last executing test programs: 10.732117026s ago: executing program 0 (id=4184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 10.635350595s ago: executing program 0 (id=4189): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r2}, 0xc) 10.38734086s ago: executing program 0 (id=4198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000880)="f2", &(0x7f0000000000)=""/10, 0x2}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000200850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c1}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x8040) 10.126433257s ago: executing program 0 (id=4203): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700), 0x9, r0}, 0x38) 10.00864076s ago: executing program 4 (id=4205): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110c230000) close(r2) 9.91052703s ago: executing program 0 (id=4208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) unshare(0x22020600) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x10, 0xffffffffffffffff, 0x1275c000) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xfff2}, {}, {0xfff2}}, [@filter_kind_options=@f_basic={{0xa}, {0x54, 0x2, [@TCA_BASIC_ACT={0x50, 0x3, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0xffff, 0x6, 0x2, 0x6}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}, @TCA_RATE={0x6}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffff00, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x2, 0x0, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0xfffffbd1, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) 9.590858822s ago: executing program 4 (id=4211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r2, &(0x7f0000000200)=[{{&(0x7f00000084c0)=@phonet={0x23, 0xd, 0x8, 0x8}, 0xfffffffffffffc69, 0x0}}], 0x1, 0x804) unshare(0x20000400) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2], 0x114}], 0x1, 0x0, 0x0, 0x40004}, 0x4044004) recvmmsg(r3, &(0x7f0000004600)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r4, 0x2f, 0x40, 0x19, 0x6, 0x0, @empty, @loopback, 0x8, 0x1, 0x3, 0x9}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@deltaction={0x160, 0x31, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5e}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffb}}]}, @TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x800}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}, @TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x50, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff9}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}]}, 0x160}}, 0x0) 8.766054733s ago: executing program 1 (id=4213): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b7050000000b00006110200000000000d40500002000000095000000000000009abb1723bf2c203831c9545b21c751ee4024f479cbe4b89f9807836ea5847c95ffc926c2e182c7a3221481f5009edaf5f542a7dbfbcdcea76ee541e318cbe84cd4f5381f522e258a4d9aeb9b16feb66bf40fdf73be95633dc5de907f2ffdcc18494f09c327abd3a76fee11357181f05f7ac06d6a9078df8bc21f00cd8ac4109850ce4aa147beacafecd5c7ccdeecb146ca1e7611f8b3adb41b39029c1b9b59fbf1b4a80167ca6b113a1600000000000000000000cdb7fe6d684423596ee2bdad7787936c24c84d4721327a695ed24946de35ff5e000091e0610ac2d72b9b6f453f98e7b5a25941905bd564aac36dbe7d0000000000000000e79fb80b6949d626024b5fb96e3da0d7113b1c826f49a2cbc18001d315aaf280a8a762689f8c6fee958836002f48815ad19ee99d81c9e3cda430cef4a75e5c4dd14c3cbb6af58e3f3b3f8cbd858532b02995d79ca5dac0fd49aa150f6e212e3f46e4f37f372ee43f136e4d3af6cc4a0ce2379cc1010d8483b82e54feeefa1e89d6a3b74fbb4b619c43984223674b40fbe29ea5752c76a5e6a44d95382a9e04f9a51881aedb6d6242d0fe2e7dcf1f8b22f46c37fb010f8e86c62a4c72327c7eaaf720aff72529429aed45219cb1b6476e53b650927d193b4062c4640de2781643edc5e59280c59332e92b52675a02009db11b3829d8424fdf33ccdb7f89bfa14f9c2a17f9183cb48222e685f49340891845efdac175d90c116eaa013315165865f9a3785e21b41fd4b5eda7eb5a7462307fe72a3fe53eb02c75867e6eeebfc3037683f66d407fc28c4735a221bb5b78a6f966474a984757b8e81ab14d29bad2b19aa5aff53ee333009688b401064898f58f88226f0e675cc74f0adaf4b97315e12e88b5eabd519e523a7f0e839fe91774f85a65068de244a78687c12e4e6dffb556c8d30b8ee73faaac455701569da7ae1a4e44fdd2cf28965a9f5e09acf476e07e5ea768c558a5622601742b27b91724dde6a0f96d3e53e67db57bbd0d3f2dd8439192dfc71f9e5f289c7f519e8b794fb09b64fb3c1bcd46731051de09510ebd717eb57655d447753fd2ff052a9d6889ddb5a5f68564bd00a5ff58a75805eadb00000000000000006a9af2471aada1ad164502199e0a668ad4daa53e5658f82733b3c7f36fcf3146adf7025dfd79c5a67c27395f5ca5a90d45402e58b42946b5a977a56385f31083a4b65d61ec4991cd6c91a02bd788825a0000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xcc, &(0x7f0000000900)=""/204, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000006"], 0x48) r3 = socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x3, 0x8000000003c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000100)=@req={0x1, 0xbe, 0x7, 0x5}, 0x10) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) writev(r4, &(0x7f0000002600), 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(twofish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000180)="4cd19fd9d99657a41989546665d4fee7aba40b61e19e", 0x16, 0x40008895, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="11000099007cc8e40170108097110e21fe44bd8883dabacbdeac4c776691c06ca5914b329fe4ede9a45674007b613f6ef87b5754330ce36a401f34974bd8137f2e721e01fe037b99b28a78573ec259bdbfe327e30a43cdabe2c0f96ce0e674218d979e2cd5f705404f23c61a1ca87c4ddcc163e00d75748e513d37ab8a4cdaceb5758c8361d7929caf8f768a36b75651a66697cd0df21cbae8024d693e6329dfc4990b66e3bc2c753a8b06cb4a148aac3da909690d033e4d3a20c190e060f7ce4c833f2d650e851724674a340e1a4e99c0ca20aa9e778300"/228, @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(r7, 0x0, 0x0, 0x0) ioctl$FITHAW(r4, 0xc0045878) unshare(0x22020600) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0xfffe, @local}, 0x10) 8.584463048s ago: executing program 4 (id=4215): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xe6, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaa0c0000000000000800450000d800000000fd119078000000000000000000004e2000c49078cb1b5dc360532b74fc3f6f1ae661a79b20f7f7078bc7b51cbff1623f3f4846dad2e9e33e0c16d354c2a9fbc29d26eaeb69d3047d097cf246b98abffa23f910f5bdf4529abba4bff40b867c8c1615108032d37013d35176ff1addb8654193eea9b99f873fc4c7a8979cf9a411b8df025ee82597cbcecd011464792db802caa073760c9ab22e91125b28229c0e82a20acb24ae9d3477f6a2504358c77d842f94fb32e3aeb379912333a6e800"/230], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x30000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x9cdc2384056b48b8) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x6bb}], 0x1, 0x40000103, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xd6c1, 0x8, 0x4}, 0x0, &(0x7f0000000140)={0x3ff, 0xffffffffffffdffd, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000080)={0x0, 'veth1_macvtap\x00', {}, 0x7365}) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r5, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0xb}, 0x101}], 0x1, 0x10022, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0000873f001719a358208dd5946f677e1ba2ec9dd5a78672175085aaa0342d5db2ef451820b3fa84a4e88fc77b0baaaa9e3f78e842323fba9771980f47d3d9f9c482617a8855419f001cc151db17610e52d142fc679e1f942b6f0bc1ed377cfb19b7cf66218282e377f7ed6d2c2a7c7f00153ef880fb69189f390996b3032b656c6e988eb91c4626e920c4dc79b6ce7c1d53ceeef744", @ANYRES16=r4, @ANYBLOB="00002dbd7000fedbdf253e0000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000"], 0x58}, 0x1, 0x0, 0x0, 0x20001050}, 0x4008880) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x4}, 0x10) 8.56188987s ago: executing program 1 (id=4217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x40c0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 8.295731699s ago: executing program 2 (id=4220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000001680), r0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000000)=""/218, &(0x7f0000000100)=0xda) r2 = socket(0xc610427473df87a6, 0x4, 0x4) setsockopt$inet_group_source_req(r2, 0x0, 0x2f, &(0x7f0000000140)={0x4d1d, {{0x2, 0x4e20, @loopback}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000016c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf250500000008000300", @ANYRES32=r3, @ANYBLOB="080006009acdfd91b148e1293eb23d60b94886df66db7d14390dd42bbcdede94bcb7cd367c9b7a39929cf47fb3f6c9488f9dbbfce1190e0ffcdb32d7b14291265c4d9d85d8808519c3817d27aa29641ddc6aa77a36b037a6e7a974e4460b8a788d9df115651bc8094dbe608c20efa78a9b2a870c", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x40) 8.077224244s ago: executing program 2 (id=4223): socketpair(0x1, 0x100000005, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) 7.874656041s ago: executing program 2 (id=4225): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x4, 0x7, 0x0, 0x1}, 0x50) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff80"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001e00110225bd7000ffdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="000014"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async, rerun: 64) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r5}, 0xc) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff, 0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x4, 0x5}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x6}}]}}]}, 0x3c}}, 0x0) 6.860444896s ago: executing program 2 (id=4228): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408d1}, 0x40800) 6.576466622s ago: executing program 2 (id=4229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffdffd, 0x0, 0x0, 0x0, 0x800}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x4a, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r4, 0x800454e1, &(0x7f0000000380)=r3) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[], 0xffdd) 6.57583669s ago: executing program 3 (id=4230): r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001380)={&(0x7f0000001100)={0xa, 0x6, 0xd0, @loopback, 0x9}, 0x1c, &(0x7f00000010c0)=[{&(0x7f0000000040)="671723d7c6012c", 0x7}, {&(0x7f0000000640)="00000000009bc4d2e531d1169e679eac49783746928a6b10f58fad52f401f436672b", 0x22}, {&(0x7f0000001180)="73d48ebc2bf9", 0x6}], 0x3}, 0x0) 6.396773645s ago: executing program 3 (id=4231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xfc}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) 6.150465476s ago: executing program 3 (id=4232): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x6}]}]}, 0x28}}, 0x4090) 5.946826827s ago: executing program 3 (id=4233): r0 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x40400) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f00000000c0)=0x1380000) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x7c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x100, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4c, 0x2, [@TCA_GRED_MAX_P={0xfffc, 0x4, 0x4cc1}, @TCA_GRED_LIMIT={0x8, 0x5, 0x4}, @TCA_GRED_PARMS={0x38, 0x1, {0x6b5, 0x4, 0x3ff, 0x2, 0x6, 0xfffffca7, 0x8001, 0x9, 0x4, 0x4, 0xf, 0xe, 0x4, 0x99, 0x4, 0x5e}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 5.496296485s ago: executing program 3 (id=4234): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x6, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @random="790c7edd3d8d"}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@ifindex=r1, 0xb, 0x0, 0xffffffff, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0]}, 0x40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x301400, 0x0) write$tun(r4, &(0x7f0000000500)={@val={0x0, 0x8917}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x38}, @link_local, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @local, @empty}}}}}, 0x46) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r5, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r6}, 0x4) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000003c0)=0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={0xffffffffffffffff, r1, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x3], 0x6, 0x0, 0x0, r7}}, 0x40) 4.680633071s ago: executing program 1 (id=4235): socketpair(0x1, 0x100000005, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7005}, 0x4) 4.485246027s ago: executing program 1 (id=4236): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000014e24007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x60000000}, 0xc) 4.34259899s ago: executing program 1 (id=4237): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r2) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff00000000080007003a3a0908140002"], 0x44}, 0x1, 0x1000000}, 0x4008050) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000008c0)={{r0, &(0x7f00000002c0)='\x00', 0x80000, &(0x7f0000000340)={@align=0x6, {0x93, 0x1, 0x6, 0x631}}, 0xffffffff, &(0x7f0000000380), &(0x7f00000003c0)}, 0x5, &(0x7f0000000800)=[{0x1, 0x5, &(0x7f0000000400)='NLBL_UNLBL\x00', &(0x7f0000000440)="d5832630bc8f2ba516e65ba505285956240a95530d1c6ff5ad66f6d5c2de34ac75e36deac6851fbea1c7336c7b006bee7dc8ad81dcb2dfce454145ce5adb2a8569ad6ce470e009b10e6c1f9f8cee8233ccf1aaca128e6b6dd187701b78bba961cd8869b24e107a8c7f9530bd8947283218f859e56359ab41", 0x78}, {0x3, 0x1, &(0x7f00000004c0)=',{\x00', &(0x7f0000000500), 0x0, 0x12}, {0x1, 0x6, &(0x7f0000000540)='$#:.!\x00', &(0x7f0000000580)="109224cef7463e7264f92ded601243fb011288b250243f38755ee8d16f26ee4ea3cfb848d7b45784e688637a5e1fcab9035714ef7735fa8fd76d1c8847f5570a6ef4fccf756f90e09c8450bcc324ac7451864f59f7f80083556afd9887492beca9b1dc4b10d91c294f3e98a8e81f3ba8a5ca2f4a2557905aaea01620871e2b3d8306b856ce33d0e355e1e95759cf28650d389587e45eba06245e69dbce3cecd0c2451cf0a3cf8902623fff1198b569759c35f19e72b44f068abd6f63256f6588ab3d6ec8d9cc97", 0xc7, 0x2a}, {0x1, 0x6b2, &(0x7f0000000680)='NLBL_UNLBL\x00', &(0x7f00000006c0)="4652cb992dbd4b4acdf7e6d2b7c90e70c03ef1b8fdaafd99fab5cc205875ce68d446ad16abb1c1d0946cddb5eb0c9111feb18b3f10", 0x35, 0xa}, {0x3, 0xd0da, &(0x7f0000000700)='$#:.!\x00', &(0x7f0000000740)="cb3e3139b8f73c301944c428fb115e5f13c4415d0952101249e3d9e2080b2f6b1e4227941c35f206561375c2cfb064be9dbbdcb3568d6e9cc68ba0233c14c605d29dc361c33ace00cf3338024bca9884d52b168a9db8a3bb48fa93b867dee3bbbbb8a1ede5ab3a44c580d3644527e750b144b1ebf9f70fa5f5e75a939e2111195e8838396ec42c84a3d0a06fd07729051b4ab67f", 0x94, 0x38}]}) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000980)=@generic={&(0x7f0000000940)='./file0\x00', 0x0, 0x8}, 0x18) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6d, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000ac0), &(0x7f0000000b00)}, 0x20) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0x19, &(0x7f0000000d00)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @generic={0x4, 0x5, 0x4, 0xe4}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x78a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000e00)='syzkaller\x00', 0x8001, 0xb5, &(0x7f0000000e40)=""/181, 0x41000, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000f00)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000f40)={0x5, 0x8, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000f80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x7fffffff}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r11, &(0x7f0000000000), 0xffffff6a) r12 = socket$can_j1939(0x1d, 0x2, 0x7) r13 = socket$inet_tcp(0x2, 0x1, 0x0) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r14, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r14, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r15 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r15, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r15, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r15, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) bind$inet(r13, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendfile(r12, r11, 0x0, 0x2) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000010c0)={0xffffffffffffffff, 0x2, 0x38}, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001180)=@bpf_tracing={0x1a, 0x17, &(0x7f0000000b80)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x7, 0x1, 0x8, 0x3, 0x0, 0x6, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @map_val={0x18, 0x8, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}], &(0x7f0000000c40)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c80)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000cc0)={0x4, 0x7, 0x3, 0x7}, 0x10, 0x2d4bb, r9, 0x2, &(0x7f0000001100)=[r10, r16], &(0x7f0000001140)=[{0x1, 0x5, 0xc, 0x9}, {0x0, 0x3, 0xa, 0xc}]}, 0x94) r17 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r17, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r17, &(0x7f0000000380)={0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x200}, 0x1c) 3.37211466s ago: executing program 4 (id=4238): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c000480050003020200000005000300020000000500030080ff00000500030002000000050003000200000008000100ffffffff0800020002"], 0x50}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r5 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000980)={{{@in=@empty, @in6=@remote, 0x4e1f, 0x0, 0xfffc, 0x3, 0x2}, {0x10000, 0x200000004, 0x40000000009, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x6c}, 0x2, @in=@loopback, 0x34fe, 0x1, 0x0, 0x0, 0x1, 0x6}}, 0xe8) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), r1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000010000002c000480050003020200000005000300020000000500030080ff00000500030002000000050003000200000008000100ffffffff0800020002"], 0x50}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) (async) socket$inet6(0xa, 0x3, 0x88) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000980)={{{@in=@empty, @in6=@remote, 0x4e1f, 0x0, 0xfffc, 0x3, 0x2}, {0x10000, 0x200000004, 0x40000000009, 0x6811221d, 0x100000000, 0x4, 0x200000003, 0x9}, {0x5, 0xfffffffffffffffd, 0x7}, 0x1, 0x0, 0x1, 0x0, 0x6}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3f}, 0x0, 0x6c}, 0x2, @in=@loopback, 0x34fe, 0x1, 0x0, 0x0, 0x1, 0x6}}, 0xe8) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) (async) 3.36988935s ago: executing program 1 (id=4239): unshare(0xa020480) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socket(0xf, 0x3, 0x0) (async) socket(0xf, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) sendmmsg$inet(r2, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, 0x0, 0x4104) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001a00010a0000000000e80cc997764a00"], 0x14}}, 0x0) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1c00000e01000b00000014"], 0x36) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000000c0)={'batadv0\x00', @broadcast}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(des3_ede)\x00'}, 0x58) bind$alg(r5, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) socket$l2tp(0x2, 0x2, 0x73) 3.184955448s ago: executing program 4 (id=4240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) pipe(0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) read$alg(r4, &(0x7f0000000100)=""/12, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x4) sendto$inet(r1, &(0x7f0000000080)="81ef", 0x2, 0x0, 0x0, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4) sendmsg$kcm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) ioctl$sock_ifreq(r1, 0x89a3, &(0x7f0000000200)={'xfrm0\x00', @ifru_settings={0x3, 0x100, @fr_pvc_info=0x0}}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000c0000000000000000000800850000005300000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff85000000730000009500"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="000000000100000000001a000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFULNL_MSG_CONFIG(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="0e0000010405000000000000000000030000000000034000110001"], 0xb}}, 0x2004004) 3.038810393s ago: executing program 0 (id=4241): r0 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000180)=0x4c, 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_NAME_TABLE_GET(r1, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x234, r2, 0x600, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x821}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x78}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfea}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffc}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0xdc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "549c25b4347b870bc34a6bece68dfa66e9fdde0cf4d3780abbfb5214202751cd35640949"}}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x71, 0x3, "e4324cfbcb0e7798c761743e678daec0c130f3c31be79aa4fb020b4e085aa34ee41a623f62ed72849e52e8d8db429f4241a3f4f6cc0acc8eabf6a7fa29cb8cf0afd38108209ce136729db43fd75c2ed1346147c9d8e0af66ffe3c0662b2b80c4cf177624e896ed4fa04020245d"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbce7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}]}, 0x234}, 0x1, 0x0, 0x0, 0x40054}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x8, 0x5, 0x81, 0x2}]}, 0x10) unshare(0x20000400) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) r5 = socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x1d, 0x80802, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r6) setsockopt$sock_int(r5, 0x1, 0x3, &(0x7f0000000040)=0xe5, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x1, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x4}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{{0x4, 0x0, 0x1, 0x1}}, {{0x3}, {0x1, 0x1, 0x1}}, {{}, {0x2, 0x1, 0x1}}], 0x18) 88.996083ms ago: executing program 2 (id=4242): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 590.404µs ago: executing program 3 (id=4243): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x6}]}]}, 0x28}}, 0x4090) 0s ago: executing program 4 (id=4244): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000040000000400000002000000000000", @ANYBLOB='\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 0s ago: executing program 2 (id=4245): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x6, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) kernel console output (not intermixed with test programs): 15981] syzkaller0: entered promiscuous mode [ 363.768562][T15981] syzkaller0: entered allmulticast mode [ 363.808292][T15981] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2501'. [ 363.841854][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 363.849757][ T6133] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.955191][T15988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2503'. [ 364.067368][T15989] bridge9: port 1(gretap3) entered blocking state [ 364.083807][T15989] bridge9: port 1(gretap3) entered disabled state [ 364.102898][T15989] gretap3: entered allmulticast mode [ 364.120814][T15989] gretap3: entered promiscuous mode [ 364.488391][ T6622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.705908][ T6132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.723200][ T6132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.768658][T16000] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.808633][T16002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.882916][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 365.095558][T16018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2512'. [ 365.165909][T16025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2514'. [ 365.521655][ T6625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.564037][T16039] netlink: 'syz.4.2518': attribute type 46 has an invalid length. [ 365.581980][T16039] netlink: 'syz.4.2518': attribute type 46 has an invalid length. [ 365.921468][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 365.924803][T16050] netlink: 'syz.4.2522': attribute type 10 has an invalid length. [ 366.092898][T16057] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.256740][T16064] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2526'. [ 366.374771][T16074] netlink: 'syz.0.2527': attribute type 39 has an invalid length. [ 366.389392][T16076] x_tables: duplicate entry at hook 2 [ 366.506842][T16087] netlink: 'syz.1.2531': attribute type 32 has an invalid length. [ 366.562323][ T6622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.613251][T16068] syzkaller0: entered promiscuous mode [ 366.630645][T16068] syzkaller0: entered allmulticast mode [ 366.738028][T16089] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 366.773919][T16096] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2532'. [ 366.788060][T16096] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2532'. [ 366.950235][T16102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2535'. [ 369.017020][T16110] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 369.041047][ C0] net_ratelimit: 8 callbacks suppressed [ 369.041066][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 369.061107][T16110] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 369.089423][T16110] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 369.123022][ T6625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.270013][T16129] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2538'. [ 369.301986][T16130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.328480][T16130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.337450][T16130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.353751][T16123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.378528][T16123] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.387298][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.414394][T16122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.558142][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2541'. [ 369.578373][T16134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2541'. [ 369.590089][T16134] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20002 [ 369.612571][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.665486][T16139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.672845][T16139] IPv6: NLM_F_CREATE should be set when creating new route [ 369.680136][T16139] IPv6: NLM_F_CREATE should be set when creating new route [ 369.687443][T16139] IPv6: NLM_F_CREATE should be set when creating new route [ 369.703263][T16139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.720733][T16141] netlink: 'syz.2.2543': attribute type 1 has an invalid length. [ 369.810916][T16146] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2544'. [ 370.414656][T16114] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 371.940686][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2560'. [ 371.966739][T16233] batadv_slave_1: entered promiscuous mode [ 372.404112][T16211] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 372.417939][T16228] batadv_slave_1: left promiscuous mode [ 372.679766][T16252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2565'. [ 373.704105][T16307] veth0: entered promiscuous mode [ 373.721694][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2580'. [ 373.808933][T16315] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2582'. [ 373.813088][T16307] veth0: left promiscuous mode [ 373.917692][T16323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2584'. [ 373.933627][T16328] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2585'. [ 374.096210][T16339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2584'. [ 374.137395][T16323] 8021q: adding VLAN 0 to HW filter on device bond8 [ 374.232664][T16351] netlink: 'syz.0.2588': attribute type 4 has an invalid length. [ 374.243231][ C0] net_ratelimit: 10 callbacks suppressed [ 374.243249][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 374.263261][T16351] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2588'. [ 374.288076][T16336] 8021q: adding VLAN 0 to HW filter on device bond9 [ 374.329686][T16336] bond8: (slave bond9): Enslaving as an active interface with an up link [ 374.364973][T16339] bond8 (unregistering): (slave bond9): Releasing backup interface [ 374.380696][T16339] bond8 (unregistering): Released all slaves [ 374.403987][T16351] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 374.501841][T16362] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2589'. [ 374.600551][T16369] nbd: nbd0 already in use [ 374.650171][T16371] tap0: tun_chr_ioctl cmd 1074025676 [ 374.661286][T16371] tap0: owner set to 0 [ 374.713759][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2594'. [ 374.803456][ T6138] wlan1: Trigger new scan to find an IBSS to join [ 375.291148][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 376.021926][T16460] sit0: Caught tx_queue_len zero misconfig [ 376.331705][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 376.547663][T16490] smc: net device hsr0 applied user defined pnetid SYZ2 [ 376.972276][T16493] netlink: 'syz.0.2624': attribute type 4 has an invalid length. [ 376.980155][T16493] __nla_validate_parse: 7 callbacks suppressed [ 376.980170][T16493] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2624'. [ 377.199340][T16507] sctp: [Deprecated]: syz.0.2629 (pid 16507) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.199340][T16507] Use struct sctp_sack_info instead [ 377.244211][T16507] sctp: [Deprecated]: syz.0.2629 (pid 16507) Use of struct sctp_assoc_value in delayed_ack socket option. [ 377.244211][T16507] Use struct sctp_sack_info instead [ 377.361062][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 377.613880][T16531] netlink: 'syz.3.2637': attribute type 30 has an invalid length. [ 377.672614][T16540] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2638'. [ 377.842128][ T6138] wlan1: Trigger new scan to find an IBSS to join [ 378.082357][T16564] bridge0: port 5(syz_tun) entered blocking state [ 378.092403][T16565] netlink: 'syz.0.2647': attribute type 1 has an invalid length. [ 378.100761][T16564] bridge0: port 5(syz_tun) entered disabled state [ 378.108466][T16564] syz_tun: entered allmulticast mode [ 378.119229][T16564] syz_tun: entered promiscuous mode [ 378.155301][T16567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2647'. [ 378.170497][T16565] bond11: entered promiscuous mode [ 378.177035][T16565] 8021q: adding VLAN 0 to HW filter on device bond11 [ 378.304837][T16567] bond11: entered allmulticast mode [ 378.355365][T16567] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2647'. [ 378.401642][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 378.568562][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.582546][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.765735][T16595] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2654'. [ 378.793615][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.905185][T16599] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2656'. [ 378.979218][T16599] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2656'. [ 379.424582][T16621] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 379.432190][T16621] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 379.441281][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 379.606215][T16624] bond16: up delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 379.615858][T16624] bond16: down delay (128) is not a multiple of miimon (100), value rounded to 100 ms [ 379.651273][T16627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2664'. [ 379.873737][T16632] netlink: 'syz.4.2665': attribute type 1 has an invalid length. [ 379.955425][T16632] bond9: entered promiscuous mode [ 379.971422][T16632] 8021q: adding VLAN 0 to HW filter on device bond9 [ 380.117749][T16641] netlink: 'syz.3.2667': attribute type 10 has an invalid length. [ 380.195136][T16641] `: Failed to send options change via netlink (err -105) [ 380.202482][T16641] `: Port device dummy0 added [ 380.481636][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 380.881219][ T14] wlan1: Trigger new scan to find an IBSS to join [ 381.521062][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 381.761594][ T6144] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 382.198681][T16612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.471942][T16666] netlink: 'syz.2.2670': attribute type 13 has an invalid length. [ 382.484646][T16666] netlink: 'syz.2.2670': attribute type 17 has an invalid length. [ 382.561507][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 382.686156][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2670'. [ 382.804755][T16660] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.059916][T16660] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.112116][T16660] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.448897][T16666] gretap0: left promiscuous mode [ 383.457623][T16666] gretap0: left allmulticast mode [ 383.534981][T16666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.544940][T16666] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.565289][T16666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.588938][ T6132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.599311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.611158][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 383.613936][ T6137] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.627418][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.641644][ T6136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.658386][T16666] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.665695][T16666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.702737][T16666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.716188][T16666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.769992][T16666] veth1_macvtap: left promiscuous mode [ 383.782064][T16666] veth0_macvtap: left promiscuous mode [ 383.790233][T16666] veth0_macvtap: entered promiscuous mode [ 383.810533][T16666] veth1_macvtap: entered promiscuous mode [ 383.839370][T16666] 8021q: adding VLAN 0 to HW filter on device eth0 [ 383.844978][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'. [ 383.855662][T16690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'. [ 383.871914][T16666] 8021q: adding VLAN 0 to HW filter on device eth1 [ 383.886550][T16666] 8021q: adding VLAN 0 to HW filter on device eth2 [ 383.901743][T16666] 8021q: adding VLAN 0 to HW filter on device eth3 [ 383.915515][T16666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.925976][T16666] 8021q: adding VLAN 0 to HW filter on device bond2 [ 383.936338][T16666] bond3: left promiscuous mode [ 383.942478][T16666] 8021q: adding VLAN 0 to HW filter on device bond3 [ 383.956694][T16666] ipvlan0: left promiscuous mode [ 383.968198][T16666] bridge5: left promiscuous mode [ 383.973887][T16666] bridge5: left allmulticast mode [ 383.980640][T16666] bridge6: left promiscuous mode [ 383.986493][T16666] bridge6: left allmulticast mode [ 383.994798][T16666] bond4: left promiscuous mode [ 384.000442][T16666] 8021q: adding VLAN 0 to HW filter on device bond4 [ 384.029032][T16666] bond5: left promiscuous mode [ 384.034116][T16666] veth0_to_bond: left promiscuous mode [ 384.039862][T16666] bond5: left allmulticast mode [ 384.045437][T16666] veth0_to_bond: left allmulticast mode [ 384.053409][T16666] 8021q: adding VLAN 0 to HW filter on device bond5 [ 384.065379][T16666] 8021q: adding VLAN 0 to HW filter on device bond6 [ 384.077272][T16666] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 384.093204][T16666] veth0_to_team: entered promiscuous mode [ 384.102750][T16666] ip6gre1: left promiscuous mode [ 384.107710][T16666] ip6gre1: left allmulticast mode [ 384.114542][T16666] bond7: left promiscuous mode [ 384.119733][T16666] 8021q: adding VLAN 0 to HW filter on device bond7 [ 384.135912][T16666] batadv1: left promiscuous mode [ 384.140899][T16666] batadv1: left allmulticast mode [ 384.148108][T16666] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 384.158634][T16666] 8021q: adding VLAN 0 to HW filter on device bond8 [ 384.283903][T16690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'. [ 384.294174][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2675'. [ 384.309919][ T136] bond2: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 384.322193][ T136] bond2: (slave veth7): making interface the new active one [ 384.333609][ T136] bond2: active interface up! [ 384.388114][ T14] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 384.494957][ T14] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 384.642893][ C0] net_ratelimit: 6 callbacks suppressed [ 384.642913][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 384.679934][T16713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2682'. [ 384.690012][T16714] pim6reg: entered allmulticast mode [ 384.721458][ T5640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.864093][T16718] syzkaller0: entered promiscuous mode [ 384.887284][T16718] syzkaller0: entered allmulticast mode [ 385.182802][T16738] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 385.310147][T16700] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 385.474788][T16763] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 385.567527][T16768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2695'. [ 385.663444][T16778] netlink: 'syz.2.2700': attribute type 4 has an invalid length. [ 385.691152][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 385.751214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.753715][T16772] netlink: 'syz.2.2700': attribute type 4 has an invalid length. [ 385.768845][ T6629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 385.883485][T16781] nbd: nbd1 already in use [ 385.897027][T16781] block nbd1: NBD_DISCONNECT [ 385.907136][T16781] block nbd1: Send disconnect failed -32 [ 385.919248][T16781] block nbd1: shutting down sockets [ 385.945298][T16784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2702'. [ 386.055917][T16792] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2704'. [ 386.427645][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2713'. [ 386.476245][T16823] IPVS: set_ctl: invalid protocol: 253 100.1.1.0:20003 [ 386.503900][T16825] x_tables: duplicate underflow at hook 1 [ 386.523534][T16823] x_tables: duplicate underflow at hook 1 [ 386.721534][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 386.801393][ T6629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.056327][T16846] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 387.129753][T16843] syzkaller0: entered promiscuous mode [ 387.142110][T16843] syzkaller0: entered allmulticast mode [ 387.374671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.475554][T16864] xt_ecn: cannot match TCP bits for non-tcp packets [ 387.771053][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 388.487663][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 388.562443][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 389.335647][T16882] netlink: 'syz.2.2726': attribute type 1 has an invalid length. [ 389.387058][T16882] __nla_validate_parse: 3 callbacks suppressed [ 389.387078][T16882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2726'. [ 389.474680][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2730'. [ 389.491192][T16892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2730'. [ 389.505817][T16894] netlink: 'syz.2.2726': attribute type 1 has an invalid length. [ 389.753790][T16908] vlan0: entered promiscuous mode [ 389.841252][ C0] net_ratelimit: 8 callbacks suppressed [ 389.841271][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 389.843237][ T6629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.883447][T16916] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2737'. [ 390.024869][T16930] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2741'. [ 390.194335][T16941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2746'. [ 390.212599][T16941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2746'. [ 390.226875][T16939] syzkaller1: entered promiscuous mode [ 390.236299][T16939] syzkaller1: entered allmulticast mode [ 390.402272][T16951] netlink: 'syz.4.2748': attribute type 1 has an invalid length. [ 390.413767][T16951] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2748'. [ 390.432985][T16951] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2748'. [ 390.454956][T16951] netlink: 658 bytes leftover after parsing attributes in process `syz.4.2748'. [ 390.854778][T16973] netlink: 'syz.0.2754': attribute type 4 has an invalid length. [ 390.881355][ T6629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.891766][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 391.069411][T16983] gtp1: entered promiscuous mode [ 391.075289][T16983] gtp1: entered allmulticast mode [ 391.107792][T16986] macvtap1: entered promiscuous mode [ 391.125830][T16986] erspan0: entered promiscuous mode [ 391.141777][T16986] macvtap1: entered allmulticast mode [ 391.152591][T16986] erspan0: entered allmulticast mode [ 391.398715][T17006] syzkaller1: entered promiscuous mode [ 391.412981][T17006] syzkaller1: entered allmulticast mode [ 391.454753][T17006] netlink: 'syz.3.2765': attribute type 1 has an invalid length. [ 391.492265][T17011] xt_CT: No such helper "snmp" [ 391.528984][T17009] block nbd1: server does not support multiple connections per device. [ 391.550026][T17009] block nbd1: shutting down sockets [ 391.921282][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 391.922430][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.118378][T17055] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.128820][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.477773][T17067] netlink: 'syz.4.2779': attribute type 20 has an invalid length. [ 392.497914][T17067] netlink: 'syz.4.2779': attribute type 21 has an invalid length. [ 392.963251][ T5364] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.972015][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 393.296057][T17102] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.330709][T17110] netlink: 'syz.0.2790': attribute type 1 has an invalid length. [ 393.420346][T17116] netlink: 'syz.1.2792': attribute type 11 has an invalid length. [ 393.514066][T17116] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 393.528355][T17116] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 393.634401][T17116] bond17: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 393.771479][T17116] bond17 (unregistering): Released all slaves [ 393.783133][T17133] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 394.572885][T17169] __nla_validate_parse: 14 callbacks suppressed [ 394.572908][T17169] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2803'. [ 394.712117][T17170] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.044582][ C0] net_ratelimit: 5 callbacks suppressed [ 395.044597][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 395.057507][ T5640] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.203475][ T6136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.220113][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.528768][T17192] netlink: 'syz.0.2812': attribute type 15 has an invalid length. [ 395.539751][T17192] netlink: 666 bytes leftover after parsing attributes in process `syz.0.2812'. [ 395.550268][T17192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2812'. [ 395.575208][T17192] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2812'. [ 395.595564][T17192] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2812'. [ 395.634095][T17201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.644014][ T5639] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.666759][T17201] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.812666][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 395.854163][T17205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2815'. [ 395.877243][T17212] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2818'. [ 396.070166][T17226] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2822'. [ 396.081196][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 396.081909][ T6629] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.118599][T17229] vlan1: entered promiscuous mode [ 396.131088][T17229] geneve1: entered promiscuous mode [ 396.141832][T17229] vlan1: entered allmulticast mode [ 396.154418][T17229] geneve1: entered allmulticast mode [ 396.209069][T17237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2825'. [ 396.476311][T17249] nbd: must specify a size in bytes for the device [ 396.483570][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 396.691892][T17258] xfrm1: entered allmulticast mode [ 396.859526][T17274] netlink: 'syz.3.2835': attribute type 11 has an invalid length. [ 397.083839][T17279] bond10: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 397.123721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.134725][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 397.152203][T17279] bond10 (unregistering): Released all slaves [ 397.816690][T17313] sctp: [Deprecated]: syz.4.2845 (pid 17313) Use of int in maxseg socket option. [ 397.816690][T17313] Use struct sctp_assoc_value instead [ 398.615874][T17352] netlink: 'syz.2.2858': attribute type 16 has an invalid length. [ 398.906303][T17356] veth15: entered allmulticast mode [ 399.328773][T17377] netlink: 'syz.4.2864': attribute type 1 has an invalid length. [ 399.385950][T17379] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 399.447261][T17377] 8021q: adding VLAN 0 to HW filter on device bond10 [ 399.686178][T17402] __nla_validate_parse: 10 callbacks suppressed [ 399.686199][T17402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2870'. [ 399.904152][T17410] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2870'. [ 400.241035][ C0] net_ratelimit: 7 callbacks suppressed [ 400.241055][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 400.428590][T17408] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 400.499746][T17407] bridge0: port 5(syz_tun) entered blocking state [ 400.506398][T17407] bridge0: port 5(syz_tun) entered forwarding state [ 400.522078][T17407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.532470][T17407] bridge0: port 3(team0) entered blocking state [ 400.538893][T17407] bridge0: port 3(team0) entered forwarding state [ 400.546573][T17407] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.559624][T17407] batadv0: left promiscuous mode [ 400.566882][T17407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.612057][T17407] veth1_to_team: left promiscuous mode [ 400.627582][T17407] veth1_to_team: left allmulticast mode [ 400.656164][T17407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.676314][T17407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.692876][T17407] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 400.703500][T17407] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 400.718770][T17407] veth1_macvtap: left promiscuous mode [ 400.725525][T17407] veth0_macvtap: left promiscuous mode [ 400.733765][T17407] veth0_macvtap: entered promiscuous mode [ 400.740505][T17407] veth1_macvtap: entered promiscuous mode [ 400.749837][T17407] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 400.757466][T17407] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 400.767242][T17407] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 400.776371][T17407] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 400.784858][T17407] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 400.793285][T17407] mac80211_hwsim hwsim7 wlan0: left promiscuous mode [ 400.800060][T17407] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 400.844068][T17407] bond1: left promiscuous mode [ 400.848894][T17407] bridge1: left promiscuous mode [ 400.855406][T17407] 8021q: adding VLAN 0 to HW filter on device bond1 [ 400.866892][T17407] 8021q: adding VLAN 0 to HW filter on device bond2 [ 400.875972][T17407] geneve3: left promiscuous mode [ 400.881162][T17407] geneve3: left allmulticast mode [ 400.886437][T17407] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 400.932747][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.939976][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.974597][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.981842][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.144063][T17424] syzkaller0: entered promiscuous mode [ 401.163592][T17424] syzkaller0: entered allmulticast mode [ 401.282391][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 401.796784][T17464] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2879'. [ 401.823404][T17464] netlink: 560 bytes leftover after parsing attributes in process `syz.3.2879'. [ 401.832964][T17464] netlink: 964 bytes leftover after parsing attributes in process `syz.3.2879'. [ 401.862158][T17464] netlink: 560 bytes leftover after parsing attributes in process `syz.3.2879'. [ 402.326068][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 403.361649][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 403.516166][T17474] netlink: 'syz.0.2881': attribute type 21 has an invalid length. [ 403.591838][T17486] Cannot find set identified by id 0 to match [ 403.608518][T17484] netlink: 'syz.3.2884': attribute type 1 has an invalid length. [ 403.766780][ T29] audit: type=1800 audit(1780167784.935:23): pid=17494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2886" name="blkio.bfq.io_merged_recursive" dev="tmpfs" ino=2834 res=0 errno=0 [ 403.838711][T17495] IPv6: sit1: Disabled Multicast RS [ 403.850877][T17498] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2885'. [ 403.865491][T17499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2887'. [ 403.953876][T17506] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.2889'. [ 404.107849][T17508] veth3: left promiscuous mode [ 404.119836][T17508] ip6gre1: left promiscuous mode [ 404.127675][T17508] bridge3: left promiscuous mode [ 404.148456][T17508] bond13: left promiscuous mode [ 404.154289][T17508] ip6gre2: left promiscuous mode [ 404.178191][T17508] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 404.195218][T17508] ip6gre3: left promiscuous mode [ 404.312159][T17520] can: request_module (can-proto-3) failed. [ 404.401163][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 404.597331][T17535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2895'. [ 404.827661][T17549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2898'. [ 404.840631][T17549] netlink: 'syz.3.2898': attribute type 30 has an invalid length. [ 405.441563][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 406.481228][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 407.521623][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 408.561219][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 409.601725][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 410.651208][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 411.202763][ T6137] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 411.681633][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 412.492406][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 412.721223][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 413.763083][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 414.801311][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 415.041211][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 415.841696][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 416.881267][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 417.921526][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 418.961225][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 420.001663][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 421.041222][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 422.081631][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 423.121191][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 424.161659][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 425.201303][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 426.241510][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 427.281247][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 428.321467][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 429.361288][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 430.401956][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 431.441167][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 432.481692][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 433.531205][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 434.561669][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 434.882105][ T6141] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 435.601211][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 436.641538][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 437.681273][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 438.721629][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 439.761173][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 440.002439][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.012780][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.801608][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 441.841206][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 442.881710][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 443.201166][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 443.209661][ T6138] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 443.921380][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 444.961610][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 446.001230][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 447.042387][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 448.081167][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 449.131635][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 450.161198][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 450.881279][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 451.201687][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 452.241198][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 453.281609][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 454.321236][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 455.361931][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 455.747720][T17570] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2904'. [ 455.887182][T17579] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2906'. [ 456.141214][T17591] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2909'. [ 456.197122][T17595] netlink: 'syz.3.2910': attribute type 15 has an invalid length. [ 456.274105][T17595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2910'. [ 456.401123][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 456.569372][T17608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2914'. [ 456.589168][T17608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2914'. [ 456.613043][T17608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2914'. [ 456.636483][T17608] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2914'. [ 456.716926][T17612] tipc: Enabled bearer , priority 0 [ 456.774833][T17608] syzkaller0: entered promiscuous mode [ 456.794038][T17608] syzkaller0: entered allmulticast mode [ 456.939033][T17617] tipc: Resetting bearer [ 456.984830][T17624] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 457.007901][T17620] vlan0: entered promiscuous mode [ 457.049343][T17626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2917'. [ 457.062013][T17607] tipc: Resetting bearer [ 457.116618][T17633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2917'. [ 457.153208][T17607] tipc: Disabling bearer [ 457.205763][T17624] netlink: 'syz.2.2918': attribute type 62 has an invalid length. [ 457.399986][T17642] x_tables: duplicate underflow at hook 2 [ 457.441546][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 457.611309][T17650] netlink: 'syz.2.2923': attribute type 1 has an invalid length. [ 457.657150][ T5653] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 457.668158][ T5653] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 457.678662][ T5653] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 457.693291][ T5653] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 457.703049][ T5653] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 457.799713][T17650] 8021q: adding VLAN 0 to HW filter on device bond10 [ 457.816538][T17657] nbd: must specify at least one socket [ 458.057619][T17665] netlink: 'syz.0.2924': attribute type 7 has an invalid length. [ 458.109818][T17665] netlink: 'syz.0.2924': attribute type 8 has an invalid length. [ 458.491042][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 458.588919][T17701] netlink: 'syz.0.2931': attribute type 13 has an invalid length. [ 458.995468][ T6136] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.170458][ T5653] Bluetooth: hci4: link tx timeout [ 459.177851][ T5653] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 459.186378][ T5639] Bluetooth: hci4: link tx timeout [ 459.192419][ T5639] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 459.302765][ T6136] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.443169][T17734] netlink: 'syz.1.2938': attribute type 1 has an invalid length. [ 459.461859][T17734] netlink: 'syz.1.2938': attribute type 2 has an invalid length. [ 459.482274][T17734] netlink: 'syz.1.2938': attribute type 1 has an invalid length. [ 459.665942][T17735] macvlan0: entered promiscuous mode [ 459.689170][T17737] macvlan0: entered allmulticast mode [ 459.718232][T17738] macvlan0 (unregistering): left promiscuous mode [ 459.732370][T17738] macvlan0 (unregistering): left allmulticast mode [ 459.786516][ T5639] Bluetooth: hci4: link tx timeout [ 459.792712][ T5639] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 459.834606][ T5639] Bluetooth: hci4: link tx timeout [ 459.839823][ T5639] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 459.851241][ T5639] Bluetooth: hci5: command tx timeout [ 459.903657][ T6136] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 459.989000][T17750] bond17: entered promiscuous mode [ 459.995926][T17750] 8021q: adding VLAN 0 to HW filter on device bond17 [ 460.067579][T17749] bridge10: entered promiscuous mode [ 460.074469][T17749] bond17: (slave bridge10): Enslaving as an active interface with an up link [ 460.106400][T17754] SET target dimension over the limit! [ 460.122221][ T6136] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.208455][T17750] bond17 (unregistering): (slave bridge10): Releasing backup interface [ 460.241524][T17750] bridge10: left promiscuous mode [ 460.243598][ T5639] Bluetooth: hci4: link tx timeout [ 460.252177][ T5639] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 460.266293][T17750] bond17 (unregistering): Released all slaves [ 460.320545][T17767] x_tables: ip_tables: CT target: only valid in raw table, not [ 460.452722][T17761] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 460.494544][ T5639] Bluetooth: hci4: link tx timeout [ 460.499905][ T5639] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 460.663520][T17764] syzkaller0: entered promiscuous mode [ 460.687206][T17764] syzkaller0: entered allmulticast mode [ 460.697727][T17781] ip6tnl0: Caught tx_queue_len zero misconfig [ 460.834844][T17784] __nla_validate_parse: 16 callbacks suppressed [ 460.834866][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2947'. [ 460.920202][T17788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2948'. [ 461.070128][T17796] xt_NFQUEUE: number of total queues is 0 [ 461.282078][ T5653] Bluetooth: hci4: command 0x0406 tx timeout [ 461.547133][ T6136] vlan2: left allmulticast mode [ 461.585694][ T6136] vlan2: left promiscuous mode [ 461.603227][ T6136] bridge0: port 1(vlan2) entered disabled state [ 461.694690][T17830] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2956'. [ 461.715785][ T6136] gretap3: left allmulticast mode [ 461.722214][ T6136] gretap3: left promiscuous mode [ 461.727530][ T6136] bridge9: port 1(gretap3) entered disabled state [ 461.751153][ T6136] dvmrp0: left allmulticast mode [ 461.763430][ T6136] bond5: left allmulticast mode [ 461.773206][ T6136] ip6gre1: left allmulticast mode [ 461.922516][ T5653] Bluetooth: hci5: command tx timeout [ 461.993600][ T6136] bond5 (unregistering): (slave ip6gre1): Releasing backup interface [ 462.030754][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2958'. [ 462.045138][T17841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2958'. [ 462.204603][ T6136] bond6 (unregistering): (slave gretap1): Releasing active interface [ 462.236868][ T6136] bond7 (unregistering): (slave gretap2): Releasing active interface [ 462.303364][ T6136] geneve1 (unregistering): left promiscuous mode [ 462.309738][ T6136] geneve1 (unregistering): left allmulticast mode [ 462.317387][ T6136] `: Port device geneve1 removed [ 462.429766][ T6136] bond1 (unregistering): Released all slaves [ 462.449673][ T6136] bond2 (unregistering): Released all slaves [ 462.474491][ T6136] bond3 (unregistering): Released all slaves [ 462.498444][ T6136] bond4 (unregistering): Released all slaves [ 462.517651][ T6136] bond0 (unregistering): Released all slaves [ 462.538367][ T6136] bond5 (unregistering): Released all slaves [ 462.556547][ T6136] bond6 (unregistering): Released all slaves [ 462.594567][ T6136] bond7 (unregistering): Released all slaves [ 462.615949][ T6136] bond9 (unregistering): Released all slaves [ 462.634776][ T6136] bond8 (unregistering): Released all slaves [ 462.654469][ T6136] bond10 (unregistering): Released all slaves [ 462.676649][T17816] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 462.913683][ T6136] tipc: Disabling bearer [ 462.958027][ T6136] tipc: Left network mode [ 463.082288][T17652] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.089858][T17652] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.121720][T17652] bridge_slave_0: entered allmulticast mode [ 463.143116][T17652] bridge_slave_0: entered promiscuous mode [ 463.240018][T17652] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.248524][T17652] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.256605][T17652] bridge_slave_1: entered allmulticast mode [ 463.266266][T17652] bridge_slave_1: entered promiscuous mode [ 463.479687][T17652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.495849][T17652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.539493][T17652] team0: Port device team_slave_0 added [ 463.549583][T17652] team0: Port device team_slave_1 added [ 463.613726][T17652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.620800][T17652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.648349][T17652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.709890][T17652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.723185][T17652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 463.749213][T17652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 463.761399][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 463.799514][ T6136] veth1_vlan: left allmulticast mode [ 463.805324][ T6136] veth1_vlan: left promiscuous mode [ 463.819970][ T6136] pim6reg (unregistering): left allmulticast mode [ 464.008074][ T5653] Bluetooth: hci5: command tx timeout [ 464.202806][ T6136] dummy0 (unregistering): left promiscuous mode [ 464.209352][ T6136] dummy0 (unregistering): left allmulticast mode [ 464.218064][ T6136] ` (unregistering): Port device dummy0 removed [ 464.325333][T17652] hsr_slave_0: entered promiscuous mode [ 464.332157][T17652] hsr_slave_1: entered promiscuous mode [ 464.625293][ T6136] IPVS: stop unused estimator thread 0... [ 465.247845][T17652] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 465.260439][T17652] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 465.276306][T17652] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 465.289490][T17652] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 465.298356][T17652] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 465.309181][T17652] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 465.317984][T17652] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 465.332818][T17652] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 465.430330][T17652] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.456868][T17652] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.482730][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.489925][ T6141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.508931][ T3377] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.516167][ T3377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.093629][ T5653] Bluetooth: hci5: command tx timeout [ 466.206626][T17652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.249238][ T6138] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 466.284794][T17652] veth0_vlan: entered promiscuous mode [ 466.306916][T17652] veth1_vlan: entered promiscuous mode [ 466.365991][T17652] veth0_macvtap: entered promiscuous mode [ 466.387816][T17652] veth1_macvtap: entered promiscuous mode [ 466.427786][T17652] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.445876][T17652] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.463412][ T3377] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.472834][ T3377] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.487095][ T3377] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.498293][ T3377] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.627836][ T6144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.648828][ T6144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.694964][ T3377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 466.703450][ T3377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 466.808263][ T29] audit: type=1800 audit(1780167847.975:24): pid=17932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2919" name="memory.events" dev="tmpfs" ino=18 res=0 errno=0 [ 498.242449][ T136] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 501.445327][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.454070][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.019306][T18021] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2961'. [ 510.051081][T18021] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2961'. [ 510.089354][T18025] bond0: Caught tx_queue_len zero misconfig [ 510.100274][T18027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2963'. [ 510.121212][T18027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2963'. [ 510.337446][ T5639] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 510.360301][ T5639] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 510.369380][ T5639] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 510.379402][ T5639] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 510.389899][ T5639] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 510.869550][T18057] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2967'. [ 510.998278][T18057] macvlan2: entered allmulticast mode [ 511.078605][T18062] Unsupported ieee802154 address type: 0 [ 511.120838][T18057] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 48 [ 511.191330][T18057] pimreg: entered allmulticast mode [ 511.686570][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 511.895730][T18082] x_tables: duplicate underflow at hook 3 [ 512.003336][ T6138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.079668][T18056] pimreg: left allmulticast mode [ 512.137720][T18097] netlink: 'syz.3.2975': attribute type 11 has an invalid length. [ 512.236289][ T6138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.266674][T18099] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 512.415864][ T6138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.482836][ T5639] Bluetooth: hci3: command tx timeout [ 512.514386][T18116] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2980'. [ 512.547277][T18116] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2980'. [ 512.589648][T18116] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2980'. [ 512.599335][T18116] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2980'. [ 512.670730][ T6138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 512.746359][T18126] netlink: 'syz.1.2983': attribute type 10 has an invalid length. [ 512.765865][T18126] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2983'. [ 512.944090][T18133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 513.657163][ T6138] veth0_virt_wifi: left allmulticast mode [ 513.675649][ T6138] veth0_virt_wifi: left promiscuous mode [ 513.705202][ T6138] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 513.873208][ T6138] dvmrp0: left allmulticast mode [ 514.571315][ T5639] Bluetooth: hci3: command tx timeout [ 514.848543][ T6138] bond9 (unregistering): (slave bridge6): Releasing backup interface [ 514.857026][ T6138] bridge6 (unregistering): left promiscuous mode [ 514.919710][ T6138] bond0 (unregistering): Released all slaves [ 514.945335][ T14] smbdirect: ib_dev[syz1] removed [ 514.951681][ T6138] bond1 (unregistering): Released all slaves [ 514.998767][ T6138] bond2 (unregistering): Released all slaves [ 515.023950][ T6138] bond3 (unregistering): Released all slaves [ 515.042325][ T6138] bond4 (unregistering): Released all slaves [ 515.058931][ T6138] bond5 (unregistering): Released all slaves [ 515.083334][ T6138] bond6 (unregistering): Released all slaves [ 515.100321][ T6138] bond7 (unregistering): Released all slaves [ 515.123752][ T6138] bond8 (unregistering): Released all slaves [ 515.143862][ T6138] bond9 (unregistering): Released all slaves [ 515.168234][ T6138] bond10 (unregistering): Released all slaves [ 515.184913][ T6138] bond11 (unregistering): Released all slaves [ 515.202673][T18035] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.223484][T18035] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.239564][T18035] bridge_slave_0: entered allmulticast mode [ 515.250246][T18035] bridge_slave_0: entered promiscuous mode [ 515.369126][T18200] netlink: 'syz.2.2994': attribute type 4 has an invalid length. [ 515.435796][T18201] netlink: 'syz.2.2994': attribute type 4 has an invalid length. [ 515.467629][T18183] syzkaller0: entered promiscuous mode [ 515.476111][T18183] syzkaller0: entered allmulticast mode [ 515.497591][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 515.539856][T18035] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.559927][T18035] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.573740][T18035] bridge_slave_1: entered allmulticast mode [ 515.590830][T18035] bridge_slave_1: entered promiscuous mode [ 516.651067][ T5639] Bluetooth: hci3: command tx timeout [ 517.784247][ T6138] tipc: Disabling bearer [ 517.791302][ T6138] tipc: Left network mode [ 517.879656][T18203] __nla_validate_parse: 2 callbacks suppressed [ 517.879679][T18203] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2995'. [ 517.963537][T18210] hsr0: entered promiscuous mode [ 518.017214][T18035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.034252][T18035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.200653][T18219] netlink: 'syz.4.2998': attribute type 1 has an invalid length. [ 518.218907][T18035] team0: Port device team_slave_0 added [ 518.261357][T18035] team0: Port device team_slave_1 added [ 518.352005][T18219] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 518.600867][T18035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.641164][T18035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.671322][T18035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.721081][ T5639] Bluetooth: hci3: command tx timeout [ 518.744127][T18035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.766713][T18035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 518.798524][T18035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.094809][T18259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.260329][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3005'. [ 519.328132][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3005'. [ 519.463079][ T6138] pim6reg (unregistering): left allmulticast mode [ 519.814020][T18266] netlink: 'syz.2.3006': attribute type 3 has an invalid length. [ 519.822593][T18266] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 519.882472][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 519.948730][T18035] hsr_slave_0: entered promiscuous mode [ 519.995359][T18035] hsr_slave_1: entered promiscuous mode [ 520.027252][T18035] debugfs: 'hsr0' already exists in 'hsr' [ 520.037796][T18035] Cannot create hsr debugfs directory [ 520.215987][T18286] netlink: 'syz.4.3011': attribute type 1 has an invalid length. [ 520.516426][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3013'. [ 520.567609][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3013'. [ 520.781149][ T6138] IPVS: stop unused estimator thread 0... [ 521.295051][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3017'. [ 521.388977][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3017'. [ 521.916746][T18342] geneve2: entered promiscuous mode [ 523.115503][T18035] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 523.177091][T18035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 523.212187][T18035] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 523.253532][T18035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 523.271599][T18035] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 523.298209][T18385] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 523.315155][T18035] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 523.324000][T18035] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 523.335410][T18035] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 523.538541][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 523.596669][T18395] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3029'. [ 523.638990][T18035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 523.728482][T18035] 8021q: adding VLAN 0 to HW filter on device team0 [ 523.765787][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.773073][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.812768][T18400] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 523.887241][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.894473][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 524.222489][T18419] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.313991][T18422] sctp: [Deprecated]: syz.2.3035 (pid 18422) Use of int in maxseg socket option. [ 524.313991][T18422] Use struct sctp_assoc_value instead [ 524.447984][T18424] hm3): entered promiscuous mode [ 524.746980][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3037'. [ 524.786782][T18439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3037'. [ 525.089182][T18456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3040'. [ 525.120014][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3041'. [ 525.169284][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3041'. [ 525.210213][T18461] netlink: 'syz.2.3040': attribute type 3 has an invalid length. [ 525.496722][T18470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3043'. [ 525.569907][T18469] tipc: Started in network mode [ 525.613671][T18469] tipc: Node identity fa0116134fc8, cluster identity 4711 [ 525.653416][T18469] tipc: Enabled bearer , priority 0 [ 525.696930][T18468] syzkaller0: entered promiscuous mode [ 525.723045][T18468] syzkaller0: entered allmulticast mode [ 525.777521][T18469] tipc: Resetting bearer [ 525.869214][T18035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 526.158325][T18035] veth0_vlan: entered promiscuous mode [ 526.224607][T18035] veth1_vlan: entered promiscuous mode [ 526.309749][T18467] tipc: Resetting bearer [ 526.389908][T18467] tipc: Disabling bearer [ 526.586862][T18035] veth0_macvtap: entered promiscuous mode [ 526.617771][T18035] veth1_macvtap: entered promiscuous mode [ 526.667027][T18035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.733402][T18035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.796988][ T136] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.845695][ T136] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.878689][ T136] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.910666][ T136] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.042031][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 527.204249][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3053'. [ 527.219839][T18517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3052'. [ 527.242108][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.264002][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.592351][T18520] bond1: entered promiscuous mode [ 527.611588][T18520] 8021q: adding VLAN 0 to HW filter on device bond1 [ 527.815257][T18520] bridge1: entered promiscuous mode [ 527.834333][T18520] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 527.860696][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.887864][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.615162][T18550] __nla_validate_parse: 1 callbacks suppressed [ 528.615183][T18550] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3060'. [ 528.697338][T18554] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 528.710781][T18554] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 528.720655][T18554] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 528.730536][T18554] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 528.740096][T18554] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 528.769571][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3060'. [ 528.837492][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3060'. [ 529.256384][T18569] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3063'. [ 529.494455][T18579] batadv1: entered promiscuous mode [ 529.524033][T18579] batadv1: entered allmulticast mode [ 529.550243][T18579] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 529.574050][T18583] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.3067'. [ 529.766684][T18590] netlink: 248 bytes leftover after parsing attributes in process `syz.3.3068'. [ 529.783796][T18592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3070'. [ 530.078711][T18554] block nbd0: Receive control failed (result -107) [ 530.097537][T18601] block nbd0: reconnected socket [ 530.376165][T18615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3074'. [ 530.518642][T18615] ipvlan2: entered allmulticast mode [ 530.524302][T18615] syz_tun: entered allmulticast mode [ 530.767396][T18553] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.781638][T18553] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.789002][T18553] bridge_slave_0: entered allmulticast mode [ 530.797530][T18553] bridge_slave_0: entered promiscuous mode [ 530.801582][T18554] Bluetooth: hci1: command tx timeout [ 530.812546][T18553] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.819863][T18553] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.828234][T18553] bridge_slave_1: entered allmulticast mode [ 530.838943][T18553] bridge_slave_1: entered promiscuous mode [ 530.970165][T18553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.022568][T18630] gretap0: entered promiscuous mode [ 531.040004][T18553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.221881][T18553] team0: Port device team_slave_0 added [ 531.243973][T18553] team0: Port device team_slave_1 added [ 531.253077][T18635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3082'. [ 531.270344][T18635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3082'. [ 531.328725][T18553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.344264][T18553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.410693][T18553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.426882][T18553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.435616][T18553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.462485][T18553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.539437][T18553] hsr_slave_0: entered promiscuous mode [ 531.547371][T18553] hsr_slave_1: entered promiscuous mode [ 531.576071][T18553] debugfs: 'hsr0' already exists in 'hsr' [ 531.583284][T18553] Cannot create hsr debugfs directory [ 531.692372][T18646] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 531.746778][T18648] ip6gre1: entered promiscuous mode [ 531.752349][T18648] ip6gre1: entered allmulticast mode [ 531.768266][ T6643] IPVS: starting estimator thread 0... [ 531.871164][T18649] IPVS: using max 30 ests per chain, 72000 per kthread [ 532.003082][T18659] netlink: 'syz.0.3090': attribute type 12 has an invalid length. [ 532.218722][T18553] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.232521][T18553] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.367391][ T6134] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.408447][ T6134] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.448416][ T6134] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.475810][ T6134] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 532.690482][T18553] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.711496][T18553] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.787577][T18698] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 532.881466][T18554] Bluetooth: hci1: command tx timeout [ 533.023510][T18553] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.069560][T18553] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.118320][T18696] syzkaller0: entered promiscuous mode [ 533.124357][T18696] syzkaller0: entered allmulticast mode [ 533.265476][T18553] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.291037][T18553] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.625040][T18553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 533.681604][T18553] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 533.714270][T18553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 533.787288][T18553] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 533.819058][T18553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 533.845991][T18553] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 533.864611][T18733] netlink: 'syz.1.3108': attribute type 11 has an invalid length. [ 533.865357][T18553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 533.883530][T18735] netlink: 'syz.0.3109': attribute type 10 has an invalid length. [ 533.897745][T18735] __nla_validate_parse: 7 callbacks suppressed [ 533.897763][T18735] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3109'. [ 533.919682][T18553] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 533.953772][T18735] dummy0: entered promiscuous mode [ 533.960666][T18735] dummy0: entered allmulticast mode [ 533.967185][T18735] bridge0: port 3(dummy0) entered blocking state [ 533.974431][T18735] bridge0: port 3(dummy0) entered disabled state [ 533.984587][T18735] bridge0: port 3(dummy0) entered blocking state [ 533.991130][T18735] bridge0: port 3(dummy0) entered forwarding state [ 534.155056][T18749] xt_l2tp: missing protocol rule (udp|l2tpip) [ 534.296997][T18751] tipc: Started in network mode [ 534.312913][T18751] tipc: Node identity ce027ba57c67, cluster identity 4711 [ 534.341241][T18751] tipc: Enabled bearer , priority 0 [ 534.354467][T18754] syzkaller0: entered promiscuous mode [ 534.371103][T18754] syzkaller0: entered allmulticast mode [ 534.456378][T18750] tipc: Resetting bearer [ 534.505964][T18750] tipc: Disabling bearer [ 534.549793][T18553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.584361][T18756] netlink: 'syz.1.3114': attribute type 40 has an invalid length. [ 534.647688][T18553] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.696612][ T6136] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.703864][ T6136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.727118][ T6136] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.734386][ T6136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.742617][T18756] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 534.782200][T18759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3115'. [ 534.811043][T18759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3115'. [ 534.963587][T18554] Bluetooth: hci1: command tx timeout [ 535.055179][T18763] netlink: 'syz.4.3117': attribute type 4 has an invalid length. [ 535.170592][T18771] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3120'. [ 535.180226][T18772] SET target dimension over the limit! [ 535.245767][T18774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 535.295458][T18771] gretap0: entered promiscuous mode [ 535.358391][T18771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3120'. [ 535.358666][T18774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 535.374234][T18774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 535.381120][T18774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 535.387954][T18774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 535.394827][T18774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 535.401700][T18774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 535.408537][T18774] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 535.496607][T18771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3120'. [ 535.518408][T18781] tipc: Enabling of bearer rejected, failed to enable media [ 535.534125][T18780] Bluetooth: MGMT ver 1.23 [ 535.540227][T18771] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3120'. [ 535.571143][T18771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3120'. [ 535.630398][T18771] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3120'. [ 535.730486][T18771] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3120'. [ 536.632856][T18809] netlink: 'syz.3.3126': attribute type 1 has an invalid length. [ 536.681665][T18785] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.707448][T18785] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.893972][T18809] bond2: entered promiscuous mode [ 536.926229][T18809] 8021q: adding VLAN 0 to HW filter on device bond2 [ 537.018346][T18809] bond2: (slave bridge2): making interface the new active one [ 537.028260][T18809] bridge2: entered promiscuous mode [ 537.038060][T18809] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 537.041331][T18554] Bluetooth: hci1: command tx timeout [ 537.080808][T18553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.201949][T18785] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.234127][T18785] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.246992][T18823] netlink: 'syz.4.3129': attribute type 3 has an invalid length. [ 537.303371][T18825] netlink: 'syz.3.3130': attribute type 10 has an invalid length. [ 537.488493][T18785] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.513118][T18785] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.566155][T18834] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 537.823751][T18785] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.863870][T18785] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.971866][T18842] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 538.008687][T18553] veth0_vlan: entered promiscuous mode [ 538.065400][T18553] veth1_vlan: entered promiscuous mode [ 538.189852][T18553] veth0_macvtap: entered promiscuous mode [ 538.272855][T18553] veth1_macvtap: entered promiscuous mode [ 538.280233][ T6134] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.289619][ T6134] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.360491][ T6141] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.376388][ T6141] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.387477][T18553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.447255][ T136] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.461646][ T136] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.499645][T18553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 538.532317][ T136] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.542268][ T136] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.572204][ T6141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.592511][ T6141] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.616076][ T6141] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.684589][ T6141] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.738808][T18858] unsupported nla_type 48896 [ 538.763673][T18858] netlink: 'syz.1.3140': attribute type 3 has an invalid length. [ 538.782646][T18858] netlink: 'syz.1.3140': attribute type 1 has an invalid length. [ 539.028906][ T6136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.077067][ T6136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.328675][T18881] __nla_validate_parse: 11 callbacks suppressed [ 539.328696][T18881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3148'. [ 539.434432][T18883] net_ratelimit: 313 callbacks suppressed [ 539.434462][T18883] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 539.506907][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.528806][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.714833][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3152'. [ 539.748476][T18892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3152'. [ 539.860634][T18896] bond13: entered allmulticast mode [ 539.913293][T18896] ip6gre2: entered allmulticast mode [ 539.920102][T18899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 539.959981][T18900] Cannot find set identified by id 0 to match [ 540.034337][T18899] bridge0: port 5(syz_tun) entered disabled state [ 540.272392][T18899] syz_tun (unregistering): left allmulticast mode [ 540.305905][T18914] Cannot find add_set index 0 as target [ 540.312841][T18899] syz_tun (unregistering): left promiscuous mode [ 540.332113][T18899] bridge0: port 5(syz_tun) entered disabled state [ 540.361721][ T5639] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 540.376454][ T5639] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 540.387277][ T5639] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 540.397200][ T5639] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 540.411774][ T5639] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 540.530793][T18909] pim6reg: entered allmulticast mode [ 540.966368][T18924] netlink: 'syz.0.3160': attribute type 30 has an invalid length. [ 540.993053][T18927] erspan0: entered promiscuous mode [ 541.236645][T18936] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 541.459010][T18942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3165'. [ 541.484387][T18945] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3167'. [ 541.509319][T18942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3165'. [ 541.535449][T18948] netlink: 1544 bytes leftover after parsing attributes in process `syz.2.3168'. [ 541.779586][T18961] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3171'. [ 541.837023][T18962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3171'. [ 542.236620][T18978] netlink: 'syz.3.3174': attribute type 2 has an invalid length. [ 542.252461][T18978] netlink: 'syz.3.3174': attribute type 9 has an invalid length. [ 542.321464][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e6fc400: rx timeout, send abort [ 542.483773][T18554] Bluetooth: hci0: command tx timeout [ 542.550227][T18985] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 542.821660][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e6fc000: rx timeout, send abort [ 542.832486][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e6fc400: abort rx timeout. Force session deactivation [ 543.095091][T18915] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.136576][T18915] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.161739][T18915] bridge_slave_0: entered allmulticast mode [ 543.195063][T18915] bridge_slave_0: entered promiscuous mode [ 543.217320][T18915] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.235129][T18915] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.272399][T18915] bridge_slave_1: entered allmulticast mode [ 543.299997][T18915] bridge_slave_1: entered promiscuous mode [ 543.329977][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e6fc000: abort rx timeout. Force session deactivation [ 543.488197][T18915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.544082][T18915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.678431][ T6643] bond_slave_0: entered promiscuous mode [ 543.684252][ T6643] bond_slave_1: entered promiscuous mode [ 543.709840][T18915] team0: Port device team_slave_0 added [ 543.749922][T18915] team0: Port device team_slave_1 added [ 543.824532][T18915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.833399][T18915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.861333][T18915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.897985][T18915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.906779][T18915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.955771][T18915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.048196][T19041] batadv_slave_0: entered promiscuous mode [ 544.068974][T18915] hsr_slave_0: entered promiscuous mode [ 544.075931][T18915] hsr_slave_1: entered promiscuous mode [ 544.103171][T18915] debugfs: 'hsr0' already exists in 'hsr' [ 544.119175][T18915] Cannot create hsr debugfs directory [ 544.131361][T19040] batadv_slave_0: left promiscuous mode [ 544.181444][T19043] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 544.246987][T19047] nbd: nbd2 already in use [ 544.263130][T19047] block nbd0: NBD_DISCONNECT [ 544.296009][T19047] block nbd0: Send disconnect failed -32 [ 544.327630][T19047] block nbd0: shutting down sockets [ 544.387165][T19052] netlink: 'syz.1.3195': attribute type 12 has an invalid length. [ 544.410562][T19052] netlink: 'syz.1.3195': attribute type 1 has an invalid length. [ 544.467257][T19050] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 544.561221][T18554] Bluetooth: hci0: command tx timeout [ 544.687946][T18915] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.060070][T18915] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.245793][T18915] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.452075][T18915] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.535186][T19092] __nla_validate_parse: 11 callbacks suppressed [ 545.535212][T19092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3204'. [ 545.582630][T19091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3204'. [ 545.637901][T19101] x_tables: unsorted entry at hook 2 [ 545.643536][T19091] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3204'. [ 545.664799][T19092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3204'. [ 545.676708][T19102] IPVS: set_ctl: invalid protocol: 0 100.1.1.1:20003 [ 545.778206][T19106] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 545.778206][T19106] Please contact the netfilter-devel mailing list or update your nftables rules. [ 545.895032][T19106] bond_slave_1: mtu less than device minimum [ 546.559658][T18915] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 546.594961][T18915] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.616315][T18915] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 546.641894][T18554] Bluetooth: hci0: command tx timeout [ 546.660262][T18915] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.694551][T18915] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 546.720208][T18915] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.738368][T18915] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 546.772820][T18915] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 547.090636][T18915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.165892][T18915] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.236322][ T6144] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.243594][ T6144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.280033][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.287330][ T6144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.798821][T19184] sctp: [Deprecated]: syz.2.3222 (pid 19184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 547.798821][T19184] Use struct sctp_sack_info instead [ 548.118113][T19202] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 548.382720][T19210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3228'. [ 548.471957][T18915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.671989][T19223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3231'. [ 548.703210][T19228] netlink: 'syz.3.3232': attribute type 30 has an invalid length. [ 548.716956][T19223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3231'. [ 548.732900][T18554] Bluetooth: hci0: command tx timeout [ 549.108382][T19230] syzkaller1: entered promiscuous mode [ 549.128768][T19230] syzkaller1: entered allmulticast mode [ 549.507580][T18915] veth0_vlan: entered promiscuous mode [ 549.564831][T18915] veth1_vlan: entered promiscuous mode [ 549.617943][T19251] netlink: 'syz.3.3237': attribute type 27 has an invalid length. [ 549.666259][T19253] netlink: 'syz.2.3238': attribute type 4 has an invalid length. [ 549.727778][T18915] veth0_macvtap: entered promiscuous mode [ 549.740548][T19253] netlink: 'syz.2.3238': attribute type 4 has an invalid length. [ 549.769632][T18915] veth1_macvtap: entered promiscuous mode [ 549.828990][T18915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.853638][T18915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.903930][ T6144] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.920275][T19262] IPVS: set_ctl: invalid protocol: 59 100.1.1.3:20002 [ 549.932820][ T6144] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.960217][ T6144] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.983124][ T6144] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.993628][T19262] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3241'. [ 550.092554][T19266] veth1_macvtap: left promiscuous mode [ 550.098168][T19269] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bond, syncid = 2, id = 0 [ 550.400501][ T6132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.421506][ T6132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.555594][T19285] netlink: 'syz.0.3246': attribute type 10 has an invalid length. [ 550.583705][T19285] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3246'. [ 550.675646][ T6144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.703152][ T6144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.956932][T19297] netlink: 'syz.0.3247': attribute type 1 has an invalid length. [ 550.965517][T19298] Bluetooth: MGMT ver 1.23 [ 551.125356][T19297] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 551.200069][ T29] audit: type=1800 audit(1780167932.365:25): pid=19314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3157" name="memory.events" dev="tmpfs" ino=18 res=0 errno=0 [ 551.380181][ T29] audit: type=1804 audit(1780167932.365:26): pid=19314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3157" name="/newroot/0/memory.events" dev="tmpfs" ino=18 res=1 errno=0 [ 551.585118][T19325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.621841][T19323] netlink: 'syz.0.3253': attribute type 1 has an invalid length. [ 551.681564][T19323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 551.916636][ T5639] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 551.944179][ T5639] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 551.957904][ T5639] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 551.968507][ T5639] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 551.978061][ T5639] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 552.375615][T19352] tap0: tun_chr_ioctl cmd 2147767520 [ 552.537338][ T5293] veth1_macvtap: entered promiscuous mode [ 552.617818][T19360] openvswitch: netlink: IP tunnel dst address not specified [ 553.358863][T19386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3268'. [ 554.081442][ T5639] Bluetooth: hci2: command tx timeout [ 554.397258][T19336] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.400676][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3277'. [ 554.413794][T19336] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.421519][T19336] bridge_slave_0: entered allmulticast mode [ 554.429852][T19336] bridge_slave_0: entered promiscuous mode [ 554.443999][T19336] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.451470][T19336] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.458751][T19336] bridge_slave_1: entered allmulticast mode [ 554.468022][T19336] bridge_slave_1: entered promiscuous mode [ 554.511137][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3277'. [ 554.627259][T19336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.685963][T19336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.848560][T19336] team0: Port device team_slave_0 added [ 554.874453][T19336] team0: Port device team_slave_1 added [ 555.019481][T19336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.032582][T19336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.123276][T19336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.165625][T19336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.214006][T19336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.334222][T19336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.413389][T19469] netlink: 324 bytes leftover after parsing attributes in process `syz.4.3285'. [ 555.607310][T19336] hsr_slave_0: entered promiscuous mode [ 555.630620][T19336] hsr_slave_1: entered promiscuous mode [ 555.650435][T19336] debugfs: 'hsr0' already exists in 'hsr' [ 555.687959][T19336] Cannot create hsr debugfs directory [ 555.840712][T19480] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3288'. [ 556.163248][ T5639] Bluetooth: hci2: command tx timeout [ 556.428676][T19506] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 556.480778][T19509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3293'. [ 556.500018][T19509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3293'. [ 556.685598][T19336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.720568][T19515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3296'. [ 556.807606][T19515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3296'. [ 556.816903][ T14] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.847912][ T14] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.861572][ T14] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 556.909586][T19525] netlink: 'syz.3.3299': attribute type 1 has an invalid length. [ 556.947635][T19336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.972435][ T14] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 557.015779][T19525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 557.123696][T19336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.214917][T19534] macvlan2: entered promiscuous mode [ 557.220314][T19534] macvlan2: entered allmulticast mode [ 557.228266][T19534] bond3: entered allmulticast mode [ 557.243240][T19534] bond3: entered promiscuous mode [ 557.253477][T19534] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 557.265723][T19534] team0: Port device macvlan2 added [ 557.378551][T19336] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.569551][T19547] Cannot find del_set index 0 as target [ 557.612083][T19546] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3304'. [ 557.808305][T19549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.857301][T19549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 557.873233][T19336] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 557.898598][T19336] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 557.907433][T19336] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 557.924167][T19336] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 557.934594][T19336] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 557.945177][T19336] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 557.954202][T19336] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 557.965574][T19336] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 558.080402][T19336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.136364][T19336] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.150561][ T6134] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.157800][ T6134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.193851][ T6134] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.201199][ T6134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.244270][ T5639] Bluetooth: hci2: command tx timeout [ 558.936219][T19593] xt_TPROXY: Can be used only with -p tcp or -p udp [ 559.428290][T19612] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3317'. [ 559.659880][T19336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.677395][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.687978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.730223][ T136] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.738620][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.787776][ T6132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.796173][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.843328][ T3377] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.851727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.894907][ T6132] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.903269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.938264][T19336] veth0_vlan: entered promiscuous mode [ 559.987833][T19336] veth1_vlan: entered promiscuous mode [ 560.119067][T19336] veth0_macvtap: entered promiscuous mode [ 560.153919][T19336] veth1_macvtap: entered promiscuous mode [ 560.225694][T19336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.270510][T19336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.333199][ T5639] Bluetooth: hci2: command tx timeout [ 560.340603][ T6132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.392763][ T3377] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.569606][T19630] bond2: option min_links: invalid value (18446744073709551612) [ 560.598807][T19630] bond2: option min_links: allowed values 0 - 2147483647 [ 560.619849][T19630] bond2 (unregistering): Released all slaves [ 560.700665][ T3377] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.726556][ T6138] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.016708][ T6144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.052638][ T6144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.146727][T19658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3327'. [ 561.252366][ T3377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.301400][ T3377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.522093][T19677] netlink: 616 bytes leftover after parsing attributes in process `syz.0.3334'. [ 561.878356][T19686] veth0_macvtap: left promiscuous mode [ 561.935477][T19687] xt_hashlimit: max too large, truncated to 1048576 [ 562.196142][T19695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3337'. [ 562.476111][T19702] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3339'. [ 562.518230][T19702] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3339'. [ 562.624801][T19707] xt_l2tp: missing protocol rule (udp|l2tpip) [ 563.206096][T19727] netlink: 'syz.1.3344': attribute type 1 has an invalid length. [ 563.251999][T19727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3344'. [ 563.418633][T19700] dvmrp0: entered allmulticast mode [ 563.507663][ T6132] dvmrp0: left allmulticast mode [ 564.216088][T19764] 8021q: VLANs not supported on vcan0 [ 564.485036][T19773] netlink: 49 bytes leftover after parsing attributes in process `syz.2.3358'. [ 564.511114][T19773] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3358'. [ 564.522643][ T5293] veth0_macvtap: entered promiscuous mode [ 564.577148][T19773] netlink: 49 bytes leftover after parsing attributes in process `syz.2.3358'. [ 564.735888][T19786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3361'. [ 565.159637][T19800] netlink: 'syz.2.3363': attribute type 1 has an invalid length. [ 565.441948][T19808] syzkaller0: entered promiscuous mode [ 565.447492][T19808] syzkaller0: entered allmulticast mode [ 565.486677][T19775] bond0: (slave bridge_slave_1): Error: Device is in use and cannot be enslaved [ 565.798959][T19822] netlink: 'syz.3.3368': attribute type 32 has an invalid length. [ 566.221047][T19844] __nla_validate_parse: 5 callbacks suppressed [ 566.221067][T19844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3372'. [ 566.245987][T19846] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3371'. [ 566.300561][T19848] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3372'. [ 566.409335][T19853] block nbd0: not configured, cannot reconfigure [ 566.440263][T19844] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.497784][T19856] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3374'. [ 566.611682][T19862] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3375'. [ 566.633047][T19856] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3374'. [ 566.814445][T19872] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3378'. [ 567.025941][T19869] netlink: 'syz.3.3378': attribute type 1 has an invalid length. [ 567.127331][T19890] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3380'. [ 567.213583][T19869] 8021q: adding VLAN 0 to HW filter on device bond4 [ 567.359325][T19900] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3383'. [ 567.730491][T19920] net_ratelimit: 5 callbacks suppressed [ 567.730509][T19920] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 567.814139][T19917] lo speed is unknown, defaulting to 1000 [ 567.869906][T19917] lo speed is unknown, defaulting to 1000 [ 567.882288][T19917] lo speed is unknown, defaulting to 1000 [ 567.919563][T19917] smbdirect: ib_dev[sy2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 567.967694][T19917] smbdirect: ib_dev[sy2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 568.048060][T19917] smbdirect: ib_dev[sy2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 568.103660][T19917] infiniband sy2: RDMA CMA: cma_listen_on_dev, error -98 [ 568.246736][T19917] lo speed is unknown, defaulting to 1000 [ 568.274642][T19917] lo speed is unknown, defaulting to 1000 [ 568.315082][T19917] lo speed is unknown, defaulting to 1000 [ 568.355233][T19917] lo speed is unknown, defaulting to 1000 [ 568.389701][T19917] lo speed is unknown, defaulting to 1000 [ 568.415995][T19917] lo speed is unknown, defaulting to 1000 [ 568.455942][T19917] lo speed is unknown, defaulting to 1000 [ 568.491598][T19917] lo speed is unknown, defaulting to 1000 [ 568.730098][T19939] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.765474][T19954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3398'. [ 568.898612][T19958] netlink: 'syz.3.3399': attribute type 3 has an invalid length. [ 569.024070][T19939] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.328496][T19939] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.464181][T19977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.575241][T19939] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.688326][T19996] pimreg: entered allmulticast mode [ 569.728818][T20000] pimreg: left allmulticast mode [ 569.758801][T19991] lo speed is unknown, defaulting to 1000 [ 570.402712][ T136] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.498639][ T6132] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.513012][T20004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 570.586739][ T136] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.691529][ T136] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.001743][T20044] netlink: 'syz.0.3416': attribute type 49 has an invalid length. [ 571.106973][T20047] syzkaller0: entered promiscuous mode [ 571.115209][T20047] syzkaller0: entered allmulticast mode [ 571.270647][T20049] __nla_validate_parse: 11 callbacks suppressed [ 571.270669][T20049] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3418'. [ 571.301441][T20052] atomic_op ffff8880a71a1998 conn xmit_atomic 0000000000000000 [ 571.309274][T20049] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3418'. [ 571.804635][T20064] netlink: 'syz.2.3421': attribute type 1 has an invalid length. [ 571.966152][T20071] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3423'. [ 572.060383][T20064] 8021q: adding VLAN 0 to HW filter on device bond2 [ 572.181934][T20069] bond2: (slave gretap1): making interface the new active one [ 572.224827][T20069] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 573.060343][T20105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3430'. [ 573.089613][T20107] netlink: 'syz.3.3433': attribute type 1 has an invalid length. [ 573.213236][T20117] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3434'. [ 573.427425][T12227] lo speed is unknown, defaulting to 1000 [ 573.435741][ T6643] lo speed is unknown, defaulting to 1000 [ 573.735873][T20098] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 573.936015][T20137] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3441'. [ 573.951207][T20137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3441'. [ 573.981077][T20137] netlink: 'syz.2.3441': attribute type 18 has an invalid length. [ 574.113686][T20147] netlink: 'syz.0.3442': attribute type 1 has an invalid length. [ 574.160832][T20147] netlink: 'syz.0.3442': attribute type 1 has an invalid length. [ 574.180254][T20147] netlink: 'syz.0.3442': attribute type 1 has an invalid length. [ 574.207891][T20147] netlink: 'syz.0.3442': attribute type 1 has an invalid length. [ 574.227934][T20147] netlink: 'syz.0.3442': attribute type 1 has an invalid length. [ 574.256785][T20147] netlink: 'syz.0.3442': attribute type 1 has an invalid length. [ 574.289841][T20147] netlink: 'syz.0.3442': attribute type 1 has an invalid length. [ 574.334406][T20147] netlink: 'syz.0.3442': attribute type 1 has an invalid length. [ 574.377967][T20147] netlink: 'syz.0.3442': attribute type 1 has an invalid length. [ 575.322490][T20191] syzkaller0: entered promiscuous mode [ 575.343793][T20191] syzkaller0: entered allmulticast mode [ 575.360266][T20198] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3454'. [ 575.470521][T20200] xt_TCPMSS: Only works on TCP SYN packets [ 577.294361][T20214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3458'. [ 578.700117][T20198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3454'. [ 578.710789][T20198] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3454'. [ 578.720008][T20198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3454'. [ 579.439530][T20249] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3466'. [ 579.450262][T20249] openvswitch: netlink: Invalid VLAN frame [ 579.675947][T20261] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.692490][T20261] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.868440][T20254] nbd: must specify a size in bytes for the device [ 579.988344][T20275] netlink: 'syz.4.3472': attribute type 11 has an invalid length. [ 580.242135][T20277] ip6gretap0: entered promiscuous mode [ 580.256087][T20273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3471'. [ 580.267913][T20277] 8021q: adding VLAN 0 to HW filter on device eth0 [ 580.280514][T20277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 580.295300][ T6629] IPVS: starting estimator thread 0... [ 580.301179][T20277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 580.310832][T20277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 580.321142][T18554] Bluetooth: hci5: command 0x0406 tx timeout [ 580.456038][T20282] IPVS: using max 39 ests per chain, 93600 per kthread [ 580.558736][T20289] validate_nla: 27 callbacks suppressed [ 580.558759][T20289] netlink: 'syz.2.3474': attribute type 2 has an invalid length. [ 581.093523][T20319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3484'. [ 581.523133][T20346] netlink: 'syz.4.3491': attribute type 1 has an invalid length. [ 581.562173][T20346] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3491'. [ 581.896368][T20365] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3495'. [ 581.914370][T20366] netlink: 'syz.4.3496': attribute type 12 has an invalid length. [ 581.957074][T20367] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 581.985494][T20370] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 581.999843][T20367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3496'. [ 582.370406][T20394] lo speed is unknown, defaulting to 1000 [ 582.404542][T20394] lo speed is unknown, defaulting to 1000 [ 582.429130][T20394] lo speed is unknown, defaulting to 1000 [ 582.452137][T20394] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 582.504940][T20394] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 582.608009][T20394] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 582.778511][T20394] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 583.185294][T20419] netlink: 'syz.1.3508': attribute type 1 has an invalid length. [ 583.265983][T20426] __nla_validate_parse: 3 callbacks suppressed [ 583.266004][T20426] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3509'. [ 583.438162][T20419] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.447633][T20419] netlink: 'syz.1.3508': attribute type 1 has an invalid length. [ 583.448751][T20394] lo speed is unknown, defaulting to 1000 [ 583.639177][T20436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3510'. [ 583.650839][T20436] netlink: 'syz.4.3510': attribute type 7 has an invalid length. [ 583.689458][T20419] 8021q: adding VLAN 0 to HW filter on device bond2 [ 583.716106][T20436] netlink: 'syz.4.3510': attribute type 8 has an invalid length. [ 583.759317][T20436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3510'. [ 583.777690][T20419] netlink: 'syz.1.3508': attribute type 1 has an invalid length. [ 583.829793][T20394] lo speed is unknown, defaulting to 1000 [ 584.051193][T20419] 8021q: adding VLAN 0 to HW filter on device bond3 [ 584.103818][T20419] netlink: 'syz.1.3508': attribute type 1 has an invalid length. [ 584.192851][T20394] lo speed is unknown, defaulting to 1000 [ 584.299232][T20419] 8021q: adding VLAN 0 to HW filter on device bond4 [ 584.309460][T20419] netlink: 'syz.1.3508': attribute type 1 has an invalid length. [ 584.326668][T20419] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 584.350624][T20394] lo speed is unknown, defaulting to 1000 [ 584.396795][T20394] lo speed is unknown, defaulting to 1000 [ 584.437488][T20394] lo speed is unknown, defaulting to 1000 [ 584.473138][T20394] lo speed is unknown, defaulting to 1000 [ 584.498776][T20394] lo speed is unknown, defaulting to 1000 [ 584.828751][T20490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3520'. [ 584.897047][T20490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3520'. [ 585.494144][T20514] IPVS: set_ctl: invalid protocol: 60 172.20.20.36:20002 [ 585.772370][T20531] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3530'. [ 585.810115][T20533] ip6t_srh: unknown srh invflags 4000 [ 585.820488][T20524] bond_slave_0: left promiscuous mode [ 585.839040][T20537] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3530'. [ 585.864145][T20524] bond_slave_1: left promiscuous mode [ 585.915880][T20541] openvswitch: netlink: Invalid VLAN frame [ 586.067636][T20524] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.084792][T20524] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.109770][T20548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3535'. [ 586.414106][T20546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3535'. [ 586.453927][T20548] vlan2: entered promiscuous mode [ 586.479704][T20548] veth0: entered promiscuous mode [ 586.533261][T20558] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3536'. [ 586.614911][ T3377] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.633597][ T3377] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.658732][ T3377] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.692796][ T3377] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.714428][ T3377] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.737806][ T3377] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.761003][ T3377] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 586.781072][ T3377] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.198179][T20590] bridge_slave_1: left allmulticast mode [ 587.232308][T20590] bridge_slave_1: left promiscuous mode [ 587.242744][T20590] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.291562][T20590] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 587.387084][T20600] bridge1: entered promiscuous mode [ 587.413081][T20600] bridge1: entered allmulticast mode [ 587.434387][T20600] team0: Port device bridge1 added [ 587.484687][T20585] bridge2: entered promiscuous mode [ 587.512264][T20585] bridge2: entered allmulticast mode [ 587.599906][T20585] team0: Port device bridge2 added [ 587.610063][T20612] validate_nla: 1 callbacks suppressed [ 587.610081][T20612] netlink: 'syz.3.3549': attribute type 1 has an invalid length. [ 587.641369][T20600] bridge0: port 3(team0) entered blocking state [ 587.656493][T20600] bridge0: port 3(team0) entered disabled state [ 587.683766][T20600] team0: entered allmulticast mode [ 587.691190][T20600] team_slave_0: entered allmulticast mode [ 587.712681][T20600] team_slave_1: entered allmulticast mode [ 587.751545][T20600] team0: entered promiscuous mode [ 587.779014][T20600] team_slave_0: entered promiscuous mode [ 587.835606][T20600] team_slave_1: entered promiscuous mode [ 587.891599][T20600] bridge0: port 3(team0) entered blocking state [ 587.898067][T20600] bridge0: port 3(team0) entered forwarding state [ 588.398298][T20644] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 588.505311][T20646] __nla_validate_parse: 6 callbacks suppressed [ 588.505347][T20646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3555'. [ 588.888597][T20656] batman_adv: batadv0: Adding interface: vxlan0 [ 588.902391][T20656] batman_adv: batadv0: The MTU of interface vxlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 588.929292][T20656] batman_adv: batadv0: Not using interface vxlan0 (retrying later): interface not active [ 589.038395][T20662] workqueue: name exceeds WQ_NAME_LEN. Truncating to: πx)% ].>n6# [ 589.882410][T20706] xt_hashlimit: size too large, truncated to 1048576 [ 589.882629][T20702] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3571'. [ 589.928728][T20709] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3572'. [ 590.190113][T20714] bond2 (unregistering): Released all slaves [ 590.936377][T20743] netlink: 'syz.2.3578': attribute type 1 has an invalid length. [ 591.771883][T20805] lo speed is unknown, defaulting to 1000 [ 591.816936][T20805] lo speed is unknown, defaulting to 1000 [ 593.018864][T20865] x_tables: duplicate underflow at hook 3 [ 593.033021][T20858] netlink: 'syz.4.3593': attribute type 29 has an invalid length. [ 593.130522][T20872] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input9 [ 593.239991][T20873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3596'. [ 593.288995][T20880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3597'. [ 593.596280][T20888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3597'. [ 593.687603][T20892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3599'. [ 593.716385][T20892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3599'. [ 593.786566][T20893] bond5 (unregistering): Released all slaves [ 593.898175][T20878] lo speed is unknown, defaulting to 1000 [ 593.939808][T20878] lo speed is unknown, defaulting to 1000 [ 593.973450][T20897] tun0: tun_chr_ioctl cmd 1074812118 [ 594.059043][T20897] tun0: tun_chr_ioctl cmd 1074033169 [ 594.105361][T20906] vlan0: entered promiscuous mode [ 594.273863][T20907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3605'. [ 594.507495][T20920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3608'. [ 594.530529][T20924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3609'. [ 594.541979][T20923] ipip0: entered promiscuous mode [ 594.548811][T20924] netlink: 'syz.4.3609': attribute type 5 has an invalid length. [ 594.560270][T20924] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3609'. [ 594.583164][T20764] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.611145][T20764] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.683766][T20764] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.699205][T20764] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 594.859195][T20926] lo speed is unknown, defaulting to 1000 [ 594.917747][T20926] lo speed is unknown, defaulting to 1000 [ 595.153872][T20943] netlink: 'syz.2.3615': attribute type 1 has an invalid length. [ 595.350542][T20943] 8021q: adding VLAN 0 to HW filter on device bond3 [ 595.602094][T20944] bond3: (slave geneve2): making interface the new active one [ 595.625943][T20934] netlink: 45 bytes leftover after parsing attributes in process `syz.3.3610'. [ 595.650241][T20944] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 595.687668][T20945] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3616'. [ 595.732301][T20945] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3616'. [ 596.103700][T20945] bridge0: port 3(team0) entered disabled state [ 596.110194][T20945] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.117946][T20945] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.588407][T20945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.615220][T20945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 596.934388][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.982827][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.145205][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.211179][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 597.236879][ T14] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.319410][ T14] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.353811][ T14] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.477260][ T14] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.895943][T20995] netlink: 'syz.2.3628': attribute type 1 has an invalid length. [ 597.932458][T20991] vlan2: entered promiscuous mode [ 598.127561][T20995] 8021q: adding VLAN 0 to HW filter on device bond4 [ 598.233197][T20996] bond4: (slave veth3): Enslaving as an active interface with a down link [ 598.629658][T21023] __nla_validate_parse: 156 callbacks suppressed [ 598.629683][T21023] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3637'. [ 598.679463][T21023] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.3637'. [ 599.138655][ T5766] IPVS: starting estimator thread 0... [ 599.145338][T21047] IPVS: sh: FWM 3 0x00000003 - no destination available [ 599.240983][T21049] IPVS: using max 29 ests per chain, 69600 per kthread [ 599.458316][T21024] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 599.652886][T21071] netlink: 'syz.2.3658': attribute type 27 has an invalid length. [ 599.791706][T21074] lo speed is unknown, defaulting to 1000 [ 599.818185][T21074] lo speed is unknown, defaulting to 1000 [ 600.398354][T21099] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3672'. [ 600.812556][T21116] wg0 speed is unknown, defaulting to 1000 [ 600.818680][T21116] wg0 speed is unknown, defaulting to 1000 [ 600.826977][T21116] wg0 speed is unknown, defaulting to 1000 [ 600.835299][T21116] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 600.877953][T21116] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 600.918678][T21116] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 601.058341][T21116] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 601.068751][T21119] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3680'. [ 601.124524][T21119] ksmbd: Unknown IPC event: 3, ignore. [ 601.197484][T21116] wg0 speed is unknown, defaulting to 1000 [ 601.233584][T21116] wg0 speed is unknown, defaulting to 1000 [ 601.244020][T21116] wg0 speed is unknown, defaulting to 1000 [ 601.252846][T21116] wg0 speed is unknown, defaulting to 1000 [ 601.261547][T21116] wg0 speed is unknown, defaulting to 1000 [ 601.270313][T21116] wg0 speed is unknown, defaulting to 1000 [ 601.279374][T21116] wg0 speed is unknown, defaulting to 1000 [ 601.307356][T21116] wg0 speed is unknown, defaulting to 1000 [ 601.897632][T21151] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3696'. [ 601.923877][T21151] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3696'. [ 601.938502][ T6621] IPVS: starting estimator thread 0... [ 602.061579][T21154] IPVS: using max 25 ests per chain, 60000 per kthread [ 603.650776][T21231] syzkaller1: entered promiscuous mode [ 603.672869][T21231] syzkaller1: entered allmulticast mode [ 603.847928][T21236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3730'. [ 604.247402][T19269] IPVS: ip_vs_send_async error -101 [ 605.071485][T21288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3749'. [ 605.080679][T21288] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3749'. [ 605.113471][T21288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3749'. [ 605.550575][T21306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3757'. [ 605.826237][T21321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3764'. [ 606.223830][T21333] syzkaller0: entered promiscuous mode [ 606.229412][T21333] syzkaller0: entered allmulticast mode [ 607.847534][T21391] netlink: 'syz.4.3796': attribute type 10 has an invalid length. [ 608.001163][ T5639] Bluetooth: hci2: command tx timeout [ 608.601844][T21432] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3814'. [ 608.646643][T21432] netlink: 264 bytes leftover after parsing attributes in process `syz.3.3814'. [ 609.490580][T21467] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3829'. [ 609.514646][T21467] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3829'. [ 609.742314][T21474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3834'. [ 610.219505][T21495] netlink: 'syz.2.3844': attribute type 10 has an invalid length. [ 610.228671][T21495] macvlan1: entered promiscuous mode [ 610.271559][T21495] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 610.498965][T21512] netlink: 'syz.3.3848': attribute type 2 has an invalid length. [ 610.532197][T21512] netlink: 'syz.3.3848': attribute type 2 has an invalid length. [ 611.050699][T21541] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3865'. [ 611.070812][T21540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3864'. [ 611.181232][T21540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3864'. [ 611.208952][T21540] block nbd0: server does not support multiple connections per device. [ 611.237970][T21540] block nbd0: shutting down sockets [ 611.696726][ T5639] Bluetooth: hci2: link tx timeout [ 611.705848][ T5639] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 613.764422][T18554] Bluetooth: hci2: command 0x0406 tx timeout [ 614.009443][T21680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3925'. [ 614.337643][T21691] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3929'. [ 617.038918][T21825] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3994'. [ 617.174016][T21828] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3997'. [ 618.347858][T21879] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4019'. [ 618.477573][T21885] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4022'. [ 618.487140][T21885] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 619.539451][T21930] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 624.322869][ T1316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.652571][T22265] lo speed is unknown, defaulting to 1000 [ 626.672876][T22265] lo speed is unknown, defaulting to 1000 [ 626.707075][T22265] wg0 speed is unknown, defaulting to 1000 [ 626.984099][T22282] xt_HMARK: proto mask must be zero with L3 mode [ 628.567559][T22324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4224'. [ 628.669287][T22324] netlink: 'syz.3.4224': attribute type 1 has an invalid length. [ 628.703738][T22324] netlink: 'syz.3.4224': attribute type 2 has an invalid length. [ 630.756808][T22367] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4233'. [ 636.194000][T22369] veth0: entered promiscuous mode [ 636.199415][T22371] bond0: entered promiscuous mode [ 636.204859][T22371] bond_slave_0: entered promiscuous mode [ 636.211237][T22371] bond_slave_1: entered promiscuous mode [ 636.217327][T22371] bond0: left promiscuous mode [ 636.222473][T22371] bond_slave_0: left promiscuous mode [ 636.228258][T22371] bond_slave_1: left promiscuous mode [ 636.240215][T22371] veth0: left promiscuous mode [ 636.600641][T22407] [ 636.604464][T22407] ============================= [ 636.611332][T22407] WARNING: suspicious RCU usage [ 636.616289][T22407] syzkaller #0 Not tainted [ 636.620761][T22407] ----------------------------- [ 636.625698][T22407] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 636.634385][T22407] [ 636.634385][T22407] other info that might help us debug this: [ 636.634385][T22407] [ 636.645204][T22407] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 636.645204][T22407] rcu_scheduler_active = 2, debug_locks = 1 [ 636.653543][T22407] 1 lock held by syz.2.4245/22407: [ 636.658699][T22407] #0: ffffffff8e95ced8 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 636.670454][T22407] [ 636.670454][T22407] stack backtrace: [ 636.677859][T22407] CPU: 0 UID: 0 PID: 22407 Comm: syz.2.4245 Not tainted syzkaller #0 PREEMPT(full) [ 636.677893][T22407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 636.677914][T22407] Call Trace: [ 636.677926][T22407] [ 636.677936][T22407] dump_stack_lvl+0xe8/0x150 [ 636.678025][T22407] lockdep_rcu_suspicious+0x13f/0x1d0 [ 636.678078][T22407] get_callchain_entry+0x2b6/0x3c0 [ 636.678124][T22407] get_perf_callchain+0xd5/0x880 [ 636.678157][T22407] ? __pfx_get_perf_callchain+0x10/0x10 [ 636.678190][T22407] ? __pfx___resched_curr+0x10/0x10 [ 636.678235][T22407] __bpf_get_stack+0x445/0xab0 [ 636.678280][T22407] ? __pfx___bpf_get_stack+0x10/0x10 [ 636.678309][T22407] ? __lock_acquire+0x6b5/0x2cf0 [ 636.678338][T22407] bpf_get_stack+0x33/0x50 [ 636.678360][T22407] ? bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 636.678381][T22407] bpf_get_stack_raw_tp+0x1a9/0x220 [ 636.678429][T22407] bpf_prog_aa1f08ea8b241262+0x46/0x4e [ 636.678452][T22407] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 636.678488][T22407] bpf_prog_test_run_syscall+0x318/0x4c0 [ 636.678520][T22407] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 636.678546][T22407] ? __fget_files+0x2a/0x420 [ 636.678606][T22407] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 636.678635][T22407] bpf_prog_test_run+0x2c7/0x340 [ 636.678668][T22407] __sys_bpf+0x643/0x950 [ 636.678704][T22407] ? __pfx___sys_bpf+0x10/0x10 [ 636.678759][T22407] ? rcu_is_watching+0x15/0xb0 [ 636.678803][T22407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.678844][T22407] __x64_sys_bpf+0x7c/0x90 [ 636.678875][T22407] do_syscall_64+0x174/0x580 [ 636.679006][T22407] ? trace_irq_disable+0x3b/0x140 [ 636.679039][T22407] ? clear_bhb_loop+0x40/0x90 [ 636.679066][T22407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.679088][T22407] RIP: 0033:0x7f054419ce59 [ 636.679108][T22407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.679127][T22407] RSP: 002b:00007f05450ea028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 636.679150][T22407] RAX: ffffffffffffffda RBX: 00007f0544415fa0 RCX: 00007f054419ce59 [ 636.679166][T22407] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 636.679180][T22407] RBP: 00007f0544232d6f R08: 0000000000000000 R09: 0000000000000000 [ 636.679193][T22407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.679206][T22407] R13: 00007f0544416038 R14: 00007f0544415fa0 R15: 00007ffe6fb9ab38 [ 636.679248][T22407] [ 639.399220][T20763] team0: left allmulticast mode [ 639.404523][T20763] team_slave_0: left allmulticast mode [ 639.410078][T20763] team_slave_1: left allmulticast mode [ 639.415992][T20763] team0: left promiscuous mode [ 639.420816][T20763] team_slave_0: left promiscuous mode [ 639.426948][T20763] team_slave_1: left promiscuous mode [ 639.433964][T20763] bridge0: port 3(team0) entered disabled state [ 639.447586][T20763] bridge_slave_1: left allmulticast mode [ 639.461094][T20763] bridge_slave_1: left promiscuous mode [ 639.471186][T20763] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.489081][T20763] bridge_slave_0: left allmulticast mode [ 639.495488][T20763] bridge_slave_0: left promiscuous mode [ 639.501737][T20763] bridge0: port 1(bridge_slave_0) entered disabled state [ 639.681637][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 639.765273][T20763] team0: Port device bridge1 removed [ 639.816442][T20763] team0: Port device bridge2 removed [ 639.844211][T20763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.878451][T20763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.904275][T20763] bond0 (unregistering): Released all slaves [ 640.363220][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 640.509528][T20763] hsr_slave_0: left promiscuous mode [ 640.516146][T20763] hsr_slave_1: left promiscuous mode [ 640.528165][T20763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.538249][T20763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.898572][T20763] team0 (unregistering): Port device team_slave_1 removed [ 640.924687][T20763] team0 (unregistering): Port device team_slave_0 removed [ 641.177672][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 641.493203][T20763] IPVS: stop unused estimator thread 0... [ 641.731845][T20763] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.742777][T20763] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.798240][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3 [ 641.857332][T20763] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.867875][T20763] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.996955][T20763] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.007605][T20763] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.110653][T20763] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.123320][T20763] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.404434][T20763] bridge_slave_1: left allmulticast mode [ 642.413924][T20763] bridge_slave_1: left promiscuous mode [ 642.423140][T20763] bridge0: port 2(bridge_slave_1) entered disabled state [ 642.439674][T20763] bridge_slave_0: left allmulticast mode [ 642.446388][T20763] bridge_slave_0: left promiscuous mode [ 642.452515][T20763] bridge0: port 1(bridge_slave_0) entered disabled state [ 642.682527][T20763] batman_adv: batadv0: Removing interface: vxlan0 [ 642.724801][T20763] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.742856][T20763] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.759100][T20763] bond0 (unregistering): Released all slaves [ 642.775755][T20763] bond1 (unregistering): Released all slaves [ 642.797531][T20763] bond2 (unregistering): Released all slaves [ 642.825109][T20763] bond3 (unregistering): Released all slaves [ 642.849820][T20763] bond4 (unregistering): Released all slaves [ 642.869747][ T5293] 8021q: adding VLAN 0 to HW filter on device eth4 [ 643.361843][T20763] hsr_slave_0: left promiscuous mode [ 643.368185][T20763] hsr_slave_1: left promiscuous mode [ 643.377436][T20763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 643.385284][T20763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 643.398056][T20763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 643.407963][T20763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 643.435736][T20763] veth1_macvtap: left promiscuous mode [ 643.442415][T20763] veth1_vlan: left promiscuous mode [ 643.855413][T20763] team0 (unregistering): Port device team_slave_1 removed [ 643.880964][T20763] team0 (unregistering): Port device team_slave_0 removed [ 644.047741][T20764] smbdirect: ib_dev[sy2] removed [ 644.070094][ T6622] lo speed is unknown, defaulting to 1000 [ 644.075085][ T5293] 8021q: adding VLAN 0 to HW filter on device eth5 [ 644.076611][ T6622] sy2: Port: 1 Link DOWN [ 644.389632][T20763] IPVS: stop unused estimator thread 0... [ 644.823238][ T5293] 8021q: adding VLAN 0 to HW filter on device eth6 [ 645.300323][ T5293] 8021q: adding VLAN 0 to HW filter on device eth7 [ 645.791477][ T5293] 8021q: adding VLAN 0 to HW filter on device eth8