last executing test programs: 3.034027138s ago: executing program 0 (id=3393): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd26, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0xfffd, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20000000007, 0xfffffffffffffffb}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001500010000000000feffffffe00000020000000000000000000000000000000000000000000000000000000100000000000000000a00102000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000d000000000000000000000000000000000000000000090000000000000000fd0103163d79e449a0ee6df17efc2a000000000093910000000000a0c32b3484d03e6baa4bb7e51dde000000000000000000000000084b66bd59bb5f9440dd9e4f0000000000000000000000000000010001000000000000020000000000000000002019281b1998ac383e0a00"], 0xb8}}, 0x0) 2.849141998s ago: executing program 1 (id=3395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001880)=@newtaction={0x8c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1000, 0x0, 0x0, 0x0, 0x4000000}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) socket$kcm(0x2, 0xa, 0x2) (async) r2 = socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) (async) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000100)=0x8, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @link_local}) 2.780748717s ago: executing program 0 (id=3397): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000080)=0x7ffd, 0xbd9b6bbfc4a03a1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0xe00, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e00090027097000000000220400000008000c"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2.395202188s ago: executing program 3 (id=3402): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, 0x0, 0x0) (async) connect$pppoe(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3100000000280004800800024000000000080001400000000514000300766505000000000000007461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}}, 0x0) 2.345410085s ago: executing program 0 (id=3403): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b32, &(0x7f0000000040)) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @remote}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) socketpair(0x6, 0x6, 0x9, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) accept$nfc_llcp(r3, &(0x7f00000002c0), &(0x7f0000000340)=0x60) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet6(r0, &(0x7f0000000180), 0x0, 0x40010, &(0x7f00000001c0)={0xa, 0x4e22, 0x3ff, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc6d}, 0x1c) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000380)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r6, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 2.336625617s ago: executing program 1 (id=3404): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000580)="c1515a1232c30600776bef766d838203bee2", 0x12}], 0x1}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000007540), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40080) (async) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1500000078000100000000000000000007"], 0x18}, 0x1, 0x5502000000000000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f00000014c0)="dc", 0x1}], 0x2}, 0x4000) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r5) (async) r7 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r7, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="95cb57f7f9f5e9b19422fdbba16052a29a2d3be6e213bd75a97b56c7dc217216090e7c97", 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000880)="05ba8c1cfb03f631fd2d06121541e78e6718599f7482f9b4b4464ff2d795", 0x1e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) r8 = socket$alg(0x26, 0x5, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56661, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xffff, 0xfffd}}}]}, 0x38}}, 0x0) (async) getsockname$packet(r9, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x10003, 0x8, 0x20000000, 0x3, 0x2}, 0x2, r11}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@bridge_newvlan={0x24, 0x70, 0x200, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000001) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="6d932bbd70000000000001000000080003"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x29, 0x40, 0x5, 0x9, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x80, 0x40, 0x1, 0x3}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000008c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000b80)={0x2a8, r12, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_LINKMODES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_OURS={0x230, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x1f, 0x4, "233fbd0e7e9b702eaab2d5c521dd0e51d51867013a41824a26f122"}, @ETHTOOL_A_BITSET_BITS={0x110, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '$%\x02)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdb5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ':]\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x45, 0x2, '\n\xac?w\xd5\xac\xaa\xa3\x04\xd2\xc4\xfa\xc7PU\xe3\xd2\x9d\xa9;\xca\xd43\x18\x82\x11\x8d\xea\x9cLr\x19\xbdr\xf5\x8d}r\xa1\xd7\xbb\x1f\n\x15\x81 QF\x9f\xf1\xe1\x17\xea\"\xe6D\xb9\xed\x1d\xe6eA\x1dr\xd7'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xe8[@+\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xf8, 0x4, "61ae0f5898c6fb63be99b4691ce21f440d0fb0403ebc8fbff259ae850e707f16669ef56004103d5a51689c8a5ff4e21f4e309466c60793cd52cbe89a885dc27bcc91c31ebeb9199e23309368d35231801a278ceeccf2d4156aad6608660ce67253e49a17e6da069220d210be7472cd184a8fe2ccae6b838faeec515c489ad670d77d2cd466793450788810a0fb88d3e0853328d5665886519b2ff503079b065df594768b6a8cd5a4c964e6ac362ddf989d09d595c2c9d3cb2f7eeff669eba5833064ac1897ac904e58406052b53d67b938b8966b38c10cdb59e3d40dab3a83287844f0326cb96fb82488de7bfb9d3eb3dec99a46"}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x20044020}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x6c, r6, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x6c}}, 0x4) 2.196644439s ago: executing program 2 (id=3406): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x14, 0x39, 0xb, 0x70bd2a, 0x4002, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'veth0_to_bond\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0xfffffffc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x3}}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0xaa26}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xffffffff, 0x4) listen(r0, 0xfff) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x97ffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) 2.186670826s ago: executing program 3 (id=3407): recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/190, 0xbe}, {&(0x7f0000000140)=""/91, 0x5b}], 0x2, &(0x7f0000000200)=""/57, 0x39}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000280), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f00000002c0)={0x60000009}) setsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000300), 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000440)={r3, &(0x7f0000000340)='\xfb&#.-+\x00', 0x109800, &(0x7f0000000380)={@align=0x7, {0xfff, 0x20, 0x0, 0x100000001}}, 0x499f, &(0x7f00000003c0), &(0x7f0000000400)=0x200}) sendmsg$rds(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000480)=""/28, 0x1c}, {&(0x7f00000004c0)=""/238, 0xee}, {&(0x7f00000005c0)=""/67, 0x43}, {&(0x7f0000000640)=""/57, 0x39}, {&(0x7f0000000680)=""/28, 0x1c}, {&(0x7f00000006c0)=""/142, 0x8e}, {&(0x7f0000000780)=""/36, 0x24}], 0x7, &(0x7f0000000840)=[@rdma_dest={0x18, 0x114, 0x2, {0x8001}}], 0x18, 0x4800}, 0x10000000) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000008c0)='vlan1\x00', 0x10) connect$pppoe(0xffffffffffffffff, &(0x7f0000000900)={0x18, 0x0, {0x2, @local, 'rose0\x00'}}, 0x1e) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x78, 0x3, 0x7, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xba}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x9a}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8}]}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_PKTS={0xc}]}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x4008010) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a80)={'wlan0\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000b40)={'ip6tnl0\x00', &(0x7f0000000ac0)={'ip6gre0\x00', r0, 0x29, 0x8, 0xbb, 0xebd, 0x20, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x700, 0x0, 0xb}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000bc0), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000c00)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000cc0)={'syztnl2\x00', &(0x7f0000000c40)={'syztnl0\x00', r5, 0x2f, 0x7, 0x1, 0xe, 0x1, @remote, @loopback, 0x8, 0x80, 0x3d3, 0x6ec3a9ab}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f0000000e40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d00)={0xd0, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) bind$bt_rfcomm(r4, &(0x7f0000000e80)={0x1f, @any, 0x1}, 0xa) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000ec0)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000f80)={'team_slave_0\x00', 0x101}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000010c0)={'sit0\x00', &(0x7f0000001000)={'gretap0\x00', r0, 0x8, 0x8000, 0x9, 0xfffffffb, {{0x1e, 0x4, 0x2, 0x3, 0x78, 0x65, 0x0, 0x8, 0x2f, 0x0, @local, @private=0xa010100, {[@lsrr={0x83, 0xb, 0x37, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @lsrr={0x83, 0x2b, 0x8c, [@remote, @private=0xa010102, @broadcast, @empty, @loopback, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @local, @local]}, @end, @generic={0x94, 0xd, "36be2fa2ceb11cce545595"}, @timestamp={0x44, 0x10, 0x33, 0x0, 0x3, [0x480, 0x80, 0x3]}, @lsrr={0x83, 0xf, 0x3f, [@empty, @empty, @multicast1]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001180)={r9, 0x58, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000001240)={'syztnl1\x00', &(0x7f00000011c0)={'ip6_vti0\x00', r5, 0x4, 0x0, 0xb, 0x86, 0x5d, @remote, @mcast1, 0x20, 0x7, 0x7b4, 0x401}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001340)={&(0x7f0000001280)={0x8c, r6, 0x41b93f52f770bec9, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x51}, 0x10) writev(r10, &(0x7f00000016c0)=[{&(0x7f00000013c0)="e544ba961fbbfa41c4fe7537a63bef48b21c92458e3c69eaaa0ace6abdb5f21f130c30055307ad8fee45c8c36ba7364066359564f95bf400261ab853b6254688849c9e9e50a1867c64dcb423c72034e5d3d3eb8b7447919f2876b7cd498b4b7cd04466d359251f1ad58c587f8d91ee14c568cd1ba8528bfc333603cb819fe90ce4e704aba2f7f72ef2748a669a41d7c464032bf6b80220a931ab9fece42aec740aa5450401eb42c55ba8368a42228499bfd6615dce3113e657604327d21e4802eee8e853ed11", 0xc6}, {&(0x7f00000014c0)="ee0aa48251eacf03235f2fdeff82c49fedf1bbefe0aff402ed3717b8cb43a4c7a6a49fda66d1b33217a7fef73226b22170f7b335c18abbfcfd4d2c52d6e4b732956bab5b38fdb2793baa37db7cb99cbf6072e66e9d35d05dc25c5bdf63f4dd77487ef5c39dfdf4f5c7b8d2359dbf6d86f28d2e1e2addf46f09034780c8b04995c60e1799fea01f1eced1fd6c28b67a3a5da48247c0e4d964a721cde91d8ae31745", 0xa1}, {&(0x7f0000001580)="5eeb230ed671b09cf6a5272a0a6b8725033c7ef19bb2881c8fe2b00dedd39301f2212d3d0e85b45b75221e6fe98fa24fd6ec8ce664bf39b2ed91d9e7be5a39cc979572af55ab03e80d8f18e053f3301740f838637037b4c9eb7cb25e7635dbf0a8b73ae2eabe8d492062f3486219468bc4d1860a449d70d355dc57b803bbe85e16a5269fe9dbe69beb6623255f3371a27f939cb4136a1157c5efd37009e6068d21676313459b92", 0xa7}, {&(0x7f0000001640)="f7d03de0204c171cb373d4587783f869d37eeac7af6b8d5a5738aabb2f1719e71a40affe83dd78a8d5d139689cadc12ec9579e2a93b45565bf425e8bff73a8129b9a51b0055d9bc48664d964", 0x4c}], 0x4) sendto(r1, &(0x7f0000001700)="f5f6ecb00a520735eee6b00df99a7eff2f3edcc5b84985946df2ced62f5c43a2b38700abe3108f09cbc64189b9477aa5c9dcacd555e1f187fb240d57c383bcbf60d2ef3381448cb94f9f8ba3c4171465b715280428072764a538d381c10655bda0308ce00654e8afe86142b67bdab59b22e6956184404e5568d3c8b3876389358a363b5573f3ff0d0358ef9f124a8bb0cbe4edddd1de", 0x96, 0x10, &(0x7f00000017c0)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e22, 0x7fff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x6}}, 0x80) bind$bt_hci(r4, &(0x7f0000001840)={0x1f, 0x1, 0x2}, 0x6) sendmsg$L2TP_CMD_TUNNEL_GET(r4, &(0x7f0000001980)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x34, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8000}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x84}, 0x24000010) 2.030984639s ago: executing program 1 (id=3408): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x22eb}, @TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 1.984537634s ago: executing program 2 (id=3409): sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000001200000426bd7000fcdbdf2508060a014e244e23f8ffffff03000000060000000000000000040000090000000800000009008000", @ANYRES32=0x0, @ANYBLOB="0100000003000000040000000bb4a40009000100f102dcf29e000000"], 0x58}, 0x1, 0x0, 0x0, 0x4000004}, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @long={0x3, 0x1}}, 0x11, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x20008c10}, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x4e, 0x0, &(0x7f0000000600)="06ff03076844268cb89e14f008004ee0ffff00febabec41177fb860200080000030c62079f4b4d2f87e5feca6aab055013f2325f1a3901050b038da1880b25181aa59d943be30043d50ea5a6b868", 0x0, 0xfa, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, 0x0) r10 = socket$isdn_base(0x22, 0x3, 0x0) accept(r10, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x27, &(0x7f0000000000)=""/114}, 0xa8) 1.927269245s ago: executing program 3 (id=3411): r0 = socket(0x10, 0xa, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xfffffc}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_getnexthop={0x30, 0x6a, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NHA_GROUPS={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc48c0}, 0x8004) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x3, 0x9, 0x1, 0xd00, 0x101, 0x2, 0x8ad1, 0x1, 0xf54c, 0xfffffffffffffffd, 0xbaa, 0x5, 0x5, 0x5, 0x6ac3]}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r2, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r5, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) 1.728624164s ago: executing program 2 (id=3412): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000024c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000027c0)=ANY=[@ANYBLOB="00020000", @ANYRES16=r0, @ANYBLOB="010025bd7000fedbdf251a000000040022800700210062620000"], 0x20}}, 0x4) (async) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000027c0)=ANY=[@ANYBLOB="00020000", @ANYRES16=r0, @ANYBLOB="010025bd7000fedbdf251a000000040022800700210062620000"], 0x20}}, 0x4) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) close(r2) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) write$tun(r4, &(0x7f00000001c0)={@void, @val={0x2, 0x4, 0x7, 0xe00, 0x2ea, 0x3}, @x25={0x0, 0x4, 0x27, "08f1e7acd2d3bbf7ee4b8d0b0e15cc6d1e55614806a334e1f71ccff37249ef6d1f1b9e191390ad6aeb101b6e25c97d396e9c2b30b2d2f4f3bbb3099fc51df33c8f0c942fd0293e4340e38c27dca647a0fdabf5f9225e8ea1ae9a80ecbcf44eed514f4e980108fe8cbe393eeda70f31663b8505a10518ffc91b9ba4d0547563f6a4ec01"}}, 0x90) r5 = accept4(r3, 0x0, 0x0, 0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r6, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x20000022) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r9, @ANYBLOB="fe000000000000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) socket(0x1, 0x803, 0x0) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r13 = socket(0x1, 0x803, 0x0) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r14}, @IFLA_MASTER={0x8, 0xa, r14}]}, 0x4c}}, 0x0) recvmsg(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002d80)=""/4101, 0x1005}, {&(0x7f0000004700)=""/4072, 0xfe8}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/191, 0xbf}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000540)=""/123, 0x7b}], 0x9}, 0x10000) (async) recvmsg(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000002d80)=""/4101, 0x1005}, {&(0x7f0000004700)=""/4072, 0xfe8}, {&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/191, 0xbf}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000440)=""/155, 0x9b}, {&(0x7f0000000540)=""/123, 0x7b}], 0x9}, 0x10000) sendto$inet(r5, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) accept4$tipc(r5, 0x0, 0x0, 0x800) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000010000088040f80ec7d0b8a8b77ba1d39c1d466b259acbc0413a1f8481f0000005e1406042319811b0e000a000f00", 0x32}], 0x1}, 0x1) 1.479094128s ago: executing program 0 (id=3415): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000010029bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="080200000030000005002100000000001400350064756d6d7930"], 0x3c}}, 0x4048004) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000180)) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) bind$xdp(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvtap0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="05030200157e0000140012800c0001006d616376746170000400028008000500", @ANYRES32=r2, @ANYBLOB="080004004440"], 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x48094) r4 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(0xffffffffffffffff, &(0x7f00000015c0)={0x2c, 0x4, r2, 0x1, r4}, 0x10) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x3, 0x0, @mcast2}, 0x1c) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYRES64=r5], 0x6c}}, 0x20050800) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={0x0, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e22, @remote}, {0x2, 0x4e20, @rand_addr=0x7c79}, 0x48, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)='veth1_macvtap\x00', 0x2, 0x1ff, 0x401}) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000500)=0xe8) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r13, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r14}}, 0x40) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)={0x4e4, 0x2e, 0x400, 0x0, 0x25dfdbfc, "", [@nested={0x4d2, 0xf2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @nested={0x3d3, 0x13b, 0x0, 0x1, [@generic="2ef3f5a2bff11448e1f1981ba41fb77858554fa85842c496ce9db9b7c8aa582d9490a0415260a03a38eaca56726b2715501e69e8ddacfd398e2a7853a6bddaba4fc8dd776c853ed06f206832819b86123b06e7bd55a65acb04ed11c2a6162807b315d4", @nested={0x1b0, 0x2d, 0x0, 0x1, [@generic="abcf8d7e414ae9ae53deb0373bc59166cf9e1a32d72bbfcb56003479c5dc443be529ccfa35133f0c03f2f57129f847cc06d021591b564682abf3b64eade62a017baf13167833b82dae3e05cada9d36f427a1", @nested={0x4, 0xe9}, @nested={0x4, 0x134}, @typed={0x4, 0x1e}, @typed={0x8, 0x8c, 0x0, 0x0, @fd=r0}, @typed={0x4, 0x92}, @generic="4d7304acc05e631697309131ff02f00c5ff5d177ff8d9fe51d73f12304325aed775a63f1c83a36477e1848176c8e9267ec6fc26ca65f5a591720245bb15504563afb96d820314b211f3f79f95b5247f84ad199b0c71172ccd721fc8b511c06fe31dbde52034c9e3726e69c3abe37739f9fa88c1b5f289873c6812198de95576fba1e1db930350e131fada49189e785a391ee74fbb66b7382241b38d4581ed1702286d781c337dcc7857b9b93fce8cb56bedf39ed37abd497a4d5cbdc1262cfbe460357e5349f18589c8c4732d96e4d7f", @generic="f6945c8a48a29cfa62b854672b15ff0dc9c1e7aa0ed8404a2d6ea54eb1b262cc6e12a592d4f6682c757d9f45e1835bd21ebaaf00a4c866d3f78d54103b139adb113ffb3f387829a9e2fb237f1efdffb7a384dde959bffeda328c4f795ef1324ba7704458f4f6f17cc304b81be87194845e0e"]}, @generic="192536ea73390a3ad1c560a71f844e326f9b1b445b412bc231cc6c31294430764b34aa5fcb94ff78980acc", @generic="bb763d7b119713d9d7935672d193bf8817a08b81bb4154a94949950dd7f3e9cd6f768108f56dc373010edc2e3706f99560222091adc52c3c2674e8436a4e04ce389070ed46389b198532a62521fd806732530c26fb11229df73b93abc505e8f7b6be1f5e99", @typed={0x8, 0x153, 0x0, 0x0, @fd=r7}, @nested={0x10, 0x4e, 0x0, 0x1, [@typed={0x8, 0x16, 0x0, 0x0, @uid=r12}, @nested={0x4, 0x34}]}, @nested={0x112, 0x17, 0x0, 0x1, [@typed={0x8, 0xf6, 0x0, 0x0, @pid=r14}, @generic="bafdb10080716b57334ea54878f5a50481ec21f06b6ace0466278de71bf7841dfef7b684ae9768c92ebb9516c829c9f41daeab9ca8f0d6559e025257b212227be46c4bb97db1b6edca3978cf9d723311fdc4a0e84381e1ff45c95491dd0f827eb84a5040ca399e8be780b9774f408acb5d2f30145336df02e8fcde3d87dc64fd3a768c67ad79b72cc85ffc02a460a2ee47833f26625b3bf10afc7ac35b96dcb520f326640e14adb786fee1943c8a9abcf45c18e07c9821c76c32ab29a555ea43f4743e63eb6658c79b02cc477e9fe0ba9919d3ab0827b3e305fc", @typed={0x14, 0x78, 0x0, 0x0, @ipv6=@remote}, @nested={0x4, 0x8f}, @typed={0x8, 0x82, 0x0, 0x0, @u32=0x3}, @nested={0x4, 0x7d}, @generic, @typed={0x8, 0x24, 0x0, 0x0, @ipv4=@multicast1}]}]}]}]}, 0x4e4}], 0x1, 0x0, 0x0, 0x1}, 0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd24, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x64004081}, 0x0) 1.300987456s ago: executing program 4 (id=3416): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000015c0)={0x40, 0x3, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0x40a}, [@NFACCT_QUOTA={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x80000001}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20008050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = getuid() setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000240)={{{@in=@empty, @in6=@private2, 0x4e21, 0x0, 0x4e24, 0x55ca, 0x2, 0x20, 0x80, 0x33, 0x0, r2}, {0x8001, 0xfff, 0x6, 0x9, 0x6, 0x8, 0xffffffffffffff33, 0x8000000000000001}, {0x100000000, 0x6, 0x4}, 0x1, 0x6e6bbe, 0x3, 0x0, 0x2, 0x1}, {{@in6=@empty, 0x4d3, 0x2b}, 0x2, @in=@loopback, 0x0, 0x0, 0x1, 0x2, 0x26f1bc2f, 0xc, 0x1}}, 0xe8) 1.299873565s ago: executing program 2 (id=3417): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r2, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x4, 0x1000, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x2, 0x7, 0x66, 0x68, 0x0, 0x52, 0x6, 0x0, @private=0xa010102, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e23, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x10, 0x0, 0x6}, {"92de7b253fdcf89d15d599cb58511c3efe6eea31b11b67944960fec8de12b986ba3d8ae4c8330900000040da57842b55726a6aa269847c6a10c6"}}}}, 0x74) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000b0c20f86030413f25a6a6e27d1db4fbbaecd9d5169b4ffd279636e25d50d5fdaa6799accd547a37ea6890670684d5603a83f26f2a2c82e9a3e547d99146de21c8064cfe02544e1c21948e4e542d93f135ac1ccf4285d66c007c562c9a55081eb33fc5dab6ecab7f96c833fb879275d8398338508091adb27d5e06203f7", @ANYRES16=r1, @ANYRES32=r5, @ANYRES32=r4, @ANYRES64=r1], 0x3c}}, 0x4000000) 1.130934756s ago: executing program 4 (id=3418): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x88) r1 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/54, 0x36}], 0x1, &(0x7f0000000200)=""/153, 0x99}, 0xffffffff}], 0x1, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000000)={&(0x7f0000000c00)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000002}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@dellinkprop={0x9c, 0x6d, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x24001, 0x22180}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x8973}, @IFLA_IFALIASn={0x4}, @IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2c71f}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x4}, @IFLA_CARRIER={0x5, 0x21, 0x4b}, @IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}, @IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_IFALIAS={0x14, 0x14, 'vxcan1\x00'}, @IFLA_ALT_IFNAME={0x14, 0x35, 'ip6_vti0\x00'}, @IFLA_CARRIER={0x5, 0x21, 0xf}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804) socket(0x15, 0x4, 0x529) 990.029318ms ago: executing program 4 (id=3419): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x2, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x38018, 0x2025c}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x48}}, 0x800) 933.231903ms ago: executing program 0 (id=3420): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES16=r0], 0x10}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f00000005c0)=@ethtool_ringparam={0x10, 0x3, 0x951, 0x5775, 0xa, 0x9, 0x52a, 0x346, 0x5}}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x21, &(0x7f0000000300)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 932.733831ms ago: executing program 3 (id=3421): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) clock_gettime(0x0, &(0x7f0000000b00)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000a80)=[{{&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/46, 0x2e}, {&(0x7f00000001c0)=""/49, 0x31}, {&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000300)=""/136, 0x88}, {&(0x7f00000003c0)=""/237, 0xed}], 0x5, &(0x7f0000000700)=""/237, 0xed}, 0x28cc}, {{&(0x7f0000000800)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000880)=""/215, 0xd7}], 0x1, &(0x7f00000009c0)}, 0x7}], 0x2, 0x2, &(0x7f0000000b40)={r2, r3+10000000}) r4 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000580)=""/230, 0xa}], 0x1}, 0x2000000}], 0x2, 0x0, 0x0) bind$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x9}, 0xa) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc0000000000000000fa000000000000ac1e0001821501f63ed02a170000000000000000000000000a006030"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000014"], 0xb8}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000001000000000000000741000300000018"], 0x68}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000b80)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000680)={0x28, r7, 0x2, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x9) 824.233112ms ago: executing program 4 (id=3422): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x158, 0xc8, 0x8, 0x0, 0x5803, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, [0x0, 0xff, 0x0, 0xff], [], 'pimreg0\x00', 'geneve1\x00', {}, {}, 0x0, 0x4, 0x0, 0x55}, 0x0, 0x118, 0x158, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@ipvs={{0x48}, {@ipv6=@mcast2, [0xffffff00, 0x0, 0xffffff00, 0xffffff], 0x4e21, 0xff, 0x2, 0x4e24, 0x20, 0x1}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x18, "d05511d4053fa80d56e441286224250ca2535f0c8aa13a6276593694a239"}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}, @common=@icmp6={{0x28}, {0x10, "5bbf", 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x10, 0x0, 0x7, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 813.538507ms ago: executing program 1 (id=3423): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x20040880) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000004c0)) syz_emit_ethernet(0x63, &(0x7f0000000100)={@empty, @random="2b89a1b7a248", @void, {@llc={0x4, {@snap={0x1, 0xab, "df", 'E6\'', 0x890d, "26604ecbfef60045090564db899c2f67c69bf266bafe87989018134ebc83390a1293507f077c7c98c654a77255f661ded50b793623ad8114bd0f1834f2b4a31164bb556d2d972bc20aa0d590fe"}}}}}, 0x0) 701.082607ms ago: executing program 2 (id=3424): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@delneigh={0x50, 0x1d, 0x210, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x28, 0x0, 0x6}, [@NDA_DST_MAC={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @NDA_VLAN={0x6}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}, @NDA_MASTER={0x8, 0x9, 0x100}, @NDA_NH_ID={0x8}, @NDA_FLAGS_EXT={0x8}]}, 0x50}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01ead453d4e01b7bb401000000005e1affd5020000000900ca0073797a30000000000800032c000000030a01030009000000000000000000000900010073797a30000000000900030073797a3200000000140000007c532bdb34348c5a82883005d5a435211195c97448c66e9b68da207cdf8bbeb7a061f57c5be12deaa76df207ac0bba3ee91937a860b9597521bfc86f9d0601c1c81a6a5a9a0ac993679a401fadb1c176c1e31a33d46af5d8d4eed56cd530d685aa04947c1860a159c31fb3aa1adb82885a8cb44199c84ad2ecc052f70a7f1f791f5106be59a2104083028f"], 0x7c}}, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000009000000000000000a54000000060a09040000000000000000020000002800048024000180090001046d6574610000000014000280080001400000000008000240000000140900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010001fff26bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280050004000100000014e006002001000000000000000000000000000008000a00", @ANYRES32=r6], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 503.49077ms ago: executing program 1 (id=3425): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x1, 0x0) listen(r1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x4, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000009}, 0x20000091) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@deltfilter={0x34, 0x2d, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0xe, 0xa}, {0x6, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x2e, 0xe0}}, @TCA_CHAIN={0x8, 0xb, 0xb}]}, 0x34}, 0x1, 0x0, 0x0, 0x48050}, 0x4000000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000480)={'syztnl1\x00', r4, 0x8, 0x80, 0x3, 0x7fffffff, {{0x16, 0x4, 0x1, 0x6, 0x58, 0x68, 0x0, 0x5, 0x4, 0x0, @private=0xa010101, @multicast1, {[@rr={0x7, 0xf, 0x2c, [@remote, @local, @local]}, @cipso={0x86, 0x34, 0x2, [{0x0, 0x3, "0f"}, {0x6, 0x11, "e8ebabc07b4ccf241b578948afa664"}, {0x1, 0x8, "feea82f13b46"}, {0x7, 0x12, "8242660d4e89474bf70292b3cb5586d1"}]}]}}}}}) sendmsg$nl_route(r6, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, 0x4435, 0x34100}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x7ee28}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x8000) ioctl$sock_SIOCINQ(r1, 0x541b, 0x0) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0xffffffffffffffae, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRESDEC, @ANYRES64=r1], 0x21c}, 0x1, 0x0, 0x0, 0x24040010}, 0x24044880) 485.607782ms ago: executing program 3 (id=3426): socket$key(0xf, 0x3, 0x2) (async, rerun: 32) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x6}, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="450400000000000000000a00"], 0x20}}, 0x0) (async, rerun: 64) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) (rerun: 64) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af", 0x110}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0d3", 0x2f}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3a", 0x8f}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e5", 0xb1}, {&(0x7f0000000d00)="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", 0x104}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) (async) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000a00)="e499", 0x2}], 0x1}, 0x41) (async) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3801000010000100feffffbf00010000fe88000000000000001105ee810000ba1f000001ac1414aa0000000000000000000000000001f7c007944e230005000000003a000000", @ANYRES32=0x0, @ANYRES8=r4, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fd2000000000000000480003006465666c61746500"/240], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) (async) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb6}]}) close(r6) 348.61763ms ago: executing program 0 (id=3427): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x15, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000004c0)={'ip6gre0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x29, 0xa8, 0x7, 0x9, 0x1a, @loopback, @mcast1, 0x8000, 0x783f, 0x8, 0x6}}) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000900)=@newpolicy={0x118, 0x13, 0x200, 0x70bd29, 0x25dfdbfb, {{@in6=@dev={0xfe, 0x80, '\x00', 0xd}, @in=@private=0xa010101, 0x1, 0x1d, 0x4e21, 0x0, 0xa, 0xa0, 0x80, 0x4, r4}, {0x3, 0x88a, 0x7, 0x2, 0x7, 0x7, 0x3, 0x2}, {0x1, 0x101, 0xffffffffffffffff, 0x2}, 0x3, 0x6e6bc0, 0x0, 0x0, 0x2, 0x2}, [@tfcpad={0x8, 0x16, 0x8}, @extra_flags={0x8, 0x18, 0x3}, @sec_ctx={0x43, 0x8, {0x3f, 0x8, 0x1, 0x5, 0x37, "e034964e8a8120a559b40f587b6ba10e92a03ef0dc88f11d1df732053b1ed499c76e172c76a98c9fa39960aa6fd137d7707c04cfb3c856"}}, @offload={0xc}]}, 0x118}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f00000000c0)) getsockopt(r2, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x17, &(0x7f00000002c0)=0xb58d, 0x4) r8 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r8, &(0x7f0000000040), 0x10) listen(r8, 0x0) getsockopt$bt_hci(r5, 0x0, 0x1, &(0x7f0000000300)=""/234, &(0x7f0000000400)=0xea) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000140)={0x1}, 0x8) close(r9) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010800000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="008393fb1800000008000a00", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x8, @local}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$unix(r8, &(0x7f0000000fc0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000c40)="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", 0x177}, {&(0x7f0000000740)="82944ca6483186ff7f416ddd86d1f6414142caa526f8ffc84afc8a3999c753ff6696362df064970719f53b8d981c38bddf319f4e16e4356a6621977d3be65c88cdbc81ccbbeef1f95f3f0c4d5ce7e235f1353d7dcf11dc757121e450608b1a4318a45dd990618b2e5ed6a916c52885ec95cc2a9f4194d8d57c8f777bcfffcd9963098677f15f3651bf3600ee7bba2ec3336b0417b67e97b5b367747b6a8fca9ecab6db6dfa582507a79b1e2a769c8177e716f87e152ea9730d8d3cedff0279cf43ee7e2869a05d15f06df0e7adc3c000ee580e55aa3e4a3e7a4380631af99f1b4c06c5911c3a9db0d7257e05ac50b903", 0xf0}, {&(0x7f0000000ac0)="eb05258516f85956daf66e4a85bd53bcc34bbe969369c9b84bf72e200ce365b6ef250ceb5805ea21777ac898b77017b70cfe2b8d42260f42c277f3ef16408e07cb370e5c7dc9eefbd8b804e4a2d801898c1fb984761838a6bff9d5ad1b75a2f327713a9833af4378924115f8e09bf013cc8746a069ed339ed46aa72acd91692a1ac082cd2cd1c7d33ae90213ba3e834cd9829b52b3e4260381b13dec002edca1cd4d6e0a040783da0b8e9d8ccbae17be8d529108d769a8fa5e60bb82ce939000af0ef089ef25f2df95668f436f840be83705dceece7784e57bcab54c608c5878f29a1b9e9d31d3", 0xe7}, {&(0x7f0000000bc0)="994e0dd2c1edca79bc7834bf0b197e8e63260521576ef1b1f3e0738dabfda6e4be", 0x21}], 0x4, &(0x7f0000000500)=[@rights={{0x30, 0x1, 0x1, [r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, r1, r9, r1, r9]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @rights={{0x28, 0x1, 0x1, [r2, r9, r1, r2, r1, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xf8, 0x20000004}, 0x800) 339.993775ms ago: executing program 4 (id=3428): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip_vti0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc05, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x80801, 0x1) (async) r5 = socket(0x2b, 0x80801, 0x1) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0xfffc, 0x10000, @loopback, 0x1}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x3, &(0x7f0000000080)=0x9447, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000020000000000010c000280050001000000000006000340000100003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000022000000000000000000aa0c00028005000100000000000800074000000000"], 0x9c}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9c0000000001010400000000000000000a000000440001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000020000000000010c000280050001000000000006000340000100003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000022000000000000000000aa0c00028005000100000000000800074000000000"], 0x9c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="14fbffff01012500000000000000000002000008c8018be4b94985d73f65bb6a81daa512bcb3c0c4775b2588dd92d61d98ddcd8d5163198b696a5c25e8f57b650f9680b6a5f4e9b81023db7cb85a657f9a98205e31b9edc607eb0ccad0aecc95b86a1eeb71dabd94b691bf07505056acc1daac0830d7121a5bb11d742e816f69bb3c8817f9e065fb8f2eac24a4845012d1f5b9cc9064f594fd348ee2152b45555238b5075fa2c507363c116ccaa00477921d82ed43847aecee94f1bd0c62643be25d2e6d36e8431d6910f08963"], 0x14}, 0x1, 0x0, 0x0, 0x24004804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) 237.350193ms ago: executing program 2 (id=3429): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, r2, 0x600, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x4a}, @void, @val={0xc, 0x99, {0x8, 0x36}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x10, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x20) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x270c, 0x0, &(0x7f0000000000)) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r4 = socket$inet(0x2, 0x80000, 0x3) sendto$inet(r4, &(0x7f0000000240)="98f6d61a5764990c4e355878a155fbe14dd8ae83ce87e895e89c33f329e157f7f68c6a3eb7345639745eabae5e53b677240a24aafbd8974f1d25106c5b3dca7ea83d406500d03a9add460380331c2290", 0x50, 0x4, &(0x7f00000002c0)={0x2, 0x4e22, @empty}, 0x10) 176.583265ms ago: executing program 3 (id=3430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x1000d) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000240)={0x11, 0x2, 0x0, 0x1, 0xe, 0x6, @local}, 0x14) socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xc}, 0x94) 7.83286ms ago: executing program 1 (id=3431): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x0, 0x0, {0x28}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}]}, 0x2c}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xfffffffe, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80b, 0x9, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x200, 0x7, 0x8, 0x7, 0xfd, 0xffffff5c, {0xffff1c72, 0x23, 0x10000003, 0x8, 0x9, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r7, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x8100, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 4 (id=3432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000003c0), 0x8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000400)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x80}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x4000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0xffffffffffffff54, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x4, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x20080000) r3 = socket$netlink(0x10, 0x3, 0x8000000004) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe0090f000060000000a2bcb503ca00000f7f8900000020000000", 0x48}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r3) writev(r3, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000540)={'gre0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x7800, 0x20, 0x7, 0x99, {{0x1e, 0x4, 0x3, 0x2b, 0x78, 0x68, 0x0, 0x4, 0x2f, 0x0, @loopback, @loopback, {[@ssrr={0x89, 0x7, 0xb2, [@loopback]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xc2, 0x3, 0x4, [{@broadcast, 0xfffffff7}, {@rand_addr=0x64010101, 0x2}, {@loopback, 0x6}, {@dev={0xac, 0x14, 0x14, 0x3}, 0x5}, {@multicast1, 0xd}]}, @timestamp_prespec={0x44, 0x2c, 0xc, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x7}, {@loopback, 0xf23}, {@rand_addr=0x64010100, 0x37c75fce}]}]}}}}}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={r1, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@getqdisc={0x30, 0x26, 0x300, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x7, 0x3}, {0x3, 0xfff2}, {0x4, 0xfff2}}, [{0x4}, {0x4}, {0x4}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x168, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x138, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0xec, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3000000}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xc00}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xff}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5ac}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x44, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xf7}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xfc}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x24, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x7fffffff}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x78}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @local}]}}]}, 0x168}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000480}, 0xc, &(0x7f0000000680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000325bd7000ffdbdf250b0000003800018008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="1400020064756d6d793000000000000000000000080003000100000008000300030000005c00018008000100", @ANYRES32=0x0, @ANYBLOB="feff00a6", @ANYRES32=r9, @ANYBLOB="080003000100000008000100", @ANYRES32=r12, @ANYBLOB="08000300020000001400020076657468305f766c616e00000000000014000200687372300000000000000000000000000800030000000000"], 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x88) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="64000000100001042abd8d000000000000000000", @ANYRES32=0x0, @ANYBLOB="cc81000000000000300012800b000100697036746e6c00002000028006000f000000000014000200fe8000000000000000000000000000171400030068"], 0x64}, 0x1, 0x0, 0x0, 0x8c1}, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 76.760926][ T5812] cgroup: Unknown subsys name 'net' [ 76.879906][ T5812] cgroup: Unknown subsys name 'cpuset' [ 76.888547][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.477269][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.565521][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.575254][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.583808][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.584512][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.592554][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.606233][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.607978][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.614700][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.628797][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.629291][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.636608][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.644195][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.658661][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.658989][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.666519][ T5847] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.675440][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.683390][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.687702][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.694925][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.702436][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.716025][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.723441][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.731941][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.740391][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.767567][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.318930][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 81.430328][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 81.558022][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 81.575414][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 81.604338][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 81.721150][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.728836][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.736121][ T5829] bridge_slave_0: entered allmulticast mode [ 81.743274][ T5829] bridge_slave_0: entered promiscuous mode [ 81.787768][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.795068][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.802312][ T5829] bridge_slave_1: entered allmulticast mode [ 81.809980][ T5829] bridge_slave_1: entered promiscuous mode [ 81.828376][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.835693][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.843215][ T5824] bridge_slave_0: entered allmulticast mode [ 81.850699][ T5824] bridge_slave_0: entered promiscuous mode [ 81.858568][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.865918][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.873102][ T5824] bridge_slave_1: entered allmulticast mode [ 81.880252][ T5824] bridge_slave_1: entered promiscuous mode [ 81.981273][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.993956][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.024160][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.036721][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.066649][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.073907][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.081268][ T5825] bridge_slave_0: entered allmulticast mode [ 82.088984][ T5825] bridge_slave_0: entered promiscuous mode [ 82.096627][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.103798][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.111245][ T5841] bridge_slave_0: entered allmulticast mode [ 82.118325][ T5841] bridge_slave_0: entered promiscuous mode [ 82.135943][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.143121][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.150469][ T5826] bridge_slave_0: entered allmulticast mode [ 82.157611][ T5826] bridge_slave_0: entered promiscuous mode [ 82.177991][ T5829] team0: Port device team_slave_0 added [ 82.186208][ T5829] team0: Port device team_slave_1 added [ 82.192196][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.199589][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.207219][ T5825] bridge_slave_1: entered allmulticast mode [ 82.214420][ T5825] bridge_slave_1: entered promiscuous mode [ 82.221933][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.229113][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.236795][ T5841] bridge_slave_1: entered allmulticast mode [ 82.243925][ T5841] bridge_slave_1: entered promiscuous mode [ 82.261327][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.268615][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.275997][ T5826] bridge_slave_1: entered allmulticast mode [ 82.283143][ T5826] bridge_slave_1: entered promiscuous mode [ 82.332191][ T5824] team0: Port device team_slave_0 added [ 82.348773][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.355918][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.382719][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.419195][ T5824] team0: Port device team_slave_1 added [ 82.436193][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.443439][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.469724][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.483167][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.496528][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.508406][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.521482][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.543007][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.556179][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.646157][ T5825] team0: Port device team_slave_0 added [ 82.652920][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.660081][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.686533][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.701066][ T5826] team0: Port device team_slave_0 added [ 82.708888][ T5841] team0: Port device team_slave_0 added [ 82.716706][ T5826] team0: Port device team_slave_1 added [ 82.724662][ T5825] team0: Port device team_slave_1 added [ 82.730969][ T5846] Bluetooth: hci3: command tx timeout [ 82.737254][ T5146] Bluetooth: hci4: command tx timeout [ 82.745609][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.752558][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.778808][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.810868][ T5841] team0: Port device team_slave_1 added [ 82.815354][ T5846] Bluetooth: hci0: command tx timeout [ 82.816554][ T5146] Bluetooth: hci1: command tx timeout [ 82.822061][ T5832] Bluetooth: hci2: command tx timeout [ 82.856924][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.863908][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.890172][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.930612][ T5829] hsr_slave_0: entered promiscuous mode [ 82.937418][ T5829] hsr_slave_1: entered promiscuous mode [ 82.955008][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.961985][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.988470][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.000760][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.008289][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.034716][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.046707][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.053680][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.079961][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.091503][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.098665][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.125144][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.156206][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.163268][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.189588][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.263653][ T5824] hsr_slave_0: entered promiscuous mode [ 83.270973][ T5824] hsr_slave_1: entered promiscuous mode [ 83.277473][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 83.283350][ T5824] Cannot create hsr debugfs directory [ 83.329899][ T5841] hsr_slave_0: entered promiscuous mode [ 83.336753][ T5841] hsr_slave_1: entered promiscuous mode [ 83.342791][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 83.348793][ T5841] Cannot create hsr debugfs directory [ 83.448426][ T5826] hsr_slave_0: entered promiscuous mode [ 83.455172][ T5826] hsr_slave_1: entered promiscuous mode [ 83.461241][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 83.467319][ T5826] Cannot create hsr debugfs directory [ 83.478898][ T5825] hsr_slave_0: entered promiscuous mode [ 83.486031][ T5825] hsr_slave_1: entered promiscuous mode [ 83.492197][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 83.498792][ T5825] Cannot create hsr debugfs directory [ 83.989920][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.007038][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.015884][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.027520][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.035859][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.046205][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.062299][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.072036][ T5829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.127303][ T5824] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.140726][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.152409][ T5824] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.162888][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.174042][ T5824] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.185532][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.200331][ T5824] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.210347][ T5824] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.311770][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.326375][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.358843][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.368335][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.377086][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.387943][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.396275][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.406591][ T5841] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.483444][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.496693][ T5825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.508201][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.516702][ T5825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.526069][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.534093][ T5825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.543914][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.562920][ T5825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.572816][ T5825] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.676386][ T5826] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.687577][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.696648][ T5826] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.707177][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.716237][ T5826] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.726142][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.734039][ T5826] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.745506][ T5826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.761088][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.798228][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.805669][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.813631][ T5832] Bluetooth: hci4: command tx timeout [ 84.820404][ T5846] Bluetooth: hci3: command tx timeout [ 84.841126][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.848405][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.885335][ T5832] Bluetooth: hci0: command tx timeout [ 84.891155][ T5832] Bluetooth: hci2: command tx timeout [ 84.898186][ T5846] Bluetooth: hci1: command tx timeout [ 84.910444][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.946075][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.972877][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.030597][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.040216][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.059028][ T176] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.066231][ T176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.078715][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.106088][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.113248][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.123366][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.130593][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.170353][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.177647][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.212062][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.219468][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.266434][ T128] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.273781][ T128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.352153][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.442043][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.469636][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.582820][ T3529] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.590179][ T3529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.608078][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.615328][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.732320][ T5829] veth0_vlan: entered promiscuous mode [ 85.810921][ T5829] veth1_vlan: entered promiscuous mode [ 85.837030][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.930996][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.029486][ T5829] veth0_macvtap: entered promiscuous mode [ 86.054477][ T5829] veth1_macvtap: entered promiscuous mode [ 86.123931][ T5841] veth0_vlan: entered promiscuous mode [ 86.150033][ T5825] veth0_vlan: entered promiscuous mode [ 86.161204][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.178882][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.199539][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.209020][ T5825] veth1_vlan: entered promiscuous mode [ 86.227484][ T5841] veth1_vlan: entered promiscuous mode [ 86.275405][ T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.306128][ T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.315773][ T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.330535][ T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.390624][ T5841] veth0_macvtap: entered promiscuous mode [ 86.415755][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.429864][ T5841] veth1_macvtap: entered promiscuous mode [ 86.519265][ T5824] veth0_vlan: entered promiscuous mode [ 86.533043][ T5825] veth0_macvtap: entered promiscuous mode [ 86.557097][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.597591][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.597648][ T5824] veth1_vlan: entered promiscuous mode [ 86.623360][ T5825] veth1_macvtap: entered promiscuous mode [ 86.644037][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.706041][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.728280][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.745325][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.764163][ T5824] veth0_macvtap: entered promiscuous mode [ 86.764967][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.820238][ T1115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.862007][ T5824] veth1_macvtap: entered promiscuous mode [ 86.873786][ T1115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.890866][ T1115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.896304][ T5832] Bluetooth: hci3: command tx timeout [ 86.912616][ T5846] Bluetooth: hci4: command tx timeout [ 86.918930][ T1115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.922335][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 86.961934][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.969581][ T5846] Bluetooth: hci0: command tx timeout [ 86.977260][ T5846] Bluetooth: hci2: command tx timeout [ 86.977269][ T5832] Bluetooth: hci1: command tx timeout [ 86.991945][ T1115] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.007788][ T1115] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.020394][ T1115] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.097421][ T1115] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.295803][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.334219][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.385014][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.392995][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.401449][ T176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.462052][ T5826] veth0_vlan: entered promiscuous mode [ 87.508486][ T176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.525528][ T176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.564664][ T176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.599907][ T5826] veth1_vlan: entered promiscuous mode [ 87.688713][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.700643][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.719344][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.721440][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.840558][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.857131][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.883183][ T5826] veth0_macvtap: entered promiscuous mode [ 87.977344][ T5826] veth1_macvtap: entered promiscuous mode [ 87.994061][ T5960] netlink: 'syz.3.9': attribute type 51 has an invalid length. [ 88.024259][ T128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.030675][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.050662][ T128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.071808][ T5962] rdma_op ffff88802d8619f0 conn xmit_rdma 0000000000000000 [ 88.113480][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.218501][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.242018][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.267097][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.369754][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.380824][ T5971] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET) [ 88.406324][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.427161][ T5969] Zero length message leads to an empty skb [ 88.460689][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.498497][ T5976] xt_ipcomp: unknown flags 1D [ 88.551987][ T5979] netlink: 'syz.2.14': attribute type 9 has an invalid length. [ 88.581445][ T5979] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14'. [ 88.670580][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.675896][ T5984] netlink: 'syz.1.15': attribute type 7 has an invalid length. [ 88.693683][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.757067][ T5984] netlink: 'syz.1.15': attribute type 8 has an invalid length. [ 88.856049][ T1115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.873810][ T1115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.965529][ T5846] Bluetooth: hci4: command tx timeout [ 88.971101][ T5846] Bluetooth: hci3: command tx timeout [ 89.046451][ T5832] Bluetooth: hci1: command tx timeout [ 89.046475][ T5846] Bluetooth: hci2: command tx timeout [ 89.046506][ T5846] Bluetooth: hci0: command tx timeout [ 89.072156][ T5993] warning: `syz.0.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 89.277261][ T5998] netlink: 60 bytes leftover after parsing attributes in process `syz.0.18'. [ 89.290120][ T6008] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22'. [ 89.322133][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 89.475620][ T6011] netlink: 'syz.4.5': attribute type 33 has an invalid length. [ 89.597337][ T6020] xt_limit: Overflow, try lower: 604147548/4200216962 [ 89.752524][ T6023] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.25'. [ 89.873363][ T1169] IPVS: starting estimator thread 0... [ 89.965036][ T6036] IPVS: using max 30 ests per chain, 72000 per kthread [ 90.271763][ T6045] netlink: 16 bytes leftover after parsing attributes in process `syz.4.29'. [ 92.089612][ T9] cfg80211: failed to load regulatory.db [ 92.239768][ T6001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.401206][ T6047] tipc: Enabling of bearer rejected, media not registered [ 92.607957][ T6058] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 92.742171][ T6062] netlink: 24 bytes leftover after parsing attributes in process `syz.1.35'. [ 92.988676][ T6067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.38'. [ 93.053272][ T6070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.40'. [ 93.115409][ T6071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.38'. [ 93.540165][ T6093] netlink: 'syz.0.47': attribute type 1 has an invalid length. [ 93.667640][ T6100] __nla_validate_parse: 1 callbacks suppressed [ 93.667663][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.49'. [ 93.718934][ T6100] netlink: 'syz.2.49': attribute type 1 has an invalid length. [ 93.762969][ T6097] netlink: 7 bytes leftover after parsing attributes in process `syz.4.48'. [ 94.064691][ T6118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.53'. [ 94.089544][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.55'. [ 94.163282][ T6120] vlan2: entered allmulticast mode [ 94.249958][ T6120] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 94.271692][ T6133] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.439605][ T6142] syz.1.58 uses old SIOCAX25GETINFO [ 94.633278][ T6146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.59'. [ 94.655720][ T6148] netlink: 'syz.4.60': attribute type 2 has an invalid length. [ 94.743483][ T6148] 9: entered promiscuous mode [ 95.166581][ T6176] netlink: 'syz.3.68': attribute type 24 has an invalid length. [ 95.216212][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'. [ 95.342430][ T6179] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.420618][ T6181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.429524][ T6181] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 95.441612][ T6181] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 95.458668][ T6181] bond1: (slave xfrm1): making interface the new active one [ 95.468307][ T6181] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 95.769556][ T6215] netlink: 'syz.0.76': attribute type 1 has an invalid length. [ 95.813873][ T6215] netlink: 244 bytes leftover after parsing attributes in process `syz.0.76'. [ 96.168906][ T6234] batadv0: entered allmulticast mode [ 96.361731][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.84'. [ 96.688888][ T6253] trusted_key: syz.3.87 sent an empty control message without MSG_MORE. [ 96.897382][ T6248] syzkaller0: entered promiscuous mode [ 96.902957][ T6248] syzkaller0: entered allmulticast mode [ 99.060734][ T6304] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 99.130832][ T6302] Set syz1 is full, maxelem 768 reached [ 99.193927][ T6309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 99.226845][ T6314] netlink: 'syz.2.102': attribute type 7 has an invalid length. [ 99.257081][ T6312] tipc: Started in network mode [ 99.262248][ T6312] tipc: Node identity e0000001, cluster identity 4711 [ 99.293948][ T6312] tipc: Enabling of bearer rejected, failed to enable media [ 99.327860][ T1115] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.348629][ T6314] netlink: 'syz.2.102': attribute type 7 has an invalid length. [ 99.364894][ T1115] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.436968][ T1115] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.474904][ T1115] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.577396][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.104'. [ 99.720126][ T6327] ip6tnl1: entered allmulticast mode [ 99.741955][ T6331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.108'. [ 99.950029][ T6338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.111'. [ 100.043711][ T6346] netlink: 830 bytes leftover after parsing attributes in process `syz.1.112'. [ 100.071219][ T6349] netlink: 72 bytes leftover after parsing attributes in process `syz.0.113'. [ 100.268937][ T6358] tipc: Can't bind to reserved service type 1 [ 100.585037][ T176] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.593112][ T176] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.611312][ T5980] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.739492][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz.1.123'. [ 100.762429][ T5980] IPVS: starting estimator thread 0... [ 100.854858][ T6393] IPVS: using max 30 ests per chain, 72000 per kthread [ 100.870788][ T6387] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.876750][ T5926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.975770][ T5926] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 100.987067][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.127'. [ 101.034053][ T6408] delete_channel: no stack [ 101.109657][ T6407] delete_channel: no stack [ 101.149879][ T6416] netlink: 20 bytes leftover after parsing attributes in process `syz.3.129'. [ 101.274339][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.132'. [ 101.364115][ T6430] Cannot find add_set index 2 as target [ 101.377178][ T6424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.131'. [ 101.427780][ T6430] Cannot find add_set index 2 as target [ 101.433705][ T6430] Cannot find add_set index 2 as target [ 101.488709][ T6430] Cannot find add_set index 2 as target [ 101.502837][ T6430] Cannot find add_set index 2 as target [ 101.519581][ T6430] Cannot find add_set index 2 as target [ 101.533565][ T43] IPVS: starting estimator thread 0... [ 101.536602][ T6430] Cannot find add_set index 2 as target [ 101.569552][ T6430] Cannot find add_set index 2 as target [ 101.579013][ T6430] Cannot find add_set index 2 as target [ 101.600678][ T6430] Cannot find add_set index 2 as target [ 101.625250][ T6444] IPVS: using max 24 ests per chain, 57600 per kthread [ 101.727252][ T6413] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.741804][ T6413] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.756743][ T6413] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.786880][ T6413] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.023932][ T6467] netlink: 'syz.2.141': attribute type 1 has an invalid length. [ 102.709618][ T6502] syzkaller0: entered promiscuous mode [ 102.754123][ T6502] syzkaller0: entered allmulticast mode [ 103.075667][ T6517] syzkaller0: entered promiscuous mode [ 103.086651][ T6517] syzkaller0: entered allmulticast mode [ 103.116245][ T6525] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 103.181860][ T6525] bond3: entered promiscuous mode [ 103.187476][ T6525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.270317][ T6522] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 103.298349][ T6522] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 103.309320][ T6522] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 103.483571][ T6530] bond0: (slave bond_slave_0): Releasing backup interface [ 103.535446][ T6530] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 103.617355][ T6542] tc_dump_action: action bad kind [ 103.946603][ T6552] netlink: 'syz.0.165': attribute type 1 has an invalid length. [ 103.997576][ T6554] netlink: 'syz.1.166': attribute type 5 has an invalid length. [ 104.276109][ T6566] xt_hashlimit: size too large, truncated to 1048576 [ 104.399265][ T6573] geneve2: entered promiscuous mode [ 104.480393][ T6568] netlink: 'syz.2.171': attribute type 5 has an invalid length. [ 104.725120][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 105.185312][ T6603] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 105.555271][ T6603] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.586611][ T6617] __nla_validate_parse: 12 callbacks suppressed [ 105.586633][ T6617] netlink: 96 bytes leftover after parsing attributes in process `syz.0.185'. [ 105.659487][ T6601] bond1: (slave veth0_to_bond): making interface the new active one [ 105.725185][ T6601] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 105.770153][ T6612] bridge2: entered promiscuous mode [ 105.791708][ T6617] 8021q: VLANs not supported on gre0 [ 106.017952][ T6629] netlink: 24 bytes leftover after parsing attributes in process `syz.1.188'. [ 106.122185][ T6636] netlink: 'syz.4.189': attribute type 33 has an invalid length. [ 106.217510][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 106.227209][ T6641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.190'. [ 106.294069][ T6636] bond2: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 106.351735][ T6636] bond2 (unregistering): Released all slaves [ 106.520149][ T6653] netlink: 244 bytes leftover after parsing attributes in process `syz.3.194'. [ 106.623742][ T6643] netlink: 'syz.2.191': attribute type 21 has an invalid length. [ 106.645318][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 106.659891][ T6643] netlink: 'syz.2.191': attribute type 21 has an invalid length. [ 106.675043][ T6643] netlink: 4 bytes leftover after parsing attributes in process `syz.2.191'. [ 106.785893][ T6664] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 106.799978][ T6664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.871168][ T6669] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.198'. [ 106.928810][ T6672] netlink: 'syz.0.199': attribute type 17 has an invalid length. [ 107.046820][ T6664] vlan3: entered allmulticast mode [ 107.260437][ T6672] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.268860][ T6672] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.321697][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz.2.201'. [ 107.370356][ T6685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'. [ 107.392502][ T6689] netlink: 'syz.4.202': attribute type 1 has an invalid length. [ 107.556555][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.572880][ T6672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.795621][ T6686] bond0: (slave bond_slave_0): Releasing backup interface [ 107.818885][ T6686] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 107.839440][ T6706] netlink: 'syz.1.205': attribute type 1 has an invalid length. [ 107.869133][ T176] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.898137][ T176] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.985898][ T176] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.008022][ T176] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.499381][ T6735] syzkaller0: entered promiscuous mode [ 108.524949][ T6735] syzkaller0: entered allmulticast mode [ 108.845379][ T6748] mac80211_hwsim hwsim9 : renamed from wlan1 [ 109.490482][ T6790] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 109.660664][ T6801] netlink: 'syz.0.232': attribute type 2 has an invalid length. [ 110.799327][ T6870] syzkaller0: entered promiscuous mode [ 110.851219][ T6873] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 110.866082][ T6870] syzkaller0: entered allmulticast mode [ 110.914496][ T6876] nbd: couldn't find device at index 65536 [ 110.962434][ T6880] SET target dimension over the limit! [ 110.972369][ T6876] netlink: 'syz.0.256': attribute type 1 has an invalid length. [ 111.024527][ T6884] __nla_validate_parse: 9 callbacks suppressed [ 111.024548][ T6884] netlink: 52 bytes leftover after parsing attributes in process `syz.0.256'. [ 111.119955][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.0.256'. [ 111.189503][ T6899] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.274066][ T6888] bond2 (unregistering): Released all slaves [ 111.513390][ T6910] netlink: 312 bytes leftover after parsing attributes in process `syz.0.266'. [ 112.822120][ T6930] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 112.849129][ T6930] syzkaller1: linktype set to 823 [ 112.869642][ T6933] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 113.005867][ T6935] netlink: 9 bytes leftover after parsing attributes in process `syz.4.275'. [ 113.017554][ T6938] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 113.039941][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.276'. [ 113.073414][ T6939] netlink: 176 bytes leftover after parsing attributes in process `syz.2.276'. [ 113.086027][ T6939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.276'. [ 113.195217][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'. [ 113.204974][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.489328][ T6961] netlink: 32 bytes leftover after parsing attributes in process `syz.2.280'. [ 113.650327][ T6974] ip6gre1: entered allmulticast mode [ 113.751314][ T6985] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.286'. [ 114.296600][ T7020] Bluetooth: MGMT ver 1.23 [ 114.337160][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.094683][ T7064] netlink: 'syz.0.307': attribute type 21 has an invalid length. [ 115.115577][ T7064] netlink: 'syz.0.307': attribute type 4 has an invalid length. [ 115.129986][ T7064] netlink: 'syz.0.307': attribute type 5 has an invalid length. [ 115.144549][ T7064] netlink: 'syz.0.307': attribute type 21 has an invalid length. [ 115.154172][ T7064] netlink: 'syz.0.307': attribute type 4 has an invalid length. [ 115.162106][ T7064] netlink: 'syz.0.307': attribute type 5 has an invalid length. [ 115.376792][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.605343][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.704031][ T7090] erspan0: entered promiscuous mode [ 115.762229][ T7094] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 116.065424][ T7094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.116301][ T7100] bond1: (slave veth0_to_bond): Releasing active interface [ 116.133490][ T7100] bond2: (slave veth0_to_bond): making interface the new active one [ 116.207499][ T7100] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 116.430085][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.430975][ T7105] bond2: (slave veth3): Enslaving as an active interface with a down link [ 116.451271][ T7110] __nla_validate_parse: 7 callbacks suppressed [ 116.451291][ T7110] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.320'. [ 116.475268][ T7105] netlink: 'syz.2.317': attribute type 1 has an invalid length. [ 116.483640][ T7105] netlink: 'syz.2.317': attribute type 2 has an invalid length. [ 116.497357][ T7105] netlink: 20 bytes leftover after parsing attributes in process `syz.2.317'. [ 116.532768][ T7123] syzkaller1: entered promiscuous mode [ 116.550671][ T7123] syzkaller1: entered allmulticast mode [ 116.721933][ T7137] netlink: 204 bytes leftover after parsing attributes in process `syz.2.326'. [ 116.775601][ T7137] netlink: 'syz.2.326': attribute type 2 has an invalid length. [ 116.914445][ T7135] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 116.932341][ T7135] syzkaller1: Refused to change device type [ 116.945409][ T5884] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.165305][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.199418][ T7157] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.332'. [ 117.280128][ T7164] netlink: 224 bytes leftover after parsing attributes in process `syz.4.334'. [ 117.334431][ T7165] netlink: 404 bytes leftover after parsing attributes in process `syz.4.334'. [ 117.374931][ T7165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.334'. [ 117.407272][ T7165] netlink: 28 bytes leftover after parsing attributes in process `syz.4.334'. [ 117.423342][ T7165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.334'. [ 117.448625][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.734486][ T7182] netlink: 28 bytes leftover after parsing attributes in process `syz.4.340'. [ 117.761759][ T7182] openvswitch: netlink: IP tunnel TTL not specified. [ 118.076132][ T7200] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 118.108301][ T7200] Cannot find set identified by id 1 to match [ 118.138428][ T7203] Cannot find set identified by id 1 to match [ 118.173853][ T7202] syzkaller0: entered allmulticast mode [ 118.326617][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.453204][ T7210] IPVS: set_ctl: invalid protocol: 16 0.0.0.0:256 [ 118.489626][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.655935][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.961929][ T7236] block nbd4: not configured, cannot reconfigure [ 119.388782][ T7255] IPVS: length: 8 != 1152 [ 119.527640][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.584420][ T7262] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 119.610406][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.670392][ T7262] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 120.251774][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.261504][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.565609][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.624596][ T7305] veth3: entered promiscuous mode [ 120.645817][ T7305] veth3: entered allmulticast mode [ 120.663754][ T7310] validate_nla: 4 callbacks suppressed [ 120.663773][ T7310] netlink: 'syz.1.375': attribute type 7 has an invalid length. [ 120.680218][ T7310] netlink: 'syz.1.375': attribute type 8 has an invalid length. [ 121.168392][ T7343] ip6gre2: entered allmulticast mode [ 121.381424][ T7359] netlink: 'syz.1.389': attribute type 7 has an invalid length. [ 121.834574][ T7394] workqueue: name exceeds WQ_NAME_LEN. Truncating to: Ku crK:̥B| [ 121.959588][ T7405] __nla_validate_parse: 10 callbacks suppressed [ 121.959609][ T7405] netlink: 16 bytes leftover after parsing attributes in process `syz.3.401'. [ 121.975636][ T7403] x_tables: duplicate underflow at hook 3 [ 121.985724][ T7403] netlink: 16 bytes leftover after parsing attributes in process `syz.4.402'. [ 122.008434][ T7403] netlink: 13 bytes leftover after parsing attributes in process `syz.4.402'. [ 122.047426][ T7408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.402'. [ 122.082804][ T7410] netlink: 'syz.1.403': attribute type 61 has an invalid length. [ 122.128786][ T7410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.403'. [ 122.151432][ T7403] veth3: entered promiscuous mode [ 122.193435][ T7415] tls_set_device_offload: netdev not found [ 122.415774][ T7428] x_tables: duplicate underflow at hook 3 [ 122.457730][ T7433] netlink: 144 bytes leftover after parsing attributes in process `syz.1.406'. [ 122.787656][ T7442] syzkaller1: entered promiscuous mode [ 122.821269][ T7442] syzkaller1: entered allmulticast mode [ 122.922283][ T7450] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 122.941259][ T7450] netlink: 'syz.4.415': attribute type 1 has an invalid length. [ 122.949223][ T7450] netlink: 228 bytes leftover after parsing attributes in process `syz.4.415'. [ 123.199678][ T7463] nft_compat: unsupported protocol 0 [ 123.218321][ T7465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.419'. [ 123.275024][ T7472] : renamed from vxcan1 (while UP) [ 123.413291][ T7478] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 123.689106][ T43] net_ratelimit: 10 callbacks suppressed [ 123.689127][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.745579][ T7491] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.428'. [ 123.761737][ T7491] netlink: Conntrack attr type has unexpected length (type=2, length=0, expected=2) [ 123.838696][ T7491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 124.207755][ T7521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.436'. [ 124.553004][ T7534] xt_hashlimit: size too large, truncated to 1048576 [ 124.717900][ T7545] syzkaller0: entered promiscuous mode [ 124.725204][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 124.744848][ T7545] syzkaller0: entered allmulticast mode [ 125.171404][ T7555] vlan2: entered allmulticast mode [ 125.176888][ T7555] bond0: entered allmulticast mode [ 125.182086][ T7555] bond_slave_1: entered allmulticast mode [ 125.281919][ T7558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.373605][ T7558] bond_slave_1: left allmulticast mode [ 125.394073][ T7558] bond0 (unregistering): Released all slaves [ 125.766046][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.801413][ T7586] syzkaller1: entered promiscuous mode [ 125.831307][ T7586] syzkaller1: entered allmulticast mode [ 126.058563][ T7568] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 126.327427][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.813216][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.163894][ T7633] netlink: 'syz.0.463': attribute type 2 has an invalid length. [ 127.445475][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.845617][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.917071][ T7663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.956002][ T7663] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.290166][ T7673] __nla_validate_parse: 9 callbacks suppressed [ 128.290190][ T7673] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.475'. [ 128.306999][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.476'. [ 128.356037][ T7673] bridge_slave_1: default FDB implementation only supports local addresses [ 128.626939][ T7687] netlink: 20 bytes leftover after parsing attributes in process `syz.2.480'. [ 128.627162][ T7680] bond1: entered promiscuous mode [ 128.691297][ T7687] netlink: 136 bytes leftover after parsing attributes in process `syz.2.480'. [ 128.704750][ T7670] net_ratelimit: 971 callbacks suppressed [ 128.704773][ T7670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.752504][ T7670] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 128.838793][ T7693] netlink: 4 bytes leftover after parsing attributes in process `syz.1.479'. [ 128.943273][ T7693] team0 (unregistering): Port device team_slave_0 removed [ 128.960360][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.001781][ T7702] sctp: [Deprecated]: syz.0.482 (pid 7702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.001781][ T7702] Use struct sctp_sack_info instead [ 129.039021][ T7693] team0 (unregistering): Port device team_slave_1 removed [ 129.124175][ T7710] xt_CT: You must specify a L4 protocol and not use inversions on it [ 129.166297][ T7710] bridge0: entered promiscuous mode [ 129.202830][ T7710] macsec1: entered promiscuous mode [ 129.211550][ T7710] macsec1: entered allmulticast mode [ 129.246597][ T7710] bridge0: entered allmulticast mode [ 129.264043][ T7710] bridge0: port 3(macsec1) entered blocking state [ 129.285513][ T7710] bridge0: port 3(macsec1) entered disabled state [ 129.309330][ T7710] bridge0: left allmulticast mode [ 129.317200][ T7720] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 129.326101][ T7710] bridge0: left promiscuous mode [ 129.342459][ T7718] batman_adv: batadv0: Adding interface: dummy0 [ 129.353365][ T7718] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.382110][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.382853][ T7718] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 129.396814][ T7713] netlink: 'syz.3.486': attribute type 1 has an invalid length. [ 129.412997][ T7693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.501941][ T7713] syzkaller0: entered promiscuous mode [ 129.521552][ T7713] syzkaller0: entered allmulticast mode [ 129.846763][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.008954][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.173610][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.492'. [ 130.356264][ T7743] netlink: 'syz.4.493': attribute type 1 has an invalid length. [ 130.364175][ T7743] netlink: 96 bytes leftover after parsing attributes in process `syz.4.493'. [ 130.385859][ T7743] netlink: 1 bytes leftover after parsing attributes in process `syz.4.493'. [ 130.417758][ T7743] netlink: 658 bytes leftover after parsing attributes in process `syz.4.493'. [ 130.439557][ T7744] netlink: 'syz.4.493': attribute type 1 has an invalid length. [ 130.495146][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.512518][ T7743] netlink: 28 bytes leftover after parsing attributes in process `syz.4.493'. [ 131.056374][ T43] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.125018][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 131.606092][ T7744] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 131.859943][ T7761] netlink: 'syz.3.497': attribute type 1 has an invalid length. [ 132.034300][ T7763] bond2: (slave gretap2): making interface the new active one [ 132.069245][ T7763] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 132.096472][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.188457][ T7761] macvlan2: entered promiscuous mode [ 132.193832][ T7761] macvlan2: entered allmulticast mode [ 132.225931][ T7761] bond2: entered promiscuous mode [ 132.240010][ T7761] gretap2: entered promiscuous mode [ 132.263081][ T7761] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 132.285242][ T7761] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 132.330469][ T7761] bond2: left promiscuous mode [ 132.360203][ T7761] gretap2: left promiscuous mode [ 132.366393][ T7780] xt_CT: You must specify a L4 protocol and not use inversions on it [ 132.747937][ T7790] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 132.952233][ T7799] netlink: 'syz.1.509': attribute type 10 has an invalid length. [ 133.050114][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.059405][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.122063][ T7810] netlink: 'syz.0.512': attribute type 2 has an invalid length. [ 133.136138][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 133.218828][ T7805] syzkaller0: entered allmulticast mode [ 133.281716][ T7813] lo speed is unknown, defaulting to 1000 [ 133.299621][ T7813] lo speed is unknown, defaulting to 1000 [ 133.390670][ T7813] lo speed is unknown, defaulting to 1000 [ 133.431096][ T7827] __nla_validate_parse: 7 callbacks suppressed [ 133.431115][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.517'. [ 133.617722][ T7831] bond2: entered promiscuous mode [ 133.672178][ T7831] bond2: entered allmulticast mode [ 133.681640][ T7831] 8021q: adding VLAN 0 to HW filter on device bond2 [ 133.822528][ T7827] netlink: 24 bytes leftover after parsing attributes in process `syz.4.517'. [ 134.156891][ T7813] infiniband syz2: set active [ 134.171010][ T7813] infiniband syz2: added lo [ 134.177762][ T24] net_ratelimit: 1 callbacks suppressed [ 134.177782][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.238977][ T7813] RDS/IB: syz2: added [ 134.243740][ T7813] smc: adding ib device syz2 with port count 1 [ 134.254575][ T7813] smc: ib device syz2 port 1 has no pnetid [ 134.346288][ T7867] netlink: 'syz.4.526': attribute type 1 has an invalid length. [ 134.401522][ T5884] lo speed is unknown, defaulting to 1000 [ 134.419884][ T5836] lo speed is unknown, defaulting to 1000 [ 134.450739][ T7813] lo speed is unknown, defaulting to 1000 [ 134.578327][ T7876] netlink: 'syz.4.529': attribute type 1 has an invalid length. [ 135.205091][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.289536][ T7813] lo speed is unknown, defaulting to 1000 [ 135.690454][ T7813] lo speed is unknown, defaulting to 1000 [ 135.821160][ T7923] netlink: 'syz.4.545': attribute type 2 has an invalid length. [ 136.139953][ T7936] netlink: 'syz.2.549': attribute type 3 has an invalid length. [ 136.247655][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.290474][ T7938] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.299253][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.313962][ T7940] netlink: 4 bytes leftover after parsing attributes in process `syz.2.551'. [ 136.323975][ T7940] bridge_slave_1: left allmulticast mode [ 136.331353][ T7940] bridge_slave_1: left promiscuous mode [ 136.340744][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.354177][ T7940] bridge_slave_0: left allmulticast mode [ 136.370361][ T7940] bridge_slave_0: left promiscuous mode [ 136.377814][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.492968][ T7952] netlink: 'syz.2.551': attribute type 8 has an invalid length. [ 136.501204][ T7813] lo speed is unknown, defaulting to 1000 [ 136.566113][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.987710][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.556'. [ 137.023976][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.556'. [ 137.128209][ T7976] netlink: 'syz.2.557': attribute type 10 has an invalid length. [ 137.211846][ T7976] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 137.219982][ T7980] netlink: 92 bytes leftover after parsing attributes in process `syz.0.558'. [ 137.230607][ T7813] lo speed is unknown, defaulting to 1000 [ 137.298748][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.556551][ T7986] gtp0: entered promiscuous mode [ 137.562084][ T7986] gtp0: entered allmulticast mode [ 137.693075][ T5884] IPVS: starting estimator thread 0... [ 137.705928][ T7992] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 137.797888][ T7993] IPVS: using max 24 ests per chain, 57600 per kthread [ 137.828048][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 137.971066][ T8006] : entered promiscuous mode [ 137.998952][ T7813] lo speed is unknown, defaulting to 1000 [ 137.998973][ T8007] tipc: Started in network mode [ 138.021780][ T8007] tipc: Node identity 401, cluster identity 4711 [ 138.043831][ T8007] tipc: Node number set to 1025 [ 138.147526][ T6413] tipc: Subscription rejected, illegal request [ 138.311402][ T8022] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.569'. [ 138.325120][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 138.448849][ T8026] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 138.899159][ T8041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.574'. [ 138.917747][ T8041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.574'. [ 139.365436][ T5884] net_ratelimit: 79 callbacks suppressed [ 139.365457][ T5884] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.449171][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.473587][ T8078] netlink: 12 bytes leftover after parsing attributes in process `syz.4.582'. [ 139.485741][ T8079] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 139.605342][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.674622][ T8090] netlink: 232 bytes leftover after parsing attributes in process `syz.1.586'. [ 139.758338][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.1.586'. [ 139.836564][ T8098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 139.866704][ T8099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 140.058176][ T8111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.592'. [ 140.064098][ T8113] xt_TCPMSS: Only works on TCP SYN packets [ 140.102012][ T8107] netem: change failed [ 140.175956][ T8117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.593'. [ 140.254808][ T8117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.593'. [ 140.406551][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.492683][ T8131] netlink: 'syz.1.599': attribute type 1 has an invalid length. [ 140.747746][ T8139] "syz.4.602" (8139) uses obsolete ecb(arc4) skcipher [ 140.869247][ T8152] IPv6: sit1: Disabled Multicast RS [ 140.965646][ T8158] netlink: 'syz.0.607': attribute type 4 has an invalid length. [ 141.445265][ T1169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.867467][ T8226] block nbd1: not configured, cannot reconfigure [ 142.060716][ T8234] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.447585][ T8258] netlink: 'syz.4.634': attribute type 10 has an invalid length. [ 142.628960][ T1169] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.647013][ T5836] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 142.697774][ T8278] Bluetooth: MGMT ver 1.23 [ 143.357538][ T8306] netlink: 'syz.0.642': attribute type 7 has an invalid length. [ 143.378705][ T8306] netlink: 'syz.0.642': attribute type 8 has an invalid length. [ 143.685282][ T5910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 143.829888][ T8327] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 144.080224][ T8343] __nla_validate_parse: 16 callbacks suppressed [ 144.080245][ T8343] netlink: 248 bytes leftover after parsing attributes in process `syz.3.656'. [ 144.236848][ T8344] bond3: entered allmulticast mode [ 144.296816][ T8345] bridge2: entered promiscuous mode [ 144.321462][ T8345] bridge2: entered allmulticast mode [ 144.360510][ T8345] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 144.433169][ T8348] bridge3: entered promiscuous mode [ 144.442717][ T8348] bridge3: entered allmulticast mode [ 144.472629][ T8348] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 144.579232][ T8372] netlink: 'syz.3.660': attribute type 16 has an invalid length. [ 144.611829][ T8357] bond4: option arp_all_targets: invalid value (18446744073709551613) [ 144.649101][ T8372] netlink: 'syz.3.660': attribute type 17 has an invalid length. [ 144.693463][ T8357] bond4 (unregistering): Released all slaves [ 144.725861][ T5923] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 144.781466][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.662'. [ 144.835065][ T8382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.662'. [ 144.862387][ T8361] IPv6: sit2: Disabled Multicast RS [ 145.022765][ T8372] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.143802][ T8382] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.151933][ T8382] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.390026][ T8382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.406750][ T8382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.564159][ T8382] vlan2: left allmulticast mode [ 145.572259][ T8382] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 145.596971][ T8382] veth3: left promiscuous mode [ 145.602405][ T8382] bond2: left promiscuous mode [ 145.608860][ T8382] bond2: left allmulticast mode [ 145.616509][ T8382] bond3: left allmulticast mode [ 145.622178][ T8382] bridge2: left promiscuous mode [ 145.628173][ T8382] bridge2: left allmulticast mode [ 145.634486][ T8382] bridge3: left promiscuous mode [ 145.640461][ T8382] bridge3: left allmulticast mode [ 145.647597][ T5836] lo speed is unknown, defaulting to 1000 [ 145.686955][ T8196] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.716015][ T8196] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.736170][ T8196] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.877306][ T8196] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.222573][ T8435] bond0: entered allmulticast mode [ 146.266965][ T8429] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 146.270550][ T8429] netlink: 32 bytes leftover after parsing attributes in process `syz.2.671'. [ 146.310420][ T8446] netlink: 96 bytes leftover after parsing attributes in process `syz.4.673'. [ 146.428351][ T8450] netlink: 'syz.0.675': attribute type 1 has an invalid length. [ 146.464478][ T8455] netlink: 96 bytes leftover after parsing attributes in process `syz.4.673'. [ 146.535849][ T8450] bond2: entered promiscuous mode [ 146.568224][ T8463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.576849][ T8450] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.599998][ T8464] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 146.681902][ T8459] bond2: (slave bridge3): making interface the new active one [ 146.690999][ T8459] bridge3: entered promiscuous mode [ 146.732276][ T8459] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 147.095875][ T8487] netlink: 72 bytes leftover after parsing attributes in process `syz.1.682'. [ 147.107486][ T8488] netlink: 212336 bytes leftover after parsing attributes in process `syz.0.683'. [ 147.255927][ T8493] netlink: 284 bytes leftover after parsing attributes in process `syz.4.684'. [ 147.344596][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 148.070741][ T8541] workqueue: Failed to create a rescuer kthread for wq "nfc8_nci_cmd_wq": -EINTR [ 150.298806][ T8500] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 150.321070][ T8532] netlink: 12 bytes leftover after parsing attributes in process `syz.4.691'. [ 150.733881][ T8602] netlink: 'syz.0.699': attribute type 1 has an invalid length. [ 150.954437][ T8602] bond3: entered promiscuous mode [ 150.970672][ T8602] 8021q: adding VLAN 0 to HW filter on device bond3 [ 151.073347][ T8595] bond3: (slave bridge4): making interface the new active one [ 151.104643][ T8595] bridge4: entered promiscuous mode [ 151.131669][ T8595] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 151.477660][ T8628] netlink: 92 bytes leftover after parsing attributes in process `syz.0.708'. [ 151.745420][ T8638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.712'. [ 152.033360][ T8649] veth3: entered promiscuous mode [ 152.065299][ T8649] veth3: entered allmulticast mode [ 152.318510][ T8654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'. [ 152.345180][ T8654] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 152.370584][ T8654] netlink: 164 bytes leftover after parsing attributes in process `syz.4.716'. [ 152.407027][ T8658] netlink: 'syz.0.717': attribute type 6 has an invalid length. [ 152.447309][ T8659] netlink: 'syz.0.717': attribute type 6 has an invalid length. [ 152.474512][ T8669] tipc: Enabled bearer , priority 0 [ 152.602634][ T8669] syzkaller0: entered promiscuous mode [ 152.625681][ T8669] syzkaller0: entered allmulticast mode [ 152.651766][ T8669] tipc: Resetting bearer [ 152.659011][ T8658] netlink: 16 bytes leftover after parsing attributes in process `syz.0.717'. [ 152.681896][ T8681] netlink: 1316 bytes leftover after parsing attributes in process `syz.3.719'. [ 152.691207][ T8681] openvswitch: netlink: Flow key attr not present in new flow. [ 152.718301][ T8670] netlink: 16 bytes leftover after parsing attributes in process `syz.0.717'. [ 152.777364][ T8668] tipc: Resetting bearer [ 152.888790][ T8692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.726'. [ 154.006388][ T8668] tipc: Disabling bearer [ 154.097406][ T9] tipc: Node number set to 3758096385 [ 154.590048][ T8719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.735'. [ 154.616082][ T8726] x_tables: unsorted entry at hook 2 [ 154.622440][ T8727] netlink: get zone limit has 4 unknown bytes [ 155.096031][ T8744] bridge0: port 3(gretap0) entered blocking state [ 155.097213][ T8742] netlink: 'syz.2.742': attribute type 5 has an invalid length. [ 155.105209][ T8744] bridge0: port 3(gretap0) entered disabled state [ 155.125894][ T8744] gretap0: entered allmulticast mode [ 155.147977][ T8744] gretap0: entered promiscuous mode [ 155.256762][ T8746] netlink: 'syz.0.744': attribute type 6 has an invalid length. [ 155.646659][ T8767] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 155.711529][ T8767] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 155.722452][ T8772] __nla_validate_parse: 2 callbacks suppressed [ 155.722472][ T8772] netlink: 8 bytes leftover after parsing attributes in process `syz.4.753'. [ 155.746124][ T8767] gretap1: entered promiscuous mode [ 155.751863][ T8767] gretap1: entered allmulticast mode [ 155.806461][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz.4.753'. [ 155.860962][ T8777] netlink: 'syz.4.753': attribute type 1 has an invalid length. [ 155.972732][ T8777] bond4: entered promiscuous mode [ 155.979130][ T8777] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.001797][ T8787] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.010008][ T8787] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 156.021257][ T8787] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 156.048525][ T8792] openvswitch: netlink: Tunnel attr 16 has unexpected len 20 expected 0 [ 156.072856][ T8787] bond4: (slave ip6gre1): making interface the new active one [ 156.080860][ T8787] ip6gre1: entered promiscuous mode [ 156.090634][ T8787] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 156.109493][ T8794] IPVS: Error connecting to the multicast addr [ 156.329053][ T8802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.761'. [ 156.439487][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 156.449979][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.764'. [ 156.459887][ T8808] chnl_net:caif_netlink_parms(): no params data found [ 156.705556][ T8819] x_tables: unsorted underflow at hook 1 [ 156.746631][ T8819] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.768'. [ 156.775731][ T8824] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.771'. [ 156.829177][ T8822] netlink: 'syz.3.769': attribute type 9 has an invalid length. [ 156.855831][ T8822] netlink: 'syz.3.769': attribute type 11 has an invalid length. [ 156.874081][ T8822] netlink: 'syz.3.769': attribute type 12 has an invalid length. [ 156.903212][ T8830] netlink: 'syz.4.773': attribute type 1 has an invalid length. [ 156.913366][ T8822] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.769'. [ 156.938222][ T8831] netlink: 'syz.3.769': attribute type 83 has an invalid length. [ 156.946209][ T8830] netlink: 244 bytes leftover after parsing attributes in process `syz.4.773'. [ 156.991813][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.3.769'. [ 157.009721][ T8835] IPVS: set_ctl: invalid protocol: 50 172.20.20.53:20000 [ 157.030047][ T8835] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20000 [ 157.199477][ T8848] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 157.617523][ T8871] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 157.738197][ T8873] netlink: 'syz.0.788': attribute type 3 has an invalid length. [ 157.899038][ T8885] xt_nfacct: accounting object `syz1' does not exist [ 158.263194][ T8901] bond5: Unable to set peer notification delay as MII monitoring is disabled [ 158.292355][ T8901] bond5 (unregistering): Released all slaves [ 158.889963][ T8945] netlink: 'syz.4.809': attribute type 4 has an invalid length. [ 159.050768][ T8949] ieee802154 phy0 wpan0: encryption failed: -22 [ 159.961647][ T8999] macvlan0: entered promiscuous mode [ 160.194783][ T5846] block nbd0: Receive control failed (result -32) [ 160.289492][ T9016] openvswitch: netlink: Key 26 has unexpected len 4 expected 16 [ 160.505728][ T9028] netlink: 'syz.1.837': attribute type 1 has an invalid length. [ 160.569618][ T9028] 8021q: adding VLAN 0 to HW filter on device bond4 [ 160.623084][ T9028] netlink: 'syz.1.837': attribute type 1 has an invalid length. [ 160.653796][ T9033] bond4: (slave veth3): Enslaving as an active interface with a down link [ 160.698421][ T9036] bond4: (slave veth5): Enslaving as an active interface with a down link [ 161.098752][ T9068] __nla_validate_parse: 11 callbacks suppressed [ 161.098768][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.847'. [ 161.238360][ T9068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.260447][ T9071] bond3: entered promiscuous mode [ 161.267456][ T9071] bond3: entered allmulticast mode [ 161.274180][ T9071] 8021q: adding VLAN 0 to HW filter on device bond3 [ 161.283454][ T9071] team0: Port device bond3 added [ 161.308995][ T9082] ip6gre2: entered allmulticast mode [ 161.405709][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 161.632641][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 161.641787][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 161.651681][ T9094] netlink: 'syz.1.856': attribute type 15 has an invalid length. [ 161.680168][ T8193] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 161.691801][ T9094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.856'. [ 161.703685][ T8193] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 161.714056][ T9094] netlink: 4 bytes leftover after parsing attributes in process `syz.1.856'. [ 161.723802][ T8193] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 161.747470][ T8193] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 161.763985][ T9094] netlink: 'syz.1.856': attribute type 15 has an invalid length. [ 161.969180][ T9107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.861'. [ 162.318218][ T9124] netlink: 'syz.1.866': attribute type 1 has an invalid length. [ 162.446061][ T9135] netlink: 408 bytes leftover after parsing attributes in process `syz.2.870'. [ 162.486554][ T9132] block nbd1: Unsupported socket: should be TCP or UNIX. [ 162.493174][ T9137] syzkaller0: entered promiscuous mode [ 162.529833][ T9137] syzkaller0: entered allmulticast mode [ 162.652587][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.871'. [ 162.945275][ T9156] netlink: 256 bytes leftover after parsing attributes in process `syz.0.875'. [ 163.351661][ T9182] batadv_slave_0: entered allmulticast mode [ 163.595292][ T9188] openvswitch: netlink: Flow actions attr not present in new flow. [ 163.780413][ T9188] RDS: rds_bind could not find a transport for fe88::1, load rds_tcp or rds_rdma? [ 164.119852][ T9196] lo speed is unknown, defaulting to 1000 [ 164.187317][ T9210] syzkaller1: entered promiscuous mode [ 164.216803][ T9210] syzkaller1: entered allmulticast mode [ 164.488044][ T9208] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 164.558117][ T9208] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 164.829809][ T9233] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.838438][ T9233] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.045457][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 165.067822][ T9240] pim6reg527: entered allmulticast mode [ 165.445024][ T9262] netlink: 'syz.4.905': attribute type 1 has an invalid length. [ 165.510324][ T9265] x_tables: duplicate underflow at hook 2 [ 166.333152][ T9303] lo speed is unknown, defaulting to 1000 [ 167.108531][ T9327] __nla_validate_parse: 3 callbacks suppressed [ 167.108624][ T9327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 167.135177][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.921'. [ 167.167920][ T9337] netlink: 'syz.4.921': attribute type 2 has an invalid length. [ 167.233653][ T9342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.922'. [ 167.715030][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 167.785789][ T9363] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 168.141171][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.0.933'. [ 168.218226][ T9388] netlink: 28 bytes leftover after parsing attributes in process `syz.3.934'. [ 168.380501][ T9393] netlink: 108 bytes leftover after parsing attributes in process `syz.0.936'. [ 168.406148][ T9393] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 168.541765][ T9403] netlink: 9124 bytes leftover after parsing attributes in process `syz.1.939'. [ 168.658631][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.941'. [ 169.369627][ T9454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.420163][ T9447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.435664][ T9465] syzkaller0: entered promiscuous mode [ 169.441385][ T9465] syzkaller0: entered allmulticast mode [ 170.551459][ T9477] delete_channel: no stack [ 170.569083][ T9477] delete_channel: no stack [ 170.582082][ T9477] delete_channel: no stack [ 170.612399][ T9477] delete_channel: no stack [ 170.634961][ T9477] delete_channel: no stack [ 170.653214][ T9477] delete_channel: no stack [ 170.670248][ T9477] delete_channel: no stack [ 170.691634][ T9477] delete_channel: no stack [ 170.712562][ T9477] delete_channel: no stack [ 170.749193][ T9477] delete_channel: no stack [ 170.776088][ T9477] delete_channel: no stack [ 170.781017][ T9477] delete_channel: no stack [ 170.792780][ T9477] delete_channel: no stack [ 170.812053][ T9477] delete_channel: no stack [ 170.826904][ T9477] delete_channel: no stack [ 170.841785][ T9477] delete_channel: no stack [ 170.865201][ T9477] delete_channel: no stack [ 170.869866][ T9477] delete_channel: no stack [ 170.874494][ T9477] delete_channel: no stack [ 170.916003][ T9477] delete_channel: no stack [ 171.026563][ T9477] delete_channel: no stack [ 171.054825][ T9477] delete_channel: no stack [ 171.069012][ T9477] delete_channel: no stack [ 171.095369][ T9477] delete_channel: no stack [ 171.100044][ T9477] delete_channel: no stack [ 171.124246][ T9477] delete_channel: no stack [ 171.167131][ T9477] delete_channel: no stack [ 171.171810][ T9477] delete_channel: no stack [ 171.178151][ T9541] lo speed is unknown, defaulting to 1000 [ 171.181034][ T9544] sctp: [Deprecated]: syz.3.969 (pid 9544) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.181034][ T9544] Use struct sctp_sack_info instead [ 171.241990][ T9477] delete_channel: no stack [ 171.252006][ T9477] delete_channel: no stack [ 171.257993][ T9477] delete_channel: no stack [ 171.272744][ T9477] delete_channel: no stack [ 171.298558][ T9477] delete_channel: no stack [ 171.572106][ T9562] gre1: entered promiscuous mode [ 172.394671][ T9607] __nla_validate_parse: 5 callbacks suppressed [ 172.434890][ T9607] netlink: 203984 bytes leftover after parsing attributes in process `syz.2.981'. [ 172.489780][ T9592] openvswitch: netlink: Message has -2 unknown bytes. [ 172.710190][ T9615] geneve2: entered promiscuous mode [ 172.731690][ T9615] geneve2: entered allmulticast mode [ 173.002468][ T9626] netlink: 'syz.2.985': attribute type 1 has an invalid length. [ 173.337554][ T9640] netlink: 44 bytes leftover after parsing attributes in process `syz.4.989'. [ 173.425927][ T9645] netlink: 14 bytes leftover after parsing attributes in process `syz.0.990'. [ 173.652234][ T9660] x_tables: duplicate underflow at hook 2 [ 174.091558][ T9667] netlink: 'syz.0.993': attribute type 1 has an invalid length. [ 174.219011][ T9682] netlink: 28 bytes leftover after parsing attributes in process `syz.0.993'. [ 174.326408][ T9674] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 174.380952][ T9682] 8021q: adding VLAN 0 to HW filter on device bond5 [ 174.391741][ T6410] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 174.500574][ T9690] bond3: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 174.535933][ T8196] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 174.573662][ T9690] bond3 (unregistering): Released all slaves [ 174.830749][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1003'. [ 174.872769][ T9716] Bluetooth: MGMT ver 1.23 [ 174.902355][ T9713] bond5: option fail_over_mac: invalid value (16) [ 174.922199][ T9713] bond5 (unregistering): Released all slaves [ 174.977749][ T9720] netlink: 'syz.3.1003': attribute type 1 has an invalid length. [ 174.998535][ T9720] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1003'. [ 175.541889][ T9743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 176.262846][ T9779] xt_bpf: check failed: parse error [ 176.285874][ T9779] netlink: 212 bytes leftover after parsing attributes in process `syz.4.1023'. [ 176.445247][ T9787] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1027'. [ 176.572925][ T9791] pim6reg527: entered allmulticast mode [ 177.293360][ T9843] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1042'. [ 177.342217][ T9847] IPVS: set_ctl: invalid protocol: 44 127.0.0.1:20003 [ 178.059125][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1056'. [ 178.110855][ T9889] netlink: 'syz.4.1056': attribute type 1 has an invalid length. [ 178.176348][ T9889] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1056'. [ 178.415523][ T9907] netlink: 'syz.2.1062': attribute type 10 has an invalid length. [ 178.495455][ T9912] netlink: zone id is out of range [ 178.522248][ T9912] netlink: zone id is out of range [ 178.537620][ T9912] netlink: zone id is out of range [ 178.553186][ T9912] netlink: zone id is out of range [ 178.567818][ T9912] netlink: zone id is out of range [ 178.582483][ T9912] netlink: zone id is out of range [ 178.599944][ T9912] netlink: zone id is out of range [ 178.826039][ T9925] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 178.872923][ T9925] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1067'. [ 178.889513][ T9935] netlink: 'syz.1.1068': attribute type 39 has an invalid length. [ 179.019164][ T9943] raw_sendmsg: syz.0.1073 forgot to set AF_INET. Fix it! [ 179.032300][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'. [ 179.041739][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'. [ 179.093160][ T9946] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1073'. [ 179.123763][ T9951] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 179.669975][ T9987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1085'. [ 179.689640][ T9986] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1085'. [ 179.759113][ T9994] netlink: 'syz.0.1086': attribute type 1 has an invalid length. [ 179.919933][T10000] netlink: 328 bytes leftover after parsing attributes in process `syz.4.1090'. [ 180.069207][T10006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'. [ 180.124581][T10011] IPVS: set_ctl: invalid protocol: 44 172.30.0.5:20000 [ 180.238749][T10019] netlink: 'syz.3.1097': attribute type 5 has an invalid length. [ 180.340585][T10024] netlink: 'syz.4.1098': attribute type 33 has an invalid length. [ 180.380107][T10006] syz.0.1092 (10006) used greatest stack depth: 17112 bytes left [ 180.810615][T10045] netlink: 'syz.4.1104': attribute type 9 has an invalid length. [ 180.825176][T10044] netlink: 'syz.4.1104': attribute type 9 has an invalid length. [ 180.825841][T10045] netlink: 'syz.4.1104': attribute type 11 has an invalid length. [ 180.864172][T10045] netlink: 'syz.4.1104': attribute type 12 has an invalid length. [ 181.137340][T10058] bond5: entered promiscuous mode [ 181.142707][T10058] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.202680][T10060] 8021q: adding VLAN 0 to HW filter on device bond5 [ 181.209903][T10065] net_ratelimit: 48 callbacks suppressed [ 181.209918][T10065] netlink: zone id is out of range [ 181.220925][T10065] netlink: zone id is out of range [ 181.226514][T10065] netlink: zone id is out of range [ 181.231717][T10065] netlink: zone id is out of range [ 181.237895][T10060] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 181.252013][T10065] netlink: zone id is out of range [ 181.257634][T10065] netlink: zone id is out of range [ 181.263218][T10065] netlink: zone id is out of range [ 181.268846][T10060] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 181.281322][T10060] bond5: (slave vti0): making interface the new active one [ 181.288983][T10065] netlink: zone id is out of range [ 181.294355][T10065] netlink: zone id is out of range [ 181.301154][T10060] vti0: entered promiscuous mode [ 181.306549][T10065] netlink: zone id is out of range [ 181.315903][T10060] bond5: (slave vti0): Enslaving as an active interface with an up link [ 181.837135][T10099] Driver unsupported XDP return value 0 on prog (id 291) dev N/A, expect packet loss! [ 181.987455][T10105] ieee802154 phy0 wpan0: encryption failed: -22 [ 183.146814][T10150] : renamed from virt_wifi0 [ 183.547699][T10174] __nla_validate_parse: 17 callbacks suppressed [ 183.547720][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1137'. [ 183.610383][T10179] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1141'. [ 183.685163][T10179] bridge: RTM_NEWNEIGH with invalid ether address [ 183.692591][T10178] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1141'. [ 183.717563][T10178] bridge: RTM_NEWNEIGH with invalid ether address [ 183.737834][T10188] x_tables: duplicate underflow at hook 2 [ 183.744130][T10187] ipt_ECN: cannot use operation on non-tcp rule [ 183.766523][T10187] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1143'. [ 183.873614][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 183.924498][T10198] dvmrp0: entered allmulticast mode [ 183.988031][T10201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1148'. [ 184.342203][T10216] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1153'. [ 184.573381][T10219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1154'. [ 184.587658][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1154'. [ 185.279303][T10248] SET target dimension over the limit! [ 185.348612][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1165'. [ 185.697875][T10271] validate_nla: 4 callbacks suppressed [ 185.697896][T10271] netlink: 'syz.4.1171': attribute type 18 has an invalid length. [ 185.780212][T10271] netlink: 'syz.4.1171': attribute type 18 has an invalid length. [ 185.780775][ T8193] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.841204][ T8193] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.877406][ T8193] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 185.906832][ T8193] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 186.201523][T10303] siw: device registration error -23 [ 186.298522][T10309] netlink: 'syz.1.1183': attribute type 3 has an invalid length. [ 186.307386][T10309] netlink: 'syz.1.1183': attribute type 3 has an invalid length. [ 186.553430][T10319] net_ratelimit: 5434 callbacks suppressed [ 186.553454][T10319] openvswitch: netlink: IP tunnel TTL not specified. [ 186.841310][T10339] netlink: 'syz.1.1193': attribute type 8 has an invalid length. [ 186.910198][T10345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.047619][T10351] netlink: 'syz.0.1197': attribute type 1 has an invalid length. [ 187.067444][T10351] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 187.303142][T10359] hsr_slave_0 (unregistering): left promiscuous mode [ 187.768499][T10380] lo speed is unknown, defaulting to 1000 [ 187.836998][T10391] sock: sock_set_timeout: `syz.1.1210' (pid 10391) tries to set negative timeout [ 188.002144][T10393] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 188.010434][T10393] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 188.144119][T10397] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 188.471087][T10419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.003316][T10444] netem: incorrect ge model size [ 189.013742][T10444] netem: change failed [ 189.099102][T10450] __nla_validate_parse: 65 callbacks suppressed [ 189.099125][T10450] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1225'. [ 189.141676][T10450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1225'. [ 189.154101][T10450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1225'. [ 189.195226][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1228'. [ 189.382674][T10470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.468256][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1233'. [ 189.587624][T10481] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 189.622084][T10481] syzkaller1: Linktype set failed because interface is up [ 189.659897][ T5836] syzkaller1: tun_net_xmit 90 [ 189.802446][T10492] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1239'. [ 189.955813][T10499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.969143][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1241'. [ 190.268196][T10517] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1246'. [ 190.312384][T10517] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1246'. [ 190.424435][T10533] syzkaller1: entered promiscuous mode [ 190.430754][T10533] syzkaller1: entered allmulticast mode [ 190.822290][T10529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1249'. [ 190.926836][T10556] syzkaller1: entered promiscuous mode [ 190.938762][T10556] syzkaller1: entered allmulticast mode [ 191.389039][T10581] syzkaller0: entered promiscuous mode [ 191.394674][T10581] syzkaller0: entered allmulticast mode [ 191.426319][T10579] syzkaller0: entered promiscuous mode [ 191.670726][T10597] netlink: 'syz.4.1266': attribute type 16 has an invalid length. [ 191.699541][T10599] ip_tunnel: non-ECT from 2.0.0.0 with TOS=0x3 [ 191.753548][T10599] sit0: entered promiscuous mode [ 191.786690][T10599] netlink: 'syz.2.1267': attribute type 1 has an invalid length. [ 192.039008][T10610] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 192.304580][T10627] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 192.722819][T10647] xt_TCPMSS: Only works on TCP SYN packets [ 192.782861][T10648] netlink: 'syz.2.1280': attribute type 10 has an invalid length. [ 192.888534][T10648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.911620][T10648] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 192.939838][T10647] netlink: 'syz.2.1280': attribute type 29 has an invalid length. [ 193.008705][T10647] netlink: 'syz.2.1280': attribute type 29 has an invalid length. [ 193.257672][T10670] 8021q: adding VLAN 0 to HW filter on device bond6 [ 193.775098][T10706] tipc: Started in network mode [ 193.796898][T10706] tipc: Node identity 9eb3fa485dab, cluster identity 4711 [ 193.804265][T10706] tipc: Enabled bearer , priority 0 [ 193.962014][T10719] syzkaller0: entered promiscuous mode [ 193.995834][T10719] syzkaller0: entered allmulticast mode [ 194.062125][T10697] tipc: Disabling bearer [ 194.257857][T10733] __nla_validate_parse: 17 callbacks suppressed [ 194.257878][T10733] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1306'. [ 194.341676][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1308'. [ 194.359586][T10738] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 194.393941][T10737] gretap0: entered promiscuous mode [ 194.423141][T10737] gretap0: left promiscuous mode [ 194.489814][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.497856][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.540310][T10746] 8021q: adding VLAN 0 to HW filter on device bond6 [ 194.577284][T10744] lo speed is unknown, defaulting to 1000 [ 194.677390][T10753] netlink: 'syz.4.1313': attribute type 1 has an invalid length. [ 194.687142][T10753] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1313'. [ 194.725614][T10753] netlink: 'syz.4.1313': attribute type 1 has an invalid length. [ 194.766524][T10753] netlink: 'syz.4.1313': attribute type 8 has an invalid length. [ 194.775131][T10753] netlink: 606 bytes leftover after parsing attributes in process `syz.4.1313'. [ 195.068048][T10768] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1319'. [ 195.113814][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'. [ 195.434020][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1322'. [ 195.475864][T10778] geneve2: entered promiscuous mode [ 195.553908][T10788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1325'. [ 195.853985][T10809] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1330'. [ 196.070356][T10813] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1332'. [ 196.561024][T10847] netlink: 'syz.0.1343': attribute type 12 has an invalid length. [ 197.258234][T10876] syzkaller0: entered promiscuous mode [ 197.263876][T10876] syzkaller0: entered allmulticast mode [ 197.520557][T10899] bond0: entered promiscuous mode [ 197.533122][T10899] bond_slave_0: entered promiscuous mode [ 197.544594][T10899] bond_slave_1: entered promiscuous mode [ 197.555087][T10899] bond0: left promiscuous mode [ 197.560000][T10899] bond_slave_0: left promiscuous mode [ 197.573500][T10899] bond_slave_1: left promiscuous mode [ 197.611495][T10903] vcan0: entered allmulticast mode [ 197.853045][T10917] syzkaller1: entered promiscuous mode [ 197.902330][T10917] syzkaller1: entered allmulticast mode [ 198.928609][T10944] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.980018][T10980] netlink: 'syz.1.1384': attribute type 58 has an invalid length. [ 199.358496][T10998] __nla_validate_parse: 12 callbacks suppressed [ 199.358519][T10998] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1389'. [ 199.377954][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1390'. [ 199.420031][T11002] netlink: 'syz.0.1391': attribute type 10 has an invalid length. [ 199.435636][T11002] netlink: 396 bytes leftover after parsing attributes in process `syz.0.1391'. [ 199.641147][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1393'. [ 199.696044][T11009] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1393'. [ 199.853721][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1394'. [ 199.920196][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'. [ 199.929710][T11021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1397'. [ 199.939614][T11021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1397'. [ 199.972219][T11021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1397'. [ 199.972595][T11022] sch_tbf: peakrate 5 is lower than or equals to rate 16783679728848008391 ! [ 200.447465][T11062] xt_cgroup: invalid path, errno=-2 [ 200.578332][T11065] lo speed is unknown, defaulting to 1000 [ 200.769821][T11072] syzkaller0: entered promiscuous mode [ 200.776093][T11072] syzkaller0: entered allmulticast mode [ 200.788312][T11072] tc action pedit 'at' offset -255 out of bounds [ 201.909465][T11105] bond7: option mode: invalid value (133) [ 201.940199][T11105] bond7 (unregistering): Released all slaves [ 202.575886][T11133] syzkaller0: entered promiscuous mode [ 202.593788][T11133] syzkaller0: entered allmulticast mode [ 203.387797][T11165] 8021q: adding VLAN 0 to HW filter on device bond8 [ 204.333414][T11223] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.366072][T11223] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.541336][T11231] __nla_validate_parse: 7 callbacks suppressed [ 204.541359][T11231] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 204.799726][T11245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1462'. [ 204.866089][T11243] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'. [ 205.048108][T11258] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1466'. [ 205.102879][T11265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1469'. [ 205.119962][T11264] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1468'. [ 205.141531][T11265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1469'. [ 205.191288][T11265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1469'. [ 205.201795][T11265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1469'. [ 205.212457][T11265] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1469'. [ 205.327830][T11264] bond7: Invalid ad_actor_system MAC address. [ 205.375596][T11264] bond7: option ad_actor_system: invalid value (1) [ 205.394099][T11264] bond7 (unregistering): Released all slaves [ 205.608037][T11290] netlink: 'syz.4.1477': attribute type 2 has an invalid length. [ 205.696053][T11311] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 205.704270][T11293] syzkaller1: entered promiscuous mode [ 205.710737][T11293] syzkaller1: entered allmulticast mode [ 206.105461][T11332] netlink: 'syz.3.1485': attribute type 1 has an invalid length. [ 206.565305][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 206.685944][T11364] syzkaller0: entered promiscuous mode [ 206.691676][T11364] syzkaller0: entered allmulticast mode [ 206.804918][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 206.811210][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.817303][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 206.817372][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 207.011504][T11381] Bluetooth: MGMT ver 1.23 [ 207.791602][T11420] netdevsim netdevsim4 : renamed from netdevsim0 [ 208.102823][T11439] lo speed is unknown, defaulting to 1000 [ 208.202777][T11446] netlink: 'syz.0.1512': attribute type 2 has an invalid length. [ 208.256928][T11446] v: entered promiscuous mode [ 208.484095][T11453] can: request_module (can-proto-0) failed. [ 209.612215][T11505] __nla_validate_parse: 43 callbacks suppressed [ 209.612237][T11505] netlink: 108 bytes leftover after parsing attributes in process `syz.3.1529'. [ 210.009862][T11529] netlink: 'syz.4.1536': attribute type 10 has an invalid length. [ 210.042842][T11529] team0: Device vxcan1 is of different type [ 210.627153][T11547] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1544'. [ 210.686280][T11551] syzkaller0: entered promiscuous mode [ 210.693850][T11551] syzkaller0: entered allmulticast mode [ 210.710772][T11551] tc action pedit offset -2147483648 out of bounds [ 210.755131][T11556] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1548'. [ 210.814322][T11556] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1548'. [ 210.913736][T11564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.941065][T11569] netlink: 'syz.4.1551': attribute type 21 has an invalid length. [ 210.958212][T11567] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.967869][T11569] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1551'. [ 210.995549][T11573] netlink: 'syz.3.1552': attribute type 1 has an invalid length. [ 211.006904][T11573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1552'. [ 211.255552][T11584] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.347401][T11587] openvswitch: netlink: IP tunnel dst address not specified [ 211.391580][T11591] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 211.611689][T11599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.620374][T11603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.656170][T11603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.661855][T11599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.697127][T11603] batman_adv: batadv0: Removing interface: dummy0 [ 211.838374][T11612] netlink: 'syz.2.1565': attribute type 1 has an invalid length. [ 211.901064][T11612] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.910558][T11612] bond3: (slave bond4): making interface the new active one [ 211.918942][T11612] bond3: (slave bond4): Enslaving as an active interface with an up link [ 211.947960][T11612] bond3: (slave gretap2): Enslaving as a backup interface with an up link [ 211.959113][T11612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1565'. [ 211.971525][T11612] 8021q: adding VLAN 0 to HW filter on device bond3 [ 212.062587][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1569'. [ 212.084129][T11621] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1569'. [ 212.113475][T11621] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 212.141586][T11628] netlink: 'syz.4.1570': attribute type 8 has an invalid length. [ 212.152256][T11621] team1: entered promiscuous mode [ 212.158441][T11621] team1: entered allmulticast mode [ 212.373735][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1572'. [ 212.413107][T11638] netlink: 'syz.0.1573': attribute type 12 has an invalid length. [ 212.627703][T11650] netlink: 'syz.3.1578': attribute type 1 has an invalid length. [ 212.869983][T11665] syzkaller0: entered promiscuous mode [ 212.876998][T11665] syzkaller0: entered allmulticast mode [ 214.615887][T11699] team0: Cannot enslave team device to itself [ 214.659455][T11702] syzkaller0: entered promiscuous mode [ 214.665154][T11702] syzkaller0: entered allmulticast mode [ 214.679363][T11699] __nla_validate_parse: 6 callbacks suppressed [ 214.679384][T11699] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1591'. [ 214.748645][T11706] netlink: 'syz.0.1593': attribute type 4 has an invalid length. [ 214.780630][T11706] netlink: 'syz.0.1593': attribute type 1 has an invalid length. [ 214.810934][T11706] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1593'. [ 215.030180][ T5146] block nbd1: Receive control failed (result -32) [ 215.092834][T11722] netlink: 'syz.3.1599': attribute type 1 has an invalid length. [ 215.162221][T11722] bond6: entered promiscuous mode [ 215.194053][T11722] 8021q: adding VLAN 0 to HW filter on device bond6 [ 215.212687][T11731] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 215.325973][T11741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1604'. [ 215.337377][T11741] netlink: 'syz.0.1604': attribute type 1 has an invalid length. [ 215.338613][T11736] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 215.346029][T11741] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1604'. [ 215.371501][T11736] bond7 (unregistering): Released all slaves [ 215.428045][T11722] 8021q: adding VLAN 0 to HW filter on device bond6 [ 215.436841][T11722] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 215.447367][T11722] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 215.476394][T11722] bond6: (slave vti0): making interface the new active one [ 215.489080][T11747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1605'. [ 215.507404][T11722] vti0: entered promiscuous mode [ 215.522659][T11722] bond6: (slave vti0): Enslaving as an active interface with an up link [ 215.735792][T11755] 8021q: adding VLAN 0 to HW filter on device bond7 [ 215.753200][T11764] bond7: entered allmulticast mode [ 215.784876][T11755] bond7: (slave ip6gretap1): making interface the new active one [ 215.816509][T11755] ip6gretap1: entered allmulticast mode [ 215.838396][T11755] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 216.098083][T11781] netlink: 294 bytes leftover after parsing attributes in process `syz.2.1616'. [ 216.120656][T11784] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.1614'. [ 216.125552][T11781] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.209256][ T8193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.219700][ T8193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.385924][T11803] validate_nla: 2 callbacks suppressed [ 216.385946][T11803] netlink: 'syz.3.1620': attribute type 10 has an invalid length. [ 216.450181][T11803] veth0_vlan: left promiscuous mode [ 216.465539][T11803] veth0_vlan: entered promiscuous mode [ 216.520571][T11803] team0: Device veth0_vlan failed to register rx_handler [ 216.523125][T11810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1621'. [ 216.689667][T11810] bond9: option xmit_hash_policy: invalid value (64) [ 216.747547][T11810] bond9 (unregistering): Released all slaves [ 217.007438][T11838] sctp: [Deprecated]: syz.3.1630 (pid 11838) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.007438][T11838] Use struct sctp_sack_info instead [ 217.327958][T11859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1634'. [ 217.463691][T11859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1634'. [ 217.887759][T11890] gre0: entered promiscuous mode [ 217.906895][T11890] gre0: entered allmulticast mode [ 217.909128][T11893] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 217.950831][T11893] vcan0: tx drop: invalid da for name 0x0000400000000000 [ 217.959214][T11894] xt_CT: No such helper "snmp_trap" [ 218.517786][T11926] syzkaller0: entered promiscuous mode [ 218.525368][T11928] netlink: 'syz.3.1653': attribute type 10 has an invalid length. [ 218.531619][T11926] syzkaller0: entered allmulticast mode [ 218.575372][T11928] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 218.630339][T11926] macvtap1: entered allmulticast mode [ 218.650757][T11926] veth0_macvtap: entered allmulticast mode [ 221.137313][T11907] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 221.335227][T11947] __nla_validate_parse: 2 callbacks suppressed [ 221.335248][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1659'. [ 221.378724][T11949] netlink: 'syz.2.1660': attribute type 8 has an invalid length. [ 221.425040][T11949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1660'. [ 221.447269][T11949] bond0: entered promiscuous mode [ 221.452953][T11949] bond_slave_0: entered promiscuous mode [ 221.477556][T11949] bond_slave_1: entered promiscuous mode [ 221.498102][T11949] bridge_slave_1: entered promiscuous mode [ 221.528300][T11949] batadv0: entered promiscuous mode [ 221.537756][T11949] gretap0: entered promiscuous mode [ 221.556164][T11949] hsr1: entered promiscuous mode [ 221.784960][T11986] netlink: 'syz.3.1670': attribute type 1 has an invalid length. [ 221.797416][T11982] netlink: 'syz.3.1670': attribute type 1 has an invalid length. [ 221.919440][T11997] netlink: 'syz.2.1672': attribute type 1 has an invalid length. [ 221.930664][T11991] bond8: (slave gretap3): making interface the new active one [ 221.940035][T11997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1672'. [ 221.955439][T11991] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 222.213896][T11993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.362398][T11993] veth0_macvtap: left allmulticast mode [ 222.369217][T12002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1675'. [ 222.403824][ T35] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.433626][ T35] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.450226][ T35] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.462574][ T35] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.482169][ T35] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.507472][ T35] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.530210][ T35] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 222.552672][ T35] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.629422][T12020] pim6reg1: entered promiscuous mode [ 222.637595][T12020] pim6reg1: entered allmulticast mode [ 222.827729][T12018] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1679'. [ 224.698354][T12075] xt_recent: Unsupported userspace flags (000000b1) [ 224.747552][T12079] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1697'. [ 225.136544][T12096] openvswitch: netlink: IPv4 tun info is not correct [ 225.180553][T12100] netlink: 'syz.2.1703': attribute type 9 has an invalid length. [ 225.216352][T12104] netlink: 'syz.2.1703': attribute type 1 has an invalid length. [ 225.306873][T12110] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 225.321330][T12112] veth0: entered promiscuous mode [ 225.541927][T12113] veth0: left promiscuous mode [ 225.547244][T12127] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1712'. [ 225.558449][T12127] bond0: (slave bond_slave_0): Releasing backup interface [ 225.568805][T12127] bond_slave_0: left promiscuous mode [ 225.576083][T12127] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 225.824871][T12148] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1718'. [ 226.219244][T12166] netlink: 'syz.0.1722': attribute type 9 has an invalid length. [ 226.417584][T12179] SET target dimension over the limit! [ 226.479755][T12188] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1729'. [ 226.710816][T12210] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1733'. [ 226.937812][T12232] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1736'. [ 226.996301][T12231] lo speed is unknown, defaulting to 1000 [ 227.023994][T12216] netlink: 11591 bytes leftover after parsing attributes in process `syz.0.1736'. [ 227.559113][T12255] netlink: 'syz.4.1746': attribute type 7 has an invalid length. [ 227.568857][T12255] netlink: 'syz.4.1746': attribute type 8 has an invalid length. [ 228.061817][T12278] netlink: 'syz.3.1753': attribute type 10 has an invalid length. [ 228.161881][T12282] 8021q: VLANs not supported on lo [ 228.255333][T12282] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1754'. [ 228.417369][T12286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1754'. [ 228.654600][T12292] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1757'. [ 228.993885][T12302] netlink: 'syz.0.1760': attribute type 10 has an invalid length. [ 229.011449][T12302] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 229.173011][T12312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1762'. [ 229.547756][T12335] syzkaller1: entered promiscuous mode [ 229.553652][T12335] syzkaller1: entered allmulticast mode [ 229.829414][T12344] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1770'. [ 229.862315][T12344] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1770'. [ 229.900160][T12348] netlink: 'syz.2.1772': attribute type 1 has an invalid length. [ 230.149563][T12367] netlink: 'syz.0.1778': attribute type 10 has an invalid length. [ 230.358064][T12378] syzkaller0: entered promiscuous mode [ 230.363735][T12378] syzkaller0: entered allmulticast mode [ 230.471334][T12390] openvswitch: netlink: Message has 4 unknown bytes. [ 230.483953][T12389] netlink: 'syz.1.1785': attribute type 2 has an invalid length. [ 230.721782][T12403] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 230.740690][T12403] bond9 (unregistering): Released all slaves [ 230.783614][T12407] IPv6: Can't replace route, no match found [ 230.785388][T12405] only policy match revision 0 supported [ 230.790390][T12407] IPv6: Can't replace route, no match found [ 230.796540][T12405] unable to load match [ 230.810241][T12409] netlink: 'syz.4.1793': attribute type 5 has an invalid length. [ 230.819414][T12411] lo: entered allmulticast mode [ 230.843657][T12409] geneve2: entered promiscuous mode [ 230.855297][T12409] geneve2: entered allmulticast mode [ 230.874209][ T1101] netdevsim netdevsim4 : set [1, 0] type 2 family 0 port 256 - 0 [ 230.916960][ T1101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 230.928680][ T1101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 230.938404][ T1101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 231.112693][T12439] netlink: 'syz.1.1799': attribute type 8 has an invalid length. [ 231.637684][T12471] __nla_validate_parse: 14 callbacks suppressed [ 231.637704][T12471] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1808'. [ 231.878904][T12481] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1810'. [ 232.091298][ T5146] Bluetooth: hci4: link tx timeout [ 232.099807][ T5146] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 232.274423][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'. [ 232.286976][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1816'. [ 232.547411][T12517] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 232.591729][T12526] IPVS: length: 89 != 8 [ 232.627099][T12522] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 232.646556][T12522] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.880160][T12541] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1826'. [ 232.917302][T12541] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1826'. [ 232.931276][T12541] netlink: 33 bytes leftover after parsing attributes in process `syz.0.1826'. [ 232.984274][T12541] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1826'. [ 233.028849][T12541] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1826'. [ 233.511888][T12572] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1835'. [ 233.570574][T12572] bond7 (unregistering): Released all slaves [ 233.748321][T12589] syz.1.1839: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 233.764564][T12589] CPU: 1 UID: 0 PID: 12589 Comm: syz.1.1839 Not tainted syzkaller #0 PREEMPT(full) [ 233.764595][T12589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 233.764608][T12589] Call Trace: [ 233.764617][T12589] [ 233.764625][T12589] dump_stack_lvl+0xe8/0x150 [ 233.764667][T12589] warn_alloc+0x249/0x340 [ 233.764694][T12589] ? stack_trace_save+0xa9/0x100 [ 233.764720][T12589] ? __pfx_warn_alloc+0x10/0x10 [ 233.764752][T12589] ? kasan_save_track+0x4f/0x80 [ 233.764773][T12589] ? kasan_save_track+0x3e/0x80 [ 233.764793][T12589] ? __kasan_kmalloc+0x93/0xb0 [ 233.764816][T12589] ? __kmalloc_cache_noprof+0x31c/0x660 [ 233.764838][T12589] ? xskq_create+0x56/0x170 [ 233.764863][T12589] ? xsk_setsockopt+0x54c/0x990 [ 233.764884][T12589] ? do_sock_setsockopt+0x17c/0x1b0 [ 233.764909][T12589] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 233.764933][T12589] ? do_syscall_64+0x14d/0xf80 [ 233.764964][T12589] __vmalloc_node_range_noprof+0x132/0x1730 [ 233.765025][T12589] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 233.765056][T12589] ? __kasan_kmalloc+0x93/0xb0 [ 233.765086][T12589] vmalloc_user_noprof+0xad/0xe0 [ 233.765109][T12589] ? xskq_create+0xbf/0x170 [ 233.765135][T12589] xskq_create+0xbf/0x170 [ 233.765164][T12589] xsk_init_queue+0x8a/0xe0 [ 233.765191][T12589] xsk_setsockopt+0x54c/0x990 [ 233.765219][T12589] ? __pfx_xsk_setsockopt+0x10/0x10 [ 233.765243][T12589] ? __pfx_aa_sk_perm+0x10/0x10 [ 233.765285][T12589] ? aa_sock_opt_perm+0xff/0x1a0 [ 233.765309][T12589] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 233.765333][T12589] ? __pfx_xsk_setsockopt+0x10/0x10 [ 233.765359][T12589] do_sock_setsockopt+0x17c/0x1b0 [ 233.765390][T12589] __x64_sys_setsockopt+0x13d/0x1b0 [ 233.765423][T12589] do_syscall_64+0x14d/0xf80 [ 233.765449][T12589] ? trace_irq_disable+0x3b/0x150 [ 233.765468][T12589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.765488][T12589] ? clear_bhb_loop+0x40/0x90 [ 233.765515][T12589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.765534][T12589] RIP: 0033:0x7fef25b9c819 [ 233.765554][T12589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.765572][T12589] RSP: 002b:00007fef269fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 233.765595][T12589] RAX: ffffffffffffffda RBX: 00007fef25e16180 RCX: 00007fef25b9c819 [ 233.765610][T12589] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 233.765623][T12589] RBP: 00007fef25c32c91 R08: 0000000000000004 R09: 0000000000000000 [ 233.765637][T12589] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.765650][T12589] R13: 00007fef25e16218 R14: 00007fef25e16180 R15: 00007ffeb7576bf8 [ 233.765685][T12589] [ 234.052483][T12589] Mem-Info: [ 234.056075][T12589] active_anon:6034 inactive_anon:6 isolated_anon:0 [ 234.056075][T12589] active_file:2569 inactive_file:40297 isolated_file:0 [ 234.056075][T12589] unevictable:768 dirty:59 writeback:0 [ 234.056075][T12589] slab_reclaimable:11750 slab_unreclaimable:102063 [ 234.056075][T12589] mapped:29260 shmem:1354 pagetables:1339 [ 234.056075][T12589] sec_pagetables:0 bounce:0 [ 234.056075][T12589] kernel_misc_reclaimable:0 [ 234.056075][T12589] free:1324721 free_pcp:9857 free_cma:0 [ 234.154567][T12589] Node 0 active_anon:23940kB inactive_anon:24kB active_file:10276kB inactive_file:160980kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117020kB dirty:252kB writeback:0kB shmem:3880kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13824kB pagetables:5156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 234.187798][T12589] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 234.207602][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 234.220944][T12589] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 234.255250][T12589] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 234.261083][T12589] Node 0 DMA32 free:1345924kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23868kB inactive_anon:24kB active_file:10276kB inactive_file:160980kB unevictable:1536kB writepending:252kB zspages:0kB present:3129332kB managed:2552580kB mlocked:0kB bounce:0kB free_pcp:37588kB local_pcp:16380kB free_cma:0kB [ 234.296007][T12589] lowmem_reserve[]: 0 0 0 0 0 [ 234.300923][T12589] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 234.391036][T12589] lowmem_reserve[]: 0 0 0 0 0 [ 234.398462][T12589] Node 1 Normal free:3939404kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 234.505175][T12589] lowmem_reserve[]: 0 0 0 0 0 [ 234.510362][T12589] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 234.593603][T12589] Node 0 DMA32: 4249*4kB (UM) 2935*8kB (UME) 1272*16kB (UME) 245*32kB (UM) 33*64kB (UME) 152*128kB (UM) 183*256kB (UME) 124*512kB (UME) 91*1024kB (UM) 44*2048kB (UM) 234*4096kB (UM) = 1342332kB [ 234.643955][T12589] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 234.678245][T12589] Node 1 Normal: 3*4kB (U) 10*8kB (UM) 7*16kB (UM) 6*32kB (UM) 5*64kB (UM) 9*128kB (UM) 5*256kB (UM) 6*512kB (UM) 1*1024kB (M) 2*2048kB (U) 959*4096kB (M) = 3939404kB [ 234.696358][T12589] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.706022][T12589] Node 0 hugepages_total=3 hugepages_free=0 hugepages_surp=1 hugepages_size=2048kB [ 234.716075][T12589] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 234.775149][T12613] IPVS: set_ctl: invalid protocol: 51 100.1.1.1:20004 [ 234.808762][T12589] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 234.821298][T12589] 44216 total pagecache pages [ 234.826866][T12589] 0 pages in swap cache [ 234.831484][T12589] Free swap = 124996kB [ 234.841649][T12589] Total swap = 124996kB [ 234.846190][T12589] 2097051 pages RAM [ 234.850028][T12589] 0 pages HighMem/MovableOnly [ 234.854944][T12589] 427072 pages reserved [ 234.859120][T12589] 0 pages cma reserved [ 235.000776][T12627] xt_SECMARK: invalid mode: 9 [ 235.288835][T12640] bond0 (unregistering): left promiscuous mode [ 235.297366][T12640] bond_slave_1: left promiscuous mode [ 235.303207][T12640] bridge_slave_1: left promiscuous mode [ 235.309947][T12640] batadv0: left promiscuous mode [ 235.326303][T12640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.347405][T12640] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 235.362352][T12640] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 235.382738][T12640] bond0 (unregistering): Released all slaves [ 235.407954][T12654] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 235.421503][T12638] 8021q: VLANs not supported on ip_vti0 [ 235.448314][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 235.610536][T12663] ip6tnl1: left allmulticast mode [ 235.618372][T12663] gtp0: left allmulticast mode [ 235.623471][T12663] gretap1: left allmulticast mode [ 235.630327][T12663] geneve2: left allmulticast mode [ 235.637655][T12663] macvtap1: left allmulticast mode [ 235.753792][T12678] s5: renamed from vlan1 [ 236.252409][T12709] netlink: 'syz.0.1877': attribute type 10 has an invalid length. [ 236.254727][T12708] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 236.265403][T12709] netlink: 'syz.0.1877': attribute type 12 has an invalid length. [ 236.277108][T12709] netlink: 'syz.0.1877': attribute type 29 has an invalid length. [ 236.301036][T12711] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.313195][T12709] netlink: 'syz.0.1877': attribute type 2 has an invalid length. [ 236.743661][T12752] __nla_validate_parse: 6 callbacks suppressed [ 236.743683][T12752] netlink: 380 bytes leftover after parsing attributes in process `syz.0.1888'. [ 236.965641][T12769] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1894'. [ 237.022557][T12771] bridge_slave_0 (unregistering): left promiscuous mode [ 237.030619][T12771] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.054630][T12776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.068064][T12776] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 237.155581][T12779] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1897'. [ 237.178809][T12783] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 237.204626][T12779] macvlan3: entered promiscuous mode [ 237.210616][T12779] macvlan3: entered allmulticast mode [ 237.219066][T12779] bond7: entered promiscuous mode [ 237.225209][T12779] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 237.235678][T12779] bond7: left promiscuous mode [ 237.270681][T12787] syzkaller1: entered promiscuous mode [ 237.276509][T12787] syzkaller1: entered allmulticast mode [ 237.461581][T12793] tc_dump_action: action bad kind [ 237.469367][T12795] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1902'. [ 237.642863][ T29] audit: type=1804 audit(1775889833.931:2): pid=12804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1905" name="/newroot/404/memory.events" dev="tmpfs" ino=2084 res=1 errno=0 [ 237.719875][ T29] audit: type=1800 audit(1775889833.961:3): pid=12804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1905" name="memory.events" dev="tmpfs" ino=2084 res=0 errno=0 [ 237.752054][T12812] syzkaller0: create flow: hash 3891611239 index 1 [ 237.862889][T12818] ipt_REJECT: ECHOREPLY no longer supported. [ 237.894326][ T1101] syzkaller0: tun_net_xmit 76 [ 237.899875][ T1101] syzkaller0: tun_net_xmit 48 [ 237.906351][T12818] netlink: 'syz.3.1907': attribute type 22 has an invalid length. [ 237.916204][ T5926] syzkaller0: tun_net_xmit 76 [ 237.918733][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1907'. [ 237.942498][T12822] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1909'. [ 237.979266][T12818] netlink: 'syz.3.1907': attribute type 22 has an invalid length. [ 237.982441][ T1101] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 237.988120][T12818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1907'. [ 237.995076][ T43] syzkaller0: tun_net_xmit 76 [ 238.010939][ T1101] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 238.029064][T12800] syzkaller0: delete flow: hash 3891611239 index 1 [ 238.317949][T12837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1910'. [ 239.356339][ T1101] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.365545][ T1101] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.395428][T12830] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1911'. [ 239.547699][T12839] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.883101][T12866] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1921'. [ 240.075966][T12870] syzkaller0: entered promiscuous mode [ 240.082137][T12870] syzkaller0: entered allmulticast mode [ 240.493234][T12876] 8021q: VLANs not supported on ip6gre0 [ 240.867926][T12898] lo speed is unknown, defaulting to 1000 [ 241.315327][T12914] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 241.328017][T12914] bond0: (slave lo): Error: Device can not be enslaved while up [ 241.862124][T12933] IPVS: length: 162 != 24 [ 241.940631][T12937] IPv6: sit2: Disabled Multicast RS [ 241.960786][T12937] sit2: entered allmulticast mode [ 242.113649][T12942] netlink: 'syz.3.1947': attribute type 9 has an invalid length. [ 242.178677][T12945] __nla_validate_parse: 3 callbacks suppressed [ 242.178699][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1948'. [ 242.208719][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1948'. [ 242.563137][T12968] Cannot find set identified by id 1 to match [ 242.774643][T12987] netlink: 'syz.4.1963': attribute type 11 has an invalid length. [ 242.784102][T12987] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1963'. [ 242.809961][T12988] netlink: 'syz.2.1960': attribute type 16 has an invalid length. [ 242.820293][T12988] netlink: 'syz.2.1960': attribute type 17 has an invalid length. [ 242.849261][T12988] sit0: left promiscuous mode [ 242.877770][T12988] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.906654][T12988] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 243.794240][T13040] xt_SECMARK: invalid mode: 9 [ 244.126480][T13062] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20000 [ 244.146437][T13063] block nbd2: Unsupported socket: should be TCP or UNIX. [ 244.347048][T13071] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 244.353257][T13071] syzkaller1: linktype set to 823 [ 244.671215][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1988'. [ 244.687791][T13084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1988'. [ 244.713972][T13087] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1988'. [ 245.046481][T13103] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.075359][T13101] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1994'. [ 245.102992][T13103] bridge_slave_0 (unregistering): left allmulticast mode [ 245.112917][T13103] bridge_slave_0 (unregistering): left promiscuous mode [ 245.129610][T13103] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.198663][T13120] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1995'. [ 245.373674][T13126] syzkaller1: entered promiscuous mode [ 245.389414][T13126] syzkaller1: entered allmulticast mode [ 245.568054][T13132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2001'. [ 245.621008][T13136] syzkaller0: entered promiscuous mode [ 245.627313][T13136] syzkaller0: entered allmulticast mode [ 245.715679][T13140] syzkaller1: left promiscuous mode [ 245.728410][T13140] syzkaller1: left allmulticast mode [ 245.875386][T13156] netlink: 'syz.3.2008': attribute type 1 has an invalid length. [ 245.990550][T13156] 8021q: adding VLAN 0 to HW filter on device bond9 [ 246.000842][T13165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2010'. [ 246.113531][T13158] bond9: (slave veth0_to_bond): making interface the new active one [ 246.130831][T13158] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 246.270855][T13174] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.338815][T13177] netlink: 'syz.0.2014': attribute type 1 has an invalid length. [ 246.459371][T13183] netlink: 'syz.4.2016': attribute type 10 has an invalid length. [ 246.460984][T13185] netlink: 'syz.2.2017': attribute type 18 has an invalid length. [ 246.505086][T13185] netlink: 'syz.2.2017': attribute type 18 has an invalid length. [ 246.667095][T13199] netlink: 'syz.0.2021': attribute type 3 has an invalid length. [ 247.096000][T13231] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 247.107881][T13224] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 247.162199][T13237] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 247.165930][T13238] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 247.569913][T13265] __nla_validate_parse: 42 callbacks suppressed [ 247.569936][T13265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2038'. [ 247.615800][T13265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2038'. [ 247.620372][T13263] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2040'. [ 247.641170][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2038'. [ 247.667154][T13271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2038'. [ 248.064451][T13288] team0: No ports can be present during mode change [ 248.117401][T13294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2049'. [ 248.128875][T13296] netlink: 'syz.2.2048': attribute type 1 has an invalid length. [ 248.136998][T13294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2049'. [ 248.204442][T13296] bond0: entered promiscuous mode [ 248.210197][T13296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.287453][T13303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'. [ 248.303618][T13296] bond0: (slave bridge2): making interface the new active one [ 248.316763][T13296] bridge2: entered promiscuous mode [ 248.323555][T13296] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 248.505526][ T5923] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.516487][T13315] netlink: 'syz.1.2051': attribute type 1 has an invalid length. [ 248.539398][T13310] netlink: 'syz.4.2053': attribute type 4 has an invalid length. [ 248.572251][T13321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2053'. [ 248.895983][ T5923] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 248.980139][T13355] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2061'. [ 248.993636][T13354] netlink: 'syz.1.2062': attribute type 1 has an invalid length. [ 249.174134][T13365] netlink: 'syz.2.2064': attribute type 1 has an invalid length. [ 249.204177][T13354] 8021q: adding VLAN 0 to HW filter on device bond8 [ 249.228468][T13351] netem: invalid attributes len -24 [ 249.234923][T13351] netem: change failed [ 249.372116][T13347] lo speed is unknown, defaulting to 1000 [ 249.393189][T13357] bond8: (slave gretap1): making interface the new active one [ 249.402827][T13357] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 249.447616][T13365] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.793054][T13350] lo speed is unknown, defaulting to 1000 [ 250.092315][T13401] netlink: 'syz.0.2072': attribute type 10 has an invalid length. [ 250.317376][T13403] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 250.356365][T13405] bridge0: port 1(syz_tun) entered blocking state [ 250.388813][T13405] bridge0: port 1(syz_tun) entered disabled state [ 250.407713][T13405] syz_tun: entered allmulticast mode [ 250.420928][T13405] syz_tun: entered promiscuous mode [ 250.449542][T13405] bridge0: port 1(syz_tun) entered blocking state [ 250.456442][T13405] bridge0: port 1(syz_tun) entered forwarding state [ 250.499004][T13410] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 250.627372][T13420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 251.236925][T13451] sctp: [Deprecated]: syz.3.2092 (pid 13451) Use of int in maxseg socket option. [ 251.236925][T13451] Use struct sctp_assoc_value instead [ 251.380391][T13452] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 251.521265][T13461] syzkaller0: entered promiscuous mode [ 251.538324][T13461] syzkaller0: entered allmulticast mode [ 253.273502][T13493] __nla_validate_parse: 6 callbacks suppressed [ 253.273525][T13493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2099'. [ 253.527194][T13501] netlink: 'syz.0.2103': attribute type 11 has an invalid length. [ 253.535769][T13501] netlink: 'syz.0.2103': attribute type 11 has an invalid length. [ 253.543704][T13501] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2103'. [ 253.710092][T13511] xt_TCPMSS: Only works on TCP SYN packets [ 253.993268][T13499] syzkaller0: entered promiscuous mode [ 253.999470][T13499] syzkaller0: entered allmulticast mode [ 254.128355][T13528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2107'. [ 255.525016][T13531] netlink: 'syz.0.2108': attribute type 10 has an invalid length. [ 255.553188][T13531] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2108'. [ 255.709846][T13541] netlink: 'syz.1.2110': attribute type 7 has an invalid length. [ 255.762983][T13542] netlink: 'syz.1.2110': attribute type 1 has an invalid length. [ 255.933399][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.027831][T13565] netlink: 'syz.0.2116': attribute type 11 has an invalid length. [ 256.048225][T13565] netlink: 'syz.0.2116': attribute type 11 has an invalid length. [ 256.064923][T13565] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2116'. [ 256.540249][T13599] netlink: 'syz.4.2122': attribute type 5 has an invalid length. [ 256.549037][T13599] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2122'. [ 256.772038][T13612] netlink: 596 bytes leftover after parsing attributes in process `syz.3.2126'. [ 256.973034][T13620] syzkaller0: entered promiscuous mode [ 257.014938][T13620] syzkaller0: entered allmulticast mode [ 257.024361][T13625] delete_channel: no stack [ 257.132053][T13628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2133'. [ 257.291887][T13628] 8021q: adding VLAN 0 to HW filter on device bond7 [ 257.534255][T13652] netlink: 'syz.2.2139': attribute type 1 has an invalid length. [ 257.671619][T13660] sctp: [Deprecated]: syz.4.2140 (pid 13660) Use of int in maxseg socket option. [ 257.671619][T13660] Use struct sctp_assoc_value instead [ 257.690774][T13661] netlink: 'syz.3.2141': attribute type 64 has an invalid length. [ 257.696205][T13660] sctp: [Deprecated]: syz.4.2140 (pid 13660) Use of int in maxseg socket option. [ 257.696205][T13660] Use struct sctp_assoc_value instead [ 257.741252][T13658] bond8: (slave bridge3): Enslaving as a backup interface with an up link [ 257.764261][ T43] lo speed is unknown, defaulting to 1000 [ 257.787151][ T43] syz2: Port: 1 Link DOWN [ 257.834167][T13652] macvlan0: entered promiscuous mode [ 257.853558][T13652] macvlan0: entered allmulticast mode [ 257.877072][T13652] bond8: entered promiscuous mode [ 257.891226][T13652] bridge3: entered promiscuous mode [ 257.907612][T13652] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 257.927803][T13652] bond8: left promiscuous mode [ 257.933559][T13674] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2144'. [ 257.943300][T13652] bridge3: left promiscuous mode [ 257.998474][T13661] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2141'. [ 258.055238][ T43] lo speed is unknown, defaulting to 1000 [ 258.320604][T13698] __nla_validate_parse: 5 callbacks suppressed [ 258.320626][T13698] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2148'. [ 258.403492][T13698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2148'. [ 258.467732][T13703] bridge9: entered promiscuous mode [ 258.503763][T13703] bridge9: entered allmulticast mode [ 258.613958][T13714] netlink: 'syz.4.2155': attribute type 2 has an invalid length. [ 258.638552][T13714] netlink: 'syz.4.2155': attribute type 11 has an invalid length. [ 258.649410][T13714] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2155'. [ 258.743770][T13719] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2159'. [ 258.753473][T13719] ip6tnl0: Caught tx_queue_len zero misconfig [ 258.998665][T13730] syzkaller1: entered promiscuous mode [ 259.004216][T13730] syzkaller1: entered allmulticast mode [ 259.054983][T13738] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2166'. [ 259.085309][T13739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2162'. [ 259.218426][T13752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2169'. [ 259.332016][T13758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2169'. [ 259.360453][T13758] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 259.503554][T13774] netlink: 'syz.2.2175': attribute type 2 has an invalid length. [ 259.565133][T13779] netlink: 'syz.2.2175': attribute type 2 has an invalid length. [ 259.591895][T13774] #{6c: entered promiscuous mode [ 259.617752][T13779] #{6c: left promiscuous mode [ 259.839698][T13791] can: request_module (can-proto-0) failed. [ 260.170947][T13759] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 260.180165][T13759] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 260.420667][T13826] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2191'. [ 260.669139][T13840] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2196'. [ 261.231106][T13881] xt_socket: unknown flags 0xe4 [ 261.663240][T13914] openvswitch: netlink: Flow actions attr not present in new flow. [ 261.849881][T13920] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 262.098389][T13934] bond0: entered allmulticast mode [ 262.103728][T13934] bond_slave_1: entered allmulticast mode [ 262.119270][T13934] syzkaller0: entered promiscuous mode [ 262.125040][T13934] syzkaller0: entered allmulticast mode [ 262.288538][T13901] lec:lec_atm_close: lec0: Shut down! [ 262.815426][T13965] syzkaller0: entered promiscuous mode [ 262.826462][T13965] syzkaller0: entered allmulticast mode [ 263.360699][T13997] __nla_validate_parse: 15 callbacks suppressed [ 263.360725][T13997] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2238'. [ 263.795439][ T5836] lec:lec_start_xmit: lec0:No lecd attached [ 264.181032][T14032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2245'. [ 264.195825][T14036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2247'. [ 264.226630][T14032] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2245'. [ 264.275315][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2246'. [ 264.501743][T14053] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2251'. [ 264.946188][T14077] bridge0: port 3(gretap0) entered blocking state [ 264.952780][T14077] bridge0: port 3(gretap0) entered disabled state [ 264.981669][T14077] gretap0: entered allmulticast mode [ 265.017885][T14077] gretap0: entered promiscuous mode [ 265.040153][T14079] IPv6: sit3: Disabled Multicast RS [ 265.056331][T14079] sit3: entered allmulticast mode [ 265.567925][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'. [ 265.618784][T14111] validate_nla: 1 callbacks suppressed [ 265.618799][T14111] netlink: 'syz.0.2264': attribute type 1 has an invalid length. [ 265.654288][T14111] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2264'. [ 265.675584][T14111] netlink: 'syz.0.2264': attribute type 1 has an invalid length. [ 265.690179][T14111] netlink: 'syz.0.2264': attribute type 8 has an invalid length. [ 265.698490][T14111] netlink: 606 bytes leftover after parsing attributes in process `syz.0.2264'. [ 265.718787][T14111] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2264'. [ 269.364771][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 269.373233][ C1] lec:lec_tx_timeout: lec0 [ 269.378002][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 275.124690][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 275.132781][ C1] lec:lec_tx_timeout: lec0 [ 275.137779][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 280.144749][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 280.152878][ C1] lec:lec_tx_timeout: lec0 [ 280.158058][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 285.165017][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 285.173076][ C1] lec:lec_tx_timeout: lec0 [ 285.178178][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 289.515434][T14182] __nla_validate_parse: 1 callbacks suppressed [ 289.515458][T14182] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2271'. [ 289.551432][T14190] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2273'. [ 289.554957][T14187] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2272'. [ 289.560992][T14182] openvswitch: netlink: Flow actions attr not present in new flow. [ 289.571649][T14192] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2272'. [ 289.580547][T14190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2273'. [ 289.654303][T14200] netlink: 'syz.2.2273': attribute type 16 has an invalid length. [ 289.683996][T14200] netlink: 'syz.2.2273': attribute type 17 has an invalid length. [ 289.847413][T14200] bridge0: port 1(syz_tun) entered disabled state [ 289.894401][T14200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 290.142268][T14232] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2281'. [ 290.184762][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 290.193389][ C1] lec:lec_tx_timeout: lec0 [ 290.198166][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 290.282231][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2283'. [ 290.312316][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2283'. [ 290.477996][ T6411] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.489165][ T6411] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.499076][ T6411] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.508839][ T6411] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.736596][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2291'. [ 290.878515][T14264] netlink: 'syz.0.2295': attribute type 83 has an invalid length. [ 290.931256][T14267] netlink: 766 bytes leftover after parsing attributes in process `syz.0.2295'. [ 290.964570][T14269] veth0: entered promiscuous mode [ 291.001649][T14269] veth0: left promiscuous mode [ 291.197142][T14271] wireguard0: entered promiscuous mode [ 291.536459][T14297] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 292.047588][T14324] netlink: 'syz.3.2308': attribute type 39 has an invalid length. [ 292.369586][T14340] netlink: Conntrack attr has 4 unknown bytes [ 292.439000][T14345] netlink: 'syz.3.2316': attribute type 8 has an invalid length. [ 292.525696][T14351] netlink: 'syz.3.2318': attribute type 1 has an invalid length. [ 292.586788][T14346] bond9 (unregistering): Released all slaves [ 292.672858][T14351] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 292.923993][T14374] netlink: 'syz.2.2320': attribute type 12 has an invalid length. [ 293.602060][T14423] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 293.739318][T14426] team_slave_0: entered promiscuous mode [ 293.745428][T14426] team_slave_1: entered promiscuous mode [ 293.755439][T14426] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 293.899841][T14442] netdevsim netdevsim4 : left promiscuous mode [ 293.933859][T14442] bond4: left promiscuous mode [ 293.940439][T14442] ip6gre1: left promiscuous mode [ 293.972966][T14442] geneve2: left promiscuous mode [ 293.993298][T14443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.018856][T14443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.034461][ T3529] netdevsim netdevsim4 : unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.043634][ T3529] netdevsim netdevsim4 : unset [1, 0] type 2 family 0 port 256 - 0 [ 294.056529][T14446] ip6gretap0: entered promiscuous mode [ 294.067592][ T3529] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.076733][ T3529] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 256 - 0 [ 294.087033][ T3529] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.099461][ T3529] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 256 - 0 [ 294.115417][ T3529] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.125617][ T3529] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 256 - 0 [ 294.415433][T14462] netlink: 'syz.0.2341': attribute type 51 has an invalid length. [ 294.612498][T14475] netlink: 'syz.0.2344': attribute type 1 has an invalid length. [ 294.634993][T14475] __nla_validate_parse: 14 callbacks suppressed [ 294.635014][T14475] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2344'. [ 295.204730][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 295.212848][ C1] lec:lec_tx_timeout: lec0 [ 295.218696][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 295.485730][T14521] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2363'. [ 295.523228][T14522] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2363'. [ 295.530939][T14523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 295.670337][T14534] netlink: 'syz.2.2364': attribute type 4 has an invalid length. [ 295.692649][T14534] netlink: 'syz.2.2364': attribute type 4 has an invalid length. [ 295.975943][T14553] syzkaller0: entered promiscuous mode [ 295.981585][T14553] syzkaller0: entered allmulticast mode [ 296.021051][T14553] netlink: 'syz.2.2372': attribute type 10 has an invalid length. [ 296.115239][T14560] netlink: 'syz.3.2375': attribute type 1 has an invalid length. [ 296.142682][T14566] x_tables: duplicate underflow at hook 3 [ 296.172983][T14568] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2378'. [ 296.187371][T14571] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2375'. [ 296.187915][T14560] bond10: entered promiscuous mode [ 296.205672][T14560] 8021q: adding VLAN 0 to HW filter on device bond10 [ 296.281456][T14560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2375'. [ 296.371921][T14560] bond10: (slave bridge6): making interface the new active one [ 296.380644][T14560] bridge6: entered promiscuous mode [ 296.392991][T14560] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 296.423622][T14581] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2379'. [ 296.643938][T14593] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2384'. [ 296.969332][T14613] openvswitch: netlink: Message has 1 unknown bytes. [ 296.982893][T14615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2388'. [ 296.986930][T14613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.008191][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2388'. [ 297.256218][T14636] netlink: 'syz.2.2396': attribute type 1 has an invalid length. [ 297.362604][T14647] chnl_net:caif_netlink_parms(): no params data found [ 299.244353][T14689] xt_ipcomp: unknown flags 1D [ 299.291554][T14686] bond1: option mode: unable to set because the bond device has slaves [ 299.333670][T14694] veth1_to_bond: entered promiscuous mode [ 299.407619][T14700] veth1_to_bond: left promiscuous mode [ 300.037848][T14732] __nla_validate_parse: 5 callbacks suppressed [ 300.037868][T14732] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2425'. [ 300.234733][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 300.242819][ C1] lec:lec_tx_timeout: lec0 [ 300.247920][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 300.330556][T14748] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2429'. [ 300.355450][T14748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2429'. [ 300.364560][T14748] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2429'. [ 300.690040][T14769] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2437'. [ 300.891063][T14777] syzkaller0: entered promiscuous mode [ 300.902538][T14777] syzkaller0: entered allmulticast mode [ 301.087475][T14788] netlink: 'syz.0.2441': attribute type 1 has an invalid length. [ 301.228819][T14788] bond9: entered promiscuous mode [ 301.246457][T14788] 8021q: adding VLAN 0 to HW filter on device bond9 [ 301.316750][T14789] 8021q: adding VLAN 0 to HW filter on device bond9 [ 301.337507][T14789] bond9: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 301.358623][T14779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 301.368529][T14789] bond9: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 301.399537][T14789] bond9: (slave ip6gre2): making interface the new active one [ 301.431679][T14789] ip6gre2: entered promiscuous mode [ 301.445339][T14789] bond9: (slave ip6gre2): Enslaving as an active interface with an up link [ 301.476431][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2445'. [ 301.530721][T14803] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2445'. [ 301.566696][ T8187] netdevsim netdevsim4 : set [0, 0] type 1 family 0 port 8472 - 0 [ 301.584799][ T8187] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.605789][ T8187] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.643000][ T8187] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.820646][T14814] bond9: option resend_igmp: invalid value (32767) [ 301.853895][T14814] bond9: option resend_igmp: allowed values 0 - 255 [ 301.883753][T14814] bond9 (unregistering): Released all slaves [ 302.064904][T14829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2454'. [ 302.796313][T14875] 8021q: VLANs not supported on tunl0 [ 302.839074][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2470'. [ 302.927601][T14886] lo speed is unknown, defaulting to 1000 [ 303.120190][T14902] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2475'. [ 303.142212][T14904] tipc: Started in network mode [ 303.189710][T14904] tipc: Node identity 4, cluster identity 4711 [ 303.232851][T14904] tipc: Node number set to 4 [ 303.337031][T14918] geneve2: entered promiscuous mode [ 303.532505][T14934] xt_cgroup: path and classid specified [ 304.830417][T15023] netlink: 'syz.0.2508': attribute type 58 has an invalid length. [ 304.872756][T15026] lo: Caught tx_queue_len zero misconfig [ 305.057650][T15041] __nla_validate_parse: 4 callbacks suppressed [ 305.057673][T15041] netlink: 216 bytes leftover after parsing attributes in process `syz.2.2511'. [ 305.069485][T15040] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 305.075627][T15041] netlink: 'syz.2.2511': attribute type 2 has an invalid length. [ 305.097738][T15041] netlink: 'syz.2.2511': attribute type 30 has an invalid length. [ 305.108245][T15041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2511'. [ 305.156610][T15043] netlink: 'syz.0.2514': attribute type 21 has an invalid length. [ 305.248459][T15047] netlink: 'syz.4.2515': attribute type 10 has an invalid length. [ 305.256466][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 305.256538][ C1] lec:lec_tx_timeout: lec0 [ 305.263161][T15050] netlink: 'syz.2.2516': attribute type 1 has an invalid length. [ 305.265335][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 305.270778][T15050] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2516'. [ 305.294083][T15050] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2516'. [ 305.303679][T15050] netlink: 'syz.2.2516': attribute type 1 has an invalid length. [ 305.312038][T15050] netlink: 'syz.2.2516': attribute type 8 has an invalid length. [ 305.324811][T15050] netlink: 606 bytes leftover after parsing attributes in process `syz.2.2516'. [ 305.334447][T15047] veth0_vlan: left promiscuous mode [ 305.348709][T15047] veth0_vlan: entered promiscuous mode [ 305.359544][T15047] team0: Device veth0_vlan failed to register rx_handler [ 305.373346][T15055] netlink: 'syz.0.2518': attribute type 2 has an invalid length. [ 305.395436][T15058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2519'. [ 305.533476][T15060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2519'. [ 305.544459][T15062] gretap3: entered promiscuous mode [ 305.555933][T15062] batman_adv: batadv0: Adding interface: gretap3 [ 305.562764][T15062] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 305.601214][T15062] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 305.784028][T15078] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2526'. [ 305.984286][T15090] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2530'. [ 306.022385][T15090] bond0: entered promiscuous mode [ 306.041120][T15090] bond0: left promiscuous mode [ 306.312419][T15112] openvswitch: netlink: Key type 343 is out of range max 32 [ 306.336772][T15108] validate_nla: 1 callbacks suppressed [ 306.336792][T15108] netlink: 'syz.0.2535': attribute type 16 has an invalid length. [ 306.350976][T15108] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2535'. [ 306.482115][T15122] netlink: 'syz.3.2541': attribute type 51 has an invalid length. [ 306.518749][T15122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.530863][T15122] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.541695][T15122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.549514][T15122] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.580043][T15125] vlan0: entered promiscuous mode [ 306.585766][T15125] bridge0: entered promiscuous mode [ 306.750120][T15143] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.922372][T15157] veth0: entered promiscuous mode [ 306.977397][T15156] veth0: left promiscuous mode [ 307.023748][T15163] netlink: 'syz.4.2552': attribute type 1 has an invalid length. [ 307.113685][T15163] 8021q: adding VLAN 0 to HW filter on device bond8 [ 307.150204][T15164] bond8: (slave ip6erspan0): making interface the new active one [ 307.181828][T15164] bond8: (slave ip6erspan0): Enslaving as an active interface with an up link [ 307.284962][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 307.545059][T15199] netlink: 'syz.2.2561': attribute type 1 has an invalid length. [ 307.716470][T15203] syzkaller0: entered promiscuous mode [ 307.729242][T15209] netlink: 'syz.2.2565': attribute type 13 has an invalid length. [ 307.737676][T15203] syzkaller0: entered allmulticast mode [ 307.747413][T15209] netlink: 'syz.2.2565': attribute type 58 has an invalid length. [ 307.787256][T15213] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 310.170253][T15295] netlink: 'syz.3.2585': attribute type 2 has an invalid length. [ 310.235203][T15304] __nla_validate_parse: 8 callbacks suppressed [ 310.235226][T15304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2586'. [ 310.378763][T15308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2588'. [ 310.623766][T15328] syzkaller0: entered allmulticast mode [ 310.663920][T15327] syzkaller0: left allmulticast mode [ 310.982365][T15347] netlink: 84 bytes leftover after parsing attributes in process `syz.0.2600'. [ 311.044698][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 311.052755][ C1] lec:lec_tx_timeout: lec0 [ 311.057929][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 311.141507][T15355] netlink: 'syz.2.2603': attribute type 14 has an invalid length. [ 311.152135][T15356] netlink: 'syz.3.2601': attribute type 2 has an invalid length. [ 311.331496][T15367] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2605'. [ 311.362652][T15367] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2605'. [ 311.374950][T15372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2605'. [ 311.433382][T15367] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2605'. [ 311.510598][T15381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2607'. [ 311.578089][T15387] bridge0: port 3(gretap0) entered blocking state [ 311.588503][T15387] bridge0: port 3(gretap0) entered disabled state [ 311.595420][T15387] gretap0: entered allmulticast mode [ 311.603219][T15387] gretap0: entered promiscuous mode [ 311.675960][T15390] netlink: 'syz.0.2611': attribute type 1 has an invalid length. [ 311.751350][T15394] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 311.779547][T15390] 8021q: adding VLAN 0 to HW filter on device bond10 [ 311.799332][T15393] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 311.869807][T15390] 8021q: adding VLAN 0 to HW filter on device bond11 [ 311.880645][T15390] bond10: (slave bond11): Enslaving as an active interface with a down link [ 311.920030][T15399] bond11 (unregistering): Released all slaves [ 312.239076][T15411] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2616'. [ 312.256102][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 312.510728][T15433] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2621'. [ 312.867152][T15453] bridge0: port 3(gretap0) entered blocking state [ 312.873817][T15453] bridge0: port 3(gretap0) entered forwarding state [ 313.118767][T15465] veth11: entered promiscuous mode [ 313.126658][T15465] veth11: entered allmulticast mode [ 313.210854][T15472] netlink: 'syz.0.2635': attribute type 1 has an invalid length. [ 313.958797][T15505] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 314.003156][T15505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.532214][T15529] xt_SECMARK: invalid mode: 9 [ 314.799486][T15545] netlink: 'syz.4.2661': attribute type 3 has an invalid length. [ 314.815006][T15545] netlink: 'syz.4.2661': attribute type 3 has an invalid length. [ 315.478742][T15570] __nla_validate_parse: 10 callbacks suppressed [ 315.478766][T15570] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2668'. [ 315.666440][T15583] netlink: 'syz.2.2671': attribute type 1 has an invalid length. [ 315.700543][T15583] bond9: entered promiscuous mode [ 315.707038][T15583] 8021q: adding VLAN 0 to HW filter on device bond9 [ 315.733971][T15583] bond9: (slave bridge5): making interface the new active one [ 315.742831][T15583] bridge5: entered promiscuous mode [ 315.749922][T15583] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 315.765006][T15585] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2673'. [ 315.911308][T15596] xt_TCPMSS: Only works on TCP SYN packets [ 315.941248][T15596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2675'. [ 315.973090][T15596] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2675'. [ 316.085084][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 316.093202][ C1] lec:lec_tx_timeout: lec0 [ 316.099041][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 316.305629][T15618] xt_CT: You must specify a L4 protocol and not use inversions on it [ 316.328179][T15618] syzkaller0: entered promiscuous mode [ 316.349120][T15618] syzkaller0: entered allmulticast mode [ 316.440533][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2683'. [ 316.505677][T15625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2684'. [ 316.564530][T15625] bridge0: entered promiscuous mode [ 316.574590][T15625] macsec1: entered promiscuous mode [ 316.599504][T15625] macsec1: entered allmulticast mode [ 316.607885][T15625] bridge0: entered allmulticast mode [ 316.636541][T15625] bridge0: port 4(macsec1) entered blocking state [ 316.653421][T15625] bridge0: port 4(macsec1) entered disabled state [ 316.683924][T15630] netlink: 'syz.4.2689': attribute type 21 has an invalid length. [ 316.693944][T15630] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2689'. [ 316.747894][T15625] bridge0: left allmulticast mode [ 316.755247][T15625] bridge0: left promiscuous mode [ 316.827799][T15640] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.962931][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2691'. [ 316.989983][T15650] netlink: 'syz.2.2692': attribute type 1 has an invalid length. [ 317.014880][T15650] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2692'. [ 317.063382][T15652] syzkaller0: entered promiscuous mode [ 317.068769][T15656] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2694'. [ 317.074863][T15652] syzkaller0: entered allmulticast mode [ 317.088641][T15656] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 320.561275][T15705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 320.643609][T15705] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.716468][T15718] __nla_validate_parse: 7 callbacks suppressed [ 320.716491][T15718] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.2711'. [ 320.825890][T15724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2714'. [ 320.923913][T15728] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2715'. [ 321.013773][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2713'. [ 321.041280][T15733] netlink: 'syz.4.2717': attribute type 2 has an invalid length. [ 321.114769][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 321.122844][ C1] lec:lec_tx_timeout: lec0 [ 321.127851][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 321.199169][T15740] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2718'. [ 321.504400][T15756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2725'. [ 321.531482][T15754] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2724'. [ 321.599802][T15756] syzkaller1: entered promiscuous mode [ 321.615893][T15756] syzkaller1: entered allmulticast mode [ 321.766549][T15762] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2726'. [ 321.775584][T15760] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.215602][T15800] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2733'. [ 322.559600][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2740'. [ 322.749760][T15825] netlink: 'syz.2.2742': attribute type 33 has an invalid length. [ 322.873269][T15825] bond10: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 322.944211][T15825] bond10 (unregistering): Released all slaves [ 323.192686][T15805] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 323.199366][T15805] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 323.291261][T15805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 323.304610][T15805] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 323.341534][T15856] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 323.360810][T15805] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 323.368871][T15856] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 323.382706][T15805] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 323.426397][T15805] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 323.432373][T15805] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 323.471935][T15857] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 323.514985][T15857] bond10 (unregistering): Released all slaves [ 323.959092][T15880] kthread_run failed with err -4 [ 324.154501][T15896] : renamed from hsr0 [ 324.328112][T15906] netlink: 'syz.1.2762': attribute type 21 has an invalid length. [ 324.707526][T15930] netlink: 'syz.2.2765': attribute type 1 has an invalid length. [ 324.866746][T15944] netlink: 'syz.3.2768': attribute type 3 has an invalid length. [ 325.545640][T15986] netlink: 'syz.1.2779': attribute type 1 has an invalid length. [ 325.626412][T15995] xt_hashlimit: size too large, truncated to 1048576 [ 325.677534][T15997] nbd: couldn't find device at index 65536 [ 325.863914][T16002] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 325.891581][T16004] __nla_validate_parse: 31 callbacks suppressed [ 325.891602][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2782'. [ 325.907775][T16004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2782'. [ 325.941689][T16002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2781'. [ 326.134758][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 326.143041][ C1] lec:lec_tx_timeout: lec0 [ 326.148186][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 326.293606][T16023] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2785'. [ 326.453812][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2787'. [ 326.481709][T16026] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2787'. [ 326.752720][T16047] netlink: 'syz.3.2792': attribute type 2 has an invalid length. [ 326.794374][T16047] 9: entered promiscuous mode [ 326.840893][T16049] veth0_vlan: entered allmulticast mode [ 326.855975][T16049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2793'. [ 326.909627][T16049] netlink: 'syz.4.2793': attribute type 21 has an invalid length. [ 326.940962][T16052] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2794'. [ 327.002928][T16052] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2794'. [ 327.460062][T16077] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 327.536596][T16088] syzkaller1: left promiscuous mode [ 327.567192][T16088] syzkaller1: left allmulticast mode [ 327.861058][T16098] syzkaller0: tun_chr_ioctl cmd 1074813040 [ 328.298542][ T5832] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 328.309177][ T5832] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 328.320934][ T5832] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 328.330118][ T5832] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 328.341378][ T5832] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 328.447921][ T5146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 328.458689][ T5146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 328.483570][ T5146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 328.503945][ T5146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 328.518809][ T5146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 328.777952][T16140] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 328.901172][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2815'. [ 330.424394][T16151] bridge6: port 1(veth11) entered blocking state [ 330.428922][T16164] xt_hashlimit: size too large, truncated to 1048576 [ 330.431435][T16151] bridge6: port 1(veth11) entered disabled state [ 330.451729][T16151] veth11: entered allmulticast mode [ 330.459115][T16151] veth11: entered promiscuous mode [ 330.488508][T16153] bridge6: port 2(veth13) entered blocking state [ 330.495843][T16153] bridge6: port 2(veth13) entered disabled state [ 330.502588][T16153] veth13: entered allmulticast mode [ 330.511128][T16153] veth13: entered promiscuous mode [ 330.518499][T16152] tipc: MTU too low for tipc bearer [ 330.574873][ T5146] Bluetooth: hci5: command tx timeout [ 330.655203][T16124] lo speed is unknown, defaulting to 1000 [ 331.154977][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 331.163127][ C1] lec:lec_tx_timeout: lec0 [ 331.168187][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 331.230325][T16198] __nla_validate_parse: 2 callbacks suppressed [ 331.230346][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2828'. [ 331.501942][T16124] chnl_net:caif_netlink_parms(): no params data found [ 331.721829][T16124] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.730312][T16124] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.738955][T16124] bridge_slave_0: entered allmulticast mode [ 331.747303][T16124] bridge_slave_0: entered promiscuous mode [ 331.763761][T16124] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.778617][T16124] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.786389][T16124] bridge_slave_1: entered allmulticast mode [ 331.795489][T16124] bridge_slave_1: entered promiscuous mode [ 331.867201][T16124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 331.882642][T16124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.933521][T16124] team0: Port device team_slave_0 added [ 331.942707][T16124] team0: Port device team_slave_1 added [ 332.005655][T16124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.014202][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.041010][T16124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.053375][T16124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.061032][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.090844][T16124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.155717][T16124] hsr_slave_0: entered promiscuous mode [ 332.162895][T16124] hsr_slave_1: entered promiscuous mode [ 332.655217][ T5146] Bluetooth: hci5: command tx timeout [ 333.809011][T16174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 333.880472][T16124] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 333.938133][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 333.953151][T16124] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 334.014976][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 334.034081][T16124] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 334.048122][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 334.056439][T16124] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 334.082027][T16124] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 334.302552][T16278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2842'. [ 334.341377][T16278] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2842'. [ 334.365993][T16279] syzkaller1: entered promiscuous mode [ 334.371540][T16279] syzkaller1: entered allmulticast mode [ 334.508907][T16124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.527165][T16285] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 334.558826][T16124] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.631181][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.638413][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.673868][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.681028][ T6411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.722958][T16307] tipc: Started in network mode [ 334.728964][T16307] tipc: Node identity 4, cluster identity 5 [ 334.735510][ T5146] Bluetooth: hci5: command tx timeout [ 334.747235][T16307] tipc: Node number set to 4 [ 334.767915][T16309] netlink: 'syz.1.2850': attribute type 2 has an invalid length. [ 334.815298][T16310] netlink: 830 bytes leftover after parsing attributes in process `syz.1.2850'. [ 334.969950][T16315] lo: left allmulticast mode [ 335.202230][T16327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2854'. [ 335.250191][T16330] xt_hashlimit: size too large, truncated to 1048576 [ 335.300525][T16311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 335.337182][T16124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 335.541073][T16337] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2856'. [ 335.716485][T16344] x_tables: duplicate underflow at hook 1 [ 336.188620][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 336.196800][ C1] lec:lec_tx_timeout: lec0 [ 336.201394][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 336.806475][ T5146] Bluetooth: hci5: command tx timeout [ 337.371835][T16124] veth0_vlan: entered promiscuous mode [ 337.431004][T16124] veth1_vlan: entered promiscuous mode [ 337.492574][T16372] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2866'. [ 337.515396][T16372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2866'. [ 337.534999][T16372] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2866'. [ 337.560789][T16374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2867'. [ 337.601910][T16124] veth0_macvtap: entered promiscuous mode [ 337.621703][T16124] veth1_macvtap: entered promiscuous mode [ 337.634268][T16376] veth1_macvtap: left promiscuous mode [ 337.652359][T16376] siw: device registration error -23 [ 337.710064][T16124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.715198][T16379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2869'. [ 337.750688][T16379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2869'. [ 337.768043][T16124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.818130][ T6411] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.828433][ T6411] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.867026][ T6411] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.883247][ T6411] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.034374][T16390] IPv6: NLM_F_CREATE should be specified when creating new route [ 338.042878][T16390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2872'. [ 338.519965][T16396] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2873'. [ 338.643899][T16396] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2873'. [ 338.696082][T16397] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 338.708527][T16397] bond9 (unregistering): Released all slaves [ 338.822723][T16389] lo speed is unknown, defaulting to 1000 [ 338.904956][T16407] netlink: 88 bytes leftover after parsing attributes in process `syz.1.2875'. [ 338.964536][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.997260][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.078032][T16410] bridge0: port 1(syz_tun) entered disabled state [ 339.095381][T16410] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 339.102979][T16410] gtp0: left promiscuous mode [ 339.110650][T16410] gretap1: left promiscuous mode [ 339.118073][T16410] geneve2: left promiscuous mode [ 339.123298][T16410] hsr1: left promiscuous mode [ 339.135587][T16410] bond0: left promiscuous mode [ 339.140684][T16410] bridge2: left promiscuous mode [ 339.161905][T16410] vlan0: left promiscuous mode [ 339.167355][T16410] bridge0: left promiscuous mode [ 339.173182][T16410] bond9: left promiscuous mode [ 339.179706][T16410] bridge5: left promiscuous mode [ 339.200128][ T3529] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.217298][ T3529] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.235176][ T3529] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.246082][ T3529] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.247514][ T8188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 339.282993][ T8188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.428867][T16414] veth1_to_team: Caught tx_queue_len zero misconfig [ 339.457014][T16423] netlink: 'syz.0.2808': attribute type 1 has an invalid length. [ 339.467300][T16423] netlink: 'syz.0.2808': attribute type 4 has an invalid length. [ 339.755089][T16431] netlink: 'syz.0.2882': attribute type 29 has an invalid length. [ 339.780185][T16428] netlink: 'syz.0.2882': attribute type 29 has an invalid length. [ 339.918954][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 339.938471][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 339.947156][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 339.956892][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 339.968049][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.218801][T16434] lo speed is unknown, defaulting to 1000 [ 340.560497][ T128] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.707473][ T128] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.825764][ T128] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.030973][ T128] netdevsim netdevsim4  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 341.143783][T16471] xfrm2: entered promiscuous mode [ 341.169080][T16471] xfrm2: entered allmulticast mode [ 341.215046][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 341.223128][ C1] lec:lec_tx_timeout: lec0 [ 341.228216][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 341.352439][T16484] tipc: Enabling of bearer rejected, failed to enable media [ 341.623198][ T128] gretap0: left allmulticast mode [ 341.643133][ T128] gretap0: left promiscuous mode [ 341.665779][ T128] bridge0: port 3(gretap0) entered disabled state [ 341.716340][ T128] bridge_slave_1: left allmulticast mode [ 341.732303][ T128] bridge_slave_1: left promiscuous mode [ 341.745023][ T128] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.006928][ T5832] Bluetooth: hci0: command tx timeout [ 342.182240][ T128] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 342.244042][ T128] bond8 (unregistering): (slave ip6erspan0): Releasing active interface [ 342.356515][T16525] netlink: 'syz.1.2904': attribute type 1 has an invalid length. [ 342.364344][T16525] netlink: 'syz.1.2904': attribute type 1 has an invalid length. [ 342.377740][ T128] bond1 (unregistering): (slave xfrm1): Releasing backup interface [ 342.501111][ T128] batman_adv: batadv0: Removing interface: gretap3 [ 342.537022][T16535] __nla_validate_parse: 18 callbacks suppressed [ 342.537062][T16535] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2906'. [ 342.709371][ T128] bond3 (unregistering): (slave bridge2): Releasing backup interface [ 342.717815][ T128] bond3 (unregistering): (slave bridge2): the permanent HWaddr of slave - a2:ff:68:b4:7b:03 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 342.770481][ T128] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 343.132805][ T128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.143952][ T128] bond_slave_1: left allmulticast mode [ 343.150158][ T128] bond0 (unregistering): Released all slaves [ 343.161718][ T128] bond1 (unregistering): Released all slaves [ 343.175418][ T128] bond2 (unregistering): Released all slaves [ 343.190979][ T128] bond3 (unregistering): Released all slaves [ 343.206111][ T128] bond4 (unregistering): Released all slaves [ 343.222285][ T128] bond5 (unregistering): Released all slaves [ 343.242849][ T128] bond6 (unregistering): Released all slaves [ 343.268587][ T128] bond7 (unregistering): Released all slaves [ 343.283156][ T128] bond8 (unregistering): Released all slaves [ 343.443316][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 343.467905][T16543] delete_channel: no stack [ 343.508948][ T128] 9: left promiscuous mode [ 343.611110][T16434] chnl_net:caif_netlink_parms(): no params data found [ 343.681262][ T128] tipc: Left network mode [ 343.682311][T16552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2910'. [ 343.850366][T16559] "syz.1.2913" (16559) uses obsolete ecb(arc4) skcipher [ 343.993886][T16562] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2914'. [ 344.008376][T16562] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2914'. [ 344.053624][T16562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2914'. [ 344.085169][ T5832] Bluetooth: hci0: command tx timeout [ 344.548747][T16434] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.566914][T16434] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.595600][T16434] bridge_slave_0: entered allmulticast mode [ 344.609972][T16602] can: request_module (can-proto-0) failed. [ 344.627135][T16434] bridge_slave_0: entered promiscuous mode [ 344.656571][T16434] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.663991][T16434] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.689524][T16434] bridge_slave_1: entered allmulticast mode [ 344.767170][T16434] bridge_slave_1: entered promiscuous mode [ 344.994552][T16613] vcan0: entered promiscuous mode [ 345.027362][T16613] vcan0: entered allmulticast mode [ 345.083594][T16434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.112966][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 345.134457][T16618] bond0: (slave gre0): refused to change device type [ 345.167098][T16434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.345710][T16434] team0: Port device team_slave_0 added [ 345.373952][T16434] team0: Port device team_slave_1 added [ 345.380001][T16620] lo speed is unknown, defaulting to 1000 [ 345.629214][T16434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.646534][T16434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.719682][T16434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.748173][T16434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.777289][T16434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.826277][T16434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.894932][T16646] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2931'. [ 345.961398][T16646] openvswitch: netlink: Tunnel attr 78 out of range max 16 [ 346.165953][ T5832] Bluetooth: hci0: command tx timeout [ 346.188260][T16434] hsr_slave_0: entered promiscuous mode [ 346.218001][T16434] hsr_slave_1: entered promiscuous mode [ 346.234705][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 346.242911][ C1] lec:lec_tx_timeout: lec0 [ 346.248189][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 346.263741][T16434] debugfs: 'hsr0' already exists in 'hsr' [ 346.304819][T16434] Cannot create hsr debugfs directory [ 347.041054][ T128] hsr_slave_0: left promiscuous mode [ 347.056021][ T128] hsr_slave_1: left promiscuous mode [ 347.063527][ T128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.073165][ T128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.087479][T16691] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2938'. [ 347.100355][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2938'. [ 347.109952][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2938'. [ 347.159274][ T128] pim6reg527 (unregistering): left allmulticast mode [ 347.211003][T16698] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2938'. [ 347.373906][ T128] team0 (unregistering): Port device team_slave_1 removed [ 347.389189][ T128] team0 (unregistering): Port device team_slave_0 removed [ 347.503926][ T5491] 8021q: adding VLAN 0 to HW filter on device eth3 [ 347.772245][T16709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2941'. [ 347.842069][T16709] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 347.846280][T16691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.857837][T16709] team0: Failed to send port change of device batadv1 via netlink (err -105) [ 347.858114][T16709] team0: Failed to send options change via netlink (err -105) [ 347.901032][T16709] team0: Port device batadv1 added [ 348.010291][T16713] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2943'. [ 348.071912][T16715] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2943'. [ 348.245200][ T5832] Bluetooth: hci0: command tx timeout [ 348.530901][ T128] IPVS: stop unused estimator thread 0... [ 348.591398][T16737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2949'. [ 348.620416][T16741] netlink: 'syz.0.2950': attribute type 8 has an invalid length. [ 348.678172][T16741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2950'. [ 348.719563][T16741] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.727423][T16741] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.085814][T16434] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 349.154336][T16434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 349.186628][T16434] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 349.208852][T16434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 349.236995][T16434] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 349.255801][T16434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 349.266650][T16434] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 349.301262][T16434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.444318][T16777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2957'. [ 349.485652][T16777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2957'. [ 349.514936][T16777] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2957'. [ 349.545936][T16783] netlink: 'syz.2.2957': attribute type 21 has an invalid length. [ 349.667630][T16789] netlink: 'syz.1.2958': attribute type 1 has an invalid length. [ 349.734160][T16772] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.778533][T16772] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.024086][ T1115] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.074006][ T1115] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.107767][ T1115] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.135576][ T1115] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.288968][T16812] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.312310][T16816] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2963'. [ 350.338579][T16816] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2963'. [ 350.347036][T16434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.438203][T16434] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.511966][ T128] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.519235][ T128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.601573][ T3529] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.608812][ T3529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.680899][T16823] IPv6: sit3: Disabled Multicast RS [ 350.695827][T16823] sit3: entered allmulticast mode [ 351.054518][T16850] netlink: 'syz.3.2973': attribute type 83 has an invalid length. [ 351.120801][T16850] netlink: 'syz.3.2973': attribute type 10 has an invalid length. [ 351.132481][T16850] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 351.264672][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 351.272948][ C1] lec:lec_tx_timeout: lec0 [ 351.278306][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 351.589483][T16434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.015713][T16896] xt_hashlimit: size too large, truncated to 1048576 [ 352.498987][T16918] syzkaller0: entered promiscuous mode [ 352.529411][T16918] syzkaller0: entered allmulticast mode [ 352.677430][T16924] netlink: 'syz.3.2985': attribute type 10 has an invalid length. [ 352.728944][T16924] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 352.748823][T16924] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.759980][T16924] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 352.853920][T16434] veth0_vlan: entered promiscuous mode [ 352.919029][T16434] veth1_vlan: entered promiscuous mode [ 353.042417][T16434] veth0_macvtap: entered promiscuous mode [ 353.086594][T16434] veth1_macvtap: entered promiscuous mode [ 353.170850][T16434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.239527][T16434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.329014][ T8188] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.361994][ T8188] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.422055][ T8188] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.466703][ T8201] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.521368][T16946] lo speed is unknown, defaulting to 1000 [ 353.722713][ T8187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 353.745443][ T8187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.012662][T16977] gre4: entered promiscuous mode [ 354.017970][T16977] gre4: entered allmulticast mode [ 354.027338][ T8201] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.049177][ T8201] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.470845][T16998] syzkaller0: entered promiscuous mode [ 354.477950][T16998] syzkaller0: entered allmulticast mode [ 354.496372][T16998] netlink: 'syz.4.2881': attribute type 4 has an invalid length. [ 354.510007][T16998] __nla_validate_parse: 3 callbacks suppressed [ 354.510027][T16998] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2881'. [ 355.139035][ T5146] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 355.148692][ T5146] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 355.156881][ T5146] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 355.165697][ T5146] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 355.173481][ T5146] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 355.432953][T17032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3009'. [ 355.682464][T17020] lo speed is unknown, defaulting to 1000 [ 355.809763][T17045] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3012'. [ 356.027970][ T1115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.085427][ T1115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 356.107251][ T1115] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.227690][T17045] xfrm1: entered promiscuous mode [ 356.264487][T17045] xfrm1: entered allmulticast mode [ 356.270858][T17051] bond0: entered allmulticast mode [ 356.305344][T17051] bond_slave_0: entered allmulticast mode [ 356.318176][T17051] bond_slave_1: entered allmulticast mode [ 356.325654][T17067] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3016'. [ 356.489431][ T1115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.516669][ T1115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 356.556195][ T1115] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.663876][T17076] netlink: 'syz.4.3018': attribute type 1 has an invalid length. [ 356.734074][ T1115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.750106][ T1115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 356.761393][ T1115] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.789383][T17082] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3019'. [ 356.807376][T17082] netlink: 'syz.2.3019': attribute type 2 has an invalid length. [ 356.917169][ T1115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.935793][ T1115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 356.955373][ T1115] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.960963][T17085] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 357.044660][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5770 ms [ 357.052729][ C1] lec:lec_tx_timeout: lec0 [ 357.058022][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 357.285607][ T5146] Bluetooth: hci2: command tx timeout [ 357.580539][ T1115] gretap0: left allmulticast mode [ 357.589138][ T1115] gretap0: left promiscuous mode [ 357.603339][ T1115] bridge0: port 3(gretap0) entered disabled state [ 357.626738][ T1115] bridge_slave_1: left allmulticast mode [ 357.654687][ T1115] bridge_slave_1: left promiscuous mode [ 357.660546][ T1115] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.718843][ T1115] bridge_slave_0: left allmulticast mode [ 357.744100][ T1115] bridge_slave_0: left promiscuous mode [ 357.757063][ T1115] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.795976][T17113] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3024'. [ 357.814215][ T1115] veth13: left allmulticast mode [ 357.830410][ T1115] veth13: left promiscuous mode [ 357.852678][ T1115] bridge6: port 2(veth13) entered disabled state [ 357.894014][ T1115] veth11: left allmulticast mode [ 357.912572][ T1115] veth11: left promiscuous mode [ 357.930276][ T1115] bridge6: port 1(veth11) entered disabled state [ 358.110805][T17095] infiniband sy1: set down [ 358.125984][T17095] infiniband sy1: added bond0 [ 358.247943][T17095] RDS/IB: sy1: added [ 358.262428][T17095] smc: adding ib device sy1 with port count 1 [ 358.269941][T17095] smc: ib device sy1 port 1 has no pnetid [ 358.380792][ T1115] bond5 (unregistering): (slave vti0): Releasing backup interface [ 358.392199][ T1115] vti0 (unregistering): left promiscuous mode [ 358.443364][ T1115] bond8 (unregistering): (slave gretap1): Releasing active interface [ 358.790519][ T1115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.802567][ T1115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.816638][ T1115] bond0 (unregistering): Released all slaves [ 358.829346][ T1115] bond1 (unregistering): Released all slaves [ 358.842438][ T1115] bond2 (unregistering): Released all slaves [ 358.857393][ T1115] bond3 (unregistering): Released all slaves [ 358.871993][ T1115] bond4 (unregistering): (slave veth3): Releasing active interface [ 358.881994][ T1115] bond4 (unregistering): (slave veth5): Releasing active interface [ 358.904066][ T1115] bond4 (unregistering): Released all slaves [ 358.918849][ T1115] bond5 (unregistering): Released all slaves [ 358.933110][ T1115] bond6 (unregistering): Released all slaves [ 358.947205][ T1115] bond7 (unregistering): Released all slaves [ 358.963458][ T1115] bond8 (unregistering): Released all slaves [ 359.039009][ T5491] veth0_vlan: left promiscuous mode [ 359.083597][ T5491] veth0_vlan: entered promiscuous mode [ 359.196390][T17142] IPVS: set_ctl: invalid protocol: 117 172.20.20.170:20000 [ 359.210110][T17140] veth0_to_bond: mtu less than device minimum [ 359.299482][ T1115] tipc: Left network mode [ 359.376432][ T5146] Bluetooth: hci2: command tx timeout [ 359.480035][T17020] chnl_net:caif_netlink_parms(): no params data found [ 359.537736][T17155] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 359.829002][T17170] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3035'. [ 360.252851][T17186] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3037'. [ 360.261822][T17020] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.270647][T17187] netlink: 'syz.4.3038': attribute type 17 has an invalid length. [ 360.279444][T17020] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.284741][T17187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3038'. [ 360.297457][T17187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3038'. [ 360.303744][T17020] bridge_slave_0: entered allmulticast mode [ 360.314353][T17020] bridge_slave_0: entered promiscuous mode [ 360.420418][T17187] gretap0: entered promiscuous mode [ 360.476443][T17187] gretap0: left promiscuous mode [ 360.531658][T17020] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.557120][T17020] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.575900][T17020] bridge_slave_1: entered allmulticast mode [ 360.604935][T17020] bridge_slave_1: entered promiscuous mode [ 360.632688][ T9] IPVS: starting estimator thread 0... [ 360.744893][T17197] IPVS: using max 30 ests per chain, 72000 per kthread [ 360.794438][ T5491] 8021q: adding VLAN 0 to HW filter on device eth1 [ 360.858267][T17020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.953557][T17209] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3043'. [ 360.968197][T17020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.074576][T17020] team0: Port device team_slave_0 added [ 361.080101][T17212] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3044'. [ 361.100203][T17020] team0: Port device team_slave_1 added [ 361.339752][T17020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.372158][T17020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.445161][ T5146] Bluetooth: hci2: command tx timeout [ 361.462836][T17020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.540870][T17020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.558692][T17020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.590709][T17020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.610481][T17226] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3046'. [ 361.809824][T17234] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3047'. [ 361.827582][T17233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3048'. [ 361.853855][T17234] netlink: 'syz.3.3047': attribute type 9 has an invalid length. [ 361.863035][T17020] hsr_slave_0: entered promiscuous mode [ 361.868240][T17239] blkio.reset_stats is deprecated [ 361.873261][T17020] hsr_slave_1: entered promiscuous mode [ 361.894410][T17020] debugfs: 'hsr0' already exists in 'hsr' [ 361.895247][T17242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3048'. [ 361.909215][T17020] Cannot create hsr debugfs directory [ 362.041946][ T128] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.084719][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 362.092873][ C1] lec:lec_tx_timeout: lec0 [ 362.098083][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 362.190138][ T128] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.223126][ T128] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.358851][ T128] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.676043][ T5491] 8021q: adding VLAN 0 to HW filter on device eth2 [ 362.813635][T17287] netlink: 'syz.4.3059': attribute type 1 has an invalid length. [ 362.947177][T17289] sit3: entered promiscuous mode [ 362.952227][T17289] sit3: entered allmulticast mode [ 363.009262][T17294] 8021q: VLANs not supported on ip6_vti0 [ 363.525510][ T5146] Bluetooth: hci2: command tx timeout [ 363.738674][T17329] netlink: 'syz.0.3067': attribute type 13 has an invalid length. [ 363.762571][T17330] netlink: 'syz.0.3067': attribute type 10 has an invalid length. [ 363.798041][T17329] gretap0: refused to change device tx_queue_len [ 363.814600][T17329] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 363.857284][T17330] batadv0: entered promiscuous mode [ 363.871928][T17330] batadv0: entered allmulticast mode [ 363.889671][T17330] bridge0: port 3(batadv0) entered blocking state [ 363.911633][T17330] bridge0: port 3(batadv0) entered disabled state [ 364.099385][T17020] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 364.136777][T17020] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 364.218197][T17020] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 364.243788][T17020] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 364.265633][T17020] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 364.266727][ T8188] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 364.275395][T17349] netlink: 'syz.0.3071': attribute type 1 has an invalid length. [ 364.283039][ T8188] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 364.310165][T17020] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 364.321590][T17020] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 364.339572][T17020] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 364.687445][T17369] netlink: 'syz.3.3074': attribute type 9 has an invalid length. [ 364.787995][T17020] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.848516][T17020] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.879739][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.887008][ T6411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.961926][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.969300][ T6411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.080080][T17321] lo speed is unknown, defaulting to 1000 [ 365.090991][T17321] lo speed is unknown, defaulting to 1000 [ 365.127639][T17321] lo speed is unknown, defaulting to 1000 [ 365.170910][T17020] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 365.219467][T17321] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 365.469361][T17321] lo speed is unknown, defaulting to 1000 [ 365.492325][T17321] lo speed is unknown, defaulting to 1000 [ 365.557083][T17321] lo speed is unknown, defaulting to 1000 [ 365.598644][T17321] lo speed is unknown, defaulting to 1000 [ 365.647618][T17321] lo speed is unknown, defaulting to 1000 [ 365.653761][T17405] syzkaller0: entered promiscuous mode [ 365.690164][T17321] lo speed is unknown, defaulting to 1000 [ 366.220994][T17431] __nla_validate_parse: 14 callbacks suppressed [ 366.221014][T17431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3084'. [ 366.256132][T17020] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.318780][T17431] netlink: 'syz.3.3084': attribute type 9 has an invalid length. [ 366.391634][ T1115] hsr_slave_1: left promiscuous mode [ 366.400454][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.412284][T17440] xt_hashlimit: size too large, truncated to 1048576 [ 366.420006][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.477359][ T1115] veth0_macvtap: left promiscuous mode [ 366.496307][ T1115] veth1_vlan: left promiscuous mode [ 367.104879][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 367.112978][ C1] lec:lec_tx_timeout: lec0 [ 367.118027][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 367.654483][T17473] netlink: 'syz.4.3092': attribute type 25 has an invalid length. [ 367.839704][T17479] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.3093'. [ 367.874393][T17020] veth0_vlan: entered promiscuous mode [ 367.936710][T17020] veth1_vlan: entered promiscuous mode [ 368.063452][T17020] veth0_macvtap: entered promiscuous mode [ 368.121529][T17020] veth1_macvtap: entered promiscuous mode [ 368.144068][T17487] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 368.216854][T17020] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.272743][T17020] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.352655][ T8187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.394067][T17498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3098'. [ 368.404894][ T8187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.455573][ T6411] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.464498][ T6411] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.476057][T17498] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3098'. [ 368.479275][T17500] Bluetooth: MGMT ver 1.23 [ 368.595912][T17506] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3098'. [ 368.628680][T17503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 368.771460][T17498] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 368.813351][T17497] delete_channel: no stack [ 368.929158][T17514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3102'. [ 368.947991][ T1115] IPVS: stop unused estimator thread 0... [ 369.023136][T17516] sch_tbf: burst 12 is lower than device bridge7 mtu (1514) ! [ 369.111602][ T6411] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.144270][T17524] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.3104'. [ 369.154731][ T6411] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.294470][ T8188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.317722][ T8188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.632893][T17547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3108'. [ 369.723392][T17547] : entered promiscuous mode [ 369.768658][T17547] netlink: 'syz.3.3108': attribute type 1 has an invalid length. [ 370.380810][T17574] bridge_slave_0: left allmulticast mode [ 370.423193][T17574] bridge_slave_0: left promiscuous mode [ 370.446967][T17574] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.491390][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 370.505861][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 370.528014][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 370.555266][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 370.567583][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 370.591270][T17574] bridge_slave_1: left allmulticast mode [ 370.611037][T17574] bridge_slave_1: left promiscuous mode [ 370.617585][T17574] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.657131][T17574] bond0: (slave bond_slave_0): Releasing backup interface [ 370.685686][T17574] bond_slave_0: left allmulticast mode [ 370.703441][T17574] bond0: (slave bond_slave_1): Releasing backup interface [ 370.713618][T17574] bond_slave_1: left allmulticast mode [ 370.736263][T17574] team0: Port device team_slave_0 removed [ 370.760582][T17574] team0: Port device team_slave_1 removed [ 370.785916][T17574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.806198][T17574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.817965][T17574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.826029][T17574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.839694][T17574] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 370.869311][ T9] lo speed is unknown, defaulting to 1000 [ 370.892727][T17578] team0: Mode changed to "activebackup" [ 370.910902][T17585] syzkaller0: entered promiscuous mode [ 370.924452][T17585] syzkaller0: entered allmulticast mode [ 371.134134][T17580] lo speed is unknown, defaulting to 1000 [ 371.288066][T17603] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 371.828962][T17625] vlan2: entered promiscuous mode [ 371.834075][T17625] geneve1: entered promiscuous mode [ 371.895226][T17625] vlan2: entered allmulticast mode [ 371.908149][T17625] geneve1: entered allmulticast mode [ 372.124664][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 372.132815][ C1] lec:lec_tx_timeout: lec0 [ 372.137460][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 372.142809][T17638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3125'. [ 372.291212][T17638] can: request_module (can-proto-0) failed. [ 372.641632][T17580] lo speed is unknown, defaulting to 1000 [ 372.655065][ T5832] Bluetooth: hci4: command tx timeout [ 373.054784][T17684] netlink: 'syz.2.3137': attribute type 1 has an invalid length. [ 373.067474][T17685] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3138'. [ 373.142666][T17684] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3137'. [ 373.260490][T17580] chnl_net:caif_netlink_parms(): no params data found [ 373.327870][T17700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3141'. [ 373.747628][T17580] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.765552][T17719] netlink: 240 bytes leftover after parsing attributes in process `syz.2.3145'. [ 373.775899][T17580] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.783200][T17580] bridge_slave_0: entered allmulticast mode [ 373.795276][ T29] audit: type=1107 audit(1775889970.081:4): pid=17714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 373.840708][T17580] bridge_slave_0: entered promiscuous mode [ 373.958287][T17580] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.966263][T17580] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.980916][T17580] bridge_slave_1: entered allmulticast mode [ 373.991000][T17580] bridge_slave_1: entered promiscuous mode [ 374.049039][T17580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.081694][T17726] lo speed is unknown, defaulting to 1000 [ 374.091976][T17738] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3149'. [ 374.100923][T17737] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3150'. [ 374.127448][T17580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.235872][T17580] team0: Port device team_slave_0 added [ 374.258389][T17580] team0: Port device team_slave_1 added [ 374.335736][T17580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.343064][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.370281][T17580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.384542][T17580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.392994][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.420718][T17580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.488728][T17580] hsr_slave_0: entered promiscuous mode [ 374.496685][T17580] hsr_slave_1: entered promiscuous mode [ 374.503231][T17580] debugfs: 'hsr0' already exists in 'hsr' [ 374.509532][T17580] Cannot create hsr debugfs directory [ 374.724886][ T5832] Bluetooth: hci4: command tx timeout [ 374.741068][T17580] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.753028][T17580] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.772427][T17726] lo speed is unknown, defaulting to 1000 [ 374.830842][T17580] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.842067][T17580] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.921389][T17580] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.933996][T17580] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.041329][T17580] bond0: (slave netdevsim0): Releasing backup interface [ 375.058303][T17580] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.091867][T17580] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.805058][ T5832] Bluetooth: hci4: command tx timeout [ 376.954070][T17730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 376.996736][T17580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 377.028158][T17580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.036408][T17580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 377.091334][T17580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.115629][T17580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 377.143126][T17580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.150285][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 377.150318][ C1] lec:lec_tx_timeout: lec0 [ 377.158571][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 377.191514][T17774] netlink: 'syz.2.3160': attribute type 11 has an invalid length. [ 377.212672][T17580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 377.221024][T17771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3158'. [ 377.249903][T17580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 377.290085][T17773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.347751][T17794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3162'. [ 377.543304][T17580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.607886][T17580] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.645974][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.653241][ T6411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.656498][T17811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3167'. [ 377.699031][ T6411] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.706278][ T6411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.913834][T17824] x_tables: duplicate underflow at hook 3 [ 377.920264][T17822] netlink: 512 bytes leftover after parsing attributes in process `syz.0.3170'. [ 378.158153][T17839] tun0: tun_chr_ioctl cmd 1074025675 [ 378.163540][T17839] tun0: persist disabled [ 378.290542][T17843] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3174'. [ 378.328754][T17841] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 378.380717][T17580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.504884][T17855] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3178'. [ 378.521211][T17580] veth0_vlan: entered promiscuous mode [ 378.560087][T17580] veth1_vlan: entered promiscuous mode [ 378.579254][T17855] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3178'. [ 378.656955][T17858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.685706][T17858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.698786][T17858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.706916][T17858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.736404][T17869] netlink: 'syz.0.3182': attribute type 1 has an invalid length. [ 378.871417][T17871] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 378.884860][ T5832] Bluetooth: hci4: command tx timeout [ 378.924563][T17871] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 379.019343][T17882] xfrm1: entered allmulticast mode [ 379.099884][T17580] veth0_macvtap: entered promiscuous mode [ 379.163890][T17580] veth1_macvtap: entered promiscuous mode [ 379.242323][T17898] netlink: 'syz.1.3191': attribute type 2 has an invalid length. [ 379.292437][T17580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.313793][T17580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.378514][ T176] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.393533][ T176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.451156][ T176] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.500151][ T176] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.740563][T17908] netlink: 788 bytes leftover after parsing attributes in process `syz.1.3195'. [ 379.774025][ T8187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.805024][ T8187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.911834][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.932148][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.407981][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3205'. [ 380.444948][T17942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3205'. [ 380.462737][T17939] dvmrp1: entered allmulticast mode [ 380.468353][T17941] netlink: 'syz.4.3204': attribute type 12 has an invalid length. [ 380.596281][ T5146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 380.608268][ T5146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 380.617300][ T5146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 380.625810][ T5146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 380.633497][ T5146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.759750][T17954] netlink: 'syz.3.3207': attribute type 1 has an invalid length. [ 380.769554][T17954] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.975870][T17952] lo speed is unknown, defaulting to 1000 [ 381.039337][T17965] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 381.097670][ T5825] syz_tun (unregistering): left allmulticast mode [ 381.104231][ T5825] syz_tun (unregistering): left promiscuous mode [ 381.154375][ T5825] bridge0: port 1(syz_tun) entered disabled state [ 381.634986][T17997] xt_hashlimit: size too large, truncated to 1048576 [ 381.700278][T17999] openvswitch: netlink: Key type 343 is out of range max 32 [ 382.164670][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 382.172775][ C1] lec:lec_tx_timeout: lec0 [ 382.177899][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 382.249226][T18022] __nla_validate_parse: 2 callbacks suppressed [ 382.249248][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3221'. [ 382.300222][T18025] 8021q: VLANs not supported on ip6gre0 [ 382.339287][T18022] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 382.406136][T18022] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3221'. [ 382.495549][T17952] lo speed is unknown, defaulting to 1000 [ 382.505703][T18033] netlink: 'syz.4.3225': attribute type 25 has an invalid length. [ 382.609441][T18040] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.616729][T18040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.725396][ T5832] Bluetooth: hci3: command tx timeout [ 383.437463][T17952] chnl_net:caif_netlink_parms(): no params data found [ 383.609590][T18082] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3233'. [ 383.672656][T17952] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.688427][T17952] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.696139][T17952] bridge_slave_0: entered allmulticast mode [ 383.704353][T17952] bridge_slave_0: entered promiscuous mode [ 383.717382][T17952] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.724830][T17952] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.732256][T17952] bridge_slave_1: entered allmulticast mode [ 383.743713][T17952] bridge_slave_1: entered promiscuous mode [ 383.835881][T17952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.899567][T17952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.064370][T17952] team0: Port device team_slave_0 added [ 384.084984][T17952] team0: Port device team_slave_1 added [ 384.101522][T18100] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3238'. [ 384.128183][T18105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3240'. [ 384.194573][T17952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.216804][T17952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.295877][T17952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.328619][T17952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.347787][T17952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 384.411569][T18114] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20003 [ 384.428851][T17952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.558623][T17952] hsr_slave_0: entered promiscuous mode [ 384.578688][T17952] hsr_slave_1: entered promiscuous mode [ 384.589771][T17952] debugfs: 'hsr0' already exists in 'hsr' [ 384.597228][T17952] Cannot create hsr debugfs directory [ 384.647392][T18124] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3245'. [ 384.663912][T18128] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3246'. Read from remote host us-central1-ssh-serialport.googleapis.com: Connection reset by peer client_loop: send disconnect: Broken pipe