last executing test programs: 4.832218396s ago: executing program 3 (id=17663): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) 4.652709127s ago: executing program 3 (id=17666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) 4.475185979s ago: executing program 3 (id=17671): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}]}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000280)=""/121, 0xa2ec4ae9}], 0x2}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x840) write$nci(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="610507"], 0x1a) 4.309948146s ago: executing program 1 (id=17675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003080)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x4, 0x6}, 0x1, 0xfb}, [{0x2, 0x9c, 0x80, 0x6, 0x2, 0x7}, {0x1, 0x6, 0x4, 0x3, 0xfffffffd, 0x81}, {0x1, 0x5, 0x8, 0x101, 0x3}, {0x3, 0x9, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x8}, {0x3, 0x4, 0xc, 0x101, 0x3, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0x0, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x0, 0xffffffff}, {0x5, 0x0, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0x9, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x9}, {0x1, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x6}, {0xfffffffb, 0x3, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x9, 0xa5f, 0xa, 0x5, 0x2}, {0xffff997c, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x5, 0x2, 0xc, 0x8, 0x9, 0x60}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x329, 0x8, 0x7fff, 0x4, 0x8, 0x9}, {0x8, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x1, 0x3, 0x8}, {0x0, 0x3, 0x1ff, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x6, 0xe, 0x0, 0x80}, {0xd, 0x0, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x81, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0x1}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0xffff, 0x6, 0x3, 0x4, 0xffb, 0x9}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0x8ac, 0xf}, {0x5, 0x3, 0x6, 0x1000, 0xd8fe, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0xf9, 0xffff8001}, {0x0, 0x6, 0x8000, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2, 0x2, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0xad, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x8, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0x8, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0x0, 0x80000001, 0x9}, {0x3, 0x9, 0x7, 0x6, 0x3e6b7592, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0x9, 0x5206, 0x2, 0x53ce, 0x3}, {0xffffff81, 0x7, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x808f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x6, 0x4, 0xc6e9}, {0x1, 0x2d73, 0x3ff, 0x5, 0x9f17, 0xffffff7f}, {0x2, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x8, 0x4f}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x57}, {0x9, 0x5, 0x4, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x8000, 0x7, 0x9}, {0xff, 0x7, 0x5, 0x10001, 0x6, 0x6}, {0x2, 0x8f, 0x9, 0xffffff46, 0x4, 0x80000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd50, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x4, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x3ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x9, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x6}, {0x9, 0x7, 0x8001, 0x7, 0x7, 0x2}, {0x3, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff05, 0x3}, {0x7, 0x5, 0x2, 0x2, 0x0, 0xfffff9de}, {0x5, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x1d, 0xffffff10, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x9, 0x0, 0x7, 0xdb, 0x5}, {0x7, 0x2, 0x9, 0x8, 0xa, 0x100}, {0x81, 0x4, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x402c, 0xffff, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b5}, {0xa24b, 0x947d, 0x3, 0x6, 0x80000000, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x6}, {0xfff, 0xda, 0x1f, 0x4, 0x8, 0x2}, {0x6, 0x10, 0x0, 0x0, 0xfffffff7, 0x43}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x4, 0xbe, 0x81}, {0x4, 0x800, 0x0, 0x5, 0x8, 0xfa2f}, {0x3, 0xffe00000, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0xfffffff8, 0x7, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0xb, 0x7}, {0x20000006, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x7, 0x6, 0x8936, 0xdcb, 0x0, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x5, 0xff, 0x9e0f, 0x5, 0x6}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0xa, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x2, 0x1, 0x1, 0x10, 0x5}, {0x4, 0x7, 0x4, 0x78d, 0xffffcff9, 0x9}, {0x1, 0xe, 0x7c0, 0x2, 0x2, 0x207f}, {0x10, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {0x5}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4}, {0x5}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x3, 0x1}, {0x2}, {0x5}, {0x2}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x5}, {0xa}, {0x3}, {0x3}, {0x2, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x4}, {0x4, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x3}, {0x6}, {0xa}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x3}, {0x3}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x1, 0x1}, {}, {0x4}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x5}], 0xff}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r5, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 4.261082102s ago: executing program 0 (id=17676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0xe, 0x8000, &(0x7f00000001c0)={0x11, 0x1, r6, 0x1, 0xdc, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r7, &(0x7f0000000780)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0x11, r6, 0x1, 0x5, 0x6, @random="34f51e8e0a5a"}, 0x14) 3.876445762s ago: executing program 1 (id=17677): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getpeername$inet6(r0, 0x0, 0x0) 3.818051554s ago: executing program 1 (id=17678): socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvfrom$l2tp6(r0, 0x0, 0x0, 0x40000002, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r0, &(0x7f0000000300)=""/212, 0xd4) 3.607588577s ago: executing program 0 (id=17679): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8000, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xfff7fff7}], 0x1c) listen(r0, 0xfffff789) r1 = accept(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xffff, 0x992f}, 0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x1000, 0x1000, 0x7ffe, 0x7a, 0x2a, 0x4, 0xfc}, 0x9c) 2.704014357s ago: executing program 2 (id=17683): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) 2.688830058s ago: executing program 0 (id=17684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='westwood', 0x8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)="a6", 0x1, 0x20040045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0xfffffffd}, 0x1c) 2.686939258s ago: executing program 4 (id=17685): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffff9) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) 2.654580505s ago: executing program 2 (id=17686): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040)=0x7f, 0x4) sendto$inet6(r0, &(0x7f0000000240)='\x00', 0x1, 0x40c0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) 2.55676607s ago: executing program 4 (id=17687): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008095}, 0x448d0) 2.556534256s ago: executing program 0 (id=17688): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e80), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf250d00000006000a000100000006000a00"], 0x24}}, 0x10) 2.556338452s ago: executing program 2 (id=17689): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x2004c082}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {0x1}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.360208232s ago: executing program 4 (id=17690): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000001300050026bd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB="80080000000000000c001a8008000480"], 0x2c}}, 0x20000000) 1.323421515s ago: executing program 2 (id=17691): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x4, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x21, 0x0, 0x0) recvfrom$l2tp6(r2, 0x0, 0x0, 0x40000002, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) read(r2, &(0x7f0000000300)=""/212, 0xd4) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000180)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x804c050) 1.272735657s ago: executing program 1 (id=17692): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xe, 0xb}, {0x6, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xa}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x3, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0xf}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1.272606636s ago: executing program 0 (id=17693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001640)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x43, 0x0, 0xfe, 0x0, 0x18, {[@window={0x9, 0x3, 0x3}, @mptcp=@remove_addr={0x1e, 0xed, 0xc, 0x0, "024d0da13a6a25a008299bddd63acaeb6635efa022d69dd7662d79ec9f5cd491525af9aa614eac4f2c3a9177a953329dfc877aa45928cefe8e6d60e169cee5d08a051db51e3cc8b4f88decace2883472e90f526fac10241c1efa2bc4f9a58c3f8ea28b541e0e55cf53b8658520d1745c227d369fee118454798a4d7e7d1df8bd5db4debd5929ff5c16b99bb7a161285222242d927b5b4c1831d640dae418e3898dd062d53b67fdfbfafd5835d24fbc7b474b58cbfa3b9b3a07dbe208fe2fcbe9bd6e2cb8feb3691edfe2091a29e0e04f2654527044345a275fc61b5206149e4fdc7737f532f9d154eea4"}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x12e) 1.272470195s ago: executing program 3 (id=17694): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad", @ANYRES32=0x0, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff3}, {0x10, 0xc}, {0xffe1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x4, 0x1, 0xd, 0x0, 0x0, @local, @mcast1, 0x7801, 0x80, 0x1, 0x286}}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 1.163112363s ago: executing program 3 (id=17695): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x17, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x8094) 1.059942408s ago: executing program 4 (id=17696): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000005000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x2) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{0x1, 0x401, 0x3, 0x7, 0x4}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x1, 0x6, 0x8, 0x3}}]}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc000041}, 0x20008000) 588.663552ms ago: executing program 3 (id=17697): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffefff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002380)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0xfff3, 0xc}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x2) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c002424090000ff8800000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 378.62327ms ago: executing program 4 (id=17698): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x8c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x60, 0x3, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x10000}]}}}, {0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000000}]}}}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000311bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 297.696856ms ago: executing program 2 (id=17699): r0 = socket(0x2d, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) 188.637022ms ago: executing program 0 (id=17700): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x2, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 186.1415ms ago: executing program 1 (id=17701): syz_emit_ethernet(0x50, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x1a, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @remote, [{0x2}]}}}}}}, 0x0) 107.044673ms ago: executing program 2 (id=17702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x3c, r1, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 83.300694ms ago: executing program 1 (id=17703): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000002c0)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc", 0x8f}, {&(0x7f0000000380)="7542473782798be019c27ed3", 0xc}, {&(0x7f0000000140)="b176d469f44ff7e206a24a3a5f3ad599d691d7eacc279df53034c44772ca112da355134ae64fde53dc0e681885ea73db24d2374acbdcbcd41031e424d4d9dc1a75ab21ae3655aa24d98e6dd8d0d62d4bff674bff364390e410", 0x59}], 0x3}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000640)="d032f362e4223afb374e8e4811fcab4e6325dc707d6cfcea52156bf7c6517245a00bb0932e4b76d5188f6978003e98e09b7b81f3a46adae65d507879490f51e1c49f399e407abbd5c12c2ce8eb7852799374357fa233dda2bf5eebef2063b6c382b0e5d670976c3e2a9f99c89b28cc900d59ca7fa732dd5b0c674da76b22a558325f874f000c9d731f0df041c312f5b10e6bd8257bbb9554f6a2140e7e08a4699c9e3d78f19604e7867101d4a8f99d299cd3dc2c9424d63b5e2fc682ef0cd7021b491776bb9cf4e1331bf84b6452569665b30356dce14a6eb5d31ea9", 0xdc}, {&(0x7f0000000400)="df11155bfce4c8cea07f2696365b4db301703afb8f395319a5", 0x19}, {&(0x7f00000008c0)="8d9e8a553f0069fa3785184ab18dfed981789dd065f45d8c84e113826fea0b38f4dd2ffa78cf509d274438b373f7af6a2cad1f0d33935d837cf707c07d0384374c749784143195c7118de14fc03f7bac755305aa0898f0078b1feb9cbad4206f1426a5d335e3542ab3e11d96d02ce83c71532809b4cfdd3c3d22bd22a8348ba129bc38cbc09937aacd7a4afe03debea7794c6326e903a989f876422317d8e47497f7aeb2b2b0ec4652b82cae804859ece1f49dcf11b8b2e3560b22f85f4cef988da04e", 0xc3}], 0x3}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000a40)="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", 0x1b5}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 4 (id=17704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x14, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x5}]}}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): rdma_op ffff88807d0989f0 conn xmit_rdma 0000000000000000 [ 1552.489739][T32572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15897'. [ 1552.512588][T32575] netlink: 'syz.0.15898': attribute type 3 has an invalid length. [ 1552.578098][T32578] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15899'. [ 1552.790268][T32588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15902'. [ 1552.987577][T32601] syzkaller1: entered promiscuous mode [ 1552.997756][T32601] syzkaller1: entered allmulticast mode [ 1553.028997][T32601] netlink: 'syz.3.15907': attribute type 1 has an invalid length. [ 1553.325711][T32615] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1553.482820][T32625] netlink: 'syz.1.15914': attribute type 2 has an invalid length. [ 1553.516760][T32627] netlink: 'syz.1.15914': attribute type 2 has an invalid length. [ 1553.648594][T32631] netlink: 'syz.0.15915': attribute type 5 has an invalid length. [ 1553.735486][T32639] netlink: 44 bytes leftover after parsing attributes in process `syz.0.15919'. [ 1553.786241][T32639] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15919'. [ 1554.270883][T32653] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1554.285508][T32653] syzkaller0: entered promiscuous mode [ 1554.292065][T32653] syzkaller0: entered allmulticast mode [ 1554.559792][T32688] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 1554.991672][T32716] syzkaller0: entered promiscuous mode [ 1554.998279][T32716] syzkaller0: entered allmulticast mode [ 1555.008995][T32718] netlink: 'syz.3.15938': attribute type 21 has an invalid length. [ 1555.335231][T16913] net_ratelimit: 8 callbacks suppressed [ 1555.335256][T16913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.424782][T32739] xfrm1: entered promiscuous mode [ 1555.449994][T32739] xfrm1: entered allmulticast mode [ 1555.484300][T32735] vlan0: entered promiscuous mode [ 1555.500288][T32735] geneve1: entered promiscuous mode [ 1555.506146][T32735] vlan0: entered allmulticast mode [ 1555.514169][T32735] geneve1: entered allmulticast mode [ 1555.576021][T32751] IPv6: NLM_F_CREATE should be specified when creating new route [ 1555.584614][T32751] netlink: 'syz.4.15948': attribute type 1 has an invalid length. [ 1555.816120][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1556.226274][ T304] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1556.252223][ T300] syzkaller1: entered promiscuous mode [ 1556.257927][ T300] syzkaller1: entered allmulticast mode [ 1556.325047][ T308] netlink: 'syz.4.15958': attribute type 10 has an invalid length. [ 1556.370827][ T8315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.435521][ T308] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1556.451064][T23035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.557909][ T318] __nla_validate_parse: 7 callbacks suppressed [ 1556.557933][ T318] netlink: 100 bytes leftover after parsing attributes in process `syz.1.15962'. [ 1556.661684][ T329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15966'. [ 1556.774139][T16927] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.849544][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1556.971011][ T346] netlink: 408 bytes leftover after parsing attributes in process `syz.3.15969'. [ 1556.971277][ T348] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 1557.014326][T30638] Bluetooth: hci2: command tx timeout [ 1557.197533][ T361] syzkaller0: entered promiscuous mode [ 1557.203332][ T361] syzkaller0: entered allmulticast mode [ 1557.259108][ T360] bond7 (unregistering): Released all slaves [ 1557.410217][T28787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.541343][ T375] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15979'. [ 1557.639503][ T379] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15980'. [ 1557.651044][ T379] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15980'. [ 1557.652679][T30638] Bluetooth: hci5: command 0x0405 tx timeout [ 1557.835008][ T390] tipc: Failed to remove unknown binding: 66,0,0/0:2918883040/2918883041 [ 1557.889605][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1557.914521][ T383] tipc: Failed to remove unknown binding: 66,0,0/0:2918883040/2918883041 [ 1558.065136][ T402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15988'. [ 1558.089811][ T402] openvswitch: netlink: EtherType 50a is less than min 600 [ 1558.276624][ T418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15993'. [ 1558.286037][ T418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1558.317176][ T420] netlink: 'syz.2.15994': attribute type 11 has an invalid length. [ 1558.326355][ T420] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.15994'. [ 1558.415523][ T424] netlink: 'syz.4.15996': attribute type 6 has an invalid length. [ 1558.490823][ T427] netlink: 'syz.4.15997': attribute type 1 has an invalid length. [ 1558.508611][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035f77000: rx timeout, send abort [ 1558.534203][ T429] netlink: 'syz.2.15995': attribute type 32 has an invalid length. [ 1558.539044][ T427] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1558.569291][ T430] bond1: (slave geneve2): making interface the new active one [ 1558.585130][ T430] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1558.594602][T23035] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1558.609170][T23035] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1558.631764][T23035] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1558.651721][T23035] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1558.676009][ T433] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15999'. [ 1558.720393][ T433] netlink: 'syz.4.15999': attribute type 7 has an invalid length. [ 1558.887087][ T440] bond5: (slave bond_slave_1): Device is not our slave [ 1558.902790][ T440] bond5: option active_slave: invalid value (bond_slave_1) [ 1558.921138][ T440] bond5 (unregistering): Released all slaves [ 1559.017000][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035f77000: abort rx timeout. Force session deactivation [ 1559.312245][ T470] x_tables: unsorted entry at hook 3 [ 1559.442783][ T474] netlink: 'syz.0.16010': attribute type 3 has an invalid length. [ 1559.541675][ T478] bpq0: entered promiscuous mode [ 1559.804156][ T491] atomic_op ffff88803748e198 conn xmit_atomic 0000000000000000 [ 1559.820808][ T495] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1559.944548][ T495] bond5: (slave lo): Enslaving as an active interface with an up link [ 1560.328688][ T532] syzkaller0: entered promiscuous mode [ 1560.336924][ T532] syzkaller0: entered allmulticast mode [ 1560.390249][ T539] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1560.412874][ T541] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1560.530986][ T8315] net_ratelimit: 10 callbacks suppressed [ 1560.531009][ T8315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.730846][ T553] pim6reg: entered allmulticast mode [ 1560.745393][ T554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.755809][ T554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.764674][ T554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.009530][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1561.108033][ T577] bond2: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1561.177124][ T577] bond2 (unregistering): Released all slaves [ 1561.257917][ T589] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.267786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.480216][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.495805][ T6236] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.549624][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.591947][ T604] __nla_validate_parse: 10 callbacks suppressed [ 1561.591967][ T604] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16048'. [ 1561.785641][ T609] netlink: 'syz.3.16051': attribute type 1 has an invalid length. [ 1561.797909][ T609] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.16051'. [ 1561.968429][ T618] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.16053'. [ 1562.113635][ T622] netlink: 'syz.0.16054': attribute type 4 has an invalid length. [ 1562.151302][ T623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16055'. [ 1562.225603][ T623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16055'. [ 1562.363096][ T623] netlink: 'syz.3.16055': attribute type 1 has an invalid length. [ 1562.471848][ T641] wireguard0: entered promiscuous mode [ 1562.477553][ T641] wireguard0: entered allmulticast mode [ 1562.512861][ T641] team0: Device wireguard0 is of different type [ 1562.586051][ T652] netlink: 'syz.4.16059': attribute type 2 has an invalid length. [ 1562.624651][ T643] wireguard0: entered promiscuous mode [ 1562.638089][ T643] wireguard0: entered allmulticast mode [ 1562.652497][ T643] team0: Device wireguard0 is of different type [ 1562.898090][ T659] netlink: 44 bytes leftover after parsing attributes in process `syz.4.16066'. [ 1562.948324][ T664] syzkaller0: entered allmulticast mode [ 1563.366011][ T685] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16075'. [ 1563.774286][ T695] netlink: 228 bytes leftover after parsing attributes in process `syz.0.16078'. [ 1564.158590][ T703] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16080'. [ 1564.575492][T16906] IPVS: starting estimator thread 0... [ 1564.679842][ T722] IPVS: using max 26 ests per chain, 62400 per kthread [ 1564.856612][ T733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16088'. [ 1565.021507][T16906] IPVS: starting estimator thread 0... [ 1565.109641][ T743] IPVS: using max 23 ests per chain, 55200 per kthread [ 1565.194535][ T751] batadv_slave_1: entered promiscuous mode [ 1565.211892][ T749] batadv_slave_1: left promiscuous mode [ 1565.293610][ T755] bond0: entered allmulticast mode [ 1565.298807][ T755] bond_slave_0: entered allmulticast mode [ 1565.305314][ T755] bond_slave_1: entered allmulticast mode [ 1565.312190][ T755] bridge_slave_1: entered allmulticast mode [ 1565.810645][ T8315] net_ratelimit: 20 callbacks suppressed [ 1565.810668][ T8315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.884892][ T791] nbd: must specify a size in bytes for the device [ 1565.895494][T16906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.209832][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1566.417875][ T810] netlink: 'syz.4.16113': attribute type 4 has an invalid length. [ 1566.458617][ T808] team0 (unregistering): Port device team_slave_0 removed [ 1566.481737][ T811] netlink: 'syz.4.16113': attribute type 4 has an invalid length. [ 1566.504812][ T808] team0 (unregistering): Port device team_slave_1 removed [ 1566.651219][ T805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1566.722442][ T818] netlink: 'syz.4.16114': attribute type 2 has an invalid length. [ 1566.806985][ T822] netlink: 'syz.2.16116': attribute type 1 has an invalid length. [ 1566.850220][T16913] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.860226][ T822] __nla_validate_parse: 4 callbacks suppressed [ 1566.860244][ T822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16116'. [ 1567.250300][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1567.319976][ T837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.329339][ T841] netlink: 'syz.0.16123': attribute type 4 has an invalid length. [ 1567.354917][ T841] netlink: 'syz.0.16123': attribute type 4 has an invalid length. [ 1567.373660][ T837] bridge_slave_0 (unregistering): left allmulticast mode [ 1567.402721][ T837] bridge_slave_0 (unregistering): left promiscuous mode [ 1567.412715][ T841] netlink: 'syz.0.16123': attribute type 4 has an invalid length. [ 1567.419743][ T837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.430373][ T841] netlink: 'syz.0.16123': attribute type 4 has an invalid length. [ 1567.486068][ T841] netlink: 'syz.0.16123': attribute type 4 has an invalid length. [ 1567.511189][ T841] netlink: 'syz.0.16123': attribute type 4 has an invalid length. [ 1567.658843][ T857] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16127'. [ 1567.673462][ T857] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16127'. [ 1567.808591][ T861] team0 (unregistering): Port device team_slave_0 removed [ 1567.866592][ T861] team0 (unregistering): Port device team_slave_1 removed [ 1567.948349][ T869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16133'. [ 1568.008165][ T874] bond6: entered promiscuous mode [ 1568.018303][ T873] netlink: 244 bytes leftover after parsing attributes in process `syz.1.16134'. [ 1568.032100][ T876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16133'. [ 1568.055546][ T874] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1568.097005][ T882] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16131'. [ 1568.289524][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1568.441159][ T902] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.16141'. [ 1568.604558][ T915] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1568.758649][ T942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16147'. [ 1568.770095][T30638] Bluetooth: hci0: command 0x0c1a tx timeout [ 1568.788368][ T942] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16147'. [ 1568.838665][ T915] veth5: entered promiscuous mode [ 1568.864434][ T915] bond5: (slave veth5): Enslaving as an active interface with a down link [ 1568.888061][ T925] vlan1: entered allmulticast mode [ 1568.893577][ T925] bond5: entered allmulticast mode [ 1568.901901][ T925] bond5: (slave vlan1): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1568.977427][ T939] bridge0: port 4(ipvlan2) entered blocking state [ 1568.993093][ T939] bridge0: port 4(ipvlan2) entered disabled state [ 1569.021687][ T939] ipvlan2: entered allmulticast mode [ 1569.027118][ T939] bridge0: entered allmulticast mode [ 1569.046273][ T939] ipvlan2: left allmulticast mode [ 1569.053494][ T939] bridge0: left allmulticast mode [ 1569.096050][ T942] bridge5: entered promiscuous mode [ 1569.102408][ T942] bridge5: entered allmulticast mode [ 1569.108013][ T6236] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.117306][ T6236] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.126484][ T956] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1569.157686][ T6236] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.179698][ T964] veth0: entered promiscuous mode [ 1569.185220][ T6236] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1569.329569][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1569.920398][ T960] veth0: left promiscuous mode [ 1570.369619][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1571.409585][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1571.634748][ T954] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1571.867718][ T981] bridge_slave_1: left promiscuous mode [ 1571.875286][ T981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1571.882071][ T985] __nla_validate_parse: 2 callbacks suppressed [ 1571.882090][ T985] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16158'. [ 1571.945017][ T986] validate_nla: 65 callbacks suppressed [ 1571.945037][ T986] netlink: 'syz.4.16159': attribute type 32 has an invalid length. [ 1571.962823][ T988] netlink: 52 bytes leftover after parsing attributes in process `syz.3.16161'. [ 1571.975210][ T986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16159'. [ 1571.988858][ T990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16157'. [ 1572.038272][ T986] bond2: Setting coupled_control to off (0) [ 1572.406337][ T1015] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16168'. [ 1572.450367][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1572.629047][ T1023] bond8: option miimon: invalid value (18446744073709551585) [ 1572.659719][ T1023] bond8: option miimon: allowed values 0 - 2147483647 [ 1572.693325][ T1023] bond8 (unregistering): Released all slaves [ 1572.761117][ T1024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16169'. [ 1572.882967][ T1044] netlink: 64 bytes leftover after parsing attributes in process `syz.4.16172'. [ 1572.895263][ T1044] netlink: 'syz.4.16172': attribute type 1 has an invalid length. [ 1572.906567][ T1040] netlink: 'syz.1.16174': attribute type 83 has an invalid length. [ 1573.246652][ T1069] netlink: 'syz.2.16180': attribute type 1 has an invalid length. [ 1573.339036][ T1072] netlink: 56 bytes leftover after parsing attributes in process `syz.3.16179'. [ 1573.489723][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1573.512675][ T1072] bond8 (unregistering): Released all slaves [ 1573.950781][ T1091] sctp: [Deprecated]: syz.0.16186 (pid 1091) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1573.950781][ T1091] Use struct sctp_sack_info instead [ 1574.107035][ T1103] x_tables: duplicate underflow at hook 3 [ 1574.112034][ T1101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16190'. [ 1574.142482][ T1101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1574.342407][ T1110] macvtap1: entered promiscuous mode [ 1574.373279][ T1110] macvtap1: entered allmulticast mode [ 1574.378966][ T1110] veth1_vlan: entered allmulticast mode [ 1574.403580][ T1119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16194'. [ 1574.418909][ T1114] macvtap2: entered promiscuous mode [ 1574.427306][ T1114] macvtap2: entered allmulticast mode [ 1574.529653][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1574.562122][ T1128] netlink: 'syz.0.16196': attribute type 3 has an invalid length. [ 1574.620010][ T1134] netlink: 'syz.0.16196': attribute type 3 has an invalid length. [ 1574.677082][ T1136] syzkaller0: entered allmulticast mode [ 1574.757525][ T1136] syzkaller0 (unregistering): left allmulticast mode [ 1574.892063][ T1142] delete_channel: no stack [ 1574.901253][ T1146] nbd: couldn't find a device at index 0 [ 1575.044994][ T1156] netlink: 'syz.0.16205': attribute type 83 has an invalid length. [ 1575.373943][ T1167] bond7: peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 1575.433689][ T1167] bond7: entered promiscuous mode [ 1575.438891][ T1167] bond7: entered allmulticast mode [ 1575.487263][ T1167] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1575.570286][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1575.663126][ T1177] netlink: 'syz.4.16214': attribute type 5 has an invalid length. [ 1575.753174][ T1149] lec:lec_atm_close: lec0: Shut down! [ 1575.860304][ T1199] openvswitch: netlink: Multiple metadata blocks provided [ 1576.138892][ T1213] IPv6: NLM_F_CREATE should be specified when creating new route [ 1576.143493][ T1214] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 1576.180946][ T1214] netlink: 'syz.1.16221': attribute type 3 has an invalid length. [ 1576.210793][ T1218] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1576.568213][ T1243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1576.609534][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1576.699725][ T1243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1576.774363][ T1247] nbd11: detected capacity change from 0 to 127 [ 1576.796200][ T1245] block nbd12: Unsupported socket: should be TCP or UNIX. [ 1576.830817][ T1253] bond5: (slave lo): Releasing backup interface [ 1576.863182][ T1253] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1576.891780][ T1253] batman_adv: batadv0: Interface deactivated: dummy0 [ 1576.898901][ T1253] batman_adv: batadv0: Removing interface: dummy0 [ 1576.926816][ T1253] ¾x9ÿ: left allmulticast mode [ 1576.957639][ T1260] netlink: 'syz.2.16235': attribute type 11 has an invalid length. [ 1576.965178][ T1253] ¾x9ÿ: left promiscuous mode [ 1576.976958][ T1253] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1577.016137][ T1253] bond0: (slave bridge_slave_1): Releasing backup interface [ 1577.017997][ T1260] __nla_validate_parse: 8 callbacks suppressed [ 1577.018014][ T1260] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.16235'. [ 1577.043755][ T1253] bridge_slave_1: left allmulticast mode [ 1577.076460][ T1253] bond4: (slave veth0_to_bond): Releasing active interface [ 1577.134804][ T1253] bond0: (slave bond_slave_0): Releasing backup interface [ 1577.164431][ T1253] bond_slave_0: left allmulticast mode [ 1577.196119][ T1253] bond0: (slave bond_slave_1): Releasing backup interface [ 1577.228131][ T1253] bond_slave_1: left allmulticast mode [ 1577.261588][ T1253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1577.271842][ T1253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1577.282666][ T1253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1577.290763][ T1253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1577.300788][ T1253] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1577.374806][ T1277] bond6: option packets_per_slave: invalid value (18446744073709551615) [ 1577.383538][ T1277] bond6: option packets_per_slave: allowed values 0 - 65535 [ 1577.394724][ T1277] bond6 (unregistering): Released all slaves [ 1577.433281][ T1285] netlink: 'syz.1.16244': attribute type 13 has an invalid length. [ 1577.442630][ T6521] block nbd11: Receive control failed (result -104) [ 1577.649527][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1577.749370][ T1318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16251'. [ 1578.252938][ T1293] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1578.434135][ T1331] bond6: option mode: unable to set because the bond device has slaves [ 1578.666518][ T1346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16256'. [ 1578.689531][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1578.726198][ T1346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16256'. [ 1578.732561][ T1349] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16257'. [ 1578.745719][ T1350] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16257'. [ 1578.755773][ T1346] netlink: 'syz.3.16256': attribute type 11 has an invalid length. [ 1578.778608][ T1349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16257'. [ 1579.327176][ T1382] rdma_rxe: rxe_newlink: failed to add macvlan0 [ 1579.417990][ T1386] netlink: 'syz.4.16267': attribute type 21 has an invalid length. [ 1579.430409][ T1386] netlink: 152 bytes leftover after parsing attributes in process `syz.4.16267'. [ 1579.566748][ T1385] netlink: 14 bytes leftover after parsing attributes in process `syz.2.16266'. [ 1579.618629][ T1385] bond0 (unregistering): left promiscuous mode [ 1579.628078][ T1385] bond_slave_0: left promiscuous mode [ 1579.635322][ T1385] bond_slave_1: left promiscuous mode [ 1579.635415][ T1399] sctp: [Deprecated]: syz.0.16271 (pid 1399) Use of int in maxseg socket option. [ 1579.635415][ T1399] Use struct sctp_assoc_value instead [ 1579.657424][ T1385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1579.668483][ T1385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1579.678821][ T1385] bond0 (unregistering): Released all slaves [ 1579.729526][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1579.794521][ T1404] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20001 [ 1580.275488][ T1437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16280'. [ 1580.562957][ T1448] netlink: 'syz.2.16282': attribute type 2 has an invalid length. [ 1580.770151][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1580.924087][ T1466] syzkaller0: entered promiscuous mode [ 1580.934360][ T1466] syzkaller0: entered allmulticast mode [ 1580.958350][ T1468] netlink: 'syz.2.16289': attribute type 2 has an invalid length. [ 1581.169693][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5420 ms [ 1581.177766][ C0] lec:lec_tx_timeout: lec0 [ 1581.243955][ T1478] SET target dimension over the limit! [ 1581.380759][ T1486] openvswitch: netlink: Message has -2 unknown bytes. [ 1581.435334][ T1484] tipc: Started in network mode [ 1581.440596][ T1484] tipc: Node identity 4, cluster identity 4711 [ 1581.446786][ T1484] tipc: Node number set to 4 [ 1581.464046][ T1489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1581.504705][ T1489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1581.522633][ T1489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1581.619891][ T1489] net_ratelimit: 20 callbacks suppressed [ 1581.619913][ T1489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1581.647117][ T1497] bridge0: port 4(gretap0) entered blocking state [ 1581.660535][ T1497] bridge0: port 4(gretap0) entered disabled state [ 1581.667791][ T1497] gretap0: entered allmulticast mode [ 1581.698648][ T1497] gretap0: entered promiscuous mode [ 1581.707372][ T1497] bridge0: port 4(gretap0) entered blocking state [ 1581.714042][ T1497] bridge0: port 4(gretap0) entered forwarding state [ 1581.723769][ T1489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1581.743074][ T1489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1581.769344][ T1507] netlink: 'syz.0.16301': attribute type 39 has an invalid length. [ 1581.809524][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1581.871603][ T1489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1581.905671][ T1489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1581.926606][ T1489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1581.964540][ T1489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1581.985311][ T1489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1582.004902][ T1489] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1582.131287][ T1521] __nla_validate_parse: 4 callbacks suppressed [ 1582.131311][ T1521] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.16306'. [ 1582.390648][ T1530] syzkaller0: entered promiscuous mode [ 1582.407375][ T1530] syzkaller0: entered allmulticast mode [ 1582.537066][ T1545] netlink: 'syz.0.16310': attribute type 1 has an invalid length. [ 1582.602705][ T1545] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1582.835330][ T1559] syzkaller0: entered promiscuous mode [ 1583.173938][ T1582] bond0: entered promiscuous mode [ 1583.179227][ T1582] bond_slave_0: entered promiscuous mode [ 1583.186635][ T1582] bond_slave_1: entered promiscuous mode [ 1583.221417][ T1582] batadv0: entered promiscuous mode [ 1583.231772][ T1582] debugfs: 'hsr1' already exists in 'hsr' [ 1583.237583][ T1582] Cannot create hsr debugfs directory [ 1583.239626][ T1593] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.16324'. [ 1583.244837][ T1582] hsr1: entered promiscuous mode [ 1583.259920][ T1582] hsr1: entered allmulticast mode [ 1583.265092][ T1582] bond0: entered allmulticast mode [ 1583.271277][ T1582] bond_slave_0: entered allmulticast mode [ 1583.277050][ T1582] bond_slave_1: entered allmulticast mode [ 1583.289757][ T1594] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.16324'. [ 1583.301688][ T1582] batadv0: entered allmulticast mode [ 1583.304330][ T1597] netlink: 'syz.2.16325': attribute type 2 has an invalid length. [ 1583.307682][ T1582] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1583.323122][ T1597] netlink: 'syz.2.16325': attribute type 8 has an invalid length. [ 1583.332326][ T1582] bond0: left promiscuous mode [ 1583.335372][ T1597] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16325'. [ 1583.338482][ T1582] bond_slave_0: left promiscuous mode [ 1583.353815][ T1582] bond_slave_1: left promiscuous mode [ 1583.361499][ T1582] batadv0: left promiscuous mode [ 1583.384869][ T1598] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16325'. [ 1583.556591][ T1604] veth0: entered promiscuous mode [ 1583.602901][ T1604] veth0: left promiscuous mode [ 1583.796751][ T1627] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16334'. [ 1583.853724][ T1629] sctp: [Deprecated]: syz.3.16335 (pid 1629) Use of int in max_burst socket option. [ 1583.853724][ T1629] Use struct sctp_assoc_value instead [ 1583.895628][ T1631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16336'. [ 1583.928042][ T1631] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16336'. [ 1583.938467][ T1633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16337'. [ 1583.977850][ T1633] bond8: entered promiscuous mode [ 1584.006873][ T1633] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1584.057460][ T1639] netlink: 72 bytes leftover after parsing attributes in process `syz.2.16338'. [ 1584.188253][ T1645] vcan1: entered promiscuous mode [ 1584.212284][ T1645] vcan1: entered allmulticast mode [ 1584.246058][ T1649] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 1584.681852][ T1686] syzkaller0: entered promiscuous mode [ 1584.708175][ T1686] syzkaller0: entered allmulticast mode [ 1585.071964][ T1699] netlink: 'syz.0.16352': attribute type 8 has an invalid length. [ 1585.248941][ T1704] x_tables: duplicate underflow at hook 1 [ 1585.256718][ T1701] netlink: 'syz.4.16355': attribute type 10 has an invalid length. [ 1585.275532][ T1704] syzkaller0: entered promiscuous mode [ 1585.309661][ T1704] syzkaller0: entered allmulticast mode [ 1585.329232][ T1701] team0: Device vxcan1 is of different type [ 1585.737878][ T1728] geneve3: entered promiscuous mode [ 1585.756868][T18201] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 55928 - 0 [ 1585.766019][T18201] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 55928 - 0 [ 1585.802907][T18201] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 55928 - 0 [ 1585.910965][T18201] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 55928 - 0 [ 1586.008045][ T1750] netlink: 'syz.2.16364': attribute type 39 has an invalid length. [ 1586.035759][ T1748] wg1 speed is unknown, defaulting to 1000 [ 1586.048843][ T1748] batadv0 speed is unknown, defaulting to 1000 [ 1586.366988][ T1759] netlink: 'syz.1.16369': attribute type 1 has an invalid length. [ 1586.538578][ T1759] bond3: entered promiscuous mode [ 1586.542163][T16903] page_pool_release_retry() stalled pool shutdown: id 153, 1 inflight 1026 sec [ 1586.547485][ T1759] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1586.765488][ T1759] bond3: (slave bridge5): making interface the new active one [ 1586.777472][ T1759] bridge5: entered promiscuous mode [ 1586.786802][ T1759] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 1586.823647][ T1773] syzkaller0: entered promiscuous mode [ 1586.829185][ T1773] syzkaller0: entered allmulticast mode [ 1586.844709][ T1773] net_ratelimit: 37 callbacks suppressed [ 1586.844734][ T1773] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1587.009964][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1588.049611][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1588.833865][ T1738] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1589.013211][ T1786] __nla_validate_parse: 11 callbacks suppressed [ 1589.013236][ T1786] netlink: 236 bytes leftover after parsing attributes in process `syz.3.16379'. [ 1589.090536][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1589.107158][ T1791] openvswitch: netlink: IP tunnel dst address not specified [ 1589.112519][ T7833] tipc: Subscription rejected, illegal request [ 1589.127043][ T1793] netlink: 'syz.1.16377': attribute type 27 has an invalid length. [ 1589.267406][ T1800] netlink: 48 bytes leftover after parsing attributes in process `syz.1.16382'. [ 1589.318384][ T1806] netlink: 'syz.2.16383': attribute type 3 has an invalid length. [ 1589.763077][ T1832] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16391'. [ 1589.803449][ T1832] openvswitch: netlink: Flow key attr not present in new flow. [ 1589.933360][ T1838] tipc: Started in network mode [ 1589.938344][ T1838] tipc: Node identity 56851e4cee5a, cluster identity 4711 [ 1589.969257][ T1838] tipc: Enabled bearer , priority 0 [ 1589.984982][ T9398] lec:lec_start_xmit: lec0:No lecd attached [ 1590.013141][ T1843] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16394'. [ 1590.033040][ T1846] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16393'. [ 1590.048863][ T1838] +: renamed from syzkaller0 [ 1590.067782][ T1838] tipc: Disabling bearer [ 1590.121737][ T1841] wg1 speed is unknown, defaulting to 1000 [ 1590.127711][ T1849] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16395'. [ 1590.139635][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1590.154088][ T1849] veth0_virt_wifi: entered promiscuous mode [ 1590.154603][ T1851] netlink: 212336 bytes leftover after parsing attributes in process `syz.3.16396'. [ 1590.177165][ T1841] batadv0 speed is unknown, defaulting to 1000 [ 1590.285561][ T1851] netlink: 'syz.3.16396': attribute type 1 has an invalid length. [ 1590.994000][ T1894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16407'. [ 1591.169519][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1592.209640][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1593.054927][ T1849] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1593.249599][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1593.294058][ T1905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16411'. [ 1593.423281][ T1916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16413'. [ 1593.470277][ T1916] bridge_slave_1: left allmulticast mode [ 1593.483322][ T1916] bridge_slave_1: left promiscuous mode [ 1593.509121][ T1916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.565308][ T1916] bridge_slave_0: left allmulticast mode [ 1593.590536][ T1916] bridge_slave_0: left promiscuous mode [ 1593.596494][ T1916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1593.691115][ T1934] netlink: 'syz.2.16415': attribute type 1 has an invalid length. [ 1593.699007][ T1934] netlink: 'syz.2.16415': attribute type 2 has an invalid length. [ 1593.740490][ T1934] netlink: 'syz.2.16415': attribute type 16 has an invalid length. [ 1593.764557][ T1934] netlink: 'syz.2.16415': attribute type 17 has an invalid length. [ 1593.976854][ T1928] bond3: entered promiscuous mode [ 1594.056461][ T1934] 8021q: adding VLAN 0 to HW filter on device team0 [ 1594.070505][ T1934] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1594.101903][ T1939] vlan3: entered promiscuous mode [ 1594.107240][ T1939] vlan3: entered allmulticast mode [ 1594.117064][ T1939] hsr_slave_1: entered allmulticast mode [ 1594.289523][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1594.342177][ T1954] netlink: 'syz.3.16420': attribute type 1 has an invalid length. [ 1594.377238][ T1931] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1594.407785][ T1931] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1594.469229][ T1956] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1595.022856][ T1982] "syz.1.16431" (1982) uses obsolete ecb(arc4) skcipher [ 1595.127119][ T1984] __nla_validate_parse: 1 callbacks suppressed [ 1595.127142][ T1984] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16432'. [ 1595.169732][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5180 ms [ 1595.177841][ C0] lec:lec_tx_timeout: lec0 [ 1595.329532][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1595.366604][ T1997] netlink: 'syz.2.16435': attribute type 21 has an invalid length. [ 1595.396481][ T1997] netlink: 132 bytes leftover after parsing attributes in process `syz.2.16435'. [ 1595.533899][ T2001] wg1 speed is unknown, defaulting to 1000 [ 1595.540273][T15523] IPVS: starting estimator thread 0... [ 1595.548891][ T2003] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1595.585015][ T2003] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1595.593547][ T2001] batadv0 speed is unknown, defaulting to 1000 [ 1595.629852][ T2004] IPVS: using max 29 ests per chain, 69600 per kthread [ 1595.784127][ T2022] SET target dimension over the limit! [ 1596.055693][ T2035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16442'. [ 1596.085384][ T2033] : entered promiscuous mode [ 1596.110978][ T2037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16445'. [ 1596.216791][ T2042] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1596.369520][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1596.855235][ T2043] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16448'. [ 1597.049289][ T2061] netlink: 'syz.1.16453': attribute type 1 has an invalid length. [ 1597.136730][ T2066] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1597.143851][ T2066] 0·: hsr_addr_subst_dest: Unknown node [ 1597.276938][ T2073] netlink: 'syz.4.16456': attribute type 1 has an invalid length. [ 1597.410040][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1597.544287][ T2073] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1597.584274][ T2093] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1597.662597][ T2074] bond4: (slave veth0_to_bond): making interface the new active one [ 1597.702210][ T2074] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1598.003406][ T2106] netem: change failed [ 1598.173849][ T2115] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16464'. [ 1598.449520][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1599.489633][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1599.498008][T30638] Bluetooth: hci2: command 0x0406 tx timeout [ 1600.529760][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1601.569589][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1602.609566][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1603.649598][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1604.699575][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1605.730017][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1606.769594][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1607.021904][ T1694] block nbd11: Possible stuck request ffff888026d40000: control (read@0,1024B). Runtime 30 seconds [ 1607.035379][ T1694] block nbd11: Possible stuck request ffff888026d40200: control (read@1024,1024B). Runtime 30 seconds [ 1607.047170][ T1694] block nbd11: Possible stuck request ffff888026d40400: control (read@2048,1024B). Runtime 30 seconds [ 1607.058289][ T1694] block nbd11: Possible stuck request ffff888026d40600: control (read@3072,1024B). Runtime 30 seconds [ 1607.653768][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1607.667282][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1607.674378][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1607.809529][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1608.014595][T23035] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 1608.093865][T23035] bond9 (unregistering): (slave bridge5): Releasing backup interface [ 1608.234431][T23035] bond0 (unregistering): Released all slaves [ 1608.247158][T23035] bond1 (unregistering): (slave veth3): Releasing active interface [ 1608.256535][T23035] bond1 (unregistering): Released all slaves [ 1608.271066][T23035] bond2 (unregistering): Released all slaves [ 1608.284832][T23035] bond3 (unregistering): Released all slaves [ 1608.300896][T23035] bond4 (unregistering): Released all slaves [ 1608.315968][T23035] bond5 (unregistering): Released all slaves [ 1608.334015][T23035] bond6 (unregistering): Released all slaves [ 1608.347615][T23035] bond7 (unregistering): Released all slaves [ 1608.365010][T23035] bond8 (unregistering): Released all slaves [ 1608.382866][T23035] bond9 (unregistering): Released all slaves [ 1608.399108][T23035] bond10 (unregistering): Released all slaves [ 1608.414284][T23035] bond11 (unregistering): Released all slaves [ 1608.436397][T23035] bond12 (unregistering): Released all slaves [ 1608.626703][T23035] : left promiscuous mode [ 1608.680812][T23035] : left promiscuous mode [ 1608.752437][T23035] tipc: Left network mode [ 1608.849552][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1608.955704][T23035] hsr_slave_1: left promiscuous mode [ 1609.472716][T23035] IPVS: stop unused estimator thread 0... [ 1609.889578][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1610.929570][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1611.969589][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1613.019575][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1613.170238][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5500 ms [ 1613.178303][ C0] lec:lec_tx_timeout: lec0 [ 1614.050090][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1615.089586][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1616.129892][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1617.169555][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1618.209576][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1619.249573][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1619.344665][ T2122] netlink: 'syz.4.16470': attribute type 1 has an invalid length. [ 1619.488834][ T2122] bond5: entered promiscuous mode [ 1619.521527][ T2122] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1619.586928][ T2135] macvtap2: entered allmulticast mode [ 1619.664076][ T2122] bond5: (slave bridge0): making interface the new active one [ 1619.696353][ T2122] bridge0: entered promiscuous mode [ 1619.710667][ T2152] IPv6: NLM_F_CREATE should be specified when creating new route [ 1619.734705][ T2122] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 1619.787401][ T2156] "syz.0.16477" (2156) uses obsolete ecb(arc4) skcipher [ 1620.071164][ T2168] tipc: Enabled bearer , priority 0 [ 1620.090576][ T2168] syzkaller0: entered promiscuous mode [ 1620.096848][ T2168] syzkaller0: entered allmulticast mode [ 1620.137160][ T2165] tipc: Resetting bearer [ 1620.248899][ T2165] tipc: Disabling bearer [ 1620.289507][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1620.479934][ T2195] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16489'. [ 1620.537098][T16913] batadv0 speed is unknown, defaulting to 1000 [ 1620.697044][ T2209] netlink: 'syz.3.16493': attribute type 1 has an invalid length. [ 1620.751714][ T2209] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1620.774323][ T2213] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16494'. [ 1620.926248][ T2223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16498'. [ 1621.330035][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1621.428419][ T2260] netlink: 'syz.0.16505': attribute type 9 has an invalid length. [ 1621.527628][ T2263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16505'. [ 1621.732934][ T2269] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16509'. [ 1622.370045][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1623.419499][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1624.458907][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1624.638359][ T2258] syzkaller0: entered promiscuous mode [ 1624.644466][ T2258] syzkaller0: entered allmulticast mode [ 1624.660456][ T2281] tipc: New replicast peer: 255.255.255.255 [ 1624.668535][ T2281] tipc: Enabled bearer , priority 10 [ 1624.775726][ T2286] syzkaller0: entered promiscuous mode [ 1624.782509][ T2286] syzkaller0: entered allmulticast mode [ 1624.792114][ T2300] netlink: 'syz.1.16517': attribute type 1 has an invalid length. [ 1625.069157][ T2305] bond4: (slave gretap1): making interface the new active one [ 1625.082906][ T2305] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 1625.131807][T30638] Bluetooth: hci4: command 0x0401 tx timeout [ 1625.489541][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1625.795668][ T2322] ip6erspan0: entered promiscuous mode [ 1625.820407][ T2322] bridge0: port 1(ip6erspan0) entered blocking state [ 1625.849871][ T2322] bridge0: port 1(ip6erspan0) entered disabled state [ 1625.888599][ T2322] ip6erspan0: entered allmulticast mode [ 1625.922509][ T2340] netlink: 260 bytes leftover after parsing attributes in process `syz.3.16525'. [ 1626.111423][ T2347] sock: sock_timestamping_bind_phc: sock not bind to device [ 1626.441305][ T2362] veth5: entered promiscuous mode [ 1626.529499][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1626.598220][ T2376] netlink: 9 bytes leftover after parsing attributes in process `syz.4.16538'. [ 1626.736009][ T2376] 0·: renamed from hsr_slave_1 (while UP) [ 1626.747286][ T2383] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16539'. [ 1626.766134][ T2376] 0·: entered allmulticast mode [ 1626.774767][ T2376] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1626.838624][ T2390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16541'. [ 1626.997967][ T2401] netlink: 'syz.1.16543': attribute type 83 has an invalid length. [ 1627.438415][ T2431] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1627.492645][ T2433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16551'. [ 1627.512012][ T2436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1627.540321][ T2436] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16552'. [ 1627.574406][ T2436] netlink: 'syz.3.16552': attribute type 5 has an invalid length. [ 1627.582484][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1627.616687][ T2433] netlink: 'syz.0.16551': attribute type 32 has an invalid length. [ 1627.629597][ T2436] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16552'. [ 1627.660664][ T2436] geneve3: entered promiscuous mode [ 1627.666166][ T2436] geneve3: entered allmulticast mode [ 1627.674378][T23039] netdevsim netdevsim3 : set [1, 2] type 2 family 0 port 256 - 0 [ 1627.702625][T23039] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 256 - 0 [ 1627.751596][T23039] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 256 - 0 [ 1627.771662][T23039] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 256 - 0 [ 1627.981541][ T2457] netlink: 'syz.3.16557': attribute type 2 has an invalid length. [ 1628.091858][ T2478] xt_limit: Overflow, try lower: 604147548/4200216962 [ 1628.168835][ T2482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16563'. [ 1628.209339][ T2484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1628.250605][ T2484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1628.439276][ T2484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1628.480487][ T2504] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16564'. [ 1628.513195][ T2498] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1628.609592][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1628.653949][ T2515] netlink: 'syz.1.16568': attribute type 1 has an invalid length. [ 1628.662287][ T2515] netlink: 224 bytes leftover after parsing attributes in process `syz.1.16568'. [ 1628.844952][ T2522] netlink: 'syz.1.16571': attribute type 1 has an invalid length. [ 1628.870401][ T2522] netlink: 'syz.1.16571': attribute type 2 has an invalid length. [ 1629.147452][ T2543] netlink: 'syz.2.16575': attribute type 27 has an invalid length. [ 1629.401799][ T2550] netlink: 'syz.2.16577': attribute type 2 has an invalid length. [ 1629.649553][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1630.209910][T30638] Bluetooth: hci3: command 0x0406 tx timeout [ 1630.542376][ T2608] xt_l2tp: wrong L2TP version: 0 [ 1630.690283][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1630.758156][ T2633] syzkaller0: entered promiscuous mode [ 1630.764091][ T2633] syzkaller0: entered allmulticast mode [ 1630.909891][ T2655] netlink: 'syz.2.16595': attribute type 1 has an invalid length. [ 1631.009385][ T2657] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 1631.022616][ T2662] __nla_validate_parse: 75 callbacks suppressed [ 1631.022637][ T2662] netlink: 44 bytes leftover after parsing attributes in process `syz.4.16597'. [ 1631.150783][ T2659] macvlan0: entered promiscuous mode [ 1631.165128][ T2659] macvlan0: entered allmulticast mode [ 1631.204505][ T2655] bond6: (slave gretap2): making interface the new active one [ 1631.242973][ T2655] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 1631.326141][ T2675] bond5: option arp_all_targets: invalid value (18446744073709551613) [ 1631.357243][ T2675] bond5 (unregistering): Released all slaves [ 1631.373307][ T2681] xt_hashlimit: size too large, truncated to 1048576 [ 1631.729500][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1632.167982][ T2734] team_slave_0: entered allmulticast mode [ 1632.193880][ T2734] team_slave_0: entered promiscuous mode [ 1632.475206][ T2746] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16614'. [ 1632.514253][ T2746] openvswitch: netlink: Flow key attr not present in new flow. [ 1632.675178][ T2729] netlink: 'syz.4.16609': attribute type 1 has an invalid length. [ 1632.709272][ T2729] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1632.769560][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1633.096514][ T2775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16622'. [ 1633.119340][ T2777] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16621'. [ 1633.141856][ T2777] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16621'. [ 1633.809766][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1634.130768][ T6521] Bluetooth: hci5: command 0x0405 tx timeout [ 1634.175486][ T2822] netlink: 'syz.3.16630': attribute type 1 has an invalid length. [ 1634.364590][ T2838] netlink: 'syz.1.16634': attribute type 5 has an invalid length. [ 1634.373317][ T2838] netlink: 140 bytes leftover after parsing attributes in process `syz.1.16634'. [ 1634.859534][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1635.889519][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1636.212239][ T2786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1636.463294][ T2860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16637'. [ 1636.524213][ T2872] netlink: 'syz.4.16641': attribute type 1 has an invalid length. [ 1636.706240][ T2879] netlink: 'syz.4.16644': attribute type 3 has an invalid length. [ 1636.790798][ T2885] syzkaller0: entered promiscuous mode [ 1636.796358][ T2885] syzkaller0: entered allmulticast mode [ 1636.823232][ T2885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16643'. [ 1636.855259][ T2889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16648'. [ 1636.929519][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1637.099600][ T1694] block nbd11: Possible stuck request ffff888026d40000: control (read@0,1024B). Runtime 60 seconds [ 1637.112827][ T1694] block nbd11: Possible stuck request ffff888026d40200: control (read@1024,1024B). Runtime 60 seconds [ 1637.125075][ T1694] block nbd11: Possible stuck request ffff888026d40400: control (read@2048,1024B). Runtime 60 seconds [ 1637.136669][ T1694] block nbd11: Possible stuck request ffff888026d40600: control (read@3072,1024B). Runtime 60 seconds [ 1637.171255][ T2904] openvswitch: netlink: Message has 1 unknown bytes. [ 1637.226200][ T2904] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1637.304596][ T2916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16654'. [ 1637.585217][ T2941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16660'. [ 1637.595588][ T6521] block nbd12: Receive control failed (result -32) [ 1637.748022][ T2945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16663'. [ 1637.758514][ T2943] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16661'. [ 1637.824503][ T2945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16663'. [ 1637.969584][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1637.990054][ T2966] netlink: 88 bytes leftover after parsing attributes in process `syz.4.16666'. [ 1638.030411][ T2966] netem: invalid attributes len -24 [ 1638.035878][ T2971] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16670'. [ 1638.079673][ T2966] netem: change failed [ 1638.300704][ T2980] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1638.684725][ T3006] netlink: 'syz.3.16680': attribute type 10 has an invalid length. [ 1638.749693][ T3006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.767854][ T3006] bridge_slave_1: left allmulticast mode [ 1638.774103][ T3006] bridge_slave_1: left promiscuous mode [ 1638.781967][ T3006] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.798131][ T3006] bridge_slave_1: entered allmulticast mode [ 1638.805786][ T3006] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1639.010024][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1639.069058][ T3028] netlink: 'syz.0.16684': attribute type 10 has an invalid length. [ 1639.152334][ T3028] bridge0: entered allmulticast mode [ 1639.184495][ T3028] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1639.242008][ T3034] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 1639.698789][ T3067] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1639.914087][ T3074] netlink: Conntrack attr has 4 unknown bytes [ 1640.049505][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1640.127337][ T3086] netlink: 'syz.4.16696': attribute type 3 has an invalid length. [ 1640.146957][ T3087] netlink: 'syz.0.16697': attribute type 1 has an invalid length. [ 1640.273667][ T3095] tipc: Failed to remove unknown binding: 66,0,0/4:970574038/970574039 [ 1640.283043][ T3095] tipc: Failed to remove unknown binding: 66,0,0/4:970574038/970574039 [ 1640.408763][ T3091] bond10: (slave geneve2): making interface the new active one [ 1640.428857][ T3091] bond10: (slave geneve2): Enslaving as an active interface with an up link [ 1640.466595][ T7833] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1640.478982][ T7833] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1640.510781][ T7833] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1640.553095][ T7833] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1640.595313][ T3108] netlink: 'syz.4.16702': attribute type 19 has an invalid length. [ 1640.611939][ T3108] netlink: 'syz.4.16702': attribute type 19 has an invalid length. [ 1640.651125][ T3108] netlink: 'syz.4.16702': attribute type 19 has an invalid length. [ 1640.671143][ T3108] netlink: 'syz.4.16702': attribute type 19 has an invalid length. [ 1640.886770][ T3124] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1640.905869][ T3127] vcan1: entered promiscuous mode [ 1640.912414][ T3127] vcan1: entered allmulticast mode [ 1640.973037][ T3129] bond7: (slave veth9): Enslaving as an active interface with a down link [ 1640.993676][ T3124] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1641.001217][ T3124] bond7: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1641.090212][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1641.570431][ T3157] __nla_validate_parse: 10 callbacks suppressed [ 1641.570452][ T3157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16717'. [ 1641.672595][ T3162] validate_nla: 30 callbacks suppressed [ 1641.672617][ T3162] netlink: 'syz.2.16716': attribute type 3 has an invalid length. [ 1642.064936][ T3168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16719'. [ 1642.129665][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1642.354929][ T3180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16722'. [ 1642.768486][ T3199] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1642.812814][ T3199] syzkaller1: Refused to change device type [ 1642.838381][ T3198] wg1 speed is unknown, defaulting to 1000 [ 1643.011572][ T3198] batadv0 speed is unknown, defaulting to 1000 [ 1643.169496][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1643.276179][ T3221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16734'. [ 1643.292881][ T3221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16734'. [ 1643.995503][ T3259] siw: device registration error -23 [ 1644.102933][ T3265] pim6reg: entered allmulticast mode [ 1644.138121][ T3265] pim6reg: left allmulticast mode [ 1644.185487][ T3273] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1644.209560][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1644.331860][ T3284] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16749'. [ 1644.351448][ T3287] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 1644.626255][ T3305] netlink: 'syz.4.16757': attribute type 1 has an invalid length. [ 1645.019136][ T3334] bond8: entered promiscuous mode [ 1645.096836][ T3334] syzkaller0: entered promiscuous mode [ 1645.146299][ T3334] syzkaller0: entered allmulticast mode [ 1645.175942][ T3334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16765'. [ 1645.196778][ T3352] netlink: 'syz.0.16771': attribute type 6 has an invalid length. [ 1645.205444][ T3352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16771'. [ 1645.240667][ T3354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16770'. [ 1645.249890][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1645.270640][ T3354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16770'. [ 1645.287701][ T3351] bond11: entered promiscuous mode [ 1645.294330][ T3351] bond11: entered allmulticast mode [ 1645.302907][ T3351] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1645.346577][ T3362] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1645.476351][ T3368] xt_hashlimit: overflow, rate too high: 0 [ 1645.506803][ T3368] xt_hashlimit: overflow, rate too high: 0 [ 1645.802236][ T3388] sctp: [Deprecated]: syz.2.16778 (pid 3388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1645.802236][ T3388] Use struct sctp_sack_info instead [ 1645.926836][ T3400] syzkaller0: entered allmulticast mode [ 1646.289593][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1646.317668][ T3432] netlink: 'syz.3.16792': attribute type 1 has an invalid length. [ 1646.393443][ T3433] syzkaller0: entered promiscuous mode [ 1646.409606][ T3433] syzkaller0: entered allmulticast mode [ 1646.725978][ T3439] macvtap3: entered promiscuous mode [ 1646.733031][ T3439] macvtap3: entered allmulticast mode [ 1646.792177][ T3443] macvtap3: entered promiscuous mode [ 1646.813965][ T3443] macvtap3: entered allmulticast mode [ 1646.883859][ T3460] __nla_validate_parse: 6 callbacks suppressed [ 1646.883884][ T3460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16801'. [ 1646.923364][T23039] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1646.923487][ T3460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16801'. [ 1646.944713][ T3464] netlink: 204 bytes leftover after parsing attributes in process `syz.3.16803'. [ 1646.955376][T23030] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1646.965507][T23030] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1646.999924][T23030] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1647.000437][ T3469] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.16801'. [ 1647.091924][T16903] page_pool_release_retry() stalled pool shutdown: id 153, 1 inflight 1086 sec [ 1647.308504][ T3493] syzkaller0: entered promiscuous mode [ 1647.324398][ T3493] syzkaller0: entered allmulticast mode [ 1647.330240][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1647.648705][ T3508] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1647.881612][ T3514] netlink: 'syz.0.16813': attribute type 1 has an invalid length. [ 1647.924678][ T3514] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1647.995692][ T3514] bond11: (slave veth9): Enslaving as an active interface with a down link [ 1648.013524][ T3514] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1648.075529][ T3514] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16813'. [ 1648.369498][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1648.383824][ T3536] netlink: 60 bytes leftover after parsing attributes in process `syz.1.16816'. [ 1648.525982][ T3544] netlink: 112 bytes leftover after parsing attributes in process `syz.4.16815'. [ 1648.615910][ T5194] udevd[5194]: worker [1184] /devices/virtual/block/nbd11 is taking a long time [ 1648.642114][ T3549] tipc: Enabling of bearer rejected, failed to enable media [ 1648.760988][ T3549] netlink: 48 bytes leftover after parsing attributes in process `syz.0.16821'. [ 1649.180335][ T3578] netlink: 'syz.0.16829': attribute type 142 has an invalid length. [ 1649.183454][ T3580] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1649.409599][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1649.687510][ T3602] netlink: 'syz.0.16836': attribute type 3 has an invalid length. [ 1649.770380][ T3602] netlink: 'syz.0.16836': attribute type 1 has an invalid length. [ 1649.789849][ T3602] netlink: 212 bytes leftover after parsing attributes in process `syz.0.16836'. [ 1649.828717][ T3616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16835'. [ 1649.858441][ T3602] NCSI netlink: No device for ifindex 813332851 [ 1650.068763][ T3622] macvtap1: entered promiscuous mode [ 1650.085405][ T3622] bond6: entered promiscuous mode [ 1650.107545][ T3622] gretap2: entered promiscuous mode [ 1650.113962][ T3622] macvtap1: entered allmulticast mode [ 1650.120132][ T3622] bond6: entered allmulticast mode [ 1650.125463][ T3622] gretap2: entered allmulticast mode [ 1650.142077][ T3622] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1650.194920][ T3625] macvtap2: entered promiscuous mode [ 1650.201049][ T3625] macvtap2: entered allmulticast mode [ 1650.253077][ T3632] netlink: 'syz.3.16844': attribute type 1 has an invalid length. [ 1650.449495][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1650.492798][ T3642] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1650.804702][ T3661] netlink: 'syz.1.16854': attribute type 33 has an invalid length. [ 1651.130299][ T3674] netlink: 'syz.0.16857': attribute type 1 has an invalid length. [ 1651.141388][ T3673] netlink: 'syz.0.16857': attribute type 1 has an invalid length. [ 1651.278986][ T3688] netlink: 'syz.4.16864': attribute type 5 has an invalid length. [ 1651.438541][ T3695] netlink: 'syz.0.16865': attribute type 8 has an invalid length. [ 1651.489521][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1652.027703][ T3732] __nla_validate_parse: 5 callbacks suppressed [ 1652.027727][ T3732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16872'. [ 1652.077494][ T3734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16873'. [ 1652.168568][ T3732] erspan0: entered allmulticast mode [ 1652.365944][ T3746] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1652.529490][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1652.581601][ T3755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16877'. [ 1652.672261][ T3757] tipc: Started in network mode [ 1652.677293][ T3757] tipc: Node identity 129468a337ac, cluster identity 4711 [ 1652.699979][ T3757] tipc: Enabled bearer , priority 0 [ 1652.807830][ T3765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16882'. [ 1652.823185][ T3757] syzkaller0: entered promiscuous mode [ 1652.828839][ T3757] syzkaller0: entered allmulticast mode [ 1652.852205][ T3757] tipc: Resetting bearer [ 1652.970648][ T3771] validate_nla: 1 callbacks suppressed [ 1652.970671][ T3771] netlink: 'syz.4.16883': attribute type 1 has an invalid length. [ 1653.010691][ T3771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16883'. [ 1653.113911][ T3781] netlink: 256 bytes leftover after parsing attributes in process `syz.3.16885'. [ 1653.143879][ T3781] netlink: 256 bytes leftover after parsing attributes in process `syz.3.16885'. [ 1653.497912][T23034] tipc: Resetting bearer [ 1653.524148][ T3754] tipc: Resetting bearer [ 1653.570761][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1653.747632][ T3814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16893'. [ 1654.294937][ T9398] lec:lec_start_xmit: lec0:No lecd attached [ 1654.618314][ T3830] netlink: 'syz.2.16895': attribute type 3 has an invalid length. [ 1654.626506][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1655.657513][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1656.664857][ T3754] tipc: Disabling bearer [ 1656.686646][ T3810] tipc: Enabled bearer , priority 0 [ 1656.699705][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1656.815537][ T3842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16898'. [ 1656.827090][ T3814] macvtap1: entered promiscuous mode [ 1656.834018][ T3814] vlan0: entered promiscuous mode [ 1656.840834][ T3814] macvtap1: entered allmulticast mode [ 1656.846351][ T3814] vlan0: entered allmulticast mode [ 1656.852656][ T3814] veth0_vlan: entered allmulticast mode [ 1656.862043][T16903] tipc: Node number set to 624453795 [ 1656.870521][ T3812] syzkaller0: entered promiscuous mode [ 1656.876038][ T3812] syzkaller0: entered allmulticast mode [ 1656.912254][ T3842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16898'. [ 1656.983415][ T3825] tipc: Resetting bearer [ 1657.075050][ T3825] tipc: Disabling bearer [ 1657.102310][ T3854] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16900'. [ 1657.323089][ T3865] netlink: 84 bytes leftover after parsing attributes in process `syz.3.16905'. [ 1657.386569][ T3868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16904'. [ 1657.497607][ T3873] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16907'. [ 1657.506119][ T3875] netlink: 'syz.0.16908': attribute type 1 has an invalid length. [ 1657.524860][ T3873] netlink: 'syz.3.16907': attribute type 21 has an invalid length. [ 1657.552973][ T3873] netlink: 'syz.3.16907': attribute type 6 has an invalid length. [ 1657.556175][ T3875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16908'. [ 1657.561331][ T3873] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16907'. [ 1657.601202][ T3878] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16909'. [ 1657.627800][ T3843] syzkaller0: entered promiscuous mode [ 1657.634299][ T3843] syzkaller0: entered allmulticast mode [ 1657.729485][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1657.743229][ T3887] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_vlan, syncid = 2, id = 0 [ 1658.779484][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1659.320816][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 1659.328974][ C0] lec:lec_tx_timeout: lec0 [ 1659.815749][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1660.849550][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1661.274560][ T3917] wg1 speed is unknown, defaulting to 1000 [ 1661.307078][ T3917] batadv0 speed is unknown, defaulting to 1000 [ 1661.583225][ T3938] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16926'. [ 1661.605265][ T3938] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.16926'. [ 1661.703574][ T3940] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1661.734127][ T3940] netlink: 'syz.2.16927': attribute type 4 has an invalid length. [ 1661.873189][ T3917] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1661.889496][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1662.335462][ T3954] bridge0: entered promiscuous mode [ 1662.357285][ T3954] bridge0: entered allmulticast mode [ 1662.388631][ T3954] team0: Port device bridge0 added [ 1662.507770][ T3955] syzkaller0: entered promiscuous mode [ 1662.531088][ T3955] syzkaller0: entered allmulticast mode [ 1662.853152][ T3983] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16938'. [ 1662.929484][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1663.039044][ T3994] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16941'. [ 1663.056168][ T4004] openvswitch: netlink: Message has 8 unknown bytes. [ 1663.073766][ T4004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1663.120039][ T4009] bond7: Unable to set up delay as MII monitoring is disabled [ 1663.130710][ T4009] bond7 (unregistering): Released all slaves [ 1663.165643][ T4008] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1663.228552][ T4016] xt_addrtype: ipv6 does not support BROADCAST matching [ 1663.443414][ T4028] netlink: 'syz.1.16948': attribute type 1 has an invalid length. [ 1663.507765][ T4028] bond5: (slave vcan1): The slave device specified does not support setting the MAC address [ 1663.518488][ T4028] bond5: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 1663.534694][ T4028] bond5: (slave vcan1): making interface the new active one [ 1663.543516][ T4028] bond5: (slave vcan1): Enslaving as an active interface with an up link [ 1663.570539][T30638] Bluetooth: hci5: command 0x0405 tx timeout [ 1663.742966][ T4038] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16952'. [ 1663.769152][ T4038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1663.943791][ T4051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16955'. [ 1663.970411][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1664.083548][ T4051] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16955'. [ 1664.321894][ T4074] delete_channel: no stack [ 1664.386589][ T4081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16965'. [ 1664.397531][ T4081] netlink: 1371 bytes leftover after parsing attributes in process `syz.1.16965'. [ 1664.419850][ T4081] netlink: 'syz.1.16965': attribute type 1 has an invalid length. [ 1664.487752][ T4083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16964'. [ 1664.502774][ T4086] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.16966'. [ 1664.747431][ T4101] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16969'. [ 1664.805335][ T4105] tipc: Enabled bearer , priority 10 [ 1664.844480][ T4111] netlink: 'syz.1.16972': attribute type 13 has an invalid length. [ 1664.935607][ T4115] xt_nfacct: accounting object `syz1' does not exist [ 1665.009497][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1665.319857][ T4138] ip6gre1: entered allmulticast mode [ 1665.680919][ T4169] netlink: 'syz.4.16988': attribute type 1 has an invalid length. [ 1665.756351][ T4169] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1666.049536][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1666.701232][ T4211] bond7: Unable to set up delay as MII monitoring is disabled [ 1666.795887][ T4211] bond7 (unregistering): Released all slaves [ 1666.972194][ T4237] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1667.082260][ T4243] openvswitch: netlink: Flow key attr not present in new flow. [ 1667.099493][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1667.134131][ T4245] bond10: ARP target 1.0.0.0 is already present [ 1667.143180][ T4245] bond10: option arp_ip_target: invalid value (1) [ 1667.152814][ T4245] bond10 (unregistering): Released all slaves [ 1667.171302][ T1694] block nbd11: Possible stuck request ffff888026d40000: control (read@0,1024B). Runtime 90 seconds [ 1667.182554][ T1694] block nbd11: Possible stuck request ffff888026d40200: control (read@1024,1024B). Runtime 90 seconds [ 1667.194704][ T1694] block nbd11: Possible stuck request ffff888026d40400: control (read@2048,1024B). Runtime 90 seconds [ 1667.207066][ T1694] block nbd11: Possible stuck request ffff888026d40600: control (read@3072,1024B). Runtime 90 seconds [ 1668.129575][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1668.199037][ T4266] __nla_validate_parse: 9 callbacks suppressed [ 1668.199054][ T4266] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17007'. [ 1669.094712][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1669.095586][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1669.113628][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1669.123860][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1669.169759][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1669.655217][ T4217] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1670.064406][ T4293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17015'. [ 1670.070702][ T4297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17016'. [ 1670.151177][ T4304] openvswitch: netlink: IPv6 tunnel dst address is zero [ 1670.209493][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1670.241966][ T4304] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1670.263393][ T4310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17020'. [ 1670.277438][ T4310] IPVS: length: 137 != 55320 [ 1670.664796][ T4326] tipc: Enabled bearer , priority 0 [ 1670.851455][ T4341] netlink: zone id is out of range [ 1670.856675][ T4341] netlink: zone id is out of range [ 1670.866355][ T4342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17027'. [ 1670.886330][ T4341] netlink: zone id is out of range [ 1670.889930][ T4347] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17027'. [ 1670.910883][ T4341] netlink: zone id is out of range [ 1670.917892][ T4341] netlink: zone id is out of range [ 1670.926783][ T4341] netlink: zone id is out of range [ 1670.959973][ T4341] netlink: zone id is out of range [ 1670.965520][ T4341] netlink: set zone limit has 4 unknown bytes [ 1671.034310][ T4316] tipc: Disabling bearer [ 1671.381253][ T4373] tcf_pedit_act: 7 callbacks suppressed [ 1671.381278][ T4373] tc action pedit 'at' offset -1853306326 out of bounds [ 1671.464787][ T4375] netlink: 'syz.0.17036': attribute type 3 has an invalid length. [ 1671.676072][ T4391] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17041'. [ 1671.716002][ T4388] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17039'. [ 1671.838029][ T4398] IPv6: NLM_F_CREATE should be specified when creating new route [ 1671.847023][ T4398] netlink: 'syz.1.17043': attribute type 1 has an invalid length. [ 1671.907942][ T4398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17043'. [ 1671.971644][ T4402] syzkaller1: entered promiscuous mode [ 1671.985551][ T4402] syzkaller1: entered allmulticast mode [ 1672.121727][ T4415] IPv6: NLM_F_CREATE should be specified when creating new route [ 1672.147951][ T4415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17049'. [ 1672.465555][ T4434] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 1672.483722][ T4434] gretap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1672.531606][ T4434] gretap4: entered promiscuous mode [ 1672.537037][ T4434] gretap4: entered allmulticast mode [ 1672.778563][ T4449] netlink: 'syz.0.17055': attribute type 21 has an invalid length. [ 1673.162159][ T4480] netlink: 'syz.2.17064': attribute type 1 has an invalid length. [ 1673.196696][ T4476] geneve2: entered promiscuous mode [ 1673.283353][ T4485] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1673.295618][ T4485] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1673.320844][ T4480] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1673.363606][T23039] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 43292 - 0 [ 1673.393127][ T4475] bond10: (slave vlan0): Enslaving as a backup interface with an up link [ 1673.406261][T23039] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 43292 - 0 [ 1673.407067][ T4491] __nla_validate_parse: 5 callbacks suppressed [ 1673.407085][ T4491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17067'. [ 1673.427414][T23039] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 43292 - 0 [ 1673.471387][ T4491] tipc: Enabling of bearer rejected, already enabled [ 1673.836147][ T4518] netlink: 'syz.2.17075': attribute type 21 has an invalid length. [ 1673.855021][ T4518] netlink: 152 bytes leftover after parsing attributes in process `syz.2.17075'. [ 1673.889010][ T4522] syzkaller0: entered allmulticast mode [ 1674.017411][ T4527] syzkaller0: entered allmulticast mode [ 1674.067563][ T4529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17078'. [ 1674.130649][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1674.138781][ C0] lec:lec_tx_timeout: lec0 [ 1674.240036][ T4541] netlink: 'syz.0.17079': attribute type 21 has an invalid length. [ 1674.248114][ T4541] IPv6: NLM_F_CREATE should be specified when creating new route [ 1674.248686][ T4540] vcan0: entered promiscuous mode [ 1674.266894][ T4541] netlink: 'syz.0.17079': attribute type 1 has an invalid length. [ 1674.275594][ T4540] vcan0: entered allmulticast mode [ 1674.583353][ T4561] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.17086'. [ 1674.721434][ T4579] netlink: 'syz.4.17086': attribute type 33 has an invalid length. [ 1674.780724][ T4578] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17087'. [ 1675.025859][ T4579] bond11: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1675.040715][ T4579] bond11 (unregistering): Released all slaves [ 1675.043488][ T4592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17089'. [ 1675.061595][ T4594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17089'. [ 1675.082857][ T4592] bond6: (slave lo): Releasing backup interface [ 1675.085040][ T4593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1675.104939][ T4592] bond6: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1675.112366][ T4593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1675.129277][ T4593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1675.241889][ T4485] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1675.244543][ T4597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17090'. [ 1675.252599][ T4485] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.252678][ T4485] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 43292 - 0 [ 1675.344270][ T4603] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17092'. [ 1675.395959][ T4485] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1675.407111][ T4485] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.424597][ T4485] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 43292 - 0 [ 1675.427792][ C0] net_ratelimit: 6 callbacks suppressed [ 1675.427810][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1675.555354][ T4485] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1675.572925][ T4485] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1675.588297][ T4485] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 43292 - 0 [ 1675.626463][ T4612] syzkaller1: entered promiscuous mode [ 1675.632665][ T4612] syzkaller1: entered allmulticast mode [ 1675.730427][T23039] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1675.738849][T23039] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 43292 - 0 [ 1675.749038][T23039] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1675.782318][T23039] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1675.793707][T23039] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 43292 - 0 [ 1675.803181][T23039] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1675.843642][T23036] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1675.859658][T23036] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 43292 - 0 [ 1675.868137][T23036] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1675.873834][ C0] vcan0: j1939_tp_rxtimer: 0xffff88809a0b2c00: rx timeout, send abort [ 1675.880486][ T4617] tipc: Enabled bearer , priority 0 [ 1675.967280][ T4622] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.17099'. [ 1676.005614][ T4617] syzkaller0: entered promiscuous mode [ 1676.012751][ T4617] syzkaller0: entered allmulticast mode [ 1676.019165][ T4617] tipc: Resetting bearer [ 1676.026732][T23039] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1676.049285][T23039] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 43292 - 0 [ 1676.069505][T23039] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1676.187670][ T4576] tipc: Resetting bearer [ 1676.373985][ C0] vcan0: j1939_tp_rxtimer: 0xffff88809a0b0000: rx timeout, send abort [ 1676.377689][ T4646] netlink: 'syz.1.17106': attribute type 11 has an invalid length. [ 1676.384690][ C0] vcan0: j1939_tp_rxtimer: 0xffff88809a0b2c00: abort rx timeout. Force session deactivation [ 1676.449530][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1676.602077][ T4657] netlink: 'syz.1.17109': attribute type 12 has an invalid length. [ 1676.647153][ T4616] tipc: Resetting bearer [ 1676.882345][ C0] vcan0: j1939_tp_rxtimer: 0xffff88809a0b0000: abort rx timeout. Force session deactivation [ 1677.499491][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1678.535533][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1679.580124][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1679.706451][ T4616] tipc: Disabling bearer [ 1679.720257][T16927] tipc: Node number set to 3101630028 [ 1679.962472][ T4685] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1680.332988][ T4713] netlink: 'syz.2.17126': attribute type 58 has an invalid length. [ 1680.341765][ T4713] __nla_validate_parse: 2 callbacks suppressed [ 1680.341786][ T4713] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17126'. [ 1680.408869][ T4726] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17131'. [ 1680.424666][ T4722] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1680.451961][ T4726] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17131'. [ 1680.556525][ T4734] syzkaller1: entered promiscuous mode [ 1680.568161][ T4734] syzkaller1: entered allmulticast mode [ 1680.574280][ T4732] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17133'. [ 1680.609855][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1680.645201][ T4736] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17134'. [ 1680.709229][ T4738] vlan0: entered promiscuous mode [ 1680.733049][ T4738] vlan0: entered allmulticast mode [ 1680.758727][ T4740] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1680.894361][ T4751] netlink: 124 bytes leftover after parsing attributes in process `syz.3.17139'. [ 1680.907980][ T4750] netlink: 'syz.2.17138': attribute type 1 has an invalid length. [ 1680.930901][ T4750] netlink: 'syz.2.17138': attribute type 2 has an invalid length. [ 1680.950371][ T4752] netlink: 'syz.2.17138': attribute type 1 has an invalid length. [ 1680.958246][ T4752] netlink: 'syz.2.17138': attribute type 2 has an invalid length. [ 1681.005774][ T4752] openvswitch: netlink: Actions may not be safe on all matching packets [ 1681.180102][ T4764] tipc: Enabling of bearer rejected, failed to enable media [ 1681.422930][ T4776] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.17146'. [ 1681.566600][ T4783] netlink: 'syz.4.17150': attribute type 21 has an invalid length. [ 1681.583997][ T4786] ip6t_srh: unknown srh invflags 4000 [ 1681.649553][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1681.935371][ T4806] xfrm1: entered allmulticast mode [ 1682.072920][ T4816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17160'. [ 1682.186996][ T4773] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1682.670183][ T4846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17165'. [ 1682.699554][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1682.752396][ T4840] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17165'. [ 1682.800068][ T4840] netlink: 'syz.3.17165': attribute type 7 has an invalid length. [ 1682.808579][ T4840] netlink: 'syz.3.17165': attribute type 8 has an invalid length. [ 1682.993849][ T4853] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 1683.044373][ T4853] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1683.060724][ T4853] gretap2: entered promiscuous mode [ 1683.066280][ T4853] gretap2: entered allmulticast mode [ 1683.420284][ T6521] Bluetooth: hci2: command 0x0406 tx timeout [ 1683.729476][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1684.063007][ T4910] netlink: 'syz.4.17183': attribute type 10 has an invalid length. [ 1684.073237][ T4913] netlink: 'syz.4.17183': attribute type 10 has an invalid length. [ 1684.089125][ T4910] batman_adv: batadv0: Adding interface: netdevsim0 [ 1684.097053][ T4910] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1684.147794][ T4910] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1684.275442][ T4923] netlink: 'syz.3.17184': attribute type 195 has an invalid length. [ 1684.316786][ T4928] netlink: 'syz.4.17186': attribute type 4 has an invalid length. [ 1684.662993][ T4944] bond12: invalid ARP target 0.0.0.0 specified for addition [ 1684.677369][ T4944] bond12: option arp_ip_target: invalid value (0) [ 1684.715406][ T4944] bond12 (unregistering): Released all slaves [ 1684.769481][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1685.079829][ T4958] netlink: 'syz.1.17194': attribute type 3 has an invalid length. [ 1685.197881][ T4959] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1685.413390][ T4962] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1685.448991][ T4962] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1685.481580][ T4962] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 1685.801534][ T4981] __nla_validate_parse: 11 callbacks suppressed [ 1685.801557][ T4981] netlink: 80 bytes leftover after parsing attributes in process `syz.2.17198'. [ 1685.819514][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1685.895454][ T4986] sctp: [Deprecated]: syz.3.17199 (pid 4986) Use of int in max_burst socket option deprecated. [ 1685.895454][ T4986] Use struct sctp_assoc_value instead [ 1685.927004][ T4986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17199'. [ 1685.987122][ T4990] netlink: 'syz.1.17201': attribute type 1 has an invalid length. [ 1685.997818][ T4990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17201'. [ 1686.440252][ T5012] netlink: 766 bytes leftover after parsing attributes in process `syz.1.17206'. [ 1686.688238][ T5022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1686.849468][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1686.851285][ T5025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17209'. [ 1686.947235][ T5032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1686.985041][ T5031] netlink: 'syz.2.17212': attribute type 16 has an invalid length. [ 1686.993898][ T5031] netlink: 'syz.2.17212': attribute type 3 has an invalid length. [ 1687.003617][ T5034] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1687.024740][ T5031] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17212'. [ 1687.312666][ T5054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1687.481121][ T5064] IPv6: NLM_F_CREATE should be specified when creating new route [ 1687.774928][ T5085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17226'. [ 1687.807560][ T5090] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17226'. [ 1687.889591][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1687.938301][ T5096] validate_nla: 1 callbacks suppressed [ 1687.938323][ T5096] netlink: 'syz.1.17231': attribute type 1 has an invalid length. [ 1688.068183][ T5106] netlink: 'syz.2.17230': attribute type 2 has an invalid length. [ 1688.110205][ T5096] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1688.188720][ T5113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17234'. [ 1688.207173][ T5112] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.17235'. [ 1688.486049][ T5136] pim6reg527: entered allmulticast mode [ 1688.547515][ T5127] netlink: 'syz.1.17239': attribute type 1 has an invalid length. [ 1688.893546][ T5167] netlink: 'syz.2.17246': attribute type 1 has an invalid length. [ 1688.929596][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1689.281084][ T5191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1689.755998][ T5211] netlink: 'syz.1.17258': attribute type 15 has an invalid length. [ 1689.834030][ T5211] netlink: 'syz.1.17258': attribute type 15 has an invalid length. [ 1689.842359][T23036] netdevsim netdevsim1 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 1689.869201][T23036] netdevsim netdevsim1 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 1689.915369][T23036] netdevsim netdevsim1 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 1689.959888][T23036] netdevsim netdevsim1 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 1689.969477][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1690.245240][ T5238] netlink: 'syz.0.17261': attribute type 4 has an invalid length. [ 1690.258436][ T5238] netlink: 'syz.0.17261': attribute type 4 has an invalid length. [ 1690.267411][ T5232] netlink: 'syz.2.17264': attribute type 1 has an invalid length. [ 1690.355950][ T5232] bond7: entered promiscuous mode [ 1690.363242][ T5232] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1690.804739][ T5272] ipt_ECN: cannot use operation on non-tcp rule [ 1690.820707][ T5267] __nla_validate_parse: 12 callbacks suppressed [ 1690.820739][ T5267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17273'. [ 1690.846121][ T5273] openvswitch: netlink: Message has 4 unknown bytes. [ 1691.009126][ T5277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1691.018289][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1691.083073][ T5283] netlink: 'syz.0.17279': attribute type 1 has an invalid length. [ 1691.107543][ T5283] netlink: 9188 bytes leftover after parsing attributes in process `syz.0.17279'. [ 1691.118328][ T5284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17277'. [ 1691.143166][ T5284] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17277'. [ 1691.205102][T23033] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.225490][T23033] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.253029][ T5291] netlink: 44 bytes leftover after parsing attributes in process `syz.0.17281'. [ 1691.262530][ T5291] netlink: 43 bytes leftover after parsing attributes in process `syz.0.17281'. [ 1691.277868][ T5291] netlink: 43 bytes leftover after parsing attributes in process `syz.0.17281'. [ 1691.299884][T23033] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.328414][T23033] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1691.660487][ T5312] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17288'. [ 1691.714185][ T5319] netlink: 244 bytes leftover after parsing attributes in process `syz.1.17289'. [ 1691.734843][ T5320] syzkaller0: entered promiscuous mode [ 1691.741462][ T5320] syzkaller0: entered allmulticast mode [ 1692.049473][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1692.053962][ T5345] veth0: entered promiscuous mode [ 1692.161027][ T5344] veth0: left promiscuous mode [ 1692.244813][ T5347] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17296'. [ 1692.321207][ T5347] syzkaller1: entered promiscuous mode [ 1692.329940][ T30] audit: type=1107 audit(1773689938.053:16): pid=5349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ȪN²/Wð²GB;Ü-Ñô†ëw#óD]3£OPRGÙ¼sÎýª½ë±×h©Ù([níc“Gm½' [ 1692.352442][ T5347] syzkaller1: entered allmulticast mode [ 1692.377345][T16913] IPVS: starting estimator thread 0... [ 1692.486596][ T5361] gretap0: left allmulticast mode [ 1692.491860][ T5359] IPVS: using max 25 ests per chain, 60000 per kthread [ 1692.512608][ T5361] gretap0: left promiscuous mode [ 1692.523387][ T5361] bridge0: port 4(gretap0) entered disabled state [ 1692.574266][ T5361] batadv1: left allmulticast mode [ 1692.590683][ T5361] batadv1: left promiscuous mode [ 1692.606876][ T5361] bridge0: port 3(batadv1) entered disabled state [ 1692.623743][ T5361] bridge_slave_0: left allmulticast mode [ 1692.645306][ T5361] bridge_slave_0: left promiscuous mode [ 1692.653638][ T5361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.858436][ T5376] tipc: Enabled bearer , priority 0 [ 1692.896117][ T5379] syzkaller0: entered promiscuous mode [ 1692.909703][ T5379] syzkaller0: entered allmulticast mode [ 1692.954576][ T5372] tipc: Resetting bearer [ 1693.032602][ T5364] tipc: Resetting bearer [ 1693.079070][ T5364] tipc: Disabling bearer [ 1693.089592][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1693.294955][ T5401] syzkaller0: entered promiscuous mode [ 1693.313972][ T5401] syzkaller0: entered allmulticast mode [ 1693.322154][ T5408] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1693.693885][ T5427] syzkaller1: entered promiscuous mode [ 1693.699962][ T5427] syzkaller1: entered allmulticast mode [ 1694.129527][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1695.179528][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1696.209686][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1696.466889][ T5414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1696.640882][ T5450] __nla_validate_parse: 9 callbacks suppressed [ 1696.640904][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17321'. [ 1696.677966][ T5450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17321'. [ 1697.072399][ T5486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17331'. [ 1697.220354][ T5504] validate_nla: 5 callbacks suppressed [ 1697.220376][ T5504] netlink: 'syz.0.17333': attribute type 1 has an invalid length. [ 1697.249636][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1697.261303][ T1694] block nbd11: Possible stuck request ffff888026d40000: control (read@0,1024B). Runtime 120 seconds [ 1697.273178][ T1694] block nbd11: Possible stuck request ffff888026d40200: control (read@1024,1024B). Runtime 120 seconds [ 1697.286648][ T1694] block nbd11: Possible stuck request ffff888026d40400: control (read@2048,1024B). Runtime 120 seconds [ 1697.298859][ T1694] block nbd11: Possible stuck request ffff888026d40600: control (read@3072,1024B). Runtime 120 seconds [ 1697.411589][ T5496] netlink: 14 bytes leftover after parsing attributes in process `syz.0.17333'. [ 1697.450171][ T5510] bond13: (slave dummy0): making interface the new active one [ 1697.459668][ T5510] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 1697.477837][ T5496] bond13: (slave dummy0): Releasing active interface [ 1697.500730][ T5519] IPVS: set_ctl: invalid protocol: 137 100.1.1.2:20002 [ 1697.705198][ T5534] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.17344'. [ 1697.912898][ T5546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17347'. [ 1698.015527][ T5546] team0: Port device bridge0 removed [ 1698.042013][ T5559] netlink: 96 bytes leftover after parsing attributes in process `syz.1.17348'. [ 1698.289477][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1698.328100][ T5574] syzkaller0: entered promiscuous mode [ 1698.344481][ T5574] syzkaller0: entered allmulticast mode [ 1698.651136][ T5590] netlink: 'syz.2.17357': attribute type 39 has an invalid length. [ 1698.689072][ T5591] netlink: 6020 bytes leftover after parsing attributes in process `syz.4.17356'. [ 1698.721357][ T5592] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17357'. [ 1698.742870][ T5595] xt_connbytes: Forcing CT accounting to be enabled [ 1698.914305][ T5598] bond8: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1699.141779][ T5606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17362'. [ 1699.178390][ T5608] netlink: 'syz.3.17361': attribute type 3 has an invalid length. [ 1699.264027][ T5612] syzkaller1: entered promiscuous mode [ 1699.270745][ T5612] syzkaller1: entered allmulticast mode [ 1699.329490][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1700.379515][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1700.936262][ T5551] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1701.409523][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1701.717420][ T5673] __nla_validate_parse: 9 callbacks suppressed [ 1701.717443][ T5673] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17376'. [ 1701.836170][ T5662] bond13: option arp_all_targets: invalid value (18446744073709551613) [ 1701.925054][ T5662] bond13 (unregistering): Released all slaves [ 1702.117574][ T5674] tipc: Cannot configure node identity twice [ 1702.127520][ T5685] tipc: Enabled bearer , priority 10 [ 1702.252191][ T5706] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17385'. [ 1702.356202][ T5712] sock: sock_timestamping_bind_phc: sock not bind to device [ 1702.449511][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1702.816506][ T5742] macvtap3: entered allmulticast mode [ 1702.822554][ T5742] veth0_macvtap: entered allmulticast mode [ 1702.918392][ T5750] Bluetooth: MGMT ver 1.23 [ 1702.992563][ T5753] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1703.032315][ T5753] netlink: 'syz.2.17397': attribute type 1 has an invalid length. [ 1703.126938][ T5761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17398'. [ 1703.241877][ T8315] tipc: Node number set to 2130706433 [ 1703.489476][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1703.536496][ T5784] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1703.543097][ T5784] syzkaller1: linktype set to 823 [ 1703.600369][ T5790] netlink: 108 bytes leftover after parsing attributes in process `syz.3.17408'. [ 1703.693069][ T5792] nbd: couldn't find a device at index 0 [ 1703.713027][ T5792] netlink: 'syz.0.17409': attribute type 1 has an invalid length. [ 1703.793444][ T5804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17409'. [ 1703.803170][ T5804] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17409'. [ 1703.985266][ T5820] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 1704.017318][ T5820] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1704.106146][ T5828] netlink: zone id is out of range [ 1704.116004][ T5825] tipc: Enabled bearer , priority 0 [ 1704.123664][ T5828] netlink: del zone limit has 4 unknown bytes [ 1704.153706][ T5825] syzkaller0: entered promiscuous mode [ 1704.169887][ T5825] syzkaller0: entered allmulticast mode [ 1704.181435][ T5830] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17420'. [ 1704.272239][ T5837] netlink: 'syz.1.17421': attribute type 12 has an invalid length. [ 1704.287041][ T5825] tipc: Resetting bearer [ 1704.350576][ T5843] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17424'. [ 1704.353180][ T5837] bond7: option primary_reselect: invalid value (255) [ 1704.405901][ T5845] netlink: 3418 bytes leftover after parsing attributes in process `syz.2.17425'. [ 1704.416201][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17425'. [ 1704.436679][ T5837] bond7 (unregistering): Released all slaves [ 1704.518949][ T5818] tipc: Resetting bearer [ 1704.529490][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1705.570168][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1706.443657][ T5818] tipc: Disabling bearer [ 1706.518601][ T5850] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 1706.520103][ T5871] tipc: Enabled bearer , priority 11 [ 1706.609798][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1706.766359][ T5899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17434'. [ 1706.879122][ T5888] syzkaller1: entered promiscuous mode [ 1706.886687][ T5888] syzkaller1: entered allmulticast mode [ 1707.009201][ T5909] syzkaller0: entered allmulticast mode [ 1707.206615][ T5931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17443'. [ 1707.386351][ T5944] netlink: 'syz.0.17447': attribute type 10 has an invalid length. [ 1707.425999][T16906] page_pool_release_retry() stalled pool shutdown: id 153, 1 inflight 1147 sec [ 1707.438703][ T5946] netlink: 'syz.0.17447': attribute type 10 has an invalid length. [ 1707.462627][ T5946] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17447'. [ 1707.498103][ T5944] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17447'. [ 1707.649466][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1707.865211][ T5970] sctp: [Deprecated]: syz.2.17454 (pid 5970) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1707.865211][ T5970] Use struct sctp_sack_info instead [ 1707.988893][ T5977] netlink: 104 bytes leftover after parsing attributes in process `syz.3.17455'. [ 1708.222504][ T5991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1708.316175][ T5986] netlink: 64 bytes leftover after parsing attributes in process `syz.4.17458'. [ 1708.333894][ T5995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17460'. [ 1708.551072][ T6007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17464'. [ 1708.564376][ T6011] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17463'. [ 1708.699473][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1708.846397][ T6031] netlink: get zone limit has 4 unknown bytes [ 1709.368712][ T6057] nbd: must specify a device to reconfigure [ 1709.466032][ T6065] netlink: 277 bytes leftover after parsing attributes in process `syz.4.17483'. [ 1709.729496][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1710.769478][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1710.995389][ T6141] netlink: 'syz.1.17504': attribute type 16 has an invalid length. [ 1711.009942][T30638] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1711.012878][ T6521] Bluetooth: hci0: command 0x0c1a tx timeout [ 1711.046869][ T6145] netlink: 'syz.0.17503': attribute type 12 has an invalid length. [ 1711.060694][ T6145] netlink: 'syz.0.17503': attribute type 12 has an invalid length. [ 1711.071766][ T6141] netlink: 'syz.1.17504': attribute type 17 has an invalid length. [ 1711.085524][ T6145] IPVS: set_ctl: invalid protocol: 137 100.1.1.0:20001 [ 1711.091407][ T6144] netlink: Conntrack attr has 4 unknown bytes [ 1711.134320][ T6141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1711.153198][ T6141] netlink: 'syz.1.17504': attribute type 16 has an invalid length. [ 1711.163713][ T6141] netlink: 'syz.1.17504': attribute type 17 has an invalid length. [ 1711.203376][ T6141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1711.245585][ T6141] netlink: 'syz.1.17504': attribute type 16 has an invalid length. [ 1711.258203][ T6141] netlink: 'syz.1.17504': attribute type 17 has an invalid length. [ 1711.321134][ T6141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1711.341573][ T6147] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 1711.356968][ T6147] netlink: 'syz.3.17506': attribute type 1 has an invalid length. [ 1711.370398][ T6141] netlink: 'syz.1.17504': attribute type 16 has an invalid length. [ 1711.621402][ T6141] net_ratelimit: 17 callbacks suppressed [ 1711.621410][ T6141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1711.661289][ T6141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1711.687061][ T6141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1711.721039][ T6141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1711.809771][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1711.839031][ T6154] veth0: entered promiscuous mode [ 1711.851974][ T6141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1711.871828][ T6154] veth0: left promiscuous mode [ 1711.995642][ T6172] __nla_validate_parse: 9 callbacks suppressed [ 1711.995664][ T6172] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17510'. [ 1712.012733][ T6170] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1712.859537][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1713.889483][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1713.906321][ T6135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1714.063435][ T6186] netlink: 220 bytes leftover after parsing attributes in process `syz.3.17515'. [ 1714.080361][ T6186] netlink: 220 bytes leftover after parsing attributes in process `syz.3.17515'. [ 1714.169804][ T6194] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17516'. [ 1714.333453][ T6203] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1714.360252][ T6199] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 1714.753669][ T6207] wg1 speed is unknown, defaulting to 1000 [ 1714.775201][ T6207] batadv0 speed is unknown, defaulting to 1000 [ 1714.929526][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1715.117355][ T6247] syzkaller0: entered promiscuous mode [ 1715.128900][ T6247] syzkaller0: entered allmulticast mode [ 1715.131582][ T6251] netlink: 52 bytes leftover after parsing attributes in process `syz.2.17533'. [ 1715.245367][ T6242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17530'. [ 1715.418073][ T6266] netlink: 92 bytes leftover after parsing attributes in process `syz.4.17536'. [ 1715.547250][ T6272] netlink: 6 bytes leftover after parsing attributes in process `syz.2.17537'. [ 1715.561795][ T6270] netlink: 52 bytes leftover after parsing attributes in process `syz.3.17535'. [ 1715.732391][ T6283] netlink: 7 bytes leftover after parsing attributes in process `syz.2.17539'. [ 1715.969475][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1716.096645][ T6298] bond9: (slave ip6gretap1): making interface the new active one [ 1716.121233][ T6298] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1716.137600][ T6298] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1716.169758][ T6298] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1716.655237][ T6323] validate_nla: 46 callbacks suppressed [ 1716.655256][ T6323] netlink: 'syz.4.17551': attribute type 2 has an invalid length. [ 1717.001637][ T6340] netlink: 'syz.2.17557': attribute type 1 has an invalid length. [ 1717.013020][ T6343] __nla_validate_parse: 5 callbacks suppressed [ 1717.013043][ T6343] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17558'. [ 1717.019465][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1717.040823][ T6344] netlink: 96 bytes leftover after parsing attributes in process `syz.0.17558'. [ 1717.072159][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17558'. [ 1717.301297][ T6359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17562'. [ 1717.527542][ T6369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17566'. [ 1717.693393][ T6375] syzkaller0: entered promiscuous mode [ 1717.698975][ T6375] syzkaller0: entered allmulticast mode [ 1717.915958][ T6391] netlink: 'syz.2.17574': attribute type 11 has an invalid length. [ 1718.059697][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1718.694784][ T9398] lec:lec_start_xmit: lec0:No lecd attached [ 1719.099484][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1720.130891][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1720.845874][ T6411] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17577'. [ 1720.865336][ T6413] gretap0: entered promiscuous mode [ 1720.870881][ T6411] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17577'. [ 1720.884392][ T6413] vlan2: entered promiscuous mode [ 1720.947163][ T6416] syzkaller0: entered promiscuous mode [ 1720.960063][ T6416] syzkaller0: entered allmulticast mode [ 1720.993372][ T6421] openvswitch: netlink: Flow actions attr not present in new flow. [ 1721.096164][ T6431] xt_ecn: cannot match TCP bits for non-tcp packets [ 1721.169461][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1721.395188][ T6445] netlink: 'syz.2.17588': attribute type 2 has an invalid length. [ 1721.403984][ T6445] netlink: 100 bytes leftover after parsing attributes in process `syz.2.17588'. [ 1721.436768][ T6447] IPVS: set_ctl: invalid protocol: 108 172.30.0.2:20002 [ 1721.847788][ T6472] erspan0: entered promiscuous mode [ 1721.848118][ T6474] netlink: get zone limit has 4 unknown bytes [ 1721.860541][ T6472] erspan0: entered allmulticast mode [ 1721.935169][ T6479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17601'. [ 1722.011674][ T6484] netlink: 'syz.4.17599': attribute type 1 has an invalid length. [ 1722.019072][ T6478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1722.034670][ T6478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.046215][ T6478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1722.053073][ T6484] netlink: 760 bytes leftover after parsing attributes in process `syz.4.17599'. [ 1722.077292][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17602'. [ 1722.146701][ T6486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1722.209709][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1722.254884][ T6478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1722.294759][ T6492] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 1722.310196][ T6478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.349582][ T6478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1722.563427][ T6478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1722.576599][ T6478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.588409][ T6478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1722.617989][ T6512] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1722.655726][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17612'. [ 1722.705753][ T6508] netlink: set zone limit has 4 unknown bytes [ 1722.738616][ T6478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1722.756278][ T6478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1722.774776][ T6478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 1723.030493][T23035] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1723.048968][T23035] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 1723.067986][T23035] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 1723.125471][T23035] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1723.142529][T23035] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 1723.159901][T23035] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 1723.178410][T23035] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1723.191608][T23035] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 1723.208991][T23035] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 1723.254558][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1723.365365][T23035] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1723.367236][ T6554] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17623'. [ 1723.389714][T23035] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 1723.400230][T23035] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 1723.477273][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17625'. [ 1723.497705][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17625'. [ 1723.663418][ T6564] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17626'. [ 1724.009148][ T6583] syzkaller0: entered promiscuous mode [ 1724.023734][ T6583] syzkaller0: entered allmulticast mode [ 1724.130185][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 1724.138319][ C0] lec:lec_tx_timeout: lec0 [ 1724.289461][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1724.314480][ T6598] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.17633'. [ 1724.396981][ T6602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17635'. [ 1724.471226][ T6602] netlink: 'syz.1.17635': attribute type 1 has an invalid length. [ 1725.329523][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1726.369486][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1727.330124][ T1694] block nbd11: Possible stuck request ffff888026d40000: control (read@0,1024B). Runtime 150 seconds [ 1727.343631][ T1694] block nbd11: Possible stuck request ffff888026d40200: control (read@1024,1024B). Runtime 150 seconds [ 1727.355648][ T1694] block nbd11: Possible stuck request ffff888026d40400: control (read@2048,1024B). Runtime 150 seconds [ 1727.367008][ T1694] block nbd11: Possible stuck request ffff888026d40600: control (read@3072,1024B). Runtime 150 seconds [ 1727.409547][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1728.449531][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1729.489520][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1730.533795][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1730.535635][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1730.545346][ T1299] lec:lec_start_xmit: lec0:No lecd attached [ 1730.557144][ T1299] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1731.570105][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1732.609610][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1733.650192][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1734.689471][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1735.729526][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1736.129680][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms [ 1736.137732][ C0] lec:lec_tx_timeout: lec0 [ 1736.769609][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1737.809519][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1738.849736][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1739.889571][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1740.929563][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1741.969525][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1743.009593][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1744.049744][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1745.089517][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1745.323345][ T6616] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17639'. [ 1745.372644][ T6622] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1745.372645][ T6621] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1745.412595][ T6626] netlink: 200 bytes leftover after parsing attributes in process `syz.1.17641'. [ 1745.750045][ T6646] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17647'. [ 1745.860327][ T6652] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 1745.953187][ T6657] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1745.959340][ T6657] syzkaller1: linktype set to 823 [ 1745.981897][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17651'. [ 1746.019850][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17651'. [ 1746.086737][ T6657] ip6t_srh: unknown srh match flags 4000 [ 1746.129546][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1746.221992][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17655'. [ 1746.239955][ T6673] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17655'. [ 1746.241479][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17656'. [ 1746.300210][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17657'. [ 1746.677151][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17662'. [ 1747.086701][ T6710] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1747.169634][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1747.191876][ T6720] syzkaller0: entered promiscuous mode [ 1747.214245][ T6720] syzkaller0: entered allmulticast mode [ 1747.262291][ T6710] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1747.293479][ T6720] tc action pedit offset 128 out of bounds [ 1747.373476][ T6710] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1747.394829][ T6722] syzkaller0: entered promiscuous mode [ 1747.419996][ T6722] syzkaller0: entered allmulticast mode [ 1747.537268][ T6710] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1747.726186][T23036] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1747.744025][T23036] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1747.766616][T23036] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1747.888069][T23036] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1748.209447][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1749.249490][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1749.951938][ T6706] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1750.193697][ T6766] syzkaller1: entered promiscuous mode [ 1750.199246][ T6766] syzkaller1: entered allmulticast mode [ 1750.257544][ T6767] syzkaller0: entered promiscuous mode [ 1750.268877][ T6767] syzkaller0: entered allmulticast mode [ 1750.296425][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1751.254035][ T6784] syzkaller0: entered promiscuous mode [ 1751.278366][ T6784] syzkaller0: entered allmulticast mode [ 1751.329461][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 1751.330459][ T6801] ------------[ cut here ]------------ [ 1751.342968][ T6801] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 1751.356166][ T6801] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1da0/0x2720, CPU#1: syz.0.17700/6801 [ 1751.366614][ T6801] Modules linked in: [ 1751.371658][ T6801] CPU: 1 UID: 0 PID: 6801 Comm: syz.0.17700 Not tainted syzkaller #0 PREEMPT(full) [ 1751.381736][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1751.392871][ T6801] RIP: 0010:u32_change+0x1daf/0x2720 [ 1751.398486][ T6801] Code: 3d c7 d8 43 06 01 75 33 e8 4e fe 0d f8 eb 50 e8 47 fe 0d f8 48 8d 3d c0 07 69 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 60 74 e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 22 fe 0d f8 eb 24 e8 1b fe 0d f8 [ 1751.419167][ T6801] RSP: 0018:ffffc90005246fc0 EFLAGS: 00010283 [ 1751.425538][ T6801] RAX: ffffffff89b79f69 RBX: ffff888030d41000 RCX: 0000000000000010 [ 1751.434216][ T6801] RDX: ffffffff8ce17460 RSI: 0000000000000020 RDI: ffffffff9020a730 [ 1751.442603][ T6801] RBP: ffffc90005247178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 1751.451228][ T6801] R10: dffffc0000000000 R11: fffffbfff20232d7 R12: ffff8880349e9ce8 [ 1751.459629][ T6801] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 1751.467641][ T6801] FS: 00007fd1882ea6c0(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 1751.476740][ T6801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1751.484046][ T6801] CR2: 000000110c252657 CR3: 0000000098bd4000 CR4: 00000000003526f0 [ 1751.494540][ T6801] Call Trace: [ 1751.497869][ T6801] [ 1751.500949][ T6801] ? __pfx_u32_change+0x10/0x10 [ 1751.505853][ T6801] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1751.512121][ T6801] tc_new_tfilter+0xff8/0x1780 [ 1751.516980][ T6801] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1751.522495][ T6801] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1751.527752][ T6801] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1751.532936][ T6801] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1751.538099][ T6801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1751.544174][ T6801] ? ref_tracker_free+0x693/0x840 [ 1751.549346][ T6801] ? __copy_skb_header+0xa3/0x4a0 [ 1751.554790][ T6801] ? __pfx_ref_tracker_free+0x10/0x10 [ 1751.560425][ T6801] netlink_rcv_skb+0x232/0x4b0 [ 1751.565238][ T6801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1751.571719][ T6801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1751.577164][ T6801] ? netlink_deliver_tap+0x2e/0x1b0 [ 1751.582563][ T6801] netlink_unicast+0x80f/0x9b0 [ 1751.587401][ T6801] ? __pfx_netlink_unicast+0x10/0x10 [ 1751.592873][ T6801] ? netlink_sendmsg+0x650/0xb40 [ 1751.597856][ T6801] ? skb_put+0x11b/0x210 [ 1751.602708][ T6801] netlink_sendmsg+0x813/0xb40 [ 1751.607500][ T6801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1751.612937][ T6801] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1751.617918][ T6801] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1751.623405][ T6801] ____sys_sendmsg+0x972/0x9f0 [ 1751.628297][ T6801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1751.634155][ T6801] ? import_iovec+0x73/0xa0 [ 1751.638731][ T6801] ___sys_sendmsg+0x2a5/0x360 [ 1751.643694][ T6801] ? __pfx____sys_sendmsg+0x10/0x10 [ 1751.648951][ T6801] ? __pfx_futex_wake_mark+0x10/0x10 [ 1751.654824][ T6801] ? __fget_files+0x2a/0x420 [ 1751.660165][ T6801] ? __fget_files+0x3a0/0x420 [ 1751.664914][ T6801] __sys_sendmmsg+0x27c/0x4e0 [ 1751.669784][ T6801] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1751.675116][ T6801] ? do_futex+0x333/0x420 [ 1751.679731][ T6801] ? rcu_is_watching+0x15/0xb0 [ 1751.684656][ T6801] __x64_sys_sendmmsg+0xa0/0xc0 [ 1751.690140][ T6801] do_syscall_64+0x14d/0xf80 [ 1751.694854][ T6801] ? trace_irq_disable+0x3b/0x150 [ 1751.700269][ T6801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.706384][ T6801] ? clear_bhb_loop+0x40/0x90 [ 1751.711568][ T6801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1751.717514][ T6801] RIP: 0033:0x7fd18739c799 [ 1751.722531][ T6801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1751.742844][ T6801] RSP: 002b:00007fd1882ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1751.751865][ T6801] RAX: ffffffffffffffda RBX: 00007fd187615fa0 RCX: 00007fd18739c799 [ 1751.760123][ T6801] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1751.768195][ T6801] RBP: 00007fd187432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1751.776296][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1751.784915][ T6801] R13: 00007fd187616038 R14: 00007fd187615fa0 R15: 00007ffcf11a5368 [ 1751.793068][ T6801] [ 1751.796117][ T6801] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1751.803421][ T6801] CPU: 1 UID: 0 PID: 6801 Comm: syz.0.17700 Not tainted syzkaller #0 PREEMPT(full) [ 1751.812805][ T6801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1751.822870][ T6801] Call Trace: [ 1751.826154][ T6801] [ 1751.829093][ T6801] vpanic+0x56c/0xa60 [ 1751.833118][ T6801] ? __pfx__printk+0x10/0x10 [ 1751.837730][ T6801] ? __pfx_vpanic+0x10/0x10 [ 1751.842235][ T6801] ? is_bpf_text_address+0x292/0x2b0 [ 1751.847531][ T6801] ? is_bpf_text_address+0x26/0x2b0 [ 1751.852799][ T6801] panic+0xc5/0xd0 [ 1751.856730][ T6801] ? __pfx_panic+0x10/0x10 [ 1751.861176][ T6801] __warn+0x315/0x4f0 [ 1751.865187][ T6801] ? u32_change+0x1da0/0x2720 [ 1751.869875][ T6801] ? u32_change+0x1da0/0x2720 [ 1751.874645][ T6801] __report_bug+0x29a/0x540 [ 1751.879162][ T6801] ? ___sys_sendmsg+0x2a5/0x360 [ 1751.884014][ T6801] ? __sys_sendmmsg+0x27c/0x4e0 [ 1751.888866][ T6801] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 1751.893909][ T6801] ? u32_change+0x1da0/0x2720 [ 1751.898599][ T6801] ? __pfx___report_bug+0x10/0x10 [ 1751.903657][ T6801] report_bug_entry+0x19a/0x290 [ 1751.908527][ T6801] ? u32_change+0x1daf/0x2720 [ 1751.913207][ T6801] ? u32_change+0x1db4/0x2720 [ 1751.917889][ T6801] handle_bug+0xce/0x200 [ 1751.922150][ T6801] exc_invalid_op+0x1a/0x50 [ 1751.926661][ T6801] asm_exc_invalid_op+0x1a/0x20 [ 1751.931696][ T6801] RIP: 0010:u32_change+0x1daf/0x2720 [ 1751.937253][ T6801] Code: 3d c7 d8 43 06 01 75 33 e8 4e fe 0d f8 eb 50 e8 47 fe 0d f8 48 8d 3d c0 07 69 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 60 74 e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 22 fe 0d f8 eb 24 e8 1b fe 0d f8 [ 1751.957133][ T6801] RSP: 0018:ffffc90005246fc0 EFLAGS: 00010283 [ 1751.963268][ T6801] RAX: ffffffff89b79f69 RBX: ffff888030d41000 RCX: 0000000000000010 [ 1751.971346][ T6801] RDX: ffffffff8ce17460 RSI: 0000000000000020 RDI: ffffffff9020a730 [ 1751.979355][ T6801] RBP: ffffc90005247178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 1751.987337][ T6801] R10: dffffc0000000000 R11: fffffbfff20232d7 R12: ffff8880349e9ce8 [ 1751.995400][ T6801] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 1752.003476][ T6801] ? u32_change+0x1d99/0x2720 [ 1752.008187][ T6801] ? __pfx_u32_change+0x10/0x10 [ 1752.013051][ T6801] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1752.018757][ T6801] tc_new_tfilter+0xff8/0x1780 [ 1752.023564][ T6801] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1752.028809][ T6801] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1752.034109][ T6801] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1752.039065][ T6801] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1752.044189][ T6801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1752.049917][ T6801] ? ref_tracker_free+0x693/0x840 [ 1752.054954][ T6801] ? __copy_skb_header+0xa3/0x4a0 [ 1752.059983][ T6801] ? __pfx_ref_tracker_free+0x10/0x10 [ 1752.065492][ T6801] netlink_rcv_skb+0x232/0x4b0 [ 1752.070274][ T6801] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1752.075745][ T6801] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1752.081137][ T6801] ? netlink_deliver_tap+0x2e/0x1b0 [ 1752.086449][ T6801] netlink_unicast+0x80f/0x9b0 [ 1752.091246][ T6801] ? __pfx_netlink_unicast+0x10/0x10 [ 1752.096549][ T6801] ? netlink_sendmsg+0x650/0xb40 [ 1752.101597][ T6801] ? skb_put+0x11b/0x210 [ 1752.105857][ T6801] netlink_sendmsg+0x813/0xb40 [ 1752.110823][ T6801] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1752.116219][ T6801] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1752.121166][ T6801] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1752.126483][ T6801] ____sys_sendmsg+0x972/0x9f0 [ 1752.131294][ T6801] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1752.136625][ T6801] ? import_iovec+0x73/0xa0 [ 1752.141159][ T6801] ___sys_sendmsg+0x2a5/0x360 [ 1752.145854][ T6801] ? __pfx____sys_sendmsg+0x10/0x10 [ 1752.151067][ T6801] ? __pfx_futex_wake_mark+0x10/0x10 [ 1752.156410][ T6801] ? __fget_files+0x2a/0x420 [ 1752.161012][ T6801] ? __fget_files+0x3a0/0x420 [ 1752.165726][ T6801] __sys_sendmmsg+0x27c/0x4e0 [ 1752.170452][ T6801] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1752.175681][ T6801] ? do_futex+0x333/0x420 [ 1752.180059][ T6801] ? rcu_is_watching+0x15/0xb0 [ 1752.184933][ T6801] __x64_sys_sendmmsg+0xa0/0xc0 [ 1752.189791][ T6801] do_syscall_64+0x14d/0xf80 [ 1752.194427][ T6801] ? trace_irq_disable+0x3b/0x150 [ 1752.199478][ T6801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.205582][ T6801] ? clear_bhb_loop+0x40/0x90 [ 1752.210407][ T6801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.216352][ T6801] RIP: 0033:0x7fd18739c799 [ 1752.220796][ T6801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1752.240584][ T6801] RSP: 002b:00007fd1882ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1752.249021][ T6801] RAX: ffffffffffffffda RBX: 00007fd187615fa0 RCX: 00007fd18739c799 [ 1752.257260][ T6801] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1752.265355][ T6801] RBP: 00007fd187432c99 R08: 0000000000000000 R09: 0000000000000000 [ 1752.273332][ T6801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1752.281394][ T6801] R13: 00007fd187616038 R14: 00007fd187615fa0 R15: 00007ffcf11a5368 [ 1752.289395][ T6801] [ 1752.292916][ T6801] Kernel Offset: disabled [ 1752.297250][ T6801] Rebooting in 86400 seconds..