last executing test programs: 2.4490548s ago: executing program 2 (id=1912): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000a40)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000bc0)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000d80)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}}, 0x44840) 2.067762891s ago: executing program 2 (id=1919): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000260081012fbd7000ffdbdf258e0000000800030047"], 0x1c}, 0x1, 0x0, 0x0, 0x4040996}, 0x2008c858) 1.903104282s ago: executing program 2 (id=1923): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000008c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\f\n5', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000940)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000018000a", @ANYRESHEX=r1, @ANYBLOB="08001b"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) sendmsg$nl_route(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x1}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xc}]}, 0x44}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000000000000014100000018001700000000000000006574683a7465616d300000006d6f0078c04fd4c083261d13cee6f340275d"], 0x34}}, 0x20042000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={0x0, 0x5c}}, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=r0], 0x74}, 0x1, 0x0, 0x0, 0x10040046}, 0x20000850) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000240)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000007c0)={r8, &(0x7f0000000800)="0d03f76f", &(0x7f0000000840)=@udp6}, 0x20) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000004c0)=""/103, 0x67}, {&(0x7f00000006c0)=""/83, 0x53}], 0x2}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 1.491218015s ago: executing program 2 (id=1932): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000140)=@ethtool_cmd={0x48, 0x7ff, 0x2, 0x6, 0xe, 0x5, 0x5c, 0x2, 0x1, 0x22, 0x7, 0xb1e, 0x401, 0x2, 0x80, 0x3, [0x2, 0x1]}}) 1.318603313s ago: executing program 4 (id=1937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) 1.297357694s ago: executing program 2 (id=1938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1001}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000800)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000900)='\r', 0x1}], 0x1}, 0x8004) 1.146770214s ago: executing program 4 (id=1941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x68, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "01000000"}]}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x124}}, 0x0) 1.146620178s ago: executing program 0 (id=1942): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 1.061890816s ago: executing program 2 (id=1945): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x11, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 1.061234675s ago: executing program 0 (id=1946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x8) 1.018431311s ago: executing program 4 (id=1947): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffdbc, &(0x7f0000000100)=[{&(0x7f0000000140)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) 962.066275ms ago: executing program 3 (id=1948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000000000000002000a0020000000000a0100000000000000000002000a000900010073797a300000000060000000120a0100000000000000000002000a000900010073797a30000000000900020073797a30000000000800030000000009280004800500020006000000060003001f9000000800040088130000050005"], 0xbc}}, 0x0) 921.85047ms ago: executing program 0 (id=1950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x60}}, 0x0) 911.796075ms ago: executing program 3 (id=1951): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2d24d, 0x11f04}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x401, 0xce4d}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 896.222983ms ago: executing program 4 (id=1952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x86}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 822.3723ms ago: executing program 1 (id=1953): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600054800000c00030008000c0004"]}, 0x58}}, 0x0) 805.969927ms ago: executing program 3 (id=1954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29e}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 712.915924ms ago: executing program 0 (id=1955): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'lo\x00', &(0x7f0000000440)=@ethtool_drvinfo={0x3, "7d92b42d063115c362c8a907e5e9b3bd554d5648e059b7a508b4413ddadbe535", "2accccc59b52517872fe74aa06470fc45c044b1e418a7eba53196678ea9d18c6", "11ec925561e5180f4ca7c860aa9077967436795364e21ac7fb81e9091ebce89a", "b12fbfee5c7217523fde7f59954f153c26428aab505ae1b41e5f21a8f866882a", "4988f2d64c78be0d18597d12f5ffbbbeb551a98db17322b1bb0f3897ab7be1e7", "4e34f0db39b883accca5962e", 0x1, 0x0, 0x0, 0x0, 0x1}}) 654.564909ms ago: executing program 4 (id=1956): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000480)=@ethtool_gstrings={0x1b, 0x8}}) 654.46899ms ago: executing program 1 (id=1957): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="2c0000001500010002000000001000000a00000008000100400000000800020001000000080003"], 0x2c}}, 0x0) 634.836167ms ago: executing program 3 (id=1958): r0 = socket$kcm(0x10, 0x2, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x2, 0x5, 0x2) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) getsockname(r2, &(0x7f00000003c0)=@xdp, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000a80)=ANY=[@ANYBLOB="300100004100010026bd70000400000001000000040048800c0101800801108004010880fd00528022ae7d7158cf3e53ea46006699c1b1f04a9c16cb3f7bae98bf0338db4d09be8099a1736ea64b5fde1f147b896d3beafead6cae91364efb20c5e8a8333d4a9df31b5ed74c6fd6f7be116709e9193798307c3bd95776202ce04a2866f9f6ad895eac5db17b21ee783c91b0ccd76152c8a15eaa25dd6bf70b83566adc0cbae0fbf2063dbe3c1e5aef7140c8ed32fff3eb2265b1763e514fb7f32731c17e8e142e2dc4b44de6", @ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, 0x0, 0x60000) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$key(0xffffffffffffffff, &(0x7f0000000940)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x0) 526.333305ms ago: executing program 0 (id=1959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="800000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1720000021200000600012800b000100697036746e6c00005000028014000200fc0100000000000000000000000000000400130014000300fe8000000000000000000000000000aa0500060002000000080008003b000000080008002400000008000100026f"], 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 513.34549ms ago: executing program 4 (id=1960): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$kcm(0x2a, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) recvfrom$inet(r1, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 454.438859ms ago: executing program 1 (id=1961): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001940)=[{{&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, 0x0}}, {{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001680)=[@ip_retopts={{0x14, 0x0, 0x7, {[@lsrr={0x83, 0x3, 0xf9}]}}}], 0x18}}], 0x2, 0x4004000) 386.115965ms ago: executing program 1 (id=1962): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000006dc0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x10002, 0x0) 315.657266ms ago: executing program 1 (id=1963): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000080002"], 0x2c}}, 0x0) 174.161735ms ago: executing program 0 (id=1964): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipv6_newrule={0x40, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x14, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3c}}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x1000}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) 167.477841ms ago: executing program 3 (id=1965): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)={0x34, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 80.929138ms ago: executing program 1 (id=1966): close(0x3) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2717, 0x0, &(0x7f0000000240)) 0s ago: executing program 3 (id=1967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x15, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000810}, 0x40) socket$inet_udp(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 71.862956][ T5605] cgroup: Unknown subsys name 'net' [ 71.931646][ T5605] cgroup: Unknown subsys name 'cpuset' [ 71.934359][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.282657][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.408710][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.409938][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.415377][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.425207][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.425908][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.426299][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.427017][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.428505][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.437407][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.438340][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.438868][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.438934][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.438968][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.448359][ T5629] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.449797][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.450537][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.450931][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.452950][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.453774][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.462432][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.591906][ T5638] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.594656][ T5638] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.604808][ T5638] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.624513][ T5638] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.635147][ T5638] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.451171][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.454423][ T5617] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 76.459442][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.468292][ T5616] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 76.477833][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.490853][ T5618] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 76.518578][ T5628] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 76.797106][ T5615] infiniband rxe0: set active [ 76.798166][ T5615] infiniband rxe0: added rxe_eth0 [ 76.826835][ T5615] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 76.826871][ T5615] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 76.826902][ T5615] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 76.885760][ T49] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.910361][ T5615] RDS/IB: rxe0: added [ 76.911687][ T5615] smc: adding ib device rxe0 with port count 1 [ 76.911773][ T5615] smc: ib device rxe0 port 1 has no pnetid [ 76.943037][ T49] rxe_eth0 speed is unknown, defaulting to 1000 [ 76.966673][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.227282][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.469822][ T5625] Bluetooth: hci2: command tx timeout [ 77.628128][ T5638] Bluetooth: hci0: command tx timeout [ 77.628144][ T5630] Bluetooth: hci3: command tx timeout [ 77.628404][ T5625] Bluetooth: hci1: command tx timeout [ 77.635530][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.707800][ T5625] Bluetooth: hci4: command tx timeout [ 77.729788][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.731849][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.731957][ T5618] bridge_slave_0: entered allmulticast mode [ 77.733001][ T5618] bridge_slave_0: entered promiscuous mode [ 77.814867][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.814974][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.815110][ T5618] bridge_slave_1: entered allmulticast mode [ 77.817633][ T5618] bridge_slave_1: entered promiscuous mode [ 77.846267][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.846353][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.846499][ T5617] bridge_slave_0: entered allmulticast mode [ 77.855622][ T5617] bridge_slave_0: entered promiscuous mode [ 77.914037][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.914133][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.914246][ T5617] bridge_slave_1: entered allmulticast mode [ 77.915747][ T5617] bridge_slave_1: entered promiscuous mode [ 77.917318][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 77.959962][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.960135][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.960559][ T5616] bridge_slave_0: entered allmulticast mode [ 77.962592][ T5616] bridge_slave_0: entered promiscuous mode [ 77.966618][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.966718][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.966877][ T5616] bridge_slave_1: entered allmulticast mode [ 77.969517][ T5616] bridge_slave_1: entered promiscuous mode [ 77.987085][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.000258][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.101619][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.102331][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.102483][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.102610][ T5628] bridge_slave_0: entered allmulticast mode [ 78.104916][ T5628] bridge_slave_0: entered promiscuous mode [ 78.152308][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.152507][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.152663][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.153591][ T5628] bridge_slave_1: entered allmulticast mode [ 78.155883][ T5628] bridge_slave_1: entered promiscuous mode [ 78.161968][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.165257][ T5618] team0: Port device team_slave_0 added [ 78.237192][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.241734][ T5618] team0: Port device team_slave_1 added [ 78.276535][ T5617] team0: Port device team_slave_0 added [ 78.325658][ T5617] team0: Port device team_slave_1 added [ 78.329201][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.338319][ T5616] team0: Port device team_slave_0 added [ 78.345266][ T5616] team0: Port device team_slave_1 added [ 78.348366][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.348383][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.348419][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.372942][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.402015][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.402032][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.402052][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.473184][ T5615] rxe_eth0 speed is unknown, defaulting to 1000 [ 78.494764][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.494780][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.494800][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.496914][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.496926][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.496946][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.501727][ T5628] team0: Port device team_slave_0 added [ 78.516841][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.516857][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.516877][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.520801][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.520817][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.520837][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.559940][ T5628] team0: Port device team_slave_1 added [ 78.687510][ T5618] hsr_slave_0: entered promiscuous mode [ 78.692405][ T5618] hsr_slave_1: entered promiscuous mode [ 78.779418][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.779435][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.779456][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.819523][ T5616] hsr_slave_0: entered promiscuous mode [ 78.820676][ T5616] hsr_slave_1: entered promiscuous mode [ 78.823025][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 78.823132][ T5616] Cannot create hsr debugfs directory [ 78.861186][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.861202][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.861224][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.880556][ T5617] hsr_slave_0: entered promiscuous mode [ 78.881541][ T5617] hsr_slave_1: entered promiscuous mode [ 78.882269][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 78.882286][ T5617] Cannot create hsr debugfs directory [ 79.099958][ T5628] hsr_slave_0: entered promiscuous mode [ 79.101085][ T5628] hsr_slave_1: entered promiscuous mode [ 79.101479][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 79.101497][ T5628] Cannot create hsr debugfs directory [ 79.454275][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.470445][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.485234][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.500561][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.502218][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.523582][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.548348][ T5625] Bluetooth: hci2: command tx timeout [ 79.554400][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.569707][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.667409][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.667505][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.675516][ T5615] bridge_slave_0: entered allmulticast mode [ 79.677285][ T5615] bridge_slave_0: entered promiscuous mode [ 79.680391][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.680573][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.680694][ T5615] bridge_slave_1: entered allmulticast mode [ 79.682445][ T5615] bridge_slave_1: entered promiscuous mode [ 79.713429][ T5625] Bluetooth: hci3: command tx timeout [ 79.718447][ T5638] Bluetooth: hci0: command tx timeout [ 79.718538][ T5625] Bluetooth: hci1: command tx timeout [ 79.767221][ T5617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.779171][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.779922][ T5617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.784872][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.785621][ T5617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.788436][ T5625] Bluetooth: hci4: command tx timeout [ 79.792030][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.799441][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.806677][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.806959][ T5617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.814893][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.892888][ T5615] team0: Port device team_slave_0 added [ 79.895155][ T5615] team0: Port device team_slave_1 added [ 79.946804][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.946820][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.946923][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.001205][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.001223][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.001240][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.056092][ T5616] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.062829][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.063622][ T5616] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.068617][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.070677][ T5616] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.081678][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.094706][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.099627][ T5616] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.114359][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.155944][ T5615] hsr_slave_0: entered promiscuous mode [ 80.156531][ T5615] hsr_slave_1: entered promiscuous mode [ 80.156923][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 80.156941][ T5615] Cannot create hsr debugfs directory [ 80.278091][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.318025][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.318176][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.321439][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.325461][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.372740][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.372876][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.374331][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.381811][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.382681][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.389905][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.416342][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.434776][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.443817][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.532732][ T5615] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.535559][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.561565][ T5615] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.564509][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.565275][ T5615] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.571643][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.575093][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.611335][ T5615] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.613856][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.646553][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.646639][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.693571][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.693630][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.773271][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.851975][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.876706][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.876900][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.943097][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.943207][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.042342][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.127056][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.141208][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.164904][ T5616] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.204126][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.204214][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.244163][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.244260][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.287166][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.334394][ T277] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.334515][ T277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.376907][ T277] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.377005][ T277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.540497][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.628116][ T5625] Bluetooth: hci2: command tx timeout [ 81.788017][ T5625] Bluetooth: hci1: command tx timeout [ 81.788051][ T5625] Bluetooth: hci0: command tx timeout [ 81.788066][ T5638] Bluetooth: hci3: command tx timeout [ 81.868973][ T5638] Bluetooth: hci4: command tx timeout [ 82.146146][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.335828][ T5618] veth0_vlan: entered promiscuous mode [ 82.380890][ T5618] veth1_vlan: entered promiscuous mode [ 82.421019][ T5617] veth0_vlan: entered promiscuous mode [ 82.466443][ T5617] veth1_vlan: entered promiscuous mode [ 82.520441][ T5618] veth0_macvtap: entered promiscuous mode [ 82.552893][ T5618] veth1_macvtap: entered promiscuous mode [ 82.602905][ T5617] veth0_macvtap: entered promiscuous mode [ 82.623110][ T5617] veth1_macvtap: entered promiscuous mode [ 82.634396][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.655964][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.676230][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.720488][ T1504] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.749485][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.797701][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.862128][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.948981][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.949076][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.949106][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.949134][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.949162][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.949192][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.949223][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.949247][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.949264][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.982550][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.994884][ T5616] veth0_vlan: entered promiscuous mode [ 83.039103][ T5616] veth1_vlan: entered promiscuous mode [ 83.094027][ T277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.094048][ T277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.172084][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.195329][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.195349][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.260459][ T5628] veth0_vlan: entered promiscuous mode [ 83.281689][ T1504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.281710][ T1504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.319541][ T5628] veth1_vlan: entered promiscuous mode [ 83.364525][ T5615] veth0_vlan: entered promiscuous mode [ 83.391273][ T5616] veth0_macvtap: entered promiscuous mode [ 83.410360][ T5616] veth1_macvtap: entered promiscuous mode [ 83.415941][ T5615] veth1_vlan: entered promiscuous mode [ 83.475681][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.507529][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.537383][ T5628] veth0_macvtap: entered promiscuous mode [ 83.580522][ T5628] veth1_macvtap: entered promiscuous mode [ 83.650611][ T5615] veth0_macvtap: entered promiscuous mode [ 83.678558][ T1524] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.706900][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.708173][ T5638] Bluetooth: hci2: command tx timeout [ 83.729468][ T5615] veth1_macvtap: entered promiscuous mode [ 83.758052][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.758095][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.758125][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.786131][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.868817][ T5638] Bluetooth: hci3: command tx timeout [ 83.868852][ T5638] Bluetooth: hci0: command tx timeout [ 83.869465][ T5638] Bluetooth: hci1: command tx timeout [ 83.913156][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.950881][ T5630] Bluetooth: hci4: command tx timeout [ 83.992896][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.037190][ T1524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.037211][ T1524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.039822][ T74] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.175255][ T1524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.175276][ T1524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.228452][ T277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.229483][ T277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.229522][ T277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.229554][ T277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.324016][ T1524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.324037][ T1524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.404688][ T5845] syz.0.16 uses obsolete (PF_INET,SOCK_PACKET) [ 84.438006][ T277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.438051][ T277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.438084][ T277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.454430][ T1524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.454452][ T1524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.461493][ T5847] syz_tun: entered allmulticast mode [ 84.505722][ T5846] syz_tun: left allmulticast mode [ 84.507389][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.507404][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.664443][ T1504] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.664463][ T1504] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.754279][ T5855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20'. [ 84.905960][ T5630] block nbd0: Receive control failed (result -107) [ 85.113171][ T5869] tls_set_device_offload_rx: netdev not found [ 85.276372][ T5880] warning: `syz.0.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 85.893029][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 85.988942][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42'. [ 85.989433][ T5912] Zero length message leads to an empty skb [ 86.050456][ T1524] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.072804][ T5920] only policy match revision 0 supported [ 86.072816][ T5920] unable to load match [ 86.126039][ T5922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.45'. [ 86.148307][ T1176] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.178690][ T1176] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.247832][ T277] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.562398][ T5946] netlink: 'syz.0.57': attribute type 25 has an invalid length. [ 86.562422][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 86.671223][ T5946] netlink: 'syz.0.57': attribute type 25 has an invalid length. [ 86.671245][ T5946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 86.813403][ T10] cfg80211: failed to load regulatory.db [ 87.125837][ T5972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.65'. [ 87.251542][ T5975] netlink: 'syz.4.66': attribute type 14 has an invalid length. [ 87.251567][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 87.298555][ T5975] netlink: 'syz.4.66': attribute type 14 has an invalid length. [ 87.298576][ T5975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.66'. [ 87.309851][ T1504] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.310742][ T1504] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.310774][ T1504] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.317821][ T277] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.370033][ T5979] netlink: 58 bytes leftover after parsing attributes in process `syz.1.67'. [ 87.543353][ T74] IPVS: starting estimator thread 0... [ 88.295773][ T5988] IPVS: using max 27 ests per chain, 64800 per kthread [ 88.458679][ T190] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.704660][ T6024] netlink: 'syz.3.81': attribute type 1 has an invalid length. [ 88.844598][ T6031] Illegal XDP return value 4294967274 on prog (id 16) dev N/A, expect packet loss! [ 89.856018][ T6079] netlink: 'syz.3.91': attribute type 1 has an invalid length. [ 90.318758][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 90.354845][ T6097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.97'. [ 90.367847][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.367985][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.368016][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.368045][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.950845][ T6118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 91.000337][ T6122] syzkaller1: entered promiscuous mode [ 91.000359][ T6122] syzkaller1: entered allmulticast mode [ 91.067595][ T6124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.110'. [ 91.073955][ T6124] netlink: 24 bytes leftover after parsing attributes in process `syz.3.110'. [ 91.345578][ T6135] netlink: 'syz.0.115': attribute type 1 has an invalid length. [ 92.314203][ T6158] tipc: Failed to remove unknown binding: 66,1,1/0:1471398184/1471398186 [ 92.314236][ T6158] tipc: Failed to remove unknown binding: 66,1,1/0:1471398184/1471398186 [ 92.355373][ T6162] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.127'. [ 92.478035][ T6172] PKCS7: Unknown OID: [4] (bad) [ 92.478059][ T6172] PKCS7: Only support pkcs7_signedData type [ 92.674806][ T6174] v: renamed from veth0_vlan [ 92.926922][ T6197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.978716][ T6200] netlink: 'syz.2.143': attribute type 2 has an invalid length. [ 93.476892][ T6226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.152'. [ 93.477149][ T6226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.152'. [ 93.635799][ T6240] netlink: 16 bytes leftover after parsing attributes in process `syz.4.157'. [ 93.649123][ T6240] ip_tables: iptables: counters copy to user failed while replacing table [ 93.649753][ T6240] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 93.860098][ T5283] v: left promiscuous mode [ 93.875184][ T30] v: entered promiscuous mode [ 94.566680][ T74] IPVS: starting estimator thread 0... [ 94.657934][ T6283] IPVS: using max 34 ests per chain, 81600 per kthread [ 94.787586][ T6288] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 95.144561][ T6300] sit0: entered promiscuous mode [ 95.166271][ T6300] netlink: 'syz.3.175': attribute type 1 has an invalid length. [ 95.166294][ T6300] netlink: 1 bytes leftover after parsing attributes in process `syz.3.175'. [ 95.467754][ T5638] Bluetooth: hci4: command 0x0405 tx timeout [ 96.057507][ T6327] netlink: 'syz.2.183': attribute type 1 has an invalid length. [ 96.734836][ T6359] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'. [ 97.021371][ T6371] batman_adv: batadv0: Adding interface: syzkaller0 [ 97.021390][ T6371] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.021415][ T6371] batman_adv: batadv0: Interface activated: syzkaller0 [ 97.024804][ T6370] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 97.078892][ T6374] netlink: 'syz.1.203': attribute type 1 has an invalid length. [ 97.078913][ T6374] netlink: 'syz.1.203': attribute type 4 has an invalid length. [ 97.078925][ T6374] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.203'. [ 97.126692][ T6370] batman_adv: batadv0: Removing interface: syzkaller0 [ 97.211674][ T6378] bond1: entered promiscuous mode [ 97.211698][ T6378] bond1: entered allmulticast mode [ 97.235332][ T6378] bond1: left allmulticast mode [ 97.235891][ T6378] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.376676][ T6389] bridge0: port 3(syz_tun) entered blocking state [ 97.376773][ T6389] bridge0: port 3(syz_tun) entered disabled state [ 97.376871][ T6389] syz_tun: entered allmulticast mode [ 97.383511][ T6389] syz_tun: entered promiscuous mode [ 97.385184][ T6389] bridge0: port 3(syz_tun) entered blocking state [ 97.385296][ T6389] bridge0: port 3(syz_tun) entered forwarding state [ 97.547854][ T5638] Bluetooth: hci4: command 0x0405 tx timeout [ 98.601159][ T6311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.723261][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 98.739019][ T6415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.221'. [ 98.803829][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 98.803851][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 98.803875][ T6419] netlink: 'syz.2.222': attribute type 6 has an invalid length. [ 98.806449][ T6419] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 98.806470][ T6419] netlink: 12 bytes leftover after parsing attributes in process `syz.2.222'. [ 98.806494][ T6419] netlink: 'syz.2.222': attribute type 6 has an invalid length. [ 98.884166][ T43] IPVS: starting estimator thread 0... [ 98.967845][ T6426] IPVS: using max 31 ests per chain, 74400 per kthread [ 99.620332][ T6459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.239'. [ 99.725777][ T6466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.241'. [ 100.258003][ T51] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.258053][ T51] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.258101][ T51] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.258133][ T51] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.153754][ T6530] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 101.168187][ T6530] bond1 (unregistering): Released all slaves [ 101.205308][ T6533] af_packet: tpacket_rcv: packet too big, clamped from 54 to 4294967286. macoff=82 [ 101.815976][ T6567] __nla_validate_parse: 5 callbacks suppressed [ 101.815995][ T6567] netlink: 156 bytes leftover after parsing attributes in process `syz.0.284'. [ 101.954696][ T6576] netlink: 'syz.1.287': attribute type 21 has an invalid length. [ 101.954719][ T6576] netlink: 'syz.1.287': attribute type 22 has an invalid length. [ 101.954729][ T6576] netlink: 'syz.1.287': attribute type 23 has an invalid length. [ 101.954738][ T6576] netlink: 'syz.1.287': attribute type 25 has an invalid length. [ 101.954748][ T6576] netlink: 96 bytes leftover after parsing attributes in process `syz.1.287'. [ 102.722322][ T6615] trusted_key: syz.0.301 sent an empty control message without MSG_MORE. [ 103.187292][ T6641] netlink: 28 bytes leftover after parsing attributes in process `syz.1.307'. [ 103.217295][ T6644] sock: sock_set_timeout: `syz.2.308' (pid 6644) tries to set negative timeout [ 103.392832][ T6659] netlink: 'syz.3.314': attribute type 1 has an invalid length. [ 103.392854][ T6659] netlink: 'syz.3.314': attribute type 4 has an invalid length. [ 103.392866][ T6659] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.314'. [ 103.397357][ T6659] netlink: 'syz.3.314': attribute type 1 has an invalid length. [ 103.397373][ T6659] netlink: 'syz.3.314': attribute type 4 has an invalid length. [ 103.397379][ T6659] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.314'. [ 103.425819][ T1176] nci: nci_rx_work: unknown MT 0x1 [ 104.619399][ T6716] ip_tables: iptables: counters copy to user failed while replacing table [ 104.627200][ T6718] ip_tables: iptables: counters copy to user failed while replacing table [ 104.652288][ T6718] syzkaller1: entered promiscuous mode [ 104.652303][ T6718] syzkaller1: entered allmulticast mode [ 104.960455][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 104.964054][ T6732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.345'. [ 105.236525][ T6742] syzkaller1: entered promiscuous mode [ 105.236547][ T6742] syzkaller1: entered allmulticast mode [ 105.401338][ T6751] Bluetooth: ISO socket layer initialized [ 106.153344][ T6789] GUP no longer grows the stack in syz.2.362 (6789): 200000003000-20000000a000 (200000001000) [ 106.153403][ T6789] CPU: 0 UID: 0 PID: 6789 Comm: syz.2.362 Not tainted syzkaller #0 PREEMPT(full) [ 106.153431][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 106.153448][ T6789] Call Trace: [ 106.153460][ T6789] [ 106.153469][ T6789] dump_stack_lvl+0xe8/0x150 [ 106.153502][ T6789] __get_user_pages+0x23b6/0x2750 [ 106.153535][ T6789] ? lock_acquire+0x115/0x350 [ 106.153573][ T6789] ? __gup_longterm_locked+0xc3b/0x15c0 [ 106.153610][ T6789] __gup_longterm_locked+0xd52/0x15c0 [ 106.153641][ T6789] ? lock_acquire+0x115/0x350 [ 106.153680][ T6789] gup_fast_fallback+0x1d92/0x20e0 [ 106.153744][ T6789] ? __pfx_gup_fast_fallback+0x10/0x10 [ 106.153775][ T6789] ? lock_acquire+0x115/0x350 [ 106.153793][ T6789] ? is_valid_gup_args+0x11f/0x200 [ 106.153824][ T6789] ? get_user_pages_fast+0x4d/0xb0 [ 106.153854][ T6789] __iov_iter_get_pages_alloc+0x378/0xa40 [ 106.153890][ T6789] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 106.153923][ T6789] iov_iter_get_pages2+0x5e/0xa0 [ 106.153955][ T6789] __se_sys_vmsplice+0x7b5/0x1660 [ 106.153993][ T6789] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 106.154013][ T6789] ? __pfx_futex_wait+0x10/0x10 [ 106.154106][ T6789] do_syscall_64+0x166/0x520 [ 106.154129][ T6789] ? trace_irq_disable+0x3b/0x140 [ 106.154150][ T6789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.154169][ T6789] ? clear_bhb_loop+0x70/0xc0 [ 106.154193][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.154213][ T6789] RIP: 0033:0x7ff4dbb9e559 [ 106.154237][ T6789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.154252][ T6789] RSP: 002b:00007ff4dc9b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 106.154277][ T6789] RAX: ffffffffffffffda RBX: 00007ff4dbe25fa0 RCX: 00007ff4dbb9e559 [ 106.154291][ T6789] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 106.154303][ T6789] RBP: 00007ff4dbc358b0 R08: 0000000000000000 R09: 0000000000000000 [ 106.154315][ T6789] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 106.154326][ T6789] R13: 00007ff4dbe26038 R14: 00007ff4dbe25fa0 R15: 00007ffc21027f38 [ 106.154359][ T6789] [ 106.232443][ T6791] netlink: 'syz.3.365': attribute type 1 has an invalid length. [ 106.292966][ T6791] bond1: (slave geneve2): making interface the new active one [ 106.310618][ T6791] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 106.327913][ T1176] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 106.337844][ T6652] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.356535][ T1176] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 106.357348][ T1176] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 106.357398][ T1176] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 106.533762][ T6794] syzkaller1: entered promiscuous mode [ 106.533784][ T6794] syzkaller1: entered allmulticast mode [ 106.694405][ T6800] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 106.706066][ T6810] netlink: 240 bytes leftover after parsing attributes in process `syz.4.368'. [ 107.027199][ T6820] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 107.027238][ T6820] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 107.027274][ T6820] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 107.075887][ T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 107.126325][ T6820] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 107.270271][ T6820] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 107.690773][ T1176] smbdirect: ib_dev[syz2] removed [ 107.921644][ T6859] netlink: 52 bytes leftover after parsing attributes in process `syz.4.384'. [ 107.963609][ T6859] netlink: 52 bytes leftover after parsing attributes in process `syz.4.384'. [ 108.260181][ T6880] netlink: 24 bytes leftover after parsing attributes in process `syz.0.393'. [ 108.294506][ T6876] raw_sendmsg: syz.2.392 forgot to set AF_INET. Fix it! [ 108.408571][ T6889] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 108.424965][ T6888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.396'. [ 108.424998][ T6888] netlink: 'syz.3.396': attribute type 7 has an invalid length. [ 108.425009][ T6888] netlink: 'syz.3.396': attribute type 8 has an invalid length. [ 108.425020][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.3.396'. [ 108.446881][ T6888] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 108.454993][ T6888] geneve1: entered promiscuous mode [ 108.466281][ T6888] erspan0: entered promiscuous mode [ 108.490956][ T6893] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 108.661806][ T6890] syzkaller1: entered promiscuous mode [ 108.661829][ T6890] syzkaller1: entered allmulticast mode [ 109.062288][ T6924] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 109.249710][ T6931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.414'. [ 109.715860][ T6946] netlink: 'syz.4.420': attribute type 26 has an invalid length. [ 109.715881][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 109.716113][ T6946] netlink: 'syz.4.420': attribute type 26 has an invalid length. [ 109.716126][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.420'. [ 109.882136][ T6953] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 110.089705][ T6965] ip_tables: iptables: counters copy to user failed while replacing table [ 110.149059][ T6965] syzkaller1: entered promiscuous mode [ 110.149082][ T6965] syzkaller1: entered allmulticast mode [ 111.793624][ T7043] veth0: entered promiscuous mode [ 111.829496][ T7043] veth0: left promiscuous mode [ 112.376178][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 112.376230][ T7072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 113.310199][ T7119] __nla_validate_parse: 1 callbacks suppressed [ 113.310219][ T7119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.494'. [ 115.145561][ T7170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.514'. [ 115.493680][ T7186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.521'. [ 115.525433][ T7186] bond2: entered promiscuous mode [ 115.525905][ T7186] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.567490][ T7186] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.572390][ T7186] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 115.573275][ T7186] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 115.735593][ T7192] netlink: 'syz.4.523': attribute type 8 has an invalid length. [ 115.822013][ T7196] netlink: 193 bytes leftover after parsing attributes in process `syz.2.525'. [ 115.903603][ T7201] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 116.043163][ T7209] batman_adv: batadv0: Adding interface: syzkaller0 [ 116.043178][ T7209] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.043200][ T7209] batman_adv: batadv0: Interface activated: syzkaller0 [ 116.047312][ T7208] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 116.097057][ T7108] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.164982][ T7208] batman_adv: batadv0: Removing interface: syzkaller0 [ 116.344961][ T7216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.533'. [ 116.461828][ T7216] netlink: 92 bytes leftover after parsing attributes in process `syz.0.533'. [ 116.684412][ T7236] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 116.699775][ T7236] xt_hashlimit: size too large, truncated to 1048576 [ 116.811743][ T7243] netlink: 'syz.1.544': attribute type 1 has an invalid length. [ 116.889708][ T7248] bond3: (slave veth0_to_bond): making interface the new active one [ 116.891059][ T7248] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 116.926478][ T7243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.544'. [ 116.943690][ T7243] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.832497][ T7276] pim6reg: entered allmulticast mode [ 118.458296][ T7301] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'. [ 118.715213][ T7303] ipvlan2: entered allmulticast mode [ 118.715236][ T7303] batadv_slave_1: entered allmulticast mode [ 118.734535][ T7303] batman_adv: batadv0: Adding interface: ipvlan2 [ 118.734553][ T7303] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.734575][ T7303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 118.734589][ T7303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 118.734600][ T7303] batman_adv: batadv0: Interface activated: ipvlan2 [ 118.805783][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 119.118193][ T7314] netlink: 'syz.0.568': attribute type 4 has an invalid length. [ 119.118215][ T7314] netlink: 17 bytes leftover after parsing attributes in process `syz.0.568'. [ 119.158282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 119.203294][ T7313] netlink: 'syz.4.566': attribute type 1 has an invalid length. [ 119.361248][ T7319] bond1: (slave veth0_to_bond): making interface the new active one [ 119.383032][ T7319] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 119.575545][ T7330] syzkaller0: entered promiscuous mode [ 119.575572][ T7330] syzkaller0: entered allmulticast mode [ 119.621587][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz.4.575'. [ 121.314005][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 121.891354][ T5630] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 122.252235][ T7387] ip_tables: iptables: counters copy to user failed while replacing table [ 122.379196][ T7394] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.596'. [ 122.821518][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'. [ 123.448447][ T7434] netlink: 'syz.0.610': attribute type 2 has an invalid length. [ 123.448473][ T7434] netlink: 'syz.0.610': attribute type 2 has an invalid length. [ 123.930405][ T7447] netlink: 9 bytes leftover after parsing attributes in process `syz.0.615'. [ 123.946136][ T7447] netlink: 9 bytes leftover after parsing attributes in process `syz.0.615'. [ 124.205275][ T7469] netlink: 'syz.2.624': attribute type 1 has an invalid length. [ 124.247575][ T7469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.329732][ T7469] bond1: (slave veth5): Enslaving as an active interface with a down link [ 124.354239][ T7475] veth0_virt_wifi: entered promiscuous mode [ 124.376033][ T7475] bond1: (slave veth0_virt_wifi): making interface the new active one [ 124.389776][ T7475] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 124.520214][ T7483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.629'. [ 124.571892][ T7485] netlink: 'syz.0.630': attribute type 1 has an invalid length. [ 124.606496][ T7485] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.627873][ T7489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.631'. [ 124.828132][ T7492] bpf: recursion limit reached on datapath, buggy bpf program? [ 124.828740][ T7492] Dead loop on virtual device gre0 (net 39), fix it urgently! [ 124.835563][ T7492] bpf: recursion limit reached on datapath, buggy bpf program? [ 124.835693][ T7492] Dead loop on virtual device gre0 (net 39), fix it urgently! [ 124.840806][ T7492] bpf: recursion limit reached on datapath, buggy bpf program? [ 124.840936][ T7492] Dead loop on virtual device gre0 (net 39), fix it urgently! [ 124.843919][ T7492] bpf: recursion limit reached on datapath, buggy bpf program? [ 124.844040][ T7492] Dead loop on virtual device gre0 (net 39), fix it urgently! [ 124.845308][ T7492] bpf: recursion limit reached on datapath, buggy bpf program? [ 124.845419][ T7492] Dead loop on virtual device gre0 (net 39), fix it urgently! [ 125.406043][ T7517] netlink: 24 bytes leftover after parsing attributes in process `syz.4.641'. [ 126.321912][ T7519] netlink: 24 bytes leftover after parsing attributes in process `syz.4.641'. [ 126.394367][ T7492] syz.3.632 (7492) used greatest stack depth: 13512 bytes left [ 126.625332][ T7538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.649'. [ 126.821818][ T7544] netlink: 24 bytes leftover after parsing attributes in process `syz.1.651'. [ 129.107637][ T7617] sctp: [Deprecated]: syz.1.680 (pid 7617) Use of int in maxseg socket option. [ 129.107637][ T7617] Use struct sctp_assoc_value instead [ 129.426097][ T7627] netlink: 48 bytes leftover after parsing attributes in process `syz.0.683'. [ 130.237916][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.693'. [ 130.237949][ T7652] netlink: 16 bytes leftover after parsing attributes in process `syz.1.693'. [ 130.311863][ T7652] bridge0: entered promiscuous mode [ 130.311886][ T7652] bridge0: entered allmulticast mode [ 130.864210][ T7678] netlink: 24 bytes leftover after parsing attributes in process `syz.3.702'. [ 131.123688][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'. [ 131.318532][ T7702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.713'. [ 131.586857][ T7719] netlink: 'syz.1.719': attribute type 1 has an invalid length. [ 131.586881][ T7719] netlink: 'syz.1.719': attribute type 4 has an invalid length. [ 131.586894][ T7719] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.719'. [ 131.587534][ T7719] netlink: 'syz.1.719': attribute type 1 has an invalid length. [ 131.587550][ T7719] netlink: 'syz.1.719': attribute type 4 has an invalid length. [ 131.587561][ T7719] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.719'. [ 131.635869][ T7721] netlink: 168 bytes leftover after parsing attributes in process `syz.4.720'. [ 132.838281][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.838362][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.764417][ T7806] netlink: 24 bytes leftover after parsing attributes in process `syz.0.746'. [ 135.630039][ T7844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.758'. [ 135.744227][ T7849] syzkaller1: entered promiscuous mode [ 135.744249][ T7849] syzkaller1: entered allmulticast mode [ 135.846419][ T7859] batman_adv: batadv0: Adding interface: veth0 [ 135.846437][ T7859] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.846462][ T7859] batman_adv: batadv0: Interface activated: veth0 [ 135.891475][ T7859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.891499][ T7859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.895980][ T7859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.895999][ T7859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.936310][ T7859] batman_adv: batadv0: Interface deactivated: veth0 [ 135.936332][ T7859] batman_adv: batadv0: Removing interface: veth0 [ 136.085679][ T7863] netlink: 'syz.3.765': attribute type 1 has an invalid length. [ 136.192203][ T7863] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.258012][ T7865] bond2: (slave geneve3): making interface the new active one [ 136.283609][ T7865] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 136.433539][ T7870] sctp: [Deprecated]: syz.3.767 (pid 7870) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.433539][ T7870] Use struct sctp_sack_info instead [ 136.514795][ T7873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.769'. [ 136.539214][ T7877] netlink: 12 bytes leftover after parsing attributes in process `syz.3.770'. [ 136.637572][ T7877] netlink: 'syz.3.770': attribute type 1 has an invalid length. [ 136.723216][ T7881] netlink: 'syz.4.771': attribute type 1 has an invalid length. [ 136.723238][ T7881] netlink: 'syz.4.771': attribute type 4 has an invalid length. [ 136.723250][ T7881] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.771'. [ 136.822944][ T7867] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 136.956449][ T7888] veth0_virt_wifi: left promiscuous mode [ 137.110269][ T51] bond1: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 137.207627][ T7906] net_ratelimit: 2039 callbacks suppressed [ 137.215050][ T7906] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 137.406157][ T7915] tipc: Started in network mode [ 137.406188][ T7915] tipc: Node identity 0a562077b76, cluster identity 4711 [ 137.406413][ T7915] tipc: Enabled bearer , priority 0 [ 137.454197][ T7915] syzkaller0: MTU too low for tipc bearer [ 137.454220][ T7915] tipc: Disabling bearer [ 137.599125][ T7921] batman_adv: batadv0: Adding interface: syzkaller0 [ 137.599143][ T7921] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 137.599169][ T7921] batman_adv: batadv0: Interface activated: syzkaller0 [ 138.181557][ T7938] netlink: 'syz.1.794': attribute type 1 has an invalid length. [ 138.181990][ T7920] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 138.263284][ T7920] batman_adv: batadv0: Removing interface: syzkaller0 [ 138.329088][ T7938] 8021q: adding VLAN 0 to HW filter on device bond4 [ 138.351547][ T7945] bond3: (slave veth0_to_bond): Releasing active interface [ 138.393170][ T7945] bond4: (slave veth0_to_bond): making interface the new active one [ 138.397521][ T7945] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 138.424566][ T7948] bond4: entered promiscuous mode [ 138.424589][ T7948] veth0_to_bond: entered promiscuous mode [ 138.424798][ T7948] bond4: entered allmulticast mode [ 138.424810][ T7948] veth0_to_bond: entered allmulticast mode [ 138.500657][ T7959] netlink: 4 bytes leftover after parsing attributes in process `syz.0.800'. [ 139.051465][ T7984] tipc: Failed to remove unknown binding: 66,1,1/0:4184426593/4184426595 [ 139.123589][ T7986] tipc: Started in network mode [ 139.123620][ T7986] tipc: Node identity 563ae7141925, cluster identity 4711 [ 139.123778][ T7986] tipc: Enabled bearer , priority 0 [ 139.160720][ T7994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.814'. [ 139.305186][ T7986] syzkaller0: entered promiscuous mode [ 139.305215][ T7986] syzkaller0: entered allmulticast mode [ 139.305916][ T7986] tipc: Resetting bearer [ 139.350820][ T7985] tipc: Resetting bearer [ 139.551507][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 139.551531][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.817'. [ 140.165992][ T8009] netlink: 24 bytes leftover after parsing attributes in process `syz.3.819'. [ 141.809647][ T7985] tipc: Disabling bearer [ 141.823795][ T8000] batman_adv: batadv0: Adding interface: syzkaller0 [ 141.823806][ T8000] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.823821][ T8000] batman_adv: batadv0: Interface activated: syzkaller0 [ 141.897491][ T5856] tipc: Node number set to 1327490836 [ 141.915644][ T7997] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 141.970135][ T7997] batman_adv: batadv0: Removing interface: syzkaller0 [ 142.086541][ T8025] netlink: 60 bytes leftover after parsing attributes in process `syz.0.823'. [ 142.167044][ T8027] syzkaller1: entered promiscuous mode [ 142.167068][ T8027] syzkaller1: entered allmulticast mode [ 142.711159][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 142.739394][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 142.750550][ T8064] netlink: 4 bytes leftover after parsing attributes in process `syz.2.838'. [ 142.806342][ T8066] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 143.362350][ T8082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.846'. [ 143.362378][ T8082] netlink: 28 bytes leftover after parsing attributes in process `syz.1.846'. [ 143.362408][ T8082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 143.709696][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 144.001974][ T8100] syzkaller1: entered promiscuous mode [ 144.001998][ T8100] syzkaller1: entered allmulticast mode [ 145.497129][ T8161] ip_tables: iptables: counters copy to user failed while replacing table [ 145.584661][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 145.584685][ T8164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 145.607788][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.868'. [ 145.695095][ T8167] netlink: 68 bytes leftover after parsing attributes in process `syz.1.868'. [ 145.847204][ T8180] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 145.856520][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.871'. [ 146.130609][ T8190] netlink: 'syz.2.873': attribute type 1 has an invalid length. [ 146.245863][ T8190] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.302427][ T8206] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 146.302635][ T8206] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 146.321316][ T8204] bond2: (slave geneve2): making interface the new active one [ 146.361321][ T8204] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 146.514671][ T8210] syzkaller0: entered promiscuous mode [ 146.514693][ T8210] syzkaller0: entered allmulticast mode [ 146.523407][ T8203] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 146.679188][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'. [ 146.693773][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'. [ 146.713883][ T8219] netlink: 4 bytes leftover after parsing attributes in process `syz.0.884'. [ 146.922077][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.889'. [ 147.044969][ T8239] syzkaller1: entered promiscuous mode [ 147.044992][ T8239] syzkaller1: entered allmulticast mode [ 147.136486][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.2.892'. [ 149.320805][ T8336] sctp: [Deprecated]: syz.2.930 (pid 8336) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.320805][ T8336] Use struct sctp_sack_info instead [ 149.321838][ T8336] netlink: 'syz.2.930': attribute type 10 has an invalid length. [ 149.341847][ T8336] team0: Port device dummy0 added [ 149.377086][ T8336] team0: Port device dummy0 removed [ 150.594698][ T8392] __nla_validate_parse: 6 callbacks suppressed [ 150.594720][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 150.618306][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 150.618587][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 150.625756][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 150.626117][ T8392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.955'. [ 150.808150][ T8396] scsi_nl_rcv_msg: discarding partial skb [ 151.052479][ T8408] netlink: 'syz.4.961': attribute type 1 has an invalid length. [ 151.101081][ T8408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.138060][ T8408] bond2: (slave dummy0): making interface the new active one [ 151.140596][ T8408] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 151.165007][ T8408] netlink: 'syz.4.961': attribute type 10 has an invalid length. [ 151.165027][ T8408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.961'. [ 151.173707][ T8408] dummy0: entered promiscuous mode [ 151.191973][ T8408] bond2: (slave dummy0): Releasing active interface [ 151.419116][ T8419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.966'. [ 151.600987][ T8429] ip_tables: iptables: counters copy to user failed while replacing table [ 151.626903][ T8429] syzkaller1: entered promiscuous mode [ 151.626924][ T8429] syzkaller1: entered allmulticast mode [ 152.441057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 153.001213][ T8471] netlink: 'syz.2.987': attribute type 1 has an invalid length. [ 153.074990][ T8471] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.174041][ T8471] bond3: (slave geneve3): making interface the new active one [ 153.176970][ T8471] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 153.434265][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.996'. [ 153.512829][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 153.512853][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.998'. [ 154.775309][ T8551] netlink: 'syz.3.1016': attribute type 10 has an invalid length. [ 154.830000][ T8551] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 154.835493][ T8551] team0: Port device wlan0 added [ 155.732647][ T8587] netlink: 'syz.0.1032': attribute type 1 has an invalid length. [ 155.874161][ T8595] __nla_validate_parse: 7 callbacks suppressed [ 155.874181][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 155.874197][ T8595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1036'. [ 156.078930][ T8603] 0: reclassify loop, rule prio 0, protocol 800 [ 156.593627][ T8634] netlink: 15051 bytes leftover after parsing attributes in process `syz.0.1050'. [ 157.126258][ T8650] syzkaller1: entered promiscuous mode [ 157.126282][ T8650] syzkaller1: entered allmulticast mode [ 157.146483][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1055'. [ 157.386339][ T8664] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1062'. [ 157.457608][ T8670] vlan2: entered allmulticast mode [ 157.457629][ T8670] veth1_virt_wifi: entered allmulticast mode [ 157.507158][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1064'. [ 157.788502][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1067'. [ 157.788540][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1067'. [ 157.791142][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.512097][ T8715] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1084'. [ 158.522858][ T8715] syzkaller1: entered promiscuous mode [ 158.522878][ T8715] syzkaller1: entered allmulticast mode [ 159.155533][ T8739] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1094'. [ 159.203508][ T8743] netlink: 'syz.2.1096': attribute type 1 has an invalid length. [ 159.220683][ T8743] bond4: entered promiscuous mode [ 159.220969][ T8743] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.255113][ T8743] bond4: (slave bridge3): making interface the new active one [ 159.255175][ T8743] bridge3: entered promiscuous mode [ 159.256034][ T8743] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 160.349817][ T8665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 160.446596][ T8773] netlink: 'syz.4.1109': attribute type 39 has an invalid length. [ 160.886318][ T8797] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 161.010395][ T8798] syzkaller0: entered promiscuous mode [ 161.010420][ T8798] syzkaller0: entered allmulticast mode [ 161.076679][ T8804] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 161.832143][ T8837] syzkaller0: entered promiscuous mode [ 161.832175][ T8837] syzkaller0: entered allmulticast mode [ 162.112023][ T8844] __nla_validate_parse: 1 callbacks suppressed [ 162.112046][ T8844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1134'. [ 162.112063][ T8844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1134'. [ 162.112076][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1134'. [ 162.452168][ T8860] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1141'. [ 162.539860][ T8866] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 163.011054][ T8881] syzkaller0: create flow: hash 1781818505 index 0 [ 165.238650][ T8876] syzkaller0 (unregistered): delete flow: hash 1781818505 index 0 [ 165.330073][ T8904] netlink: 'syz.0.1154': attribute type 1 has an invalid length. [ 165.419848][ T8904] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.429787][ T8910] netlink: 'syz.3.1155': attribute type 10 has an invalid length. [ 165.458430][ T8910] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.480221][ T8910] bond0: (slave team0): Enslaving as an active interface with an up link [ 165.579293][ T8918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.603200][ T8907] bond2: (slave veth7): Enslaving as an active interface with a down link [ 165.643309][ T8921] ip_tables: iptables: counters copy to user failed while replacing table [ 165.645382][ T8920] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.672267][ T8904] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 165.682114][ T8904] bond2: (slave wlan1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 165.712932][ T8925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.815261][ T8929] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.940418][ T8935] netlink: 'syz.0.1162': attribute type 1 has an invalid length. [ 166.006717][ T8935] 8021q: adding VLAN 0 to HW filter on device bond3 [ 166.011329][ T8939] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 166.028128][ T8939] bond3: entered allmulticast mode [ 166.084366][ T8935] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 166.128715][ T8943] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 166.156065][ T8941] ip6gre1: entered promiscuous mode [ 166.156089][ T8941] ip6gre1: entered allmulticast mode [ 166.346462][ T8956] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1170'. [ 166.482620][ T8963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1175'. [ 166.482646][ T8963] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1175'. [ 166.482660][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1175'. [ 166.655763][ T8974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.712670][ T8974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.772789][ T8980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.232351][ T8998] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 167.461171][ T9013] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1190'. [ 167.496002][ T9012] TC_ACT_REPEAT abuse ? [ 168.155087][ T9045] syzkaller1: entered promiscuous mode [ 168.155110][ T9045] syzkaller1: entered allmulticast mode [ 168.179318][ T9045] 0: reclassify loop, rule prio 0, protocol 03 [ 168.648956][ T9067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1211'. [ 168.648981][ T9067] netlink: 'syz.0.1211': attribute type 3 has an invalid length. [ 168.648995][ T9067] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1211'. [ 168.656253][ T9067] netlink: 'syz.0.1211': attribute type 3 has an invalid length. [ 168.932486][ T9083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1218'. [ 168.932514][ T9083] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1218'. [ 168.932528][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1218'. [ 169.042003][ T9086] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1219'. [ 169.219628][ T9098] netlink: 'syz.2.1224': attribute type 1 has an invalid length. [ 169.221158][ T9098] netlink: 'syz.2.1224': attribute type 1 has an invalid length. [ 169.377363][ T9104] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1227'. [ 169.648810][ T9112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1230'. [ 170.144032][ T9133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1237'. [ 170.211501][ T9135] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.213630][ T9135] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.362947][ T9192] ip_tables: iptables: counters copy to user failed while replacing table [ 171.365315][ T9188] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.416119][ T9188] macvlan2: entered promiscuous mode [ 171.416140][ T9188] macvlan2: entered allmulticast mode [ 171.416615][ T9188] bond3: (slave macvlan2): Error -22 calling dev_set_mtu [ 171.551261][ T9196] ip_tables: iptables: counters copy to user failed while replacing table [ 171.737509][ T9205] ip_tables: iptables: counters copy to user failed while replacing table [ 171.872062][ T5638] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 171.872156][ T5638] Bluetooth: hci4: Injecting HCI hardware error event [ 171.873544][ T5630] Bluetooth: hci4: hardware error 0x00 [ 171.875550][ T9208] 0: reclassify loop, rule prio 0, protocol 03 [ 171.979045][ T9215] netlink: 'syz.4.1271': attribute type 9 has an invalid length. [ 171.979517][ T9215] netlink: 'syz.4.1271': attribute type 9 has an invalid length. [ 172.530380][ T10] rxe_eth0 speed is unknown, defaulting to 1000 [ 172.730706][ T9243] __nla_validate_parse: 6 callbacks suppressed [ 172.730726][ T9243] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1277'. [ 172.738911][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'. [ 173.164972][ T9252] Bluetooth: MGMT ver 1.23 [ 173.243957][ T9258] ip_tables: iptables: counters copy to user failed while replacing table [ 173.381749][ T9264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 173.519966][ T9270] TC_ACT_REPEAT abuse ? [ 173.610820][ T9275] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 173.614147][ T9275] netlink: 'syz.1.1291': attribute type 1 has an invalid length. [ 173.751693][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 173.751726][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 174.029375][ T5630] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 174.105926][ T1159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.105948][ T1159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.303687][ T9303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1302'. [ 174.455819][ T9308] tipc: Started in network mode [ 174.455849][ T9308] tipc: Node identity 723c261e398a, cluster identity 4711 [ 174.456014][ T9308] tipc: Enabled bearer , priority 0 [ 174.544512][ T9308] syzkaller0: entered promiscuous mode [ 174.544537][ T9308] syzkaller0: entered allmulticast mode [ 174.546564][ T9308] tipc: Resetting bearer [ 174.576041][ T9307] tipc: Resetting bearer [ 174.606571][ T9315] netlink: 'syz.4.1307': attribute type 1 has an invalid length. [ 174.641626][ T9315] block nbd296: server does not support multiple connections per device. [ 174.642789][ T9315] block nbd296: shutting down sockets [ 176.732321][ T9307] tipc: Disabling bearer [ 176.824789][ T5744] tipc: Node number set to 1270228510 [ 176.889447][ T9344] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1313'. [ 176.910781][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1313'. [ 177.499779][ T9370] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 177.499926][ T9370] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 177.701884][ T9377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1325'. [ 177.985114][ T9390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1330'. [ 178.119456][ T9394] netlink: 'syz.3.1332': attribute type 19 has an invalid length. [ 178.119478][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'. [ 178.119702][ T9394] netlink: 'syz.3.1332': attribute type 19 has an invalid length. [ 178.119715][ T9394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1332'. [ 180.780713][ T9446] syzkaller0: entered promiscuous mode [ 180.780739][ T9446] syzkaller0: entered allmulticast mode [ 181.337368][ T9472] syzkaller0: entered promiscuous mode [ 181.337390][ T9472] syzkaller0: entered allmulticast mode [ 181.685895][ T9481] netlink: 'syz.1.1361': attribute type 1 has an invalid length. [ 181.763681][ T9482] batman_adv: batadv0: Adding interface: syzkaller0 [ 181.763699][ T9482] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 181.763726][ T9482] batman_adv: batadv0: Interface activated: syzkaller0 [ 182.256330][ T9480] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 182.293775][ T9480] batman_adv: batadv0: Removing interface: syzkaller0 [ 182.813749][ T9516] netlink: 'syz.1.1376': attribute type 4 has an invalid length. [ 183.078580][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 183.078604][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 183.088804][ T9522] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 183.274855][ T9531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1384'. [ 183.844636][ T9550] syzkaller0: entered promiscuous mode [ 183.844657][ T9550] syzkaller0: entered allmulticast mode [ 183.903296][ T9552] netlink: 'syz.2.1393': attribute type 1 has an invalid length. [ 184.124746][ T9563] syzkaller0: entered promiscuous mode [ 184.124768][ T9563] syzkaller0: entered allmulticast mode [ 184.241177][ T9572] netlink: 'syz.3.1401': attribute type 1 has an invalid length. [ 184.243732][ T9572] netlink: 'syz.3.1401': attribute type 2 has an invalid length. [ 184.275452][ T9574] ip_tables: iptables: counters copy to user failed while replacing table [ 184.538818][ T9586] netlink: 'syz.1.1407': attribute type 1 has an invalid length. [ 184.666730][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1407'. [ 184.670587][ T9592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1408'. [ 184.796888][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.802175][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.855874][ T9588] v: left promiscuous mode [ 184.925239][ T9588] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 184.961902][ T9593] bond5: (slave bridge2): making interface the new active one [ 184.963521][ T9593] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 185.031033][ T43] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.031066][ T43] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.031107][ T43] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.031128][ T43] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.031160][ T43] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.031180][ T43] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.031210][ T43] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.031232][ T43] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.250115][ T9610] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1412'. [ 185.535426][ T9625] syzkaller1: entered promiscuous mode [ 185.535509][ T9625] syzkaller1: entered allmulticast mode [ 186.019611][ T9645] syzkaller1: entered promiscuous mode [ 186.019634][ T9645] syzkaller1: entered allmulticast mode [ 186.038450][ T9645] 0: reclassify loop, rule prio 0, protocol 03 [ 186.816271][ T9688] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1431'. [ 187.248317][ T9702] tipc: Failed to remove unknown binding: 66,0,0/0:2669398460/2669398462 [ 187.248347][ T9702] tipc: Failed to remove unknown binding: 66,0,0/0:2669398460/2669398461 [ 187.248581][ T9702] tipc: Failed to remove unknown binding: 66,0,0/0:2669398460/2669398462 [ 187.248600][ T9702] tipc: Failed to remove unknown binding: 66,0,0/0:2669398460/2669398461 [ 187.412135][ T9705] syzkaller1: entered promiscuous mode [ 187.412158][ T9705] syzkaller1: entered allmulticast mode [ 187.886788][ T9724] 0: reclassify loop, rule prio 0, protocol 03 [ 187.887833][ T9726] netlink: 'syz.0.1441': attribute type 1 has an invalid length. [ 188.314458][ T9742] TC_ACT_REPEAT abuse ? [ 188.380005][ T9747] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 188.407077][ T9747] syzkaller0: entered promiscuous mode [ 188.407102][ T9747] syzkaller0: entered allmulticast mode [ 188.560360][ T9762] syzkaller0: entered promiscuous mode [ 188.560383][ T9762] syzkaller0: entered allmulticast mode [ 188.758592][ T9774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1462'. [ 189.021038][ T9784] netlink: 'syz.4.1464': attribute type 4 has an invalid length. [ 189.155341][ T9790] syzkaller0: entered promiscuous mode [ 189.155364][ T9790] syzkaller0: entered allmulticast mode [ 189.283966][ T9795] syzkaller0: entered promiscuous mode [ 189.283987][ T9795] syzkaller0: entered allmulticast mode [ 189.357206][ T9801] netlink: 'syz.0.1471': attribute type 1 has an invalid length. [ 189.398826][ T9801] bond4: entered promiscuous mode [ 189.400891][ T9801] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.429621][ T9801] macvtap0: entered allmulticast mode [ 189.445825][ T9801] macvtap1: entered allmulticast mode [ 189.467353][ T9801] bond4: (slave bridge4): making interface the new active one [ 189.467378][ T9801] bridge4: entered promiscuous mode [ 189.484275][ T9801] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 189.542614][ T9803] syzkaller0: entered promiscuous mode [ 189.542632][ T9803] syzkaller0: entered allmulticast mode [ 189.666929][ T9813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 190.156824][ T9834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1479'. [ 191.831746][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1481'. [ 191.931124][ T9840] bridge_slave_1: left allmulticast mode [ 191.931150][ T9840] bridge_slave_1: left promiscuous mode [ 191.932671][ T9840] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.935966][ T9840] bridge_slave_0: left allmulticast mode [ 191.935990][ T9840] bridge_slave_0: left promiscuous mode [ 191.938199][ T9840] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.773985][ T9880] syzkaller0: entered promiscuous mode [ 192.774008][ T9880] syzkaller0: entered allmulticast mode [ 193.438137][ T9914] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1506'. [ 193.539763][ T9918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.539784][ T9918] IPv6: NLM_F_CREATE should be set when creating new route [ 193.540880][ T9902] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 193.784508][ T9918] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.786621][ T9918] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.881118][ T9918] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.896493][ T9918] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.275836][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.276780][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.676231][ T9924] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 194.729691][ T1524] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.729726][ T1524] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.731062][ T295] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.731091][ T295] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.731122][ T295] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.731144][ T295] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.731173][ T295] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 194.731194][ T295] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.000202][ T9965] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 195.106029][ T9965] team0: Port device wlan0 removed [ 195.323563][ T9977] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.476025][ T9987] syzkaller0: entered promiscuous mode [ 195.476048][ T9987] syzkaller0: entered allmulticast mode [ 195.596671][ T5283] veth1_vlan: left promiscuous mode [ 195.667234][ T9995] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1522'. [ 195.678677][ T9995] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.1522'. [ 195.713753][T10000] ip_tables: iptables: counters copy to user failed while replacing table [ 196.280103][T10016] ip_tables: iptables: counters copy to user failed while replacing table [ 196.756265][T10038] syzkaller0: entered promiscuous mode [ 196.756287][T10038] syzkaller0: entered allmulticast mode [ 196.948499][T10043] syzkaller0: entered promiscuous mode [ 196.948520][T10043] syzkaller0: entered allmulticast mode [ 196.959095][T10054] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1536'. [ 197.094642][T10060] ip_tables: iptables: counters copy to user failed while replacing table [ 197.263969][T10069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1540'. [ 197.419288][T10078] bond5: entered promiscuous mode [ 197.419311][T10078] bond5: entered allmulticast mode [ 197.683183][T10091] netlink: 'syz.3.1546': attribute type 1 has an invalid length. [ 197.837257][T10094] 8021q: adding VLAN 0 to HW filter on device bond5 [ 197.845046][T10094] bond4: (slave bond5): making interface the new active one [ 197.845702][T10094] bond4: (slave bond5): Enslaving as an active interface with an up link [ 197.862403][T10091] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 197.885944][T10091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 198.159547][T10111] syzkaller0: entered promiscuous mode [ 198.159563][T10111] syzkaller0: entered allmulticast mode [ 198.271713][T10116] netlink: 'syz.3.1554': attribute type 1 has an invalid length. [ 198.298488][T10116] bond6: entered promiscuous mode [ 198.298966][T10116] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.331290][T10116] 8021q: adding VLAN 0 to HW filter on device bond6 [ 198.331485][T10116] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 198.331496][T10116] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 198.344631][T10116] bond6: (slave wireguard0): making interface the new active one [ 198.344656][T10116] wireguard0: entered promiscuous mode [ 198.355469][T10116] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 198.629848][T10130] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 198.715668][T10130] bridge6: entered promiscuous mode [ 198.719210][T10130] bond7: (slave bridge6): making interface the new active one [ 198.724549][T10130] bond7: (slave bridge6): Enslaving as an active interface with an up link [ 198.766474][T10138] batman_adv: batadv0: Adding interface: dummy0 [ 198.766492][T10138] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 198.766514][T10138] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 198.834673][T10137] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1561'. [ 198.892413][T10137] bond0: (slave bond_slave_0): Releasing backup interface [ 198.931426][T10137] bond_slave_0: entered promiscuous mode [ 198.931451][T10137] bond_slave_0: entered allmulticast mode [ 199.088578][T10152] TC_ACT_REPEAT abuse ? [ 199.594817][T10172] syzkaller0: entered promiscuous mode [ 199.594838][T10172] syzkaller0: entered allmulticast mode [ 199.702309][T10178] netlink: 'syz.0.1570': attribute type 1 has an invalid length. [ 199.768653][T10178] 8021q: adding VLAN 0 to HW filter on device bond5 [ 199.807410][T10178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1570'. [ 199.851534][T10178] bond5: (slave bridge5): making interface the new active one [ 199.852825][T10178] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 200.094233][T10189] syzkaller0: entered promiscuous mode [ 200.094256][T10189] syzkaller0: entered allmulticast mode [ 200.164007][T10195] netlink: 'syz.3.1573': attribute type 3 has an invalid length. [ 200.164030][T10195] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.1573'. [ 200.475836][T10205] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1576'. [ 200.581798][T10210] syzkaller0: entered promiscuous mode [ 200.581821][T10210] syzkaller0: entered allmulticast mode [ 200.651411][T10218] ip_tables: iptables: counters copy to user failed while replacing table [ 200.679318][T10220] netlink: 'syz.2.1580': attribute type 1 has an invalid length. [ 200.764609][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1580'. [ 200.780535][T10220] bond6: (slave bridge4): making interface the new active one [ 200.781026][T10220] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 200.816306][T10225] netlink: 'syz.3.1581': attribute type 1 has an invalid length. [ 200.830605][T10225] netlink: 'syz.3.1581': attribute type 2 has an invalid length. [ 200.927287][T10227] netlink: 'syz.4.1582': attribute type 1 has an invalid length. [ 200.965648][ T1159] IPVS: starting estimator thread 0... [ 201.048034][T10237] IPVS: using max 33 ests per chain, 79200 per kthread [ 201.196161][T10249] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1591'. [ 201.216393][T10249] netlink: 'syz.4.1591': attribute type 8 has an invalid length. [ 201.216416][T10249] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.1591'. [ 201.272012][T10250] syzkaller0: entered promiscuous mode [ 201.272033][T10250] syzkaller0: entered allmulticast mode [ 201.297309][T10253] syzkaller0: entered promiscuous mode [ 201.297329][T10253] syzkaller0: entered allmulticast mode [ 201.429771][T10261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1595'. [ 201.472139][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 201.472177][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 201.472197][ T5630] Bluetooth: hci1: command 0x0406 tx timeout [ 201.590104][T10258] bond9: entered promiscuous mode [ 201.590391][T10258] 8021q: adding VLAN 0 to HW filter on device bond9 [ 201.590971][T10261] bond9: entered allmulticast mode [ 201.654796][T10267] bond9: (slave bridge7): making interface the new active one [ 201.654818][T10267] bridge7: entered promiscuous mode [ 201.654962][T10267] bridge7: entered allmulticast mode [ 201.665348][T10267] bond9: (slave bridge7): Enslaving as an active interface with an up link [ 201.739406][T10272] syzkaller0: entered promiscuous mode [ 201.739428][T10272] syzkaller0: entered allmulticast mode [ 201.901630][T10276] syzkaller0: entered promiscuous mode [ 201.901652][T10276] syzkaller0: entered allmulticast mode [ 201.922768][T10280] syzkaller0: entered promiscuous mode [ 201.922790][T10280] syzkaller0: entered allmulticast mode [ 202.114416][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1605'. [ 202.239993][T10298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1606'. [ 202.256793][T10291] bond10: entered promiscuous mode [ 202.256816][T10291] bond10: entered allmulticast mode [ 202.411794][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1608'. [ 204.146047][T10301] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 204.251676][T10307] syzkaller0: entered promiscuous mode [ 204.251700][T10307] syzkaller0: entered allmulticast mode [ 204.273238][T10311] syzkaller1: entered promiscuous mode [ 204.273257][T10311] syzkaller1: entered allmulticast mode [ 204.340665][T10313] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1612'. [ 204.382565][T10309] syzkaller0: entered promiscuous mode [ 204.382587][T10309] syzkaller0: entered allmulticast mode [ 204.492262][T10315] ip_tables: iptables: counters copy to user failed while replacing table [ 204.565990][T10319] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 204.573603][T10319] validate_nla: 3 callbacks suppressed [ 204.573624][T10319] netlink: 'syz.1.1615': attribute type 21 has an invalid length. [ 204.573641][T10319] IPv6: NLM_F_CREATE should be specified when creating new route [ 204.573962][T10319] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.573972][T10319] IPv6: NLM_F_CREATE should be set when creating new route [ 204.574087][T10319] IPv6: NLM_F_CREATE should be set when creating new route [ 204.574109][T10319] IPv6: NLM_F_CREATE should be set when creating new route [ 204.720787][T10323] netlink: 'syz.4.1618': attribute type 1 has an invalid length. [ 204.852597][T10329] bond3: (slave geneve2): making interface the new active one [ 204.872753][T10329] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 204.898334][ T1524] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 204.899600][ T1159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 204.899660][ T1159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 204.899691][ T1159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 204.905182][T10323] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1618'. [ 204.918474][T10323] 8021q: adding VLAN 0 to HW filter on device bond3 [ 204.951615][T10335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1620'. [ 205.125349][T10340] netlink: 'syz.0.1622': attribute type 10 has an invalid length. [ 205.162782][T10340] team0: Port device dummy0 added [ 205.270007][T10342] syzkaller0: entered promiscuous mode [ 205.270022][T10342] syzkaller0: entered allmulticast mode [ 205.515764][T10361] netlink: 'syz.1.1631': attribute type 1 has an invalid length. [ 205.732578][T10366] veth7: entered allmulticast mode [ 205.752640][T10366] bond6: (slave veth7): Enslaving as an active interface with a down link [ 205.773237][T10361] bond4: (slave veth0_to_bond): Releasing active interface [ 205.773263][T10361] veth0_to_bond: left promiscuous mode [ 205.773456][T10361] veth0_to_bond: left allmulticast mode [ 205.800700][T10361] bond6: (slave veth0_to_bond): making interface the new active one [ 205.804096][T10361] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 205.806262][T10375] __nla_validate_parse: 1 callbacks suppressed [ 205.806279][T10375] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1633'. [ 205.835392][T10375] netlink: 'syz.4.1633': attribute type 4 has an invalid length. [ 205.835412][T10375] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.1633'. [ 206.129713][T10387] syzkaller0: entered promiscuous mode [ 206.129734][T10387] syzkaller0: entered allmulticast mode [ 206.140372][T10389] syzkaller0: entered promiscuous mode [ 206.140399][T10389] syzkaller0: entered allmulticast mode [ 206.436198][T10398] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 206.465112][T10395] syzkaller0: entered promiscuous mode [ 206.465135][T10395] syzkaller0: entered allmulticast mode [ 206.661245][T10403] tipc: Enabled bearer , priority 0 [ 206.689359][T10405] syzkaller0: entered promiscuous mode [ 206.689381][T10405] syzkaller0: entered allmulticast mode [ 206.973292][T10413] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1649'. [ 207.000471][T10413] batman_adv: batadv0: Removing interface: dummy0 [ 207.667452][T10450] syzkaller0: entered promiscuous mode [ 207.667475][T10450] syzkaller0: entered allmulticast mode [ 208.141402][T10463] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1668'. [ 208.564383][T10484] tipc: Started in network mode [ 208.564410][T10484] tipc: Node identity ba4d805d67fd, cluster identity 4711 [ 208.564512][T10484] tipc: Enabled bearer , priority 0 [ 208.565679][T10484] syzkaller0: entered promiscuous mode [ 208.565692][T10484] syzkaller0: entered allmulticast mode [ 208.599477][T10484] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 208.620432][T10484] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1673'. [ 208.625307][T10484] tipc: Resetting bearer [ 208.645667][T10482] tipc: Resetting bearer [ 208.664580][T10482] tipc: Disabling bearer [ 208.720677][T10487] syzkaller0: entered promiscuous mode [ 208.720703][T10487] syzkaller0: entered allmulticast mode [ 209.090955][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056bd8c00: rx timeout, send abort [ 209.092139][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056bd8c00: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 209.092365][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880564b7400: rx timeout, send abort [ 209.092539][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880564b7400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 209.093396][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880564b4800: rx timeout, send abort [ 209.093586][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880564b4800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 209.097581][T10496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1677'. [ 210.790441][T10503] syzkaller0: entered promiscuous mode [ 210.790464][T10503] syzkaller0: entered allmulticast mode [ 210.993110][T10514] syzkaller0: entered promiscuous mode [ 210.993133][T10514] syzkaller0: entered allmulticast mode [ 211.207940][T10520] syzkaller0: entered promiscuous mode [ 211.207964][T10520] syzkaller0: entered allmulticast mode [ 211.213166][T10520] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 211.323147][T10540] syzkaller1: entered promiscuous mode [ 211.323169][T10540] syzkaller1: entered allmulticast mode [ 211.818455][T10557] syzkaller0: entered promiscuous mode [ 211.818476][T10557] syzkaller0: entered allmulticast mode [ 211.856572][T10561] syzkaller0: entered promiscuous mode [ 211.856594][T10561] syzkaller0: entered allmulticast mode [ 212.034843][T10573] netlink: 'syz.2.1695': attribute type 1 has an invalid length. [ 212.207925][T10577] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 212.294016][T10573] veth9: entered promiscuous mode [ 212.312342][T10573] bond8: (slave veth9): Enslaving as a backup interface with a down link [ 212.379003][ T5623] Bluetooth: hci2: Malformed HCI Event [ 212.397050][T10581] syzkaller0: entered promiscuous mode [ 212.397073][T10581] syzkaller0: entered allmulticast mode [ 212.884397][T10612] syzkaller0: entered promiscuous mode [ 212.884428][T10612] syzkaller0: entered allmulticast mode [ 213.194266][T10624] syz_tun: entered allmulticast mode [ 213.202845][T10616] syzkaller0: entered promiscuous mode [ 213.202864][T10616] syzkaller0: entered allmulticast mode [ 213.427285][T10640] syzkaller0: entered promiscuous mode [ 213.427323][T10640] syzkaller0: entered allmulticast mode [ 213.869367][T10660] tc action pedit offset must be on 32 bit boundaries [ 214.226417][T10671] syzkaller0: entered promiscuous mode [ 214.226438][T10671] syzkaller0: entered allmulticast mode [ 214.737854][T10691] syzkaller0: entered promiscuous mode [ 214.737900][T10691] syzkaller0: entered allmulticast mode [ 215.029554][T10699] xt_NETMAP: bad MAP_IPS. [ 215.189045][T10706] tc action pedit offset must be on 32 bit boundaries [ 215.592545][T10725] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 215.610692][T10729] syzkaller0: entered promiscuous mode [ 215.610713][T10729] syzkaller0: entered allmulticast mode [ 215.615459][T10729] 0: reclassify loop, rule prio 0, protocol 800 [ 215.646291][T10724] vlan0: entered promiscuous mode [ 215.646316][T10724] hsr0: entered promiscuous mode [ 215.646553][T10724] vlan0: entered allmulticast mode [ 215.646567][T10724] hsr0: entered allmulticast mode [ 215.646578][T10724] hsr_slave_0: entered allmulticast mode [ 215.646592][T10724] hsr_slave_1: entered allmulticast mode [ 215.873987][T10735] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 215.887518][T10735] 8021q: adding VLAN 0 to HW filter on device bond1 [ 215.911785][T10735] 8021q: adding VLAN 0 to HW filter on device bond3 [ 215.913675][T10735] bond4: left promiscuous mode [ 215.913697][T10735] bridge4: left promiscuous mode [ 215.938639][T10735] bond4: entered allmulticast mode [ 215.938660][T10735] bridge4: entered allmulticast mode [ 215.943105][T10735] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 215.975597][T10735] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 215.986281][T10735] bridge4: entered promiscuous mode [ 216.118928][ T1524] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 216.139177][ T1524] bond2: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 216.139465][ T1524] bond2: (slave veth7): making interface the new active one [ 216.170166][ T1524] bond2: active interface up! [ 216.228334][ T295] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 216.228362][ T295] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 216.247460][T10747] tc action pedit offset must be on 32 bit boundaries [ 216.329790][T10762] syzkaller0: entered promiscuous mode [ 216.329813][T10762] syzkaller0: entered allmulticast mode [ 216.333458][T10760] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1761'. [ 216.341538][ T295] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 216.341567][ T295] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 216.447793][ T276] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 216.467756][ T276] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 216.487894][ T295] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 216.540751][T10767] syzkaller0: entered promiscuous mode [ 216.540775][T10767] syzkaller0: entered allmulticast mode [ 216.705670][T10775] syzkaller0: entered promiscuous mode [ 216.705691][T10775] syzkaller0: entered allmulticast mode [ 216.706568][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 216.706587][T10781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1767'. [ 216.744566][T10775] tipc: Enabled bearer , priority 0 [ 216.749264][ T5638] Bluetooth: hci1: command 0x0406 tx timeout [ 216.778628][T10775] tipc: Resetting bearer [ 216.792700][T10774] tipc: Resetting bearer [ 216.824522][T10774] tipc: Disabling bearer [ 216.902302][T10790] syzkaller0: entered promiscuous mode [ 216.902323][T10790] syzkaller0: entered allmulticast mode [ 216.907304][T10789] tipc: Enabled bearer , priority 0 [ 216.913283][T10789] syzkaller0: entered promiscuous mode [ 216.913302][T10789] syzkaller0: entered allmulticast mode [ 216.919288][T10789] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 216.980187][T10789] tipc: Resetting bearer [ 216.984156][T10787] tipc: Resetting bearer [ 217.011120][T10787] tipc: Disabling bearer [ 217.131377][T10794] syzkaller0: entered promiscuous mode [ 217.131399][T10794] syzkaller0: entered allmulticast mode [ 217.136215][T10794] simple: /dev/video#_3 [ 217.136232][T10794] simple: /dev/video#_6 [ 217.136239][T10794] simple: /dev/video#_9 [ 217.136246][T10794] simple: /dev/video#_12 [ 217.136253][T10794] simple: /dev/video#_15 [ 217.136261][T10794] simple: /dev/video#_18 [ 217.136268][T10794] simple: /dev/video#_21 [ 217.136277][T10794] simple: /dev/video#_24 [ 217.136285][T10794] simple: /dev/video#_27 [ 217.136293][T10794] simple: /dev/video#_30 [ 217.136302][T10794] simple: /dev/video#_33 [ 217.136310][T10794] simple: /dev/video#_36 [ 217.136318][T10794] simple: /dev/video#_39 [ 217.136326][T10794] simple: /dev/video#_42 [ 217.136334][T10794] simple: /dev/video#_45 [ 217.136342][T10794] simple: /dev/video#_48 [ 217.136350][T10794] simple: /dev/video#_51 [ 217.136359][T10794] simple: /dev/video#_54 [ 217.136378][T10794] simple: /dev/video#_57 [ 217.136386][T10794] simple: /dev/video#_60 [ 217.136394][T10794] simple: /dev/video#_63 [ 217.136403][T10794] simple: /dev/video#_66 [ 217.136412][T10794] simple: /dev/video#_69 [ 217.136420][T10794] simple: /dev/video#_72 [ 217.136429][T10794] simple: /dev/video#_75 [ 217.136437][T10794] simple: /dev/video#_78 [ 217.136446][T10794] simple: /dev/video#_81 [ 217.136454][T10794] simple: /dev/video#_84 [ 217.136463][T10794] simple: /dev/video#_87 [ 217.136472][T10794] simple: /dev/video#_90 [ 217.136480][T10794] simple: /dev/video#_93 [ 217.136489][T10794] simple: /dev/video#_96 [ 217.292427][T10796] tipc: Enabled bearer , priority 0 [ 217.319960][T10796] tipc: Resetting bearer [ 217.351962][T10795] tipc: Disabling bearer [ 217.395393][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'. [ 217.395418][T10800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1776'. [ 217.399865][ T74] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 217.404398][ T74] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 217.404435][ T74] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 217.404465][ T74] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 217.651782][T10807] syzkaller0: entered promiscuous mode [ 217.651803][T10807] syzkaller0: entered allmulticast mode [ 217.661410][T10807] tipc: Enabled bearer , priority 0 [ 217.680159][T10805] tipc: Resetting bearer [ 217.762327][T10805] tipc: Disabling bearer [ 217.781421][T10809] syzkaller0: entered promiscuous mode [ 217.781442][T10809] syzkaller0: entered allmulticast mode [ 217.856630][T10817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1783'. [ 217.858994][T10817] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 217.859010][T10817] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1783'. [ 218.314510][T10839] syzkaller0: entered promiscuous mode [ 218.314532][T10839] syzkaller0: entered allmulticast mode [ 218.418574][T10839] tipc: Enabled bearer , priority 0 [ 218.441053][T10839] tipc: Resetting bearer [ 218.456355][T10838] tipc: Resetting bearer [ 218.501781][T10838] tipc: Disabling bearer [ 218.831503][ T31] audit: type=1804 audit(1792147361.668:2): pid=10855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1797" name="/newroot/332/cgroup.controllers" dev="tmpfs" ino=1711 res=1 errno=0 [ 218.847808][ T31] audit: type=1800 audit(1792147361.688:3): pid=10855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1797" name="cgroup.controllers" dev="tmpfs" ino=1711 res=0 errno=0 [ 218.886073][T10851] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1789'. [ 218.886095][T10851] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1789'. [ 218.886110][T10851] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1789'. [ 219.200560][T10864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.206039][T10864] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.256760][T10864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.483641][T10864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.511842][T10864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.546224][T10864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.548047][T10864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.582963][T10864] veth0_vlan: left promiscuous mode [ 219.590439][T10864] veth0_vlan: entered promiscuous mode [ 219.596151][T10864] veth1_vlan: entered promiscuous mode [ 219.621128][T10864] veth1_macvtap: left promiscuous mode [ 219.622767][T10864] veth0_macvtap: left promiscuous mode [ 219.625109][T10864] veth0_macvtap: entered promiscuous mode [ 219.627240][T10864] veth1_macvtap: entered promiscuous mode [ 219.668792][T10864] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.672528][T10864] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.674850][T10864] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.676861][T10864] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.745796][T10864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.792775][T10864] 8021q: adding VLAN 0 to HW filter on device bond2 [ 219.796723][T10864] 8021q: adding VLAN 0 to HW filter on device bond3 [ 219.816061][T10864] bond4: left promiscuous mode [ 219.816076][T10864] bridge3: left promiscuous mode [ 219.816952][T10864] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.836560][T10864] bond5: left promiscuous mode [ 219.836818][T10864] 8021q: adding VLAN 0 to HW filter on device bond5 [ 219.851227][T10864] 8021q: adding VLAN 0 to HW filter on device bond6 [ 219.852478][T10864] 8021q: adding VLAN 0 to HW filter on device bond7 [ 219.854466][T10864] 8021q: adding VLAN 0 to HW filter on device bond8 [ 219.879409][T10864] veth9: left promiscuous mode [ 219.888013][ T299] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 219.888045][ T299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.922065][ T190] geneve2: entered promiscuous mode [ 219.930805][T10446] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.930909][T10446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.936524][T10446] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.936622][T10446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.151473][T10877] syzkaller0: entered promiscuous mode [ 220.151492][T10877] syzkaller0: entered allmulticast mode [ 220.521293][T10918] netlink: 'syz.4.1814': attribute type 1 has an invalid length. [ 220.608010][ T1159] net_ratelimit: 177 callbacks suppressed [ 220.608032][ T1159] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 220.608086][ T1159] bond8: (slave ip6gretap1): link status up again after 0 ms [ 220.629877][ T1159] bond8: (slave ip6gretap1): link status up again after 0 ms [ 220.629918][ T1159] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 220.648483][T10446] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 220.648517][T10446] bond8: (slave ip6gretap1): link status up again after 0 ms [ 220.669468][ T1159] bond8: (slave ip6gretap1): link status up again after 0 ms [ 220.669507][ T1159] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 220.693042][ T74] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 220.693086][ T74] bond8: (slave ip6gretap1): link status up again after 0 ms [ 222.340244][T10918] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 222.491203][T10446] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.491238][T10446] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.492670][T10446] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.492700][T10446] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.504643][T10446] bond8: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 222.592062][T10446] bond8: active interface up! [ 222.594149][T10778] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 222.594179][T10778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.874049][T10950] __nla_validate_parse: 1 callbacks suppressed [ 222.874070][T10950] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1822'. [ 222.882117][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1823'. [ 223.071912][T10961] syzkaller0: entered promiscuous mode [ 223.071935][T10961] syzkaller0: entered allmulticast mode [ 224.109763][ T5638] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 224.109909][ T5638] Bluetooth: hci2: Injecting HCI hardware error event [ 224.113734][ T5623] Bluetooth: hci2: hardware error 0x00 [ 224.163252][T11010] syzkaller0: entered promiscuous mode [ 224.163284][T11010] syzkaller0: entered allmulticast mode [ 224.175285][T11010] tc action pedit 'at' offset 5 out of bounds [ 225.594444][T11066] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.678508][ T1524] net_ratelimit: 274 callbacks suppressed [ 225.678529][ T1524] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 225.678561][ T1524] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.678576][ T1524] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 225.796990][ T1524] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.797018][ T1524] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 225.797046][ T1524] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 225.899024][T10933] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 225.899064][T10933] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 225.899081][T10933] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 225.961603][T11122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1887'. [ 225.961732][T11122] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 225.962332][T11122] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1887'. [ 226.008835][ T1524] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 226.191794][ T5623] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 226.881459][T11172] wlan1 speed is unknown, defaulting to 1000 [ 226.881602][T11172] wlan1 speed is unknown, defaulting to 1000 [ 226.882836][T11172] wlan1 speed is unknown, defaulting to 1000 [ 226.883966][T11172] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 226.883997][T11172] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 226.884029][T11172] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 226.961985][T11172] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 226.991811][T11172] wlan1 speed is unknown, defaulting to 1000 [ 226.996833][T11172] wlan1 speed is unknown, defaulting to 1000 [ 227.012582][T11172] wlan1 speed is unknown, defaulting to 1000 [ 227.014264][T11172] wlan1 speed is unknown, defaulting to 1000 [ 227.016118][T11172] wlan1 speed is unknown, defaulting to 1000 [ 227.164318][ T5744] wlan1 speed is unknown, defaulting to 1000 [ 227.165976][ T5737] wlan1 speed is unknown, defaulting to 1000 [ 227.430080][T11187] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.645536][T11203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1923'. [ 227.718936][T11203] tipc: Enabled bearer , priority 0 [ 227.966442][T11219] syzkaller0: entered promiscuous mode [ 227.966463][T11219] syzkaller0: entered allmulticast mode [ 228.141495][T11229] syzkaller0: entered promiscuous mode [ 228.141517][T11229] syzkaller0: entered allmulticast mode [ 228.520473][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1948'. [ 228.520516][T11255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1948'. [ 228.643985][T11261] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 228.726803][T11268] syzkaller0: entered promiscuous mode [ 228.726824][T11268] syzkaller0: entered allmulticast mode [ 228.839225][ T5775] tipc: Node number set to 3719331933 [ 229.032014][T11279] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1958'. [ 229.035531][T11252] infiniband syz0: set active [ 229.048387][T11252] infiniband syz0: added bond_slave_1 [ 229.115063][T11252] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 229.115097][T11252] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 229.115131][T11252] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 229.207908][T11252] RDS/IB: syz0: added [ 229.209236][T11252] smc: adding ib device syz0 with port count 1 [ 229.209259][T11252] smc: ib device syz0 port 1 has no pnetid [ 229.480138][ T5775] [ 229.482519][ T5775] ====================================================== [ 229.489540][ T5775] WARNING: possible circular locking dependency detected [ 229.496580][ T5775] syzkaller #0 Not tainted [ 229.501002][ T5775] ------------------------------------------------------ [ 229.508025][ T5775] kworker/0:8/5775 is trying to acquire lock: [ 229.514097][ T5775] ffffffff914a2268 (rds_trans_sem){++++}-{4:4}, at: rds_trans_get_preferred+0x133/0x3c0 [ 229.523879][ T5775] [ 229.523879][ T5775] but task is already holding lock: [ 229.531256][ T5775] ffff888078516420 (&id_priv->handler_mutex/1){+.+.}-{4:4}, at: cma_ib_req_handler+0x2dd8/0x50d0 [ 229.541809][ T5775] [ 229.541809][ T5775] which lock already depends on the new lock. [ 229.541809][ T5775] [ 229.552230][ T5775] [ 229.552230][ T5775] the existing dependency chain (in reverse order) is: [ 229.561249][ T5775] [ 229.561249][ T5775] -> #2 (&id_priv->handler_mutex/1){+.+.}-{4:4}: [ 229.569782][ T5775] __mutex_lock+0x19d/0x1550 [ 229.574914][ T5775] cma_ib_req_handler+0x2dd8/0x50d0 [ 229.580657][ T5775] cm_process_work+0x51/0x420 [ 229.585873][ T5775] cm_work_handler+0x96c3/0xdff0 [ 229.591353][ T5775] process_scheduled_works+0xc3d/0x1630 [ 229.597432][ T5775] worker_thread+0xa47/0xfb0 [ 229.602549][ T5775] kthread+0x38b/0x480 [ 229.607149][ T5775] ret_from_fork+0x514/0xb70 [ 229.612274][ T5775] ret_from_fork_asm+0x1a/0x30 [ 229.617562][ T5775] [ 229.617562][ T5775] -> #1 (&id_priv->handler_mutex){+.+.}-{4:4}: [ 229.625914][ T5775] __mutex_lock+0x19d/0x1550 [ 229.631048][ T5775] rdma_destroy_id+0x1b/0x30 [ 229.636179][ T5775] rds_ib_laddr_check+0x373/0x630 [ 229.641736][ T5775] rds_trans_get_preferred+0x179/0x3c0 [ 229.647721][ T5775] rds_bind+0x687/0x870 [ 229.652397][ T5775] __sys_bind+0x2e3/0x410 [ 229.657249][ T5775] __x64_sys_bind+0x7a/0x90 [ 229.662284][ T5775] do_syscall_64+0x166/0x520 [ 229.667396][ T5775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.673818][ T5775] [ 229.673818][ T5775] -> #0 (rds_trans_sem){++++}-{4:4}: [ 229.681290][ T5775] __lock_acquire+0x164c/0x2de0 [ 229.686670][ T5775] lock_acquire+0x115/0x350 [ 229.691708][ T5775] down_read+0x4a/0x330 [ 229.696399][ T5775] rds_trans_get_preferred+0x133/0x3c0 [ 229.702393][ T5775] __rds_conn_create+0xa2c/0x2290 [ 229.707954][ T5775] rds_conn_create+0x43/0x60 [ 229.713069][ T5775] rds_ib_cm_handle_connect+0x446/0x1120 [ 229.719224][ T5775] rds_rdma_cm_event_handler_cmn+0x691/0xa30 [ 229.725734][ T5775] cma_cm_event_handler+0xac/0x2c0 [ 229.731363][ T5775] cma_ib_req_handler+0x3440/0x50d0 [ 229.737084][ T5775] cm_process_work+0x51/0x420 [ 229.742283][ T5775] cm_work_handler+0x96c3/0xdff0 [ 229.747749][ T5775] process_scheduled_works+0xc3d/0x1630 [ 229.753818][ T5775] worker_thread+0xa47/0xfb0 [ 229.758939][ T5775] kthread+0x38b/0x480 [ 229.763539][ T5775] ret_from_fork+0x514/0xb70 [ 229.768660][ T5775] ret_from_fork_asm+0x1a/0x30 [ 229.773953][ T5775] [ 229.773953][ T5775] other info that might help us debug this: [ 229.773953][ T5775] [ 229.784186][ T5775] Chain exists of: [ 229.784186][ T5775] rds_trans_sem --> &id_priv->handler_mutex --> &id_priv->handler_mutex/1 [ 229.784186][ T5775] [ 229.798627][ T5775] Possible unsafe locking scenario: [ 229.798627][ T5775] [ 229.806077][ T5775] CPU0 CPU1 [ 229.811447][ T5775] ---- ---- [ 229.816819][ T5775] lock(&id_priv->handler_mutex/1); [ 229.822126][ T5775] lock(&id_priv->handler_mutex); [ 229.829769][ T5775] lock(&id_priv->handler_mutex/1); [ 229.837587][ T5775] rlock(rds_trans_sem); [ 229.841925][ T5775] [ 229.841925][ T5775] *** DEADLOCK *** [ 229.841925][ T5775] [ 229.850074][ T5775] locks held by kworker/0:8/5775: 4, last CPU#0: [ 229.856412][ T5775] #0: ffff888032e1b540 ((wq_completion)ib_cm){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 229.867322][ T5775] #1: ffffc9000482fc40 ((work_completion)(&(&work->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 229.879882][ T5775] #2: ffff88807ec7f420 (&id_priv->handler_mutex){+.+.}-{4:4}, at: cma_ib_req_handler+0x2188/0x50d0 [ 229.890702][ T5775] #3: ffff888078516420 (&id_priv->handler_mutex/1){+.+.}-{4:4}, at: cma_ib_req_handler+0x2dd8/0x50d0 [ 229.901711][ T5775] [ 229.901711][ T5775] stack backtrace: [ 229.907636][ T5775] CPU: 0 UID: 0 PID: 5775 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) [ 229.917031][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 229.927110][ T5775] Workqueue: ib_cm cm_work_handler [ 229.932239][ T5775] Call Trace: [ 229.935515][ T5775] [ 229.938448][ T5775] dump_stack_lvl+0xe8/0x150 [ 229.943056][ T5775] print_circular_bug+0x2e2/0x300 [ 229.948099][ T5775] check_noncircular+0x12f/0x150 [ 229.953054][ T5775] __lock_acquire+0x164c/0x2de0 [ 229.957935][ T5775] lock_acquire+0x115/0x350 [ 229.962447][ T5775] ? rds_trans_get_preferred+0x133/0x3c0 [ 229.968084][ T5775] down_read+0x4a/0x330 [ 229.972247][ T5775] ? rds_trans_get_preferred+0x133/0x3c0 [ 229.977892][ T5775] rds_trans_get_preferred+0x133/0x3c0 [ 229.983361][ T5775] __rds_conn_create+0xa2c/0x2290 [ 229.988408][ T5775] ? __rds_conn_create+0x2d5/0x2290 [ 229.993629][ T5775] ? __pfx___rds_conn_create+0x10/0x10 [ 229.999085][ T5775] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 230.005238][ T5775] ? arch_stack_walk+0x11b/0x150 [ 230.010188][ T5775] ? ret_from_fork_asm+0x1a/0x30 [ 230.015136][ T5775] rds_conn_create+0x43/0x60 [ 230.019736][ T5775] rds_ib_cm_handle_connect+0x446/0x1120 [ 230.025370][ T5775] ? xas_create+0x1941/0x1bd0 [ 230.030054][ T5775] ? __pfx_rds_ib_cm_handle_connect+0x10/0x10 [ 230.036135][ T5775] ? lockdep_unlock+0x5c/0xd0 [ 230.040821][ T5775] ? __lock_acquire+0x1511/0x2de0 [ 230.045857][ T5775] ? xas_clear_mark+0x2e0/0x530 [ 230.050711][ T5775] ? __xas_nomem+0xa4/0x420 [ 230.055225][ T5775] ? __xa_alloc+0x199/0x220 [ 230.059737][ T5775] rds_rdma_cm_event_handler_cmn+0x691/0xa30 [ 230.065726][ T5775] ? __pfx_rds_rdma_cm_event_handler_cmn+0x10/0x10 [ 230.072232][ T5775] ? trace_cm_event_handler+0x81/0x1f0 [ 230.077701][ T5775] ? __pfx_rds_rdma_cm_event_handler+0x10/0x10 [ 230.083862][ T5775] ? cma_listen_handler+0x100/0x160 [ 230.089069][ T5775] cma_cm_event_handler+0xac/0x2c0 [ 230.094178][ T5775] cma_ib_req_handler+0x3440/0x50d0 [ 230.099371][ T5775] ? __pfx_cma_ib_req_handler+0x10/0x10 [ 230.104911][ T5775] ? arch_stack_walk+0x11b/0x150 [ 230.109841][ T5775] ? ret_from_fork_asm+0x1a/0x30 [ 230.114767][ T5775] ? __pfx_stack_trace_save+0x10/0x10 [ 230.120140][ T5775] ? xas_clear_mark+0x2d6/0x530 [ 230.124988][ T5775] cm_process_work+0x51/0x420 [ 230.129657][ T5775] ? _raw_spin_unlock_irq+0x2e/0x50 [ 230.134841][ T5775] cm_work_handler+0x96c3/0xdff0 [ 230.139783][ T5775] ? __pfx_cm_work_handler+0x10/0x10 [ 230.145070][ T5775] ? lock_acquire+0x115/0x350 [ 230.149736][ T5775] ? rcu_is_watching+0x16/0xb0 [ 230.154521][ T5775] ? process_scheduled_works+0x97a/0x1630 [ 230.160229][ T5775] process_scheduled_works+0xc3d/0x1630 [ 230.165773][ T5775] ? __pfx_process_scheduled_works+0x10/0x10 [ 230.171742][ T5775] ? assign_work+0x3cf/0x5d0 [ 230.176325][ T5775] worker_thread+0xa47/0xfb0 [ 230.180910][ T5775] ? __kthread_parkme+0x71/0x1f0 [ 230.185842][ T5775] kthread+0x38b/0x480 [ 230.189896][ T5775] ? __pfx_worker_thread+0x10/0x10 [ 230.194999][ T5775] ? __pfx_kthread+0x10/0x10 [ 230.199571][ T5775] ret_from_fork+0x514/0xb70 [ 230.204149][ T5775] ? __pfx_ret_from_fork+0x10/0x10 [ 230.209243][ T5775] ? __switch_to+0xc89/0x1420 [ 230.213919][ T5775] ? __pfx_kthread+0x10/0x10 [ 230.218528][ T5775] ret_from_fork_asm+0x1a/0x30 [ 230.223282][ T5775] [ 230.259940][ T5775] RDS/IB: Active conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 230.299207][ T5775] RDS/IB: Passive conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 230.321332][T11307] syzkaller0: entered promiscuous mode [ 230.321353][T11307] syzkaller0: entered allmulticast mode [ 230.717792][ T1524] net_ratelimit: 124 callbacks suppressed [ 230.717813][ T1524] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 230.717821][ T299] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.717837][ T299] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 230.827775][ T299] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 230.827803][ T1524] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.827822][ T1524] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 230.937749][ T1524] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 230.937765][ T299] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 230.937782][ T299] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 231.047712][ T299] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.727750][ T299] net_ratelimit: 127 callbacks suppressed [ 235.727767][ T299] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.727781][ T299] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 235.798073][T10940] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 235.837887][ T299] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.837919][ T299] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 235.907995][T10935] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 235.947780][ T1524] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms [ 235.947802][ T1524] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 236.028000][ T1524] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 236.057713][T10935] bond3: (slave ip6gretap1): link status up, enabling it in 0 ms