last executing test programs: 3.43572799s ago: executing program 0 (id=3675): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xe0000000, 0x5, 0xb7, 0x2, 0x1, 0x1, 0x4, 0x3, 0x1}}}}]}, 0x58}}, 0x4000) r4 = socket(0x10, 0x803, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newtfilter={0x54, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x3}, {}, {0x1, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a3, 0xd5}}, @TCA_U32_MARK={0x10, 0xa, {0x9, 0x7}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x24008000) 3.21562061s ago: executing program 0 (id=3679): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='xfrm0\x00', 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) 2.362911011s ago: executing program 1 (id=3693): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 2.294217487s ago: executing program 4 (id=3695): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 2.292359543s ago: executing program 0 (id=3696): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a8"], 0x50) writev(r1, &(0x7f0000001a80)=[{&(0x7f0000000180)="bf", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r2}, 0x20) recvmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 2.208462563s ago: executing program 3 (id=3698): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000002d00090027bd7000000000000500000014000a00020000000000000000000000000000014c764f47ed79740ba6e132b7c583a5e649514d23a533e533c206bb35f5ed332165a5c111eb15bd2a1362a0c2f0254234dd2682be30ea8ffa0c507b664284c6a6f1a9b2cff36c98d6442f73d84f72758e91b5bf02641fdd85c8edf22c528415480dc0985750e2739867871172cf38cce11aa364aaf9899bf35db2cc78ea"], 0x28}}, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x48, r3, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}]}, 0x48}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x88, r3, 0xa15, 0x70bd28, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'macvlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x88}, 0x1, 0x0, 0x0, 0x2001}, 0x80) sendmsg$nl_route(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2.090651495s ago: executing program 4 (id=3699): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000540)="89e7ee0c7cdad9b4b47380c988cafbe863cac505", 0x14}, {&(0x7f0000000300)="76a829fe96ddaae68c92", 0xa}], 0x2) 2.007993385s ago: executing program 3 (id=3700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 2.007409485s ago: executing program 1 (id=3701): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002b00)=ANY=[@ANYBLOB="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"/3910], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x16, 0x0, &(0x7f00000000c0)=0x55) 1.950831351s ago: executing program 2 (id=3702): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x1, 0xcd}}, 0x44) 1.928091682s ago: executing program 3 (id=3703): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.884990498s ago: executing program 1 (id=3704): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x3000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r2, 0x80000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) 1.810738319s ago: executing program 2 (id=3705): r0 = socket(0x40000000015, 0x5, 0x0) close(0x3) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) listen(r2, 0x80) accept$netrom(r2, 0x0, 0x0) sendmsg$xdp(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000007c0)="ad237f1863d2d2d1a397e2a489c4ee1564e9eefdb4b79061470cc823e53d854435579529b39d744f960b8ed0bba79f9df628ff262afb11e4c03b500df2985e8f7a86f3ab28aa6e65dc1668e18aa4168755523a88d020c8955b46806d3f69f8112e948be32c675bd54ac2a8fae35dd71d00f06ab2cea8236060d1dcf3d1edf529357f70b8e066aaf93e5b32683568c00392ab3f0f8b1ac8a2ec51caacb1cc69306d814957a18b04bec4fae32726ae9013fe17948367ec6494080c4859841ebdb4d9237640caef0b7010d479", 0xcb}, {&(0x7f0000000d80)="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", 0x1fa}], 0x2, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 1.802840935s ago: executing program 3 (id=3706): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$kcm(0x2, 0xa, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000001c0), &(0x7f0000000300)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xd50, 0x0, &(0x7f00000003c0)="000000000000000000000001e370", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 1.745828854s ago: executing program 1 (id=3707): socket(0x2, 0x5, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000001480)) r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 1.494800537s ago: executing program 2 (id=3708): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x10, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x23d7, 0x7f}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1.334882813s ago: executing program 0 (id=3709): socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x6}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x6, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x200000000000000, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) 1.244044587s ago: executing program 0 (id=3710): socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x0) 516.674019ms ago: executing program 3 (id=3711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(0x3) close(0x4) 438.136178ms ago: executing program 4 (id=3712): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0x8}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) 437.458455ms ago: executing program 1 (id=3713): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 362.611603ms ago: executing program 0 (id=3714): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0x1, 0x200, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r4, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x8000) 349.223542ms ago: executing program 2 (id=3715): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @rand_addr=0x64010101}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 254.978879ms ago: executing program 3 (id=3716): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x3}, 0x1c) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000680)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e3031d32944bf20590000a2bc5603ca00000f7f8907000020008d42188fedc22eedc6d100000101ff0000000309", 0x48}], 0x1) 199.755151ms ago: executing program 2 (id=3717): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000900)='netlink_extack\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad4104c60000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='netlink_extack\x00', r1}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x34, r3, 0x1, 0x0, 0x0, {0x23}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x50) 185.870986ms ago: executing program 4 (id=3718): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={@default, @bcast, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @bcast]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff, 0xffe0}}]}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000040)={@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3, 0x1, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 89.5349ms ago: executing program 2 (id=3719): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f00000001c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 82.299067ms ago: executing program 4 (id=3720): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) sendto$unix(r3, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) 562.799µs ago: executing program 1 (id=3721): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7}, {0x7}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_ACT={0x30, 0x1, [@m_bpf={0x2c, 0x1d, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 4 (id=3722): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) shutdown(r2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x10042, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.19' (ED25519) to the list of known hosts. [ 80.791327][ T5846] cgroup: Unknown subsys name 'net' [ 80.942286][ T5846] cgroup: Unknown subsys name 'cpuset' [ 80.951784][ T5846] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.528851][ T5846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.131195][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.139655][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.148857][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.169063][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.178815][ T5876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.186188][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.188699][ T5863] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.201965][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.206829][ T5874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.209382][ T5863] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.217928][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.224676][ T5863] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.231231][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.239478][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.244219][ T5874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.245325][ T5874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.251789][ T5863] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.260055][ T5874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.269173][ T5863] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.287216][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.295107][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.295540][ T5874] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.303120][ T5863] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.329772][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.349260][ T5877] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.919390][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 86.054824][ T5859] chnl_net:caif_netlink_parms(): no params data found [ 86.072395][ T5869] chnl_net:caif_netlink_parms(): no params data found [ 86.093483][ T5858] chnl_net:caif_netlink_parms(): no params data found [ 86.275478][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.285276][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.293196][ T5868] bridge_slave_0: entered allmulticast mode [ 86.301754][ T5868] bridge_slave_0: entered promiscuous mode [ 86.310881][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.318022][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.325779][ T5868] bridge_slave_1: entered allmulticast mode [ 86.333394][ T5868] bridge_slave_1: entered promiscuous mode [ 86.458267][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.468151][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 86.479991][ T5858] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.487128][ T5858] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.495246][ T5858] bridge_slave_0: entered allmulticast mode [ 86.502479][ T5858] bridge_slave_0: entered promiscuous mode [ 86.535390][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.550733][ T5858] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.557902][ T5858] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.565506][ T5858] bridge_slave_1: entered allmulticast mode [ 86.572696][ T5858] bridge_slave_1: entered promiscuous mode [ 86.583839][ T5859] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.598714][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.606668][ T5859] bridge_slave_0: entered allmulticast mode [ 86.615089][ T5859] bridge_slave_0: entered promiscuous mode [ 86.626526][ T5869] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.638646][ T5869] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.649072][ T5869] bridge_slave_0: entered allmulticast mode [ 86.656739][ T5869] bridge_slave_0: entered promiscuous mode [ 86.783094][ T5859] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.791856][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.799459][ T5859] bridge_slave_1: entered allmulticast mode [ 86.807279][ T5859] bridge_slave_1: entered promiscuous mode [ 86.815572][ T5869] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.823629][ T5869] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.831044][ T5869] bridge_slave_1: entered allmulticast mode [ 86.839421][ T5869] bridge_slave_1: entered promiscuous mode [ 86.848343][ T5868] team0: Port device team_slave_0 added [ 86.869956][ T5858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.911816][ T5868] team0: Port device team_slave_1 added [ 86.938861][ T5858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.023208][ T5859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.035478][ T5859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.047183][ T5869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.110482][ T5869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.121156][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.128119][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.154635][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.181487][ T5858] team0: Port device team_slave_0 added [ 87.187548][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.194820][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.202045][ T5857] bridge_slave_0: entered allmulticast mode [ 87.210136][ T5857] bridge_slave_0: entered promiscuous mode [ 87.246630][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.253885][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.279935][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.300619][ T5858] team0: Port device team_slave_1 added [ 87.306570][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.313776][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.320971][ T5857] bridge_slave_1: entered allmulticast mode [ 87.327952][ T5857] bridge_slave_1: entered promiscuous mode [ 87.336360][ T5859] team0: Port device team_slave_0 added [ 87.357017][ T5869] team0: Port device team_slave_0 added [ 87.365421][ T5869] team0: Port device team_slave_1 added [ 87.379499][ T5875] Bluetooth: hci2: command tx timeout [ 87.382330][ T5877] Bluetooth: hci4: command tx timeout [ 87.385288][ T5863] Bluetooth: hci0: command tx timeout [ 87.390842][ T5872] Bluetooth: hci1: command tx timeout [ 87.396759][ T5867] Bluetooth: hci3: command tx timeout [ 87.425859][ T5859] team0: Port device team_slave_1 added [ 87.507189][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.514258][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.540588][ T5858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.554897][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.565462][ T5858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.574321][ T5858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.600379][ T5858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.625919][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.633183][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.660041][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.685574][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.703172][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.710314][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.736734][ T5859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.749165][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.756119][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.782265][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.798388][ T5868] hsr_slave_0: entered promiscuous mode [ 87.804987][ T5868] hsr_slave_1: entered promiscuous mode [ 87.840279][ T5857] team0: Port device team_slave_0 added [ 87.847059][ T5859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.854219][ T5859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.880637][ T5859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.918230][ T5857] team0: Port device team_slave_1 added [ 88.053791][ T5858] hsr_slave_0: entered promiscuous mode [ 88.060991][ T5858] hsr_slave_1: entered promiscuous mode [ 88.067140][ T5858] debugfs: 'hsr0' already exists in 'hsr' [ 88.073437][ T5858] Cannot create hsr debugfs directory [ 88.115993][ T5859] hsr_slave_0: entered promiscuous mode [ 88.123090][ T5859] hsr_slave_1: entered promiscuous mode [ 88.129378][ T5859] debugfs: 'hsr0' already exists in 'hsr' [ 88.135114][ T5859] Cannot create hsr debugfs directory [ 88.147892][ T5869] hsr_slave_0: entered promiscuous mode [ 88.154842][ T5869] hsr_slave_1: entered promiscuous mode [ 88.161338][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 88.167084][ T5869] Cannot create hsr debugfs directory [ 88.191199][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.198164][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.224153][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.236369][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.243391][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.269461][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.462765][ T5857] hsr_slave_0: entered promiscuous mode [ 88.469978][ T5857] hsr_slave_1: entered promiscuous mode [ 88.476076][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 88.482115][ T5857] Cannot create hsr debugfs directory [ 88.825472][ T5868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.837962][ T5868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.872478][ T5868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.896862][ T5868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.947634][ T5858] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.967833][ T5858] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.981909][ T5858] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.996966][ T5858] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.084125][ T5859] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.095288][ T5859] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.105646][ T5859] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.130261][ T5859] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.215842][ T5869] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.236255][ T5869] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.247055][ T5869] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.275775][ T5869] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.384133][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.400579][ T5858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.426006][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.434150][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.453972][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.461039][ T5867] Bluetooth: hci4: command tx timeout [ 89.461080][ T5867] Bluetooth: hci1: command tx timeout [ 89.469077][ T5867] Bluetooth: hci0: command tx timeout [ 89.473209][ T5877] Bluetooth: hci2: command tx timeout [ 89.477380][ T5863] Bluetooth: hci3: command tx timeout [ 89.493672][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.521764][ T5858] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.562503][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.582199][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.589542][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.602732][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.609852][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.649487][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.656624][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.670270][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.677374][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.770074][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.823161][ T5859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.850832][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.885402][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.892649][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.932155][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.939346][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.993129][ T5859] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.042078][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.049282][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.081260][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.088441][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.114649][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.275342][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.313475][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.320641][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.363548][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.370762][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.394931][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.437381][ T5858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.645905][ T5868] veth0_vlan: entered promiscuous mode [ 90.675045][ T5858] veth0_vlan: entered promiscuous mode [ 90.695962][ T5868] veth1_vlan: entered promiscuous mode [ 90.721491][ T5858] veth1_vlan: entered promiscuous mode [ 90.815544][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.857242][ T5858] veth0_macvtap: entered promiscuous mode [ 90.890419][ T5868] veth0_macvtap: entered promiscuous mode [ 90.923651][ T5858] veth1_macvtap: entered promiscuous mode [ 90.933585][ T5868] veth1_macvtap: entered promiscuous mode [ 91.020078][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.035807][ T5859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.057437][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.079525][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.102052][ T5858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.123766][ T3494] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.167374][ T3494] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.177101][ T3494] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.206613][ T3494] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.243092][ T3494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.254070][ T3494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.266189][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.285512][ T3494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.309895][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.410449][ T5859] veth0_vlan: entered promiscuous mode [ 91.486605][ T5859] veth1_vlan: entered promiscuous mode [ 91.503096][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.511678][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.539880][ T5863] Bluetooth: hci3: command tx timeout [ 91.539896][ T5877] Bluetooth: hci2: command tx timeout [ 91.545315][ T5863] Bluetooth: hci0: command tx timeout [ 91.550959][ T5877] Bluetooth: hci1: command tx timeout [ 91.556209][ T5867] Bluetooth: hci4: command tx timeout [ 91.588904][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.596829][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.646906][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.659497][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.689639][ T5869] veth0_vlan: entered promiscuous mode [ 91.703194][ T980] cfg80211: failed to load regulatory.db [ 91.722665][ T5857] veth0_vlan: entered promiscuous mode [ 91.743364][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.748069][ T5859] veth0_macvtap: entered promiscuous mode [ 91.766594][ T5859] veth1_macvtap: entered promiscuous mode [ 91.768857][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.774839][ T5869] veth1_vlan: entered promiscuous mode [ 91.833993][ T5857] veth1_vlan: entered promiscuous mode [ 91.845974][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.876601][ T5869] veth0_macvtap: entered promiscuous mode [ 91.913562][ T5869] veth1_macvtap: entered promiscuous mode [ 91.946504][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.994491][ T5859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.046715][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.096969][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.135706][ T59] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.147792][ T5857] veth0_macvtap: entered promiscuous mode [ 92.173953][ T59] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.192850][ T59] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.245506][ T5857] veth1_macvtap: entered promiscuous mode [ 92.274529][ T59] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.284512][ T59] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.305033][ T59] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.313993][ T59] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.343871][ T59] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.412241][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.453118][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.565730][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.575439][ T59] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.598722][ T59] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.623708][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.634338][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.650000][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.678132][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.694621][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.756329][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.765024][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.847186][ T5970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.869902][ T5970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.014723][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.051400][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.156269][ T6003] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 93.183341][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.210109][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.210468][ T6003] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4'. [ 93.321889][ T6010] veth1_macvtap: left promiscuous mode [ 93.624671][ T5863] Bluetooth: hci1: command tx timeout [ 93.630352][ T5867] Bluetooth: hci0: command tx timeout [ 93.635785][ T5867] Bluetooth: hci2: command tx timeout [ 93.641319][ T5875] Bluetooth: hci4: command tx timeout [ 93.641416][ T5877] Bluetooth: hci3: command tx timeout [ 93.805668][ T6028] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 93.896754][ T6031] netlink: 232 bytes leftover after parsing attributes in process `syz.1.22'. [ 94.079515][ T6036] warning: `syz.0.25' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.960003][ T6064] netlink: 284 bytes leftover after parsing attributes in process `syz.4.35'. [ 95.088099][ T6069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'. [ 95.133485][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz.1.39'. [ 95.167207][ T6073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.41'. [ 95.522344][ T6085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.898433][ T6103] netlink: 'syz.2.55': attribute type 14 has an invalid length. [ 96.078780][ T6110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 96.378759][ T6120] netlink: 'syz.0.63': attribute type 10 has an invalid length. [ 96.440078][ T6126] netlink: 'syz.0.63': attribute type 10 has an invalid length. [ 96.447782][ T6126] netlink: 40 bytes leftover after parsing attributes in process `syz.0.63'. [ 96.485888][ T6120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.496867][ T6120] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 96.525233][ T6126] batadv0: entered promiscuous mode [ 96.530964][ T6126] batadv0: entered allmulticast mode [ 96.539761][ T6126] bond0: (slave batadv0): Releasing backup interface [ 96.576117][ T6126] bridge0: port 3(batadv0) entered blocking state [ 96.613609][ T6126] bridge0: port 3(batadv0) entered disabled state [ 96.672177][ T6132] veth0_to_bridge: entered promiscuous mode [ 96.684492][ T6132] veth0_to_bridge: left promiscuous mode [ 96.920116][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 96.929645][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 97.885537][ T6181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.90'. [ 98.038892][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.93'. [ 98.309871][ T6197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.97'. [ 98.465756][ T6197] hsr_slave_1 (unregistering): left promiscuous mode [ 98.793963][ T6213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.104'. [ 98.828840][ T6213] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 99.225512][ T6226] Bluetooth: MGMT ver 1.23 [ 99.640350][ T6239] openvswitch: netlink: Multiple metadata blocks provided [ 99.894593][ T6253] Zero length message leads to an empty skb [ 100.706059][ T6285] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.447270][ T6316] netlink: 'syz.2.153': attribute type 18 has an invalid length. [ 101.826793][ T6330] netlink: 'syz.2.160': attribute type 83 has an invalid length. [ 101.990946][ T6334] netlink: 8 bytes leftover after parsing attributes in process `syz.4.162'. [ 102.041718][ T6334] vlan2: entered allmulticast mode [ 102.046920][ T6334] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 102.192707][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.167'. [ 102.266354][ T6344] netlink: 'syz.2.167': attribute type 1 has an invalid length. [ 102.319148][ T6344] netlink: 'syz.2.167': attribute type 2 has an invalid length. [ 102.341196][ T6351] netlink: 88 bytes leftover after parsing attributes in process `syz.1.170'. [ 102.368905][ T6351] netem: invalid attributes len -24 [ 102.374152][ T6351] netem: change failed [ 102.794616][ T6365] netlink: 'syz.0.177': attribute type 1 has an invalid length. [ 102.859320][ T6365] netlink: 'syz.0.177': attribute type 4 has an invalid length. [ 102.873857][ T6365] netlink: 188 bytes leftover after parsing attributes in process `syz.0.177'. [ 102.940802][ T6365] NCSI netlink: No device for ifindex 458760 [ 103.974934][ T6408] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.198'. [ 104.116219][ T6412] netlink: 8 bytes leftover after parsing attributes in process `syz.4.199'. [ 104.141482][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.200'. [ 104.152263][ T6412] netlink: 'syz.4.199': attribute type 30 has an invalid length. [ 104.174808][ T6412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 104.415485][ T6425] netlink: 104 bytes leftover after parsing attributes in process `syz.4.206'. [ 104.698968][ T6437] netlink: 'syz.4.211': attribute type 1 has an invalid length. [ 104.900098][ T6446] netlink: 10 bytes leftover after parsing attributes in process `syz.4.215'. [ 105.384295][ T6454] syz.2.219 (6454) used greatest stack depth: 16088 bytes left [ 105.675928][ T6478] sctp: [Deprecated]: syz.2.228 (pid 6478) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.675928][ T6478] Use struct sctp_sack_info instead [ 105.946261][ T6487] netlink: 8 bytes leftover after parsing attributes in process `syz.4.233'. [ 105.986535][ T6487] netlink: 24 bytes leftover after parsing attributes in process `syz.4.233'. [ 106.491486][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.244'. [ 106.742694][ T6518] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.249'. [ 107.716810][ T6559] veth0: entered promiscuous mode [ 107.729726][ T6556] veth0: left promiscuous mode [ 107.759787][ T6562] openvswitch: netlink: IPv4 tunnel dst address is zero [ 108.179464][ T6580] netlink: 'syz.4.279': attribute type 29 has an invalid length. [ 108.229077][ T6580] netlink: 'syz.4.279': attribute type 29 has an invalid length. [ 108.279406][ T6583] netlink: 'syz.4.279': attribute type 29 has an invalid length. [ 108.288175][ T6583] netlink: 'syz.4.279': attribute type 29 has an invalid length. [ 110.001174][ T5877] block nbd0: Receive control failed (result -32) [ 110.212512][ T6667] netlink: 108 bytes leftover after parsing attributes in process `syz.2.324'. [ 110.322089][ T6674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.329661][ T6674] IPv6: NLM_F_CREATE should be set when creating new route [ 110.337122][ T6674] IPv6: NLM_F_CREATE should be set when creating new route [ 110.387320][ T6674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 110.895874][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.337'. [ 112.009913][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 112.017419][ T6745] sctp: [Deprecated]: syz.2.359 (pid 6745) Use of int in max_burst socket option deprecated. [ 112.017419][ T6745] Use struct sctp_assoc_value instead [ 112.242546][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.364'. [ 112.343862][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'. [ 112.353401][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'. [ 112.371805][ T6767] bridge0: port 3(vlan2) entered blocking state [ 112.378447][ T6767] bridge0: port 3(vlan2) entered disabled state [ 112.385761][ T6767] vlan2: entered allmulticast mode [ 112.391316][ T6767] bridge0: entered allmulticast mode [ 112.412862][ T6767] vlan2: left allmulticast mode [ 112.427083][ T6767] bridge0: left allmulticast mode [ 112.659070][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.372'. [ 113.090252][ T6800] netlink: 'syz.4.380': attribute type 1 has an invalid length. [ 113.126294][ T6800] netlink: 'syz.4.380': attribute type 2 has an invalid length. [ 113.146447][ T6800] netlink: 'syz.4.380': attribute type 1 has an invalid length. [ 113.176474][ T6800] netlink: 1156 bytes leftover after parsing attributes in process `syz.4.380'. [ 114.149563][ T6834] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 114.215333][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 114.520164][ T6849] netem: change failed [ 114.677340][ T6852] bond1: entered promiscuous mode [ 114.728202][ T6852] bond1: entered allmulticast mode [ 114.733900][ T6852] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.983832][ T6852] bond1 (unregistering): Released all slaves [ 115.347317][ T6884] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 115.393533][ T6886] netlink: 104 bytes leftover after parsing attributes in process `syz.1.420'. [ 115.729769][ T6899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.427'. [ 116.461149][ T6928] gtp0: entered promiscuous mode [ 116.466165][ T6928] gtp0: entered allmulticast mode [ 116.742727][ T6942] netlink: 71 bytes leftover after parsing attributes in process `syz.3.448'. [ 117.395065][ T6973] netlink: 104 bytes leftover after parsing attributes in process `syz.2.461'. [ 117.663459][ T6984] netlink: 20 bytes leftover after parsing attributes in process `syz.3.466'. [ 117.810409][ T6992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.470'. [ 118.467643][ T7018] netlink: 'syz.4.483': attribute type 58 has an invalid length. [ 118.513126][ T7018] netlink: 20 bytes leftover after parsing attributes in process `syz.4.483'. [ 118.683414][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.488'. [ 118.818740][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 119.147923][ T7055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.500'. [ 119.596500][ T7071] netlink: 16 bytes leftover after parsing attributes in process `syz.0.508'. [ 119.741187][ T7079] erspan0: entered promiscuous mode [ 120.515027][ T7113] __nla_validate_parse: 3 callbacks suppressed [ 120.515045][ T7113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.527'. [ 120.553315][ T7112] vxlan0: entered promiscuous mode [ 120.575253][ T7112] vxlan0: entered allmulticast mode [ 120.592131][ T5970] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.639450][ T59] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.648200][ T59] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.725905][ T59] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.250702][ T7135] sch_fq: defrate 0 ignored. [ 121.627917][ T7152] netlink: 3 bytes leftover after parsing attributes in process `syz.3.548'. [ 122.497765][ T7188] netlink: 'syz.1.564': attribute type 4 has an invalid length. [ 122.898960][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 123.177561][ T7220] netlink: 'syz.4.581': attribute type 10 has an invalid length. [ 123.215222][ T7220] team0: Device dummy0 failed to register rx_handler [ 123.266836][ T7224] netlink: 'syz.4.581': attribute type 10 has an invalid length. [ 123.460606][ T43] syz_tun: tun_net_xmit 90 [ 123.597563][ T7238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 124.100146][ T7262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.600'. [ 124.178796][ T5938] syz_tun: tun_net_xmit 90 [ 124.373194][ T7273] Illegal XDP return value 4294967289 on prog (id 51) dev N/A, expect packet loss! [ 124.594782][ T7284] netlink: 36 bytes leftover after parsing attributes in process `syz.0.610'. [ 124.979784][ T5872] Bluetooth: hci4: command 0x0405 tx timeout [ 125.746466][ T7332] syz_tun: tun_net_xmit 86 [ 125.761604][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.634'. [ 125.793608][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.1.634'. [ 126.193219][ T7350] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.642'. [ 126.272058][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.645'. [ 126.819400][ C1] syz_tun: tun_net_xmit 86 [ 126.870086][ T7382] netlink: 'syz.4.653': attribute type 16 has an invalid length. [ 126.892440][ T7373] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.929356][ T7382] netlink: 'syz.4.653': attribute type 17 has an invalid length. [ 126.979623][ T7373] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.277674][ T7382] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 127.426328][ T7407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.666'. [ 127.457253][ T7406] bridge_slave_0: invalid flags given to default FDB implementation [ 127.559360][ T7411] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 127.858833][ C1] syz_tun: tun_net_xmit 86 [ 128.203908][ T7436] netlink: 'syz.2.681': attribute type 10 has an invalid length. [ 128.269217][ T7436] team0: Port device dummy0 added [ 128.289901][ T7443] netlink: 'syz.2.681': attribute type 10 has an invalid length. [ 128.399495][ T7443] team0: Port device dummy0 removed [ 128.414778][ T7443] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 128.724867][ T7459] dvmrp0: entered allmulticast mode [ 128.803043][ T7459] dvmrp0: left allmulticast mode [ 128.889160][ T7466] sctp: [Deprecated]: syz.3.694 (pid 7466) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.889160][ T7466] Use struct sctp_sack_info instead [ 129.284972][ T7484] netlink: 'syz.3.703': attribute type 25 has an invalid length. [ 129.763790][ T7507] netlink: 52 bytes leftover after parsing attributes in process `syz.3.714'. [ 129.958052][ T7516] netlink: 'syz.3.719': attribute type 12 has an invalid length. [ 130.007628][ T7516] netlink: 'syz.3.719': attribute type 29 has an invalid length. [ 130.052969][ T7516] netlink: 148 bytes leftover after parsing attributes in process `syz.3.719'. [ 130.099430][ T7516] netlink: 59 bytes leftover after parsing attributes in process `syz.3.719'. [ 130.399227][ T7534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'. [ 130.461888][ T7520] team0 (unregistering): Port device team_slave_0 removed [ 130.525206][ T7520] team0 (unregistering): Port device team_slave_1 removed [ 130.587535][ T7526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.724'. [ 130.805338][ T7552] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'. [ 130.815364][ T7552] netlink: 16 bytes leftover after parsing attributes in process `syz.0.736'. [ 130.990741][ T7558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.740'. [ 130.998751][ T7561] netlink: 1044 bytes leftover after parsing attributes in process `syz.0.741'. [ 131.106649][ T7563] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 131.224449][ T7570] netlink: 284 bytes leftover after parsing attributes in process `syz.0.745'. [ 131.328749][ T7567] tun0: tun_chr_ioctl cmd 1074025675 [ 131.360770][ T7567] tun0: persist disabled [ 131.682398][ T7590] syz.1.755 uses obsolete (PF_INET,SOCK_PACKET) [ 131.979469][ T5230] udevd[5230]: worker [6043] terminated by signal 33 (Unknown signal 33) [ 131.987979][ T5230] udevd[5230]: worker [6043] failed while handling '/devices/virtual/block/loop1' [ 132.540877][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'. [ 132.664716][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.678649][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.880535][ T7648] netlink: 104 bytes leftover after parsing attributes in process `syz.3.781'. [ 133.272707][ T7664] netlink: 'syz.1.791': attribute type 6 has an invalid length. [ 133.305337][ T7666] netlink: 4 bytes leftover after parsing attributes in process `syz.4.792'. [ 133.563602][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.798'. [ 133.656117][ T7678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.798'. [ 134.036062][ T7701] sch_fq: defrate 0 ignored. [ 134.432995][ T30] audit: type=1804 audit(1755817076.238:2): pid=7719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.818" name="/newroot/156/cgroup.controllers" dev="tmpfs" ino=806 res=1 errno=0 [ 134.497575][ T30] audit: type=1800 audit(1755817076.258:3): pid=7719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.818" name="cgroup.controllers" dev="tmpfs" ino=806 res=0 errno=0 [ 134.935877][ T7742] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 134.988041][ T7742] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 136.141927][ T7798] netlink: 'syz.0.856': attribute type 3 has an invalid length. [ 136.918707][ T7832] __nla_validate_parse: 1 callbacks suppressed [ 136.918728][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.873'. [ 136.985594][ T7832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.873'. [ 137.120847][ T928] syz_tun: tun_net_xmit 110 [ 137.131868][ T7843] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 137.391553][ T7860] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 137.432560][ T7860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.886'. [ 137.445572][ T7860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.530703][ T7860] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.677699][ T5929] syz_tun: tun_net_xmit 110 [ 137.689229][ T7871] netlink: 64 bytes leftover after parsing attributes in process `syz.2.891'. [ 137.833175][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 139.639216][ T7968] netlink: 12 bytes leftover after parsing attributes in process `syz.1.937'. [ 139.780193][ T7976] netlink: 340 bytes leftover after parsing attributes in process `syz.1.939'. [ 140.075966][ T7984] netem: incorrect ge model size [ 140.109078][ T7984] netem: change failed [ 140.321052][ T7993] netlink: 'syz.1.948': attribute type 1 has an invalid length. [ 140.459392][ T7996] tap0: tun_chr_ioctl cmd 1074025676 [ 140.464746][ T7996] tap0: owner set to 0 [ 140.607950][ T8008] netlink: 'syz.0.954': attribute type 11 has an invalid length. [ 140.791142][ T8016] netlink: 104 bytes leftover after parsing attributes in process `syz.3.959'. [ 141.317983][ T8044] team_slave_0: mtu greater than device maximum [ 141.326390][ T8046] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 141.338911][ T8046] netlink: 'syz.0.973': attribute type 3 has an invalid length. [ 141.346585][ T8046] netlink: 216 bytes leftover after parsing attributes in process `syz.0.973'. [ 141.386013][ T8046] NCSI netlink: No device for ifindex 813332851 [ 141.403723][ T8045] tap0: tun_chr_ioctl cmd 1074025672 [ 141.428670][ T8045] tap0: ignored: set checksum disabled [ 141.492752][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.977'. [ 142.115446][ T8083] __nla_validate_parse: 1 callbacks suppressed [ 142.115465][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.987'. [ 142.157384][ T8083] netlink: 28 bytes leftover after parsing attributes in process `syz.0.987'. [ 142.442734][ T8099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.996'. [ 142.458254][ T8101] openvswitch: netlink: Multiple metadata blocks provided [ 142.468370][ T8099] netlink: 10 bytes leftover after parsing attributes in process `syz.4.996'. [ 142.623109][ T8107] netlink: 14 bytes leftover after parsing attributes in process `syz.2.999'. [ 142.716692][ T8107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.751073][ T8107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.779450][ T8107] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 142.796751][ T8107] bond0 (unregistering): Released all slaves [ 143.324808][ T8132] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1012'. [ 143.324866][ T8129] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1010'. [ 143.796467][ T8157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1024'. [ 143.807564][ T8157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1024'. [ 143.823022][ T8157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1024'. [ 143.967843][ T8160] syzkaller1: entered promiscuous mode [ 143.987285][ T8160] syzkaller1: entered allmulticast mode [ 145.072578][ T8216] netlink: 'syz.0.1053': attribute type 11 has an invalid length. [ 145.328117][ T8234] netlink: 'syz.3.1061': attribute type 1 has an invalid length. [ 145.345685][ T8234] netlink: 'syz.3.1061': attribute type 2 has an invalid length. [ 145.384715][ T8234] netlink: 'syz.3.1061': attribute type 1 has an invalid length. [ 146.165066][ T8270] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4032 [ 146.299451][ T30] audit: type=1800 audit(1755817088.098:4): pid=8263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1075" name="memory.events" dev="tmpfs" ino=1161 res=0 errno=0 [ 146.704593][ T8288] syzkaller1: entered promiscuous mode [ 146.721158][ T8288] syzkaller1: entered allmulticast mode [ 147.396134][ T8317] netlink: 'syz.1.1100': attribute type 4 has an invalid length. [ 147.418595][ T8317] __nla_validate_parse: 4 callbacks suppressed [ 147.418614][ T8317] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1100'. [ 147.491955][ T8325] veth0: entered promiscuous mode [ 147.507280][ T8324] veth0: left promiscuous mode [ 147.939093][ T8347] syzkaller1: entered promiscuous mode [ 147.953814][ T8347] syzkaller1: entered allmulticast mode [ 148.243883][ T8360] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1119'. [ 148.847770][ T8385] netlink: 'syz.3.1132': attribute type 4 has an invalid length. [ 150.039319][ T8442] netlink: 'syz.1.1158': attribute type 1 has an invalid length. [ 150.555951][ T8467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1170'. [ 150.996811][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1180'. [ 151.081773][ T8489] netlink: 'syz.4.1180': attribute type 1 has an invalid length. [ 151.092359][ T8489] netlink: 'syz.4.1180': attribute type 2 has an invalid length. [ 151.686336][ T8520] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1196'. [ 152.188259][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1207'. [ 152.410768][ T8555] syzkaller1: entered promiscuous mode [ 152.425652][ T8555] syzkaller1: entered allmulticast mode [ 153.555239][ T8569] sctp: [Deprecated]: syz.4.1215 (pid 8569) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.555239][ T8569] Use struct sctp_sack_info instead [ 153.570121][ T8571] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1216'. [ 153.954060][ T8590] netlink: 'syz.2.1224': attribute type 2 has an invalid length. [ 154.424207][ T8614] netlink: 'syz.1.1237': attribute type 10 has an invalid length. [ 154.484556][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.519653][ T8614] bridge_slave_1: left allmulticast mode [ 154.543228][ T8614] bridge_slave_1: left promiscuous mode [ 154.563732][ T8614] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.644360][ T8614] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 154.875901][ T8637] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1245'. [ 154.902362][ T8637] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'. [ 155.264530][ T8654] sctp: [Deprecated]: syz.2.1254 (pid 8654) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.264530][ T8654] Use struct sctp_sack_info instead [ 155.326675][ T8658] sock: sock_set_timeout: `syz.1.1256' (pid 8658) tries to set negative timeout [ 155.849442][ T8680] tipc: Started in network mode [ 155.890511][ T8680] tipc: Node identity ac14142f, cluster identity 4711 [ 155.897861][ T8680] tipc: New replicast peer: 0.0.0.0 [ 155.920367][ T8680] tipc: Enabled bearer , priority 10 [ 155.938742][ T8680] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00aa [ 156.232988][ T8698] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1273'. [ 156.429267][ T8712] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1279'. [ 156.448450][ T8705] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 156.516629][ T8705] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 157.039863][ T10] tipc: Node number set to 2886997039 [ 158.172614][ T8804] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1309'. [ 159.214446][ T8851] pim6reg1: entered promiscuous mode [ 159.219991][ T8851] pim6reg1: entered allmulticast mode [ 159.635161][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1340'. [ 159.694501][ T8872] dummy0: entered promiscuous mode [ 159.713610][ T8872] dummy0: left promiscuous mode [ 160.895778][ T8936] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1372'. [ 161.237212][ T8949] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 161.294147][ T8953] openvswitch: netlink: IPv4 tun info is not correct [ 161.868764][ T8981] netlink: 'syz.1.1394': attribute type 11 has an invalid length. [ 162.306706][ T8994] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.347678][ T9002] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.368553][ T9002] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.377495][ T9002] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.386009][ T9002] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.394454][ T9002] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.402441][ T9002] Dead loop on virtual device ip6_vti0, fix it urgently! [ 162.527881][ T8994] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.532427][ T9012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1407'. [ 162.557742][ T9013] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1406'. [ 162.583023][ T9012] netlink: 'syz.3.1407': attribute type 7 has an invalid length. [ 162.597854][ T9012] netlink: 'syz.3.1407': attribute type 8 has an invalid length. [ 162.635913][ T9012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'. [ 162.680979][ T8994] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.732111][ T9020] openvswitch: netlink: IPv4 tun info is not correct [ 162.830749][ T8994] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.861072][ T9026] Bluetooth: MGMT ver 1.23 [ 163.045917][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.129506][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.168695][ T9036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1418'. [ 163.191973][ T8751] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.220958][ T8751] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.711975][ T9060] syzkaller1: entered promiscuous mode [ 163.723229][ T9060] syzkaller1: entered allmulticast mode [ 163.848026][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1434'. [ 163.893391][ T9074] netlink: 'syz.0.1436': attribute type 1 has an invalid length. [ 163.904903][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1436'. [ 163.918643][ T9071] netlink: 'syz.4.1434': attribute type 1 has an invalid length. [ 163.938326][ T9071] netlink: 'syz.4.1434': attribute type 2 has an invalid length. [ 164.052064][ T9080] netlink: 'syz.1.1438': attribute type 12 has an invalid length. [ 164.068644][ T9080] netlink: 'syz.1.1438': attribute type 29 has an invalid length. [ 164.094108][ T9080] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1438'. [ 164.124389][ T9080] netlink: 'syz.1.1438': attribute type 2 has an invalid length. [ 164.150544][ T9080] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1438'. [ 165.236209][ T9135] __nla_validate_parse: 1 callbacks suppressed [ 165.236228][ T9135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1463'. [ 165.289035][ T9135] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.442588][ T9141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1466'. [ 165.516721][ T9141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1466'. [ 165.913226][ T9159] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1474'. [ 167.361350][ T9226] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 167.416269][ T9231] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1506'. [ 167.614714][ T9236] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.822856][ T9251] netlink: 'syz.2.1514': attribute type 29 has an invalid length. [ 167.844346][ T9251] netlink: 'syz.2.1514': attribute type 29 has an invalid length. [ 167.854939][ T9251] netlink: 500 bytes leftover after parsing attributes in process `syz.2.1514'. [ 167.894004][ T9251] unsupported nla_type 58 [ 167.899906][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1515'. [ 168.212773][ T9270] netlink: 'syz.1.1524': attribute type 4 has an invalid length. [ 168.353074][ T9275] geneve2: entered promiscuous mode [ 168.367644][ T9275] geneve2: entered allmulticast mode [ 168.378590][ T36] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 19999 - 0 [ 168.401733][ T36] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 19999 - 0 [ 168.405010][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1528'. [ 168.432087][ T9275] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.457509][ T36] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 19999 - 0 [ 169.811684][ T9346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1559'. [ 170.019419][ T10] hid (null): unknown global tag 0xe [ 170.039406][ T10] hid (null): nested delimiters [ 170.144882][ T9357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1564'. [ 170.200423][ T9275] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.223425][ T9275] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 170.296103][ T9275] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.316332][ T9275] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 170.395235][ T9275] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.430024][ T9275] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 170.615139][ T59] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 170.637010][ T59] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 170.676876][ T9368] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1569'. [ 170.701488][ T8754] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 170.718895][ T8754] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 170.758185][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 170.788272][ T36] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 170.845592][ T59] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 170.875451][ T59] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 171.389234][ T9386] syzkaller1: entered promiscuous mode [ 171.394768][ T9386] syzkaller1: entered allmulticast mode [ 171.587224][ T9395] netlink: 'syz.0.1581': attribute type 1 has an invalid length. [ 171.932705][ T9407] sctp: [Deprecated]: syz.2.1587 (pid 9407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.932705][ T9407] Use struct sctp_sack_info instead [ 172.121786][ T10] hid-generic 0005:0D45:1012.0001: unknown global tag 0xe [ 172.150879][ T10] hid-generic 0005:0D45:1012.0001: item 0 2 1 14 parsing failed [ 172.189293][ T10] hid-generic 0005:0D45:1012.0001: probe with driver hid-generic failed with error -22 [ 172.616546][ T928] IPVS: starting estimator thread 0... [ 172.623358][ T9429] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 172.643123][ T9437] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1599'. [ 172.662650][ T9437] netlink: 'syz.2.1599': attribute type 7 has an invalid length. [ 172.680323][ T9437] netlink: 'syz.2.1599': attribute type 8 has an invalid length. [ 172.701410][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1599'. [ 172.712308][ T9435] IPVS: using max 25 ests per chain, 60000 per kthread [ 172.779238][ T9437] gretap0: entered promiscuous mode [ 172.796567][ T9437] batadv_slave_1: entered promiscuous mode [ 172.817933][ T9437] erspan0: entered promiscuous mode [ 173.462755][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1615'. [ 173.487078][ T9469] gtp0: entered promiscuous mode [ 173.508778][ T9469] gtp0: entered allmulticast mode [ 173.893637][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1622'. [ 174.135781][ T9496] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1627'. [ 174.523481][ T9509] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1633'. [ 174.545534][ T9514] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 174.868955][ T9529] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1642'. [ 174.895223][ T9531] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1643'. [ 175.239832][ T9548] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1648'. [ 175.302018][ T9545] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 176.086444][ T9561] syzkaller1: entered promiscuous mode [ 176.093177][ T9561] syzkaller1: entered allmulticast mode [ 176.335564][ T9567] veth0: entered promiscuous mode [ 176.413224][ T9565] veth0: left promiscuous mode [ 176.437971][ T9571] netlink: 'syz.1.1659': attribute type 10 has an invalid length. [ 176.586278][ T9575] netlink: 'syz.3.1662': attribute type 4 has an invalid length. [ 176.832749][ T5230] udevd[5230]: worker [7834] terminated by signal 33 (Unknown signal 33) [ 176.890749][ T5230] udevd[5230]: worker [7834] failed while handling '/devices/virtual/block/loop0' [ 176.956239][ T9590] syz_tun: tun_net_xmit 42 [ 176.979216][ T9590] syz_tun: tun_net_xmit 42 [ 176.983893][ T9590] syz_tun: tun_net_xmit 42 [ 176.998760][ T9590] syz_tun: tun_net_xmit 42 [ 177.003357][ T9590] syz_tun: tun_net_xmit 42 [ 177.007918][ T9590] syz_tun: tun_net_xmit 42 [ 177.052578][ T5929] IPVS: starting estimator thread 0... [ 177.058449][ T9590] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 177.161765][ T9597] IPVS: using max 28 ests per chain, 67200 per kthread [ 177.366970][ T9608] netlink: 'syz.3.1678': attribute type 12 has an invalid length. [ 177.392881][ T9608] netlink: 'syz.3.1678': attribute type 29 has an invalid length. [ 177.417584][ T9608] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1678'. [ 177.443052][ T9608] netlink: 'syz.3.1678': attribute type 1 has an invalid length. [ 177.512562][ T9334] Set syz1 is full, maxelem 65536 reached [ 177.522235][ T9614] veth1_to_bond: entered allmulticast mode [ 177.540921][ T9614] veth1_to_bond: left allmulticast mode [ 177.861552][ T9632] bridge0: port 3(syz_tun) entered blocking state [ 177.879741][ T9632] bridge0: port 3(syz_tun) entered disabled state [ 177.886465][ T9632] syz_tun: entered allmulticast mode [ 177.901959][ T9632] syz_tun: entered promiscuous mode [ 177.913042][ T9632] bridge0: port 3(syz_tun) entered blocking state [ 177.920190][ T9632] bridge0: port 3(syz_tun) entered forwarding state [ 178.060416][ T9644] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1692'. [ 179.160999][ T9707] syzkaller1: entered promiscuous mode [ 179.174338][ T9707] syzkaller1: entered allmulticast mode [ 179.604482][ T9727] netlink: 'syz.3.1729': attribute type 1 has an invalid length. [ 179.633477][ T9727] netlink: 'syz.3.1729': attribute type 10 has an invalid length. [ 179.658621][ T9727] netlink: 'syz.3.1729': attribute type 4 has an invalid length. [ 179.678552][ T9727] netlink: 136 bytes leftover after parsing attributes in process `syz.3.1729'. [ 179.710845][ T9731] unknown channel width for channel at 909000KHz? [ 179.747931][ T9731] unknown channel width for channel at 909000KHz? [ 179.788842][ T9731] unknown channel width for channel at 909000KHz? [ 180.269991][ T9762] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 1 [ 180.578987][ T9780] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 181.472867][ T9831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 181.857980][ T9852] syzkaller1: entered promiscuous mode [ 181.866329][ T9852] syzkaller1: entered allmulticast mode [ 182.660532][ T3540] wlan1: Trigger new scan to find an IBSS to join [ 183.009319][ T8754] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 183.100944][ T9911] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1807'. [ 183.328096][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1811'. [ 183.647976][ T9933] syzkaller1: entered promiscuous mode [ 183.653741][ T9933] syzkaller1: entered allmulticast mode [ 184.518194][ T9971] netlink: 'syz.0.1829': attribute type 4 has an invalid length. [ 184.571735][ T9975] netlink: 'syz.0.1829': attribute type 4 has an invalid length. [ 184.598901][ T9976] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1835'. [ 184.616234][ T9978] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1834'. [ 185.121352][T10002] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1845'. [ 185.132507][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1844'. [ 185.700694][ T3540] wlan1: Trigger new scan to find an IBSS to join [ 186.107123][T10037] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1860'. [ 186.140554][T10037] gretap0: entered promiscuous mode [ 186.168254][T10037] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1860'. [ 186.202148][T10037] 0ªî{X¹¦: renamed from gretap0 [ 186.215273][T10037] 0ªî{X¹¦: left promiscuous mode [ 186.223828][T10037] 0ªî{X¹¦: entered allmulticast mode [ 186.232482][T10037] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 186.390545][T10048] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1864'. [ 186.478808][T10048] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1864'. [ 186.492599][T10048] 0ªî{X¹¦: renamed from gretap0 [ 186.504363][T10048] 0ªî{X¹¦: entered allmulticast mode [ 186.520672][T10048] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 186.547228][T10050] pim6reg1: entered promiscuous mode [ 186.554261][T10050] pim6reg1: entered allmulticast mode [ 187.555700][T10086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 187.921812][ T59] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 187.952335][T10094] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 188.702722][T10119] netlink: 'syz.4.1896': attribute type 16 has an invalid length. [ 188.716226][T10119] __nla_validate_parse: 1 callbacks suppressed [ 188.716243][T10119] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1896'. [ 188.755377][ T3540] wlan1: Creating new IBSS network, BSSID ee:41:b6:95:65:cf [ 189.067006][T10132] tls_set_device_offload: netdev not found [ 189.125760][T10131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1903'. [ 189.253635][T10139] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1906'. [ 189.480729][T10147] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1909'. [ 190.525920][T10180] ip6gre1: entered allmulticast mode [ 190.645231][ T3540] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 190.932814][T10200] veth0: entered promiscuous mode [ 190.952322][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1931'. [ 191.008767][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1932'. [ 191.331677][T10202] hsr_slave_0 (unregistering): left promiscuous mode [ 191.715734][T10217] netlink: 'syz.4.1940': attribute type 15 has an invalid length. [ 191.724277][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'. [ 191.750215][ T5970] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 191.761316][T10217] netlink: 'syz.4.1940': attribute type 15 has an invalid length. [ 191.776612][ T5970] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 191.787183][T10217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1940'. [ 191.797622][ T5970] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 191.811999][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1939'. [ 191.835135][T10218] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1939'. [ 191.836141][ T5970] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 191.869978][T10218] netlink: 'syz.1.1939': attribute type 7 has an invalid length. [ 192.098700][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 193.116323][T10264] bridge_slave_0: left allmulticast mode [ 193.146733][T10264] bridge_slave_0: left promiscuous mode [ 193.182131][T10264] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.232063][T10264] bond0: (slave bridge_slave_1): Releasing backup interface [ 193.283748][T10264] bond0: (slave bond_slave_0): Releasing backup interface [ 193.342006][T10264] bond0: (slave bond_slave_1): Releasing backup interface [ 193.397147][T10264] team0: Port device team_slave_0 removed [ 193.442862][T10264] team0: Port device team_slave_1 removed [ 193.479695][T10264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.487132][T10264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.570580][T10264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.578017][T10264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.715557][T10067] Set syz1 is full, maxelem 65536 reached [ 193.723074][T10271] syzkaller1: entered promiscuous mode [ 193.742938][T10271] syzkaller1: entered allmulticast mode [ 194.107082][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.114384][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.285455][T10286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 195.596212][T10335] __nla_validate_parse: 1 callbacks suppressed [ 195.596231][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1983'. [ 196.516843][T10386] syz_tun: tun_net_xmit 62 [ 196.661484][T10390] syzkaller1: entered promiscuous mode [ 196.693339][T10398] netlink: 212288 bytes leftover after parsing attributes in process `syz.0.2004'. [ 196.710712][T10390] syzkaller1: entered allmulticast mode [ 197.192584][T10416] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.413659][T10416] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.737772][T10416] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.934799][T10416] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.112729][ T3540] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.145168][ T3540] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.203504][ T3540] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.218978][ T3494] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.556967][T10486] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 199.110444][T10501] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 199.346002][T10515] bridge_slave_0: left allmulticast mode [ 199.383533][T10515] bridge_slave_0: left promiscuous mode [ 199.432110][T10515] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.456199][T10515] bridge_slave_1: left allmulticast mode [ 199.470853][T10515] bridge_slave_1: left promiscuous mode [ 199.476851][T10515] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.507438][T10515] bond0: (slave bond_slave_0): Releasing backup interface [ 199.530448][T10515] bond0: (slave bond_slave_1): Releasing backup interface [ 199.554550][T10515] team0: Port device team_slave_0 removed [ 199.586273][T10515] team0: Port device team_slave_1 removed [ 199.606507][T10515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.628613][T10515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.652656][T10515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.666372][T10515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.259042][ T5877] Bluetooth: hci4: command 0x0405 tx timeout [ 200.404594][T10558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2067'. [ 200.498669][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 200.644234][T10564] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 200.807623][T10570] syzkaller1: entered promiscuous mode [ 200.814581][T10570] syzkaller1: entered allmulticast mode [ 200.871751][T10574] netlink: 'syz.0.2075': attribute type 1 has an invalid length. [ 200.897405][T10574] bond1: entered promiscuous mode [ 200.903786][T10574] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.989211][T10576] 8021q: adding VLAN 0 to HW filter on device bond2 [ 201.004154][T10576] bond1: (slave bond2): making interface the new active one [ 201.011988][T10576] bond2: entered promiscuous mode [ 201.018294][T10576] bond1: (slave bond2): Enslaving as an active interface with an up link [ 201.108035][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'. [ 201.121292][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2079'. [ 201.131759][T10585] netlink: 'syz.3.2079': attribute type 18 has an invalid length. [ 201.153524][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.162712][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2079'. [ 201.177387][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.187507][T10585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2079'. [ 201.219559][ T3494] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.221472][T10585] netlink: 'syz.3.2079': attribute type 18 has an invalid length. [ 201.264829][ T3494] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 201.773407][T10600] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2085'. [ 202.440617][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2101'. [ 202.449855][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2101'. [ 202.472667][T10639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2101'. [ 202.478045][ T59] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 202.488638][T10639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2101'. [ 202.502083][ T59] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 202.531504][ T59] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 202.555656][ T59] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 202.612698][T10642] netlink: 'syz.3.2103': attribute type 22 has an invalid length. [ 202.639318][T10642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2103'. [ 202.801416][T10642] netlink: 'syz.3.2103': attribute type 22 has an invalid length. [ 202.924934][T10658] netlink: 'syz.2.2110': attribute type 5 has an invalid length. [ 203.813540][T10697] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 203.845803][T10696] pim6reg1: entered promiscuous mode [ 203.855561][T10696] pim6reg1: entered allmulticast mode [ 203.943460][T10704] netlink: 'syz.1.2131': attribute type 9 has an invalid length. [ 203.952778][T10704] netlink: 'syz.1.2131': attribute type 9 has an invalid length. [ 204.038172][T10706] netlink: 'syz.3.2134': attribute type 4 has an invalid length. [ 204.106507][T10711] netlink: 'syz.3.2134': attribute type 4 has an invalid length. [ 204.341339][ C1] syz_tun: tun_net_xmit 70 [ 204.346816][ C1] syz_tun: tun_net_xmit 70 [ 204.636748][T10739] netlink: 'syz.3.2146': attribute type 11 has an invalid length. [ 205.130869][T10753] "syz.1.2151" (10753) uses obsolete ecb(arc4) skcipher [ 205.616836][T10798] chnl_net:caif_netlink_parms(): no params data found [ 205.786984][T10805] trusted_key: syz.4.2174 sent an empty control message without MSG_MORE. [ 205.973004][T10818] validate_nla: 2 callbacks suppressed [ 205.973023][T10818] netlink: 'syz.3.2179': attribute type 1 has an invalid length. [ 206.123719][T10826] __nla_validate_parse: 19 callbacks suppressed [ 206.123738][T10826] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2183'. [ 206.166049][T10828] netlink: 'syz.2.2184': attribute type 1 has an invalid length. [ 206.209934][T10828] smc: adding net device bond0 with user defined pnetid SYZ2 [ 206.221419][T10828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.248418][T10831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.257013][T10831] bond0: (slave vxcan3): The slave device specified does not support setting the MAC address [ 206.269906][T10831] bond0: (slave vxcan3): Error -95 calling set_mac_address [ 206.352520][T10836] netlink: 'syz.1.2187': attribute type 4 has an invalid length. [ 206.958162][T10874] openvswitch: netlink: IPv4 tun info is not correct [ 207.027908][T10877] batadv_slave_1: entered promiscuous mode [ 207.045384][T10876] batadv_slave_1: left promiscuous mode [ 207.516351][T10900] bond1: entered allmulticast mode [ 207.539922][T10900] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.548379][T10900] bridge0: port 4(bond1) entered blocking state [ 207.567249][T10900] bridge0: port 4(bond1) entered disabled state [ 207.578197][T10900] bond1: entered promiscuous mode [ 207.591484][T10900] bridge0: port 4(bond1) entered blocking state [ 207.597987][T10900] bridge0: port 4(bond1) entered forwarding state [ 207.680893][T10917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2218'. [ 207.768063][ T5970] bridge0: port 4(bond1) entered disabled state [ 207.803614][T10919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2219'. [ 208.044601][T10936] syzkaller1: entered promiscuous mode [ 208.055557][T10936] syzkaller1: entered allmulticast mode [ 208.100107][T10939] netlink: 'syz.2.2228': attribute type 3 has an invalid length. [ 208.108741][T10939] netlink: 248 bytes leftover after parsing attributes in process `syz.2.2228'. [ 208.166968][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 209.402658][T10992] syz_tun: entered allmulticast mode [ 209.442049][T10991] syz_tun: left allmulticast mode [ 209.530988][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2243'. [ 209.766882][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2247'. [ 210.244460][T11033] netlink: 'syz.0.2255': attribute type 1 has an invalid length. [ 210.285327][T11034] netlink: 'syz.4.2256': attribute type 15 has an invalid length. [ 210.376574][T11033] bond3: entered promiscuous mode [ 210.412774][T11033] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.551432][T11040] 8021q: adding VLAN 0 to HW filter on device bond3 [ 210.573788][T11040] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 210.589118][T11040] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 210.658261][T11056] netlink: 'syz.3.2264': attribute type 12 has an invalid length. [ 210.675729][T11040] bond3: (slave wireguard0): making interface the new active one [ 210.693773][T11040] wireguard0: entered promiscuous mode [ 210.706990][T11040] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 211.004842][T11070] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 211.283366][T11085] netlink: 'syz.1.2272': attribute type 4 has an invalid length. [ 211.539286][ T5874] Bluetooth: hci0: command 0x0406 tx timeout [ 211.539308][ T5875] Bluetooth: hci3: command 0x0406 tx timeout [ 211.547742][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 211.551775][ T5875] Bluetooth: hci1: command 0x0406 tx timeout [ 212.776847][T11161] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2301'. [ 213.817447][T11222] syzkaller1: entered promiscuous mode [ 213.856469][T11222] syzkaller1: entered allmulticast mode [ 213.943654][T11231] netlink: 'syz.4.2330': attribute type 2 has an invalid length. [ 213.972251][T11231] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2330'. [ 213.992649][T11231] nbd: must specify a device to reconfigure [ 214.152260][T11240] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2333'. [ 214.580578][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.866710][T11249] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2336'. [ 214.888256][T11249] bond1: left promiscuous mode [ 214.894338][T11249] bridge0: port 4(bond1) entered disabled state [ 214.917528][T11249] syz_tun: left allmulticast mode [ 214.918381][T11255] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2340'. [ 214.941826][T11249] syz_tun: left promiscuous mode [ 214.949509][T11249] bridge0: port 3(syz_tun) entered disabled state [ 214.969552][T11249] bridge_slave_1: left allmulticast mode [ 214.980052][T11249] bridge_slave_1: left promiscuous mode [ 214.993752][T11249] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.010129][T11249] bridge_slave_0: left allmulticast mode [ 215.015905][T11249] bridge_slave_0: left promiscuous mode [ 215.024381][T11249] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.136231][T11264] unknown channel width for channel at 909000KHz? [ 215.144034][T11264] unknown channel width for channel at 909000KHz? [ 215.274464][T11268] netlink: 'syz.3.2346': attribute type 21 has an invalid length. [ 215.319683][T11268] netlink: 'syz.3.2346': attribute type 22 has an invalid length. [ 215.337512][T11268] netlink: 'syz.3.2346': attribute type 23 has an invalid length. [ 215.368872][T11268] netlink: 'syz.3.2346': attribute type 25 has an invalid length. [ 215.415254][T11268] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2346'. [ 215.621111][T11288] netlink: 'syz.1.2354': attribute type 10 has an invalid length. [ 215.682314][T11289] netlink: 'syz.1.2354': attribute type 10 has an invalid length. [ 215.730851][T11288] team0: Port device dummy0 added [ 215.742753][T11289] team0: Port device dummy0 removed [ 215.784356][T11292] bridge0: port 1(bridge_slave_0) entered listening state [ 215.821656][T11295] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2357'. [ 215.858988][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 216.366692][ T8754] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 216.482912][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2383'. [ 216.563694][T11335] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2383'. [ 216.787147][T11348] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2378'. [ 216.844136][ T3494] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 216.897933][T11353] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 217.994601][T11418] netlink: 'syz.1.2405': attribute type 1 has an invalid length. [ 218.112953][T11424] bond1: (slave gretap1): making interface the new active one [ 218.123757][T11424] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 218.216068][T11423] __nla_validate_parse: 4 callbacks suppressed [ 218.216089][T11423] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2407'. [ 218.461508][T11434] syzkaller0: entered promiscuous mode [ 218.482979][T11434] syzkaller0: entered allmulticast mode [ 218.597517][T11447] netlink: 'syz.2.2419': attribute type 13 has an invalid length. [ 218.727451][T11452] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.310364][T11484] : renamed from bridge_slave_0 (while UP) [ 219.725132][T11506] veth3: entered allmulticast mode [ 219.778763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.997567][T11525] : left allmulticast mode [ 220.002286][T11525] : left promiscuous mode [ 220.007138][T11525] bridge0: port 1() entered disabled state [ 220.084039][T11525] bridge_slave_1: left allmulticast mode [ 220.118602][T11525] bridge_slave_1: left promiscuous mode [ 220.135364][T11525] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.215289][T11525] bond0: (slave bond_slave_0): Releasing backup interface [ 220.250834][T11525] bond0: (slave bond_slave_1): Releasing backup interface [ 220.267712][T11525] team0: Port device team_slave_0 removed [ 220.294515][T11525] team0: Port device team_slave_1 removed [ 220.306171][T11525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.314953][T11525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.818706][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.959526][T11563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2468'. [ 221.010562][T11566] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 3944. macoff=96 [ 221.187789][T11576] netlink: 'syz.3.2474': attribute type 12 has an invalid length. [ 221.935807][T11611] netlink: 'syz.3.2490': attribute type 1 has an invalid length. [ 222.035671][T11611] 8021q: adding VLAN 0 to HW filter on device bond1 [ 222.742743][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2500'. [ 223.437814][T11659] netlink: 'syz.2.2508': attribute type 1 has an invalid length. [ 223.468632][T11659] netlink: 'syz.2.2508': attribute type 4 has an invalid length. [ 223.476398][T11659] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2508'. [ 223.759177][T11671] raw_sendmsg: syz.3.2514 forgot to set AF_INET. Fix it! [ 223.942795][T11690] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.683114][T11732] Set syz1 is full, maxelem 65536 reached [ 224.691074][T11730] tipc: Started in network mode [ 224.706165][T11730] tipc: Node identity ac14140f, cluster identity 4711 [ 224.716731][T11730] tipc: New replicast peer: 255.255.255.255 [ 224.730596][T11730] tipc: Enabled bearer , priority 10 [ 224.781031][T11735] sctp: [Deprecated]: syz.2.2538 (pid 11735) Use of int in maxseg socket option. [ 224.781031][T11735] Use struct sctp_assoc_value instead [ 225.414004][T11757] Set syz1 is full, maxelem 65536 reached [ 225.823669][T11777] syzkaller1: entered promiscuous mode [ 225.839007][T11777] syzkaller1: entered allmulticast mode [ 225.850268][ T928] tipc: Node number set to 2886997007 [ 226.112181][T11792] syz_tun: tun_net_xmit 42 [ 226.373160][T11804] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 226.849055][T11825] netlink: 'syz.3.2579': attribute type 29 has an invalid length. [ 226.862548][T11825] netlink: 'syz.3.2579': attribute type 29 has an invalid length. [ 226.874804][T11825] netlink: 500 bytes leftover after parsing attributes in process `syz.3.2579'. [ 226.923076][T11827] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2580'. [ 227.102900][T11834] netlink: 'syz.4.2583': attribute type 1 has an invalid length. [ 227.138600][ C0] syz_tun: tun_net_xmit 42 [ 227.331082][T11848] dvmrp0: entered allmulticast mode [ 227.379107][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.621898][T11864] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2597'. [ 228.178596][ C0] syz_tun: tun_net_xmit 42 [ 228.641343][T11907] syzkaller0: entered promiscuous mode [ 228.657567][T11907] syzkaller0: entered allmulticast mode [ 228.805498][T11918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2619'. [ 228.856719][T11919] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2619'. [ 229.941384][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.294452][T11941] netlink: 51 bytes leftover after parsing attributes in process `syz.1.2627'. [ 230.704542][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2640'. [ 230.875586][T11975] wg1: entered promiscuous mode [ 231.226134][T11994] mac80211_hwsim hwsim8 syzkaller0: Caught tx_queue_len zero misconfig [ 231.439176][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2656'. [ 231.479067][T12007] netlink: 'syz.3.2656': attribute type 11 has an invalid length. [ 231.509781][T12007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2656'. [ 231.537355][T12013] netlink: 'syz.1.2659': attribute type 1 has an invalid length. [ 231.553907][T12007] netlink: 'syz.3.2656': attribute type 11 has an invalid length. [ 231.561946][T12013] netlink: 'syz.1.2659': attribute type 4 has an invalid length. [ 231.572686][T12013] netlink: 9422 bytes leftover after parsing attributes in process `syz.1.2659'. [ 231.879696][T12031] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2667'. [ 231.893790][T12033] netlink: 'syz.0.2668': attribute type 1 has an invalid length. [ 231.956901][T12033] 8021q: adding VLAN 0 to HW filter on device bond6 [ 231.956910][T12039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2668'. [ 232.067278][T12039] bond6 (unregistering): Released all slaves [ 232.236811][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2673'. [ 233.072318][T12094] netlink: 'syz.0.2695': attribute type 1 has an invalid length. [ 233.217578][T12103] bond6: (slave gretap0): making interface the new active one [ 233.228377][T12103] bond6: (slave gretap0): Enslaving as an active interface with an up link [ 234.525082][T12170] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 234.549014][T12170] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 234.820285][T12190] __nla_validate_parse: 1 callbacks suppressed [ 234.820299][T12190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2730'. [ 234.884241][T12190] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 234.896753][T12190] bond2: (slave vcan1): Error -95 calling set_mac_address [ 235.117173][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 235.128490][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2735'. [ 236.195970][T12261] netlink: 'syz.1.2757': attribute type 3 has an invalid length. [ 236.352637][T12269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2762'. [ 236.517050][T12277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2765'. [ 236.734073][T12284] veth1_to_bond: entered allmulticast mode [ 236.774652][T12284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2768'. [ 236.991042][T12284] veth1_to_bond (unregistering): left allmulticast mode [ 237.392565][T12322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2782'. [ 237.620638][T12330] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2785'. [ 237.707940][T12338] lo speed is unknown, defaulting to 1000 [ 237.726206][T12338] lo speed is unknown, defaulting to 1000 [ 237.747758][T12338] lo speed is unknown, defaulting to 1000 [ 237.803298][T12338] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 237.894196][T12338] lo speed is unknown, defaulting to 1000 [ 237.905807][T12338] lo speed is unknown, defaulting to 1000 [ 237.936519][T12338] lo speed is unknown, defaulting to 1000 [ 237.955416][T12338] lo speed is unknown, defaulting to 1000 [ 237.977286][T12338] lo speed is unknown, defaulting to 1000 [ 238.399946][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2805'. [ 238.412926][T12374] netlink: 'syz.0.2805': attribute type 26 has an invalid length. [ 238.425377][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2805'. [ 238.441725][T12374] netlink: 'syz.0.2805': attribute type 26 has an invalid length. [ 238.597338][ T5938] lo speed is unknown, defaulting to 1000 [ 239.109778][ T13] nci: nci_rx_work: unknown MT 0x6 [ 240.079040][T12461] __nla_validate_parse: 4 callbacks suppressed [ 240.079061][T12461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2842'. [ 240.192388][T12469] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2844'. [ 240.237201][T12472] netlink: 'syz.3.2847': attribute type 1 has an invalid length. [ 240.302181][T12472] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.350737][T12472] bond2: (slave gretap1): making interface the new active one [ 240.359897][T12472] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 240.453778][T12482] netlink: 'syz.1.2852': attribute type 1 has an invalid length. [ 240.518080][T12482] bond2: (slave bridge1): making interface the new active one [ 240.527334][T12482] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 240.571507][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2851'. [ 240.604736][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2851'. [ 240.671380][T12495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2855'. [ 240.885883][T12498] netlink: 'syz.4.2857': attribute type 13 has an invalid length. [ 240.994534][T12498] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 241.179971][T12516] policy can only be matched on NF_INET_PRE_ROUTING [ 241.179996][T12516] unable to load match [ 241.331478][T12519] syzkaller0: entered promiscuous mode [ 241.344353][T12519] syzkaller0: entered allmulticast mode [ 241.597082][T12539] netlink: 'syz.3.2875': attribute type 1 has an invalid length. [ 241.612878][T12539] netlink: 'syz.3.2875': attribute type 4 has an invalid length. [ 241.625298][T12539] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.2875'. [ 242.943024][T12570] dvmrp8: entered allmulticast mode [ 243.353916][T12584] lo speed is unknown, defaulting to 1000 [ 244.113619][T12624] dvmrp0: entered allmulticast mode [ 244.154878][T12629] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2907'. [ 244.175323][T12629] netlink: 'syz.1.2907': attribute type 7 has an invalid length. [ 244.192169][T12631] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2909'. [ 244.201501][T12629] netlink: 'syz.1.2907': attribute type 8 has an invalid length. [ 244.209570][T12629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2907'. [ 244.456431][T12646] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2916'. [ 244.467260][T12647] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.474856][T12647] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.483837][T12647] bridge0: entered allmulticast mode [ 244.988063][T12682] netlink: 'syz.0.2930': attribute type 1 has an invalid length. [ 245.038328][T12682] 8021q: adding VLAN 0 to HW filter on device bond7 [ 245.144629][T12682] bond7: (slave gretap1): making interface the new active one [ 245.161125][T12682] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 245.503542][T12706] lo speed is unknown, defaulting to 1000 [ 245.736684][T12726] __nla_validate_parse: 3 callbacks suppressed [ 245.736712][T12726] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2948'. [ 245.767538][T12722] netlink: 'syz.3.2945': attribute type 1 has an invalid length. [ 245.776211][T12722] netlink: 'syz.3.2945': attribute type 1 has an invalid length. [ 245.832912][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2948'. [ 245.873350][T12730] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2951'. [ 246.247361][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2952'. [ 246.303921][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2952'. [ 246.588695][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 246.981631][T12788] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2967'. [ 247.306554][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2972'. [ 247.337650][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2972'. [ 247.771194][ T3540] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 247.858355][T12826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2983'. [ 248.193586][T12838] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2987'. [ 248.596548][T12844] netlink: 'syz.2.2988': attribute type 1 has an invalid length. [ 249.740656][T12883] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 250.000339][T12889] 8021q: adding VLAN 0 to HW filter on device bond3 [ 250.021858][T12889] team0: Failed to send port change of device bond3 via netlink (err -105) [ 250.053310][T12889] team0: Failed to send options change via netlink (err -105) [ 250.081356][T12889] team0: Port device bond3 added [ 250.843268][T12920] syzkaller1: entered promiscuous mode [ 250.858567][T12920] syzkaller1: entered allmulticast mode [ 251.009145][T12927] __nla_validate_parse: 4 callbacks suppressed [ 251.009167][T12927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3020'. [ 251.032978][T12927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3020'. [ 251.186229][T12936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3023'. [ 251.686026][T12983] netlink: 788 bytes leftover after parsing attributes in process `syz.0.3032'. [ 251.822492][T12978] syzkaller0: entered promiscuous mode [ 251.831923][T12978] syzkaller0: entered allmulticast mode [ 253.017088][T13003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 253.068921][T13006] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3039'. [ 254.109588][T13021] tipc: Failed to remove unknown binding: 66,1,1/0:1962890323/1962890325 [ 254.168589][T13021] tipc: Failed to remove unknown binding: 66,1,1/0:1962890323/1962890325 [ 254.558168][T13050] syzkaller0: entered promiscuous mode [ 254.567736][T13050] syzkaller0: entered allmulticast mode [ 255.382090][T13066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3060'. [ 255.543578][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.550023][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.752679][T13066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.764502][T13066] bond0: (slave rose0): Enslaving as an active interface with an up link [ 256.960245][T13094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3068'. [ 257.034914][T13096] netlink: 14544 bytes leftover after parsing attributes in process `syz.3.3066'. [ 257.563632][T13131] bridge2: entered promiscuous mode [ 257.575331][T13131] bridge2: entered allmulticast mode [ 257.614087][T13126] lo speed is unknown, defaulting to 1000 [ 258.792167][T13181] netlink: 'syz.0.3093': attribute type 1 has an invalid length. [ 258.839741][T13181] netlink: 'syz.0.3093': attribute type 4 has an invalid length. [ 258.849507][T13184] netlink: 'syz.0.3093': attribute type 1 has an invalid length. [ 258.876097][T13184] netlink: 'syz.0.3093': attribute type 4 has an invalid length. [ 258.897563][T13181] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3093'. [ 258.911224][T13188] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 258.922455][T13184] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.3093'. [ 259.151473][T13199] netlink: 'syz.0.3100': attribute type 1 has an invalid length. [ 259.233912][T13197] syzkaller0: entered promiscuous mode [ 259.263012][T13197] syzkaller0: entered allmulticast mode [ 259.383829][T13199] 8021q: adding VLAN 0 to HW filter on device bond8 [ 259.403404][T13200] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 259.425074][T13200] syzkaller0: Linktype set failed because interface is up [ 259.518323][T13204] bond8: (slave veth5): Enslaving as an active interface with a down link [ 259.540637][ T13] syzkaller0: tun_net_xmit 48 [ 259.571004][T13207] bond8: (slave veth0_to_bond): making interface the new active one [ 259.586525][T13207] veth0_to_bond: entered promiscuous mode [ 259.596470][T13207] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 260.739582][ T5863] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 260.746412][ T5863] Bluetooth: hci0: command 0x0406 tx timeout [ 261.519683][ T59] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 262.346957][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3113'. [ 262.347335][T13273] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3114'. [ 262.422632][T13273] geneve2: entered promiscuous mode [ 262.605303][T13285] netlink: 'syz.2.3119': attribute type 4 has an invalid length. [ 263.062667][T13291] netlink: 'syz.4.3121': attribute type 13 has an invalid length. [ 263.084326][T13291] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 263.227413][T13308] syzkaller1: entered promiscuous mode [ 263.247165][T13308] syzkaller1: entered allmulticast mode [ 263.830704][T13328] syzkaller0: entered promiscuous mode [ 263.836337][T13328] syzkaller0: entered allmulticast mode [ 264.089074][T13343] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3140'. [ 265.484873][T13367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3146'. [ 265.657957][T13369] netlink: 'syz.2.3149': attribute type 16 has an invalid length. [ 265.682675][T13369] netlink: 'syz.2.3149': attribute type 17 has an invalid length. [ 265.730529][T13382] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3152'. [ 265.750135][T13374] syzkaller0: entered promiscuous mode [ 265.755815][T13374] syzkaller0: entered allmulticast mode [ 265.774744][T13369] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 265.931915][T13385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3154'. [ 266.023049][T13390] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 266.095500][T13393] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3157'. [ 267.427880][T13416] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 267.440658][T13414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3163'. [ 267.580095][T13425] syz_tun: tun_net_xmit 44 [ 267.871390][T13437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3171'. [ 267.920951][T13438] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3172'. [ 267.937071][T13442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3171'. [ 269.570014][T13510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3195'. [ 269.587866][T13512] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3196'. [ 269.962901][T13524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3200'. [ 270.326481][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3204'. [ 270.405761][T13535] netlink: 'syz.2.3206': attribute type 1 has an invalid length. [ 270.458577][T13535] netlink: 'syz.2.3206': attribute type 1 has an invalid length. [ 270.476569][T13535] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3206'. [ 270.719856][T13551] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3212'. [ 270.848878][ T8754] veth0_to_bond: left promiscuous mode [ 271.501981][T13589] netlink: 'syz.4.3229': attribute type 1 has an invalid length. [ 271.532706][T13589] netlink: 'syz.4.3229': attribute type 4 has an invalid length. [ 272.019629][T13586] clip:clip_setentry: non-CLIP VCC [ 273.333930][T13663] sctp: [Deprecated]: syz.0.3257 (pid 13663) Use of int in maxseg socket option. [ 273.333930][T13663] Use struct sctp_assoc_value instead [ 273.691965][T13679] __nla_validate_parse: 8 callbacks suppressed [ 273.691985][T13679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3263'. [ 273.740124][T13679] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3263'. [ 273.988977][T13690] tipc: Started in network mode [ 274.000640][T13690] tipc: Node identity 4e7e9f16e71e, cluster identity 4711 [ 274.039913][T13690] tipc: Enabled bearer , priority 0 [ 274.934441][T13697] syzkaller0: entered promiscuous mode [ 274.951440][T13697] syzkaller0: entered allmulticast mode [ 274.971198][T13697] tipc: Resetting bearer [ 275.112098][ T8754] tipc: Resetting bearer [ 275.118552][ T980] tipc: Node number set to 2841681686 [ 275.150535][T13689] tipc: Resetting bearer [ 276.725305][T13689] tipc: Disabling bearer [ 277.015059][T13740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3279'. [ 277.063094][T13742] netlink: 'syz.4.3280': attribute type 4 has an invalid length. [ 277.753361][ T980] lo speed is unknown, defaulting to 1000 [ 277.768717][ T980] syz2: Port: 1 Link DOWN [ 277.808072][T13727] lo speed is unknown, defaulting to 1000 [ 277.968794][ T8762] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.004217][ T8762] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.023971][ T8762] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.058366][ T8762] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.108736][ T8762] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.117668][ T8762] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.174862][T13766] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3286'. [ 278.188194][ T8762] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 278.199595][ T8762] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.501748][T13781] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3291'. [ 278.899590][ T8762] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 279.133099][T13810] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3301'. [ 280.072844][T13838] syzkaller1: entered promiscuous mode [ 280.078366][T13838] syzkaller1: entered allmulticast mode [ 280.438168][T13855] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3317'. [ 280.561913][T13860] lo speed is unknown, defaulting to 1000 [ 280.630082][T13863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3320'. [ 280.768107][T13867] bond0: entered promiscuous mode [ 280.775191][T13867] batadv0: entered promiscuous mode [ 280.781577][T13867] debugfs: 'hsr1' already exists in 'hsr' [ 280.787317][T13867] Cannot create hsr debugfs directory [ 280.793119][T13867] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 280.806016][T13867] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 280.817455][T13867] hsr1: entered allmulticast mode [ 280.823751][T13867] bond0: entered allmulticast mode [ 280.828939][T13867] batadv0: entered allmulticast mode [ 280.834820][T13867] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 280.846235][T13867] bond0: left promiscuous mode [ 280.853324][T13867] batadv0: left promiscuous mode [ 280.989726][T13874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3324'. [ 281.154189][T13882] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3328'. [ 281.232241][T13884] tipc: Enabled bearer , priority 0 [ 281.240296][T13884] syzkaller0: mtu less than device minimum [ 281.649170][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807c47e800: rx timeout, send abort [ 281.660468][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88807c47e800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 281.945143][T13911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3338'. [ 282.196006][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3340'. [ 282.285224][T13921] tipc: Started in network mode [ 282.293776][T13921] tipc: Node identity 32eae953713a, cluster identity 4711 [ 282.310259][T13921] tipc: Enabled bearer , priority 0 [ 282.378333][T13921] syzkaller0: entered promiscuous mode [ 282.385685][T13921] syzkaller0: entered allmulticast mode [ 282.396696][T13921] tipc: Resetting bearer [ 282.491588][T13931] netlink: 159784 bytes leftover after parsing attributes in process `syz.3.3345'. [ 282.505582][T13920] tipc: Resetting bearer [ 282.796765][T13944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3349'. [ 283.166034][T13954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3351'. [ 283.368699][ T5966] tipc: Node number set to 1137764691 [ 283.959376][T13920] tipc: Disabling bearer [ 283.984168][T13947] syz_tun: entered allmulticast mode [ 283.990015][ C1] syz_tun: tun_net_xmit 54 [ 284.012379][T13949] syz_tun: left allmulticast mode [ 284.163966][T13962] __nla_validate_parse: 1 callbacks suppressed [ 284.163983][T13962] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3354'. [ 284.186258][T13961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3353'. [ 284.415824][T13975] tipc: Started in network mode [ 284.430276][T13975] tipc: Node identity 16ee3e34b474, cluster identity 4711 [ 284.452779][T13975] tipc: Enabled bearer , priority 0 [ 284.547645][T13983] netlink: 'syz.1.3364': attribute type 1 has an invalid length. [ 284.589634][T13975] syzkaller0: entered promiscuous mode [ 284.595326][T13975] syzkaller0: entered allmulticast mode [ 284.606203][T13975] tipc: Resetting bearer [ 284.651359][T13983] 8021q: adding VLAN 0 to HW filter on device bond3 [ 284.670650][T13988] bond3: (slave geneve2): making interface the new active one [ 284.693547][T13991] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3366'. [ 284.702943][T13988] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 284.713977][T13972] tipc: Resetting bearer [ 284.899839][ C1] syz_tun: tun_net_xmit 54 [ 285.140311][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3372'. [ 285.561793][ T5966] tipc: Node number set to 2728017460 [ 286.212821][T13972] tipc: Disabling bearer [ 286.259193][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 286.404967][T14029] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3377'. [ 286.902251][T14058] Set syz1 is full, maxelem 65536 reached [ 286.936501][T14062] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3391'. [ 286.994536][T14062] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.014096][T14062] vlan0: entered allmulticast mode [ 287.019597][T14062] bond1: entered allmulticast mode [ 287.254627][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3394'. [ 287.579182][T14063] mpoa:mpoad_close: () going down [ 287.875652][T14097] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 288.263421][T14111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3409'. [ 288.481607][T14121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3412'. [ 288.704687][T14126] batadv_slave_0: entered promiscuous mode [ 288.757786][T14125] batadv_slave_0: left promiscuous mode [ 289.557260][T14146] tipc: Enabling of bearer rejected, already enabled [ 289.601964][T14144] vxcan1: entered allmulticast mode [ 289.628207][T14140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3421'. [ 289.637313][T14140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3421'. [ 289.649268][T14150] tipc: Resetting bearer [ 289.681285][ T8754] tipc: Resetting bearer [ 289.919055][T14163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3429'. [ 289.942991][T14162] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3428'. [ 289.972914][T14162] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 290.010417][T14162] openvswitch: netlink: Duplicate key (type 0). [ 290.052330][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3431'. [ 290.229984][T14177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3433'. [ 290.271523][T14177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3433'. [ 290.472909][T14185] tipc: Enabled bearer , priority 0 [ 290.663032][T14185] syzkaller0: entered promiscuous mode [ 290.689915][T14185] syzkaller0: entered allmulticast mode [ 290.707108][T14185] tipc: Resetting bearer [ 290.743872][T14193] netlink: 22 bytes leftover after parsing attributes in process `syz.1.3437'. [ 290.888937][ T8754] tipc: Resetting bearer [ 290.934643][T14184] tipc: Resetting bearer [ 291.055292][T14208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3441'. [ 291.126736][T14210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3441'. [ 292.343896][T14184] tipc: Disabling bearer [ 292.365836][T14211] tipc: Enabled bearer , priority 0 [ 292.387146][T14214] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 292.395075][T14214] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 292.411356][T14214] tipc: Resetting bearer [ 292.561326][T14231] syz_tun: tun_net_xmit 42 [ 293.618736][ C1] syz_tun: tun_net_xmit 42 [ 293.947539][ T8762] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.008487][ T8762] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.016906][ T8762] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.094845][ T8762] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.658590][ C1] syz_tun: tun_net_xmit 42 [ 295.444548][T14339] lo speed is unknown, defaulting to 1000 [ 295.740535][T14356] __nla_validate_parse: 6 callbacks suppressed [ 295.740555][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3486'. [ 295.823601][T14360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3488'. [ 296.084259][T14364] tipc: Enabled bearer , priority 0 [ 296.287394][T14364] syzkaller0: entered promiscuous mode [ 296.333519][T14364] syzkaller0: entered allmulticast mode [ 296.340551][T14364] tipc: Resetting bearer [ 296.516709][T14386] netlink: 'syz.4.3496': attribute type 10 has an invalid length. [ 296.535500][T14363] tipc: Resetting bearer [ 296.542990][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3497'. [ 297.876422][T14363] tipc: Disabling bearer [ 297.901165][T14386] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 298.700486][T14445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3520'. [ 298.717042][T14445] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3520'. [ 298.809716][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3521'. [ 299.059015][T14458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3525'. [ 299.235774][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3529'. [ 299.393751][T14472] tipc: Enabling of bearer rejected, already enabled [ 299.513466][T14480] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 299.627016][T14487] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3537'. [ 299.800843][T14492] bridge: RTM_NEWNEIGH with invalid ether address [ 300.033840][T14502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3545'. [ 300.163136][T14509] netlink: 'syz.4.3549': attribute type 4 has an invalid length. [ 300.189732][T14509] netlink: 'syz.4.3549': attribute type 4 has an invalid length. [ 300.905330][T14547] gtp0: entered promiscuous mode [ 300.962203][T14549] syz_tun: entered allmulticast mode [ 300.974311][T14548] syz_tun: left allmulticast mode [ 301.027480][T14551] __nla_validate_parse: 2 callbacks suppressed [ 301.027499][T14551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3565'. [ 301.085595][T14551] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3565'. [ 301.164950][T14553] netlink: 'syz.4.3566': attribute type 33 has an invalid length. [ 301.174089][T14553] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3566'. [ 301.201717][T14553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3566'. [ 301.647017][T14577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3574'. [ 301.780646][T14579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3575'. [ 301.805599][T14581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3576'. [ 302.174838][T14597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3581'. [ 302.533200][T14609] lo speed is unknown, defaulting to 1000 [ 302.868413][T14623] syzkaller1: entered promiscuous mode [ 302.883506][T14623] syzkaller1: entered allmulticast mode [ 302.997725][T14630] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 303.009384][T14630] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 303.017269][T14630] tipc: Resetting bearer [ 303.263411][T14642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3600'. [ 303.384337][T14642] vlan3: entered allmulticast mode [ 303.392283][T14642] bridge9: port 1(vlan3) entered blocking state [ 303.411166][T14642] bridge9: port 1(vlan3) entered disabled state [ 303.441701][T14642] vlan3: entered promiscuous mode [ 303.457840][T14642] bridge0: entered promiscuous mode [ 303.575355][T14654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3605'. [ 304.064551][T14685] syz_tun: tun_net_xmit 42 [ 304.271246][T14692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 304.278557][T14692] IPv6: NLM_F_CREATE should be set when creating new route [ 304.525838][T14676] mpoa:atm_mpoa_vcc_attach: mpoa:Short read (missed 12 bytes) from userland [ 305.033376][T14725] syzkaller1: entered promiscuous mode [ 305.039282][T14725] syzkaller1: entered allmulticast mode [ 305.138719][ C1] syz_tun: tun_net_xmit 42 [ 305.817133][T14773] syz_tun: tun_net_xmit 42 [ 305.830321][T14773] syz_tun: tun_net_xmit 42 [ 305.836542][T14773] syz_tun: tun_net_xmit 42 [ 305.850107][T14773] syz_tun: tun_net_xmit 42 [ 305.868635][T14773] syz_tun: tun_net_xmit 42 [ 305.878246][T14773] syz_tun: tun_net_xmit 42 [ 305.906950][T14773] syz_tun: tun_net_xmit 42 [ 305.923596][T14773] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 306.090386][T14788] __nla_validate_parse: 1 callbacks suppressed [ 306.090405][T14788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3652'. [ 306.178619][ C1] syz_tun: tun_net_xmit 42 [ 306.916710][T14830] pim6reg1: entered promiscuous mode [ 306.925695][T14830] pim6reg1: entered allmulticast mode [ 307.060828][T14839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.124767][T14839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.188732][T14839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.545197][T14846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3670'. [ 307.676839][T14850] netlink: 'syz.3.3671': attribute type 1 has an invalid length. [ 307.789597][T14853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3671'. [ 308.314467][T14852] 8021q: adding VLAN 0 to HW filter on device bond4 [ 308.327621][T14852] bond3: (slave bond4): making interface the new active one [ 308.368846][T14852] bond3: (slave bond4): Enslaving as an active interface with an up link [ 308.417778][T14853] bond3: entered promiscuous mode [ 308.426872][T14853] bond4: entered promiscuous mode [ 308.427043][T14864] netlink: 'syz.2.3672': attribute type 4 has an invalid length. [ 308.432878][T14853] bond3: entered allmulticast mode [ 308.445158][T14853] bond4: entered allmulticast mode [ 308.451963][T14853] 8021q: adding VLAN 0 to HW filter on device bond3 [ 308.467746][T14863] netlink: 'syz.1.3674': attribute type 4 has an invalid length. [ 308.522418][T14869] netlink: 'syz.1.3674': attribute type 4 has an invalid length. [ 308.642750][T14870] lo speed is unknown, defaulting to 1000 [ 308.745030][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3680'. [ 308.784246][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3680'. [ 309.049241][T14895] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3686'. [ 309.167889][T14901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3687'. [ 309.169914][T14895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3686'. [ 309.233006][T14902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3689'. [ 309.301259][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3690'. [ 309.676486][T14928] netlink: 'syz.3.3698': attribute type 10 has an invalid length. [ 309.820806][T14930] tipc: Enabled bearer , priority 0 [ 309.972641][T14930] syzkaller0: entered promiscuous mode [ 309.986624][T14930] syzkaller0: entered allmulticast mode [ 310.001941][T14930] tipc: Resetting bearer [ 310.024681][T14929] tipc: Resetting bearer [ 310.028019][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 310.330744][T14954] netlink: 'syz.2.3708': attribute type 1 has an invalid length. [ 311.236237][T14929] tipc: Disabling bearer [ 311.299521][T14954] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 311.317660][T14955] vlan2: entered allmulticast mode [ 311.346694][T14955] veth1: entered allmulticast mode [ 311.393210][T14966] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 311.405899][T14966] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 311.414397][T14966] tipc: Resetting bearer [ 311.485420][T14968] __nla_validate_parse: 2 callbacks suppressed [ 311.485441][T14968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3713'. [ 311.503796][T14970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3715'. [ 311.633803][T14974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3713'. [ 311.764042][T14986] [ 311.766415][T14986] ====================================================== [ 311.773449][T14986] WARNING: possible circular locking dependency detected [ 311.780487][T14986] syzkaller #0 Not tainted [ 311.784907][T14986] ------------------------------------------------------ [ 311.791937][T14986] syz.2.3719/14986 is trying to acquire lock: [ 311.798020][T14986] ffffffff8f68d258 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 311.807373][T14986] [ 311.807373][T14986] but task is already holding lock: [ 311.814742][T14986] ffff888030aec470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 311.824088][T14986] [ 311.824088][T14986] which lock already depends on the new lock. [ 311.824088][T14986] [ 311.834492][T14986] [ 311.834492][T14986] the existing dependency chain (in reverse order) is: [ 311.843497][T14986] [ 311.843497][T14986] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 311.851486][T14986] lock_acquire+0x120/0x360 [ 311.856516][T14986] _raw_spin_lock_bh+0x36/0x50 [ 311.861807][T14986] nr_rt_device_down+0x12a/0x720 [ 311.867274][T14986] nr_device_event+0x137/0x150 [ 311.872561][T14986] notifier_call_chain+0x1b3/0x3e0 [ 311.878197][T14986] netif_close_many+0x29c/0x410 [ 311.883584][T14986] netif_close+0x158/0x210 [ 311.888533][T14986] dev_close+0x10a/0x220 [ 311.893301][T14986] bpq_device_event+0x377/0x6a0 [ 311.898680][T14986] notifier_call_chain+0x1b3/0x3e0 [ 311.904311][T14986] netif_close_many+0x29c/0x410 [ 311.909696][T14986] netif_close+0x158/0x210 [ 311.914659][T14986] dev_close+0x10a/0x220 [ 311.919443][T14986] bond_setup_by_slave+0x5f/0x3f0 [ 311.925001][T14986] bond_enslave+0x7a0/0x3a20 [ 311.930117][T14986] bond_do_ioctl+0x635/0x9b0 [ 311.935332][T14986] bond_siocdevprivate+0x17e/0x350 [ 311.941011][T14986] dev_ifsioc+0xb54/0xf00 [ 311.945878][T14986] dev_ioctl+0x84c/0x1150 [ 311.950731][T14986] sock_ioctl+0x719/0x790 [ 311.955578][T14986] __se_sys_ioctl+0xfc/0x170 [ 311.960692][T14986] do_syscall_64+0xfa/0x3b0 [ 311.965725][T14986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.972138][T14986] [ 311.972138][T14986] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 311.979973][T14986] lock_acquire+0x120/0x360 [ 311.985044][T14986] _raw_spin_lock_bh+0x36/0x50 [ 311.990332][T14986] nr_rt_device_down+0xa9/0x720 [ 311.995702][T14986] nr_device_event+0x137/0x150 [ 312.000985][T14986] notifier_call_chain+0x1b3/0x3e0 [ 312.006615][T14986] netif_close_many+0x29c/0x410 [ 312.011999][T14986] netif_close+0x158/0x210 [ 312.016950][T14986] dev_close+0x10a/0x220 [ 312.021745][T14986] bpq_device_event+0x377/0x6a0 [ 312.027120][T14986] notifier_call_chain+0x1b3/0x3e0 [ 312.032770][T14986] netif_close_many+0x29c/0x410 [ 312.038149][T14986] netif_close+0x158/0x210 [ 312.043096][T14986] dev_close+0x10a/0x220 [ 312.047904][T14986] bond_setup_by_slave+0x5f/0x3f0 [ 312.053467][T14986] bond_enslave+0x7a0/0x3a20 [ 312.058593][T14986] bond_do_ioctl+0x635/0x9b0 [ 312.063726][T14986] bond_siocdevprivate+0x17e/0x350 [ 312.069370][T14986] dev_ifsioc+0xb54/0xf00 [ 312.074236][T14986] dev_ioctl+0x84c/0x1150 [ 312.079097][T14986] sock_ioctl+0x719/0x790 [ 312.083966][T14986] __se_sys_ioctl+0xfc/0x170 [ 312.089095][T14986] do_syscall_64+0xfa/0x3b0 [ 312.094134][T14986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.100551][T14986] [ 312.100551][T14986] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 312.108492][T14986] validate_chain+0xb9b/0x2140 [ 312.113791][T14986] __lock_acquire+0xab9/0xd20 [ 312.119016][T14986] lock_acquire+0x120/0x360 [ 312.124054][T14986] _raw_spin_lock_bh+0x36/0x50 [ 312.129345][T14986] nr_remove_neigh+0x25/0xe0 [ 312.134466][T14986] nr_add_node+0x1d9f/0x2570 [ 312.139579][T14986] nr_rt_ioctl+0xc12/0xd50 [ 312.144524][T14986] sock_do_ioctl+0xdc/0x300 [ 312.149557][T14986] sock_ioctl+0x576/0x790 [ 312.154430][T14986] __se_sys_ioctl+0xfc/0x170 [ 312.159546][T14986] do_syscall_64+0xfa/0x3b0 [ 312.164582][T14986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.171009][T14986] [ 312.171009][T14986] other info that might help us debug this: [ 312.171009][T14986] [ 312.181234][T14986] Chain exists of: [ 312.181234][T14986] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 312.181234][T14986] [ 312.195058][T14986] Possible unsafe locking scenario: [ 312.195058][T14986] [ 312.202517][T14986] CPU0 CPU1 [ 312.207876][T14986] ---- ---- [ 312.213232][T14986] lock(&nr_node->node_lock); [ 312.217992][T14986] lock(nr_node_list_lock); [ 312.225100][T14986] lock(&nr_node->node_lock); [ 312.232379][T14986] lock(nr_neigh_list_lock); [ 312.237072][T14986] [ 312.237072][T14986] *** DEADLOCK *** [ 312.237072][T14986] [ 312.245292][T14986] 1 lock held by syz.2.3719/14986: [ 312.250394][T14986] #0: ffff888030aec470 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0xcce/0x2570 [ 312.260149][T14986] [ 312.260149][T14986] stack backtrace: [ 312.266059][T14986] CPU: 0 UID: 0 PID: 14986 Comm: syz.2.3719 Not tainted syzkaller #0 PREEMPT(full) [ 312.266079][T14986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 312.266097][T14986] Call Trace: [ 312.266105][T14986] [ 312.266113][T14986] dump_stack_lvl+0x189/0x250 [ 312.266137][T14986] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.266158][T14986] ? __pfx__printk+0x10/0x10 [ 312.266181][T14986] ? stack_trace_save+0x9c/0xe0 [ 312.266208][T14986] print_circular_bug+0x2ee/0x310 [ 312.266231][T14986] check_noncircular+0x134/0x160 [ 312.266253][T14986] validate_chain+0xb9b/0x2140 [ 312.266282][T14986] __lock_acquire+0xab9/0xd20 [ 312.266311][T14986] ? nr_remove_neigh+0x25/0xe0 [ 312.266332][T14986] lock_acquire+0x120/0x360 [ 312.266357][T14986] ? nr_remove_neigh+0x25/0xe0 [ 312.266383][T14986] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 312.266404][T14986] ? nr_remove_neigh+0x25/0xe0 [ 312.266426][T14986] _raw_spin_lock_bh+0x36/0x50 [ 312.266447][T14986] ? nr_remove_neigh+0x25/0xe0 [ 312.266468][T14986] nr_remove_neigh+0x25/0xe0 [ 312.266491][T14986] nr_add_node+0x1d9f/0x2570 [ 312.266513][T14986] ? __asan_memcpy+0x40/0x70 [ 312.266534][T14986] ? nr_call_to_digi+0x126/0x1b0 [ 312.266556][T14986] nr_rt_ioctl+0xc12/0xd50 [ 312.266598][T14986] ? kasan_quarantine_put+0xdd/0x220 [ 312.266621][T14986] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 312.266647][T14986] ? apparmor_capable+0x137/0x1b0 [ 312.266672][T14986] ? capable+0x89/0xe0 [ 312.266689][T14986] ? nr_ioctl+0x1b1/0x3b0 [ 312.266707][T14986] sock_do_ioctl+0xdc/0x300 [ 312.266730][T14986] ? __pfx_sock_do_ioctl+0x10/0x10 [ 312.266751][T14986] ? __lock_acquire+0xab9/0xd20 [ 312.266784][T14986] sock_ioctl+0x576/0x790 [ 312.266806][T14986] ? __pfx_sock_ioctl+0x10/0x10 [ 312.266827][T14986] ? __fget_files+0x2a/0x420 [ 312.266854][T14986] ? __fget_files+0x3a0/0x420 [ 312.266880][T14986] ? __fget_files+0x2a/0x420 [ 312.266908][T14986] ? bpf_lsm_file_ioctl+0x9/0x20 [ 312.266930][T14986] ? __pfx_sock_ioctl+0x10/0x10 [ 312.266950][T14986] __se_sys_ioctl+0xfc/0x170 [ 312.266981][T14986] do_syscall_64+0xfa/0x3b0 [ 312.267007][T14986] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.267043][T14986] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.267060][T14986] ? clear_bhb_loop+0x60/0xb0 [ 312.267079][T14986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.267096][T14986] RIP: 0033:0x7efe9cf8ebe9 [ 312.267112][T14986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.267128][T14986] RSP: 002b:00007efe9deb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.267146][T14986] RAX: ffffffffffffffda RBX: 00007efe9d1b5fa0 RCX: 00007efe9cf8ebe9 [ 312.267159][T14986] RDX: 00002000000001c0 RSI: 000000000000890b RDI: 0000000000000007 [ 312.267170][T14986] RBP: 00007efe9d011e19 R08: 0000000000000000 R09: 0000000000000000 [ 312.267181][T14986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.267191][T14986] R13: 00007efe9d1b6038 R14: 00007efe9d1b5fa0 R15: 00007fffd8c533e8 [ 312.267213][T14986] [ 312.565110][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 312.624746][T14992] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3721'. [ 316.981096][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.987407][ T1300] ieee802154 phy1 wpan1: encryption failed: -22