_bridge) entered blocking state [ 585.053838][T23835] bridge0: port 1(veth1_to_bridge) entered disabled state [ 585.062907][T23835] veth1_to_bridge: entered allmulticast mode [ 585.092313][T23835] veth1_to_bridge: entered promiscuous mode [ 585.141727][T23836] bridge0: port 1(veth1_to_bridge) entered blocking state [ 585.148953][T23836] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 585.337192][T23849] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4579'. [ 585.346371][T23849] openvswitch: netlink: Message has 4 unknown bytes. [ 585.808014][T23865] tipc: Enabled bearer , priority 1 [ 585.855222][T23864] tipc: Resetting bearer [ 585.908820][T23864] tipc: Disabling bearer [ 585.922663][T23869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4586'. [ 585.932242][T23869] openvswitch: netlink: Actions may not be safe on all matching packets [ 586.780541][T23913] tipc: Enabling of bearer rejected, already enabled [ 587.448308][T23945] tipc: Enabled bearer , priority 10 [ 587.461461][T23947] tipc: Enabled bearer , priority 10 [ 587.839460][T23973] __nla_validate_parse: 9 callbacks suppressed [ 587.839478][T23973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4625'. [ 588.861266][T24028] rdma_rxe: rxe_newlink: failed to add veth0 [ 589.414476][T24053] netlink: 'syz.0.4652': attribute type 13 has an invalid length. [ 589.556150][T24059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4654'. [ 589.861822][T24070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4658'. [ 589.873631][T24070] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4658'. [ 589.886347][T24070] netlink: 'syz.4.4658': attribute type 1 has an invalid length. [ 589.899197][T24070] openvswitch: netlink: Flow actions attr not present in new flow. [ 589.911600][T24070] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4658'. [ 589.921653][T24070] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4658'. [ 589.933201][T24070] netlink: 'syz.4.4658': attribute type 1 has an invalid length. [ 589.942751][T24070] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4658'. [ 589.959973][T24070] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4658'. [ 589.969403][T24070] openvswitch: netlink: Flow actions attr not present in new flow. [ 590.410228][T24094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4668'. [ 590.474964][T24094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4668'. [ 591.115766][T24132] netlink: ct family unspecified [ 591.121878][T24132] openvswitch: netlink: Actions may not be safe on all matching packets [ 592.099068][T24165] tipc: Enabling of bearer rejected, already enabled [ 592.425945][T24178] tipc: Enabled bearer , priority 1 [ 592.543915][T24177] tipc: Resetting bearer [ 592.611231][T24177] tipc: Disabling bearer [ 592.805143][T24196] openvswitch: netlink: Flow actions attr not present in new flow. [ 593.010023][T24207] __nla_validate_parse: 6 callbacks suppressed [ 593.010042][T24207] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4715'. [ 593.149750][T24215] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4717'. [ 593.178879][T24215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4717'. [ 593.356151][T24229] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4724'. [ 593.409204][T24233] openvswitch: netlink: Flow actions attr not present in new flow. [ 593.501066][T24239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4728'. [ 593.510126][T24239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4728'. [ 593.520124][T24239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4728'. [ 593.529204][T24239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4728'. [ 593.832408][T24249] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4731'. [ 593.842334][T24249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4731'. [ 594.701509][T24284] rdma_rxe: rxe_newlink: failed to add veth0 [ 595.541983][T24316] tipc: Enabling of bearer rejected, already enabled [ 595.665791][T24324] tc_dump_action: action bad kind [ 597.111591][T24365] tipc: Enabled bearer , priority 1 [ 597.135599][T24364] tipc: Resetting bearer [ 597.175987][T24369] rdma_rxe: rxe_newlink: failed to add veth0 [ 597.178282][T24371] [ 597.184445][T24371] ============================= [ 597.189430][T24371] WARNING: suspicious RCU usage [ 597.194458][T24371] syzkaller #0 Not tainted [ 597.199302][T24371] ----------------------------- [ 597.204289][T24371] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 597.212644][T24371] [ 597.212644][T24371] other info that might help us debug this: [ 597.212644][T24371] [ 597.223025][T24371] [ 597.223025][T24371] rcu_scheduler_active = 2, debug_locks = 1 [ 597.231381][T24371] 1 lock held by syz.4.4779/24371: [ 597.236641][T24371] #0: ffff88807f6b9c90 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x6a/0x90 [ 597.247528][T24371] [ 597.247528][T24371] stack backtrace: [ 597.253510][T24371] CPU: 1 UID: 0 PID: 24371 Comm: syz.4.4779 Not tainted syzkaller #0 PREEMPT(full) [ 597.253535][T24371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 597.253553][T24371] Call Trace: [ 597.253561][T24371] [ 597.253667][T24371] dump_stack_lvl+0xe8/0x150 [ 597.253765][T24371] lockdep_rcu_suspicious+0x13f/0x1d0 [ 597.253818][T24371] xfrm_nlmsg_multicast+0x1d8/0x1f0 [ 597.253843][T24371] xfrm_send_migrate_state+0x870/0xae0 [ 597.253887][T24371] ? __pfx_xfrm_send_migrate_state+0x10/0x10 [ 597.253967][T24371] ? xfrm_state_migrate_install+0x192/0x630 [ 597.254022][T24371] xfrm_do_migrate_state+0x1703/0x1e50 [ 597.254058][T24371] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 597.254098][T24371] ? apparmor_capable+0x126/0x170 [ 597.254199][T24371] ? __nla_parse+0x40/0x60 [ 597.254287][T24371] xfrm_user_rcv_msg+0x7a8/0xf30 [ 597.254316][T24371] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 597.254368][T24371] ? __mutex_trylock_common+0x15f/0x270 [ 597.254401][T24371] ? __pfx___mutex_trylock_common+0x10/0x10 [ 597.254425][T24371] ? rcu_is_watching+0x15/0xb0 [ 597.254457][T24371] ? trace_contention_end+0x3d/0x140 [ 597.254485][T24371] netlink_rcv_skb+0x226/0x4a0 [ 597.254546][T24371] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 597.254570][T24371] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 597.254609][T24371] ? netlink_deliver_tap+0x2e/0x1b0 [ 597.254632][T24371] ? netlink_deliver_tap+0x2e/0x1b0 [ 597.254657][T24371] xfrm_netlink_rcv+0x79/0x90 [ 597.254679][T24371] netlink_unicast+0x7bb/0x940 [ 597.254711][T24371] netlink_sendmsg+0x813/0xb40 [ 597.254743][T24371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.254770][T24371] ? aa_sock_msg_perm+0xf1/0x1b0 [ 597.254823][T24371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.254846][T24371] sock_sendmsg_nosec+0x13a/0x180 [ 597.254925][T24371] ____sys_sendmsg+0x54e/0x850 [ 597.254955][T24371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.254987][T24371] ? import_iovec+0x73/0xa0 [ 597.255045][T24371] ___sys_sendmsg+0x2a5/0x360 [ 597.255067][T24371] ? __lock_acquire+0x683/0x2cf0 [ 597.255097][T24371] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.255121][T24371] ? futex_wake+0x51b/0x5f0 [ 597.255189][T24371] ? __fget_files+0x2a/0x420 [ 597.255242][T24371] ? __fget_files+0x3a2/0x420 [ 597.255276][T24371] __x64_sys_sendmsg+0x1b1/0x290 [ 597.255301][T24371] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.255341][T24371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.255420][T24371] do_syscall_64+0x174/0x580 [ 597.255501][T24371] ? trace_irq_disable+0x3b/0x140 [ 597.255533][T24371] ? clear_bhb_loop+0x40/0x90 [ 597.255557][T24371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.255578][T24371] RIP: 0033:0x7f28c399de99 [ 597.255625][T24371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.255643][T24371] RSP: 002b:00007f28c48e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.255693][T24371] RAX: ffffffffffffffda RBX: 00007f28c3c25fa0 RCX: 00007f28c399de99 [ 597.255708][T24371] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 597.255720][T24371] RBP: 00007f28c3a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 597.255732][T24371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.255744][T24371] R13: 00007f28c3c26038 R14: 00007f28c3c25fa0 R15: 00007ffd2a4bd618 [ 597.255776][T24371] [ 597.257107][T24364] tipc: Disabling bearer [ 597.339923][ T48] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)