last executing test programs: 2.039529668s ago: executing program 0 (id=12434): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001e80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000200000000000c0003"], 0x38}}, 0x0) 1.909904377s ago: executing program 0 (id=12436): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x9}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) 1.892670092s ago: executing program 0 (id=12438): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfd, 0x2ffdfffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.474262029s ago: executing program 1 (id=12447): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x1a}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x5, 0x9, 0x20000007, 0x1, 0xfffffffe, 0xfffffffd}, [@TCA_NETEM_LOSS={0x4}]}}}]}, 0x50}}, 0x4000010) 1.369846011s ago: executing program 1 (id=12448): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x3, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0xc, 0x4, 0x0, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r8) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 1.36964939s ago: executing program 3 (id=12449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x11}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x58}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000004) 1.354297204s ago: executing program 3 (id=12450): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000003c0)=r3, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) 1.295248612s ago: executing program 0 (id=12451): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000500)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x4}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) listen(0xffffffffffffffff, 0xfffffffe) socket(0x28, 0x5, 0x0) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) 1.214241216s ago: executing program 3 (id=12452): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001100)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.064923169s ago: executing program 3 (id=12457): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4e8, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x168, 0x190, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x548) r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x7, @local, 0x9}, 0x1c) sendmmsg$inet(r0, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)="33ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dea658eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158564e0ddb4673055de196535d706d142e1dc7d404583923cb1b286cfc5418884ac7e605d93652dc48ff690894405a0b6abc3c4d0f6a16c0a95c0508bd7eeffcd1da0b17f7701448658864b429e9472edfeffbf34d6e7c78f4aa73c0", 0x2de}, {&(0x7f0000000f40)="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", 0x16f}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) 1.016543266s ago: executing program 1 (id=12459): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x654a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 966.062774ms ago: executing program 3 (id=12461): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000300)=r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 756.546414ms ago: executing program 3 (id=12467): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f0000000180)=""/16, &(0x7f00000001c0)=0x10) 602.075205ms ago: executing program 1 (id=12470): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001540)={0x18, r1, 0xd8e0afc25e019b91, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) 529.899868ms ago: executing program 1 (id=12472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240440d5}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 470.014435ms ago: executing program 4 (id=12474): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="4800000010004b042cbd7000000000007a000000", @ANYRES32=0x0, @ANYBLOB="c040000000000000280012800b000100627269646765000018000280080031"], 0x48}}, 0x8040) 429.837131ms ago: executing program 4 (id=12476): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x28, r0, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x8014) 383.716107ms ago: executing program 4 (id=12477): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000c40)={0x0, 0x0, 0x0}, 0x10003) 314.2566ms ago: executing program 1 (id=12478): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'pim6reg\x00', 0x400}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r4, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="2703", 0x2}], 0x1}, 0x40005) 314.078005ms ago: executing program 2 (id=12479): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff03396844268cb89914f088a8", 0x0, 0x23, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 313.172177ms ago: executing program 4 (id=12480): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(twofish-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4$alg(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000004980)=[{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000e00)="b8", 0x1}], 0x1, 0x0, 0x0, 0xc0d4}], 0x1, 0x1) 277.719668ms ago: executing program 2 (id=12481): r0 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4a, &(0x7f0000000240)=0x9, 0x4) 219.560484ms ago: executing program 2 (id=12482): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r2, r4, 0x25, 0x4, @void}, 0x10) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) 113.803271ms ago: executing program 4 (id=12483): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="170928bd70000000e5a302be"], 0x3c}, 0x1, 0x620b}, 0x0) 106.523803ms ago: executing program 2 (id=12484): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfff7fffe, 0x100, {{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, 0x192, 0x6, 0x0, 0x4, 0x2, 0xfffffffffffffff8, 0xe2e237c}, {0x9, 0x0, 0x20000001f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000e0000002000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) 75.245032ms ago: executing program 2 (id=12485): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 26.29031ms ago: executing program 0 (id=12486): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x29, 0x0, 0x0) 26.152438ms ago: executing program 4 (id=12487): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x56, 0x4) 25.980379ms ago: executing program 2 (id=12488): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x48, r2, 0x1, 0x0, 0xfffffffc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @device_b}, @delba={0x3, 0x2, {{0x0, 0x0, 0x4}, 0x28, {0xbd, 0x6}}}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 0s ago: executing program 0 (id=12489): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000001480)={0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, [0x4, 0xfff, 0x2, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x800, 0xc05, 0x9, 0x8000, 0x8, 0x0, 0x5, 0x8]}, &(0x7f0000001580)=0x100) kernel console output (not intermixed with test programs): g state [ 710.149930][T11723] bridge3: port 1(veth3) entered disabled state [ 710.157722][T11723] veth3: entered allmulticast mode [ 710.164313][T11723] veth3: entered promiscuous mode [ 710.172024][T11717] syzkaller0: entered promiscuous mode [ 710.178527][T11717] syzkaller0: entered allmulticast mode [ 710.190911][T11723] bond2: (slave veth0_to_bond): Releasing active interface [ 710.213370][T11723] bridge3: port 2(veth0_to_bond) entered blocking state [ 710.222388][T11723] bridge3: port 2(veth0_to_bond) entered disabled state [ 710.231664][T11723] veth0_to_bond: entered allmulticast mode [ 710.239091][T11723] veth0_to_bond: entered promiscuous mode [ 710.973693][T11749] __nla_validate_parse: 34 callbacks suppressed [ 710.973711][T11749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10481'. [ 711.036054][T11756] pim6reg: entered allmulticast mode [ 711.061757][T11756] pim6reg: left allmulticast mode [ 711.313569][T11785] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 711.341964][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10496'. [ 711.366765][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10496'. [ 711.461823][T11795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10498'. [ 711.471263][T11795] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10498'. [ 711.482230][T11792] xt_l2tp: wrong L2TP version: 0 [ 711.501068][T11796] netlink: 'syz.1.10500': attribute type 10 has an invalid length. [ 711.511770][T11796] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10500'. [ 711.536085][T11796] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 711.550733][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10502'. [ 711.567471][T11799] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10502'. [ 711.668900][T11814] xt_TPROXY: Can be used only with -p tcp or -p udp [ 711.700173][T11817] netlink: 'syz.2.10505': attribute type 5 has an invalid length. [ 711.722060][T11818] xt_TPROXY: Can be used only with -p tcp or -p udp [ 711.733098][T11822] netlink: zone id is out of range [ 711.752618][T11822] netlink: zone id is out of range [ 711.765814][T11822] netlink: zone id is out of range [ 711.777528][T11822] netlink: zone id is out of range [ 711.791787][T11822] netlink: zone id is out of range [ 711.802512][T11826] netlink: 'syz.2.10509': attribute type 17 has an invalid length. [ 711.810495][T11823] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 711.825072][T11822] netlink: zone id is out of range [ 711.832065][T11826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10509'. [ 711.843013][T11822] netlink: zone id is out of range [ 711.847605][T11826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10509'. [ 711.849147][T11822] netlink: zone id is out of range [ 711.862786][T11822] netlink: zone id is out of range [ 711.872173][T11826] erspan0: entered promiscuous mode [ 711.885354][T11826] erspan0: left promiscuous mode [ 712.020078][T11832] 8021q: VLANs not supported on ip_vti0 [ 712.130832][T11848] netlink: 'syz.0.10515': attribute type 1 has an invalid length. [ 712.393759][T11891] netlink: 'syz.2.10528': attribute type 8 has an invalid length. [ 712.771333][T11939] tipc: Started in network mode [ 712.777612][T11939] tipc: Node identity b2a15307bcf, cluster identity 4711 [ 712.784883][T11939] tipc: Enabled bearer , priority 0 [ 712.826403][T11939] syzkaller0: entered promiscuous mode [ 712.832121][T11939] syzkaller0: entered allmulticast mode [ 712.838513][T11939] tipc: Resetting bearer [ 712.856401][T11944] bond3: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 712.868203][T11944] bond3 (unregistering): Released all slaves [ 712.883568][T11936] tipc: Resetting bearer [ 712.930617][T11936] tipc: Disabling bearer [ 713.017902][T11953] validate_nla: 1 callbacks suppressed [ 713.017919][T11953] netlink: 'syz.4.10549': attribute type 49 has an invalid length. [ 713.275642][T11991] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 713.287837][T11991] gretap1: entered promiscuous mode [ 713.293165][T11991] gretap1: entered allmulticast mode [ 716.118191][T11987] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 716.127469][T11995] netlink: 'syz.1.10559': attribute type 1 has an invalid length. [ 716.146819][T11995] netlink: 'syz.1.10559': attribute type 1 has an invalid length. [ 716.303069][T12022] RDS: rds_bind could not find a transport for ::ffff:172.30.0.4, load rds_tcp or rds_rdma? [ 716.344100][T12023] netlink: 'syz.4.10563': attribute type 4 has an invalid length. [ 716.367558][T12023] __nla_validate_parse: 11 callbacks suppressed [ 716.367578][T12023] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10563'. [ 716.401846][T12012] netlink: 'syz.3.10564': attribute type 3 has an invalid length. [ 716.482669][T12035] netlink: 'syz.4.10569': attribute type 1 has an invalid length. [ 716.501311][T12035] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10569'. [ 716.525736][T12041] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.10568'. [ 716.541713][T12040] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10571'. [ 716.554197][T12041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10568'. [ 716.604918][T12040] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10571'. [ 716.605167][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10575'. [ 716.625107][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10575'. [ 716.637025][T12049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10575'. [ 716.668454][T12049] net_ratelimit: 7 callbacks suppressed [ 716.668475][T12049] openvswitch: netlink: IPv4 tun info is not correct [ 716.875820][T12069] bond5 (unregistering): Released all slaves [ 716.975374][T12083] netlink: 'syz.1.10586': attribute type 33 has an invalid length. [ 717.023738][T12083] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 717.023774][T12095] netlink: 'syz.2.10589': attribute type 39 has an invalid length. [ 717.044111][T12083] bond4 (unregistering): Released all slaves [ 717.128072][T12065] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10580'. [ 717.709876][T12145] syzkaller0: entered promiscuous mode [ 717.749650][T12145] syzkaller0: entered allmulticast mode [ 718.109666][T12177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 718.462124][T12177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 718.508578][T12197] bond8: Unable to set peer notification delay as MII monitoring is disabled [ 718.539754][T12197] bond8 (unregistering): Released all slaves [ 718.581092][T12204] bridge5: entered promiscuous mode [ 718.586692][T12204] bridge5: entered allmulticast mode [ 718.602841][T12204] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.672502][T12177] bond0: (slave netdevsim1): Releasing backup interface [ 718.704577][T12177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 719.036355][ T1008] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 719.082888][ T1008] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 719.120383][ T1008] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 719.271627][T12223] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.338889][T12223] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.490887][ T57] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 719.630847][T12223] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.689754][T12223] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.116886][T12265] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 720.155653][T12265] bond6 (unregistering): Released all slaves [ 720.268034][T12223] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.324078][T12223] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.381738][T12278] openvswitch: netlink: IP tunnel dst address not specified [ 720.467584][T12223] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 720.497096][T12223] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.562775][T12284] netlink: 'syz.0.10638': attribute type 12 has an invalid length. [ 720.600161][T12284] netlink: 'syz.0.10638': attribute type 12 has an invalid length. [ 720.697436][T12287] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 721.113634][ T1008] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.133886][ T1008] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.170985][ T1008] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.212553][T12321] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 721.222879][ T1008] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.265286][ T1008] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.308870][ T1008] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.381012][ T1008] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 721.405689][ T1008] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 721.626159][T12343] netlink: 'syz.2.10652': attribute type 1 has an invalid length. [ 721.659644][T12343] __nla_validate_parse: 10 callbacks suppressed [ 721.659661][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10652'. [ 721.715831][T12345] netlink: 'syz.3.10655': attribute type 49 has an invalid length. [ 721.803862][T12341] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 721.965517][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10659'. [ 721.983181][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10660'. [ 722.011680][T12354] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 722.218545][T12372] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.10664'. [ 722.372887][T12374] netlink: 'syz.1.10665': attribute type 21 has an invalid length. [ 722.416772][T12379] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10667'. [ 722.432760][T12374] netlink: 132 bytes leftover after parsing attributes in process `syz.1.10665'. [ 722.477576][T12379] openvswitch: netlink: Flow actions attr not present in new flow. [ 722.528793][T12377] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10666'. [ 722.652099][T12388] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 722.681213][T12392] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 722.848285][T12396] syzkaller0: entered promiscuous mode [ 722.865598][T12396] syzkaller0: entered allmulticast mode [ 722.924356][T12399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10673'. [ 722.967509][T12399] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10673'. [ 723.073452][T12409] netlink: 'syz.3.10673': attribute type 20 has an invalid length. [ 723.091527][T12408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10675'. [ 723.130676][T12409] IPv6: NLM_F_CREATE should be specified when creating new route [ 723.299699][T12417] netlink: 'syz.0.10676': attribute type 61 has an invalid length. [ 723.514779][T12430] netlink: 'syz.1.10680': attribute type 3 has an invalid length. [ 723.664107][T12441] tipc: MTU too low for tipc bearer [ 723.946068][T12457] openvswitch: netlink: Flow actions attr not present in new flow. [ 725.135096][T12520] vlan0: entered promiscuous mode [ 725.551711][T12542] syzkaller0: entered promiscuous mode [ 725.573052][T12542] syzkaller0: entered allmulticast mode [ 725.724062][T12553] netlink: 'syz.0.10712': attribute type 21 has an invalid length. [ 725.740791][T12553] netlink: 'syz.0.10712': attribute type 4 has an invalid length. [ 725.749143][T12553] netlink: 'syz.0.10712': attribute type 5 has an invalid length. [ 725.766310][T12553] netlink: 'syz.0.10712': attribute type 21 has an invalid length. [ 725.775446][T12553] netlink: 'syz.0.10712': attribute type 4 has an invalid length. [ 725.784005][T12553] netlink: 'syz.0.10712': attribute type 5 has an invalid length. [ 726.701169][T12577] syzkaller0: entered promiscuous mode [ 726.707088][T12577] syzkaller0: entered allmulticast mode [ 728.572119][T12544] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 728.803304][T12610] IPv6: sit2: Disabled Multicast RS [ 728.832836][T12608] __nla_validate_parse: 22 callbacks suppressed [ 728.832852][T12608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10727'. [ 728.889187][T12608] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10727'. [ 728.913243][T12612] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.10729'. [ 729.340632][T12632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10737'. [ 729.411931][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10738'. [ 729.465736][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10738'. [ 729.508642][T12649] syzkaller1: entered promiscuous mode [ 729.519480][T12637] netlink: 'syz.2.10738': attribute type 12 has an invalid length. [ 729.532455][T12649] syzkaller1: entered allmulticast mode [ 729.546172][T12637] netlink: 'syz.2.10738': attribute type 11 has an invalid length. [ 729.694362][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10740'. [ 729.734233][T12654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10740'. [ 729.782083][T12655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10740'. [ 730.095175][T12679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10747'. [ 730.962372][T12682] netlink: 'syz.1.10749': attribute type 3 has an invalid length. [ 731.123300][T12691] bond6: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 731.204517][T12691] bond6 (unregistering): Released all slaves [ 732.255252][T12713] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 732.271220][T12713] syzkaller1: Refused to change device type [ 732.473796][T12729] netlink: 'syz.3.10762': attribute type 1 has an invalid length. [ 733.311082][T12759] netlink: zone id is out of range [ 733.317257][T12759] netlink: del zone limit has 4 unknown bytes [ 733.336224][T12759] netlink: 'syz.1.10773': attribute type 16 has an invalid length. [ 733.346664][T12758] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 733.355667][T12759] netlink: 'syz.1.10773': attribute type 3 has an invalid length. [ 733.583551][T12766] syzkaller0: entered promiscuous mode [ 733.590318][T12766] syzkaller0: entered allmulticast mode [ 733.606713][T12765] tc action pedit offset -498 out of bounds [ 733.696367][T12770] netlink: 'syz.1.10777': attribute type 1 has an invalid length. [ 733.719482][T12770] 8021q: adding VLAN 0 to HW filter on device bond4 [ 733.734501][T12770] vlan3: entered promiscuous mode [ 733.742713][T12770] bond4: entered promiscuous mode [ 733.750148][T12770] vlan3: entered allmulticast mode [ 733.756180][T12770] bond4: entered allmulticast mode [ 733.778215][T12770] bond4: (slave bridge4): making interface the new active one [ 733.785733][T12770] bridge4: entered promiscuous mode [ 733.791626][T12770] bridge4: entered allmulticast mode [ 733.799050][T12770] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 733.837185][ T9782] Bluetooth: hci2: command 0x0406 tx timeout [ 734.273524][T12784] xt_TPROXY: Can be used only with -p tcp or -p udp [ 734.298312][T12783] __nla_validate_parse: 6 callbacks suppressed [ 734.298329][T12783] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10781'. [ 734.858468][T12811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10789'. [ 734.878791][T12811] netlink: 'syz.1.10789': attribute type 5 has an invalid length. [ 734.894524][T12811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10789'. [ 735.229604][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10791'. [ 735.273318][T12817] bridge_slave_1 (unregistering): left allmulticast mode [ 735.282080][T12817] bridge_slave_1 (unregistering): left promiscuous mode [ 735.293353][T12817] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.686616][T12825] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10793'. [ 735.765273][T12827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10794'. [ 735.781356][T12827] gtp0: entered promiscuous mode [ 735.787235][T12827] gtp0: entered allmulticast mode [ 735.856847][T10579] IPVS: starting estimator thread 0... [ 735.863075][T12830] IPVS: set_ctl: invalid protocol: 0 10.1.1.2:20001 [ 735.944530][T12830] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10794'. [ 735.980237][T12831] IPVS: using max 44 ests per chain, 105600 per kthread [ 735.993602][T12827] IPVS: lc: FWM 3 0x00000003 - no destination available [ 736.004950][T12836] netlink: 'syz.2.10795': attribute type 8 has an invalid length. [ 736.018055][T12836] sch_fq: defrate 0 ignored. [ 736.103545][T12840] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10797'. [ 736.115139][T12840] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10797'. [ 736.360667][T12850] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10798'. [ 738.160729][T12889] veth0_macvtap: left promiscuous mode [ 738.255674][T12892] netlink: 'syz.2.10809': attribute type 21 has an invalid length. [ 738.281673][T12892] netlink: 'syz.2.10809': attribute type 21 has an invalid length. [ 738.435074][T12900] pim6reg: entered allmulticast mode [ 738.443575][T12900] pim6reg: left allmulticast mode [ 740.005980][T12913] macvtap0: entered allmulticast mode [ 740.011863][T12913] veth0_macvtap: entered allmulticast mode [ 740.042402][T12870] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 740.160885][T12913] __nla_validate_parse: 9 callbacks suppressed [ 740.160903][T12913] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10819'. [ 740.484408][T12931] netlink: 'syz.0.10824': attribute type 9 has an invalid length. [ 740.522903][T12932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10823'. [ 741.642439][T12968] netlink: 'syz.1.10833': attribute type 1 has an invalid length. [ 742.279463][T12986] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10837'. [ 742.371513][T12993] netlink: 'syz.3.10839': attribute type 7 has an invalid length. [ 742.421534][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10839'. [ 742.510191][T12993] netlink: 'syz.3.10839': attribute type 7 has an invalid length. [ 742.519128][ T7135] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 742.561553][ T7135] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 742.580920][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10839'. [ 742.627295][ T7135] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 742.675711][ T7135] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 742.734361][T13010] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10843'. [ 742.887826][T13018] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10846'. [ 742.951123][T13023] netlink: 'syz.4.10847': attribute type 1 has an invalid length. [ 743.193450][T13023] 8021q: adding VLAN 0 to HW filter on device bond3 [ 743.204102][T13042] netlink: 'syz.1.10852': attribute type 21 has an invalid length. [ 743.560002][T13065] netlink: 672 bytes leftover after parsing attributes in process `syz.1.10857'. [ 743.620552][T13067] xt_cluster: node mask cannot exceed total number of nodes [ 743.732445][T13074] mac80211_hwsim hwsim102 syzkaller0: left promiscuous mode [ 743.749735][T13074] mac80211_hwsim hwsim102 syzkaller0: left allmulticast mode [ 744.217433][T13084] veth0_to_team: entered promiscuous mode [ 744.225488][T13084] gretap0: entered promiscuous mode [ 744.235194][T13084] debugfs: 'hsr1' already exists in 'hsr' [ 744.244152][T13084] Cannot create hsr debugfs directory [ 744.906682][T13104] netlink: 108 bytes leftover after parsing attributes in process `syz.1.10870'. [ 744.979307][T13106] netlink: 32 bytes leftover after parsing attributes in process `syz.3.10871'. [ 745.086836][T13112] syz_tun: refused to change device tx_queue_len [ 745.283330][T13118] xt_l2tp: unknown flags: 10 [ 745.653006][T13135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10879'. [ 745.797794][T13149] Cannot find del_set index 2 as target [ 746.013762][T13154] syzkaller1: entered promiscuous mode [ 746.048451][T13154] syzkaller1: entered allmulticast mode [ 746.138635][T13154] xt_cgroup: path and classid specified [ 746.380387][T13188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10895'. [ 746.414089][T13182] mac80211_hwsim hwsim102 syzkaller0: entered promiscuous mode [ 746.444359][T13182] mac80211_hwsim hwsim102 syzkaller0: entered allmulticast mode [ 746.724492][T13204] netlink: 'syz.4.10900': attribute type 1 has an invalid length. [ 746.737871][T13202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10899'. [ 747.161750][T13204] bond4: entered promiscuous mode [ 747.169274][T13204] 8021q: adding VLAN 0 to HW filter on device bond4 [ 747.207003][T13217] 8021q: adding VLAN 0 to HW filter on device bond4 [ 747.214425][T13217] bond4: (slave vti0): The slave device specified does not support setting the MAC address [ 747.225558][T13217] bond4: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 747.243492][T13217] bond4: (slave vti0): making interface the new active one [ 747.251793][T13217] vti0: entered promiscuous mode [ 747.263202][T13217] vti0: left promiscuous mode [ 747.277282][ T9782] Bluetooth: hci3: command tx timeout [ 747.478074][T13236] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10907'. [ 748.019575][T13249] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 748.638781][T13267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10917'. [ 749.024045][T13283] syzkaller0: entered promiscuous mode [ 749.050000][T13283] syzkaller0: entered allmulticast mode [ 749.085907][T13285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10923'. [ 749.198244][ T9782] Bluetooth: hci4: command 0x0406 tx timeout [ 749.332379][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10925'. [ 749.402824][T13249] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 750.159931][T13293] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 750.194647][T13296] sctp: [Deprecated]: syz.2.10927 (pid 13296) Use of int in max_burst socket option deprecated. [ 750.194647][T13296] Use struct sctp_assoc_value instead [ 750.215999][T13297] netlink: 'syz.0.10928': attribute type 1 has an invalid length. [ 750.225134][T13297] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10928'. [ 750.244736][T13297] netlink: 'syz.0.10928': attribute type 1 has an invalid length. [ 750.269954][T13297] netlink: 'syz.0.10928': attribute type 8 has an invalid length. [ 750.298517][T13297] netlink: 606 bytes leftover after parsing attributes in process `syz.0.10928'. [ 750.404878][T13305] netlink: 156 bytes leftover after parsing attributes in process `syz.2.10931'. [ 750.478115][T13305] tipc: Resetting bearer [ 750.639773][T13305] tipc: Resetting bearer [ 750.704171][T13310] syzkaller0: entered promiscuous mode [ 750.717675][T13310] syzkaller0: entered allmulticast mode [ 751.084162][T13313] tipc: Enabling of bearer rejected, failed to enable media [ 751.164280][T13316] netlink: 'syz.2.10934': attribute type 1 has an invalid length. [ 751.263978][T13322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10935'. [ 751.274008][T13323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10935'. [ 751.932261][T13249] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 752.139382][T13327] syzkaller1: entered promiscuous mode [ 752.164375][T13327] syzkaller1: entered allmulticast mode [ 752.237669][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 752.445350][T13353] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.10944'. [ 752.458064][T13353] netlink: 3648 bytes leftover after parsing attributes in process `syz.3.10944'. [ 752.490717][T13343] bond5: invalid ARP target 0.0.0.0 specified for addition [ 752.500375][T13343] bond5: option arp_ip_target: invalid value (0) [ 752.526187][T13343] bond5 (unregistering): Released all slaves [ 752.659259][T13362] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10946'. [ 752.754417][T13371] xt_TCPMSS: Only works on TCP SYN packets [ 752.959012][T13381] bond0: Error: CAN devices cannot be enslaved [ 753.015547][T13383] tipc: Enabled bearer , priority 0 [ 753.024034][T13383] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 753.070975][T13382] tipc: Disabling bearer [ 753.139598][T13249] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 753.958510][T13392] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.559298][T13430] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10962'. [ 754.705329][T13437] netlink: 'syz.0.10963': attribute type 9 has an invalid length. [ 754.776427][T13444] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10967'. [ 754.913780][T13451] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 754.921543][T13451] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 755.031462][ T7130] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 2816 - 0 [ 755.113150][ T7130] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 2816 - 0 [ 755.132595][ T7130] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 2816 - 0 [ 755.151286][ T7130] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 2816 - 0 [ 755.746138][T13465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 755.753449][T13465] IPv6: NLM_F_CREATE should be set when creating new route [ 755.784129][ T834] IPVS: starting estimator thread 0... [ 755.876044][T13473] macvtap0: entered promiscuous mode [ 755.882241][T13473] macvtap0: entered allmulticast mode [ 755.889829][T13473] veth1_vlan: entered allmulticast mode [ 755.903539][T13474] macvtap1: entered promiscuous mode [ 755.909639][T13474] macvtap1: entered allmulticast mode [ 755.956797][T13470] IPVS: using max 45 ests per chain, 108000 per kthread [ 756.062559][T13477] syzkaller0: entered promiscuous mode [ 756.075671][T13477] syzkaller0: entered allmulticast mode [ 756.240430][T13481] netlink: 'syz.1.10981': attribute type 29 has an invalid length. [ 756.255530][T13481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10981'. [ 756.296264][T13486] xt_l2tp: invalid flags combination: 8 [ 756.621060][T13491] netlink: 'syz.2.10983': attribute type 39 has an invalid length. [ 756.635819][T13491] hsr_slave_0: left promiscuous mode [ 756.653900][T13491] hsr_slave_1: left promiscuous mode [ 757.763283][T13506] netlink: 'syz.3.10986': attribute type 3 has an invalid length. [ 757.988590][T13523] veth0: entered promiscuous mode [ 757.994139][T13523] batadv_slave_1: entered promiscuous mode [ 758.008238][T13522] batadv_slave_1: left promiscuous mode [ 758.014832][T13522] veth0: left promiscuous mode [ 758.504995][ T29] audit: type=1804 audit(1782025314.073:30): pid=13544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.10997" name="/newroot/410/cgroup.controllers" dev="tmpfs" ino=2110 res=1 errno=0 [ 758.614552][ T29] audit: type=1800 audit(1782025314.073:31): pid=13544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10997" name="cgroup.controllers" dev="tmpfs" ino=2110 res=0 errno=0 [ 758.711059][ T29] audit: type=1800 audit(1782025314.133:32): pid=13544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10997" name="cgroup.controllers" dev="tmpfs" ino=2110 res=0 errno=0 [ 758.771615][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11000'. [ 758.966111][T13563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10996'. [ 759.514503][T13580] netlink: 'syz.2.11006': attribute type 8 has an invalid length. [ 759.570679][T13581] netlink: 'syz.2.11006': attribute type 8 has an invalid length. [ 760.037942][T13604] openvswitch: netlink: IPv4 tun info is not correct [ 760.062772][T13602] gtp2: entered promiscuous mode [ 760.084329][T13602] gtp2: entered allmulticast mode [ 760.121499][T13607] veth0: entered promiscuous mode [ 760.167072][T13607] veth0: left promiscuous mode [ 760.174262][T13610] netlink: 'syz.3.11015': attribute type 10 has an invalid length. [ 760.189541][T13610] macsec0: left promiscuous mode [ 760.211546][T13610] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 761.155409][T13656] IPVS: set_ctl: invalid protocol: 84 10.1.1.1:20004 [ 761.228517][T13662] netlink: 'syz.1.11027': attribute type 4 has an invalid length. [ 761.400816][T13662] netlink: 'syz.1.11027': attribute type 4 has an invalid length. [ 761.453244][T13656] IPVS: set_ctl: invalid protocol: 84 10.1.1.1:20004 [ 761.859564][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11036'. [ 762.052811][T13701] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.11039'. [ 762.117303][T13703] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.11039'. [ 762.263815][T13718] openvswitch: netlink: Key type 30 is not supported [ 762.281327][T13714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11042'. [ 762.306365][T13714] netlink: 176 bytes leftover after parsing attributes in process `syz.2.11042'. [ 762.316942][T13714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11042'. [ 762.332285][T13714] xt_hashlimit: size too large, truncated to 1048576 [ 762.462966][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11042'. [ 762.551478][T13718] bond5: Unable to set up delay as MII monitoring is disabled [ 762.703753][T13718] bond5 (unregistering): Released all slaves [ 762.795330][T13744] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 762.814425][T13746] lo: entered allmulticast mode [ 762.827236][T13746] lo: left allmulticast mode [ 763.460685][T13753] openvswitch: netlink: Flow key attr not present in new flow. [ 763.986573][T13760] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11056'. [ 764.295545][T13777] netlink: 'syz.1.11059': attribute type 4 has an invalid length. [ 764.303688][T13777] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11059'. [ 764.316009][T13777] .`: renamed from bond0 [ 764.463643][T13782] netlink: 'syz.2.11061': attribute type 24 has an invalid length. [ 765.563663][T13734] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 765.722568][T13786] netlink: 'syz.1.11063': attribute type 30 has an invalid length. [ 765.885223][T13795] tipc: Enabled bearer , priority 0 [ 765.949379][T13803] syzkaller0: entered promiscuous mode [ 765.955579][T13793] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11065'. [ 765.966474][T13803] syzkaller0: entered allmulticast mode [ 766.063350][T13795] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 766.110288][T13807] netlink: 'syz.2.11069': attribute type 16 has an invalid length. [ 766.120019][T13807] netlink: 'syz.2.11069': attribute type 17 has an invalid length. [ 766.199074][T13807] sit0: left promiscuous mode [ 766.240433][T13807] ip6gretap0: left promiscuous mode [ 766.281948][T13807] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 766.305747][T13803] tipc: Resetting bearer [ 766.350075][T13794] tipc: Resetting bearer [ 766.383958][T13810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11070'. [ 766.422998][T13794] tipc: Disabling bearer [ 766.453621][T13810] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.11070'. [ 766.624306][T13812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11071'. [ 767.028602][T13832] xt_CT: You must specify a L4 protocol and not use inversions on it [ 767.601875][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 767.824680][T13850] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11084'. [ 767.864791][T13851] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11084'. [ 769.098817][T13898] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.11096'. [ 769.245285][T13905] netlink: 71 bytes leftover after parsing attributes in process `syz.2.11097'. [ 769.805272][T13972] veth1_to_batadv: mtu less than device minimum [ 770.559285][T13991] only policy match revision 0 supported [ 770.559297][T13991] unable to load match [ 770.618571][T13993] netlink: 112 bytes leftover after parsing attributes in process `syz.3.11122'. [ 771.996603][ T9782] Bluetooth: hci1: command 0x0405 tx timeout [ 772.456303][T13936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 772.582429][T14030] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11131'. [ 772.609111][T14030] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.616352][T14030] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.661329][T14044] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11131'. [ 772.661864][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11134'. [ 772.689250][T14036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11134'. [ 772.701800][T14036] netlink: 'syz.3.11134': attribute type 3 has an invalid length. [ 772.748641][T14030] tipc: Enabled bearer , priority 10 [ 772.766304][T14057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11139'. [ 772.865693][T14065] netlink: 'syz.4.11141': attribute type 1 has an invalid length. [ 772.865792][T14062] tipc: Started in network mode [ 772.882970][T14062] tipc: Node identity 9e834d01dd39, cluster identity 4711 [ 772.891000][T14062] tipc: Enabled bearer , priority 0 [ 772.939961][T14065] 8021q: adding VLAN 0 to HW filter on device bond5 [ 772.951244][T14066] gre0: entered promiscuous mode [ 772.959532][T14066] gre0: entered allmulticast mode [ 772.966130][T14062] syzkaller0: entered promiscuous mode [ 772.973209][T14062] syzkaller0: entered allmulticast mode [ 772.982403][T14072] veth0_to_bond: left allmulticast mode [ 772.993834][T14072] veth0_to_bond: left promiscuous mode [ 773.006296][T14072] bridge3: port 2(veth0_to_bond) entered disabled state [ 773.025245][T14072] bond5: (slave veth0_to_bond): making interface the new active one [ 773.040778][T14072] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 773.041498][T14085] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11143'. [ 773.060176][T14075] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 773.074141][T14065] macvlan5: entered promiscuous mode [ 773.081494][T14065] macvlan5: entered allmulticast mode [ 773.092150][T14065] bond5: entered promiscuous mode [ 773.097634][T14065] veth0_to_bond: entered promiscuous mode [ 773.104442][T14065] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 773.113243][T14065] bond5: (slave macvlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 773.131589][T14065] bond5: left promiscuous mode [ 773.134535][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11146'. [ 773.137127][T14065] veth0_to_bond: left promiscuous mode [ 773.170399][T14091] tipc: Resetting bearer [ 773.225824][T14061] tipc: Resetting bearer [ 773.254018][T14061] tipc: Disabling bearer [ 773.276208][T14101] netlink: 'syz.4.11150': attribute type 1 has an invalid length. [ 773.305116][T14101] 8021q: adding VLAN 0 to HW filter on device bond6 [ 773.343047][T14104] bond6: option resend_igmp: invalid value (32767) [ 773.352309][T14104] bond6: option resend_igmp: allowed values 0 - 255 [ 773.364038][T14104] bond6 (unregistering): Released all slaves [ 773.400548][T14116] bond6: (slave geneve2): making interface the new active one [ 773.410829][T14116] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 773.498431][T14123] netlink: 'syz.3.11156': attribute type 1 has an invalid length. [ 773.503819][T14125] x_tables: duplicate underflow at hook 4 [ 773.511995][T14123] netlink: 'syz.3.11156': attribute type 1 has an invalid length. [ 773.847729][T14161] xt_hashlimit: size too large, truncated to 1048576 [ 773.884822][T10073] tipc: Node number set to 2802154903 [ 774.014665][T14168] sctp: [Deprecated]: syz.3.11167 (pid 14168) Use of int in max_burst socket option deprecated. [ 774.014665][T14168] Use struct sctp_assoc_value instead [ 774.164577][T14191] __nla_validate_parse: 2 callbacks suppressed [ 774.164595][T14191] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11174'. [ 774.362276][T14209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11179'. [ 774.529377][T14220] xt_TPROXY: Can be used only with -p tcp or -p udp [ 774.543614][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11182'. [ 774.560299][T14220] IPVS: length: 102 != 8 [ 774.573693][T14223] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11182'. [ 774.683292][T14229] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11184'. [ 774.769933][T14237] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11187'. [ 774.831033][T14237] bond7: option xmit_hash_policy: invalid value (64) [ 774.871285][T14237] bond7 (unregistering): Released all slaves [ 775.129921][T14274] netlink: 'syz.4.11195': attribute type 11 has an invalid length. [ 775.164833][T14274] netlink: 224 bytes leftover after parsing attributes in process `syz.4.11195'. [ 775.222266][T14294] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11199'. [ 775.611320][T14327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11210'. [ 775.699788][ T5625] Bluetooth: hci1: link tx timeout [ 775.705371][ T5625] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 775.713505][ T5625] Bluetooth: hci1: link tx timeout [ 775.721921][ T5625] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 775.731724][T14339] bridge_slave_0: left allmulticast mode [ 775.737662][T14339] bridge_slave_0: left promiscuous mode [ 775.743516][T14339] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.819802][T14347] netlink: 'syz.4.11216': attribute type 21 has an invalid length. [ 775.827987][T14347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11216'. [ 775.843140][T14347] netlink: 'syz.4.11216': attribute type 21 has an invalid length. [ 775.846949][ T1008] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.874314][ T1008] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.886207][T14351] "syz.1.11218" (14351) uses obsolete ecb(arc4) skcipher [ 775.903518][ T1008] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 775.912523][ T1008] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 776.126730][T14378] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 776.210481][T14386] team0: Cannot enslave team device to itself [ 776.401394][T14406] netlink: 'syz.1.11234': attribute type 1 has an invalid length. [ 776.413339][T14405] netlink: 'syz.1.11234': attribute type 1 has an invalid length. [ 776.533859][T14409] openvswitch: netlink: IP tunnel dst address not specified [ 776.639656][T14432] syzkaller0: entered promiscuous mode [ 776.645184][T14432] syzkaller0: entered allmulticast mode [ 776.656283][T14432] TC_ACT_REPEAT abuse ? [ 776.765199][T14447] netlink: 'syz.2.11245': attribute type 25 has an invalid length. [ 776.844240][T14456] syzkaller0: entered promiscuous mode [ 776.868061][T14456] syzkaller0: entered allmulticast mode [ 776.897190][T14456] TC_ACT_REPEAT abuse ? [ 777.558414][T14532] macvtap0: entered allmulticast mode [ 777.612334][T14540] macvtap1: entered allmulticast mode [ 777.623939][T14540] macvtap2: entered allmulticast mode [ 777.655841][T14548] openvswitch: netlink: IPv4 tunnel dst address is zero [ 777.663789][T14532] bond0: (slave bridge5): making interface the new active one [ 777.672885][T14532] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 777.706723][T14540] macvtap3: entered allmulticast mode [ 777.729893][T14540] macvtap4: entered allmulticast mode [ 777.731525][T14552] validate_nla: 2 callbacks suppressed [ 777.731541][T14552] netlink: 'syz.3.11276': attribute type 2 has an invalid length. [ 777.754244][T14552] netlink: 'syz.3.11276': attribute type 2 has an invalid length. [ 777.754964][T14540] macvtap5: entered allmulticast mode [ 777.767212][ T5625] Bluetooth: hci1: command 0x0405 tx timeout [ 777.794904][T14540] macvtap6: entered allmulticast mode [ 777.818619][T14540] macvtap7: entered allmulticast mode [ 777.858344][T14540] macvtap8: entered allmulticast mode [ 777.883630][T14540] macvtap9: entered allmulticast mode [ 777.904159][T14540] macvtap10: entered allmulticast mode [ 777.934274][T14540] macvtap11: entered allmulticast mode [ 777.946313][T14540] macvtap12: entered allmulticast mode [ 777.957357][T14540] macvtap13: entered allmulticast mode [ 777.972584][T14540] macvtap14: entered allmulticast mode [ 777.987190][T14540] macvtap15: entered allmulticast mode [ 778.027701][T14540] macvtap16: entered allmulticast mode [ 778.053069][T14540] macvtap17: entered allmulticast mode [ 778.095362][T14540] macvtap18: entered allmulticast mode [ 778.134094][T14540] macvtap19: entered allmulticast mode [ 778.155687][T14576] netlink: 'syz.2.11285': attribute type 39 has an invalid length. [ 778.161353][T14540] macvtap20: entered allmulticast mode [ 778.180696][T14577] netlink: 'syz.0.11286': attribute type 21 has an invalid length. [ 778.188768][T14577] IPv6: NLM_F_CREATE should be specified when creating new route [ 778.202959][T14540] macvtap21: entered allmulticast mode [ 778.213895][T14540] macvtap22: entered allmulticast mode [ 778.225408][T14540] macvtap23: entered allmulticast mode [ 778.247196][T14540] macvtap24: entered allmulticast mode [ 778.273074][T14540] macvtap25: entered allmulticast mode [ 778.298705][T14540] macvtap26: entered allmulticast mode [ 778.333035][T14540] macvtap27: entered allmulticast mode [ 778.455065][T14601] netlink: 'syz.0.11291': attribute type 11 has an invalid length. [ 778.589324][T14614] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 778.611567][T14614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 778.701228][T14624] netlink: 'syz.1.11300': attribute type 1 has an invalid length. [ 778.709573][T14624] netlink: 'syz.1.11300': attribute type 1 has an invalid length. [ 778.991138][T14632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 779.014777][T14632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 779.052718][T14632] vlan0: left promiscuous mode [ 779.083127][T14632] gre1: left promiscuous mode [ 779.088475][T14632] gre1: left allmulticast mode [ 779.147913][T14632] bond4: left promiscuous mode [ 779.152954][T14632] bond4: left allmulticast mode [ 779.163864][T14632] sit1: left promiscuous mode [ 779.169928][T14632] sit1: left allmulticast mode [ 779.180242][T14632] bond6: left promiscuous mode [ 779.186933][T14632] bond6: left allmulticast mode [ 779.203729][T14632] veth1_vlan: left allmulticast mode [ 779.210036][T14632] veth1_vlan: left promiscuous mode [ 779.216299][T14632] macvtap0: left promiscuous mode [ 779.226226][T14632] macvtap0: left allmulticast mode [ 779.251397][T14643] team0: Device ipvlan3 is already an upper device of the team interface [ 779.294170][ T848] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 779.339321][ T848] netdevsim netdevsim3 netdevsim0: unset [0, 1] type 1 family 0 port 8472 - 0 [ 779.369405][ T848] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.391855][ T848] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 779.414961][ T848] netdevsim netdevsim3 netdevsim1: unset [0, 1] type 1 family 0 port 8472 - 0 [ 779.435239][ T848] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.469290][T14668] __nla_validate_parse: 17 callbacks suppressed [ 779.469307][T14668] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11312'. [ 779.485609][ T848] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 779.495867][ T848] netdevsim netdevsim3 netdevsim2: unset [0, 1] type 1 family 0 port 8472 - 0 [ 779.513766][T14668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11312'. [ 779.524831][ T848] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.563118][ T848] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 779.572706][ T848] netdevsim netdevsim3 netdevsim3: unset [0, 1] type 1 family 0 port 8472 - 0 [ 779.588911][ T848] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.614081][T14678] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.11314'. [ 779.665822][T14678] xt_CT: No such helper "snmp_trap" [ 779.690157][T14672] syzkaller1: entered promiscuous mode [ 779.719565][T14672] syzkaller1: entered allmulticast mode [ 779.837066][ T5625] Bluetooth: hci1: command 0x0405 tx timeout [ 780.202403][T14723] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11323'. [ 780.503654][T14741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 780.507717][T14741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11328'. [ 780.670739][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11329'. [ 780.923158][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11334'. [ 780.938563][T14773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11334'. [ 781.053836][T14786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11337'. [ 781.077205][T14786] team1: entered promiscuous mode [ 781.082455][T14786] team1: entered allmulticast mode [ 781.363221][T14811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11344'. [ 781.399361][T14813] syzkaller1: entered promiscuous mode [ 781.411756][T14813] syzkaller1: entered allmulticast mode [ 781.549776][T14825] tipc: Failed to remove unknown binding: 66,0,0/0:56421893/56421894 [ 781.573205][T14825] tipc: Failed to remove unknown binding: 66,0,0/0:56421893/56421894 [ 781.765975][T14841] syzkaller0: entered promiscuous mode [ 781.790144][T14841] syzkaller0: entered allmulticast mode [ 781.827840][T14852] veth1_vlan: entered promiscuous mode [ 781.836875][T14852] macvlan0: entered promiscuous mode [ 782.728679][T14948] IPv6: sit4: Disabled Multicast RS [ 782.744466][T14948] sit4: entered allmulticast mode [ 782.911035][T14965] tipc: Enabled bearer , priority 0 [ 782.925952][T14965] syzkaller0: entered promiscuous mode [ 782.932956][T14965] syzkaller0: entered allmulticast mode [ 783.007256][T14974] netlink: 'syz.2.11385': attribute type 1 has an invalid length. [ 783.052996][T14977] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 783.124460][T14983] tipc: Resetting bearer [ 783.132610][T14982] syzkaller1: entered promiscuous mode [ 783.138398][T14982] syzkaller1: entered allmulticast mode [ 783.162902][T14964] tipc: Resetting bearer [ 783.179722][T14964] tipc: Disabling bearer [ 783.331663][ T9782] block nbd8: Receive control failed (result -32) [ 783.394121][T15008] x_tables: duplicate underflow at hook 2 [ 783.398195][T15003] netlink: 'syz.2.11394': attribute type 3 has an invalid length. [ 784.004990][T15033] openvswitch: netlink: IPv4 tun info is not correct [ 784.066318][T15035] 8021q: adding VLAN 0 to HW filter on device bond6 [ 784.109798][T15035] bond0: (slave bond6): Enslaving as an active interface with an up link [ 784.280941][T15046] x_tables: unsorted underflow at hook 3 [ 784.330072][T15049] v: renamed from vlan0 [ 784.409289][T15059] gtp2: entered promiscuous mode [ 784.425246][T15059] gtp2: entered allmulticast mode [ 784.830947][T15084] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 784.889336][T15089] __nla_validate_parse: 12 callbacks suppressed [ 784.889354][T15089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11423'. [ 785.152177][T15100] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 785.321707][T15114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 785.462284][T15132] syzkaller0: entered promiscuous mode [ 785.469064][T15132] syzkaller0: entered allmulticast mode [ 785.481675][T15133] netlink: 'syz.4.11436': attribute type 1 has an invalid length. [ 785.498999][T15133] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11436'. [ 785.513954][T15133] netlink: 'syz.4.11436': attribute type 1 has an invalid length. [ 785.529211][T15133] netlink: 'syz.4.11436': attribute type 8 has an invalid length. [ 785.537732][T15133] netlink: 606 bytes leftover after parsing attributes in process `syz.4.11436'. [ 785.557785][T15133] netlink: 1 bytes leftover after parsing attributes in process `syz.4.11436'. [ 785.569087][T15132] netlink: 'syz.4.11436': attribute type 1 has an invalid length. [ 785.577957][T15132] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11436'. [ 785.590714][T15132] netlink: 'syz.4.11436': attribute type 1 has an invalid length. [ 785.599013][T15132] netlink: 'syz.4.11436': attribute type 8 has an invalid length. [ 785.628943][T15132] netlink: 606 bytes leftover after parsing attributes in process `syz.4.11436'. [ 785.639147][T15132] netlink: 1 bytes leftover after parsing attributes in process `syz.4.11436'. [ 785.670981][T15154] netlink: 'syz.1.11442': attribute type 1 has an invalid length. [ 785.682345][T15154] netlink: 96 bytes leftover after parsing attributes in process `syz.1.11442'. [ 785.691998][T15154] netlink: 'syz.1.11442': attribute type 1 has an invalid length. [ 785.708089][T15154] netlink: 582 bytes leftover after parsing attributes in process `syz.1.11442'. [ 785.795486][T15160] syzkaller0: entered promiscuous mode [ 785.815921][T15160] syzkaller0: entered allmulticast mode [ 785.845071][T15169] netlink: 596 bytes leftover after parsing attributes in process `syz.0.11448'. [ 786.194873][T15201] bond0: option miimon: invalid value (18446744071829782528) [ 786.209060][T15201] bond0: option miimon: allowed values 0 - 2147483647 [ 786.243198][T15203] 8021q: adding VLAN 0 to HW filter on device bond5 [ 786.359440][T15219] syzkaller0: entered promiscuous mode [ 786.367927][T15219] syzkaller0: entered allmulticast mode [ 786.643411][T15256] syz_tun: entered allmulticast mode [ 786.705343][T15259] syzkaller0: entered promiscuous mode [ 786.712012][T15259] syzkaller0: entered allmulticast mode [ 786.817758][T15272] bond7: entered promiscuous mode [ 786.823147][T15272] 8021q: adding VLAN 0 to HW filter on device bond7 [ 786.838787][T15272] 8021q: adding VLAN 0 to HW filter on device bond7 [ 786.845975][T15272] bond7: (slave sit4): The slave device specified does not support setting the MAC address [ 786.859839][T15272] bond7: (slave sit4): Error -95 calling set_mac_address [ 787.273508][T15315] syzkaller1: entered promiscuous mode [ 787.279120][T15315] syzkaller1: entered allmulticast mode [ 787.402381][T15323] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 787.413216][T15323] bond8 (unregistering): Released all slaves [ 787.490282][T15332] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 787.620228][T15343] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 787.635241][T15343] syzkaller0: entered promiscuous mode [ 787.641095][T15343] syzkaller0: entered allmulticast mode [ 787.811304][T15372] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 787.875177][T15378] bond6: Unable to set down delay as MII monitoring is disabled [ 787.884317][T15378] bond6 (unregistering): Released all slaves [ 788.069197][T15398] bond6: Removing last ns target with arp_interval on [ 788.080311][ T850] bond6: left allmulticast mode [ 788.092852][ T850] bridge0: port 3(bond6) entered disabled state [ 788.110928][ T850] dvmrp0: left allmulticast mode [ 788.120597][T15405] validate_nla: 7 callbacks suppressed [ 788.120614][T15405] netlink: 'syz.1.11520': attribute type 2 has an invalid length. [ 788.170724][ T29] audit: type=1804 audit(1782025343.743:33): pid=15408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.11521" name="/newroot/563/cgroup.controllers" dev="tmpfs" ino=2896 res=1 errno=0 [ 788.195163][ T29] audit: type=1800 audit(1782025343.743:34): pid=15408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11521" name="cgroup.controllers" dev="tmpfs" ino=2896 res=0 errno=0 [ 788.225106][ T850] vlan0 (unregistering): left allmulticast mode [ 788.231762][ T850] erspan0 (unregistering): left allmulticast mode [ 788.240024][ T850] vlan0 (unregistering): left promiscuous mode [ 788.506672][ T850] bond9 (unregistering): (slave geneve3): Releasing active interface [ 788.517431][ T850] bond1 (unregistering): (slave geneve2): Releasing active interface [ 788.528487][ T850] team0: Port device geneve1 removed [ 788.551523][ T850] bond0 (unregistering): Released all slaves [ 788.562083][ T850] bond1 (unregistering): Released all slaves [ 788.571482][ T850] bond2 (unregistering): Released all slaves [ 788.582293][ T850] bond3 (unregistering): Released all slaves [ 788.591734][ T850] bond4 (unregistering): Released all slaves [ 788.605258][ T850] bond5 (unregistering): Released all slaves [ 788.614899][ T850] bond6 (unregistering): Released all slaves [ 788.626058][ T850] bond7 (unregistering): Released all slaves [ 788.638307][ T850] bond8 (unregistering): Released all slaves [ 788.649567][ T850] bond9 (unregistering): Released all slaves [ 788.660519][ T850] bond10 (unregistering): Released all slaves [ 788.675902][ T850] bond11 (unregistering): Released all slaves [ 788.692095][ T850] bond12 (unregistering): Released all slaves [ 788.703076][ T850] bond13 (unregistering): Released all slaves [ 788.712514][ T850] bond14 (unregistering): Released all slaves [ 788.803297][ T850] tipc: Left network mode [ 788.865724][T15424] netlink: 'syz.3.11524': attribute type 1 has an invalid length. [ 789.171629][ T850] hsr_slave_0: left promiscuous mode [ 789.178233][ T850] hsr_slave_1: left promiscuous mode [ 789.189274][ T850] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 789.196063][ T850] batman_adv: batadv0: Removing interface: ipvlan2 [ 789.310015][T15474] SET target dimension over the limit! [ 789.463994][T15469] veth0_to_bond: entered allmulticast mode [ 789.774015][T15494] netlink: 'syz.4.11545': attribute type 1 has an invalid length. [ 789.841813][T15494] bond8: entered promiscuous mode [ 789.859674][T15494] 8021q: adding VLAN 0 to HW filter on device bond8 [ 789.887501][T15501] gre0: left allmulticast mode [ 789.900766][T15494] __nla_validate_parse: 26 callbacks suppressed [ 789.900786][T15494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11545'. [ 789.932194][T15505] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11547'. [ 789.979993][T15494] bond8: entered allmulticast mode [ 789.980929][ T850] IPVS: stop unused estimator thread 0... [ 790.054110][T15494] bond8: (slave bridge4): making interface the new active one [ 790.083537][T15494] bridge4: entered promiscuous mode [ 790.103821][T15494] bridge4: entered allmulticast mode [ 790.114270][T15494] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 790.342317][T15531] bond7: option resend_igmp: invalid value (32767) [ 790.350452][T15531] bond7: option resend_igmp: allowed values 0 - 255 [ 790.361533][T15531] bond7 (unregistering): Released all slaves [ 790.365767][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11556'. [ 790.423453][T15539] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11557'. [ 790.455321][T15538] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11557'. [ 790.473269][T15538] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11557'. [ 790.500925][T15544] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11559'. [ 790.513843][T15549] netlink: 'syz.1.11561': attribute type 49 has an invalid length. [ 790.613639][T15558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11563'. [ 790.636074][T15558] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11563'. [ 790.661105][T15558] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 790.724417][T15576] netlink: 'syz.0.11568': attribute type 1 has an invalid length. [ 790.768907][T15565] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11563'. [ 790.801004][T15590] netlink: 'syz.3.11570': attribute type 5 has an invalid length. [ 791.181682][T15624] pimreg: entered allmulticast mode [ 791.244049][T15627] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 791.337050][T15637] veth0_to_bridge: entered promiscuous mode [ 791.368399][T15632] veth0_to_bridge: left promiscuous mode [ 791.426982][T15641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 791.713940][T15670] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 791.740745][T15672] bond7: entered promiscuous mode [ 791.816357][T15684] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20004 [ 791.989398][T15703] netlink: 'syz.1.11603': attribute type 1 has an invalid length. [ 792.005263][T15703] netlink: 'syz.1.11603': attribute type 2 has an invalid length. [ 792.199460][T15736] netlink: 'syz.3.11617': attribute type 58 has an invalid length. [ 792.210505][T15736] netlink: 'syz.3.11617': attribute type 1 has an invalid length. [ 792.410669][T15757] pimreg3: entered allmulticast mode [ 792.543122][T15774] team_slave_1: entered allmulticast mode [ 792.551712][T15772] team_slave_1: left allmulticast mode [ 795.383895][T15754] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 795.392845][T15752] __nla_validate_parse: 18 callbacks suppressed [ 795.392860][T15752] netlink: 88 bytes leftover after parsing attributes in process `syz.3.11624'. [ 795.408535][T15752] nbd: must specify a size in bytes for the device [ 795.415207][T15767] netlink: 88 bytes leftover after parsing attributes in process `syz.3.11624'. [ 795.425078][T15767] nbd: must specify a size in bytes for the device [ 795.495003][T15800] validate_nla: 1 callbacks suppressed [ 795.495020][T15800] netlink: 'syz.3.11636': attribute type 4 has an invalid length. [ 795.873092][T15849] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.11651'. [ 795.930995][T15853] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.338736][T15860] openvswitch: netlink: Multiple metadata blocks provided [ 796.367976][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11655'. [ 796.422611][T15864] bond8: (slave gre0): Device is not bonding slave [ 796.430100][T15864] bond8: option active_slave: invalid value (gre0) [ 796.438913][T15864] bond8 (unregistering): Released all slaves [ 796.766652][T15884] xt_TCPMSS: Only works on TCP SYN packets [ 798.829748][T15842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 799.004796][T15908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11668'. [ 799.171404][T15934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11676'. [ 799.208343][T15934] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 799.223217][T15938] syzkaller1: entered promiscuous mode [ 799.246845][T15938] syzkaller1: entered allmulticast mode [ 799.253548][T15923] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11672'. [ 799.265961][T15941] bridge_slave_0: left allmulticast mode [ 799.285713][T15941] bridge_slave_0: left promiscuous mode [ 799.297511][T15941] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.312727][T15941] bridge_slave_1: left allmulticast mode [ 799.319635][T15941] bridge_slave_1: left promiscuous mode [ 799.326189][T15941] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.336882][T15941] .`: (slave bond_slave_0): Releasing backup interface [ 799.346003][T15941] .`: (slave bond_slave_1): Releasing backup interface [ 799.357603][T15941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.367174][T15941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.375467][T15941] bond1: (slave veth3): Releasing active interface [ 799.384509][T15941] bond4: (slave bridge4): Releasing active interface [ 799.391344][T15941] bridge4: left promiscuous mode [ 799.396553][T15941] bridge4: left allmulticast mode [ 799.404466][T15941] bond0: (slave bridge5): Releasing active interface [ 799.549666][T15963] syz_tun: entered promiscuous mode [ 799.618341][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 799.629826][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 799.638337][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 799.646902][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 799.657225][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 799.754462][T15981] netlink: 'syz.4.11685': attribute type 2 has an invalid length. [ 799.771430][T15981] netlink: 'syz.4.11685': attribute type 8 has an invalid length. [ 799.780033][T15981] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11685'. [ 800.114097][T16021] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11696'. [ 800.161855][T16021] veth0: entered promiscuous mode [ 800.176125][T16021] netlink: 64 bytes leftover after parsing attributes in process `syz.0.11696'. [ 800.410553][T16046] __nla_validate_parse: 1 callbacks suppressed [ 800.410572][T16046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11701'. [ 800.493884][T15973] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.502239][T15973] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.510030][T15973] bridge_slave_0: entered allmulticast mode [ 800.516928][T15973] bridge_slave_0: entered promiscuous mode [ 800.524895][T15973] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.532120][T15973] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.539565][T15973] bridge_slave_1: entered allmulticast mode [ 800.546304][T15973] bridge_slave_1: entered promiscuous mode [ 800.557879][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11703'. [ 800.574039][T15973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.585652][T15973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.585880][T16054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11703'. [ 800.613886][T15973] team0: Port device team_slave_0 added [ 800.621893][T15973] team0: Port device team_slave_1 added [ 800.638847][T15973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.645789][T15973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.673116][T15973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.685676][T15973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.693298][T15973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.725713][T15973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.769408][T15973] hsr_slave_0: entered promiscuous mode [ 800.775999][T15973] hsr_slave_1: entered promiscuous mode [ 800.783003][T15973] debugfs: 'hsr0' already exists in 'hsr' [ 800.789777][T15973] Cannot create hsr debugfs directory [ 800.903791][T15973] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 800.950743][T15973] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 801.000786][T15973] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 801.060971][T15973] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 801.110896][T16073] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 801.119608][T16073] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.136328][T15973] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 801.143647][T16075] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11710'. [ 801.158640][T15973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 801.167262][T15973] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 801.179252][T15973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 801.187798][T15973] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 801.197838][T15973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 801.205573][T15973] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 801.214904][T16080] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11713'. [ 801.215574][T15973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 801.231322][T16081] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11713'. [ 801.254287][T16080] netlink: 'syz.3.11713': attribute type 1 has an invalid length. [ 801.273008][T15973] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.275522][T16089] SET target dimension over the limit! [ 801.280203][T15973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.287708][T16080] netlink: 228 bytes leftover after parsing attributes in process `syz.3.11713'. [ 801.310158][T16080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11713'. [ 801.323354][T16079] netlink: 'syz.3.11713': attribute type 1 has an invalid length. [ 801.337370][T16079] netlink: 228 bytes leftover after parsing attributes in process `syz.3.11713'. [ 801.349172][T16079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11713'. [ 801.359772][T15973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.374147][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.404070][T15973] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.420761][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.427941][ T3308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.445596][ T3388] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.452750][ T3388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.677512][ T9782] Bluetooth: hci0: command tx timeout [ 801.816780][T15973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 801.853943][T15973] veth0_vlan: entered promiscuous mode [ 801.871559][T15973] veth1_vlan: entered promiscuous mode [ 801.903471][T15973] veth0_macvtap: entered promiscuous mode [ 801.914995][T15973] veth1_macvtap: entered promiscuous mode [ 801.932086][T15973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 801.948748][T15973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.958418][T16137] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 801.977691][ T7130] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.987895][ T7130] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.001761][ T7130] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.013796][ T7130] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.063966][ T3388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.082501][ T3388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.101198][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 802.110668][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.143811][T16141] netlink: 'syz.2.11729': attribute type 12 has an invalid length. [ 802.191358][T16147] tipc: Enabling of bearer rejected, failed to enable media [ 802.309283][T16157] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 802.384133][T16166] syzkaller0: entered promiscuous mode [ 802.399963][T16166] syzkaller0: entered allmulticast mode [ 802.540355][T16186] netlink: 'syz.1.11739': attribute type 21 has an invalid length. [ 802.603712][T16191] 8021q: adding VLAN 0 to HW filter on device bond8 [ 802.619622][T16191] bridge0: port 3(bond8) entered blocking state [ 802.652967][T16191] bridge0: port 3(bond8) entered disabled state [ 802.660033][T16191] bond8: entered allmulticast mode [ 802.668285][T16191] bond8: entered promiscuous mode [ 803.001392][T16241] tipc: Enabled bearer , priority 0 [ 803.015412][T16242] tipc: Resetting bearer [ 803.028398][T16240] tipc: Disabling bearer [ 803.490434][T16282] lo: entered promiscuous mode [ 803.501206][T16282] netlink: 'syz.0.11765': attribute type 2 has an invalid length. [ 803.510301][T16282] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 803.605239][T16296] netlink: 'syz.2.11770': attribute type 2 has an invalid length. [ 803.613543][T16297] netlink: 'syz.2.11770': attribute type 2 has an invalid length. [ 803.757246][ T9782] Bluetooth: hci0: command tx timeout [ 803.930353][T16322] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 804.011692][T16342] openvswitch: netlink: Unknown key attributes 2 [ 804.145754][T16355] netlink: 'syz.1.11785': attribute type 21 has an invalid length. [ 804.209224][T16360] netlink: 'syz.3.11787': attribute type 4 has an invalid length. [ 804.220657][T16362] netlink: 'syz.3.11787': attribute type 4 has an invalid length. [ 804.571864][T10381] bridge0: entered promiscuous mode [ 804.655219][T16403] 8021q: adding VLAN 0 to HW filter on device bond10 [ 804.670438][T16414] bond10: (slave gretap1): making interface the new active one [ 804.678867][T16414] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 804.792082][T16430] bond0: (slave gre0): refused to change device type [ 805.021397][T16455] team2: entered promiscuous mode [ 805.034019][T16455] team2: entered allmulticast mode [ 805.066365][T16453] bond0: (slave dummy0): Releasing backup interface [ 805.136069][ T13] nci: nci_ntf_packet: unsupported ntf opcode 0xf05 [ 805.846774][ T9782] Bluetooth: hci0: command tx timeout [ 806.000603][T16472] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 806.118165][T16492] openvswitch: netlink: Actions may not be safe on all matching packets [ 806.210327][T16496] 8021q: adding VLAN 0 to HW filter on device bond9 [ 806.224709][T16496] bond9: (slave geneve3): making interface the new active one [ 806.233536][T16496] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 807.916882][ T9782] Bluetooth: hci0: command 0x0419 tx timeout [ 808.024901][T16459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 808.036132][T16484] validate_nla: 6 callbacks suppressed [ 808.036148][T16484] netlink: 'syz.3.11823': attribute type 1 has an invalid length. [ 808.134322][T16508] __nla_validate_parse: 30 callbacks suppressed [ 808.134341][T16508] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11830'. [ 808.232615][T16511] syzkaller0: entered promiscuous mode [ 808.261257][T16511] syzkaller0: entered allmulticast mode [ 808.263898][T16528] netlink: 'syz.2.11835': attribute type 1 has an invalid length. [ 808.356844][T16537] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 808.371173][T16528] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 808.421587][T16540] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 808.666735][T16564] IPVS: length: 8 != 1152 [ 808.686729][T16570] IPVS: length: 8 != 1152 [ 808.903744][T16593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11847'. [ 808.942542][T16593] team0 (unregistering): Port device team_slave_0 removed [ 808.959760][T16593] team0 (unregistering): Port device team_slave_1 removed [ 808.973030][T16594] netlink: 'syz.0.11848': attribute type 1 has an invalid length. [ 808.981204][ T3388] tipc: Subscription rejected, illegal request [ 808.999178][T16606] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11851'. [ 809.022936][T16594] 8021q: adding VLAN 0 to HW filter on device bond8 [ 809.041611][T16600] syzkaller1: entered promiscuous mode [ 809.050649][T16607] netlink: 'syz.2.11850': attribute type 1 has an invalid length. [ 809.059255][T16600] syzkaller1: entered allmulticast mode [ 809.072880][T16597] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 809.105418][T16594] macvlan3: entered promiscuous mode [ 809.110982][T16594] macvlan3: entered allmulticast mode [ 809.121186][T16594] bond8: entered promiscuous mode [ 809.128512][T16594] veth0_to_bond: entered promiscuous mode [ 809.134976][T16594] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 809.143017][T16594] bond8: left promiscuous mode [ 809.149405][T16594] veth0_to_bond: left promiscuous mode [ 809.184332][T16621] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11854'. [ 809.184773][T16607] 8021q: adding VLAN 0 to HW filter on device bond8 [ 809.208940][T16621] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11854'. [ 809.219819][T16621] netlink: 31 bytes leftover after parsing attributes in process `syz.1.11854'. [ 809.230824][T16621] netlink: 'syz.1.11854': attribute type 3 has an invalid length. [ 809.239259][T16621] netlink: 'syz.1.11854': attribute type 2 has an invalid length. [ 809.248584][T16600] bond8: (slave geneve2): making interface the new active one [ 809.249993][T16621] netlink: 31 bytes leftover after parsing attributes in process `syz.1.11854'. [ 809.269510][T16600] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 809.410327][T16636] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11860'. [ 809.443294][T16646] netlink: 'syz.4.11859': attribute type 1 has an invalid length. [ 809.505171][T16646] 8021q: adding VLAN 0 to HW filter on device bond10 [ 809.524993][T16630] bond10: (slave batadv_slave_1): Enslaving as a backup interface with an up link [ 809.588448][T16660] netlink: 'syz.1.11869': attribute type 1 has an invalid length. [ 809.602875][T16660] netlink: 476 bytes leftover after parsing attributes in process `syz.1.11869'. [ 809.613093][T16660] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.11869'. [ 809.679448][T16665] xt_CT: You must specify a L4 protocol and not use inversions on it [ 809.740962][T16671] veth1: entered promiscuous mode [ 809.781911][T16680] SET target dimension over the limit! [ 809.997178][ T9782] Bluetooth: hci0: command 0x0419 tx timeout [ 810.008682][T16704] xt_hashlimit: size too large, truncated to 1048576 [ 810.188981][T16716] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.196466][T16716] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.264788][T16716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 810.278189][T16716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 810.320708][T16735] netlink: 'syz.0.11892': attribute type 1 has an invalid length. [ 810.404599][ T850] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.418461][ T850] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.435767][ T850] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.462369][ T850] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 810.573561][T16750] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 810.680597][T16770] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 810.715337][T16775] veth1_to_bond: entered allmulticast mode [ 810.726866][T16775] veth1_to_bond: left allmulticast mode [ 811.110800][T16819] netlink: 'syz.3.11917': attribute type 1 has an invalid length. [ 811.179224][T16824] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 811.225958][T16824] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 811.302154][T16819] syzkaller1: entered promiscuous mode [ 811.313546][T16819] syzkaller1: entered allmulticast mode [ 811.474852][T16856] xt_TCPMSS: Only works on TCP SYN packets [ 811.553423][T16864] openvswitch: netlink: IP tunnel dst address not specified [ 811.598391][T16871] syzkaller1: entered promiscuous mode [ 811.607642][T16871] syzkaller1: entered allmulticast mode [ 811.643908][T16873] IPv6: sit1: Disabled Multicast RS [ 811.650229][T16873] sit1: entered allmulticast mode [ 812.073425][T16906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 812.273208][T16917] vlan2: entered allmulticast mode [ 812.278605][T16917] bond0: entered allmulticast mode [ 812.283771][T16917] bond_slave_0: entered allmulticast mode [ 812.290579][T16917] bond_slave_1: entered allmulticast mode [ 812.301736][T16917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 812.322235][T16921] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 812.558464][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 812.566867][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 812.576019][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 812.584415][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 812.594014][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 813.003305][ T1008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.034359][ T1008] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.060396][T16992] SET target dimension over the limit! [ 813.061991][T16993] x_tables: duplicate underflow at hook 1 [ 813.144377][ T1008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.179674][T17003] validate_nla: 4 callbacks suppressed [ 813.179693][T17003] netlink: 'syz.4.11968': attribute type 1 has an invalid length. [ 813.182940][ T1008] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.256962][T17003] bond11: entered promiscuous mode [ 813.268351][T17003] 8021q: adding VLAN 0 to HW filter on device bond11 [ 813.275232][T17013] __nla_validate_parse: 87 callbacks suppressed [ 813.275248][T17013] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11969'. [ 813.310419][ T1008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.328413][ T1008] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.396928][T17018] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11970'. [ 813.412885][ T1008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.427288][ T1008] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.607927][T17038] netlink: 'syz.4.11976': attribute type 1 has an invalid length. [ 813.635444][T17043] netlink: 'syz.1.11977': attribute type 1 has an invalid length. [ 813.645762][T17043] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11977'. [ 813.688320][T17038] 8021q: adding VLAN 0 to HW filter on device bond12 [ 813.729048][ T1008] pim6reg527: left allmulticast mode [ 813.864248][ T1008] batman_adv: batadv0: Removing interface: gretap2 [ 813.877556][T17063] netlink: 'syz.1.11983': attribute type 1 has an invalid length. [ 813.906878][ T1008] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 813.937643][ T1008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.947621][ T1008] bond_slave_0: left allmulticast mode [ 813.954750][ T1008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.964329][ T1008] bond_slave_1: left allmulticast mode [ 813.971250][ T1008] bond0 (unregistering): Released all slaves [ 813.979391][ T1008] bond1 (unregistering): Released all slaves [ 813.991042][ T1008] bond2 (unregistering): Released all slaves [ 814.000718][ T1008] bond3 (unregistering): Released all slaves [ 814.010583][ T1008] bond4 (unregistering): Released all slaves [ 814.020032][ T1008] bond5 (unregistering): Released all slaves [ 814.033402][ T1008] bond6 (unregistering): Released all slaves [ 814.043393][ T1008] bond7 (unregistering): Released all slaves [ 814.053529][ T1008] bond8 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 814.063964][ T1008] bond8 (unregistering): Released all slaves [ 814.073921][ T1008] bond9 (unregistering): Released all slaves [ 814.114582][T17063] 8021q: adding VLAN 0 to HW filter on device bond1 [ 814.148064][T17065] vlan2: entered allmulticast mode [ 814.153402][T17065] bond1: entered allmulticast mode [ 814.169867][T17066] bond1: (slave geneve2): making interface the new active one [ 814.178306][T17066] geneve2: entered allmulticast mode [ 814.185130][T17066] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 814.205253][ T1008] tipc: Disabling bearer [ 814.217204][ T1008] tipc: Left network mode [ 814.223042][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.240201][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.329941][T17070] syzkaller0: entered promiscuous mode [ 814.346525][T17070] syzkaller0: entered allmulticast mode [ 814.364475][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.384167][T17079] openvswitch: netlink: IP tunnel dst address not specified [ 814.403758][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.416023][T17079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 814.482336][T17101] xt_hashlimit: invalid interval [ 814.589599][T17114] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11992'. [ 814.636770][ T9782] Bluetooth: hci2: command tx timeout [ 814.684276][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 814.781969][ T1008] hsr_slave_0: left promiscuous mode [ 814.788751][ T1008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 814.796231][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 814.804297][ T1008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 814.812552][ T1008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 814.823174][ T1008] veth1_macvtap: left promiscuous mode [ 814.828969][ T1008] veth0_macvtap: left promiscuous mode [ 814.834661][ T1008] veth1_vlan: left promiscuous mode [ 814.919065][ T1008] team0 (unregistering): Port device team_slave_0 removed [ 814.967045][T17131] IPv6: sit1: Disabled Multicast RS [ 814.973047][T17131] sit1: entered allmulticast mode [ 814.991821][T17126] syzkaller0: entered promiscuous mode [ 815.012330][T17126] syzkaller0: entered allmulticast mode [ 815.224901][T17153] netlink: 'syz.2.12001': attribute type 9 has an invalid length. [ 815.225296][T17142] netlink: 'syz.4.11999': attribute type 4 has an invalid length. [ 815.248219][T17159] sctp: [Deprecated]: syz.2.12001 (pid 17159) Use of int in maxseg socket option. [ 815.248219][T17159] Use struct sctp_assoc_value instead [ 815.278108][T17149] netlink: 'syz.4.11999': attribute type 4 has an invalid length. [ 815.338944][T16942] bridge0: port 1(bridge_slave_0) entered blocking state [ 815.346184][T16942] bridge0: port 1(bridge_slave_0) entered disabled state [ 815.354318][T16942] bridge_slave_0: entered allmulticast mode [ 815.365881][T16942] bridge_slave_0: entered promiscuous mode [ 815.373925][T16942] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.383746][T16942] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.391609][T16942] bridge_slave_1: entered allmulticast mode [ 815.399330][T16942] bridge_slave_1: entered promiscuous mode [ 815.456301][T17172] netlink: 'syz.2.12004': attribute type 2 has an invalid length. [ 815.473048][T16942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.498197][T17172] netlink: 140 bytes leftover after parsing attributes in process `syz.2.12004'. [ 815.524567][ T1008] IPVS: stop unused estimator thread 0... [ 815.533586][T16942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.621805][T16942] team0: Port device team_slave_0 added [ 815.634877][T16942] team0: Port device team_slave_1 added [ 815.790653][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 815.819284][T16942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.826324][T16942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.856044][T16942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.883064][T16942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.905159][T16942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.935486][T16942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.049326][T17231] netlink: 'syz.1.12016': attribute type 20 has an invalid length. [ 816.072775][T16942] hsr_slave_0: entered promiscuous mode [ 816.078435][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12016'. [ 816.101914][T16942] hsr_slave_1: entered promiscuous mode [ 816.109574][T16942] debugfs: 'hsr0' already exists in 'hsr' [ 816.115418][T16942] Cannot create hsr debugfs directory [ 816.139078][T17231] netlink: 'syz.1.12016': attribute type 20 has an invalid length. [ 816.152582][T17231] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12016'. [ 816.169424][ T1008] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.185624][ T1008] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.206300][T17249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12020'. [ 816.222809][ T1008] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.278153][ T1008] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 816.646005][T17288] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12031'. [ 816.716964][ T9782] Bluetooth: hci2: command tx timeout [ 816.875762][T17306] bond11: entered promiscuous mode [ 816.886799][T17306] 8021q: adding VLAN 0 to HW filter on device bond11 [ 816.925102][T17306] macvtap1: entered allmulticast mode [ 816.965568][T17317] veth3: entered allmulticast mode [ 816.991724][T17306] bond11: (slave bridge7): making interface the new active one [ 816.999556][T17306] bridge7: entered promiscuous mode [ 817.008627][T17306] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 818.797334][ T9782] Bluetooth: hci2: command tx timeout [ 819.877940][T17319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 819.889717][T16942] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 819.921087][T16942] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 819.957792][T16942] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 819.973710][T16942] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 819.987998][T16942] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 819.990909][T17408] validate_nla: 4 callbacks suppressed [ 819.990925][T17408] netlink: 'syz.2.12047': attribute type 1 has an invalid length. [ 820.008488][T17408] netlink: 232 bytes leftover after parsing attributes in process `syz.2.12047'. [ 820.010724][T16942] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 820.035663][T16942] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 820.045641][T16942] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 820.094011][T17418] netlink: 'syz.4.12048': attribute type 83 has an invalid length. [ 820.151147][T17424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12050'. [ 820.209640][T17428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12052'. [ 820.220789][T17428] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 820.232861][T16942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.263588][T16942] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.308568][ T3388] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.315709][ T3388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 820.344737][T17432] bridge7: entered promiscuous mode [ 820.352450][T17435] netlink: set zone limit has 4 unknown bytes [ 820.352455][T17432] bridge7: entered allmulticast mode [ 820.370268][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.377407][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.424269][T17440] netlink: zone id is out of range [ 820.432822][T17439] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12056'. [ 820.449623][T17440] netlink: zone id is out of range [ 820.507161][T17435] netlink: set zone limit has 4 unknown bytes [ 820.585237][T17453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12057'. [ 820.595002][T17452] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12059'. [ 820.608449][T17453] netlink: 52 bytes leftover after parsing attributes in process `syz.3.12057'. [ 820.650435][T17460] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12060'. [ 820.694818][T17467] Bluetooth: MGMT ver 1.23 [ 820.750920][T16942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.784414][T16942] veth0_vlan: entered promiscuous mode [ 820.794120][T16942] veth1_vlan: entered promiscuous mode [ 820.815677][T16942] veth0_macvtap: entered promiscuous mode [ 820.824535][T16942] veth1_macvtap: entered promiscuous mode [ 820.840457][T16942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 820.852362][T16942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 820.863840][ T1008] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.874151][ T1008] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.883309][ T5625] Bluetooth: hci2: command tx timeout [ 820.889935][ T1008] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.899084][ T1008] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 822.957061][ T5625] Bluetooth: hci2: command 0x0405 tx timeout [ 823.551720][T17449] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 823.616137][ T848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.649445][ T848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.687071][T17486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12066'. [ 823.690417][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 823.705147][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 823.816732][T17517] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12069'. [ 823.920388][T17524] sctp: [Deprecated]: syz.0.12073 (pid 17524) Use of int in maxseg socket option. [ 823.920388][T17524] Use struct sctp_assoc_value instead [ 826.908145][T17524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 826.917895][T17546] netlink: 'syz.2.12080': attribute type 2 has an invalid length. [ 827.082573][T17619] nbd: nbd4 already in use [ 827.103224][T17625] dvmrp0: entered allmulticast mode [ 827.169735][T17628] xt_hashlimit: size too large, truncated to 1048576 [ 827.225703][T17637] __nla_validate_parse: 1 callbacks suppressed [ 827.225721][T17637] netlink: 830 bytes leftover after parsing attributes in process `syz.4.12100'. [ 827.264975][T17641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12103'. [ 827.299318][T17641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12103'. [ 827.339120][T17641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12103'. [ 827.385989][T17641] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12103'. [ 827.411082][T17654] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12104'. [ 827.487966][T17661] bridge_slave_0: left allmulticast mode [ 827.493838][T17661] bridge_slave_0: left promiscuous mode [ 827.508753][T17661] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.525400][T17661] bridge_slave_1: left allmulticast mode [ 827.544277][T17661] bridge_slave_1: left promiscuous mode [ 827.555415][T17661] bridge0: port 2(bridge_slave_1) entered disabled state [ 827.571916][T17661] bond6: (slave veth0_to_bond): Releasing active interface [ 827.590881][T17661] bond0: (slave bond_slave_0): Releasing backup interface [ 827.617321][T17661] bond0: (slave bond_slave_1): Releasing backup interface [ 827.628716][T17661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 827.638634][T17661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 827.647596][T17661] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 827.715557][T17680] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12110'. [ 827.715796][T17677] tipc: Invalid UDP bearer configuration [ 827.726954][T17677] tipc: Enabling of bearer rejected, failed to enable media [ 827.832866][T17690] sock: sock_set_timeout: `syz.1.12113' (pid 17690) tries to set negative timeout [ 827.889717][T17699] syzkaller0: entered promiscuous mode [ 827.895452][T17699] syzkaller0: entered allmulticast mode [ 828.126878][T17711] netlink: 'syz.0.12122': attribute type 1 has an invalid length. [ 828.182653][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 828.190556][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 828.200913][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 828.209169][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 828.214461][T17721] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12123'. [ 828.230276][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 828.270839][T17713] macvtap1: entered promiscuous mode [ 828.296290][T17713] macvtap1: entered allmulticast mode [ 828.301932][T17713] veth1_vlan: entered allmulticast mode [ 828.361426][T17731] macvtap2: entered promiscuous mode [ 828.411715][T17731] macvtap2: entered allmulticast mode [ 828.444041][T17737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12126'. [ 828.483024][T17737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12126'. [ 828.800125][ T7426] syz_tun (unregistering): left allmulticast mode [ 828.839431][T17768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 829.132001][T17799] netlink: 'syz.0.12141': attribute type 2 has an invalid length. [ 829.446043][T17717] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.453387][T17717] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.465907][T17717] bridge_slave_0: entered allmulticast mode [ 829.472992][T17717] bridge_slave_0: entered promiscuous mode [ 829.480939][T17717] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.488855][T17717] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.496147][T17717] bridge_slave_1: entered allmulticast mode [ 829.503600][T17717] bridge_slave_1: entered promiscuous mode [ 829.540819][T17717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.569757][T17717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.625325][T17717] team0: Port device team_slave_0 added [ 829.644370][T17717] team0: Port device team_slave_1 added [ 829.677445][T17717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 829.697603][T17717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.732644][T17717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.745276][T17717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.753728][T17717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.801021][T17717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.910229][T17717] hsr_slave_0: entered promiscuous mode [ 829.924352][T17717] hsr_slave_1: entered promiscuous mode [ 829.951059][T17717] debugfs: 'hsr0' already exists in 'hsr' [ 829.974603][T17717] Cannot create hsr debugfs directory [ 830.159823][T17862] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 830.299374][T17870] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 830.319592][T17870] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 830.319700][ T5625] Bluetooth: hci5: command tx timeout [ 830.358612][T17874] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 830.593884][T17717] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 830.618799][T17717] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 830.632242][T17717] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 830.641842][T17717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 830.668726][T17717] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 830.687988][T17717] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 830.699773][T17717] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 830.714010][T17717] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 830.831571][T17717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 830.866247][T17717] 8021q: adding VLAN 0 to HW filter on device team0 [ 830.882387][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.889562][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 830.906943][ T7130] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.914090][ T7130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 830.928659][T17927] RDS: rds_bind could not find a transport for ::ffff:10.1.1.0, load rds_tcp or rds_rdma? [ 831.241759][T17717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 831.253095][T17949] atomic_op ffff8880760ed198 conn xmit_atomic 0000000000000000 [ 831.266321][T17949] netlink: 'syz.0.12171': attribute type 11 has an invalid length. [ 831.278540][T17949] netlink: 'syz.0.12171': attribute type 5 has an invalid length. [ 831.280299][T17717] veth0_vlan: entered promiscuous mode [ 831.298492][T17717] veth1_vlan: entered promiscuous mode [ 831.319751][T17717] veth0_macvtap: entered promiscuous mode [ 831.328529][T17717] veth1_macvtap: entered promiscuous mode [ 831.342382][T17717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 831.354419][T17717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 831.368328][ T848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.378379][ T848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.388253][ T848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.398045][ T848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 831.439921][ T848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.453347][ T848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.475912][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 831.485064][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 831.681104][T17960] netlink: 'syz.4.12174': attribute type 5 has an invalid length. [ 831.690496][ T9782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 831.701790][ T9782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 831.710074][ T9782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 831.718291][ T9782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 831.725807][ T9782] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 831.801605][T17966] tipc: New replicast peer: 255.255.255.255 [ 831.809064][T17966] tipc: Enabled bearer , priority 10 [ 832.081633][T17986] ip6t_srh: unknown srh match flags 4000 [ 832.314250][T18007] __nla_validate_parse: 16 callbacks suppressed [ 832.314267][T18007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12184'. [ 832.365986][T18006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12185'. [ 832.380755][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12185'. [ 832.403314][ T9782] Bluetooth: hci5: command tx timeout [ 832.425275][T18013] netlink: 'syz.1.12187': attribute type 2 has an invalid length. [ 832.526346][T17962] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.539118][T17962] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.547538][T17962] bridge_slave_0: entered allmulticast mode [ 832.554823][T17962] bridge_slave_0: entered promiscuous mode [ 832.564242][T17962] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.572783][T17962] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.581509][T17962] bridge_slave_1: entered allmulticast mode [ 832.589102][T17962] bridge_slave_1: entered promiscuous mode [ 832.632848][T17962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.648991][T17962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.684402][T17962] team0: Port device team_slave_0 added [ 832.694741][T17962] team0: Port device team_slave_1 added [ 832.752421][T17962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.766932][T17962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.814320][T17962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.828965][T17962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.836200][T17962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.864546][T17962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.868625][T18046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12193'. [ 832.888814][T18037] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12193'. [ 832.991519][T17962] hsr_slave_0: entered promiscuous mode [ 833.002540][T17962] hsr_slave_1: entered promiscuous mode [ 833.010814][T17962] debugfs: 'hsr0' already exists in 'hsr' [ 833.016779][T17962] Cannot create hsr debugfs directory [ 833.127806][T17962] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.139891][T17962] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.191248][T17962] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.203961][T17962] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.224926][T18065] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.12199'. [ 833.263176][T17962] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.280489][T17962] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.300600][T18067] netlink: 'syz.0.12200': attribute type 1 has an invalid length. [ 833.329138][T18067] bond1: entered promiscuous mode [ 833.334263][T18067] bond1: entered allmulticast mode [ 833.340029][T18067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 833.351512][T17962] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.362867][T17962] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.377099][T18072] netlink: 'syz.1.12202': attribute type 1 has an invalid length. [ 833.385045][T18072] netlink: 228 bytes leftover after parsing attributes in process `syz.1.12202'. [ 833.395518][T18072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12202'. [ 833.435403][T18076] macvlan0: entered promiscuous mode [ 833.479291][T17962] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 833.489200][T17962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 833.505865][T17962] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 833.527314][T17962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 833.557660][T17962] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 833.571844][T17962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 833.581977][T18083] x_tables: unsorted underflow at hook 3 [ 833.588860][T17962] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 833.611161][T17962] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 833.627710][T18089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12207'. [ 833.745573][T17962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 833.758554][ T9782] Bluetooth: hci3: command tx timeout [ 833.774990][T17962] 8021q: adding VLAN 0 to HW filter on device team0 [ 833.789927][T18110] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12211'. [ 833.801959][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state [ 833.809088][ T7130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 833.819031][ T7130] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.826138][ T7130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.970054][T18121] tipc: Enabling of bearer rejected, failed to enable media [ 833.982768][T18121] netlink: 'syz.1.12214': attribute type 20 has an invalid length. [ 833.993031][T18121] IPv6: NLM_F_CREATE should be specified when creating new route [ 834.302164][T18150] syzkaller0: entered promiscuous mode [ 834.327839][T18150] syzkaller0: entered allmulticast mode [ 834.373427][T17962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.477292][ T9782] Bluetooth: hci5: command tx timeout [ 834.503035][T17962] veth0_vlan: entered promiscuous mode [ 834.518149][T17962] veth1_vlan: entered promiscuous mode [ 834.558025][T17962] veth0_macvtap: entered promiscuous mode [ 834.580355][T17962] veth1_macvtap: entered promiscuous mode [ 834.601080][T18175] netlink: 'syz.4.12229': attribute type 12 has an invalid length. [ 834.602114][T17962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.622373][T18177] netlink: zone id is out of range [ 834.632410][T17962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.634957][T18177] netlink: del zone limit has 4 unknown bytes [ 834.655263][T18175] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 834.662975][T18175] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 834.677013][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.705713][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.805795][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.824149][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.890835][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.905701][T18200] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 834.907254][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.939726][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.948142][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 835.018222][T18204] tipc: Started in network mode [ 835.041854][T18204] tipc: Node identity ac14142f, cluster identity 4711 [ 835.050297][T18204] tipc: Enabling of bearer rejected, failed to enable media [ 835.062217][T18209] netlink: 'syz.2.12173': attribute type 1 has an invalid length. [ 835.251938][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 835.348466][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 835.363344][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 835.370958][T18227] netlink: 'syz.3.12245': attribute type 1 has an invalid length. [ 835.380159][T18227] netlink: 'syz.3.12245': attribute type 1 has an invalid length. [ 835.390498][T18227] netlink: 'syz.3.12245': attribute type 1 has an invalid length. [ 835.399739][T18227] netlink: 'syz.3.12245': attribute type 2 has an invalid length. [ 835.452022][ T848] bond8: left allmulticast mode [ 835.463920][ T848] bond8: left promiscuous mode [ 835.479619][ T848] bridge0: port 3(bond8) entered disabled state [ 835.539297][ T848] pimreg: left allmulticast mode [ 835.634021][T18220] infiniband syz2: set active [ 835.642575][T18220] infiniband syz2: added vxcan1 [ 835.665122][T18220] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 835.681346][T18220] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 835.699334][T18220] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 835.732330][T18220] RDS/IB: syz2: added [ 835.737072][T18220] smc: adding ib device syz2 with port count 1 [ 835.744291][T18220] smc: ib device syz2 port 1 has no pnetid [ 835.760513][ T848] bond10 (unregistering): (slave gretap1): Releasing active interface [ 835.831634][ T848] bond11 (unregistering): (slave bridge7): Releasing backup interface [ 835.841369][ T848] bridge7 (unregistering): left promiscuous mode [ 835.847164][ T9782] Bluetooth: hci3: command tx timeout [ 835.861303][ T848] bond0 (unregistering): Released all slaves [ 835.870717][ T848] bond1 (unregistering): Released all slaves [ 835.883157][ T848] bond2 (unregistering): (slave bond3): Releasing active interface [ 835.899365][ T848] bond2 (unregistering): Released all slaves [ 835.911445][ T848] bond3 (unregistering): Released all slaves [ 835.921494][ T848] bond4 (unregistering): Released all slaves [ 835.931019][ T848] bond5 (unregistering): Released all slaves [ 835.940766][ T848] bond6 (unregistering): Released all slaves [ 835.955886][ T848] bond7 (unregistering): (slave veth3): Releasing backup interface [ 835.964822][ T848] bond7 (unregistering): Released all slaves [ 835.975614][ T848] bond8 (unregistering): Released all slaves [ 835.985554][ T848] bond9 (unregistering): Released all slaves [ 835.994916][ T848] bond10 (unregistering): Released all slaves [ 836.008907][ T848] bond11 (unregistering): Released all slaves [ 836.033875][ T42] vxcan1 speed is unknown, defaulting to 1000 [ 836.040892][T10386] vxcan1 speed is unknown, defaulting to 1000 [ 836.055436][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 836.132211][ T848] : left promiscuous mode [ 836.189701][ T848] tipc: Left network mode [ 836.302090][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 836.511083][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 836.557399][ T9782] Bluetooth: hci5: command tx timeout [ 836.584359][T18292] IPv6: NLM_F_CREATE should be specified when creating new route [ 836.731074][T18290] bond1: left promiscuous mode [ 836.752436][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 836.764059][T18296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 837.012431][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 837.157261][T18328] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 837.175197][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 837.375215][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 837.484960][T18347] validate_nla: 3 callbacks suppressed [ 837.484988][T18347] netlink: 'syz.0.12282': attribute type 1 has an invalid length. [ 837.511289][T18347] __nla_validate_parse: 16 callbacks suppressed [ 837.511308][T18347] netlink: 228 bytes leftover after parsing attributes in process `syz.0.12282'. [ 837.529840][T18345] bridge0: port 2(bridge_slave_1) entered disabled state [ 837.533545][T18347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12282'. [ 837.537286][T18345] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.590407][T18345] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 837.599930][T18355] netlink: 'syz.4.12281': attribute type 1 has an invalid length. [ 837.626526][T18355] bond13: entered promiscuous mode [ 837.631919][T18355] 8021q: adding VLAN 0 to HW filter on device bond13 [ 837.642090][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 837.659119][T18349] 8021q: adding VLAN 0 to HW filter on device bond13 [ 837.668525][T18349] bond13: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 837.679964][T18349] bond13: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 837.694373][T18349] bond13: (slave ip6gre1): making interface the new active one [ 837.703175][T18349] ip6gre1: entered promiscuous mode [ 837.710325][T18349] bond13: (slave ip6gre1): Enslaving as an active interface with an up link [ 837.782858][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 837.918743][ T9782] Bluetooth: hci3: command tx timeout [ 838.095622][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 838.169807][T18397] netlink: 'syz.2.12295': attribute type 2 has an invalid length. [ 838.194837][T18394] netlink: 'syz.2.12295': attribute type 2 has an invalid length. [ 838.258172][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 838.321282][T18413] netlink: 212324 bytes leftover after parsing attributes in process `syz.2.12302'. [ 838.337491][T18415] veth0_to_team: mtu less than device minimum [ 838.432470][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 838.473692][T18423] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12304'. [ 838.509386][T18425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12305'. [ 838.582790][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 838.663881][T18438] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 838.676004][T18438] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 838.734444][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 838.820239][T18457] pim6reg527: entered allmulticast mode [ 838.835966][T18220] vxcan1 speed is unknown, defaulting to 1000 [ 838.984697][ T848] hsr_slave_0: left promiscuous mode [ 838.990685][ T848] hsr_slave_1: left promiscuous mode [ 838.998377][ T848] veth1_vlan: left promiscuous mode [ 839.019392][T18402] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 839.372852][T18495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12320'. [ 839.535612][T18511] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12322'. [ 839.555241][ T848] IPVS: stop unused estimator thread 0... [ 840.007531][ T9782] Bluetooth: hci3: command tx timeout [ 840.237135][ T9782] Bluetooth: hci0: command 0x0419 tx timeout [ 841.707390][T18442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 841.722118][T18474] netlink: 'syz.3.12316': attribute type 1 has an invalid length. [ 841.740010][T18474] netlink: 184 bytes leftover after parsing attributes in process `syz.3.12316'. [ 841.750469][T18474] netlink: 'syz.3.12316': attribute type 1 has an invalid length. [ 841.761819][T18474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12316'. [ 841.763318][T18586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12327'. [ 841.868233][T18586] bond1: entered promiscuous mode [ 841.888694][T18586] bond1: entered allmulticast mode [ 841.895282][T18586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 842.131600][T18620] tipc: Failed to remove unknown binding: 66,0,0/2802154903:2176569944/2176569945 [ 842.156313][T18620] tipc: Failed to remove unknown binding: 66,0,0/2802154903:2176569944/2176569945 [ 842.302209][T18642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 842.462007][T18656] syzkaller0: entered promiscuous mode [ 842.469473][T18656] syzkaller0: entered allmulticast mode [ 842.594175][T18669] __nla_validate_parse: 3 callbacks suppressed [ 842.594193][T18669] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12357'. [ 842.672999][ T10] IPVS: starting estimator thread 0... [ 842.687521][T18681] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12355'. [ 842.700935][T18667] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12355'. [ 842.716269][T18672] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12355'. [ 842.739263][T18684] syzkaller0: entered promiscuous mode [ 842.744807][T18684] syzkaller0: entered allmulticast mode [ 842.762295][T18686] netlink: 'syz.1.12364': attribute type 21 has an invalid length. [ 842.771096][T18686] netlink: 'syz.1.12364': attribute type 22 has an invalid length. [ 842.779068][T18679] IPVS: using max 58 ests per chain, 139200 per kthread [ 842.788969][T18686] netlink: 14360 bytes leftover after parsing attributes in process `syz.1.12364'. [ 842.991443][T18702] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12372'. [ 843.050261][T18708] netlink: 324 bytes leftover after parsing attributes in process `syz.2.12375'. [ 843.125546][T18713] vxcan1 speed is unknown, defaulting to 1000 [ 843.300008][T18729] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12383'. [ 843.474586][T18745] syzkaller0: entered promiscuous mode [ 843.482058][T18745] syzkaller0: entered allmulticast mode [ 843.982440][T18771] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.989891][T18771] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.055899][T18771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 844.071729][T18771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.146939][T18773] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.154108][T18773] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.161536][T18773] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.168685][T18773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 844.211334][T18773] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 844.223274][T18773] gretap1: left promiscuous mode [ 844.238475][T18773] 8021q: adding VLAN 0 to HW filter on device bond1 [ 844.249391][T18773] bond1: entered allmulticast mode [ 844.254585][T18773] bridge1: entered allmulticast mode [ 844.261202][T18773] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 844.271471][T18773] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 844.281181][T18773] bridge1: entered promiscuous mode [ 844.297868][T18773] gtp0: left promiscuous mode [ 844.305889][T18773] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 844.314922][T18773] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 844.325052][T18773] 8021q: adding VLAN 0 to HW filter on device bond4 [ 844.339179][T18773] team1: left promiscuous mode [ 844.344243][T18773] 8021q: adding VLAN 0 to HW filter on device team1 [ 844.353267][T18773] 8021q: adding VLAN 0 to HW filter on device bond7 [ 844.362362][T18773] bond8: left promiscuous mode [ 844.368029][T18773] bridge4: left promiscuous mode [ 844.376956][T18773] team2: left promiscuous mode [ 844.382138][T18773] 8021q: adding VLAN 0 to HW filter on device team2 [ 844.393250][T18773] bond11: left promiscuous mode [ 844.405069][T18773] bridge7: left promiscuous mode [ 844.415947][T18773] bond13: left promiscuous mode [ 844.422231][T18773] ip6gre1: left promiscuous mode [ 844.429288][T10381] team_slave_0: entered promiscuous mode [ 844.434999][T10381] team_slave_1: entered promiscuous mode [ 844.496167][ T51] bridge3: port 1(veth3) entered blocking state [ 844.502548][ T51] bridge3: port 1(veth3) entered forwarding state [ 844.530816][ T850] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.544302][ T850] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.573207][ T850] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.606249][ T850] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.793477][T18828] netlink: 'syz.3.12422': attribute type 29 has an invalid length. [ 844.816607][T18828] netlink: 'syz.3.12422': attribute type 29 has an invalid length. [ 844.976712][T18843] syzkaller0: entered promiscuous mode [ 844.988675][T18843] syzkaller0: entered allmulticast mode [ 845.004117][T18846] tipc: Enabled bearer , priority 0 [ 845.080876][T18846] syzkaller0: entered promiscuous mode [ 845.102652][T18846] syzkaller0: entered allmulticast mode [ 845.148987][T18849] tipc: Started in network mode [ 845.160656][T18849] tipc: Node identity 528bceff5528, cluster identity 4711 [ 845.185931][T18849] tipc: Enabled bearer , priority 0 [ 845.211205][T18855] tipc: Resetting bearer [ 845.228626][T18841] tipc: Resetting bearer [ 845.249115][T18841] tipc: Disabling bearer [ 845.293820][T18845] tipc: Resetting bearer [ 845.322439][T18845] tipc: Disabling bearer [ 845.362702][T18871] netlink: 1508 bytes leftover after parsing attributes in process `syz.4.12435'. [ 845.465475][T18880] syzkaller0: entered promiscuous mode [ 845.471914][T18880] syzkaller0: entered allmulticast mode [ 845.691282][T18902] syzkaller0: entered promiscuous mode [ 845.701406][T18902] syzkaller0: entered allmulticast mode [ 845.933859][T18918] syzkaller0: entered promiscuous mode [ 845.950043][T18918] syzkaller0: entered allmulticast mode [ 846.085760][T18933] tipc: Enabled bearer , priority 0 [ 846.093894][T18916] tipc: Resetting bearer [ 846.111240][T18916] tipc: Disabling bearer [ 846.357719][T18952] tipc: Enabled bearer , priority 0 [ 846.390977][T18951] tipc: Disabling bearer [ 846.524158][T18960] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12465'. [ 847.045658][T18989] syzkaller0: entered promiscuous mode [ 847.061530][T18989] syzkaller0: entered allmulticast mode [ 847.211842][ T3388] ------------[ cut here ]------------ [ 847.217377][ T3388] wlan1: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:00 on 5 GHz band [ 847.231176][ T3388] WARNING: net/mac80211/tx.c:757 at ieee80211_tx_h_rate_ctrl+0xbd5/0x1760, CPU#0: kworker/u8:9/3388 [ 847.242082][ T3388] Modules linked in: [ 847.245992][ T3388] CPU: 0 UID: 0 PID: 3388 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 847.255510][ T3388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 847.265615][ T3388] Workqueue: events_unbound cfg80211_wiphy_work [ 847.272000][ T3388] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 847.278477][ T3388] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 78 b2 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 15 ae a3 f6 48 [ 847.298125][ T3388] RSP: 0018:ffffc9000e5674a0 EFLAGS: 00010293 [ 847.304206][ T3388] RAX: ffffffff8b2247e8 RBX: ffffffff90430de0 RCX: 0000000000000005 [ 847.312254][ T3388] RDX: ffff88804e0e4d44 RSI: ffff888025add998 RDI: ffffffff90430de0 [ 847.320280][ T3388] RBP: ffffc9000e567610 R08: ffff8880b1d52abf R09: 1ffff110163aa557 [ 847.328307][ T3388] R10: dffffc0000000000 R11: ffffed10163aa558 R12: ffff88804e0e4d44 [ 847.336287][ T3388] R13: 0000000000000001 R14: ffff888025add998 R15: dffffc0000000000 [ 847.344317][ T3388] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 847.353298][ T3388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 847.359918][ T3388] CR2: 00007f0b01d456b8 CR3: 000000007c5da000 CR4: 00000000003526f0 [ 847.367933][ T3388] Call Trace: [ 847.371211][ T3388] [ 847.374138][ T3388] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 847.380260][ T3388] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 847.386535][ T3388] invoke_tx_handlers_late+0xb5/0x1830 [ 847.392016][ T3388] ? sta_info_get+0x2ec/0x300 [ 847.396824][ T3388] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 847.402639][ T3388] ieee80211_tx+0x2d7/0x4b0 [ 847.407173][ T3388] ? __pfx_ieee80211_tx+0x10/0x10 [ 847.412219][ T3388] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 847.417781][ T3388] ? ieee80211_xmit+0x2e5/0x3c0 [ 847.422636][ T3388] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 847.428646][ T3388] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 847.434458][ T3388] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 847.440890][ T3388] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 847.447095][ T3388] ieee80211_scan_work+0x488/0x1ab0 [ 847.452311][ T3388] cfg80211_wiphy_work+0x29e/0x420 [ 847.457454][ T3388] ? process_scheduled_works+0xa20/0x14e0 [ 847.463222][ T3388] process_scheduled_works+0xa8e/0x14e0 [ 847.468820][ T3388] ? __pfx_process_scheduled_works+0x10/0x10 [ 847.474805][ T3388] ? do_raw_spin_lock+0x12b/0x2f0 [ 847.479860][ T3388] ? assign_work+0x3cf/0x5d0 [ 847.484453][ T3388] worker_thread+0xa47/0xfb0 [ 847.489089][ T3388] kthread+0x388/0x470 [ 847.493163][ T3388] ? __pfx_worker_thread+0x10/0x10 [ 847.498300][ T3388] ? __pfx_kthread+0x10/0x10 [ 847.502897][ T3388] ret_from_fork+0x514/0xb70 [ 847.507998][ T3388] ? __pfx_ret_from_fork+0x10/0x10 [ 847.513129][ T3388] ? __switch_to+0xc89/0x1420 [ 847.517836][ T3388] ? __pfx_kthread+0x10/0x10 [ 847.522435][ T3388] ret_from_fork_asm+0x1a/0x30 [ 847.527266][ T3388] [ 847.530300][ T3388] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 847.537567][ T3388] CPU: 0 UID: 0 PID: 3388 Comm: kworker/u8:9 Not tainted syzkaller #0 PREEMPT(full) [ 847.547021][ T3388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 847.557063][ T3388] Workqueue: events_unbound cfg80211_wiphy_work [ 847.563298][ T3388] Call Trace: [ 847.566564][ T3388] [ 847.569481][ T3388] vpanic+0x56c/0xa60 [ 847.573477][ T3388] ? __pfx__printk+0x10/0x10 [ 847.578050][ T3388] ? __pfx_vpanic+0x10/0x10 [ 847.582560][ T3388] ? is_bpf_text_address+0x292/0x2b0 [ 847.587869][ T3388] ? is_bpf_text_address+0x26/0x2b0 [ 847.593058][ T3388] panic+0xc5/0xd0 [ 847.596765][ T3388] ? __pfx_panic+0x10/0x10 [ 847.601168][ T3388] ? ret_from_fork_asm+0x1a/0x30 [ 847.606092][ T3388] __warn+0x315/0x4c0 [ 847.610064][ T3388] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 847.615865][ T3388] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 847.621656][ T3388] __report_bug+0x331/0x530 [ 847.626220][ T3388] ? arch_stack_walk+0x11b/0x150 [ 847.631178][ T3388] ? ieee80211_tx_h_rate_ctrl+0xbd5/0x1760 [ 847.636981][ T3388] ? __pfx___report_bug+0x10/0x10 [ 847.642021][ T3388] ? stack_depot_save_flags+0x33/0x800 [ 847.648247][ T3388] report_bug_entry+0x19a/0x290 [ 847.653089][ T3388] ? ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 847.658886][ T3388] ? ieee80211_tx_h_rate_ctrl+0xc4b/0x1760 [ 847.664684][ T3388] handle_bug+0xce/0x200 [ 847.668920][ T3388] exc_invalid_op+0x1a/0x50 [ 847.673436][ T3388] asm_exc_invalid_op+0x1a/0x20 [ 847.678284][ T3388] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xc46/0x1760 [ 847.684692][ T3388] Code: bf 09 00 00 48 8b 44 24 10 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 78 b2 a3 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 e2 <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 dd 01 00 00 e8 15 ae a3 f6 48 [ 847.704290][ T3388] RSP: 0018:ffffc9000e5674a0 EFLAGS: 00010293 [ 847.710347][ T3388] RAX: ffffffff8b2247e8 RBX: ffffffff90430de0 RCX: 0000000000000005 [ 847.718345][ T3388] RDX: ffff88804e0e4d44 RSI: ffff888025add998 RDI: ffffffff90430de0 [ 847.726310][ T3388] RBP: ffffc9000e567610 R08: ffff8880b1d52abf R09: 1ffff110163aa557 [ 847.734274][ T3388] R10: dffffc0000000000 R11: ffffed10163aa558 R12: ffff88804e0e4d44 [ 847.742257][ T3388] R13: 0000000000000001 R14: ffff888025add998 R15: dffffc0000000000 [ 847.750222][ T3388] ? ieee80211_tx_h_rate_ctrl+0xc38/0x1760 [ 847.756029][ T3388] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 847.762101][ T3388] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 847.768255][ T3388] invoke_tx_handlers_late+0xb5/0x1830 [ 847.773709][ T3388] ? sta_info_get+0x2ec/0x300 [ 847.778373][ T3388] ? invoke_tx_handlers_early+0xa30/0x1cf0 [ 847.784183][ T3388] ieee80211_tx+0x2d7/0x4b0 [ 847.788683][ T3388] ? __pfx_ieee80211_tx+0x10/0x10 [ 847.793718][ T3388] ? ieee80211_set_qos_hdr+0x1d8/0x530 [ 847.799165][ T3388] ? ieee80211_xmit+0x2e5/0x3c0 [ 847.804001][ T3388] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 847.809980][ T3388] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 847.815776][ T3388] ? ieee80211_scan_state_send_probe+0x4e6/0xa00 [ 847.822092][ T3388] ieee80211_scan_state_send_probe+0x5b3/0xa00 [ 847.828245][ T3388] ieee80211_scan_work+0x488/0x1ab0 [ 847.833446][ T3388] cfg80211_wiphy_work+0x29e/0x420 [ 847.838558][ T3388] ? process_scheduled_works+0xa20/0x14e0 [ 847.844270][ T3388] process_scheduled_works+0xa8e/0x14e0 [ 847.849812][ T3388] ? __pfx_process_scheduled_works+0x10/0x10 [ 847.855777][ T3388] ? do_raw_spin_lock+0x12b/0x2f0 [ 847.860790][ T3388] ? assign_work+0x3cf/0x5d0 [ 847.865371][ T3388] worker_thread+0xa47/0xfb0 [ 847.869954][ T3388] kthread+0x388/0x470 [ 847.874005][ T3388] ? __pfx_worker_thread+0x10/0x10 [ 847.879107][ T3388] ? __pfx_kthread+0x10/0x10 [ 847.883702][ T3388] ret_from_fork+0x514/0xb70 [ 847.888281][ T3388] ? __pfx_ret_from_fork+0x10/0x10 [ 847.893428][ T3388] ? __switch_to+0xc89/0x1420 [ 847.898095][ T3388] ? __pfx_kthread+0x10/0x10 [ 847.902704][ T3388] ret_from_fork_asm+0x1a/0x30 [ 847.907468][ T3388] [ 847.910633][ T3388] Kernel Offset: disabled [ 847.914941][ T3388] Rebooting in 86400 seconds..