last executing test programs: 2.559639896s ago: executing program 1 (id=16841): openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 2.380640064s ago: executing program 0 (id=16843): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0xffffffff, 0xd, 0x1, 0x8}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.034136332s ago: executing program 0 (id=16846): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) write(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) r3 = socket(0x2d, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) bind$xdp(r3, &(0x7f0000000080)={0x2d, 0x0, r5, 0x3e}, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x54, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4197}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x73a5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4014}, 0x4000005) write$tun(r1, &(0x7f00000001c0)={@val={0x0, 0x8848}, @void, @x25={0x2, 0xf, 0x13}}, 0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.999803187s ago: executing program 1 (id=16847): bpf$TOKEN_CREATE(0x24, &(0x7f0000000100), 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000005000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5452, &(0x7f0000000280)=0x3a0af83a) poll(&(0x7f0000000040)=[{r3, 0x1146}, {r3, 0x8214}], 0x2, 0x400) shutdown(r3, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000100ba8000001201", 0x2e}], 0x1}, 0x40840) 1.857298581s ago: executing program 0 (id=16849): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x3, 0x6, 0xb83, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000400)={r4, 0xa}, &(0x7f0000000440)=0x8) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r5, 0x0, 0x0) 1.763828491s ago: executing program 1 (id=16850): socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x3, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f00000003c0)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x48}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000380)="fc5cc45c490704289349a8af1d25", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x0, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7fffffff}, 0x0, 0x0) 1.247688902s ago: executing program 2 (id=16856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x1010) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xe}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.200880734s ago: executing program 4 (id=16858): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xb, 0xb}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0x5}, 0xb, 0x0, 0x32, 0x5, 0x9, 0x2, 0x9, 0xd, 0x5, 0x1, {0xffff1c72, 0x23, 0x2, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0x7}, {0x2, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 995.986912ms ago: executing program 2 (id=16859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x80000003) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) 963.427201ms ago: executing program 4 (id=16860): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x20040084) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r4, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r6, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, 0x0, {0xb}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 962.694673ms ago: executing program 0 (id=16861): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000707000/0x2000)=nil, 0x2000, 0x3, 0x12, r1, 0xc3ceb000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8fbc0e6f77c18ed3, 0x11, r4, 0x1000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 891.139367ms ago: executing program 0 (id=16862): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8e32}) mkdirat$cgroup(r0, 0x0, 0x1ff) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000600)={@void, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @val={@val={0x88a8, 0x2}, {0x8100, 0x0, 0x1}}, {@ipv4={0x86dd, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4000, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x9}}}}}}}}, 0x3a) 827.804351ms ago: executing program 1 (id=16864): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x48, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xd}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @mcast2}]}}]}, 0x48}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x3c, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @private=0xa010100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 795.595187ms ago: executing program 2 (id=16865): socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) close(0x3) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}}, 0x8000) 704.940768ms ago: executing program 3 (id=16866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc004) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 634.346016ms ago: executing program 4 (id=16867): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) 597.45975ms ago: executing program 2 (id=16868): socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x1000000010, 0x80002, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='/'], 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 545.615841ms ago: executing program 0 (id=16869): r0 = socket(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xdc, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0xfffffffffffffffd, 0xa00000000000000}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x4}, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f00000008c0)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 525.209326ms ago: executing program 4 (id=16870): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000080)=0x10, 0x4) bind$can_raw(r1, &(0x7f00000000c0), 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000000), r4) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x3, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sendmsg$NLBL_CALIPSO_C_ADD(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x1508a1a9b469814b}, 0x8094) 512.129397ms ago: executing program 3 (id=16871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2a, 0x8001, 0x2, 0x6, 0x6, 0x5, 0x3, 0x200, 0xfffffffb}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x80, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0x84000000, 0x7, 0x4d, 0x80000000, 0x1ff, 0x8, 0x9, 0x2}}}}, @qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_TARGET={0x8, 0x8, 0xfffffe01}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 446.897376ms ago: executing program 1 (id=16872): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8}]}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 329.606942ms ago: executing program 3 (id=16873): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1c42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xb, 0xb}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xbbe, 0x5}}]}}]}, 0x48}}, 0x8000) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r8, {0xc, 0xc}, {0x46, 0xfff1}}}, 0x6a}, 0x1, 0x0, 0x0, 0x20000801}, 0x41080) 328.067308ms ago: executing program 4 (id=16874): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {}, {0xffff, 0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004000) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r6, {0x7, 0x7}, {}, {0xffff, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x810) 278.129989ms ago: executing program 2 (id=16875): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="03000000040000000400"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 204.062823ms ago: executing program 4 (id=16876): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r1 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 169.545699ms ago: executing program 1 (id=16877): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000340)={0x1d, r4, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r3, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000380)="ef8a561e07173f1a4d", 0x9}], 0x1}}], 0x4000000000001cc, 0x20040891) r5 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 165.808912ms ago: executing program 2 (id=16878): syz_emit_ethernet(0x4e, &(0x7f0000000940)={@random="757e938fd660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x8, '\x00', @mcast1}}}}}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001400b5a000000000000000000a"], 0x34}}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x3, 0x0, @loopback, 0x4}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000000200)={0x1, {{0xa, 0x4e22, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xa4fffff9, @loopback}}}, 0x108) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x0, 0x208000, 0x7}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001740)={r2, 0x0, &(0x7f0000000000)=""/57, 0x4}, 0xa) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001600)={0x54, r5, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4) 158.04087ms ago: executing program 3 (id=16879): setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002fc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002f80)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWCHAIN={0x98, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0x7b, 0xc, "5ae6468e971bf669b5f6af6c6e7e2d6f12e7a1c06f2699764b5cd73ae9f9d8f682650e7f4a6c811a80ca1df5930d1c9e07ac31bfa022714ceb39d47fe9891232a1f9ac42a7bd0fc2432c600ff309a5d4e57de16374ec88da0e7b8c007d99291e1cfac44fd60cc39b6a00450c237f139d35e57986435747"}]}, @NFT_MSG_DELCHAIN={0xac, 0x5, 0xa, 0x701, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xd5}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x5}}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ip6gretap0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1c4}, 0x1, 0x0, 0x0, 0x41}, 0x40804) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newtaction={0x6c, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x5, 0x2, {{0x3468802, 0x7, 0x1, 0x3, 0x80000000}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'xfrm0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0}, 0x94) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000480)=""/237, 0xed, 0x40, &(0x7f0000000580)={0x11, 0x17, 0x0, 0x1, 0x98, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x14) 51.970085ms ago: executing program 3 (id=16880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000780), 0x12) socket$kcm(0x29, 0x4, 0x0) syz_emit_ethernet(0x8a, &(0x7f00000005c0)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x1, 0x0, 0xe0, 0x0, 0xe000, {0x18, 0x4, 0x0, 0x0, 0x0, 0x67, 0x0, 0x0, 0x11, 0x0, @local, @multicast1, {[@lsrr={0x83, 0xb, 0x89, [@broadcast, @multicast1]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@local}, {@remote}, {@remote}, {@loopback}, {@dev={0xac, 0x14, 0x14, 0x2b}, 0x800}, {@multicast2}]}]}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000004000000080009000d000000", 0x24) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x1800}]}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000005cc0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x3, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x12}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x409}]}, @CTA_TUPLE_ORIG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x840c0}, 0x400040c0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e24, 0x7, @remote, 0x3}, 0x1c) 0s ago: executing program 3 (id=16881): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) socketpair(0x5, 0x1, 0x6, &(0x7f0000001a80)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) close(0x4) unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) kernel console output (not intermixed with test programs): 92][ T2984] gretap0: entered promiscuous mode [ 711.380134][ T2985] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13776'. [ 711.399627][ T2984] netlink: 5 bytes leftover after parsing attributes in process `syz.1.13775'. [ 711.423238][ T2984] 0ªî{X¹¦: renamed from gretap0 [ 711.449285][ T2984] 0ªî{X¹¦: left promiscuous mode [ 711.473592][ T2984] 0ªî{X¹¦: entered allmulticast mode [ 711.504202][ T2984] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 711.996697][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.050903][ T3020] netlink: 'syz.1.13790': attribute type 3 has an invalid length. [ 712.085524][ T3020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13790'. [ 712.088288][ T3024] netlink: 'syz.2.13793': attribute type 2 has an invalid length. [ 712.110981][ T3024] netlink: 'syz.2.13793': attribute type 2 has an invalid length. [ 712.166575][ T3026] netem: change failed [ 712.876268][ T3067] vlan4: entered allmulticast mode [ 712.890983][ T3067] bridge_slave_0: entered allmulticast mode [ 712.909023][ T3067] bridge0: port 1(vlan4) entered blocking state [ 712.928770][ T3067] bridge0: port 1(vlan4) entered disabled state [ 712.980861][ T3067] vlan4: entered promiscuous mode [ 712.988538][ T3067] bridge_slave_0: entered promiscuous mode [ 713.000421][ T3070] hsr_slave_0: left promiscuous mode [ 713.014618][ T3070] hsr_slave_1: left promiscuous mode [ 713.046728][ T3075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13815'. [ 713.262192][ T3083] xfrm0: entered promiscuous mode [ 713.273046][ T3083] xfrm0: entered allmulticast mode [ 713.284603][ T3085] netlink: 'syz.3.13820': attribute type 9 has an invalid length. [ 713.300274][ T3085] netlink: 'syz.3.13820': attribute type 11 has an invalid length. [ 713.312935][ T3085] netlink: 190972 bytes leftover after parsing attributes in process `syz.3.13820'. [ 713.329142][ T3089] syzkaller1: entered promiscuous mode [ 713.341100][ T3089] syzkaller1: entered allmulticast mode [ 713.692271][ T3105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13829'. [ 714.179109][ T3125] xt_hashlimit: size too large, truncated to 1048576 [ 714.622301][ T3152] ªªªªªª: renamed from wg2 (while UP) [ 714.886417][ T3158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13841'. [ 715.707151][ T3197] netlink: 'syz.3.13857': attribute type 1 has an invalid length. [ 715.735819][ T3190] IPVS: Scheduler module ip_vs_sip not found [ 715.737424][ T3197] netlink: 16150 bytes leftover after parsing attributes in process `syz.3.13857'. [ 715.950771][ T3211] batman_adv: batadv0: Adding interface: gretap2 [ 715.957388][ T3211] batman_adv: batadv0: The MTU of interface gretap2 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.015516][ T3211] batman_adv: batadv0: Interface activated: gretap2 [ 716.199156][ T3224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13865'. [ 717.031962][ T3260] syzkaller1: entered promiscuous mode [ 717.048154][ T3260] syzkaller1: entered allmulticast mode [ 718.467594][ T3333] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 718.754644][ T3349] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13918'. [ 719.466031][ T3382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13933'. [ 719.483115][ T3382] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13933'. [ 720.128034][ T3419] netlink: 'syz.2.13951': attribute type 3 has an invalid length. [ 720.164287][ T3419] netlink: 'syz.2.13951': attribute type 1 has an invalid length. [ 720.182181][ T3419] netlink: 196 bytes leftover after parsing attributes in process `syz.2.13951'. [ 720.200640][ T3419] NCSI netlink: No device for ifindex 2147483648 [ 720.380798][ T3433] erspan0: entered promiscuous mode [ 720.416812][ T3432] erspan0: left promiscuous mode [ 720.821139][ T3456] netlink: 'syz.2.13969': attribute type 1 has an invalid length. [ 720.948890][ T3460] netlink: 'syz.4.13971': attribute type 12 has an invalid length. [ 721.112403][ T3468] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.13975'. [ 721.191811][ T3472] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 721.200110][ T3472] mac80211_hwsim hwsim48 wlan0: entered allmulticast mode [ 721.209791][ T3473] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.13976'. [ 721.401113][ T3485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13982'. [ 721.435927][ T3485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13982'. [ 721.450235][ T3485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13982'. [ 721.490199][ T3485] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13982'. [ 723.229753][ T3586] netlink: 'syz.1.14028': attribute type 7 has an invalid length. [ 723.265908][ T3586] netlink: 'syz.1.14028': attribute type 7 has an invalid length. [ 723.623110][ T3609] bridge0: entered allmulticast mode [ 723.653572][ T3609] pim6reg: entered allmulticast mode [ 723.660725][ T3609] pim6reg: left allmulticast mode [ 723.679506][ T3609] bridge0: left allmulticast mode [ 724.233059][ T3644] ip6t_REJECT: ECHOREPLY is not supported [ 724.593971][ T3665] __nla_validate_parse: 5 callbacks suppressed [ 724.593991][ T3665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14063'. [ 724.642250][ T3662] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 724.652459][ T3667] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.14064'. [ 724.676686][ T3662] bond5: (slave lo): Enslaving as an active interface with an up link [ 724.715661][ T3662] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 724.838148][ T3673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14066'. [ 724.889282][ T3673] netlink: 'syz.2.14066': attribute type 3 has an invalid length. [ 724.923097][ T3673] netlink: 'syz.2.14066': attribute type 2 has an invalid length. [ 724.935451][ T3673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14066'. [ 725.003149][ T3681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14071'. [ 725.064985][ T3684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14072'. [ 725.673397][ T3706] bond6: entered promiscuous mode [ 725.680035][ T3706] 8021q: adding VLAN 0 to HW filter on device bond6 [ 725.718328][ T3710] tipc: Resetting bearer [ 725.758769][ T3710] tipc: Resetting bearer [ 725.879522][ T3710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 725.925393][ T3710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.963267][ T3710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan1 [ 725.993074][ T3710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.033850][ T3710] tipc: Resetting bearer [ 726.042553][ T3710] tipc: Resetting bearer [ 726.128761][ T3710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.140042][ T3710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.320014][ T3740] syzkaller1: entered promiscuous mode [ 726.332659][ T3740] syzkaller1: entered allmulticast mode [ 727.550503][ T3780] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14111'. [ 727.699382][ T3786] netlink: 'syz.3.14116': attribute type 1 has an invalid length. [ 727.733061][ T3786] netlink: 'syz.3.14116': attribute type 2 has an invalid length. [ 727.915926][ T3796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14120'. [ 727.968572][ T3800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14124'. [ 727.992108][ T3800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14124'. [ 728.019560][ T3800] netlink: 'syz.4.14124': attribute type 5 has an invalid length. [ 728.056801][ T3800] netlink: 'syz.4.14124': attribute type 5 has an invalid length. [ 728.307340][ T3816] netlink: 'syz.1.14132': attribute type 1 has an invalid length. [ 728.435220][ T3816] 8021q: adding VLAN 0 to HW filter on device bond5 [ 728.923266][ T3838] netlink: 'syz.3.14140': attribute type 21 has an invalid length. [ 728.943295][ T3838] netlink: 'syz.3.14140': attribute type 22 has an invalid length. [ 728.966109][ T3838] netlink: 'syz.3.14140': attribute type 23 has an invalid length. [ 728.982737][ T3838] netlink: 'syz.3.14140': attribute type 25 has an invalid length. [ 729.007476][ T3838] netlink: 'syz.3.14140': attribute type 26 has an invalid length. [ 730.225843][ T3903] __nla_validate_parse: 3 callbacks suppressed [ 730.225863][ T3903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.14169'. [ 730.372877][ T3908] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 730.449607][ T3908] bond7 (unregistering): Released all slaves [ 730.663776][ T3919] wg1 speed is unknown, defaulting to 1000 [ 730.707836][ T3919] lo speed is unknown, defaulting to 1000 [ 731.329594][ T3944] 8021q: adding VLAN 0 to HW filter on device bond9 [ 731.364107][ T3946] bond9: (slave geneve4): making interface the new active one [ 731.373882][ T3946] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 731.389634][ T1167] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.420418][ T1167] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.467447][ T3951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14189'. [ 731.665670][ T1167] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.694100][ T1167] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.723106][ T3962] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14192'. [ 731.749751][ T3951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14189'. [ 731.825907][ T3962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14192'. [ 732.692119][ T3995] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 732.739429][ T5839] lo speed is unknown, defaulting to 1000 [ 733.586705][ T4045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14227'. [ 733.654266][ T4045] validate_nla: 3 callbacks suppressed [ 733.654283][ T4045] netlink: 'syz.3.14227': attribute type 9 has an invalid length. [ 733.714864][ T1167] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.743058][ T1167] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.773454][ T1167] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 733.810377][ T1167] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 734.430967][ T4077] vcan0: tx drop: invalid sa for name 0x0000000000000005 [ 734.753194][ T4088] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 734.962935][ T4098] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14249'. [ 735.013755][ T4100] netlink: 'syz.4.14252': attribute type 4 has an invalid length. [ 735.105256][ T4107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14254'. [ 735.810967][ T4107] bridge0: port 4(wlan0) entered blocking state [ 735.831201][ T4107] bridge0: port 4(wlan0) entered disabled state [ 735.854456][ T4107] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 735.884300][ T4107] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 736.118661][ T4128] wg1 speed is unknown, defaulting to 1000 [ 736.175868][ T4128] lo speed is unknown, defaulting to 1000 [ 737.434667][ T4158] netlink: 244 bytes leftover after parsing attributes in process `syz.0.14276'. [ 739.121918][ T4209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14298'. [ 739.382597][ T4215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14301'. [ 739.452329][ T4215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14301'. [ 739.469772][ T4219] "syz.1.14303" (4219) uses obsolete ecb(arc4) skcipher [ 739.503858][ T4215] geneve5: entered promiscuous mode [ 739.526317][ T4215] geneve5: entered allmulticast mode [ 740.798525][ T4284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14331'. [ 740.837387][ T4284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 740.874972][ T4284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 740.972355][ T4293] netlink: 'syz.3.14335': attribute type 4 has an invalid length. [ 741.172598][ T4303] netlink: 'syz.1.14340': attribute type 29 has an invalid length. [ 741.224872][ T4308] netlink: 'syz.1.14340': attribute type 29 has an invalid length. [ 741.280054][ T4303] netlink: 'syz.1.14340': attribute type 32 has an invalid length. [ 741.519694][ T4319] tun0: tun_chr_ioctl cmd 1074025675 [ 741.552030][ T4319] tun0: persist enabled [ 741.558514][ T4322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14346'. [ 741.578811][ T4319] tun0: tun_chr_ioctl cmd 1074025675 [ 741.590356][ T4322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14346'. [ 741.607002][ T4319] tun0: persist enabled [ 741.627308][ T4319] tun0: tun_chr_ioctl cmd 1074025673 [ 741.811898][ T4336] netlink: 'syz.1.14352': attribute type 9 has an invalid length. [ 741.827470][ T4336] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.14352'. [ 743.043775][ T4382] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14372'. [ 743.339432][ T4392] netlink: 'syz.0.14377': attribute type 20 has an invalid length. [ 743.361079][ T4392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14377'. [ 743.414485][ T4392] netlink: 'syz.0.14377': attribute type 20 has an invalid length. [ 743.414976][ T13] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.450386][ T4392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14377'. [ 743.450640][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.487001][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.507205][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 743.981339][ T4426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14390'. [ 744.126194][ T4433] wg1 speed is unknown, defaulting to 1000 [ 744.138212][ T4433] lo speed is unknown, defaulting to 1000 [ 744.400439][ T4446] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 744.481306][ T4452] xt_hashlimit: size too large, truncated to 1048576 [ 744.611001][ T4460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14403'. [ 745.266423][ T4484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14414'. [ 745.369552][ T4465] bond5: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 745.458252][ T4465] bond5: (slave lo): Enslaving as an active interface with an up link [ 745.533579][ T4465] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 745.736772][ T4484] bond6: entered promiscuous mode [ 745.768206][ T4484] 8021q: adding VLAN 0 to HW filter on device bond6 [ 745.852893][ T4487] 8021q: adding VLAN 0 to HW filter on device bond6 [ 745.876658][ T4487] bond6: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 745.911717][ T4487] bond6: (slave ip6gre4): Error -95 calling set_mac_address [ 745.961565][ T4501] nbd: nbd4 already in use [ 745.983333][ T4501] block nbd4: NBD_DISCONNECT [ 745.999934][ T4501] block nbd4: Send disconnect failed -32 [ 746.028389][ T4501] block nbd4: shutting down sockets [ 747.302161][ T4529] veth1_to_bond: entered promiscuous mode [ 747.320934][ T4531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14431'. [ 747.346890][ T4530] veth1_to_bond: entered allmulticast mode [ 747.410238][ T4531] veth1_to_bond (unregistering): left promiscuous mode [ 747.448544][ T4531] veth1_to_bond (unregistering): left allmulticast mode [ 748.033589][ T4548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14437'. [ 748.053547][ T4548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14437'. [ 748.073651][ T4548] netlink: 'syz.2.14437': attribute type 14 has an invalid length. [ 748.092833][ T4548] netlink: 'syz.2.14437': attribute type 12 has an invalid length. [ 748.106953][ T4548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14437'. [ 748.119730][ T4548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14437'. [ 748.130541][ T4548] netlink: 'syz.2.14437': attribute type 14 has an invalid length. [ 748.142005][ T4548] netlink: 'syz.2.14437': attribute type 12 has an invalid length. [ 749.312239][ T4592] netlink: 'syz.2.14455': attribute type 10 has an invalid length. [ 749.330717][ T4598] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 749.350854][ T4592] dummy0: entered promiscuous mode [ 749.359702][ T4592] team0: Port device dummy0 added [ 749.366726][ T4599] netlink: 'syz.2.14455': attribute type 10 has an invalid length. [ 749.388212][ T4599] dummy0: left promiscuous mode [ 749.411959][ T4599] team0: Port device dummy0 removed [ 749.623755][ T4608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14460'. [ 749.679352][ T4611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14460'. [ 750.366640][ T29] audit: type=1800 audit(1778133460.893:8): pid=4634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.14471" name="memory.events" dev="tmpfs" ino=14058 res=0 errno=0 [ 751.136826][ T4670] netlink: 'syz.0.14485': attribute type 4 has an invalid length. [ 751.190034][ T4671] netlink: 'syz.0.14485': attribute type 4 has an invalid length. [ 751.559738][ T4681] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 751.587556][ T4681] syzkaller1: Linktype set failed because interface is up [ 751.810458][ T4686] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00aa with DS=0xee [ 753.027102][ T4716] netlink: 'syz.2.14502': attribute type 3 has an invalid length. [ 754.740339][ T4767] ip6gre3: entered promiscuous mode [ 754.769152][ T4767] ip6gre3: entered allmulticast mode [ 754.773065][ T4770] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 754.799988][ T498] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 754.812128][ T498] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 754.828118][ T5839] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 755.025198][ T4784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14531'. [ 755.294106][ T4799] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 755.516945][ T5839] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 755.540671][ T5839] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 755.562603][ T4814] pimreg: left allmulticast mode [ 755.684308][ T4818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14547'. [ 755.744134][ T4822] netlink: 'syz.4.14549': attribute type 1 has an invalid length. [ 755.831392][ T4822] 8021q: adding VLAN 0 to HW filter on device bond6 [ 755.850740][ T4826] bond6: (slave geneve5): making interface the new active one [ 755.865133][ T4826] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 755.917079][ T3148] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 755.970158][ T3148] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 756.009842][ T3148] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 756.040524][ T3148] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 756.229287][ T4842] syzkaller1: entered promiscuous mode [ 756.240846][ T4842] syzkaller1: entered allmulticast mode [ 757.038599][ T4875] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14570'. [ 757.284637][ T4879] sctp: [Deprecated]: syz.0.14571 (pid 4879) Use of int in max_burst socket option. [ 757.284637][ T4879] Use struct sctp_assoc_value instead [ 757.436424][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 757.564229][ T4888] netlink: 'syz.0.14574': attribute type 1 has an invalid length. [ 757.593415][ T4888] netlink: 60 bytes leftover after parsing attributes in process `syz.0.14574'. [ 758.354428][ T4903] netlink: 1343 bytes leftover after parsing attributes in process `syz.1.14582'. [ 758.569039][ T4913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14586'. [ 758.635649][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 758.768181][ T4922] netlink: 'syz.1.14590': attribute type 4 has an invalid length. [ 758.917525][ T4925] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 758.944490][ T4925] batman_adv: batadv0: Adding interface: ip6gretap2 [ 758.992363][ T4925] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 759.049625][ T4925] batman_adv: batadv0: Interface activated: ip6gretap2 [ 759.531598][ T4962] syzkaller1: entered promiscuous mode [ 759.548963][ T4962] syzkaller1: entered allmulticast mode [ 759.577218][ T4962] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 760.234277][ T5002] netlink: 'syz.3.14616': attribute type 1 has an invalid length. [ 760.259566][ T5004] Bluetooth: hci1: too big key_count value 29096 [ 760.362163][ T5002] 8021q: adding VLAN 0 to HW filter on device bond10 [ 760.439316][ T5013] netlink: 'syz.1.14618': attribute type 1 has an invalid length. [ 760.475203][ T5013] netlink: 'syz.1.14618': attribute type 6 has an invalid length. [ 760.493192][ T5006] bond10: (slave geneve5): making interface the new active one [ 760.507755][ T5013] netlink: 'syz.1.14618': attribute type 3 has an invalid length. [ 760.521966][ T5006] bond10: (slave geneve5): Enslaving as an active interface with an up link [ 760.630823][ T5006] syz.3.14616 (5006) used greatest stack depth: 18176 bytes left [ 761.303406][ T5049] netlink: 'syz.4.14635': attribute type 8 has an invalid length. [ 761.321383][ T5049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14635'. [ 761.367399][ T5049] veth1_to_team: entered promiscuous mode [ 761.378057][ T5049] veth1_to_team: left promiscuous mode [ 761.903228][ T29] audit: type=1800 audit(1778133472.423:9): pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.14646" name=20 dev="tmpfs" ino=14483 res=0 errno=0 [ 761.946608][ T5075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14647'. [ 761.959681][ T5075] netlink: 'syz.2.14647': attribute type 30 has an invalid length. [ 762.048815][ T5075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14647'. [ 762.077672][ T5075] netlink: 'syz.2.14647': attribute type 30 has an invalid length. [ 762.483485][ T5089] bond11: entered promiscuous mode [ 762.517472][ T5089] 8021q: adding VLAN 0 to HW filter on device bond11 [ 762.937919][ T5113] netlink: 180 bytes leftover after parsing attributes in process `syz.0.14663'. [ 764.184598][ T5148] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 764.836959][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14690'. [ 764.872173][ T5181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14690'. [ 764.905532][ T5181] netlink: 'syz.0.14690': attribute type 12 has an invalid length. [ 764.941777][ T5181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14690'. [ 764.976242][ T5181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14690'. [ 765.008835][ T5181] netlink: 'syz.0.14690': attribute type 12 has an invalid length. [ 765.139973][ T5197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14697'. [ 765.169899][ T5197] bond0: Unable to set down delay as MII monitoring is disabled [ 765.280955][ T5201] netlink: 408 bytes leftover after parsing attributes in process `syz.4.14700'. [ 765.302981][ T5201] netlink: 'syz.4.14700': attribute type 2 has an invalid length. [ 765.642931][ T5228] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 765.751759][ T5233] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 765.814004][ T5240] netlink: 'syz.2.14715': attribute type 29 has an invalid length. [ 766.346244][ T5265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14726'. [ 766.799959][ T5292] syzkaller1: entered promiscuous mode [ 766.819650][ T5292] syzkaller1: entered allmulticast mode [ 767.035568][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 767.078091][ T5307] netlink: 'syz.2.14742': attribute type 29 has an invalid length. [ 767.110794][ T5307] netlink: 'syz.2.14742': attribute type 29 has an invalid length. [ 767.139524][ T5307] netlink: 500 bytes leftover after parsing attributes in process `syz.2.14742'. [ 767.561992][ T5333] netlink: 'syz.2.14752': attribute type 13 has an invalid length. [ 767.593660][ T5333] netlink: 'syz.2.14752': attribute type 17 has an invalid length. [ 767.627740][ T5318] bridge0: port 3(syz_tun) entered disabled state [ 767.650268][ T5318] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.872124][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.894022][ T5318] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 768.002449][ T5318] tipc: Resetting bearer [ 768.738420][ T5330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 768.764098][ T5330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.339693][ T5330] hsr0: left allmulticast mode [ 769.355136][ T5330] hsr_slave_0: left allmulticast mode [ 769.369959][ T5330] hsr_slave_1: left allmulticast mode [ 769.584858][ T5333] team0: left promiscuous mode [ 769.590622][ T5333] team_slave_0: left promiscuous mode [ 769.603272][ T5333] team_slave_1: left promiscuous mode [ 769.616871][ T5333] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.649505][ T5333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.668565][ T5381] "syz.4.14762" (5381) uses obsolete ecb(arc4) skcipher [ 769.675155][ T5382] tls_set_device_offload_rx: netdev not found [ 769.699136][ T5333] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.706441][ T5333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.732033][ T5333] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.739293][ T5333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.761207][ T5333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.778522][ T5333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.790694][ T5333] xfrm0: left promiscuous mode [ 769.805708][ T5333] xfrm0: left allmulticast mode [ 769.831498][ T5333] hsr0: left promiscuous mode [ 769.848853][ T5333] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 769.985165][ T1283] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.999226][ T5341] syz1: Port: 1 Link DOWN [ 770.009102][ T1283] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.030291][ T1283] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.060140][ T1283] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.089491][ T5399] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.14768'. [ 770.096799][ T1283] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.139054][ T1283] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.156230][ T1283] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.174623][ T1283] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.202014][ T1283] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.211094][ T1283] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 770.232981][ T1283] netdevsim netdevsim2 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 770.254235][ T1283] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.273563][ T1283] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 770.304144][ T1283] netdevsim netdevsim2 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 770.323442][ T1283] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.360137][ T1283] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 770.376006][ T1283] netdevsim netdevsim2 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 770.394157][ T1283] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.409056][ T1283] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 770.420882][ T1283] netdevsim netdevsim2 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 770.515890][ T5418] netlink: 'syz.0.14776': attribute type 2 has an invalid length. [ 770.594955][ T5428] wg1 speed is unknown, defaulting to 1000 [ 770.603299][ T5428] lo speed is unknown, defaulting to 1000 [ 770.680284][ T5437] netlink: 'syz.0.14780': attribute type 11 has an invalid length. [ 770.932252][ T5448] netlink: 'syz.0.14783': attribute type 13 has an invalid length. [ 770.949111][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14787'. [ 770.959982][ T5450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14787'. [ 771.212213][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14787'. [ 771.233696][ T5450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14787'. [ 771.324797][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14789'. [ 771.366551][ T5464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14789'. [ 771.400806][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14789'. [ 771.432851][ T5464] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14789'. [ 771.461096][ T5470] xt_hashlimit: size too large, truncated to 1048576 [ 771.975625][ T5496] netlink: 'syz.4.14803': attribute type 3 has an invalid length. [ 772.088541][ T5502] pim6reg1: entered promiscuous mode [ 772.093912][ T5502] pim6reg1: entered allmulticast mode [ 773.970297][ T5597] wg1 speed is unknown, defaulting to 1000 [ 774.008561][ T5597] lo speed is unknown, defaulting to 1000 [ 774.226708][ T5607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14838'. [ 774.400337][ T5612] tipc: Resetting bearer [ 774.418096][ T5612] tipc: Resetting bearer [ 774.424093][ T5612] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 774.820295][ T5633] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14843'. [ 774.843461][ T5633] netlink: 32 bytes leftover after parsing attributes in process `syz.3.14843'. [ 775.411426][ T5658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14851'. [ 775.548225][ T5663] syz.0.14852 (5663) used obsolete PPPIOCDETACH ioctl [ 776.089681][ T5699] netlink: 27 bytes leftover after parsing attributes in process `syz.4.14865'. [ 776.291285][ T5722] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14870'. [ 776.424553][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14875'. [ 776.457535][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14875'. [ 776.504863][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14875'. [ 777.182958][ T5783] wg1 speed is unknown, defaulting to 1000 [ 777.201953][ T5783] lo speed is unknown, defaulting to 1000 [ 778.164678][ T5831] gtp1: entered promiscuous mode [ 778.178077][ T5831] gtp1: entered allmulticast mode [ 778.431399][ T5844] netlink: 'syz.2.14912': attribute type 1 has an invalid length. [ 778.473856][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 778.508398][ T5848] bond0: (slave gretap3): making interface the new active one [ 778.518905][ T5848] bond0: (slave gretap3): Enslaving as an active interface with an up link [ 778.596779][ T5850] netlink: 'syz.3.14914': attribute type 1 has an invalid length. [ 778.611151][ T5850] netlink: 'syz.3.14914': attribute type 22 has an invalid length. [ 778.967416][ T5861] netlink: 'syz.3.14918': attribute type 1 has an invalid length. [ 779.050044][ T5861] 8021q: adding VLAN 0 to HW filter on device bond12 [ 779.177293][ T5861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14918'. [ 779.220031][ T5864] bond12: (slave gretap3): making interface the new active one [ 779.256426][ T5864] bond12: (slave gretap3): Enslaving as an active interface with an up link [ 779.328119][ T5861] bond12 (unregistering): (slave gretap3): Releasing active interface [ 779.413872][ T5861] bond12 (unregistering): Released all slaves [ 780.193956][ T5884] wg1 speed is unknown, defaulting to 1000 [ 780.215924][ T5884] lo speed is unknown, defaulting to 1000 [ 781.312835][ T5915] netlink: 148 bytes leftover after parsing attributes in process `syz.3.14937'. [ 781.354471][ T5918] wg1 speed is unknown, defaulting to 1000 [ 781.374906][ T5918] lo speed is unknown, defaulting to 1000 [ 781.977390][ T5942] netlink: 'syz.3.14946': attribute type 83 has an invalid length. [ 782.221574][ T5953] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14950'. [ 782.452951][ T5959] netlink: 'syz.1.14952': attribute type 6 has an invalid length. [ 782.481854][ T5959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14952'. [ 782.658861][ T5966] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14955'. [ 783.036395][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 783.078998][ T5984] netlink: 'syz.3.14963': attribute type 1 has an invalid length. [ 783.221856][ T5984] 8021q: adding VLAN 0 to HW filter on device bond12 [ 783.248199][ T5986] bond12: option tlb_dynamic_lb: unable to set because the bond device is up [ 783.374195][ T5996] netlink: 60 bytes leftover after parsing attributes in process `syz.2.14966'. [ 783.460219][ T5999] netlink: 'syz.0.14968': attribute type 10 has an invalid length. [ 783.495505][ T5999] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14968'. [ 783.539353][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14968'. [ 783.568885][ T6005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14968'. [ 783.916931][ T6023] veth0: entered promiscuous mode [ 783.956477][ T6023] bond0: entered promiscuous mode [ 783.966242][ T6023] : entered promiscuous mode [ 783.983460][ T6022] bond0: left promiscuous mode [ 783.995643][ T6022] : left promiscuous mode [ 784.015713][ T6022] veth0: left promiscuous mode [ 784.093619][ T6029] netlink: 'syz.2.14979': attribute type 1 has an invalid length. [ 784.104049][ T6027] netlink: 220 bytes leftover after parsing attributes in process `syz.0.14980'. [ 784.143040][ T6027] netlink: 220 bytes leftover after parsing attributes in process `syz.0.14980'. [ 784.155851][ T6027] netlink: 56 bytes leftover after parsing attributes in process `syz.0.14980'. [ 784.502246][ T6032] gretap4: entered allmulticast mode [ 784.531251][ T6032] bond11: (slave gretap4): making interface the new active one [ 784.565775][ T6032] bond11: (slave gretap4): Enslaving as an active interface with an up link [ 787.336097][ T6141] __nla_validate_parse: 2 callbacks suppressed [ 787.336115][ T6141] netlink: 3 bytes leftover after parsing attributes in process `syz.4.15024'. [ 788.310181][ T6176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15037'. [ 788.466078][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15037'. [ 788.476676][ T6178] wg1 speed is unknown, defaulting to 1000 [ 788.478087][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15042'. [ 788.506871][ T6178] lo speed is unknown, defaulting to 1000 [ 788.518492][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15042'. [ 789.882492][ T6217] wg1 speed is unknown, defaulting to 1000 [ 789.891353][ T6230] lo: Caught tx_queue_len zero misconfig [ 790.211609][ T6217] lo speed is unknown, defaulting to 1000 [ 791.066986][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15071'. [ 791.192332][ T6272] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15072'. [ 791.849472][ T6308] bridge0: port 3(vlan5) entered blocking state [ 791.868428][ T6308] bridge0: port 3(vlan5) entered disabled state [ 791.882074][ T6308] vlan5: entered allmulticast mode [ 791.894727][ T6308] geneve0: entered allmulticast mode [ 791.913278][ T6308] vlan5: entered promiscuous mode [ 791.924817][ T6308] geneve0: entered promiscuous mode [ 792.380811][ T6333] atm:do_vcc_ioctl: ATM_SETSC is obsolete; used by syz.1.15098:6333 [ 792.403474][ T6339] wg1 speed is unknown, defaulting to 1000 [ 792.419713][ T6339] lo speed is unknown, defaulting to 1000 [ 793.541140][ T6388] wg1 speed is unknown, defaulting to 1000 [ 793.621581][ T6388] lo speed is unknown, defaulting to 1000 [ 794.254344][ T6422] syzkaller1: entered promiscuous mode [ 794.279821][ T6422] syzkaller1: entered allmulticast mode [ 795.282769][ T6463] netlink: 'syz.3.15147': attribute type 21 has an invalid length. [ 795.398132][ T6463] netlink: 'syz.3.15147': attribute type 21 has an invalid length. [ 795.521829][ T6468] wg1 speed is unknown, defaulting to 1000 [ 795.553731][ T6468] lo speed is unknown, defaulting to 1000 [ 795.800707][ T6484] wg1 speed is unknown, defaulting to 1000 [ 795.843773][ T6484] lo speed is unknown, defaulting to 1000 [ 795.852773][ T6482] IPVS: Scheduler module ip_vs_ not found [ 795.883280][ T6479] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 795.931556][ T6474] nbd0: detected capacity change from 0 to 63 [ 795.980223][ T5636] block nbd0: Receive control failed (result -32) [ 796.017075][ T5634] block nbd0: Dead connection, failed to find a fallback [ 796.026154][ T5634] block nbd0: shutting down sockets [ 796.033300][ T5634] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.044959][ T5634] Buffer I/O error on dev nbd0, logical block 0, async page read [ 796.053380][ T5634] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.063941][ T5634] Buffer I/O error on dev nbd0, logical block 1, async page read [ 796.072253][ T5634] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.082728][ T5634] Buffer I/O error on dev nbd0, logical block 2, async page read [ 796.102245][ T5634] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.124924][ T5634] Buffer I/O error on dev nbd0, logical block 3, async page read [ 796.133568][ T5634] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.177434][ T5634] Buffer I/O error on dev nbd0, logical block 0, async page read [ 796.232359][ T5634] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.283987][ T5634] Buffer I/O error on dev nbd0, logical block 1, async page read [ 796.295252][ T6500] sctp: [Deprecated]: syz.0.15159 (pid 6500) Use of int in maxseg socket option. [ 796.295252][ T6500] Use struct sctp_assoc_value instead [ 796.319405][ T5634] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.357992][ T5634] Buffer I/O error on dev nbd0, logical block 2, async page read [ 796.375741][ T5634] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.391185][ T5634] Buffer I/O error on dev nbd0, logical block 3, async page read [ 796.399789][ T5634] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.409370][ T5634] Buffer I/O error on dev nbd0, logical block 0, async page read [ 796.417405][ T5634] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 796.426994][ T5634] Buffer I/O error on dev nbd0, logical block 1, async page read [ 796.461469][ T5634] ldm_validate_partition_table(): Disk read failed. [ 796.492161][ T5634] Dev nbd0: unable to read RDB block 0 [ 796.523046][ T5634] nbd0: unable to read partition table [ 796.652735][ T5634] ldm_validate_partition_table(): Disk read failed. [ 796.709440][ T5634] Dev nbd0: unable to read RDB block 0 [ 796.741374][ T5634] nbd0: unable to read partition table [ 796.759742][ T6518] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15164'. [ 797.121842][ T6526] sctp: [Deprecated]: syz.3.15170 (pid 6526) Use of int in maxseg socket option. [ 797.121842][ T6526] Use struct sctp_assoc_value instead [ 797.210979][ T6535] netlink: 'syz.2.15173': attribute type 1 has an invalid length. [ 797.224720][ T6535] netlink: 'syz.2.15173': attribute type 1 has an invalid length. [ 797.241804][ T6535] netlink: 264 bytes leftover after parsing attributes in process `syz.2.15173'. [ 797.255020][ T6540] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 797.268512][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15173'. [ 797.324884][ T6535] netlink: 'syz.2.15173': attribute type 1 has an invalid length. [ 797.336537][ T6535] netlink: 'syz.2.15173': attribute type 1 has an invalid length. [ 797.344515][ T6535] netlink: 264 bytes leftover after parsing attributes in process `syz.2.15173'. [ 797.354597][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15173'. [ 797.390905][ T6536] wg1 speed is unknown, defaulting to 1000 [ 797.409950][ T6536] lo speed is unknown, defaulting to 1000 [ 797.478048][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15176'. [ 797.543031][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15176'. [ 797.565888][ T498] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.579849][ T498] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.602431][ T498] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.656381][ T498] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 797.831539][ T6557] netlink: 88 bytes leftover after parsing attributes in process `syz.0.15181'. [ 797.981745][ T6565] netlink: 'syz.0.15183': attribute type 1 has an invalid length. [ 798.066862][ T6565] bond7: entered promiscuous mode [ 798.072869][ T6565] 8021q: adding VLAN 0 to HW filter on device bond7 [ 798.264401][ T6565] 8021q: adding VLAN 0 to HW filter on device bond7 [ 798.287522][ T6565] bond7: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 798.307796][ T6565] bond7: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 798.320886][ T6565] bond7: (slave ip6gre2): making interface the new active one [ 798.329026][ T6565] ip6gre2: entered promiscuous mode [ 798.337168][ T6565] bond7: (slave ip6gre2): Enslaving as an active interface with an up link [ 799.088263][ T6608] wg1 speed is unknown, defaulting to 1000 [ 799.097148][ T6608] lo speed is unknown, defaulting to 1000 [ 799.209633][ T6616] wg1 speed is unknown, defaulting to 1000 [ 799.227317][ T6616] lo speed is unknown, defaulting to 1000 [ 799.530447][ T6625] netlink: 76 bytes leftover after parsing attributes in process `syz.0.15197'. [ 799.817031][ T6633] syzkaller1: entered promiscuous mode [ 799.828806][ T6633] syzkaller1: entered allmulticast mode [ 800.043102][ T6644] syzkaller1: entered promiscuous mode [ 800.048831][ T6644] syzkaller1: entered allmulticast mode [ 800.652854][ T6668] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15212'. [ 801.360642][ T6691] syzkaller1: entered promiscuous mode [ 801.366397][ T6691] syzkaller1: entered allmulticast mode [ 802.220348][ T6740] __nla_validate_parse: 7 callbacks suppressed [ 802.220369][ T6740] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15241'. [ 802.254353][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15241'. [ 802.949576][ T6777] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 802.957480][ T6777] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 802.965193][ T6777] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 802.972973][ T6777] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 802.980714][ T6777] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 802.988570][ T6777] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 802.996295][ T6777] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 803.003981][ T6777] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 803.011340][ T6782] wg1 speed is unknown, defaulting to 1000 [ 803.013457][ T6777] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 803.013503][ T6777] aoe: error packet from 57979.68@lo; ecode=101 'no such error' [ 803.031199][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15261'. [ 803.052143][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15261'. [ 803.084886][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15261'. [ 803.111061][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15261'. [ 803.139824][ T6782] lo speed is unknown, defaulting to 1000 [ 803.450300][ T6792] wg1 speed is unknown, defaulting to 1000 [ 803.462284][ T6792] lo speed is unknown, defaulting to 1000 [ 804.358489][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15275'. [ 804.384583][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15275'. [ 804.610326][ T6824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15275'. [ 804.656902][ T6824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15275'. [ 805.630517][ T6863] IPv6: sit1: Disabled Multicast RS [ 805.780250][ T6871] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 805.898295][ T6878] netlink: 'syz.2.15298': attribute type 1 has an invalid length. [ 805.973398][ T6878] bond12: (slave bridge7): making interface the new active one [ 805.994991][ T6878] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 806.230186][ T6895] wg1 speed is unknown, defaulting to 1000 [ 806.249779][ T6895] lo speed is unknown, defaulting to 1000 [ 807.260032][ T6933] __nla_validate_parse: 1 callbacks suppressed [ 807.260051][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15324'. [ 807.428301][ T6948] netlink: 'syz.2.15326': attribute type 11 has an invalid length. [ 807.459896][ T6948] netlink: 7 bytes leftover after parsing attributes in process `syz.2.15326'. [ 807.664999][ T6956] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 807.879648][ T6970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15335'. [ 807.949174][ T6970] 8021q: adding VLAN 0 to HW filter on device bond7 [ 808.028321][ T6976] 8021q: adding VLAN 0 to HW filter on device bond8 [ 808.046255][ T6970] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15335'. [ 808.060961][ T6980] netlink: 240 bytes leftover after parsing attributes in process `syz.4.15336'. [ 808.069665][ T6976] bond7: (slave bond8): Enslaving as an active interface with an up link [ 808.227917][ T6970] bond7 (unregistering): (slave bond8): Releasing backup interface [ 808.349857][ T6970] bond7 (unregistering): Released all slaves [ 808.382200][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15341'. [ 809.503804][ T7039] syzkaller1: entered promiscuous mode [ 809.520554][ T7039] syzkaller1: entered allmulticast mode [ 809.590268][ T7043] netlink: 'syz.4.15364': attribute type 10 has an invalid length. [ 809.612750][ T7043] dummy0: entered promiscuous mode [ 809.621574][ T7043] dummy0: entered allmulticast mode [ 809.638556][ T7043] team0: Failed to send options change via netlink (err -105) [ 809.653279][ T7044] netlink: 'syz.4.15364': attribute type 10 has an invalid length. [ 809.676529][ T7043] team0: Port device dummy0 added [ 809.698742][ T7044] dummy0: left allmulticast mode [ 809.721348][ T7044] team0: Failed to send options change via netlink (err -105) [ 809.758829][ T7044] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 809.783069][ T7050] xt_hashlimit: size too large, truncated to 1048576 [ 809.787241][ T7044] team0: Port device dummy0 removed [ 809.914925][ T7053] netlink: 'syz.1.15368': attribute type 8 has an invalid length. [ 809.930207][ T7053] netlink: 'syz.1.15368': attribute type 9 has an invalid length. [ 810.370646][ T7074] wg1 speed is unknown, defaulting to 1000 [ 810.384134][ T7074] lo speed is unknown, defaulting to 1000 [ 811.436920][ T7107] wg1 speed is unknown, defaulting to 1000 [ 811.456264][ T7107] lo speed is unknown, defaulting to 1000 [ 812.754023][ T7141] tipc: Failed to remove unknown binding: 66,1,1/10005162:1135040528/1135040530 [ 814.700479][ T7190] vxcan0: entered allmulticast mode [ 814.892994][ T7197] syzkaller1: entered promiscuous mode [ 814.915370][ T7197] syzkaller1: entered allmulticast mode [ 815.594685][ T7224] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.15426'. [ 815.604933][ T7224] net_ratelimit: 3255 callbacks suppressed [ 815.604953][ T7224] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 815.842617][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15431'. [ 815.864612][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15431'. [ 815.876301][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15431'. [ 815.900787][ T7230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15431'. [ 816.109283][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15435'. [ 816.315543][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 816.364767][ T7260] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.15439'. [ 817.014114][ T7298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15453'. [ 817.091199][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15453'. [ 818.120217][ T7316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 818.172952][ T7316] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 818.482648][ T7316] team0: left allmulticast mode [ 818.493278][ T7316] team_slave_0: left allmulticast mode [ 818.502708][ T7316] team_slave_1: left allmulticast mode [ 818.510351][ T7316] veth3: left allmulticast mode [ 818.517609][ T7316] team0: left promiscuous mode [ 818.522546][ T7316] team_slave_0: left promiscuous mode [ 818.530845][ T7316] team_slave_1: left promiscuous mode [ 818.536996][ T7316] veth3: left promiscuous mode [ 818.684737][ T7316] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 818.819701][ T1167] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.841794][ T1167] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.898900][ T1167] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 818.959284][ T1167] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.987172][ T1167] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.021059][ T1167] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 819.042190][ T1167] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.084663][ T1167] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.109045][ T1167] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 819.149068][ T1167] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.167147][ T1167] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.185467][ T1167] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 819.208972][ T7340] pim6reg1: entered promiscuous mode [ 819.219681][ T7340] pim6reg1: entered allmulticast mode [ 819.727668][ T7351] netlink: 'syz.0.15474': attribute type 7 has an invalid length. [ 820.238743][ T7374] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.15482'. [ 820.432603][ T7380] wg1 speed is unknown, defaulting to 1000 [ 820.454545][ T7380] lo speed is unknown, defaulting to 1000 [ 820.720079][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15487'. [ 820.750021][ T7386] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 821.472840][ T7400] netlink: 'syz.4.15493': attribute type 16 has an invalid length. [ 821.491789][ T7400] netlink: 'syz.4.15493': attribute type 17 has an invalid length. [ 821.604991][ T7400] bridge0: left promiscuous mode [ 821.628106][ T7400] 8021q: adding VLAN 0 to HW filter on device team0 [ 821.643432][ T7400] dummy0: left promiscuous mode [ 821.652072][ T7400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 821.746279][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 821.771343][ T7400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 821.808062][ T7400] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 821.833870][ T7400] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 821.850369][ T7400] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 821.880841][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.888071][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 821.939189][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.946774][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 822.054076][ T7406] syzkaller1: entered promiscuous mode [ 822.065439][ T7406] syzkaller1: entered allmulticast mode [ 822.096443][ T7411] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 822.288357][ T7421] netlink: 'syz.3.15499': attribute type 4 has an invalid length. [ 822.312480][ T7421] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15499'. [ 822.333610][ T7421] : mtu greater than device maximum [ 822.469136][ T7426] veth0: entered promiscuous mode [ 822.493368][ T7426] veth0: left promiscuous mode [ 822.908298][ T7451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15512'. [ 822.918918][ T7452] netlink: 'syz.0.15514': attribute type 1 has an invalid length. [ 822.928944][ T7452] netlink: 'syz.0.15514': attribute type 4 has an invalid length. [ 822.937938][ T7452] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.15514'. [ 823.448647][ T7480] netlink: 'syz.3.15525': attribute type 1 has an invalid length. [ 823.528074][ T7480] 8021q: adding VLAN 0 to HW filter on device bond13 [ 823.609855][ T7490] bond13: (slave gretap6): making interface the new active one [ 823.621040][ T7490] bond13: (slave gretap6): Enslaving as an active interface with an up link [ 823.849780][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15532'. [ 823.876498][ T7505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15533'. [ 824.332109][ T7521] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15540'. [ 824.365067][ T7516] syzkaller1: entered promiscuous mode [ 824.373752][ T7516] syzkaller1: entered allmulticast mode [ 824.549582][ T7533] netlink: 'syz.4.15544': attribute type 1 has an invalid length. [ 824.577749][ T7530] wg1 speed is unknown, defaulting to 1000 [ 824.618490][ T7530] lo speed is unknown, defaulting to 1000 [ 824.782985][ T7538] wg1 speed is unknown, defaulting to 1000 [ 824.823307][ T7538] lo speed is unknown, defaulting to 1000 [ 824.912410][ T7547] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15550'. [ 825.135240][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15547'. [ 825.941919][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15563'. [ 825.984203][ T7584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15563'. [ 826.077375][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15564'. [ 826.131239][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15566'. [ 826.174110][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15566'. [ 826.294139][ T7599] syzkaller1: entered promiscuous mode [ 826.300563][ T7599] syzkaller1: entered allmulticast mode [ 826.479759][ T7607] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15570'. [ 826.593128][ T7607] netlink: 20 bytes leftover after parsing attributes in process `syz.0.15570'. [ 827.052891][ T7631] syzkaller1: entered promiscuous mode [ 827.085985][ T7631] syzkaller1: entered allmulticast mode [ 828.247151][ T7685] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15593'. [ 829.697575][ T7724] 0ªî{X¹¦: left allmulticast mode [ 830.204076][ T7724] tipc: Resetting bearer [ 830.309494][ T7724] veth0_to_bond: left allmulticast mode [ 830.393139][ T7724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 830.756857][ T7724] vlan0: left promiscuous mode [ 831.283325][ T7724] bond4: left allmulticast mode [ 831.291800][ T7724] ip6gre3: left promiscuous mode [ 831.297325][ T7724] ip6gre3: left allmulticast mode [ 831.311095][ T7724] vlan2: left promiscuous mode [ 831.319497][ T7724] bridge0: left promiscuous mode [ 831.789248][ T5347] lo speed is unknown, defaulting to 1000 [ 831.808303][ T5347] syz2: Port: 1 Link DOWN [ 831.818554][ T7736] pimreg: entered allmulticast mode [ 831.850280][ T7738] dvmrp0: left allmulticast mode [ 831.881851][ T5348] wg1 speed is unknown, defaulting to 1000 [ 831.891673][ T77] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.910985][ T5348] syz0: Port: 1 Link DOWN [ 831.927847][ T77] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.944631][ T77] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 831.963639][ T77] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.982416][ T77] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.002847][ T77] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.027634][ T7738] pimreg: left allmulticast mode [ 832.117475][ T7771] wg1 speed is unknown, defaulting to 1000 [ 832.140541][ T77] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 832.177286][ T77] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.249966][ T7771] lo speed is unknown, defaulting to 1000 [ 833.169165][ T7849] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15628'. [ 833.942680][ T7872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15633'. [ 834.199258][ T7891] wg1 speed is unknown, defaulting to 1000 [ 834.207443][ T7891] lo speed is unknown, defaulting to 1000 [ 834.223015][ T7894] netlink: 192 bytes leftover after parsing attributes in process `syz.0.15638'. [ 834.479086][ T7899] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15640'. [ 835.412786][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15653'. [ 835.430580][ T7932] macsec0: entered promiscuous mode [ 835.436640][ T7932] batadv_slave_1: entered promiscuous mode [ 835.442918][ T7932] macsec0: entered allmulticast mode [ 835.449690][ T7932] batadv_slave_1: entered allmulticast mode [ 835.458135][ T7932] batadv_slave_1: left allmulticast mode [ 835.465267][ T7932] batadv_slave_1: left promiscuous mode [ 835.730529][ T7945] netlink: 180 bytes leftover after parsing attributes in process `syz.2.15657'. [ 835.760455][ T7948] netlink: 'syz.0.15658': attribute type 1 has an invalid length. [ 835.806730][ T7948] netlink: 'syz.0.15658': attribute type 4 has an invalid length. [ 835.810194][ T7952] netlink: 'syz.0.15658': attribute type 1 has an invalid length. [ 835.851671][ T7948] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.15658'. [ 835.898783][ T7952] netlink: 'syz.0.15658': attribute type 4 has an invalid length. [ 835.972537][ T7952] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.15658'. [ 836.784425][ T7990] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15669'. [ 836.970472][ T7996] wg1 speed is unknown, defaulting to 1000 [ 836.997201][ T7996] lo speed is unknown, defaulting to 1000 [ 837.334061][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.357038][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.381554][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.404152][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.428724][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.442663][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.454178][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.481574][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.523525][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.572290][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.627839][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.669988][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.719364][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.732978][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.779274][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.809465][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.837044][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.872243][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.902163][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.915251][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.927291][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.939342][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.952879][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.968761][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.981676][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 837.996154][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 838.008565][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 838.031338][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 838.051366][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 838.066966][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 838.079601][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 838.091875][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 838.103403][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 838.114939][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 838.152533][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 838.164617][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 838.180674][ T8008] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 839.056798][ T8088] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15700'. [ 839.220171][ T8097] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 839.228830][ T8097] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 839.238748][ T8096] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15703'. [ 839.276035][ T8096] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15703'. [ 839.320711][ T8102] netlink: 'syz.0.15705': attribute type 1 has an invalid length. [ 839.400121][ T8105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15707'. [ 839.791565][ T8122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15715'. [ 839.984682][ T8130] netlink: 44 bytes leftover after parsing attributes in process `syz.3.15718'. [ 841.381305][ T8189] wg1 speed is unknown, defaulting to 1000 [ 841.391041][ T8189] lo speed is unknown, defaulting to 1000 [ 841.500475][ T8198] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15746'. [ 841.781891][ T8203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15748'. [ 841.854793][ T8205] netlink: 144 bytes leftover after parsing attributes in process `syz.2.15749'. [ 842.172213][ T8221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15753'. [ 844.213786][ T8281] RDS: rds_bind could not find a transport for 0:b3::, load rds_tcp or rds_rdma? [ 844.234456][ T8278] wg1 speed is unknown, defaulting to 1000 [ 844.247675][ T8278] lo speed is unknown, defaulting to 1000 [ 844.722674][ T8295] __nla_validate_parse: 2 callbacks suppressed [ 844.722696][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15779'. [ 844.766317][ T8295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15779'. [ 844.794980][ T8295] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 844.837370][ T8297] wg1 speed is unknown, defaulting to 1000 [ 844.877859][ T8297] lo speed is unknown, defaulting to 1000 [ 845.024970][ T8302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15781'. [ 845.182990][ T8305] sch_tbf: burst 88 is lower than device veth15 mtu (1514) ! [ 845.420653][ T8313] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1500) ! [ 845.439705][ T8315] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 845.465491][ T8315] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 845.760329][ T8327] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15789'. [ 845.788380][ T8309] scsi_nl_rcv_msg: discarding partial skb [ 845.980879][ T8334] sctp: [Deprecated]: syz.0.15792 (pid 8334) Use of struct sctp_assoc_value in delayed_ack socket option. [ 845.980879][ T8334] Use struct sctp_sack_info instead [ 846.229487][ T8348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15797'. [ 846.348339][ T8356] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15801'. [ 846.390800][ T8356] netlink: 92 bytes leftover after parsing attributes in process `syz.4.15801'. [ 846.651692][ T8370] netlink: 'syz.0.15807': attribute type 2 has an invalid length. [ 846.806397][ T8379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15810'. [ 846.937057][ T8387] netlink: 'syz.1.15813': attribute type 4 has an invalid length. [ 846.954954][ T8387] netlink: 'syz.1.15813': attribute type 4 has an invalid length. [ 846.987357][ T5348] lo speed is unknown, defaulting to 1000 [ 847.002422][ T5348] syz2: Port: 1 Link ACTIVE [ 847.334760][ T8401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15819'. [ 847.577401][ T8409] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15822'. [ 848.414948][ T8456] netlink: 'syz.2.15841': attribute type 1 has an invalid length. [ 848.514086][ T8456] 8021q: adding VLAN 0 to HW filter on device bond13 [ 848.586914][ T8461] bond13: (slave veth9): Enslaving as an active interface with a down link [ 848.712611][ T8456] bond13: (slave dummy0): making interface the new active one [ 848.748500][ T8456] dummy0: entered promiscuous mode [ 848.778501][ T8456] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 849.285050][ T8496] netlink: 'syz.0.15853': attribute type 1 has an invalid length. [ 850.341571][ T8546] wg1 speed is unknown, defaulting to 1000 [ 850.378970][ T8546] lo speed is unknown, defaulting to 1000 [ 850.577538][ T8559] __nla_validate_parse: 13 callbacks suppressed [ 850.577558][ T8559] netlink: 16 bytes leftover after parsing attributes in process `syz.4.15875'. [ 850.675136][ T8566] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15877'. [ 850.935575][ T8571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15882'. [ 850.957017][ T8571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15882'. [ 850.972490][ T8571] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15882'. [ 850.982943][ T8571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15882'. [ 851.071192][ T8583] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15884'. [ 851.397503][ T8592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15888'. [ 851.420796][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15889'. [ 851.512566][ T8600] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.15891'. [ 851.646294][ T8604] ip6tnl0: Caught tx_queue_len zero misconfig [ 851.992939][ T8612] wg1 speed is unknown, defaulting to 1000 [ 852.033086][ T8624] netlink: 'syz.3.15898': attribute type 1 has an invalid length. [ 852.054665][ T8612] lo speed is unknown, defaulting to 1000 [ 852.111377][ T8624] bond14: entered promiscuous mode [ 852.117676][ T8624] bond14: entered allmulticast mode [ 852.143074][ T8624] 8021q: adding VLAN 0 to HW filter on device bond14 [ 852.269991][ T8630] macvlan2: entered promiscuous mode [ 852.282811][ T8630] macvlan2: entered allmulticast mode [ 852.304823][ T8630] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 852.611227][ T8643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.633773][ T8643] tipc: Resetting bearer [ 852.641556][ T8643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.812200][ T8643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.848452][ T8643] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 853.095548][ T7758] wg1 speed is unknown, defaulting to 1000 [ 853.125172][ T7758] syz0: Port: 1 Link ACTIVE [ 853.187999][ T8666] tipc: Enabled bearer , priority 0 [ 853.227441][ T8669] syzkaller0: MTU too low for tipc bearer [ 853.233461][ T8669] tipc: Disabling bearer [ 854.056453][ T8691] wg1 speed is unknown, defaulting to 1000 [ 854.086235][ T8691] lo speed is unknown, defaulting to 1000 [ 855.281816][ T8728] tipc: Enabled bearer , priority 0 [ 855.332373][ T8716] tipc: Resetting bearer [ 855.378075][ T8716] tipc: Disabling bearer [ 856.030073][ T8762] __nla_validate_parse: 7 callbacks suppressed [ 856.030093][ T8762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15943'. [ 856.399683][ T8775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15951'. [ 856.727844][ T8795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15959'. [ 857.408697][ T8819] netlink: 'syz.4.15967': attribute type 1 has an invalid length. [ 857.459043][ T8819] bond7: entered promiscuous mode [ 857.464786][ T8819] 8021q: adding VLAN 0 to HW filter on device bond7 [ 857.700990][ T8822] 8021q: adding VLAN 0 to HW filter on device bond7 [ 857.735942][ T8822] bond7: (slave wireguard1): The slave device specified does not support setting the MAC address [ 857.765530][ T8822] bond7: (slave wireguard1): Setting fail_over_mac to active for active-backup mode [ 857.800257][ T8822] bond7: (slave wireguard1): making interface the new active one [ 857.817473][ T8822] wireguard1: entered promiscuous mode [ 857.835207][ T8822] bond7: (slave wireguard1): Enslaving as an active interface with an up link [ 858.393991][ T8854] netlink: 24 bytes leftover after parsing attributes in process `syz.1.15977'. [ 858.799599][ T8864] netlink: 'syz.1.15982': attribute type 1 has an invalid length. [ 858.914569][ T8864] 8021q: adding VLAN 0 to HW filter on device bond7 [ 859.052513][ T8866] bond7: (slave veth15): Enslaving as an active interface with a down link [ 859.103980][ T8864] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 859.135781][ T8864] bond7: (slave batadv3): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 859.344463][ T8872] RDS: rds_bind could not find a transport for ::a00:0:0:0, load rds_tcp or rds_rdma? [ 859.426119][ T8874] wg1 speed is unknown, defaulting to 1000 [ 859.448429][ T8874] lo speed is unknown, defaulting to 1000 [ 860.241138][ T8901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15991'. [ 860.280409][ T8895] syzkaller1: entered allmulticast mode [ 860.512078][ T8905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.15995'. [ 860.777495][ T444] dummy0: left promiscuous mode [ 860.844203][ T8916] netlink: 'syz.4.15999': attribute type 30 has an invalid length. [ 860.873126][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15999'. [ 860.928748][ T8916] netlink: 'syz.4.15999': attribute type 30 has an invalid length. [ 860.952547][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15999'. [ 861.006520][ T8922] netlink: 7 bytes leftover after parsing attributes in process `syz.2.16001'. [ 861.845735][ T8940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16009'. [ 862.251943][ T8946] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16012'. [ 862.998182][ T8968] tipc: Failed to remove unknown binding: 66,1,1/4277326352:269169454/269169456 [ 863.027600][ T8968] tipc: Failed to remove unknown binding: 66,1,1/4277326352:269169454/269169456 [ 863.075390][ T8968] tipc: Failed to remove unknown binding: 66,1,1/4277326352:269169454/269169456 [ 863.098735][ T8969] tipc: Resetting bearer [ 863.328905][ T8969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.397462][ T8969] tipc: Resetting bearer [ 863.482370][ T8969] batman_adv: batadv0: Interface deactivated: gretap2 [ 863.799013][ T444] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.827347][ T444] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.942600][ T8992] netlink: 'syz.3.16029': attribute type 1 has an invalid length. [ 863.984600][ T444] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.003694][ T444] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.064255][ T8994] macvlan2: entered promiscuous mode [ 864.070723][ T8994] macvlan2: entered allmulticast mode [ 864.078871][ T8994] bond15: entered promiscuous mode [ 864.087475][ T8994] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 864.153073][ T8994] bond15: left promiscuous mode [ 864.186611][ T444] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.200946][ T444] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.219177][ T444] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 864.235371][ T444] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 864.241853][ T9000] netlink: 'syz.4.16030': attribute type 1 has an invalid length. [ 864.301424][ T9000] 8021q: adding VLAN 0 to HW filter on device bond8 [ 864.321392][ T9002] bond8: (slave geneve6): making interface the new active one [ 864.333752][ T9002] bond8: (slave geneve6): Enslaving as an active interface with an up link [ 864.347215][ T1283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.388856][ T1283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.397965][ T1283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.414036][ T1283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.000650][ T9021] bond5: (slave lo): Releasing backup interface [ 865.018708][ T9021] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 865.044686][ T9021] syz_tun: left allmulticast mode [ 865.056918][ T9021] syz_tun: left promiscuous mode [ 865.062325][ T9021] bridge0: port 3(syz_tun) entered disabled state [ 865.074167][ T9021] bridge_slave_0: left allmulticast mode [ 865.081047][ T9021] bridge_slave_0: left promiscuous mode [ 865.088019][ T9021] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.100489][ T9021] bridge_slave_1: left allmulticast mode [ 865.107111][ T9021] bridge_slave_1: left promiscuous mode [ 865.113007][ T9021] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.127525][ T9021] bond0: (slave bond_slave_0): Releasing backup interface [ 865.139981][ T9021] team0: Port device 76žÿ removed [ 865.146815][ T9021] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 865.155143][ T9021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.165966][ T9021] bond7: (slave ip6gre2): Releasing backup interface [ 865.172952][ T9021] ip6gre2: left promiscuous mode [ 865.204512][ T9023] wg1 speed is unknown, defaulting to 1000 [ 865.214300][ T9023] lo speed is unknown, defaulting to 1000 [ 865.915093][ T9041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16045'. [ 865.925201][ T9041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16045'. [ 866.021767][ T9048] netlink: 'syz.4.16048': attribute type 4 has an invalid length. [ 866.053780][ T9048] netlink: 'syz.4.16048': attribute type 4 has an invalid length. [ 866.264062][ T9052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.275958][ T9052] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.294124][ T9052] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.349101][ T9052] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 866.448957][ T9056] tipc: Enabled bearer , priority 0 [ 866.468109][ T9058] d: renamed from syzkaller0 [ 866.485213][ T9058] tipc: Disabling bearer [ 866.521413][ T5369] syz1: Port: 1 Link ACTIVE [ 866.864282][ T9070] wg1 speed is unknown, defaulting to 1000 [ 866.884491][ T9070] lo speed is unknown, defaulting to 1000 [ 867.988355][ T9095] syzkaller1: entered promiscuous mode [ 868.009072][ T9095] syzkaller1: entered allmulticast mode [ 868.908568][ T9111] wg1 speed is unknown, defaulting to 1000 [ 868.929798][ T9111] lo speed is unknown, defaulting to 1000 [ 869.160302][ T9119] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16073'. [ 869.175671][ T9119] vlan5: left allmulticast mode [ 869.180658][ T9119] geneve0: left allmulticast mode [ 869.187072][ T9119] vlan5: left promiscuous mode [ 869.192599][ T9119] geneve0: left promiscuous mode [ 869.198858][ T9119] bridge0: port 3(vlan5) entered disabled state [ 869.239822][ T9119] bridge_slave_0: left allmulticast mode [ 869.265478][ T9119] bridge_slave_0: left promiscuous mode [ 869.271483][ T9119] bridge0: port 2(bridge_slave_0) entered disabled state [ 869.288671][ T9119] veth0_virt_wifi: left allmulticast mode [ 869.305421][ T9119] veth0_virt_wifi: left promiscuous mode [ 869.311337][ T9119] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 869.709976][ T9128] veth0_macvtap: left allmulticast mode [ 869.720124][ T9128] vlan2: left allmulticast mode [ 869.735414][ T9128] geneve1: left allmulticast mode [ 869.745676][ T9128] mac80211_hwsim hwsim48 wlan0: left promiscuous mode [ 869.760326][ T9128] mac80211_hwsim hwsim48 wlan0: left allmulticast mode [ 869.790274][ T9128] ip6gre2: left allmulticast mode [ 869.818775][ T9128] gtp2: left promiscuous mode [ 869.823679][ T9128] gtp2: left allmulticast mode [ 869.848843][ T9128] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 869.856912][ T9128] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 869.864867][ T9128] bond6: left promiscuous mode [ 869.870314][ T9128] bond7: left promiscuous mode [ 869.876051][ T9143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16079'. [ 869.876703][ T9128] ip6gre3: left promiscuous mode [ 869.891590][ T9128] ip6gre3: left allmulticast mode [ 869.897542][ T9128] bond11: left promiscuous mode [ 869.903519][ T9128] bond14: left promiscuous mode [ 869.908938][ T9128] bond14: left allmulticast mode [ 869.931313][ T9135] netlink: 'syz.0.16078': attribute type 3 has an invalid length. [ 869.945657][ T9135] netlink: 'syz.0.16078': attribute type 3 has an invalid length. [ 871.218109][ T9185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16096'. [ 871.252143][ T9185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16096'. [ 871.256792][ T9182] wg1 speed is unknown, defaulting to 1000 [ 871.286308][ T9182] lo speed is unknown, defaulting to 1000 [ 871.336799][ T9192] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16099'. [ 871.504858][ T9198] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16099'. [ 871.523061][ T9198] nbd: device at index 64 is going down [ 871.630282][ T5634] udevd[5634]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 871.671042][ T5634] udevd[5634]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 872.270412][ T9237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 872.311299][ T9237] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 872.453249][ T9240] wg1 speed is unknown, defaulting to 1000 [ 872.462783][ T9244] netlink: 212916 bytes leftover after parsing attributes in process `syz.1.16114'. [ 872.616070][ T9240] lo speed is unknown, defaulting to 1000 [ 872.791425][ T9257] iwpm_parse_nlmsg: Invalid attribute (msg type Remote Mapping info ret = -34) [ 872.889185][ T9260] wg1 speed is unknown, defaulting to 1000 [ 872.916717][ T9260] lo speed is unknown, defaulting to 1000 [ 873.844244][ T9292] wg1 speed is unknown, defaulting to 1000 [ 873.878083][ T9292] lo speed is unknown, defaulting to 1000 [ 874.053654][ T9304] syz_tun: entered allmulticast mode [ 874.092125][ T9303] syz_tun: left allmulticast mode [ 874.482745][ T9313] wg1 speed is unknown, defaulting to 1000 [ 874.516619][ T9322] wg1 speed is unknown, defaulting to 1000 [ 874.546155][ T9322] lo speed is unknown, defaulting to 1000 [ 874.580736][ T9331] atomic_op ffff88808e2ed998 conn xmit_atomic 0000000000000000 [ 874.590002][ T9313] lo speed is unknown, defaulting to 1000 [ 874.751979][ T9339] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16146'. [ 875.049302][ T9353] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16150'. [ 875.081407][ T9343] bond0: (slave 07ÿ): Releasing backup interface [ 875.135846][ T9343] bond0: (slave bond_slave_1): Releasing backup interface [ 875.162777][ T9343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.175231][ T9343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.199914][ T9343] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 875.218589][ T9353] vlan4: left allmulticast mode [ 875.225970][ T9353] bridge_slave_0: left allmulticast mode [ 875.232727][ T9353] vlan4: left promiscuous mode [ 875.238798][ T9353] bridge_slave_0: left promiscuous mode [ 875.244965][ T9353] bridge0: port 1(vlan4) entered disabled state [ 875.651942][ T9368] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16155'. [ 876.800187][ T9405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16170'. [ 877.994354][ T9441] netlink: 'syz.3.16187': attribute type 1 has an invalid length. [ 878.130453][ T9441] 8021q: adding VLAN 0 to HW filter on device bond16 [ 878.207059][ T9445] vlan5: entered allmulticast mode [ 878.242424][ T9445] bond16: entered allmulticast mode [ 878.366841][ T9448] bond16: (slave geneve6): making interface the new active one [ 878.384844][ T9458] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16192'. [ 878.396440][ T9448] geneve6: entered allmulticast mode [ 878.409390][ T9448] bond16: (slave geneve6): Enslaving as an active interface with an up link [ 878.420846][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.454147][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.537233][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.637207][ T9454] wg1 speed is unknown, defaulting to 1000 [ 878.650239][ T77] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.664973][ T9454] lo speed is unknown, defaulting to 1000 [ 878.777427][ T9467] syzkaller1: entered promiscuous mode [ 878.788456][ T9467] syzkaller1: entered allmulticast mode [ 879.431360][ T9492] wg1 speed is unknown, defaulting to 1000 [ 879.487659][ T9492] lo speed is unknown, defaulting to 1000 [ 880.226831][ T9529] tipc: Enabled bearer , priority 0 [ 880.234773][ T9529] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 880.244716][ T9529] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 881.138081][ T9565] netlink: 240 bytes leftover after parsing attributes in process `syz.4.16226'. [ 881.162374][ T9565] netlink: 56 bytes leftover after parsing attributes in process `syz.4.16226'. [ 881.167493][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16227'. [ 881.252404][ T9554] tipc: Resetting bearer [ 881.886312][ T7758] lo speed is unknown, defaulting to 1000 [ 881.896379][ T7758] syz2: Port: 1 Link DOWN [ 881.930692][ T7757] wg1 speed is unknown, defaulting to 1000 [ 881.958307][ T7757] syz0: Port: 1 Link DOWN [ 882.089438][ T9575] wg1 speed is unknown, defaulting to 1000 [ 882.107993][ T9575] lo speed is unknown, defaulting to 1000 [ 882.183573][ T9586] sock: sock_set_timeout: `syz.1.16232' (pid 9586) tries to set negative timeout [ 882.738424][ T9609] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16236'. [ 883.193989][ T9610] wg1 speed is unknown, defaulting to 1000 [ 883.258897][ T9610] lo speed is unknown, defaulting to 1000 [ 884.386798][ T9651] netlink: 'syz.2.16251': attribute type 1 has an invalid length. [ 884.488204][ T9651] bond14: entered promiscuous mode [ 884.493863][ T9651] 8021q: adding VLAN 0 to HW filter on device bond14 [ 886.474990][ T9715] netlink: 27 bytes leftover after parsing attributes in process `syz.0.16276'. [ 887.423234][ T9738] netlink: 'syz.3.16287': attribute type 11 has an invalid length. [ 887.783844][ T9748] bond8: entered promiscuous mode [ 889.001774][ T9757] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.011071][ T9757] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.304739][ T9757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 889.340343][ T9757] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 890.027575][ T9795] netlink: 1484 bytes leftover after parsing attributes in process `syz.3.16306'. [ 890.038680][ T9795] netlink: 1484 bytes leftover after parsing attributes in process `syz.3.16306'. [ 890.378633][ T9811] netlink: 'syz.2.16312': attribute type 4 has an invalid length. [ 890.414714][ T9811] netlink: 'syz.2.16312': attribute type 4 has an invalid length. [ 890.982483][ T9826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16318'. [ 892.328991][ T9881] bond15: entered promiscuous mode [ 892.366102][ T9876] wg1 speed is unknown, defaulting to 1000 [ 892.389821][ T9876] lo speed is unknown, defaulting to 1000 [ 893.144221][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16347'. [ 893.171000][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16347'. [ 894.220783][ T9948] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 894.250870][ T9950] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16359'. [ 894.342120][ T9952] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 894.373957][ T9950] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16359'. [ 894.431309][ T9955] netlink: 16158 bytes leftover after parsing attributes in process `syz.1.16361'. [ 894.508604][ T9962] mac80211_hwsim hwsim10 ªªªªª;: renamed from wlan0 [ 894.568345][ T9966] netlink: 'syz.1.16365': attribute type 1 has an invalid length. [ 894.594956][ T9966] sctp: [Deprecated]: syz.1.16365 (pid 9966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 894.594956][ T9966] Use struct sctp_sack_info instead [ 895.182229][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16373'. [ 895.540098][ T9996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16377'. [ 895.638159][ T9997] ipip0: entered promiscuous mode [ 895.723963][ T9998] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ipip0 [ 895.761643][ T9998] gretap5: entered promiscuous mode [ 895.785458][ T9998] gretap5: entered allmulticast mode [ 895.803024][T10002] mac80211_hwsim hwsim10 syzkaller0: left promiscuous mode [ 895.824893][T10002] mac80211_hwsim hwsim10 syzkaller0: left allmulticast mode [ 896.220842][T10023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16388'. [ 896.248384][T10021] syzkaller1: entered promiscuous mode [ 896.270420][T10021] syzkaller1: entered allmulticast mode [ 896.741263][T10042] tipc: Enabled bearer , priority 0 [ 896.789266][T10037] tipc: Resetting bearer [ 901.481428][T10037] tipc: Disabling bearer [ 901.506012][ T5355] tipc: Node number set to 4294246401 [ 901.790265][T10089] wg1 speed is unknown, defaulting to 1000 [ 901.797251][T10094] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16407'. [ 901.810258][T10097] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16408'. [ 901.817773][T10089] lo speed is unknown, defaulting to 1000 [ 901.849427][T10099] netlink: 'syz.3.16409': attribute type 13 has an invalid length. [ 902.065110][T10109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16411'. [ 902.148684][ T1283] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.260920][ T1283] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.288153][ T1283] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.296535][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16411'. [ 902.318329][ T1283] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.341169][T10116] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 902.974708][T10142] wg1 speed is unknown, defaulting to 1000 [ 903.014195][T10142] lo speed is unknown, defaulting to 1000 [ 903.138875][T10148] netlink: 'syz.4.16425': attribute type 4 has an invalid length. [ 903.162508][T10148] netlink: 'syz.4.16425': attribute type 4 has an invalid length. [ 903.207939][T10151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16426'. [ 903.351496][T10159] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16429'. [ 903.961548][T10177] wg1 speed is unknown, defaulting to 1000 [ 903.980895][T10177] lo speed is unknown, defaulting to 1000 [ 904.220976][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16441'. [ 904.414842][T10189] wg1 speed is unknown, defaulting to 1000 [ 904.447346][T10189] lo speed is unknown, defaulting to 1000 [ 904.927957][T10213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16447'. [ 906.107975][T10234] IPVS: Scheduler module ip_vs_ not found [ 906.661878][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16464'. [ 906.696274][T10254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16464'. [ 907.374290][T10275] xt_hashlimit: size too large, truncated to 1048576 [ 907.983960][T10287] netlink: 'syz.1.16474': attribute type 1 has an invalid length. [ 908.166574][T10287] 8021q: adding VLAN 0 to HW filter on device bond10 [ 908.193858][T10287] bond9: (slave bond10): making interface the new active one [ 908.199712][T10295] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16474'. [ 908.213251][T10287] bond9: (slave bond10): Enslaving as an active interface with an up link [ 908.264747][T10292] bond9: (slave gretap0): Enslaving as a backup interface with an up link [ 908.344729][T10295] 8021q: adding VLAN 0 to HW filter on device bond9 [ 908.681610][T10310] syzkaller0: entered promiscuous mode [ 908.700332][T10310] syzkaller0: entered allmulticast mode [ 910.024942][T10355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16496'. [ 910.087883][T10358] wg1 speed is unknown, defaulting to 1000 [ 910.097879][T10358] lo speed is unknown, defaulting to 1000 [ 910.400145][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16505'. [ 910.410034][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16505'. [ 910.530290][T10377] wg1 speed is unknown, defaulting to 1000 [ 910.559407][T10377] lo speed is unknown, defaulting to 1000 [ 911.423337][T10410] xt_hashlimit: size too large, truncated to 1048576 [ 912.393575][T10439] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16528'. [ 913.998431][T10485] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16545'. [ 914.275022][T10495] netlink: 'syz.1.16550': attribute type 12 has an invalid length. [ 914.504498][T10508] siw: device registration error -23 [ 914.769018][T10518] ip6gre3: entered promiscuous mode [ 914.774711][T10518] ip6gre3: entered allmulticast mode [ 915.011242][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16562'. [ 915.136816][T10528] 8021q: adding VLAN 0 to HW filter on device bond9 [ 915.158952][T10532] bond9: entered promiscuous mode [ 915.171292][T10532] bond9: entered allmulticast mode [ 915.230017][T10538] bond0: entered promiscuous mode [ 915.266100][T10538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.303595][T10538] bond0: entered allmulticast mode [ 915.316163][T10538] bond9: (slave bond0): Enslaving as an active interface with an up link [ 915.460326][T10551] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 915.562351][T10557] batman_adv: batadv0: Interface activated: vlan3 [ 915.581286][T10557] erspan0: left promiscuous mode [ 915.630112][T10557] tipc: Resetting bearer [ 915.645775][T10557] tipc: Resetting bearer [ 915.668579][T10557] ip6gretap0: left promiscuous mode [ 915.689316][T10557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.730854][T10557] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.762040][T10557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.862143][T10557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 915.885944][T10557] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 915.927762][T10557] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 917.390215][T10616] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 917.401453][T10606] wg1 speed is unknown, defaulting to 1000 [ 917.488691][T10606] lo speed is unknown, defaulting to 1000 [ 917.515046][T10613] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 917.563660][T10620] wg1 speed is unknown, defaulting to 1000 [ 917.621050][T10620] lo speed is unknown, defaulting to 1000 [ 917.978490][T10635] netlink: 'syz.0.16593': attribute type 1 has an invalid length. [ 918.003628][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16594'. [ 918.024526][T10640] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16592'. [ 918.059165][T10637] team1: entered promiscuous mode [ 918.064382][T10637] team1: entered allmulticast mode [ 918.070260][T10637] 8021q: adding VLAN 0 to HW filter on device team1 [ 918.097189][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16594'. [ 918.157902][T10635] 8021q: adding VLAN 0 to HW filter on device bond10 [ 918.199411][T10645] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 918.253640][T10645] team2: entered promiscuous mode [ 918.276047][T10645] team2: entered allmulticast mode [ 918.288255][T10645] 8021q: adding VLAN 0 to HW filter on device team2 [ 918.637008][T10665] netlink: 'syz.3.16603': attribute type 1 has an invalid length. [ 918.678681][T10670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16604'. [ 918.855686][T10672] 8021q: adding VLAN 0 to HW filter on device bond18 [ 918.869344][T10672] bond17: (slave bond18): making interface the new active one [ 918.896106][T10672] bond17: (slave bond18): Enslaving as an active interface with an up link [ 918.905241][T10670] bond0: ARP target 170.170.170.170 is already present [ 918.925364][T10670] bond0: option arp_ip_target: invalid value (2863311530) [ 918.953448][T10677] bond17: (slave gretap7): Enslaving as a backup interface with an up link [ 919.002478][T10666] syzkaller1: entered promiscuous mode [ 919.015210][T10666] syzkaller1: entered allmulticast mode [ 919.373199][T10694] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 919.822603][T10714] netlink: 84 bytes leftover after parsing attributes in process `syz.4.16612'. [ 919.832812][T10714] netlink: 84 bytes leftover after parsing attributes in process `syz.4.16612'. [ 919.874324][T10709] wg1 speed is unknown, defaulting to 1000 [ 919.883411][T10709] lo speed is unknown, defaulting to 1000 [ 919.959231][T10722] tipc: Failed to remove unknown binding: 66,0,0/10005162:1172089445/1172089447 [ 919.969796][T10722] tipc: Failed to remove unknown binding: 66,0,0/10005162:1172089445/1172089446 [ 919.993569][T10722] tipc: Failed to remove unknown binding: 66,0,0/10005162:1172089445/1172089447 [ 920.016305][T10722] tipc: Failed to remove unknown binding: 66,0,0/10005162:1172089445/1172089446 [ 920.528589][T10741] wg1 speed is unknown, defaulting to 1000 [ 920.606349][T10741] lo speed is unknown, defaulting to 1000 [ 921.380578][T10763] syzkaller0: entered promiscuous mode [ 921.390385][T10763] syzkaller0: entered allmulticast mode [ 925.886703][T10773] wg1 speed is unknown, defaulting to 1000 [ 925.904798][T10773] lo speed is unknown, defaulting to 1000 [ 926.070911][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16630'. [ 926.627929][T10817] xt_CT: You must specify a L4 protocol and not use inversions on it [ 926.691900][T10817] netlink: 'syz.4.16639': attribute type 21 has an invalid length. [ 926.729474][T10822] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16638'. [ 926.988975][T10829] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 927.012862][T10829] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 927.054128][T10835] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16644'. [ 927.839258][T10857] 8021q: adding VLAN 0 to HW filter on device bond12 [ 927.849961][T10857] bond11: (slave bond12): Enslaving as an active interface with an up link [ 927.963902][T10861] bond11: (slave gretap2): Enslaving as an active interface with an up link [ 928.367449][T10875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16652'. [ 928.929816][T10902] netlink: 'syz.1.16659': attribute type 6 has an invalid length. [ 928.942573][T10896] wg1 speed is unknown, defaulting to 1000 [ 928.946687][T10902] netlink: 3936 bytes leftover after parsing attributes in process `syz.1.16659'. [ 929.002209][T10902] netlink: 'syz.1.16659': attribute type 1 has an invalid length. [ 929.026608][T10902] block nbd4: Unsupported socket: should be TCP or UNIX. [ 929.257223][T10896] lo speed is unknown, defaulting to 1000 [ 929.356657][T10909] netlink: 192 bytes leftover after parsing attributes in process `syz.4.16662'. [ 929.384300][T10906] wg1 speed is unknown, defaulting to 1000 [ 929.393246][T10909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16662'. [ 929.467007][T10906] lo speed is unknown, defaulting to 1000 [ 929.551384][T10912] wg1 speed is unknown, defaulting to 1000 [ 929.587062][T10912] lo speed is unknown, defaulting to 1000 [ 929.630162][T10920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16665'. [ 930.202699][T10922] 8021q: adding VLAN 0 to HW filter on device bond14 [ 930.308548][T10922] bond14 (unregistering): Released all slaves [ 930.459127][T10932] netlink: 'syz.3.16668': attribute type 27 has an invalid length. [ 930.480192][T10932] netlink: 'syz.3.16668': attribute type 4 has an invalid length. [ 930.493556][T10932] netlink: 144 bytes leftover after parsing attributes in process `syz.3.16668'. [ 930.711063][T10937] wg1 speed is unknown, defaulting to 1000 [ 930.720052][T10937] lo speed is unknown, defaulting to 1000 [ 931.273615][T10960] netlink: 200 bytes leftover after parsing attributes in process `syz.0.16677'. [ 931.303950][T10960] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16677'. [ 931.321539][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 931.329086][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 931.336543][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 931.345081][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 931.354042][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 931.364314][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 931.371567][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 931.380893][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 931.395615][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 931.402495][ C0] ip_tunnel: non-ECT from 127.2.0.1 with TOS=0xfe [ 931.772568][T10980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16682'. [ 931.857865][T10972] syzkaller0: entered promiscuous mode [ 931.885761][T10972] syzkaller0: entered allmulticast mode [ 931.918964][T10989] netlink: 'syz.0.16685': attribute type 1 has an invalid length. [ 931.966672][T10990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16684'. [ 931.973437][T10989] bond14: entered promiscuous mode [ 931.984459][T10989] 8021q: adding VLAN 0 to HW filter on device bond14 [ 932.070819][T10989] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16685'. [ 935.944550][T10990] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.952114][T10990] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.171985][T10990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 936.198484][T10990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 936.366878][T10989] bond14: left promiscuous mode [ 936.375041][T10989] bond14: entered allmulticast mode [ 936.404179][T10993] bond14: (slave bridge13): making interface the new active one [ 936.413835][T10993] bridge13: entered allmulticast mode [ 936.421423][T10993] bond14: (slave bridge13): Enslaving as an active interface with an up link [ 936.437026][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16687'. [ 936.456847][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16687'. [ 936.481794][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16687'. [ 936.495728][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16687'. [ 936.510786][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16687'. [ 936.534072][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16687'. [ 936.545912][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16687'. [ 936.561166][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16687'. [ 936.572731][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16687'. [ 936.585841][T11002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16687'. [ 936.602929][T11002] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.613842][T11002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.656967][T11002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 936.666818][T11002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 936.679446][T11002] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 936.690638][T11002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 936.708197][T11002] veth1_macvtap: left promiscuous mode [ 936.716104][T11002] veth0_macvtap: left promiscuous mode [ 936.722949][T11002] veth0_macvtap: entered promiscuous mode [ 936.730513][T11002] veth1_macvtap: entered promiscuous mode [ 936.753429][T11002] 8021q: adding VLAN 0 to HW filter on device bond1 [ 936.762245][T11002] 8021q: adding VLAN 0 to HW filter on device bond2 [ 936.819439][T11002] 8021q: adding VLAN 0 to HW filter on device bond3 [ 936.832554][T11002] net_ratelimit: 250 callbacks suppressed [ 936.832568][T11002] A link change request failed with some changes committed already. Interface geneve4 may have been left with an inconsistent configuration, please check. [ 936.858640][ T1172] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.954896][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.962260][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 936.984713][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.992115][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 937.033942][ T1172] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.086856][ T1172] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.137556][ T1172] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.159325][ T1172] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.181961][ T1172] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.226565][ T1283] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 937.251813][ T1283] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 937.260186][ T5356] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 937.290917][ T1172] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.331959][ T1167] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 937.374627][ T1167] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 937.383889][ T5356] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 937.436727][ T5356] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 937.449124][ T1172] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 937.653938][T11049] 8021q: adding VLAN 0 to HW filter on device bond11 [ 937.686498][T11054] lo speed is unknown, defaulting to 1000 [ 937.695618][ T5357] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 937.724316][T11056] bond11: entered promiscuous mode [ 937.731947][T11056] bond11: entered allmulticast mode [ 937.758222][T11054] lo speed is unknown, defaulting to 1000 [ 937.758249][T11049] bond0: entered promiscuous mode [ 937.775775][T11049] bond0: entered allmulticast mode [ 937.781750][T11049] bond11: (slave bond0): Enslaving as an active interface with an up link [ 937.831002][T11054] lo speed is unknown, defaulting to 1000 [ 937.875731][ T5357] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 937.995090][T11066] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.116052][T11066] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.208849][T11066] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.291014][T11073] bond1: entered promiscuous mode [ 938.314621][T11073] 8021q: adding VLAN 0 to HW filter on device bond1 [ 938.437399][T11079] bond1: (slave vti0): refused to change device type [ 938.478537][ T7757] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 938.588429][T11066] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.681402][T11054] infiniband sqz0: set down [ 938.698697][T11054] infiniband sqz0: added lo [ 938.713927][ T5355] lo speed is unknown, defaulting to 1000 [ 938.728004][T11054] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 938.730110][T11054] infiniband sqz0: Couldn't open port 1 [ 938.755757][T11075] wg1 speed is unknown, defaulting to 1000 [ 938.777920][T11054] smbdirect: ib_dev[sqz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 938.812210][T11054] smbdirect: ib_dev[sqz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 938.846549][T11054] smbdirect: ib_dev[sqz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 938.866952][T11075] lo speed is unknown, defaulting to 1000 [ 938.893623][T11075] lo speed is unknown, defaulting to 1000 [ 938.941009][T11054] RDS/IB: sqz0: added [ 938.954365][T11054] smc: adding ib device sqz0 with port count 1 [ 938.977341][T11054] smc: ib device sqz0 port 1 has no pnetid [ 938.995628][ T5355] lo speed is unknown, defaulting to 1000 [ 939.247023][T11107] ip6_vti0: entered promiscuous mode [ 939.314611][ T1167] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.374392][ T1167] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.443059][ T1283] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.505018][ T1167] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.525552][T11054] lo speed is unknown, defaulting to 1000 [ 939.761023][T11120] netlink: 'syz.2.16709': attribute type 10 has an invalid length. [ 939.829105][T11120] team0: Port device geneve1 added [ 940.327024][T11054] lo speed is unknown, defaulting to 1000 [ 940.537658][T11139] bond12: entered promiscuous mode [ 940.543540][T11139] 8021q: adding VLAN 0 to HW filter on device bond12 [ 940.618812][T11143] bridge12: entered promiscuous mode [ 940.627391][T11143] bond12: (slave bridge12): Enslaving as an active interface with an up link [ 940.706839][T11146] bond12 (unregistering): (slave bridge12): Releasing backup interface [ 940.733640][T11146] bridge12: left promiscuous mode [ 940.768697][T11146] bond12 (unregistering): Released all slaves [ 941.222446][T11167] syzkaller0: entered promiscuous mode [ 941.236786][T11167] syzkaller0: entered allmulticast mode [ 941.244542][T11054] lo speed is unknown, defaulting to 1000 [ 943.839689][T11203] __nla_validate_parse: 83 callbacks suppressed [ 943.839709][T11203] netlink: 192 bytes leftover after parsing attributes in process `syz.2.16726'. [ 943.856250][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16726'. [ 945.273966][T11054] lo speed is unknown, defaulting to 1000 [ 945.736085][T11054] lo speed is unknown, defaulting to 1000 [ 945.992429][T11230] dvmrp8: entered allmulticast mode [ 946.131479][T11054] lo speed is unknown, defaulting to 1000 [ 946.167434][T11237] ip6_vti0: left promiscuous mode [ 946.239092][T11237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.378029][T11237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 946.405654][T11237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 946.441495][T11237] veth1_vlan: left promiscuous mode [ 946.449525][T11237] veth0_vlan: left promiscuous mode [ 946.457221][T11237] veth0_vlan: entered promiscuous mode [ 946.470634][T11237] veth1_vlan: entered promiscuous mode [ 946.497496][T11237] veth0_macvtap: left promiscuous mode [ 946.504569][T11237] veth0_macvtap: entered promiscuous mode [ 946.544651][T11237] 8021q: adding VLAN 0 to HW filter on device bond1 [ 946.620991][T11237] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 946.719761][T11237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 946.737009][T11237] 8021q: adding VLAN 0 to HW filter on device bond3 [ 946.749659][T11237] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 946.760013][T11237] 8021q: adding VLAN 0 to HW filter on device bond4 [ 946.823714][T11237] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 946.844069][ T5369] lo speed is unknown, defaulting to 1000 [ 946.850618][ T5369] syz2: Port: 1 Link ACTIVE [ 946.892163][ T5357] wg1 speed is unknown, defaulting to 1000 [ 946.900268][ T444] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 946.909695][ T5357] syz0: Port: 1 Link ACTIVE [ 946.914576][ T444] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.927590][ T444] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 946.938301][ T444] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.949002][T11201] wg1 speed is unknown, defaulting to 1000 [ 946.949021][ T444] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 946.965580][ T444] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.001427][T11247] bond9: entered promiscuous mode [ 947.015666][T11251] vcan1: entered promiscuous mode [ 947.021513][T11251] vcan1: entered allmulticast mode [ 947.027756][T11251] bond9: (slave vcan1): The slave device specified does not support setting the MAC address [ 947.039161][T11251] bond9: (slave vcan1): Error -95 calling set_mac_address [ 947.094366][T11201] lo speed is unknown, defaulting to 1000 [ 947.104066][ T444] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 947.116544][ T444] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.004194][T11287] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.140954][T11287] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.296083][T11287] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.388982][T11297] netlink: 'syz.1.16752': attribute type 11 has an invalid length. [ 948.394675][T11287] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.677276][ T444] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.767497][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.793234][T11309] wg1 speed is unknown, defaulting to 1000 [ 948.849462][T11309] lo speed is unknown, defaulting to 1000 [ 948.855775][ T1172] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.883879][T11315] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16756'. [ 948.912371][ T13] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.913249][T11309] lo speed is unknown, defaulting to 1000 [ 949.033441][T11320] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16757'. [ 949.230853][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16757'. [ 949.280446][T11331] netlink: 'syz.3.16761': attribute type 2 has an invalid length. [ 949.299034][T11331] netlink: 'syz.3.16761': attribute type 8 has an invalid length. [ 949.318262][T11331] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16761'. [ 949.407348][T11331] netlink: 'syz.3.16761': attribute type 2 has an invalid length. [ 949.443541][T11331] netlink: 'syz.3.16761': attribute type 8 has an invalid length. [ 949.465561][T11331] netlink: 132 bytes leftover after parsing attributes in process `syz.3.16761'. [ 949.524187][T11337] netlink: 'syz.2.16762': attribute type 1 has an invalid length. [ 949.548408][T11337] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 950.008683][T11343] syzkaller0: entered promiscuous mode [ 950.014715][T11343] syzkaller0: entered allmulticast mode [ 950.077145][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 950.289955][T11349] wg1 speed is unknown, defaulting to 1000 [ 950.363947][T11349] lo speed is unknown, defaulting to 1000 [ 950.489363][T11363] netlink: 'syz.4.16770': attribute type 4 has an invalid length. [ 950.504654][T11358] wg1 speed is unknown, defaulting to 1000 [ 950.538504][T11349] lo speed is unknown, defaulting to 1000 [ 950.553702][T11358] lo speed is unknown, defaulting to 1000 [ 950.717993][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 950.844238][T11373] wg1 speed is unknown, defaulting to 1000 [ 950.865367][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16773'. [ 950.867348][T11373] lo speed is unknown, defaulting to 1000 [ 951.024066][T11377] bond10: (slave vcan1): refused to change device type [ 951.146885][T11388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16774'. [ 951.173045][T11383] wg1 speed is unknown, defaulting to 1000 [ 951.188750][T11388] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16774'. [ 951.203328][T11358] lo speed is unknown, defaulting to 1000 [ 951.259601][T11383] lo speed is unknown, defaulting to 1000 [ 951.777287][T11373] lo speed is unknown, defaulting to 1000 [ 952.138296][T11383] lo speed is unknown, defaulting to 1000 [ 954.053874][T11431] wg1 speed is unknown, defaulting to 1000 [ 954.111986][T11431] lo speed is unknown, defaulting to 1000 [ 954.119023][T11441] syzkaller0: entered promiscuous mode [ 954.132346][T11441] syzkaller0: entered allmulticast mode [ 954.213130][T11445] netlink: 'syz.0.16793': attribute type 1 has an invalid length. [ 954.586104][T11445] bond15: entered promiscuous mode [ 954.592047][T11445] 8021q: adding VLAN 0 to HW filter on device bond15 [ 954.631512][T11448] ipvlan3: entered allmulticast mode [ 954.645355][T11448] bond15: entered allmulticast mode [ 954.671858][T11449] bond15: (slave bridge14): making interface the new active one [ 954.695987][T11449] bridge14: entered promiscuous mode [ 954.707389][T11449] bridge14: entered allmulticast mode [ 954.728037][T11449] bond15: (slave bridge14): Enslaving as an active interface with an up link [ 954.748650][T11431] lo speed is unknown, defaulting to 1000 [ 954.897757][T11452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16794'. [ 955.050787][T11456] tipc: Enabled bearer , priority 0 [ 955.079503][T11456] syzkaller0: entered promiscuous mode [ 955.093485][T11456] syzkaller0: entered allmulticast mode [ 955.182591][T11456] tipc: Resetting bearer [ 955.210916][T11454] tipc: Resetting bearer [ 955.263699][T11454] tipc: Disabling bearer [ 955.373578][T11479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16800'. [ 955.506603][T11487] tipc: Enabled bearer , priority 0 [ 955.641504][ T5636] block nbd4: Receive control failed (result -32) [ 955.926566][T11498] wg1 speed is unknown, defaulting to 1000 [ 955.931085][T11503] netlink: 'syz.4.16808': attribute type 4 has an invalid length. [ 955.945251][T11498] lo speed is unknown, defaulting to 1000 [ 955.967803][T11503] netlink: 'syz.4.16808': attribute type 4 has an invalid length. [ 955.969016][T11498] lo speed is unknown, defaulting to 1000 [ 956.018022][T11503] tipc: Resetting bearer [ 956.243459][T11514] syzkaller0: entered promiscuous mode [ 956.256923][T11514] syzkaller0: entered allmulticast mode [ 956.405249][T11519] netlink: 'syz.1.16813': attribute type 1 has an invalid length. [ 956.511144][T11521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16813'. [ 956.888714][T11520] bond12: (slave vxcan7): The slave device specified does not support setting the MAC address [ 956.907068][T11520] bond12: (slave vxcan7): Error -95 calling set_mac_address [ 956.942942][T11529] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16815'. [ 957.010428][T11521] bond12: (slave bridge13): Enslaving as an active interface with a down link [ 957.052713][T11523] ip6gretap2: entered promiscuous mode [ 957.059099][T11523] ip6gretap2: entered allmulticast mode [ 957.070157][T11523] bond12: (slave ip6gretap2): making interface the new active one [ 957.079137][T11523] bond12: (slave ip6gretap2): Enslaving as an active interface with an up link [ 957.284863][T11539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16817'. [ 957.326972][T11545] netlink: 'syz.3.16819': attribute type 83 has an invalid length. [ 957.432657][T11548] bond13: entered promiscuous mode [ 957.460445][T11548] bond13: entered allmulticast mode [ 958.010251][T11576] sch_tbf: burst 19872 is lower than device lo mtu (50331666) ! [ 958.176994][T11579] syzkaller0: entered promiscuous mode [ 958.188504][T11579] syzkaller0: entered allmulticast mode [ 958.313631][T11583] syzkaller0: entered promiscuous mode [ 958.322548][T11583] syzkaller0: entered allmulticast mode [ 958.508968][T11585] bond11 (unregistering): Released all slaves [ 958.543618][T11592] syz_tun: entered allmulticast mode [ 958.573771][T11592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16833'. [ 958.698369][T11592] syz_tun (unregistering): left allmulticast mode [ 958.947785][T11605] wg1 speed is unknown, defaulting to 1000 [ 958.989798][T11605] lo speed is unknown, defaulting to 1000 [ 959.005831][T11615] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16838'. [ 959.022710][T11605] lo speed is unknown, defaulting to 1000 [ 959.929874][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16846'. [ 959.968605][T11651] netlink: 'syz.1.16847': attribute type 10 has an invalid length. [ 960.431378][T11661] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 960.711226][T11677] syzkaller0: entered promiscuous mode [ 960.719498][T11677] syzkaller0: entered allmulticast mode [ 960.727347][T11679] netlink: 'syz.3.16857': attribute type 1 has an invalid length. [ 960.797896][T11679] 8021q: adding VLAN 0 to HW filter on device bond19 [ 960.816781][T11682] veth23: entered promiscuous mode [ 960.828574][T11682] bond19: (slave veth23): Enslaving as an active interface with an up link [ 961.068364][T11693] sctp: [Deprecated]: syz.3.16863 (pid 11693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 961.068364][T11693] Use struct sctp_sack_info instead [ 961.119258][T11696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16864'. [ 961.127577][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16865'. [ 961.199537][T11697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.208311][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16866'. [ 961.226093][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16866'. [ 961.266182][ T1167] bond0: (slave gretap3): link status definitely down, disabling slave [ 961.300873][ T1167] bond0: now running without any active interface! [ 961.464101][T11708] tipc: Enabling of bearer rejected, already enabled [ 961.475163][T11714] syzkaller0: entered promiscuous mode [ 961.481860][T11714] syzkaller0: entered allmulticast mode [ 961.900319][T11729] [ 961.903418][T11729] ====================================================== [ 961.911772][T11729] WARNING: possible circular locking dependency detected [ 961.919424][T11729] syzkaller #0 Not tainted [ 961.923942][T11729] ------------------------------------------------------ [ 961.930988][T11729] syz.2.16878/11729 is trying to acquire lock: [ 961.938557][T11729] ffff888027953418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1b3/0x450 [ 961.948350][T11729] [ 961.948350][T11729] but task is already holding lock: [ 961.955812][T11729] ffff888027952ef0 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 961.966261][T11729] [ 961.966261][T11729] which lock already depends on the new lock. [ 961.966261][T11729] [ 961.977103][T11729] [ 961.977103][T11729] the existing dependency chain (in reverse order) is: [ 961.986984][T11729] [ 961.986984][T11729] -> #6 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 961.996219][T11729] blk_alloc_queue+0x546/0x680 [ 962.001705][T11729] __blk_mq_alloc_disk+0x197/0x390 [ 962.007363][T11729] nbd_dev_add+0x499/0xb50 [ 962.012409][T11729] nbd_init+0x168/0x1f0 [ 962.017105][T11729] do_one_initcall+0x250/0x870 [ 962.022478][T11729] do_initcall_level+0x104/0x190 [ 962.027941][T11729] do_initcalls+0x59/0xa0 [ 962.032813][T11729] kernel_init_freeable+0x2a6/0x3e0 [ 962.038530][T11729] kernel_init+0x1d/0x1d0 [ 962.043377][T11729] ret_from_fork+0x514/0xb70 [ 962.048480][T11729] ret_from_fork_asm+0x1a/0x30 [ 962.053777][T11729] [ 962.053777][T11729] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 962.061021][T11729] fs_reclaim_acquire+0x71/0x100 [ 962.066861][T11729] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 962.073381][T11729] __alloc_skb+0x1d0/0x7d0 [ 962.078320][T11729] __ip6_append_data+0x2c7c/0x3e90 [ 962.084308][T11729] ip6_append_data+0x10f/0x280 [ 962.089704][T11729] rawv6_sendmsg+0x12d3/0x18e0 [ 962.095007][T11729] ____sys_sendmsg+0x80a/0x9f0 [ 962.100303][T11729] ___sys_sendmsg+0x2a5/0x360 [ 962.105504][T11729] __x64_sys_sendmsg+0x1bd/0x2a0 [ 962.111234][T11729] do_syscall_64+0x15f/0xf80 [ 962.116455][T11729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.123199][T11729] [ 962.123199][T11729] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 962.130979][T11729] lock_sock_nested+0x41/0x100 [ 962.136453][T11729] inet_shutdown+0x6a/0x390 [ 962.141676][T11729] nbd_mark_nsock_dead+0x2e9/0x560 [ 962.147504][T11729] sock_shutdown+0x15e/0x260 [ 962.152808][T11729] nbd_clear_sock+0x24/0x170 [ 962.157928][T11729] nbd_config_put+0x2dd/0x580 [ 962.163323][T11729] nbd_genl_connect+0x19d5/0x1cf0 [ 962.168879][T11729] genl_family_rcv_msg_doit+0x22a/0x330 [ 962.175607][T11729] genl_rcv_msg+0x61c/0x7a0 [ 962.180637][T11729] netlink_rcv_skb+0x232/0x4b0 [ 962.186090][T11729] genl_rcv+0x28/0x40 [ 962.190756][T11729] netlink_unicast+0x75c/0x8e0 [ 962.196130][T11729] netlink_sendmsg+0x813/0xb40 [ 962.201436][T11729] ____sys_sendmsg+0x972/0x9f0 [ 962.206731][T11729] ___sys_sendmsg+0x2a5/0x360 [ 962.211931][T11729] __x64_sys_sendmsg+0x1bd/0x2a0 [ 962.217395][T11729] do_syscall_64+0x15f/0xf80 [ 962.222521][T11729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.229216][T11729] [ 962.229216][T11729] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 962.236875][T11729] __mutex_lock+0x1a3/0x1550 [ 962.242163][T11729] nbd_queue_rq+0x37b/0x1100 [ 962.247269][T11729] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 962.253443][T11729] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 962.260404][T11729] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 962.267016][T11729] blk_mq_run_hw_queue+0x348/0x4f0 [ 962.272736][T11729] blk_mq_dispatch_list+0xd16/0xe10 [ 962.278460][T11729] blk_mq_flush_plug_list+0x48d/0x570 [ 962.284372][T11729] __blk_flush_plug+0x3ed/0x4d0 [ 962.289775][T11729] __submit_bio+0x28d/0x580 [ 962.295696][T11729] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 962.302027][T11729] block_read_full_folio+0x599/0x830 [ 962.307949][T11729] filemap_read_folio+0x137/0x3b0 [ 962.313590][T11729] do_read_cache_folio+0x358/0x590 [ 962.319313][T11729] read_part_sector+0xb6/0x2b0 [ 962.324774][T11729] adfspart_check_ICS+0xb1/0x960 [ 962.330235][T11729] bdev_disk_changed+0x817/0x1770 [ 962.335958][T11729] blkdev_get_whole+0x380/0x510 [ 962.341424][T11729] bdev_open+0x31e/0xd30 [ 962.346535][T11729] blkdev_open+0x470/0x610 [ 962.351468][T11729] do_dentry_open+0x785/0x14e0 [ 962.356748][T11729] vfs_open+0x3b/0x340 [ 962.361952][T11729] path_openat+0x2e08/0x3860 [ 962.367936][T11729] do_file_open+0x23e/0x4a0 [ 962.373114][T11729] do_sys_openat2+0x113/0x200 [ 962.378394][T11729] __x64_sys_openat+0x138/0x170 [ 962.383852][T11729] do_syscall_64+0x15f/0xf80 [ 962.388964][T11729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.395743][T11729] [ 962.395743][T11729] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 962.403329][T11729] __mutex_lock+0x1a3/0x1550 [ 962.408560][T11729] nbd_queue_rq+0xc6/0x1100 [ 962.413602][T11729] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 962.419703][T11729] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 962.426557][T11729] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 962.433337][T11729] blk_mq_run_hw_queue+0x348/0x4f0 [ 962.439089][T11729] blk_mq_dispatch_list+0xd16/0xe10 [ 962.444812][T11729] blk_mq_flush_plug_list+0x48d/0x570 [ 962.450707][T11729] __blk_flush_plug+0x3ed/0x4d0 [ 962.456099][T11729] __submit_bio+0x28d/0x580 [ 962.461122][T11729] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 962.467277][T11729] block_read_full_folio+0x599/0x830 [ 962.473093][T11729] filemap_read_folio+0x137/0x3b0 [ 962.478652][T11729] do_read_cache_folio+0x358/0x590 [ 962.484295][T11729] read_part_sector+0xb6/0x2b0 [ 962.489584][T11729] adfspart_check_ICS+0xb1/0x960 [ 962.495041][T11729] bdev_disk_changed+0x817/0x1770 [ 962.500688][T11729] blkdev_get_whole+0x380/0x510 [ 962.506271][T11729] bdev_open+0x31e/0xd30 [ 962.511056][T11729] blkdev_open+0x470/0x610 [ 962.516070][T11729] do_dentry_open+0x785/0x14e0 [ 962.521441][T11729] vfs_open+0x3b/0x340 [ 962.526095][T11729] path_openat+0x2e08/0x3860 [ 962.531302][T11729] do_file_open+0x23e/0x4a0 [ 962.536328][T11729] do_sys_openat2+0x113/0x200 [ 962.541524][T11729] __x64_sys_openat+0x138/0x170 [ 962.547068][T11729] do_syscall_64+0x15f/0xf80 [ 962.552269][T11729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.558693][T11729] [ 962.558693][T11729] -> #1 (set->srcu){.+.+}-{0:0}: [ 962.565907][T11729] __synchronize_srcu+0xca/0x300 [ 962.571469][T11729] elevator_switch+0x1e8/0x7a0 [ 962.576755][T11729] elevator_change+0x2cc/0x450 [ 962.582253][T11729] elevator_set_default+0x36c/0x430 [ 962.588060][T11729] blk_register_queue+0x3e9/0x4e0 [ 962.593623][T11729] __add_disk+0x677/0xd50 [ 962.598478][T11729] add_disk_fwnode+0xfb/0x480 [ 962.603688][T11729] nbd_dev_add+0x72c/0xb50 [ 962.608638][T11729] nbd_init+0x168/0x1f0 [ 962.613319][T11729] do_one_initcall+0x250/0x870 [ 962.618634][T11729] do_initcall_level+0x104/0x190 [ 962.624215][T11729] do_initcalls+0x59/0xa0 [ 962.629074][T11729] kernel_init_freeable+0x2a6/0x3e0 [ 962.634793][T11729] kernel_init+0x1d/0x1d0 [ 962.639634][T11729] ret_from_fork+0x514/0xb70 [ 962.644748][T11729] ret_from_fork_asm+0x1a/0x30 [ 962.650039][T11729] [ 962.650039][T11729] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 962.657869][T11729] __lock_acquire+0x15a5/0x2cf0 [ 962.663459][T11729] lock_acquire+0x106/0x350 [ 962.668741][T11729] __mutex_lock+0x1a3/0x1550 [ 962.673857][T11729] elevator_change+0x1b3/0x450 [ 962.679242][T11729] elevator_set_none+0xb5/0x140 [ 962.684803][T11729] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 962.691170][T11729] nbd_start_device+0x17f/0xb10 [ 962.696537][T11729] nbd_genl_connect+0x165b/0x1cf0 [ 962.702177][T11729] genl_family_rcv_msg_doit+0x22a/0x330 [ 962.708411][T11729] genl_rcv_msg+0x61c/0x7a0 [ 962.713530][T11729] netlink_rcv_skb+0x232/0x4b0 [ 962.718817][T11729] genl_rcv+0x28/0x40 [ 962.723318][T11729] netlink_unicast+0x75c/0x8e0 [ 962.728613][T11729] netlink_sendmsg+0x813/0xb40 [ 962.733906][T11729] ____sys_sendmsg+0x972/0x9f0 [ 962.739195][T11729] ___sys_sendmsg+0x2a5/0x360 [ 962.744480][T11729] __x64_sys_sendmsg+0x1bd/0x2a0 [ 962.749940][T11729] do_syscall_64+0x15f/0xf80 [ 962.755069][T11729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.761741][T11729] [ 962.761741][T11729] other info that might help us debug this: [ 962.761741][T11729] [ 962.772151][T11729] Chain exists of: [ 962.772151][T11729] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#54 [ 962.772151][T11729] [ 962.786162][T11729] Possible unsafe locking scenario: [ 962.786162][T11729] [ 962.794219][T11729] CPU0 CPU1 [ 962.799588][T11729] ---- ---- [ 962.805725][T11729] lock(&q->q_usage_counter(io)#54); [ 962.811194][T11729] lock(fs_reclaim); [ 962.818304][T11729] lock(&q->q_usage_counter(io)#54); [ 962.826190][T11729] lock(&q->elevator_lock); [ 962.830830][T11729] [ 962.830830][T11729] *** DEADLOCK *** [ 962.830830][T11729] [ 962.838962][T11729] 6 locks held by syz.2.16878/11729: [ 962.844324][T11729] #0: ffffffff8fe3eda8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 962.853289][T11729] #1: ffffffff8fe3ebe0 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 962.862916][T11729] #2: ffff8880279789c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xad/0x1a60 [ 962.874664][T11729] #3: ffff8880279788d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xc0/0x1a60 [ 962.885625][T11729] #4: ffff888027952ef0 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x198/0x450 [ 962.896251][T11729] #5: ffff888027952f28 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: elevator_change+0x198/0x450 [ 962.907311][T11729] [ 962.907311][T11729] stack backtrace: [ 962.913205][T11729] CPU: 1 UID: 0 PID: 11729 Comm: syz.2.16878 Not tainted syzkaller #0 PREEMPT(full) [ 962.913226][T11729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 962.913243][T11729] Call Trace: [ 962.913251][T11729] [ 962.913259][T11729] dump_stack_lvl+0xe8/0x150 [ 962.913281][T11729] print_circular_bug+0x2e1/0x300 [ 962.913304][T11729] check_noncircular+0x12e/0x150 [ 962.913327][T11729] __lock_acquire+0x15a5/0x2cf0 [ 962.913354][T11729] ? elevator_change+0x1b3/0x450 [ 962.913375][T11729] lock_acquire+0x106/0x350 [ 962.913391][T11729] ? elevator_change+0x1b3/0x450 [ 962.913418][T11729] __mutex_lock+0x1a3/0x1550 [ 962.913440][T11729] ? elevator_change+0x1b3/0x450 [ 962.913463][T11729] ? rcu_is_watching+0x15/0xb0 [ 962.913483][T11729] ? work_grab_pending+0x3d1/0x990 [ 962.913501][T11729] ? elevator_change+0x1b3/0x450 [ 962.913533][T11729] ? __pfx___mutex_lock+0x10/0x10 [ 962.913554][T11729] ? enable_work+0x17f/0x230 [ 962.913573][T11729] ? lockdep_hardirqs_on+0x7a/0x110 [ 962.913597][T11729] ? __cancel_work_sync+0xf7/0x110 [ 962.913615][T11729] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 962.913642][T11729] elevator_change+0x1b3/0x450 [ 962.913666][T11729] elevator_set_none+0xb5/0x140 [ 962.913687][T11729] ? __pfx_elevator_set_none+0x10/0x10 [ 962.913711][T11729] ? xa_load+0x1db/0x210 [ 962.913736][T11729] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 962.913759][T11729] ? kernfs_add_one+0x477/0x5c0 [ 962.913782][T11729] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 962.913802][T11729] ? sysfs_add_file_mode_ns+0x259/0x300 [ 962.913823][T11729] nbd_start_device+0x17f/0xb10 [ 962.913842][T11729] ? device_create_file+0xf4/0x1b0 [ 962.913859][T11729] nbd_genl_connect+0x165b/0x1cf0 [ 962.913874][T11729] ? __pfx___nla_validate_parse+0x10/0x10 [ 962.913902][T11729] ? __pfx_nbd_genl_connect+0x10/0x10 [ 962.913920][T11729] ? rcu_is_watching+0x15/0xb0 [ 962.913937][T11729] ? trace_kmalloc+0x2a/0xf0 [ 962.913961][T11729] ? __nla_parse+0x40/0x60 [ 962.913983][T11729] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 962.914001][T11729] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 962.914021][T11729] genl_family_rcv_msg_doit+0x22a/0x330 [ 962.914041][T11729] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 962.914061][T11729] ? __lock_acquire+0x6b5/0x2cf0 [ 962.914082][T11729] genl_rcv_msg+0x61c/0x7a0 [ 962.914099][T11729] ? __pfx_genl_rcv_msg+0x10/0x10 [ 962.914114][T11729] ? __pfx_nbd_genl_connect+0x10/0x10 [ 962.914134][T11729] netlink_rcv_skb+0x232/0x4b0 [ 962.914160][T11729] ? __pfx_genl_rcv_msg+0x10/0x10 [ 962.914176][T11729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 962.914202][T11729] ? down_read+0x270/0x2e0 [ 962.914224][T11729] ? genl_rcv+0xd/0x40 [ 962.914238][T11729] genl_rcv+0x28/0x40 [ 962.914256][T11729] netlink_unicast+0x75c/0x8e0 [ 962.914279][T11729] netlink_sendmsg+0x813/0xb40 [ 962.914304][T11729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 962.914327][T11729] ? aa_sock_msg_perm+0xf1/0x1b0 [ 962.914347][T11729] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 962.914371][T11729] ____sys_sendmsg+0x972/0x9f0 [ 962.914394][T11729] ? __might_fault+0xaf/0x130 [ 962.914416][T11729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 962.914441][T11729] ? import_iovec+0x73/0xa0 [ 962.914465][T11729] ___sys_sendmsg+0x2a5/0x360 [ 962.914486][T11729] ? __lock_acquire+0x6b5/0x2cf0 [ 962.914505][T11729] ? __pfx____sys_sendmsg+0x10/0x10 [ 962.914529][T11729] ? futex_wait+0x2a2/0x390 [ 962.914562][T11729] ? __fget_files+0x2a/0x420 [ 962.914579][T11729] ? __fget_files+0x3a0/0x420 [ 962.914601][T11729] __x64_sys_sendmsg+0x1bd/0x2a0 [ 962.914624][T11729] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 962.914650][T11729] ? rcu_is_watching+0x15/0xb0 [ 962.914672][T11729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.914688][T11729] do_syscall_64+0x15f/0xf80 [ 962.914709][T11729] ? trace_irq_disable+0x3b/0x140 [ 962.914732][T11729] ? clear_bhb_loop+0x40/0x90 [ 962.914750][T11729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.914765][T11729] RIP: 0033:0x7eff7959cdd9 [ 962.914782][T11729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.914796][T11729] RSP: 002b:00007eff7a414028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 962.914814][T11729] RAX: ffffffffffffffda RBX: 00007eff79815fa0 RCX: 00007eff7959cdd9 [ 962.914826][T11729] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 000000000000000a [ 962.914836][T11729] RBP: 00007eff79632d69 R08: 0000000000000000 R09: 0000000000000000 [ 962.914846][T11729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.914856][T11729] R13: 00007eff79816038 R14: 00007eff79815fa0 R15: 00007ffc54ea04f8 [ 962.914875][T11729] [ 963.373833][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807aac4400: rx timeout, send abort [ 963.382070][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880697de800: rx timeout, send abort [ 963.458753][T11736] wg1 speed is unknown, defaulting to 1000 [ 963.460202][ T5636] block nbd5: Receive control failed (result -32) [ 963.466261][T11736] lo speed is unknown, defaulting to 1000 [ 963.471688][ T5636] block nbd5: Receive control failed (result -32) [ 963.479808][T11736] lo speed is unknown, defaulting to 1000 [ 963.512970][T11086] block nbd5: NBD_DISCONNECT [ 963.519864][T11086] block nbd5: Send disconnect failed -32 [ 963.525759][T11086] block nbd5: Send disconnect failed -32 [ 963.531452][T11086] block nbd5: shutting down sockets [ 963.620642][T11086] udevd[11086]: inotify_add_watch(7, /dev/nbd5, 10) failed: No such file or directory [ 963.890864][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880697de800: abort rx timeout. Force session deactivation [ 966.076227][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 967.355843][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured!