last executing test programs: 5.370803541s ago: executing program 3 (id=10967): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x6180, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xa0}, 0x1c, 0x0}}], 0x1, 0xc4) 4.459492895s ago: executing program 3 (id=10981): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 4.36084771s ago: executing program 3 (id=10983): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r2], 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', r2, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r4, 0x0, 0x0) epoll_create(0xfffffff3) 4.197145166s ago: executing program 0 (id=10986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000900)="bada30fbc99b5400040000ea0756159288a8", 0x36, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4.112864143s ago: executing program 3 (id=10987): r0 = socket(0x1, 0x803, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom$inet6(r0, &(0x7f0000000000)=""/51, 0x33, 0x40002000, 0x0, 0xe) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x1, @mcast1={0xff, 0x7}, 0x8002}}, {{0xa, 0xfffd, 0xea, @remote, 0xfffffffc}}}, 0x108) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000380)={{{@in=@multicast2, @in=@initdev}}, {{@in=@loopback}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}}, 0x0, 0x32}, 0x28) bind$alg(0xffffffffffffffff, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) socket$netlink(0x10, 0x3, 0x8000000004) 3.840550467s ago: executing program 0 (id=10992): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 3.61647718s ago: executing program 0 (id=10993): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 3.486751451s ago: executing program 0 (id=10998): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x3e}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)='\'', 0x1}, {&(0x7f00000001c0)="46cd05222515898389a60e11cc801e5aff300f", 0x13}], 0x2}, 0x4) 3.345964737s ago: executing program 4 (id=10999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)) ioctl$SIOCSIFHWADDR(r1, 0x8943, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3.196257401s ago: executing program 3 (id=11002): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x8}]}}]}, 0x3c}}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000900)="bada30fbc99b5400040000ea0756159288a8", 0x36, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) 3.1388523s ago: executing program 0 (id=11003): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="dc52b390", 0xfffffede}, {&(0x7f0000000000)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0xfffffe3a}, {&(0x7f0000000080)="cb25", 0x2}, {&(0x7f00000011c0)="b488c5", 0x3}, {&(0x7f0000000340)="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", 0x109}], 0x7, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) 3.034218908s ago: executing program 4 (id=11005): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r9, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) 2.879076874s ago: executing program 4 (id=11006): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000100)=0x730) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) bind$alg(r2, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-aesni\x00'}, 0x58) r3 = socket(0x10, 0x803, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f00000004c0)=ANY=[@ANYRES16=r3, @ANYBLOB="5e017b"], 0x4) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.705223307s ago: executing program 3 (id=11010): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0xfe, 0x20, 0x2, 0x7, 0x4}}, 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x1, {0xf8, 0x8, 0x1, 0x8c, 0x4, 0x236}}, 0xc) 2.361779208s ago: executing program 2 (id=11016): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r9, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) 2.277290954s ago: executing program 2 (id=11017): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x8, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2.195231252s ago: executing program 1 (id=11019): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000480)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2.139039722s ago: executing program 0 (id=11020): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) r3 = socket(0x10, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newqdisc={0x208, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0x8}, {0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xffffffff, 0x6, 0x5}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xda8}, @TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x3, 0x6, 0x8, 0x2, 0x7fff, 0x4, 0x2}}, {0x8, 0x2, [0x1, 0x1]}}, {{0x1c, 0x1, {0xfb, 0x3, 0xacc1, 0x9, 0x1, 0x0, 0x9, 0x3}}, {0xa, 0x2, [0x0, 0xafc, 0xfff8]}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffff1}, @TCA_STAB={0x140, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x3, 0x1, 0x3, 0x2, 0xd6, 0x1}}, {0x4}}, {{0x1c, 0x1, {0x5, 0x10, 0x81, 0x8, 0x1, 0xfff, 0x7, 0x5}}, {0xe, 0x2, [0x7, 0x6, 0x1, 0xb, 0x422]}}, {{0x1c, 0x1, {0x6, 0x7, 0x9, 0x4, 0x2, 0x401, 0x7fff, 0x4}}, {0xc, 0x2, [0x9, 0xb1a7, 0x8000, 0x6]}}, {{0x1c, 0x1, {0x4, 0x80, 0x48, 0x1, 0x2, 0xa36, 0x2, 0x4}}, {0xc, 0x2, [0x462, 0xa, 0x1, 0x43]}}, {{0x1c, 0x1, {0x7, 0x1, 0xfff, 0x9a, 0x0, 0x9, 0x6, 0x4}}, {0xc, 0x2, [0x2, 0x6, 0x4, 0x3ff]}}, {{0x1c, 0x1, {0x1, 0x4, 0x5, 0x800, 0x2, 0x6, 0x3ff, 0x4}}, {0xc, 0x2, [0x255d, 0x0, 0xdd4f, 0x9]}}, {{0x1c, 0x1, {0x9, 0x3, 0x3, 0x8, 0x0, 0x6, 0x80000000, 0x4}}, {0xc, 0x2, [0xffff, 0x1, 0x1, 0x2]}}, {{0x1c, 0x1, {0x7, 0x8, 0x2, 0x80, 0x1, 0x1, 0xfffffffe, 0x4}}, {0xc, 0x2, [0xa750, 0xf2, 0xe8, 0x4]}}]}, @TCA_RATE={0x6, 0x5, {0xa5, 0x8}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x9}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x208}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001a00010000000000000000000a010101000000000000000000000000ac1414aa000000000000000000000000fffc00"/64, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="fe8000000000000000000000000000aa000000013c000000e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bfae00000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000014000e"], 0x104}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x60}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r11 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x0, 0x1}, 0x20) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x44, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac=@device_b, @device_b, @device_a, {0x0, 0x1}}}}]}, 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) 2.131094408s ago: executing program 1 (id=11021): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x30, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x8}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x1}]}, 0x30}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 2.124285801s ago: executing program 2 (id=11022): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x10001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000019580)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000c40)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x689e5dd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000, 0x10000000, 0x400, 0x4, 0x8, {0x9, 0x0, 0x1, 0x2, 0x8, 0x3}, {0x7, 0x2, 0x10, 0x0, 0x1, 0xfffffffe}, 0x80, 0x0, 0x9}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 2.040439164s ago: executing program 2 (id=11023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$kcm(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x20004884) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.684425s ago: executing program 4 (id=11024): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 1.549994902s ago: executing program 1 (id=11025): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfffb}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) 774.642161ms ago: executing program 4 (id=11026): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffffe, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0x8, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20008850) 692.659486ms ago: executing program 1 (id=11027): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="0f00000004000000080000000b"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r0, r9, 0x7, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) 678.16716ms ago: executing program 2 (id=11028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)) ioctl$SIOCSIFHWADDR(r1, 0x8943, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004081}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 516.359266ms ago: executing program 1 (id=11029): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 128.160793ms ago: executing program 4 (id=11030): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x28, 0xe, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x40804}, 0x40000) 16.538577ms ago: executing program 1 (id=11031): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xfff1, 0xb}, {0xfff9, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x2a}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x10) 0s ago: executing program 2 (id=11032): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x74, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x3, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0xffffffffffffffff, 0x0, 0x1, 0x3, {0x9, 0x0, 0x4, 0xf800, 0xce}, {0x0, 0x1, 0x8, 0xd, 0x1ff}, 0x6, 0x80000001, 0x3}}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000000c0)="f058fe7dad777f8f", 0x8}], 0x2}, 0x5) kernel console output (not intermixed with test programs): ibute type 6 has an invalid length. [ 353.709921][T20445] netlink: 'syz.4.6979': attribute type 83 has an invalid length. [ 353.960060][T20458] erspan0: entered promiscuous mode [ 354.179076][T20472] netlink: 92 bytes leftover after parsing attributes in process `syz.4.6992'. [ 354.188856][T20472] netlink: 'syz.4.6992': attribute type 1 has an invalid length. [ 354.870664][T20510] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7010'. [ 355.050611][T20516] 8021q: adding VLAN 0 to HW filter on device bond4 [ 355.062612][T20516] bond4: entered allmulticast mode [ 355.068086][T20523] netlink: 54 bytes leftover after parsing attributes in process `syz.4.7016'. [ 355.068122][T20523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7016'. [ 355.090673][T20516] bond0: (slave bond4): Enslaving as an active interface with a down link [ 355.214609][T20530] netlink: 27 bytes leftover after parsing attributes in process `syz.4.7021'. [ 355.224988][T20531] netlink: 'syz.0.7019': attribute type 1 has an invalid length. [ 355.240615][T20531] netlink: 'syz.0.7019': attribute type 3 has an invalid length. [ 355.249819][T20531] netlink: 'syz.0.7019': attribute type 7 has an invalid length. [ 355.266293][T20531] netlink: 'syz.0.7019': attribute type 8 has an invalid length. [ 355.283191][T20531] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7019'. [ 355.297473][T20531] NCSI netlink: No device for ifindex 131092 [ 355.460604][T20545] block nbd2: Unsupported socket: should be TCP or UNIX. [ 355.587607][T20554] netlink: 'syz.1.7031': attribute type 1 has an invalid length. [ 355.617311][T20554] netlink: 208 bytes leftover after parsing attributes in process `syz.1.7031'. [ 355.636277][T20554] NCSI netlink: No device for ifindex 65584 [ 357.680497][T20652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7079'. [ 357.745694][T20656] tipc: New replicast peer: 255.255.255.255 [ 357.753647][T20656] tipc: Enabled bearer , priority 10 [ 358.515330][T20702] __nla_validate_parse: 4 callbacks suppressed [ 358.515352][T20702] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7103'. [ 358.692269][T20710] tipc: New replicast peer: 255.255.255.255 [ 358.707407][T20710] tipc: Enabled bearer , priority 10 [ 358.734446][T20710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7106'. [ 359.370234][T20749] tap0: tun_chr_ioctl cmd 1074025676 [ 359.375587][T20749] tap0: owner set to 0 [ 359.438783][T20755] team0: Cannot enslave team device to itself [ 359.496239][T20757] vxlan0: entered promiscuous mode [ 359.505955][T20757] vxlan0: entered allmulticast mode [ 359.523027][ T3661] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.546295][ T3661] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.559693][ T3661] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.606863][ T3661] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.878392][T20782] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7142'. [ 359.933405][T20782] bond0: entered promiscuous mode [ 359.972654][T20782] bond_slave_0: entered promiscuous mode [ 360.011440][T20782] bond_slave_1: entered promiscuous mode [ 360.027744][T20782] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 360.060421][T20782] bond0: left promiscuous mode [ 360.065257][T20782] bond_slave_0: left promiscuous mode [ 360.089138][T20792] validate_nla: 4 callbacks suppressed [ 360.089159][T20792] netlink: 'syz.1.7147': attribute type 1 has an invalid length. [ 360.113791][T20792] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 360.121142][T20792] IPv6: NLM_F_CREATE should be set when creating new route [ 360.131218][T20782] bond_slave_1: left promiscuous mode [ 360.136871][T20782] mac80211_hwsim hwsim13 wlan1: left promiscuous mode [ 360.211921][T20800] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 360.410305][T20816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7155'. [ 360.570351][T20822] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7162'. [ 361.066130][T20851] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7174'. [ 361.413193][T20875] netlink: 'syz.4.7186': attribute type 83 has an invalid length. [ 361.724593][T20894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7195'. [ 361.916353][T20905] netlink: 'syz.0.7200': attribute type 83 has an invalid length. [ 362.033749][T20916] netlink: 'syz.0.7205': attribute type 2 has an invalid length. [ 362.248594][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7211'. [ 362.291021][T20928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7211'. [ 363.000042][T20973] bridge_slave_0: invalid flags given to default FDB implementation [ 363.559482][T21006] netlink: 'syz.1.7244': attribute type 28 has an invalid length. [ 363.607715][T21006] netlink: 'syz.1.7244': attribute type 3 has an invalid length. [ 363.627383][T21006] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7244'. [ 363.744522][T21019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7252'. [ 363.862576][T21028] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7256'. [ 363.977769][T21032] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7258'. [ 364.619283][T21074] block nbd2: Unsupported socket: should be TCP or UNIX. [ 364.851725][T21090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7286'. [ 365.089229][T21107] netlink: 190972 bytes leftover after parsing attributes in process `syz.2.7294'. [ 365.349600][T21122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7300'. [ 365.532173][T21130] netlink: 'syz.0.7305': attribute type 1 has an invalid length. [ 365.587449][T21130] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7305'. [ 365.669525][T21138] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7309'. [ 365.951360][T21160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7320'. [ 366.328232][T21178] netlink: 'syz.4.7329': attribute type 30 has an invalid length. [ 366.911107][T21216] xfrm2: entered promiscuous mode [ 366.916302][T21216] xfrm2: entered allmulticast mode [ 367.391114][T21248] netlink: 'syz.2.7364': attribute type 1 has an invalid length. [ 367.403682][T21248] netlink: 'syz.2.7364': attribute type 7 has an invalid length. [ 367.427190][T21248] netlink: 'syz.2.7364': attribute type 8 has an invalid length. [ 369.147368][T21358] __nla_validate_parse: 13 callbacks suppressed [ 369.147392][T21358] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7416'. [ 369.439715][T21368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7423'. [ 369.660679][T21385] sctp: [Deprecated]: syz.2.7428 (pid 21385) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.660679][T21385] Use struct sctp_sack_info instead [ 369.873646][T21398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7434'. [ 369.912294][T21402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7436'. [ 369.932803][T21402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7436'. [ 369.992003][T21404] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7437'. [ 370.358593][T21430] sch_fq: defrate 0 ignored. [ 371.024068][T21469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7469'. [ 371.036774][T21469] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7469'. [ 371.057495][T21469] gretap0: entered promiscuous mode [ 371.065783][T21469] batadv_slave_1: entered promiscuous mode [ 371.604323][T21503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7485'. [ 371.815841][T21518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7493'. [ 373.960492][T21651] veth0: entered promiscuous mode [ 373.973692][T21651] veth0: left promiscuous mode [ 374.300020][T21670] __nla_validate_parse: 7 callbacks suppressed [ 374.300043][T21670] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7566'. [ 374.341166][T21672] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7567'. [ 374.342152][T21670] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7566'. [ 374.376638][T21675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7568'. [ 375.461586][T21733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7593'. [ 375.494609][T21735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7594'. [ 375.691432][T21733] hsr_slave_1 (unregistering): left promiscuous mode [ 376.010009][ T1046] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 376.157111][T21768] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7608'. [ 376.180449][T21768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7608'. [ 376.251153][T21774] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7612'. [ 376.463743][T21785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7617'. [ 377.336638][T21837] tipc: Enabling of bearer rejected, already enabled [ 377.437578][T21844] netlink: 'syz.2.7645': attribute type 1 has an invalid length. [ 377.863602][T21825] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 378.196533][T21887] netlink: 'syz.1.7665': attribute type 2 has an invalid length. [ 379.073846][T21940] sctp: [Deprecated]: syz.4.7689 (pid 21940) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.073846][T21940] Use struct sctp_sack_info instead [ 379.997169][T21985] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 380.108224][T21989] __nla_validate_parse: 8 callbacks suppressed [ 380.108246][T21989] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7714'. [ 380.327703][T22002] netlink: 'syz.2.7719': attribute type 2 has an invalid length. [ 380.339452][T22002] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7719'. [ 380.361962][T22002] nbd: couldn't find a device at index 0 [ 380.714413][T22021] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.7728'. [ 381.442491][T22060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7747'. [ 381.784438][T22074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7754'. [ 381.825573][T22081] netlink: 'syz.1.7756': attribute type 1 has an invalid length. [ 381.854088][T22081] netlink: 'syz.1.7756': attribute type 2 has an invalid length. [ 381.877245][T22081] netlink: 'syz.1.7756': attribute type 1 has an invalid length. [ 381.898174][T22081] netlink: 'syz.1.7756': attribute type 3 has an invalid length. [ 381.928834][T22081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7756'. [ 382.012980][T22090] netlink: 'syz.4.7761': attribute type 10 has an invalid length. [ 382.053806][T22090] team0: Port device dummy0 added [ 382.322988][T22100] netlink: 'syz.3.7766': attribute type 5 has an invalid length. [ 383.097593][T22139] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7785'. [ 383.881595][T22188] netlink: 'syz.2.7808': attribute type 21 has an invalid length. [ 383.890284][T22188] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7808'. [ 384.733605][T22239] IPVS: persistence engine module ip_vs_pe_À not found [ 386.554574][T22349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7880'. [ 387.845015][T22429] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7918'. [ 387.971537][T22436] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7920'. [ 388.255099][T22450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7926'. [ 388.303051][T22450] netlink: 10 bytes leftover after parsing attributes in process `syz.0.7926'. [ 388.359252][T22453] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7929'. [ 388.521831][T22461] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7933'. [ 388.587437][T22469] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7936'. [ 388.646368][T22471] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7938'. [ 388.940539][T22490] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 389.465272][T22522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7962'. [ 389.658165][T22533] netlink: 'syz.2.7966': attribute type 4 has an invalid length. [ 390.359031][T22573] vlan3: entered allmulticast mode [ 390.368136][T22573] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 391.143479][T22627] vxcan1: tx drop: invalid da for name 0xfffffffffffffffe [ 391.324376][T22635] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 391.553127][T22651] : renamed from bond0 (while UP) [ 392.505976][T22695] __nla_validate_parse: 4 callbacks suppressed [ 392.506001][T22695] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8039'. [ 392.672793][T22701] netlink: 284 bytes leftover after parsing attributes in process `syz.3.8042'. [ 392.971343][T22715] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8049'. [ 393.150059][T22725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8053'. [ 393.312784][T22737] IPv6: NLM_F_CREATE should be specified when creating new route [ 393.443801][T22741] netlink: 'syz.4.8061': attribute type 1 has an invalid length. [ 393.455662][T22741] netlink: 'syz.4.8061': attribute type 2 has an invalid length. [ 393.487687][T22741] netlink: 'syz.4.8061': attribute type 1 has an invalid length. [ 393.495894][T22741] netlink: 'syz.4.8061': attribute type 3 has an invalid length. [ 393.504036][T22741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8061'. [ 393.611854][T22750] netlink: 'syz.0.8064': attribute type 18 has an invalid length. [ 393.735351][ T12] tipc: Subscription rejected, illegal request [ 394.684410][T22806] xt_hashlimit: size too large, truncated to 1048576 [ 394.736740][T22811] –: renamed from vxcan1 (while UP) [ 394.798874][T22813] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.8092'. [ 394.820497][T22816] netem: change failed [ 394.883823][T22818] tun0: tun_chr_ioctl cmd 1074025675 [ 394.909456][T22818] tun0: persist disabled [ 395.855712][T22867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8116'. [ 396.077854][T22881] netlink: 112 bytes leftover after parsing attributes in process `syz.1.8123'. [ 397.388251][T22942] block nbd2: server does not support multiple connections per device. [ 397.417902][T22942] block nbd2: shutting down sockets [ 397.867481][T22974] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8165'. [ 397.917997][T22974] netlink: 'syz.2.8165': attribute type 7 has an invalid length. [ 397.926392][T22974] netlink: 'syz.2.8165': attribute type 8 has an invalid length. [ 397.960703][T22974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8165'. [ 398.937924][T23040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8195'. [ 398.978430][T23040] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8195'. [ 399.002085][T23040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8195'. [ 399.200774][T23050] netlink: 'syz.3.8200': attribute type 12 has an invalid length. [ 399.220751][T23050] netlink: 'syz.3.8200': attribute type 29 has an invalid length. [ 399.237745][T23050] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8200'. [ 399.263421][T23050] netlink: 'syz.3.8200': attribute type 2 has an invalid length. [ 399.814208][T23076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8213'. [ 400.140634][T23092] veth0: entered promiscuous mode [ 400.152287][T23091] veth0: left promiscuous mode [ 400.707434][T23126] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8236'. [ 400.805209][T23131] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.8238'. [ 401.558139][T23176] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8258'. [ 403.260056][T23259] geneve2: entered promiscuous mode [ 403.273608][ T6445] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 53683 - 0 [ 403.295380][ T6445] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 53683 - 0 [ 403.338779][ T6445] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 53683 - 0 [ 403.373044][ T6445] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 53683 - 0 [ 403.645103][T23275] siw: device registration error -23 [ 403.649163][T23277] sctp: [Deprecated]: syz.3.8302 (pid 23277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 403.649163][T23277] Use struct sctp_sack_info instead [ 403.834136][T23287] __nla_validate_parse: 4 callbacks suppressed [ 403.834159][T23287] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8307'. [ 404.059964][T23301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8313'. [ 404.108486][T23301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8313'. [ 404.125861][T23305] sock: sock_set_timeout: `syz.4.8316' (pid 23305) tries to set negative timeout [ 404.136473][T23301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8313'. [ 404.185686][T23301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8313'. [ 404.692466][T23337] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 404.972815][T23353] vlan2: entered allmulticast mode [ 404.998082][T23353] geneve1: entered allmulticast mode [ 405.153870][T23356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8340'. [ 406.706042][T23438] Bluetooth: MGMT ver 1.23 [ 407.257853][T23470] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8391'. [ 407.350434][T23473] af_packet: tpacket_rcv: packet too big, clamped from 2 to 4294967272. macoff=96 [ 407.368951][ T1046] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 407.836585][ T1046] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.868932][ T1046] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.887580][ T1046] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 408.341304][T23522] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8414'. [ 408.728216][ T6031] Bluetooth: hci2: command 0x0406 tx timeout [ 408.734376][ T52] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 408.741804][T23543] syzkaller1: entered promiscuous mode [ 408.766766][T23543] syzkaller1: entered allmulticast mode [ 408.775243][T23545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8426'. [ 408.820708][T23549] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8427'. [ 408.834599][T23545] batadv_slave_1 (unregistering): left promiscuous mode [ 409.433509][T23581] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 409.490375][T23586] netlink: 'syz.2.8443': attribute type 4 has an invalid length. [ 409.500597][T23584] sctp: [Deprecated]: syz.1.8441 (pid 23584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 409.500597][T23584] Use struct sctp_sack_info instead [ 409.815431][T23607] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8452'. [ 410.251129][T23627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8463'. [ 410.285046][T23627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8463'. [ 410.573839][T23644] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8472'. [ 410.599261][T23644] netlink: 'syz.0.8472': attribute type 2 has an invalid length. [ 410.862523][T23665] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8481'. [ 411.100967][T23681] netlink: 212336 bytes leftover after parsing attributes in process `syz.4.8487'. [ 411.292357][T23692] nbd: device at index 2 is going down [ 411.546122][T23693] udevd[23693]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 412.081394][T23725] netlink: 'syz.0.8506': attribute type 11 has an invalid length. [ 413.061259][T23772] tipc: Resetting bearer [ 413.070629][T23772] tipc: Resetting bearer [ 413.195713][T23772] tipc: Resetting bearer [ 413.202340][T23772] tipc: Resetting bearer [ 413.243613][ T6190] wg1 speed is unknown, defaulting to 1000 [ 413.250161][ T6202] wg1 speed is unknown, defaulting to 1000 [ 413.415639][T23785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8532'. [ 413.439763][T23785] netlink: 'syz.0.8532': attribute type 7 has an invalid length. [ 413.476652][T23785] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8532'. [ 413.761271][T23800] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 414.267153][T23829] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8551'. [ 414.303716][T23829] gtp0: entered promiscuous mode [ 414.323362][T23829] gtp0: entered allmulticast mode [ 414.604538][T23844] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 414.630141][T23844] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 414.643286][T23844] gretap1: entered promiscuous mode [ 414.649274][T23844] gretap1: entered allmulticast mode [ 414.805055][T23856] netlink: 'syz.4.8565': attribute type 1 has an invalid length. [ 414.882535][T23861] syzkaller1: entered promiscuous mode [ 414.902619][T23861] syzkaller1: entered allmulticast mode [ 415.381167][T23886] netlink: 212324 bytes leftover after parsing attributes in process `syz.0.8577'. [ 415.800126][T23908] netlink: 'syz.3.8587': attribute type 1 has an invalid length. [ 416.231171][T23933] syzkaller1: entered promiscuous mode [ 416.236804][T23933] syzkaller1: entered allmulticast mode [ 416.378578][ T30] audit: type=1800 audit(1769510221.015:6): pid=23935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8598" name="memory.events" dev="tmpfs" ino=8377 res=0 errno=0 [ 416.626096][T23952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8606'. [ 416.793372][T23959] netlink: 'syz.3.8609': attribute type 17 has an invalid length. [ 416.822525][T23959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8609'. [ 416.843313][T23959] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8609'. [ 416.863932][T23959] gretap0: entered promiscuous mode [ 416.880131][T23965] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8611'. [ 416.891452][T23959] gretap0: left promiscuous mode [ 417.076050][T23975] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8617'. [ 417.109568][T23975] netlink: 'syz.4.8617': attribute type 1 has an invalid length. [ 417.134293][T23975] netlink: 'syz.4.8617': attribute type 2 has an invalid length. [ 417.248381][T23983] netlink: 212328 bytes leftover after parsing attributes in process `syz.4.8621'. [ 417.293906][T23983] netlink: ct family unspecified [ 417.318378][T23987] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8623'. [ 417.431411][T23994] sctp: [Deprecated]: syz.4.8627 (pid 23994) Use of int in max_burst socket option. [ 417.431411][T23994] Use struct sctp_assoc_value instead [ 417.675193][T24007] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.686750][T24007] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.722245][T24011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8634'. [ 417.809305][T24007] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.828227][T24007] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.930002][T24007] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.942994][T24007] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.019042][T24007] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.030090][T24007] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.205050][ T1046] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.226443][ T1046] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.292950][ T1046] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.315160][ T1046] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.346250][ T1046] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.356513][ T1046] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.374248][ T1046] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.383546][ T1046] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.561785][T24038] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8646'. [ 419.201535][T24073] netlink: 'syz.1.8662': attribute type 4 has an invalid length. [ 419.254846][T24075] netlink: 'syz.0.8663': attribute type 1 has an invalid length. [ 420.657702][T24152] pim6reg1: entered promiscuous mode [ 420.666424][T24152] pim6reg1: entered allmulticast mode [ 420.955451][T24166] __nla_validate_parse: 4 callbacks suppressed [ 420.955472][T24166] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8708'. [ 420.973335][T24166] nbd: couldn't find a device at index 0 [ 421.214524][T24180] netlink: 7 bytes leftover after parsing attributes in process `syz.3.8715'. [ 421.377607][T24190] syzkaller1: entered promiscuous mode [ 421.391768][T24190] syzkaller1: entered allmulticast mode [ 421.765503][T24205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8727'. [ 421.975736][T24222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8733'. [ 421.978982][T24223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8736'. [ 421.990600][T24222] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8733'. [ 422.562508][T24252] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8752'. [ 423.612369][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.647808][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.680630][T24373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.690450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.784676][T24380] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8808'. [ 424.852665][T24383] netlink: 'syz.4.8812': attribute type 63 has an invalid length. [ 424.863574][T24383] netlink: 'syz.4.8812': attribute type 63 has an invalid length. [ 425.198950][T24399] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8819'. [ 425.284942][T24403] xt_hashlimit: size too large, truncated to 1048576 [ 425.330053][T24406] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8820'. [ 425.346192][T24409] sctp: [Deprecated]: syz.4.8823 (pid 24409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 425.346192][T24409] Use struct sctp_sack_info instead [ 425.370921][ T6202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.687746][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.936497][ T1046] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.978185][T24434] syzkaller1: entered promiscuous mode [ 425.987644][T24434] syzkaller1: entered allmulticast mode [ 426.338261][T24458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8840'. [ 426.362455][T24458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8840'. [ 426.433081][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.433167][T24458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8840'. [ 426.450182][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.461709][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.470831][T24465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8843'. [ 426.484803][ T36] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 426.496856][T24458] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8840'. [ 426.735049][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.393672][T24512] trusted_key: syz.1.8857 sent an empty control message without MSG_MORE. [ 427.454417][T24514] netlink: 51 bytes leftover after parsing attributes in process `syz.4.8859'. [ 427.608566][T24523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8861'. [ 427.654005][T24523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8861'. [ 427.767579][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.787830][T24523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8861'. [ 427.837144][T24523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8861'. [ 427.979109][T24540] syzkaller1: entered promiscuous mode [ 427.990398][T24542] netlink: Unknown conntrack attr (type=2304, max=9) [ 428.017190][T24540] syzkaller1: entered allmulticast mode [ 428.240308][T24554] netlink: 'syz.1.8873': attribute type 7 has an invalid length. [ 428.253239][T24554] netlink: 'syz.1.8873': attribute type 7 has an invalid length. [ 428.372791][T24565] ip6gre1: entered promiscuous mode [ 428.561286][T24574] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x6 [ 428.817113][ T916] net_ratelimit: 2 callbacks suppressed [ 428.817133][ T916] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.847805][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.849929][T24638] 8021q: adding VLAN 0 to HW filter on device bond3 [ 430.163072][T24659] netlink: 'syz.3.8916': attribute type 21 has an invalid length. [ 430.173123][T24659] netlink: 'syz.3.8916': attribute type 22 has an invalid length. [ 430.200839][T24659] netlink: 'syz.3.8916': attribute type 23 has an invalid length. [ 430.219612][T24659] netlink: 'syz.3.8916': attribute type 25 has an invalid length. [ 430.245134][T24659] netlink: 'syz.3.8916': attribute type 26 has an invalid length. [ 430.620980][T24686] tipc: Resetting bearer [ 430.633793][T24686] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 430.887694][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.059003][ T6445] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.089982][T24706] netlink: 'syz.4.8937': attribute type 1 has an invalid length. [ 431.448525][ T6190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.865571][T24746] netlink: 'syz.4.8953': attribute type 29 has an invalid length. [ 431.892824][T24746] netlink: 'syz.4.8953': attribute type 29 has an invalid length. [ 431.912962][T24746] __nla_validate_parse: 13 callbacks suppressed [ 431.912984][T24746] netlink: 500 bytes leftover after parsing attributes in process `syz.4.8953'. [ 431.938472][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.655210][ T1046] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 432.774718][T24798] netlink: 'syz.2.8968': attribute type 20 has an invalid length. [ 432.794475][T24798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8968'. [ 432.833635][ T6445] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.833785][T24798] netlink: 'syz.2.8968': attribute type 20 has an invalid length. [ 432.871976][ T6445] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.881453][T24798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8968'. [ 432.896247][ T6445] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 432.937927][ T6445] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 433.391746][T24820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8980'. [ 433.405036][T24825] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8982'. [ 433.714458][T24833] veth0: entered promiscuous mode [ 433.734095][T24836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8986'. [ 433.754626][T24833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8984'. [ 433.779173][T24836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8986'. [ 434.498853][ T7140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.874543][T24883] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9001'. [ 435.542748][T24917] validate_nla: 3 callbacks suppressed [ 435.542770][T24917] netlink: 'syz.2.9015': attribute type 1 has an invalid length. [ 435.557583][T24917] netlink: 16179 bytes leftover after parsing attributes in process `syz.2.9015'. [ 435.923458][ T30] audit: type=1800 audit(1769510240.545:7): pid=24940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.9025" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=9227 res=0 errno=0 [ 436.088438][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.224730][T24955] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 436.239513][T24955] syzkaller1: Refused to change device type [ 436.597910][T24975] syzkaller1: entered promiscuous mode [ 436.603633][T24975] syzkaller1: entered allmulticast mode [ 436.687940][T24979] netlink: 'syz.2.9044': attribute type 7 has an invalid length. [ 436.696371][T24979] netlink: 'syz.2.9044': attribute type 7 has an invalid length. [ 437.068943][T24996] netlink: 'syz.0.9052': attribute type 1 has an invalid length. [ 437.069594][T24998] netlink: 'syz.4.9053': attribute type 25 has an invalid length. [ 437.085026][T24998] __nla_validate_parse: 5 callbacks suppressed [ 437.085045][T24998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9053'. [ 437.085257][T24996] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9052'. [ 437.160293][T24998] netlink: 'syz.4.9053': attribute type 25 has an invalid length. [ 437.172436][T24998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9053'. [ 437.452539][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.528604][ T6190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.708954][T25025] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 437.721178][T25025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.868458][T25035] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9068'. [ 438.065024][T25041] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.9072'. [ 438.099592][T25044] netlink: 'syz.0.9073': attribute type 5 has an invalid length. [ 438.499184][T25070] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.9082'. [ 438.602929][T25073] syzkaller1: entered promiscuous mode [ 438.629327][T25073] syzkaller1: entered allmulticast mode [ 438.985043][T25085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9088'. [ 439.029596][T25085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9088'. [ 439.049450][T25088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9089'. [ 439.070877][T25085] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9088'. [ 439.367236][ T299] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 440.577620][ T7140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.926737][T25181] syzkaller1: entered promiscuous mode [ 440.937457][T25181] syzkaller1: entered allmulticast mode [ 441.106061][T25193] netlink: 'syz.4.9130': attribute type 1 has an invalid length. [ 441.256168][T25204] bond4: (slave ip6gretap1): making interface the new active one [ 441.265338][T25204] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 441.287547][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.346768][T25201] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 441.369243][T25201] syzkaller1: linktype set to 823 [ 441.520635][ T6202] syzkaller1: tun_net_xmit 90 [ 441.612340][T25228] netlink: 'syz.1.9142': attribute type 1 has an invalid length. [ 441.666645][T25228] 8021q: adding VLAN 0 to HW filter on device bond4 [ 441.676569][T25225] syzkaller1: entered promiscuous mode [ 441.709473][T25225] syzkaller1: entered allmulticast mode [ 442.120457][T25254] __nla_validate_parse: 7 callbacks suppressed [ 442.120480][T25254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9153'. [ 442.423162][T25254] hsr_slave_0 (unregistering): left promiscuous mode [ 442.768203][T25281] netlink: 'syz.1.9162': attribute type 9 has an invalid length. [ 442.778875][T25281] netlink: 'syz.1.9162': attribute type 11 has an invalid length. [ 442.790599][T25281] netlink: 'syz.1.9162': attribute type 12 has an invalid length. [ 442.808805][T25281] netlink: 210020 bytes leftover after parsing attributes in process `syz.1.9162'. [ 442.837307][T25281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9162'. [ 443.102245][T25297] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9171'. [ 443.131869][T25299] syzkaller1: entered promiscuous mode [ 443.137850][T25299] syzkaller1: entered allmulticast mode [ 443.211394][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.607839][ T6190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.011754][T25348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9190'. [ 444.152398][ T6190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.466807][T25367] tls_set_device_offload_rx: netdev not found [ 445.048394][ T6190] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.355435][T25414] netlink: 'syz.1.9211': attribute type 1 has an invalid length. [ 445.509958][T25414] bond5: entered promiscuous mode [ 445.530756][T25414] 8021q: adding VLAN 0 to HW filter on device bond5 [ 445.579556][T25418] bond5: (slave bridge5): making interface the new active one [ 445.581774][T25429] netlink: 'syz.0.9215': attribute type 1 has an invalid length. [ 445.588368][T25418] bridge5: entered promiscuous mode [ 445.590436][T25418] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 445.612778][ T5495] veth0_macvtap: left promiscuous mode [ 445.695046][T25429] 8021q: adding VLAN 0 to HW filter on device bond3 [ 445.732454][T25432] bond3: (slave geneve4): making interface the new active one [ 445.752361][T25432] bond3: (slave geneve4): Enslaving as an active interface with an up link [ 446.420259][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.651342][ T107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.152727][T25488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9231'. [ 447.211051][T25491] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9231'. [ 447.289588][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.298589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.610330][ T6031] Bluetooth: hci4: command 0x0406 tx timeout [ 447.857686][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.866360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.969959][ T299] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.093952][T25531] netlink: 'syz.2.9248': attribute type 1 has an invalid length. [ 449.128078][T25531] 8021q: adding VLAN 0 to HW filter on device bond5 [ 449.186060][T25534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9246'. [ 449.252597][T25531] bond5: (slave gretap3): making interface the new active one [ 449.279404][T25531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.288499][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.326941][T25531] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.367898][T25531] bond5: (slave gretap3): Enslaving as an active interface with an up link [ 449.398852][T25534] netlink: 'syz.0.9246': attribute type 4 has an invalid length. [ 450.020226][T25570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9259'. [ 450.035910][T25572] netlink: 'syz.1.9260': attribute type 29 has an invalid length. [ 450.079790][T25572] netlink: 'syz.1.9260': attribute type 29 has an invalid length. [ 450.101166][T25572] netlink: 500 bytes leftover after parsing attributes in process `syz.1.9260'. [ 450.102527][T25568] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9257'. [ 450.223542][T25568] bond0: (slave wlan1): Releasing backup interface [ 450.491154][T25587] dvmrp0: entered allmulticast mode [ 450.571582][T25594] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9268'. [ 451.009391][T25621] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9277'. [ 451.037135][T25625] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9278'. [ 451.562096][T25651] netlink: 'syz.3.9288': attribute type 15 has an invalid length. [ 453.344416][T25678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9297'. [ 453.377821][T25678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9297'. [ 453.535294][T25685] tipc: Failed to remove unknown binding: 66,1,1/0:3918203392/3918203394 [ 453.552413][T25685] tipc: Failed to remove unknown binding: 66,1,1/0:3918203392/3918203394 [ 453.890471][T25695] gre1: entered promiscuous mode [ 453.906842][T25695] gre1: entered allmulticast mode [ 454.116120][T25707] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9308'. [ 454.139373][T25707] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9308'. [ 454.422512][T25727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9320'. [ 454.504634][T25727] team1: entered promiscuous mode [ 454.517180][T25727] team1: entered allmulticast mode [ 455.463287][T25784] netlink: 'syz.3.9340': attribute type 7 has an invalid length. [ 455.524536][T25784] netlink: 'syz.3.9340': attribute type 7 has an invalid length. [ 455.624390][T25790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9342'. [ 455.716132][T25796] pimreg: left allmulticast mode [ 455.947714][T25803] netlink: 'syz.4.9346': attribute type 1 has an invalid length. [ 455.978230][T25803] netlink: 'syz.4.9346': attribute type 4 has an invalid length. [ 456.003665][T25803] netlink: 9422 bytes leftover after parsing attributes in process `syz.4.9346'. [ 456.188042][T25816] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.9353'. [ 456.271145][T25820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9355'. [ 456.333881][T25820] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9355'. [ 456.703906][T25838] netlink: 'syz.3.9363': attribute type 1 has an invalid length. [ 456.715992][T25838] netlink: 'syz.3.9363': attribute type 4 has an invalid length. [ 457.504273][T25889] netlink: 'syz.3.9383': attribute type 1 has an invalid length. [ 457.567055][T25889] bond0: (slave bridge4): making interface the new active one [ 457.575538][T25889] bond0: (slave bridge4): Enslaving as an active interface with an up link [ 457.960367][T25900] netlink: 'syz.2.9389': attribute type 1 has an invalid length. [ 458.025402][T25900] bond6: (slave gretap4): making interface the new active one [ 458.042953][T25900] bond6: (slave gretap4): Enslaving as an active interface with an up link [ 458.406517][T25913] syzkaller0: entered promiscuous mode [ 458.423844][T25913] syzkaller0: entered allmulticast mode [ 459.055947][T25943] __nla_validate_parse: 9 callbacks suppressed [ 459.055968][T25943] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9404'. [ 460.339035][T25943] bridge_slave_1: left promiscuous mode [ 460.344966][T25943] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.359200][T25943] bridge_slave_0: left allmulticast mode [ 460.365039][T25943] bridge_slave_0: left promiscuous mode [ 460.373418][T25943] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.759086][T25970] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9412'. [ 460.813573][T25972] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9412'. [ 462.084559][T26028] netlink: 'syz.3.9428': attribute type 29 has an invalid length. [ 462.112819][T26028] netlink: 'syz.3.9428': attribute type 29 has an invalid length. [ 462.138023][T26028] netlink: 500 bytes leftover after parsing attributes in process `syz.3.9428'. [ 462.199739][T26033] netlink: 212344 bytes leftover after parsing attributes in process `syz.2.9431'. [ 464.138763][T26111] netlink: 'syz.4.9457': attribute type 1 has an invalid length. [ 464.370518][T26115] bond5: (slave bridge0): making interface the new active one [ 464.389143][T26115] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 464.658166][T26135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9465'. [ 464.677359][T26135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9465'. [ 465.837521][T26188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9489'. [ 465.878666][T26188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9489'. [ 466.203738][T26211] netlink: 240 bytes leftover after parsing attributes in process `syz.3.9495'. [ 466.293132][T26210] syzkaller1: entered promiscuous mode [ 466.318519][T26210] syzkaller1: entered allmulticast mode [ 466.346058][T26217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9499'. [ 466.432760][T26223] netlink: 'syz.4.9502': attribute type 1 has an invalid length. [ 466.544750][T26227] bond6: (slave gretap2): making interface the new active one [ 466.553659][T26227] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 466.785521][T26241] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.9508'. [ 467.068379][T26258] netlink: 'syz.1.9515': attribute type 4 has an invalid length. [ 467.094625][T26258] netlink: 'syz.1.9515': attribute type 4 has an invalid length. [ 467.347834][T26270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9521'. [ 467.757975][T26289] syz_tun: entered allmulticast mode [ 467.779792][T26286] syz_tun: left allmulticast mode [ 467.908941][T26291] netlink: 168 bytes leftover after parsing attributes in process `syz.3.9531'. [ 468.209540][T26307] netlink: 'syz.3.9539': attribute type 2 has an invalid length. [ 468.218613][T26311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9540'. [ 468.410567][ T107] page_pool_release_retry() stalled pool shutdown: id 55, 1 inflight 60 sec [ 469.433047][T26363] syzkaller0: entered promiscuous mode [ 469.440539][T26363] syzkaller0: entered allmulticast mode [ 469.838815][T26390] __nla_validate_parse: 4 callbacks suppressed [ 469.838836][T26390] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9568'. [ 471.367632][ T6445] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 471.428905][T26400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9571'. [ 471.618052][T26410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9575'. [ 471.639201][T26410] netlink: 'syz.0.9575': attribute type 2 has an invalid length. [ 471.648184][T26410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9575'. [ 471.819111][T26420] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9579'. [ 472.358171][T26426] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9579'. [ 472.760908][T26434] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9583'. [ 472.998310][T26439] sctp: [Deprecated]: syz.3.9586 (pid 26439) Use of int in maxseg socket option. [ 472.998310][T26439] Use struct sctp_assoc_value instead [ 473.034388][T26446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9585'. [ 473.234013][T26453] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9591'. [ 473.389667][T26458] syzkaller1: entered promiscuous mode [ 473.407156][T26458] syzkaller1: entered allmulticast mode [ 473.574523][T26472] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9599'. [ 474.661745][T26506] wg1 speed is unknown, defaulting to 1000 [ 474.748055][T26514] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.755457][T26514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.772058][T26514] net_ratelimit: 5 callbacks suppressed [ 474.772069][T26514] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 474.783415][T26517] netlink: 'syz.2.9616': attribute type 1 has an invalid length. [ 474.881489][T26517] bond7: entered promiscuous mode [ 474.886552][T26517] bond7: entered allmulticast mode [ 474.913079][T26517] 8021q: adding VLAN 0 to HW filter on device bond7 [ 474.949485][T26523] macvlan0: entered promiscuous mode [ 474.954922][T26523] macvlan0: entered allmulticast mode [ 475.022504][T26523] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 475.295738][T26535] __nla_validate_parse: 3 callbacks suppressed [ 475.295760][T26535] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9623'. [ 475.449563][T26537] wg1 speed is unknown, defaulting to 1000 [ 476.415507][T26577] netlink: 'syz.4.9639': attribute type 1 has an invalid length. [ 476.557276][T26584] IPVS: sed: FWM 3 0x00000003 - no destination available [ 476.643206][T26577] 8021q: adding VLAN 0 to HW filter on device bond7 [ 476.679212][T26588] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.9643'. [ 476.679506][T26581] bond7: (slave veth0_to_bond): making interface the new active one [ 476.703168][T26588] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 476.711534][T26581] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 476.769077][T26585] bond7: entered promiscuous mode [ 476.787616][T26585] veth0_to_bond: entered promiscuous mode [ 476.805503][T26585] bond7: entered allmulticast mode [ 476.824007][T26585] veth0_to_bond: entered allmulticast mode [ 477.103778][T26605] netlink: 'syz.1.9648': attribute type 1 has an invalid length. [ 477.183121][T26609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9648'. [ 477.233679][T26611] netlink: 'syz.0.9650': attribute type 39 has an invalid length. [ 477.259318][T26609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9648'. [ 477.279008][T26605] bond6: entered promiscuous mode [ 477.285894][T26605] 8021q: adding VLAN 0 to HW filter on device bond6 [ 477.393280][T26605] bond6: (slave bridge6): making interface the new active one [ 477.401345][T26605] bridge6: entered promiscuous mode [ 477.409386][T26605] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 477.442742][T26615] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9651'. [ 477.535156][T26623] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.9656'. [ 477.535231][T26624] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.9655'. [ 477.621177][T26626] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9657'. [ 477.725255][T26630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9659'. [ 477.750423][T26630] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 477.771470][T26630] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 477.791245][T26634] netlink: 'syz.2.9661': attribute type 1 has an invalid length. [ 477.800983][T26630] team0: Failed to send options change via netlink (err -105) [ 477.809200][T26630] team0: Port device batadv1 added [ 477.860855][T26634] 8021q: adding VLAN 0 to HW filter on device bond9 [ 477.902189][T26634] bond9: (slave veth11): Enslaving as an active interface with a down link [ 477.924319][T26634] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 477.931978][T26634] bond9: (slave batadv2): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 478.368660][T26665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9674'. [ 479.235048][T26708] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 480.259769][T26753] bond4: entered promiscuous mode [ 480.265405][T26753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 480.316813][T26753] __nla_validate_parse: 4 callbacks suppressed [ 480.366218][T26753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9705'. [ 480.402584][T26753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9705'. [ 480.466339][T26763] netlink: 'syz.4.9708': attribute type 10 has an invalid length. [ 480.525301][T26760] bond4: (slave xfrm1): refused to change device type [ 480.535297][T26765] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9708'. [ 480.605284][T26763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.644221][T26763] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 480.670003][T26765] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.714812][T26765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.743846][T26765] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.771859][T26765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.831718][T26765] bond0: (slave batadv0): Releasing backup interface [ 481.365262][T26802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.399811][T26802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.671916][T26818] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9728'. [ 482.013546][T26836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9736'. [ 482.078885][T26836] netlink: 92 bytes leftover after parsing attributes in process `syz.3.9736'. [ 482.284021][T26842] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9738'. [ 482.694470][T26863] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9742'. [ 482.697451][T26862] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9743'. [ 484.004389][T26913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9754'. [ 484.313130][T26921] smc: net device team0 applied user defined pnetid SYZ2 [ 484.334978][T26921] smc: net device team0 erased user defined pnetid SYZ2 [ 484.708857][T26945] vlan0: entered promiscuous mode [ 484.714378][T26945] vlan0: entered allmulticast mode [ 484.720181][T26945] hsr_slave_1: entered allmulticast mode [ 485.418046][T26967] syzkaller1: entered promiscuous mode [ 485.423803][T26967] syzkaller1: entered allmulticast mode [ 486.025621][T26985] __nla_validate_parse: 7 callbacks suppressed [ 486.025643][T26985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9781'. [ 486.095563][T26988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9781'. [ 486.445138][T26994] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9784'. [ 486.834392][T27010] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9791'. [ 486.963488][T27014] netem: change failed [ 487.591941][T27038] netlink: 'syz.3.9803': attribute type 1 has an invalid length. [ 487.772693][T27041] veth7: entered promiscuous mode [ 487.807878][T27041] bond2: (slave veth7): Enslaving as a backup interface with a down link [ 487.973833][T27059] vlan2: entered allmulticast mode [ 487.979568][T27059] hsr0: entered allmulticast mode [ 488.017119][ T3661] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 488.059859][T27064] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9811'. [ 488.149956][T27065] wg1 speed is unknown, defaulting to 1000 [ 488.469056][T27074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9814'. [ 488.519880][T27076] syz_tun: entered allmulticast mode [ 488.735401][T27082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9818'. [ 489.083261][T27097] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9822'. [ 489.123446][T27099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9825'. [ 489.383456][T27103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9826'. [ 489.652733][T27121] Dead loop on virtual device ip6_vti0, fix it urgently! [ 489.679270][T27121] Dead loop on virtual device ip6_vti0, fix it urgently! [ 489.689719][T27120] tipc: Enabled bearer , priority 0 [ 489.720568][T27120] syzkaller0: MTU too low for tipc bearer [ 489.726355][T27120] tipc: Disabling bearer [ 490.123688][T27137] wg1 speed is unknown, defaulting to 1000 [ 491.054406][T27172] __nla_validate_parse: 1 callbacks suppressed [ 491.054428][T27172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9845'. [ 491.196618][T27175] tipc: Enabled bearer , priority 0 [ 491.228964][T27179] netlink: 'syz.4.9847': attribute type 10 has an invalid length. [ 491.278222][T27180] netlink: 'syz.4.9847': attribute type 10 has an invalid length. [ 491.357180][T27175] syzkaller0: entered promiscuous mode [ 491.362929][T27175] syzkaller0: entered allmulticast mode [ 491.369601][T27175] tipc: Resetting bearer [ 491.505033][T27192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9849'. [ 491.538646][T27178] bridge0: port 1(veth0_to_bridge) entered disabled state [ 491.898855][T27179] syz_tun: entered promiscuous mode [ 491.940795][T27179] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 492.014808][T27180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.045813][T27180] team0: Port device bond0 added [ 492.096732][T27185] bond0: (slave syz_tun): Releasing backup interface [ 492.159678][T27185] team0: Port device bond0 removed [ 492.166587][T27207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9852'. [ 492.188835][T27185] team0: Port device dummy0 removed [ 492.205521][T27185] bond7: (slave veth0_to_bond): Releasing active interface [ 492.208188][T27207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9852'. [ 492.213490][T27185] veth0_to_bond: left promiscuous mode [ 492.231308][T27185] veth0_to_bond: left allmulticast mode [ 492.256225][T27185] bond0: (slave bond_slave_0): Releasing backup interface [ 492.272383][T27185] bond0: (slave bond_slave_1): Releasing backup interface [ 492.312844][T27185] team0: Port device team_slave_0 removed [ 492.335334][T27185] team0: Port device team_slave_1 removed [ 492.347632][T27185] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 492.739251][T27187] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.749210][T27187] bridge0: left allmulticast mode [ 493.044841][T27187] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 493.085141][T27187] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 493.476563][T27187] geneve2: left promiscuous mode [ 493.482357][T27187] geneve2: left allmulticast mode [ 493.494563][T27187] gre1: left promiscuous mode [ 493.499606][T27187] gre1: left allmulticast mode [ 493.563002][T27187] geneve3: left promiscuous mode [ 493.570079][T27187] geneve3: left allmulticast mode [ 493.586395][T27187] gtp0: left promiscuous mode [ 493.591362][T27187] gtp0: left allmulticast mode [ 493.607517][T27187] veth3: left allmulticast mode [ 493.688966][T27187] ip6gre1: left promiscuous mode [ 493.860598][T27187] bond4: left promiscuous mode [ 493.878195][T27174] tipc: Resetting bearer [ 495.387469][T27174] tipc: Disabling bearer [ 495.405100][T27192] geneve5: entered promiscuous mode [ 495.411705][T27192] geneve5: entered allmulticast mode [ 495.419553][ T3661] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.428611][ T3661] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.438866][ T3661] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 53683 - 0 [ 495.469940][T27223] : entered promiscuous mode [ 495.502637][ T3661] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.525484][ T3661] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.548320][ T3661] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 53683 - 0 [ 495.667835][ T3661] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.686521][ T3661] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.727009][ T3661] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 53683 - 0 [ 495.745796][ T3661] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.761695][ T3661] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.771933][ T3661] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 53683 - 0 [ 495.790405][ T3661] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.810991][ T3661] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 495.838004][ T3661] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 256 - 0 [ 495.867733][ T3661] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 495.879178][ T3661] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 495.906097][ T3661] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 256 - 0 [ 495.990073][T27264] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9865'. [ 496.020852][ T3661] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 496.043857][ T3661] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 496.064021][ T3661] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 256 - 0 [ 496.500198][T27280] tipc: Failed to remove unknown binding: 66,0,0/10463914:68383150/68383151 [ 496.524243][T27281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9869'. [ 496.538908][T27280] tipc: Failed to remove unknown binding: 66,0,0/10463914:68383150/68383151 [ 496.873935][T27296] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9874'. [ 497.170276][T27305] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9877'. [ 497.246044][T27310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9879'. [ 497.258361][T27312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9880'. [ 497.268568][T27312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9880'. [ 497.484296][T27321] tipc: Enabled bearer , priority 0 [ 497.538053][T27322] tipc: Enabled bearer , priority 0 [ 497.563238][T27317] tipc: Resetting bearer [ 498.575052][T27352] netlink: 'syz.3.9887': attribute type 4 has an invalid length. [ 498.631099][T27353] netlink: 'syz.3.9887': attribute type 4 has an invalid length. [ 499.553573][T27317] tipc: Disabling bearer [ 499.588975][T27322] syzkaller0: entered promiscuous mode [ 499.594470][T27322] syzkaller0: entered allmulticast mode [ 499.601338][T27322] tipc: Resetting bearer [ 499.629549][T27320] tipc: Resetting bearer [ 501.284058][T27320] tipc: Disabling bearer [ 501.417438][T27360] wg1 speed is unknown, defaulting to 1000 [ 501.498010][T27375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9892'. [ 501.537378][T27377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9891'. [ 501.654697][T27383] netlink: 'syz.2.9893': attribute type 2 has an invalid length. [ 502.250687][T27395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9897'. [ 502.317940][T27398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9898'. [ 502.662319][T27410] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9904'. [ 502.838455][T27417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.869127][T27417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.894447][T27417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.993009][T27423] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9908'. [ 503.021221][T27427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.087025][T27430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9910'. [ 503.111787][T27431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.426663][T27448] wg1 speed is unknown, defaulting to 1000 [ 503.894676][T27457] syzkaller0: entered promiscuous mode [ 503.902602][T27457] syzkaller0: entered allmulticast mode [ 503.973083][T27460] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 504.479603][T27473] syzkaller0: entered promiscuous mode [ 504.504489][T27473] syzkaller0: entered allmulticast mode [ 504.536560][T27478] netlink: 576 bytes leftover after parsing attributes in process `syz.2.9929'. [ 504.909310][T27487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9931'. [ 505.873346][T27516] syzkaller0: entered promiscuous mode [ 505.895933][T27516] syzkaller0: entered allmulticast mode [ 506.719569][T27528] syzkaller0: entered allmulticast mode [ 507.761439][T27576] syzkaller0: entered promiscuous mode [ 507.767542][T27576] syzkaller0: entered allmulticast mode [ 507.890315][T27583] tipc: Enabled bearer , priority 0 [ 507.985940][T27583] syzkaller0: entered promiscuous mode [ 507.992092][T27583] syzkaller0: entered allmulticast mode [ 507.999249][T27583] tipc: Resetting bearer [ 508.032962][T27586] syzkaller0: entered promiscuous mode [ 508.039163][T27586] syzkaller0: entered allmulticast mode [ 508.047486][T27582] tipc: Resetting bearer [ 509.709791][T27582] tipc: Disabling bearer [ 509.732488][T27589] syzkaller0: entered promiscuous mode [ 509.738702][T27589] syzkaller0: entered allmulticast mode [ 509.819818][T27615] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9966'. [ 509.833868][T27224] tipc: Node number set to 2886997007 [ 509.880183][T27615] netlink: 76 bytes leftover after parsing attributes in process `syz.0.9966'. [ 509.911308][T27615] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9966'. [ 509.960345][T27620] netlink: 'syz.1.9968': attribute type 1 has an invalid length. [ 510.029077][T27620] 8021q: adding VLAN 0 to HW filter on device bond7 [ 510.122227][T27620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9968'. [ 510.160842][T27631] netlink: 'syz.3.9969': attribute type 1 has an invalid length. [ 510.345939][T27631] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 510.631571][T27654] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9975'. [ 510.653380][T27653] tipc: Enabled bearer , priority 0 [ 510.845263][T27653] syzkaller0: entered promiscuous mode [ 510.893442][T27653] syzkaller0: entered allmulticast mode [ 510.915083][T27653] tipc: Resetting bearer [ 510.940427][T27665] netlink: 'syz.2.9975': attribute type 5 has an invalid length. [ 510.957584][T27665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9975'. [ 511.171588][T27682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9981'. [ 511.172256][ T36] tipc: Resetting bearer [ 511.281177][T27651] tipc: Resetting bearer [ 512.851324][T27651] tipc: Disabling bearer [ 512.871352][T27677] syzkaller0: entered promiscuous mode [ 512.877249][T27677] syzkaller0: entered allmulticast mode [ 512.966722][T27705] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9983'. [ 513.140426][T27707] syzkaller0: entered promiscuous mode [ 513.156250][T27707] syzkaller0: entered allmulticast mode [ 513.438458][T27727] syzkaller0: entered promiscuous mode [ 513.443977][T27727] syzkaller0: entered allmulticast mode [ 513.481999][T27734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9996'. [ 513.500159][T27731] netlink: 'syz.1.9994': attribute type 4 has an invalid length. [ 513.500689][T27734] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 513.532192][T27734] team1: entered promiscuous mode [ 513.537745][T27734] team1: entered allmulticast mode [ 513.620963][T27738] netlink: 'syz.0.9997': attribute type 1 has an invalid length. [ 513.670198][T27738] 8021q: adding VLAN 0 to HW filter on device bond5 [ 513.678634][T27741] netlink: 'syz.1.9998': attribute type 3 has an invalid length. [ 513.691487][T27741] netlink: 'syz.1.9998': attribute type 3 has an invalid length. [ 513.724635][T27743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9999'. [ 513.755666][T27738] bond5: (slave veth11): Enslaving as an active interface with a down link [ 513.786489][T27744] vlan3: entered allmulticast mode [ 513.792500][T27744] veth1: entered allmulticast mode [ 513.799363][T27744] bond5: (slave vlan3): Opening slave failed [ 513.842444][T27747] syzkaller0: entered promiscuous mode [ 513.852067][T27747] syzkaller0: entered allmulticast mode [ 514.000487][T27755] netlink: 'syz.1.10004': attribute type 1 has an invalid length. [ 514.109931][T27757] bond8: (slave xfrm1): The slave device specified does not support setting the MAC address [ 514.126474][T27757] bond8: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 514.141241][T27757] bond8: (slave xfrm1): making interface the new active one [ 514.150540][T27757] bond8: (slave xfrm1): Enslaving as an active interface with an up link [ 514.164485][T27755] bond8 (unregistering): (slave xfrm1): Releasing backup interface [ 514.194357][T27755] bond8 (unregistering): Released all slaves [ 514.353628][T27764] syzkaller0: entered promiscuous mode [ 514.361957][T27764] syzkaller0: entered allmulticast mode [ 514.397477][T27771] syzkaller0: entered promiscuous mode [ 514.403274][T27771] syzkaller0: entered allmulticast mode [ 516.168443][T27795] tipc: Enabling of bearer rejected, failed to enable media [ 516.341933][T27808] syzkaller0: entered promiscuous mode [ 516.367475][T27808] syzkaller0: entered allmulticast mode [ 516.457574][T27228] IPVS: starting estimator thread 0... [ 516.500923][T27816] IPVS: Error connecting to the multicast addr [ 516.524489][T27820] __nla_validate_parse: 2 callbacks suppressed [ 516.524511][T27820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10020'. [ 516.547663][T27820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 516.577822][T27817] IPVS: using max 37 ests per chain, 88800 per kthread [ 516.702414][T27820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 516.946156][T27833] syzkaller0: entered promiscuous mode [ 516.958472][T27833] syzkaller0: entered allmulticast mode [ 517.237819][T27851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10026'. [ 517.259805][T27851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10026'. [ 517.350283][T27854] ipt_REJECT: TCP_RESET invalid for non-tcp [ 517.484311][T27863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10032'. [ 517.765902][T27876] netlink: 'syz.4.10036': attribute type 9 has an invalid length. [ 517.888628][T27880] syzkaller0: entered promiscuous mode [ 517.894354][T27880] syzkaller0: entered allmulticast mode [ 517.906504][T27882] syzkaller0: entered promiscuous mode [ 517.912925][T27882] syzkaller0: entered allmulticast mode [ 518.160141][T27890] netlink: 'syz.0.10042': attribute type 1 has an invalid length. [ 518.183837][T27882] tipc: Enabled bearer , priority 0 [ 518.210025][T27881] tipc: Resetting bearer [ 518.240025][T27881] tipc: Disabling bearer [ 518.294274][T27890] 8021q: adding VLAN 0 to HW filter on device bond7 [ 518.304632][T27890] bond6: (slave bond7): making interface the new active one [ 518.313993][T27890] bond6: (slave bond7): Enslaving as an active interface with an up link [ 518.323790][T27888] syzkaller0: entered promiscuous mode [ 518.341070][T27890] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10042'. [ 518.352199][T27888] syzkaller0: entered allmulticast mode [ 518.394624][T27894] bond6: (slave gretap3): Enslaving as a backup interface with an up link [ 518.440904][T27890] 8021q: adding VLAN 0 to HW filter on device bond6 [ 518.448621][T27888] tipc: Started in network mode [ 518.453687][T27888] tipc: Node identity ce5684820ca4, cluster identity 255 [ 518.477693][T27888] tipc: Enabled bearer , priority 0 [ 518.511962][T27887] tipc: Resetting bearer [ 518.560478][T27887] tipc: Disabling bearer [ 518.642365][T27910] syzkaller0: entered promiscuous mode [ 518.664659][T27910] syzkaller0: entered allmulticast mode [ 518.818048][T27918] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10052'. [ 518.932792][T27924] syzkaller0: entered promiscuous mode [ 518.942531][T27924] syzkaller0: entered allmulticast mode [ 518.951227][T27925] TCP: TCP_TX_DELAY enabled [ 519.405154][ T3661] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 520.379582][T27964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10066'. [ 520.639529][T27975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10066'. [ 521.094680][T27951] syzkaller0: entered promiscuous mode [ 521.100851][T27951] syzkaller0: entered allmulticast mode [ 521.329307][T27977] syzkaller0: entered promiscuous mode [ 521.335928][T27977] syzkaller0: entered allmulticast mode [ 521.358314][T27983] syzkaller0: entered promiscuous mode [ 521.364023][T27983] syzkaller0: entered allmulticast mode [ 521.593071][T27991] syzkaller0: entered promiscuous mode [ 521.609178][T27991] syzkaller0: entered allmulticast mode [ 521.715981][T27997] netlink: 'syz.1.10073': attribute type 1 has an invalid length. [ 521.775659][T27999] netlink: 'syz.4.10074': attribute type 29 has an invalid length. [ 521.827512][T27999] netlink: 'syz.4.10074': attribute type 29 has an invalid length. [ 521.848516][T27999] netlink: 'syz.4.10074': attribute type 29 has an invalid length. [ 521.871116][T27999] netlink: 'syz.4.10074': attribute type 29 has an invalid length. [ 521.900737][T27999] netlink: 'syz.4.10074': attribute type 29 has an invalid length. [ 521.930874][T27999] netlink: 'syz.4.10074': attribute type 29 has an invalid length. [ 521.947451][T27999] netlink: 'syz.4.10074': attribute type 29 has an invalid length. [ 522.261633][T28016] syzkaller0: entered promiscuous mode [ 522.288011][T28016] syzkaller0: entered allmulticast mode [ 522.399517][T28019] syzkaller0: entered promiscuous mode [ 522.412355][T28019] syzkaller0: entered allmulticast mode [ 522.445150][T28019] tipc: Enabled bearer , priority 0 [ 522.473826][T28018] tipc: Resetting bearer [ 522.508456][T28018] tipc: Disabling bearer [ 522.532450][T28026] syzkaller0: entered promiscuous mode [ 522.539527][T28026] syzkaller0: entered allmulticast mode [ 522.864088][T28036] netlink: 'syz.3.10090': attribute type 1 has an invalid length. [ 522.930255][T28038] syzkaller0: entered promiscuous mode [ 522.949226][T28038] syzkaller0: entered allmulticast mode [ 523.028112][T28036] 8021q: adding VLAN 0 to HW filter on device bond4 [ 523.053168][T28040] bond4: (slave veth0_to_bond): making interface the new active one [ 523.064283][T28040] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 524.780404][T28044] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 524.999279][T28070] syzkaller0: entered promiscuous mode [ 525.019769][T28070] syzkaller0: entered allmulticast mode [ 525.600466][T28096] tipc: Enabled bearer , priority 0 [ 525.609804][T28096] syzkaller0: entered promiscuous mode [ 525.615498][T28096] syzkaller0: entered allmulticast mode [ 525.671569][T28096] tipc: Resetting bearer [ 525.698261][T28095] tipc: Resetting bearer [ 525.749471][T28095] tipc: Disabling bearer [ 525.783337][T28100] tipc: Enabled bearer , priority 0 [ 525.792371][T28100] syzkaller0: entered promiscuous mode [ 525.798912][T28100] syzkaller0: entered allmulticast mode [ 525.870896][T28100] tipc: Resetting bearer [ 525.900261][T28099] tipc: Resetting bearer [ 525.949310][T28099] tipc: Disabling bearer [ 525.995911][T28109] netlink: 32 bytes leftover after parsing attributes in process `syz.2.10112'. [ 526.028374][T28110] syzkaller0: entered promiscuous mode [ 526.034009][T28110] syzkaller0: entered allmulticast mode [ 526.242260][T28119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10116'. [ 526.268742][T28120] tipc: Enabled bearer , priority 0 [ 526.289597][T28119] bond0: (slave wlan1): Releasing backup interface [ 526.334808][T28113] syzkaller0: entered promiscuous mode [ 526.341310][T28113] syzkaller0: entered allmulticast mode [ 526.365378][T28113] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 526.463035][T28113] tipc: Resetting bearer [ 526.476764][T28127] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.10117'. [ 526.489062][T28112] tipc: Resetting bearer [ 526.541776][T28112] tipc: Disabling bearer [ 526.572462][T28127] syz.3.10117 uses old SIOCAX25GETINFO [ 526.735991][T28138] netlink: 'syz.0.10119': attribute type 1 has an invalid length. [ 527.119057][T28155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10124'. [ 527.164867][T28157] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10125'. [ 527.351700][T28166] syzkaller0: entered promiscuous mode [ 527.357473][T28166] syzkaller0: entered allmulticast mode [ 527.389426][T28170] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10130'. [ 527.424441][T28168] syzkaller0: entered promiscuous mode [ 527.430303][T28168] syzkaller0: entered allmulticast mode [ 527.489757][T28172] syzkaller0: entered promiscuous mode [ 527.500807][T28172] syzkaller0: entered allmulticast mode [ 527.770728][T28181] syzkaller0: entered promiscuous mode [ 527.778556][T28181] syzkaller0: entered allmulticast mode [ 527.862549][T28187] netlink: 'syz.0.10137': attribute type 1 has an invalid length. [ 527.924155][T28189] 8021q: adding VLAN 0 to HW filter on device bond5 [ 528.013709][T28187] 8021q: adding VLAN 0 to HW filter on device bond8 [ 528.026250][T28192] rdma_rxe: rxe_newlink: failed to add bond0 [ 528.052252][T28201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10137'. [ 528.096300][T28191] 8021q: adding VLAN 0 to HW filter on device bond8 [ 528.105826][T28191] bond8: (slave vxcan1): The slave device specified does not support setting the MAC address [ 528.141477][T28191] bond8: (slave vxcan1): Error -95 calling set_mac_address [ 528.241393][T28189] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 528.262025][T28189] bond5: (slave macvlan2): making interface the new active one [ 528.273009][T28189] bond5: (slave macvlan2): Enslaving as an active interface with an up link [ 528.372597][T28196] veth15: entered promiscuous mode [ 528.393061][T28196] bond8: (slave veth15): Enslaving as an active interface with a down link [ 528.409868][T28201] 8021q: adding VLAN 0 to HW filter on device bond8 [ 528.546312][T28209] syzkaller0: entered promiscuous mode [ 528.552725][T28209] syzkaller0: entered allmulticast mode [ 530.623255][T28219] syzkaller0: entered promiscuous mode [ 530.629117][T28219] syzkaller0: entered allmulticast mode [ 530.636501][T28226] tipc: Enabling of bearer rejected, failed to enable media [ 530.766304][T28256] syzkaller0: entered promiscuous mode [ 530.783136][T28256] syzkaller0: entered allmulticast mode [ 531.139861][T28271] tipc: Enabled bearer , priority 0 [ 531.149493][T28271] syzkaller0: entered promiscuous mode [ 531.155016][T28271] syzkaller0: entered allmulticast mode [ 531.189601][T28271] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 531.274981][T28271] tipc: Resetting bearer [ 531.318150][T28269] tipc: Resetting bearer [ 531.385466][T28269] tipc: Disabling bearer [ 533.344001][T28299] syzkaller0: entered promiscuous mode [ 533.363211][T28299] syzkaller0: entered allmulticast mode [ 533.538478][T28318] syzkaller0: entered promiscuous mode [ 533.567801][T28318] syzkaller0: entered allmulticast mode [ 533.587438][T28320] syzkaller0: entered promiscuous mode [ 533.601234][T28320] syzkaller0: left promiscuous mode [ 533.753079][T28325] tipc: Enabled bearer , priority 0 [ 533.764882][T28325] syzkaller0: entered promiscuous mode [ 533.771982][T28325] syzkaller0: entered allmulticast mode [ 533.788269][T28329] syzkaller0: entered promiscuous mode [ 533.793912][T28329] syzkaller0: entered allmulticast mode [ 533.842502][T28337] netlink: 'syz.4.10174': attribute type 1 has an invalid length. [ 533.925608][T28337] 8021q: adding VLAN 0 to HW filter on device bond8 [ 533.944205][T28325] tipc: Resetting bearer [ 533.991525][T28324] tipc: Resetting bearer [ 534.050842][T28324] tipc: Disabling bearer [ 534.071736][T28337] bond8: (slave ip6gretap2): making interface the new active one [ 534.081010][T28337] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 534.118895][T28348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10175'. [ 534.130460][T28348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.184081][T28348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.225090][T28337] veth7: entered promiscuous mode [ 534.234395][T28337] bond8: (slave veth7): Enslaving as an active interface with a down link [ 534.292091][T28347] bond8: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 534.369371][T28349] tipc: Enabled bearer , priority 0 [ 534.382662][T28345] syzkaller0: entered promiscuous mode [ 534.389473][T28345] syzkaller0: entered allmulticast mode [ 534.412885][T28357] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 534.479137][T28349] tipc: Resetting bearer [ 534.492815][T28360] syzkaller0: entered promiscuous mode [ 534.499045][T28360] syzkaller0: entered allmulticast mode [ 534.523895][T28344] tipc: Resetting bearer [ 534.548702][T28344] tipc: Disabling bearer [ 534.594191][T28362] syzkaller0: entered promiscuous mode [ 534.600128][T28362] syzkaller0: entered allmulticast mode [ 534.815965][T28373] syzkaller0: entered promiscuous mode [ 534.821870][T28373] syzkaller0: entered allmulticast mode [ 534.899833][T28374] syzkaller0: entered promiscuous mode [ 534.917385][T28374] syzkaller0: entered allmulticast mode [ 535.049281][T28376] syzkaller0: entered promiscuous mode [ 535.054832][T28376] syzkaller0: entered allmulticast mode [ 535.067226][T28380] syzkaller0: entered promiscuous mode [ 535.073434][T28380] syzkaller0: entered allmulticast mode [ 535.102685][T28380] 0: reclassify loop, rule prio 0, protocol 800 [ 535.383944][T28392] syzkaller0: entered promiscuous mode [ 535.389645][T28392] syzkaller0: entered allmulticast mode [ 535.406155][T28396] syzkaller0: entered promiscuous mode [ 535.423529][T28396] syzkaller0: entered allmulticast mode [ 535.603637][T28414] netlink: 'syz.0.10195': attribute type 4 has an invalid length. [ 537.795998][T28468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.835644][T28468] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 538.238886][T28492] syzkaller0: entered promiscuous mode [ 538.248078][T28492] syzkaller0: entered allmulticast mode [ 538.319653][T28495] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 538.448675][T28498] netlink: 'syz.4.10211': attribute type 1 has an invalid length. [ 538.466782][T28498] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10211'. [ 538.554620][T28499] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10210'. [ 538.683931][T28506] syzkaller0: entered promiscuous mode [ 538.689837][T28506] syzkaller0: entered allmulticast mode [ 538.975537][T28518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10216'. [ 539.024022][T28518] syz_tun: entered promiscuous mode [ 539.053380][T28519] tipc: Enabled bearer , priority 0 [ 539.070127][T28519] syzkaller0: entered promiscuous mode [ 539.075646][T28519] syzkaller0: entered allmulticast mode [ 539.168252][T28521] syzkaller0: entered promiscuous mode [ 539.187133][T28521] syzkaller0: entered allmulticast mode [ 539.204469][T28517] tipc: Resetting bearer [ 539.212622][T28521] 0: reclassify loop, rule prio 0, protocol 800 [ 539.258736][T28531] IPVS: ip_vs_add_dest(): server weight less than zero [ 539.281158][T28517] tipc: Disabling bearer [ 539.445467][T28539] syzkaller0: entered promiscuous mode [ 539.470787][T28539] syzkaller0: entered allmulticast mode [ 539.538785][T28544] netlink: 'syz.3.10228': attribute type 1 has an invalid length. [ 539.655053][T28545] syzkaller0: entered promiscuous mode [ 539.660725][T28545] syzkaller0: entered allmulticast mode [ 539.677959][T28545] TC_ACT_REPEAT abuse ? [ 539.750637][T28544] 8021q: adding VLAN 0 to HW filter on device bond6 [ 539.841586][T28544] veth13: entered promiscuous mode [ 539.862204][T28544] bond6: (slave veth13): Enslaving as a backup interface with a down link [ 539.878282][T28562] netlink: 76 bytes leftover after parsing attributes in process `syz.1.10234'. [ 539.988817][T28554] syzkaller0: entered promiscuous mode [ 539.995203][T28554] syzkaller0: entered allmulticast mode [ 540.045222][T28575] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 540.061491][T28574] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10237'. [ 540.081450][T28574] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10237'. [ 540.143511][T28580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10236'. [ 541.829550][T28587] syzkaller0: entered promiscuous mode [ 541.847803][T28587] syzkaller0: entered allmulticast mode [ 541.883291][T28587] tipc: Enabled bearer , priority 0 [ 541.919925][T28587] tipc: Resetting bearer [ 541.997716][T28585] tipc: Resetting bearer [ 542.070698][T28585] tipc: Disabling bearer [ 542.245174][T28611] netlink: 'syz.4.10251': attribute type 1 has an invalid length. [ 542.274993][T28611] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10251'. [ 542.351176][T28619] syzkaller0: entered promiscuous mode [ 542.363439][T28619] syzkaller0: entered allmulticast mode [ 542.787340][T28646] tipc: Enabling of bearer rejected, failed to enable media [ 542.797276][T28647] syzkaller0: entered promiscuous mode [ 542.802898][T28647] syzkaller0: entered allmulticast mode [ 543.266279][T28668] tipc: Enabled bearer , priority 10 [ 543.289629][T28665] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 544.070411][T28665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.548340][T28684] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10283'. [ 544.575422][ T10] tipc: Node number set to 3270673538 [ 544.594012][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.637123][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.655335][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.687531][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.696486][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.725332][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.744792][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 544.755083][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.472062][T28752] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 545.631295][T28760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10316'. [ 545.649661][T28760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10316'. [ 545.837491][T28772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10322'. [ 545.908501][T28772] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10322'. [ 546.040675][T28787] netlink: 'syz.2.10328': attribute type 3 has an invalid length. [ 546.173981][T28795] openvswitch: netlink: IP tunnel dst address not specified [ 546.215374][T28796] netlink: 116 bytes leftover after parsing attributes in process `syz.0.10332'. [ 546.418234][T28808] netem: change failed [ 546.449010][T28810] syzkaller0: entered promiscuous mode [ 546.454759][T28810] syzkaller0: entered allmulticast mode [ 546.701770][T28825] netlink: 'syz.2.10346': attribute type 1 has an invalid length. [ 546.721553][T28825] netlink: 224 bytes leftover after parsing attributes in process `syz.2.10346'. [ 547.039804][T28842] netlink: 'syz.1.10354': attribute type 2 has an invalid length. [ 547.064060][T28842] netlink: 'syz.1.10354': attribute type 4 has an invalid length. [ 547.928557][ T6087] Bluetooth: hci4: command 0x0406 tx timeout [ 548.267798][T28912] xt_CT: You must specify a L4 protocol and not use inversions on it [ 548.364075][T28914] netlink: 'syz.1.10387': attribute type 1 has an invalid length. [ 548.412877][T28914] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10387'. [ 548.432291][T28917] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10390'. [ 548.520249][T28923] ªªªªª98åFÿÿÿÿ: renamed from lo [ 548.530274][T28924] netlink: 88 bytes leftover after parsing attributes in process `syz.2.10392'. [ 548.709866][T28935] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10396'. [ 549.035665][T28954] syzkaller0: entered promiscuous mode [ 549.060932][T28954] syzkaller0: entered allmulticast mode [ 549.076107][T28959] netlink: 'syz.0.10409': attribute type 1 has an invalid length. [ 549.173487][T28963] syzkaller0: entered promiscuous mode [ 549.179756][T28963] syzkaller0: entered allmulticast mode [ 549.379307][T28972] syzkaller1: entered promiscuous mode [ 549.384840][T28972] syzkaller1: entered allmulticast mode [ 549.979260][T28988] syzkaller0: entered promiscuous mode [ 549.995213][T28988] syzkaller0: entered allmulticast mode [ 550.282345][T29003] syzkaller0: entered promiscuous mode [ 550.304300][T29003] syzkaller0: entered allmulticast mode [ 550.663051][T29027] __nla_validate_parse: 1 callbacks suppressed [ 550.663074][T29027] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10442'. [ 550.803564][T29034] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10444'. [ 550.911771][T29037] syzkaller0: entered promiscuous mode [ 550.917860][T29037] syzkaller0: entered allmulticast mode [ 551.023028][T29048] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10450'. [ 551.046070][T29047] syzkaller1: entered promiscuous mode [ 551.052208][T29048] nbd: couldn't find a device at index 0 [ 551.052345][T29047] syzkaller1: entered allmulticast mode [ 551.067092][T29044] syzkaller0: entered promiscuous mode [ 551.072600][T29044] syzkaller0: entered allmulticast mode [ 551.391672][T29063] netlink: 108 bytes leftover after parsing attributes in process `syz.2.10456'. [ 551.441230][T29069] netlink: 'syz.3.10460': attribute type 2 has an invalid length. [ 551.501970][T29071] syzkaller1: entered promiscuous mode [ 551.521545][T29071] syzkaller1: entered allmulticast mode [ 551.849035][T29089] syzkaller0: entered promiscuous mode [ 551.854569][T29089] syzkaller0: entered allmulticast mode [ 552.056205][ T36] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 552.382915][T29125] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 552.858381][T29153] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10492'. [ 552.988611][T29159] syzkaller0: entered promiscuous mode [ 552.998005][T29159] syzkaller0: entered allmulticast mode [ 553.516043][T29192] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 553.530688][ T3661] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 553.620316][T29197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10510'. [ 553.659033][T29197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.740489][T29200] syzkaller0: entered promiscuous mode [ 553.746141][T29200] syzkaller0: entered allmulticast mode [ 553.928700][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.944854][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.949357][T29215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10517'. [ 553.967251][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.969932][T29215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10517'. [ 554.046575][T29219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10519'. [ 554.139401][T29225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10522'. [ 554.239604][T29229] netlink: 'syz.3.10524': attribute type 1 has an invalid length. [ 554.424529][T29233] syzkaller0: entered promiscuous mode [ 554.434387][T29233] syzkaller0: entered allmulticast mode [ 554.551839][T29241] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.572391][T29241] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.631577][T29246] tipc: Resetting bearer [ 554.655032][T29246] tipc: Resetting bearer [ 554.700466][T29241] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.726633][T29241] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.832750][T29241] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.843091][T29241] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.902552][T29262] netlink: 'syz.0.10538': attribute type 1 has an invalid length. [ 554.923731][T29241] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 554.934888][T29241] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.144161][T13250] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.173212][T13250] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.231450][T13250] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.244037][T13250] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.307353][ T3151] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.315592][ T3151] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.328052][T29279] syzkaller0: entered promiscuous mode [ 555.333565][T29279] syzkaller0: entered allmulticast mode [ 555.443667][ T3151] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 555.452159][ T3151] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 555.472622][T29287] bond0: entered promiscuous mode [ 555.479038][T29287] bond_slave_0: entered promiscuous mode [ 555.486242][T29287] bond_slave_1: entered promiscuous mode [ 555.496212][T29287] netdevsim netdevsim0 ÿÿÿÿÿÿ: entered promiscuous mode [ 555.510791][T29287] batadv0: entered promiscuous mode [ 555.518714][T29287] debugfs: 'hsr1' already exists in 'hsr' [ 555.524815][T29287] Cannot create hsr debugfs directory [ 555.537178][T29287] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 555.548091][T29287] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 555.558901][T29287] hsr1: entered allmulticast mode [ 555.563968][T29287] bond0: entered allmulticast mode [ 555.571932][T29287] bond_slave_0: entered allmulticast mode [ 555.579057][T29287] bond_slave_1: entered allmulticast mode [ 555.584900][T29287] netdevsim netdevsim0 ÿÿÿÿÿÿ: entered allmulticast mode [ 555.592257][T29287] batadv0: entered allmulticast mode [ 555.599466][T29287] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 555.608159][T29287] bond0: left promiscuous mode [ 555.613120][T29287] bond_slave_0: left promiscuous mode [ 555.619097][T29287] bond_slave_1: left promiscuous mode [ 555.624808][T29287] netdevsim netdevsim0 ÿÿÿÿÿÿ: left promiscuous mode [ 555.633524][T29287] batadv0: left promiscuous mode [ 555.874291][T29305] __nla_validate_parse: 5 callbacks suppressed [ 555.874313][T29305] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10554'. [ 556.325283][T29327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10564'. [ 556.678835][T29348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10572'. [ 556.753902][T29348] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10572'. [ 557.042865][T29365] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10580'. [ 557.762069][T29368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10581'. [ 557.878653][T29370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.889212][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.922980][T29370] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.932875][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.989626][T29374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.125588][T29382] wg1 speed is unknown, defaulting to 1000 [ 558.365720][T29397] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10593'. [ 558.529039][T29402] tipc: Enabled bearer , priority 0 [ 558.633220][T29402] syzkaller0: entered promiscuous mode [ 558.647722][T29402] syzkaller0: entered allmulticast mode [ 558.675369][T29402] tipc: Resetting bearer [ 558.722115][T29401] tipc: Resetting bearer [ 558.763261][T29401] tipc: Disabling bearer [ 558.968426][T29414] tipc: Resetting bearer [ 559.006495][T29414] tipc: Resetting bearer [ 559.036028][T29414] 8021q: adding VLAN 0 to HW filter on device bond1 [ 559.044910][T29414] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 559.103685][T29414] 8021q: adding VLAN 0 to HW filter on device team1 [ 559.112139][T29414] bridge4: entered promiscuous mode [ 559.120961][T29414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.130459][T29425] netlink: zone id is out of range [ 559.138794][T29414] 8021q: adding VLAN 0 to HW filter on device bond2 [ 559.146765][T29425] netlink: del zone limit has 4 unknown bytes [ 559.150747][T29414] 8021q: adding VLAN 0 to HW filter on device bond3 [ 559.155069][ T2141] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 559.189833][T13250] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.197081][T13250] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.238008][ T36] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 559.272431][ T36] bond3: (slave ip6gretap1): link status up again after 0 ms [ 559.299020][ T36] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 559.331526][T13250] bond3: (slave ip6gretap1): link status up again after 0 ms [ 559.366955][ T2141] bond3: (slave ip6gretap1): link status up again after 0 ms [ 559.409245][ T2141] bond3: (slave ip6gretap1): link status up again after 0 ms [ 559.447423][T13250] bond3: (slave ip6gretap1): link status up again after 0 ms [ 559.480832][T29433] netlink: 80 bytes leftover after parsing attributes in process `syz.2.10603'. [ 559.723541][T29442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10605'. [ 559.773004][ T36] bond6: (slave veth13): link status definitely up, 10000 Mbps full duplex [ 559.791548][T29449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10607'. [ 559.803372][ T36] bond6: active interface up! [ 560.090197][ T299] bond2: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 560.104821][ T299] bond2: active interface up! [ 560.612578][T29485] netlink: 'syz.4.10619': attribute type 1 has an invalid length. [ 560.803439][T29487] macvlan3: entered promiscuous mode [ 560.815516][T29487] macvlan3: entered allmulticast mode [ 560.823019][T29487] bond9: (slave macvlan3): Opening slave failed [ 560.910281][T29493] wg1 speed is unknown, defaulting to 1000 [ 561.112695][T29507] __nla_validate_parse: 5 callbacks suppressed [ 561.112730][T29507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10626'. [ 561.192771][T29510] netlink: 64 bytes leftover after parsing attributes in process `syz.4.10627'. [ 561.376030][T29519] syzkaller1: entered promiscuous mode [ 561.417631][T29519] syzkaller1: entered allmulticast mode [ 561.443392][T29524] syzkaller0: entered promiscuous mode [ 561.449794][T29524] syzkaller0: entered allmulticast mode [ 561.795896][T29543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10635'. [ 562.007925][T29556] netlink: 'syz.4.10638': attribute type 1 has an invalid length. [ 562.043035][T29559] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10640'. [ 562.218621][T29556] 8021q: adding VLAN 0 to HW filter on device bond10 [ 562.302886][T29556] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10638'. [ 562.331387][T29562] 8021q: adding VLAN 0 to HW filter on device bond10 [ 562.342517][T29562] bond10: (slave vxcan1): The slave device specified does not support setting the MAC address [ 562.384533][T29562] bond10: (slave vxcan1): Error -95 calling set_mac_address [ 562.565726][T29566] veth11: entered promiscuous mode [ 562.579816][T29556] 8021q: adding VLAN 0 to HW filter on device bond10 [ 562.751142][T29596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10647'. [ 562.828713][T29601] syzkaller0: entered promiscuous mode [ 562.834383][T29601] syzkaller0: entered allmulticast mode [ 563.091472][T29615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10654'. [ 563.096026][T29613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10653'. [ 563.451195][T29628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10659'. [ 563.556559][T29628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10659'. [ 563.689984][T29639] syzkaller0: entered promiscuous mode [ 563.695711][T29639] syzkaller0: entered allmulticast mode [ 563.829354][T29645] syzkaller0: entered promiscuous mode [ 563.834999][T29645] syzkaller0: entered allmulticast mode [ 564.148357][ T6445] net_ratelimit: 31 callbacks suppressed [ 564.148381][ T6445] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 564.245201][T29657] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 564.288782][T29657] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 564.438028][ T6445] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 564.529807][T29646] lec:lec_atm_close: lec0: Shut down! [ 564.577096][ T3459] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 564.718557][ T3661] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 564.809822][ T3661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.820169][ T6202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.833508][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.896998][ T3661] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 564.939529][T29688] syzkaller0: entered promiscuous mode [ 564.945168][T29688] syzkaller0: entered allmulticast mode [ 565.016499][T29690] unsupported nlmsg_type 40 [ 565.022420][ T3661] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 565.113632][T29694] syzkaller0: entered promiscuous mode [ 565.125635][T29694] syzkaller0: entered allmulticast mode [ 565.198523][T29697] netlink: 'syz.0.10682': attribute type 4 has an invalid length. [ 565.214387][T29697] netlink: 'syz.0.10682': attribute type 4 has an invalid length. [ 565.222641][ T3661] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 565.547783][T29705] wg1 speed is unknown, defaulting to 1000 [ 565.969766][T29726] syzkaller0: entered promiscuous mode [ 565.975966][T29726] syzkaller0: entered allmulticast mode [ 566.208320][ T10] lec:lec_start_xmit: lec0:No lecd attached [ 566.460606][T29747] netlink: 'syz.4.10690': attribute type 1 has an invalid length. [ 566.677297][T29747] bond11: entered promiscuous mode [ 566.689104][T29747] 8021q: adding VLAN 0 to HW filter on device bond11 [ 566.943543][T29771] bond11: (slave bridge13): making interface the new active one [ 566.961028][T29771] bridge13: entered promiscuous mode [ 566.970494][T29771] bond11: (slave bridge13): Enslaving as an active interface with an up link [ 567.712598][T29810] syzkaller0: entered promiscuous mode [ 567.721983][T29810] syzkaller0: entered allmulticast mode [ 567.735540][T29813] __nla_validate_parse: 3 callbacks suppressed [ 567.735562][T29813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10703'. [ 567.757703][T29813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10703'. [ 567.881334][T29818] 8021q: adding VLAN 0 to HW filter on device bond8 [ 567.913032][T29818] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 567.925051][T29818] bond8: (slave macvlan0): Enslaving as an active interface with an up link [ 567.942055][T29818] rdma_rxe: rxe_newlink: failed to add bond0 [ 568.188621][T29829] syzkaller0: entered promiscuous mode [ 568.207959][T29829] syzkaller0: entered allmulticast mode [ 568.329347][T29840] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10713'. [ 568.602785][T29847] syzkaller0: entered promiscuous mode [ 568.630869][T29847] syzkaller0: entered allmulticast mode [ 568.742256][T29849] syzkaller0: entered promiscuous mode [ 568.845740][T29860] netem: change failed [ 568.923023][T29857] wg1 speed is unknown, defaulting to 1000 [ 569.024285][T29866] syzkaller0: entered promiscuous mode [ 569.031854][T29866] syzkaller0: entered allmulticast mode [ 569.142808][T29877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10724'. [ 569.247415][ T12] net_ratelimit: 21 callbacks suppressed [ 569.247437][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 569.419718][T29875] syzkaller0: entered promiscuous mode [ 569.425332][T29875] syzkaller0: entered allmulticast mode [ 569.447445][ T3459] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 570.571194][T28405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.584702][T27234] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.593604][ T6202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.847605][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5640 ms [ 571.855977][ C0] lec:lec_tx_timeout: lec0 [ 571.860832][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 573.497501][T29769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 573.657144][T29951] syzkaller0: entered promiscuous mode [ 573.662800][T29951] syzkaller0: entered allmulticast mode [ 573.694033][T29949] syzkaller0: entered promiscuous mode [ 573.700054][T29949] syzkaller0: entered allmulticast mode [ 573.707664][T29945] syzkaller0: entered promiscuous mode [ 573.713303][T29945] syzkaller0: entered allmulticast mode [ 573.895972][T29954] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10736'. [ 573.918371][ T3729] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 573.942695][ T6031] block nbd5: Receive control failed (result -1) [ 574.037043][ T3729] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 574.093006][T29962] syzkaller0: entered promiscuous mode [ 574.100963][T29962] syzkaller0: entered allmulticast mode [ 574.147365][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 574.256983][T29915] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 574.427012][T29915] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 574.468573][T29969] syzkaller0: entered promiscuous mode [ 574.481731][T29969] syzkaller0: entered allmulticast mode [ 574.533791][T29974] syzkaller0: entered promiscuous mode [ 574.540267][T29974] syzkaller0: entered allmulticast mode [ 574.549170][T29972] syzkaller0: entered promiscuous mode [ 574.554714][T29972] syzkaller0: entered allmulticast mode [ 574.602566][T29975] syzkaller0: entered promiscuous mode [ 574.609359][T29975] syzkaller0: entered allmulticast mode [ 574.887092][T29769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 575.021655][T29985] netlink: 'syz.4.10749': attribute type 1 has an invalid length. [ 575.151599][T29985] 8021q: adding VLAN 0 to HW filter on device bond12 [ 575.173127][T29997] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10749'. [ 575.299198][T29991] veth13: entered promiscuous mode [ 575.329575][T29991] bond12: (slave veth13): Enslaving as an active interface with a down link [ 575.360079][T29993] syzkaller0: entered promiscuous mode [ 575.388403][T29993] syzkaller0: entered allmulticast mode [ 576.887373][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 576.895429][ C0] lec:lec_tx_timeout: lec0 [ 576.900732][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 577.811423][T30011] syzkaller0: entered promiscuous mode [ 577.818430][T30011] syzkaller0: entered allmulticast mode [ 577.827628][T30018] syzkaller0: entered promiscuous mode [ 577.833583][T30018] syzkaller0: entered allmulticast mode [ 577.891533][T30045] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10756'. [ 578.289412][ T6202] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.668151][T29769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 579.800188][T13250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 579.903493][T30064] netlink: 'syz.2.10759': attribute type 4 has an invalid length. [ 579.949157][T29769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 580.022802][T30069] syzkaller0: entered promiscuous mode [ 580.037681][T30069] syzkaller0: entered allmulticast mode [ 580.055855][T30075] netlink: 'syz.1.10762': attribute type 1 has an invalid length. [ 580.076966][ T3729] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 580.226166][T30088] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10762'. [ 580.274107][T30075] 8021q: adding VLAN 0 to HW filter on device bond8 [ 580.386312][T30098] netlink: 224 bytes leftover after parsing attributes in process `syz.4.10767'. [ 580.400672][T30079] veth5: entered promiscuous mode [ 580.419434][T30079] bond8: (slave veth5): Enslaving as an active interface with a down link [ 580.528857][T29779] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 580.688141][T29779] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 580.726096][T30105] syzkaller0: entered promiscuous mode [ 580.731807][T30105] syzkaller0: entered allmulticast mode [ 580.877655][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 581.003761][T30121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10774'. [ 581.045126][T30121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10774'. [ 581.098462][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 581.295081][T30139] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10779'. [ 581.316117][T30139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10779'. [ 581.363588][T30143] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10778'. [ 581.393780][T30138] veth17: entered promiscuous mode [ 581.487238][T13250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 581.508208][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.526152][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.631249][T29769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 581.906868][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 581.915068][ C0] lec:lec_tx_timeout: lec0 [ 581.920431][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 582.065403][T30176] syzkaller0: entered promiscuous mode [ 582.092224][T30176] syzkaller0: entered allmulticast mode [ 582.150828][T30176] tipc: Enabled bearer , priority 0 [ 582.252229][T30181] 8021q: adding VLAN 0 to HW filter on device bond9 [ 582.465137][T30176] tipc: Resetting bearer [ 582.497733][T30173] tipc: Resetting bearer [ 582.595723][T30173] tipc: Disabling bearer [ 582.745789][T29915] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 582.756020][T29915] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 583.183845][T30237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10814'. [ 583.424629][T30250] wg1 speed is unknown, defaulting to 1000 [ 584.688251][ T13] net_ratelimit: 33 callbacks suppressed [ 584.688272][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 584.827609][T28405] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 584.843927][T30308] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10841'. [ 584.868588][T30308] nbd: couldn't find a device at index 0 [ 584.967518][T29769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 585.097572][ T60] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 585.217363][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 585.266611][T30330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10850'. [ 585.292067][T30330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10850'. [ 585.337278][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 585.450495][T28405] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 585.581158][T28405] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 585.725513][T30355] netlink: 132 bytes leftover after parsing attributes in process `syz.4.10860'. [ 585.737853][ T6354] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 585.857993][T28405] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 586.380179][T30395] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 586.386505][T30395] syzkaller1: Linktype set failed because interface is up [ 586.613116][T30407] bond7: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 586.702294][T30407] bond7 (unregistering): Released all slaves [ 586.927098][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 586.935151][ C0] lec:lec_tx_timeout: lec0 [ 586.940063][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 587.083261][T30431] tipc: Enabled bearer , priority 0 [ 587.108170][T30431] tipc: Resetting bearer [ 587.153405][T30430] tipc: Disabling bearer [ 587.510493][T30459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10891'. [ 587.536634][T30459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10891'. [ 587.799319][T30475] tipc: Enabled bearer , priority 0 [ 587.896183][T30475] syzkaller0: entered promiscuous mode [ 587.904378][T30475] syzkaller0: entered allmulticast mode [ 587.933812][T30475] tipc: Resetting bearer [ 587.946763][T30474] tipc: Resetting bearer [ 587.992048][T30474] tipc: Disabling bearer [ 588.099150][T30491] netlink: 'syz.3.10904': attribute type 1 has an invalid length. [ 588.107763][T30491] netlink: 224 bytes leftover after parsing attributes in process `syz.3.10904'. [ 588.278394][T30498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10907'. [ 588.289625][T30498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10907'. [ 588.395982][T30504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10908'. [ 588.423316][T30505] syzkaller1: entered promiscuous mode [ 588.441088][T30505] syzkaller1: entered allmulticast mode [ 589.000571][T30513] wg1 speed is unknown, defaulting to 1000 [ 589.130945][T30521] nbd6: detected capacity change from 0 to 63 [ 589.153569][T30526] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10915'. [ 589.268082][T30528] netlink: 'syz.3.10916': attribute type 1 has an invalid length. [ 589.280115][T30524] block nbd1: NBD_DISCONNECT [ 589.290849][T30524] block nbd1: Send disconnect failed -32 [ 589.322159][T30524] block nbd1: shutting down sockets [ 589.468918][ T6031] block nbd6: Receive control failed (result -104) [ 589.602105][T30536] lo: entered allmulticast mode [ 589.613534][T30533] lo: left allmulticast mode [ 589.967642][T29779] net_ratelimit: 30 callbacks suppressed [ 589.967665][T29779] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 590.217030][T29769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 590.352699][T30579] netlink: 'syz.0.10930': attribute type 1 has an invalid length. [ 590.368368][ T3661] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 590.375810][T30573] wg1 speed is unknown, defaulting to 1000 [ 590.382476][T30579] __nla_validate_parse: 2 callbacks suppressed [ 590.382494][T30579] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10930'. [ 590.477572][ T299] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 590.587051][ T6354] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 590.635450][T30593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10935'. [ 590.751811][T13250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 590.868452][T29736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 590.952217][T30608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10941'. [ 591.001343][T30608] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10941'. [ 591.092263][T30611] syzkaller0: entered promiscuous mode [ 591.109503][T30611] syzkaller0: entered allmulticast mode [ 591.188717][T29769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 591.341367][ T3661] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 591.453512][T30631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10946'. [ 591.488711][T29736] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 591.754567][T30641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10948'. [ 591.934233][T30654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10954'. [ 591.947134][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 591.955197][ C0] lec:lec_tx_timeout: lec0 [ 591.959867][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 591.969382][T30656] syzkaller0: entered promiscuous mode [ 591.974964][T30656] syzkaller0: entered allmulticast mode [ 591.998993][T30654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10954'. [ 592.089218][T30662] syzkaller0: entered promiscuous mode [ 592.094897][T30662] syzkaller0: entered allmulticast mode [ 592.862601][T30681] syzkaller0: entered allmulticast mode [ 592.922749][T30683] syzkaller0: entered promiscuous mode [ 592.928794][T30683] syzkaller0: entered allmulticast mode [ 592.997856][T30688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10966'. [ 593.021293][T30688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10966'. [ 593.181232][T30696] syzkaller0: entered promiscuous mode [ 593.189049][T30696] syzkaller0: entered allmulticast mode [ 593.318251][T30700] netlink: 'syz.4.10971': attribute type 1 has an invalid length. [ 593.352541][T30700] bond13: entered promiscuous mode [ 593.358712][T30700] 8021q: adding VLAN 0 to HW filter on device bond13 [ 593.379189][T30700] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 593.393389][T30700] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 593.404785][T30700] bond13: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 593.484377][T30700] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 593.497129][T30700] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 593.753738][T30712] netlink: 'syz.1.10976': attribute type 1 has an invalid length. [ 593.783910][T30710] syzkaller1: entered promiscuous mode [ 593.791214][T30710] syzkaller1: entered allmulticast mode [ 594.168772][T30732] tipc: Enabled bearer , priority 0 [ 594.176143][T30732] syzkaller0: entered promiscuous mode [ 594.182272][T30732] syzkaller0: entered allmulticast mode [ 594.202514][T30732] tipc: Resetting bearer [ 594.210408][T30731] tipc: Resetting bearer [ 594.232637][T30731] tipc: Disabling bearer [ 594.344369][T30738] syzkaller0: entered promiscuous mode [ 594.352679][T30738] syzkaller0: entered allmulticast mode [ 594.368510][T30742] tipc: Enabling of bearer rejected, failed to enable media [ 594.893349][T30768] syzkaller0: entered promiscuous mode [ 594.904397][T30768] syzkaller0: entered allmulticast mode [ 595.030648][T30776] syzkaller0: entered promiscuous mode [ 595.036242][T30776] syzkaller0: entered allmulticast mode [ 595.177008][ T1046] net_ratelimit: 25 callbacks suppressed [ 595.177028][ T1046] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 595.330121][T29775] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 595.386097][T30791] syzkaller0: entered promiscuous mode [ 595.393278][T30791] syzkaller0: entered allmulticast mode [ 595.453147][T30796] __nla_validate_parse: 5 callbacks suppressed [ 595.453171][T30796] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11004'. [ 595.565680][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 595.583429][T30804] syzkaller0: entered promiscuous mode [ 595.589652][T30804] syzkaller0: entered allmulticast mode [ 595.677106][T29915] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 595.827247][T13250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 595.937543][ T13] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 595.954683][T30825] 0: reclassify loop, rule prio 0, protocol 700 [ 595.988408][T30827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11014'. [ 596.089163][T13250] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 596.181410][T30835] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11018'. [ 596.197472][T29775] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 596.307086][T29769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 596.746732][T30860] syzkaller0: entered promiscuous mode [ 596.754191][T30860] syzkaller0: entered allmulticast mode [ 596.966954][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 596.975192][ C0] lec:lec_tx_timeout: lec0 [ 596.980143][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 597.172418][T30840] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 597.188352][T30840] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 597.502118][T30840] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 597.536996][T30840] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 597.689734][T30840] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 597.695707][T30840] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 597.792502][T30840] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 597.810207][T30840] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 597.980419][T30905] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11029'. [ 598.466002][T30840] ------------[ cut here ]------------ [ 598.471525][T30840] DEBUG_LOCKS_WARN_ON(1) [ 598.471541][T30840] WARNING: kernel/locking/lockdep.c:238 at __lock_acquire+0x39d/0x2cf0, CPU#1: syz.0.11020/30840 [ 598.486338][T30840] Modules linked in: [ 598.490265][T30840] CPU: 1 UID: 0 PID: 30840 Comm: syz.0.11020 Not tainted syzkaller #0 PREEMPT(full) [ 598.499749][T30840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 598.509919][T30840] RIP: 0010:__lock_acquire+0x3a4/0x2cf0 [ 598.515597][T30840] Code: 18 00 4c 8b 74 24 08 75 27 90 e8 17 f2 fc 02 85 c0 74 1c 83 3d 50 e0 4e 0e 00 75 13 48 8d 3d 43 f7 51 0e 48 c7 c6 c1 3a de 8d <67> 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f [ 598.535302][T30840] RSP: 0018:ffffc9000fc3f680 EFLAGS: 00010046 [ 598.541389][T30840] RAX: 0000000000000001 RBX: 0000000000040000 RCX: 0000000000080000 [ 598.549398][T30840] RDX: ffffc900044c1000 RSI: ffffffff8dde3ac1 RDI: ffffffff8ff24ca0 [ 598.557457][T30840] RBP: 0000000000000003 R08: ffffffff8fef35a3 R09: 1ffffffff1fde6b4 [ 598.565445][T30840] R10: dffffc0000000000 R11: fffffbfff1fde6b5 R12: 0000000000001071 [ 598.573425][T30840] R13: ffff88802b242a28 R14: ffff88802b241e80 R15: ffff88802b2429b0 [ 598.581402][T30840] FS: 00007fcc171d76c0(0000) GS:ffff8881257f8000(0000) knlGS:0000000000000000 [ 598.590340][T30840] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.596925][T30840] CR2: 00007ffc60752498 CR3: 000000007ceb2000 CR4: 00000000003526f0 [ 598.604903][T30840] Call Trace: [ 598.608191][T30840] [ 598.611135][T30840] ? touch_wq_lockdep_map+0xb5/0x180 [ 598.616430][T30840] lock_acquire+0x106/0x330 [ 598.620943][T30840] ? touch_wq_lockdep_map+0xb5/0x180 [ 598.626234][T30840] ? touch_wq_lockdep_map+0xb5/0x180 [ 598.631522][T30840] touch_wq_lockdep_map+0xcb/0x180 [ 598.636637][T30840] ? touch_wq_lockdep_map+0xb5/0x180 [ 598.641924][T30840] __flush_workqueue+0x14b/0x14f0 [ 598.646968][T30840] ? nci_close_device+0x10a/0x630 [ 598.652027][T30840] ? __pfx___flush_workqueue+0x10/0x10 [ 598.657601][T30840] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 598.663470][T30840] nci_close_device+0x302/0x630 [ 598.668334][T30840] ? __pfx_nci_close_device+0x10/0x10 [ 598.673714][T30840] ? do_raw_spin_lock+0x12b/0x2f0 [ 598.678744][T30840] ? __pfx_nci_dev_down+0x10/0x10 [ 598.683778][T30840] nci_dev_down+0x3b/0x50 [ 598.688134][T30840] nfc_dev_down+0x152/0x290 [ 598.692663][T30840] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 598.698476][T30840] nfc_rfkill_set_block+0x2d/0x100 [ 598.703607][T30840] rfkill_set_block+0x1d2/0x440 [ 598.708511][T30840] rfkill_fop_write+0x461/0x5a0 [ 598.713363][T30840] ? apparmor_file_permission+0x17f/0x1f0 [ 598.719092][T30840] ? __pfx_rfkill_fop_write+0x10/0x10 [ 598.724470][T30840] ? security_kernfs_init_security+0x220/0x270 [ 598.730638][T30840] ? rw_verify_area+0x255/0x4d0 [ 598.735514][T30840] ? __pfx_rfkill_fop_write+0x10/0x10 [ 598.740901][T30840] vfs_write+0x29a/0xb90 [ 598.745173][T30840] ? __pfx_vfs_write+0x10/0x10 [ 598.750214][T30840] ? __fget_files+0x2a/0x420 [ 598.754810][T30840] ? __fget_files+0x2a/0x420 [ 598.759416][T30840] ? __fget_files+0x3a0/0x420 [ 598.764101][T30840] ? __fget_files+0x2a/0x420 [ 598.768701][T30840] ksys_write+0x150/0x270 [ 598.773052][T30840] ? __pfx_ksys_write+0x10/0x10 [ 598.777913][T30840] do_syscall_64+0xe2/0xf80 [ 598.782431][T30840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.788500][T30840] ? trace_irq_disable+0x37/0x100 [ 598.793526][T30840] ? clear_bhb_loop+0x60/0xb0 [ 598.798217][T30840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.804116][T30840] RIP: 0033:0x7fcc1639aeb9 [ 598.808555][T30840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.828168][T30840] RSP: 002b:00007fcc171d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 598.836674][T30840] RAX: ffffffffffffffda RBX: 00007fcc16615fa0 RCX: 00007fcc1639aeb9 [ 598.844647][T30840] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005 [ 598.852623][T30840] RBP: 00007fcc16408c1f R08: 0000000000000000 R09: 0000000000000000 [ 598.860596][T30840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.868570][T30840] R13: 00007fcc16616038 R14: 00007fcc16615fa0 R15: 00007ffde956a0d8 [ 598.876641][T30840] [ 598.879663][T30840] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 598.887035][T30840] CPU: 1 UID: 0 PID: 30840 Comm: syz.0.11020 Not tainted syzkaller #0 PREEMPT(full) [ 598.896496][T30840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 598.906555][T30840] Call Trace: [ 598.909839][T30840] [ 598.912772][T30840] vpanic+0x1e0/0x670 [ 598.916763][T30840] panic+0xc5/0xd0 [ 598.920491][T30840] ? __pfx_panic+0x10/0x10 [ 598.924922][T30840] __warn+0x315/0x4a0 [ 598.928905][T30840] ? __lock_acquire+0x39d/0x2cf0 [ 598.933860][T30840] ? __lock_acquire+0x39d/0x2cf0 [ 598.938813][T30840] __report_bug+0x29a/0x540 [ 598.943322][T30840] ? __lock_acquire+0x6b5/0x2cf0 [ 598.948273][T30840] ? __lock_acquire+0x39d/0x2cf0 [ 598.953225][T30840] ? __pfx___report_bug+0x10/0x10 [ 598.958253][T30840] ? finish_task_switch+0x161/0x920 [ 598.963485][T30840] ? lock_acquire+0x106/0x330 [ 598.968170][T30840] report_bug_entry+0x19a/0x290 [ 598.973023][T30840] ? __lock_acquire+0x3a4/0x2cf0 [ 598.977969][T30840] ? __lock_acquire+0x3a9/0x2cf0 [ 598.982916][T30840] handle_bug+0xca/0x200 [ 598.987165][T30840] exc_invalid_op+0x1a/0x50 [ 598.991681][T30840] asm_exc_invalid_op+0x1a/0x20 [ 598.997140][T30840] RIP: 0010:__lock_acquire+0x3a4/0x2cf0 [ 599.002696][T30840] Code: 18 00 4c 8b 74 24 08 75 27 90 e8 17 f2 fc 02 85 c0 74 1c 83 3d 50 e0 4e 0e 00 75 13 48 8d 3d 43 f7 51 0e 48 c7 c6 c1 3a de 8d <67> 48 0f b9 3a 90 31 c0 0f b6 98 c4 00 00 00 41 8b 45 20 25 ff 1f [ 599.022302][T30840] RSP: 0018:ffffc9000fc3f680 EFLAGS: 00010046 [ 599.028463][T30840] RAX: 0000000000000001 RBX: 0000000000040000 RCX: 0000000000080000 [ 599.036437][T30840] RDX: ffffc900044c1000 RSI: ffffffff8dde3ac1 RDI: ffffffff8ff24ca0 [ 599.044447][T30840] RBP: 0000000000000003 R08: ffffffff8fef35a3 R09: 1ffffffff1fde6b4 [ 599.052423][T30840] R10: dffffc0000000000 R11: fffffbfff1fde6b5 R12: 0000000000001071 [ 599.060409][T30840] R13: ffff88802b242a28 R14: ffff88802b241e80 R15: ffff88802b2429b0 [ 599.068425][T30840] ? touch_wq_lockdep_map+0xb5/0x180 [ 599.073736][T30840] lock_acquire+0x106/0x330 [ 599.078255][T30840] ? touch_wq_lockdep_map+0xb5/0x180 [ 599.083553][T30840] ? touch_wq_lockdep_map+0xb5/0x180 [ 599.088839][T30840] touch_wq_lockdep_map+0xcb/0x180 [ 599.093960][T30840] ? touch_wq_lockdep_map+0xb5/0x180 [ 599.099245][T30840] __flush_workqueue+0x14b/0x14f0 [ 599.104282][T30840] ? nci_close_device+0x10a/0x630 [ 599.109315][T30840] ? __pfx___flush_workqueue+0x10/0x10 [ 599.114801][T30840] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 599.120656][T30840] nci_close_device+0x302/0x630 [ 599.125533][T30840] ? __pfx_nci_close_device+0x10/0x10 [ 599.130917][T30840] ? do_raw_spin_lock+0x12b/0x2f0 [ 599.135948][T30840] ? __pfx_nci_dev_down+0x10/0x10 [ 599.140987][T30840] nci_dev_down+0x3b/0x50 [ 599.145445][T30840] nfc_dev_down+0x152/0x290 [ 599.149974][T30840] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 599.155719][T30840] nfc_rfkill_set_block+0x2d/0x100 [ 599.160846][T30840] rfkill_set_block+0x1d2/0x440 [ 599.165708][T30840] rfkill_fop_write+0x461/0x5a0 [ 599.170569][T30840] ? apparmor_file_permission+0x17f/0x1f0 [ 599.176291][T30840] ? __pfx_rfkill_fop_write+0x10/0x10 [ 599.181669][T30840] ? security_kernfs_init_security+0x220/0x270 [ 599.187826][T30840] ? rw_verify_area+0x255/0x4d0 [ 599.192685][T30840] ? __pfx_rfkill_fop_write+0x10/0x10 [ 599.198068][T30840] vfs_write+0x29a/0xb90 [ 599.202324][T30840] ? __pfx_vfs_write+0x10/0x10 [ 599.207107][T30840] ? __fget_files+0x2a/0x420 [ 599.211712][T30840] ? __fget_files+0x2a/0x420 [ 599.216306][T30840] ? __fget_files+0x3a0/0x420 [ 599.220987][T30840] ? __fget_files+0x2a/0x420 [ 599.225582][T30840] ksys_write+0x150/0x270 [ 599.230010][T30840] ? __pfx_ksys_write+0x10/0x10 [ 599.234881][T30840] do_syscall_64+0xe2/0xf80 [ 599.239423][T30840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.245520][T30840] ? trace_irq_disable+0x37/0x100 [ 599.250722][T30840] ? clear_bhb_loop+0x60/0xb0 [ 599.255404][T30840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.261322][T30840] RIP: 0033:0x7fcc1639aeb9 [ 599.265749][T30840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.285364][T30840] RSP: 002b:00007fcc171d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 599.293791][T30840] RAX: ffffffffffffffda RBX: 00007fcc16615fa0 RCX: 00007fcc1639aeb9 [ 599.301781][T30840] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000005 [ 599.309756][T30840] RBP: 00007fcc16408c1f R08: 0000000000000000 R09: 0000000000000000 [ 599.317731][T30840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.325707][T30840] R13: 00007fcc16616038 R14: 00007fcc16615fa0 R15: 00007ffde956a0d8 [ 599.333714][T30840] [ 599.336893][T30840] Kernel Offset: disabled [ 599.341211][T30840] Rebooting in 86400 seconds..