last executing test programs: 4.170169774s ago: executing program 2 (id=3528): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180)=0x1000, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', 0x0}) bind$xdp(r3, &(0x7f00000001c0)={0x2c, 0x0, r4}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x8, r3}, 0x10) 3.657226722s ago: executing program 2 (id=3529): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) pselect6(0x81, &(0x7f0000000000)={0xa, 0x7ff, 0x14b, 0xffffffff, 0x8, 0xba4, 0xffffffffffffffff, 0xfffffffffffffff8}, 0x0, &(0x7f00000000c0)={0x6b40, 0x3, 0x0, 0x8, 0x1, 0x4000006, 0x8, 0x8080}, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x7, &(0x7f0000000300)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xf, 0xa}, {0xd, 0xffff}, {0x1, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0xc5}, 0x0) 3.520419862s ago: executing program 2 (id=3531): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9829"], 0xfce) 3.294399381s ago: executing program 2 (id=3534): ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000004040)={0x0, 0x0, @start={0x0, 0x1, "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", "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"}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x400, 0x3]}) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.133020079s ago: executing program 2 (id=3535): syz_80211_inject_frame(0x0, 0x0, 0x31) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x100000, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)}}], 0x1, 0xc8040) sendmmsg(r4, &(0x7f0000000280), 0x4ff, 0x0) splice(r4, 0x0, r3, 0x0, 0x7ffff000, 0x6) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f00000002c0)=0x5, 0x4) 2.959776373s ago: executing program 1 (id=3538): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0xae}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x20000, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 2.731252622s ago: executing program 3 (id=3541): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x6, 0x0) write(r3, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) getsockopt(r2, 0x111, 0x2, 0x0, &(0x7f0000000080)) 2.628016495s ago: executing program 0 (id=3542): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206010800000000000000000300fffd140007800800df590000000005001500010000000500010006000000050005000a00000005000400000000000900020073797a3000000000150003006861730a3a69702c55"], 0x64}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r2], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 2.585514605s ago: executing program 1 (id=3543): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010000d042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="9b060000003800001c00128009000100626f6e64000000000c0002800500010006"], 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) bind$netlink(r6, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r6, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x0, 0x1201}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x4008010) 2.35235231s ago: executing program 4 (id=3544): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x16, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0xffff0001, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e57194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r3, 0x3e}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000000700)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb6ad67d196186e061f7092e2fe1ef9a0d699e9d080edab4bfdf0700000000000033b67507b05c35577587287c161a312d2351cf0f9c19d2f0d2b52ace0218941304c45c9b529492322ecf2cf8c68a126cb82558982cdcd02dba2f605704bcafe6da433b11d59d071d79e32748a1317a1d68c1be05f1f584dde4be8c1262a925fbabe0af8c00a5181f9c85b647ed0e5f", 0xb5}, {&(0x7f00000002c0)="8caed476f6bcc737902ee6863118a0f660978f27dfa8e77e65d30f0c994994af1fb65ee49983e655d3f7be317d2380b0ed8e916769d5f1b8dc7a927e6401a10223ad90d5dc45614dec7e4c2f19d2b70807aaef8fc9e45c7a65583d15a94480840f4e4fc9ee8e3b7f8fd1aaf800d9176af51346ea81ee48fdc01f072780ff849a4fe9197b8926a16412b4da7b627e43d71ec1b367bbd9454ab97566775449de0c9e1b429acb005171cfd0b37d5e807f54ece988ae6a50773488ded126b8fc9559f66619d6002a53923e4e93bf09354a28cdd2c6a0653731e3ff0fac", 0xdb}, {&(0x7f0000000440)="99dcbf373748a116444c10801b7c8f48ff3cc4222eaa9a8ecd976fe5c2b153b8012daa0155cbb1", 0x27}, {&(0x7f00000007c0)="5dc2db6fa9b830b5bedc2a54b2d4091ce8c28ef121944d189544096016abb738c8d7cbee8455797c78611bc5b5633e30c7ee1093b90e3208ecb225f6d0d29465fa81ca56e738ef1e7c0480a7b780ec614330e809a1523dbfda40a01ee577449b2adcf3ac4a416128f9b100695ec34ba5c785caca8eaf21639695869be83d5597e7d5c5d74690449c0b1589212d14268d86d6e9df6605662594a579a01f6247f8789ee2753104a9ff6c977436258777b047c00743caeee11953c7ee9f75783afc3e3e6951ad94872aef0797363080994c6e7ff1645c", 0xd5}, {&(0x7f0000000b00)="7bddac51b6b38bbab189b84ebc6063c560070782f2b8071de259d62d9ab16f8dbe75fb1c4566ea50322ed6140982205dd2e4ab0049fa54e29f7f24e07ce90f9ab021368fc7fe35abd535cd4a238a650dba0f6cd8c2571340e71d4d1d1448a671abeafde582bbbc7458772667b08492d548ea72048e78720a32cddf42058dda263f3f3466228169a4aff6f0655a9a7127e166e270ed31b91702545835336ef729202b0217f1807fb1c8b7bc3b0ef109a66bb52eef969e0a1034716dc20598eee5debaefe008d548ddee490f627221d5b0a92e4cb4b0ad1068dc259e5cc7a564f03ed6e00dad19705620164bc1171ecdc3053ef0b3dcd13b62c9060f6bca43a1e654f0a543f4dda756efdee8ae70a21ab9c81707894462fecd1cd9826a4e26bf261005ce8c4cbc46b63e46f06cb4369aace3555cd0e11dac7a95ce3aec9d2bb03583606b81ea29615949c513c9591c0971e1a999d4713d2f3954d5a264bf5ab0ec856b562ddf062202210171140bb4bd1eaca8283c4fd36951fb83672effe7b5126e9458f1f5f3d41a0f51966295c5f8b1a358a0bb47847892d3dfd8e0ff68030fc5e975bc25ad99827736e1f27053a2ad9f28dc981c68439de1c94f6acdb9e661db21b1e7596b87af22a4af5a37f3a54a1a3630770885eb620e1b6c613283beee82990001df7faf28fcef2a63b863f7f9827105af3aa6e0fa698cce7119af4baa9332f91f1434d5f712afe153a7db193fed726a896b3d7fd8d00d46a96d7694103ea6fcc61656c5a7f317856219db27643e30a2544393aa55154d381869a4a773a21567d7240bf6940dfd18d6d703923f97966d3f87eedb8067b89597fe9ba1854f8efa5088fdf8e1c20c235fc4221f11f48ced48e5e724045bf72e0bc67b417b93a7c46ea239249c80d29770b1204488f71a95a2ec49d673993331124ba55fa9d2dae768b97c2f4dc8a02afb6a6475be1e32c2381338ee819fc554f53a16c54d989c0d5e53d9dc9b15083100ef608e2e4b4d253f5fcb75b97c01e6b4e8121ae58a4f9c52f872299b59fe81c7fba3ab9f54650aee339996b27d54245dd1af8d18248588f630b957a8b226c8dd622256b75fc2228fbe1e440a687f71e6eb96c0f8f9dd52725fb31a6d22e06fb8cb42263d3e8a5bac7326bfa1cd92744c077ecb663b1e3e4f6eb3eaca6b610e50373667acb192c943a8606ebf9a1c69e21a79e9e6303dd9611c2f44cb5e4f67063918556a9c56173fb387cb14bb4577728683493017c31839052c9e634a4c64e241602725d1f078a58b4eb4ba6bbabf349b6155c7e8629c80cb4da22039adfc8b2f551741526cae59a6e9b583236b04e9561b51fa2a755fa13e353b0f8210d95faaf73471f6c0d85d32bd2ad81e7c3631e7a473fcc2a43e1b3333e6840a12637c7ae1c3bd3d2a0ae3d67105fc7b31de802fffb37088c922309ccc1b0ee85e4795b1745d2c40001da45e7357397201909696498431d810a97bfa45ce67af18daa9da91e0db2e29545bf84b1628898f41a13c8930a9d73f8c3a2b234fbb90f8f52cafff774ed740ce78f64eae53563ad227ff83e0fbdeabb1de777e58806f7b7010bd33b8d7599ac6449f9b0814d8a5f9d47ccd289310981c2d96782ebe2c40a8914dade88760ba175ccdaf82b4b18365cd87e8d4c93b38c79db182e2c2b7839196382ea1ec5e55a1236ea6ce0ad8cf44fb27d0da66cf4dbc37569eca789046cbc90c752c458717be4589633a9607b11ca0dbec73c819ba2e7a965759aaabb6ede7512b2c6a1758462b6409a77fb83c25af21d98a96972593c46005bece9ca52d49e4a5bed2a24a0136698a4dbad33c5481ab76c2f5c84d5f717e3b0f6d41a4017ff62477cf7efe50084770ff4a6995ccc3bcf4766b2acb7c4dce21e66f270a573d45e829850fe12dbfd3c2d5cd10b556c7dc3c179cd45f36fe314ef760791f17354a563a40bd013a70fdbc89c000e0625ba67e2cb2b4ab0d26f8ba092af5485ec417a30a661e6b459054551afc50a08caf0f191323a69e098610b879ed15bfd39c03ee94865c047c6ffd20427ddf2066ac0f2215d12a38b7be53b2722c5a3fd67e137d3a76bce78c70be21b385bd07b8514c55a54408a051c37127c784e36b945d01021145b89160bac94b11c5656aeb8949a6f315cdb3d812780729e12cb5c85405381add02467e39ad1588e139a18f836535a0e84702ec406ca49ad0cbad9cff79e0e8b8b6a1ab912ea8142ee978d5e92469213a73bd19833c2df4095dcd1246a57fb2b49635af52bed31e62a1068a873cf859b24f3212ca8ceed0be2c574a073b3968579df1049571898769620ab5ad7ece881250677c35b5cb2438d9db8a3dec87595adc090705710fe393ba36ea9a4e484de1a6aba671b4a411aaf445cd3caf8768ea647416ffd4be0bd028e8e7d31fe4ea73310ee2f3ed55a1b1f84f3123dfc7f96e6cf17d575a5bc64ad25314524b3b114a0fd81522e8ede0dfc6659806fe35dd05fe20fc1f73f3dc780748381b46d5cc4c7d7f2e113cac0dc848f70023b7ea93526a6fd746b9461101b071b0f024df9eea2abf7ed4d8788e1928046a9bf8927b2700064776a4a63ba281e74e77ebeca80172e41c41e88853bfe4d75f261550d43892bae87d8ce3adad46827d33202f1549d929f90f587da1ba07cf4f6f2cfacbfbfc51687b55daa9a4fa81d8f67efe2e31a5fc6282d080f6c90d648aabd2f69e0710a06fc4a6b4158dcea59f463162f384265857d527587f0a9d11742f8377cd5cc3d46b79338a7221604a0ca978c7243c4a9a73484dcb1f85f0401e32295924a8746c7edfb07616a1925baad8a20c79ae197a1775116386bb9330172cf656a22fb654696a7702ea30805215a820125984a308a60cd7ede1f137dbe43c0ada5b2951f9ef2c317e29ece9aea31045ccbcbd8a222d2af82b736c4186efc36d5e565ad2b72f3cf68bfd4c20e156b7f19ed683c751c9b89e6b2b1e0d15454f7afc316193d39fe58dfa4db929d060a9cd0965a1ec6acc6185b6c4d9620fd6826c3b0d18905763a625e15fdb5c9652b5a5cde312fee991d520efaa7552978051d667b7e4d3508e902be4aee042e34eae15f43012c42924acf19bbe725be0ec44c6e41789b9d5ab15a845ba20102898b128dc291d8ed69ef76804489e79aa5248e3e11ec12e4f2fe4d2d535828fa5ee9d01b16c740ff1a234aad4afef7d1c989760fc6756b721808885f5f741f27dcb6674433848db5cc51d0e88adde764d8ec43089fcbdf9ba087bcbe3bd0ada1eae0421f44e8c3733eddd82d32f223b1bd283d73f3b28ae077a8886be7645bf56d93aff7ea96533e7d9182ad66bc3b1b9e854eccfa3d4a4c4713cac7ae3336746318b244649afe1c2e5db919ac395b02af31793615bd010c3b085a897b7754a12fffb610a2638d70e2c3b1eb3fa87e0c6324b4720f4e318455f367c5c912c5ca10e6b3e7f692ac9ef9277197fa493b8a20a63feea2dc3ccada7b08f9f4805f5d8140d74db2df0b2b3e404934a00c1ef6098c5acf3d8266ef751f3d212a9431f52a0d1471113c4bd90d20065c89f43e71951c0939fb87c157fb548e9c0627d951c63cafa53808dae0ef6a7e104ff945267ac4edd42a0fc1c46d6f9a780aa0e2983f7078c54c647576c025647eb68ad4af851d85e459dc2f8b6139e539874c17de6f3748f51ed55a3c67d8bec0d7a0976d782cf91a1ae60ba9d51511b1407eb16c7610866455447dc4ad148298e6b1b0e4b833b667f709aa9d0ee1759bb87ac44543a39e44f1fe5f33eeea9b11c03f9fc39d66d5ab765f8ef074b22c71cff1b69367d24e91da4bc35e2fdfea1a77a9f41a2f0896870e0fcfd69d51f716638cd63184bd76c648c192e990f2c675478aa15cc5a804882f4be47155909e5f2265c5842153d928f06d61000cc72e37c87fbdba0a47738fef6e6154c21fee513a9e12635c767b5c4b17da6392ba7e3a833bd5d826129ae11dc3a625a249fec9b2410bdeb18d52a075f2ed2bb3e3efdf01f23b87cccdae9aa15f4978751d42b7c6df7533895528acabaadb49aeabe720388f2de167d5471f6a8a576234e0281e34e6d86413df713caea8abd80ba60dac8f37d39a58c929263034e01e5c59c2be798463abd50a430b40ca7ce97ad70ea89ddc2c817d712791f78cded6dc674682761c250d574d5eb041d99dfc91f75f832e0b1d4518b6af48cf24881a61faa7885dbe1e6722d15d0b220c2bee24467ba34fce9f85730de38c7359dddde1fb7c31ec9c3bd14c7bc8a6ebacbcc735178bddf7a07228b8d5c5d87731f1b703648ce74a9e49ce90ce2f6a128c0d5a8c33a7d89a761833098c651e2887e2b4deabb462cad2895718fd605dc018fed465eb7e9ec5d147155b1c4c9032ece2624af1150a6343f76594d13ecfc6fd3856a88b69dcac05411a4f929f14347cf2c6ae3d37ed4801e0f41e077a8f28356b46cca30068178a1d433901b39b3c607d1937962e185d61d0030ad18e658ab5aba033b0d879395e33e8b96aee9cd77055de23501085e4a5aa9bc8c676467751b946af9b382e230d89ad3a506779a64d736311b3a8aff1ef778365af1af48d4cf9352ef4939e4a0ea2d69ae9395404dc992acf99e2241e1403d3390152e57ad28dbcb87d0d3c618c6fd93822174f066a9d318951895bcfae43ea0af777a0244a802196ed8f04914ea868d727453d79e2629abc735a1b6570a7ace08042bddfcb6173b7a5110bfd6c2f4f0f2d858f99a48a4475044aa1049b65687924353cfd93ecef296928dd7a20fdf1ad18612e3e2851fa6686dca47abe789d90bafeea3c1ed095812c77cb292dea0716a8f88842ce6b1d80bb7cb2b91358ded09bb2398e299c30fd2765300a98f99cd0b96c3fc4d43e20cd8668af58be91cd4dd2078a37a2ba048a0a705915129702610fd5e0c0ceb3fe36d7a96d050b71ad7cab9d062242257f191f6037e7d579c05c8ec55b396d5b459ee1a31d22adaa77d0ede48a1e71b60401ce327ff04a95815450935a7259a96a240eff73589699c72696e2591894673f28e8e4a766ecf35c90aa4046c4ac54f21c4e65dcb2bfa5db4a2422773995c086e1282699d9f4f61abad41cc617ad99537f23e70da8394d7bbac7c4612c567bcf5c00d2325176c41e4e3f0cbc6eff4ae053b650737bc3ef9ebfdc8283aa4b82de3e1e6f671a92f1822a05d917622ec3bf41459f329da27503047706b89131a2c1090f5a4293f038b3eb1d2be516708bd7221221d873f1fe9e7e0f89232d0d2ad6ac375314a499d8d16fecf64c073a795831c1f7c85af606a519eb8efe263c157091373fb0e7225eaaaf3036c9669f6b5d054727bda9b7e884a1daf44000d51d9ef6676aec7b568653e2cf7acbfa645fd95422542725aad66e47ca970aac3b9058f55c2d2280e233c4278e0088a69c0788f2d188e696de7058fbbbaecd83bde173e6bfdcafdb658640c473783743d2c09010c34c34bdedd83f2c0dc997a8956a41c07c60589a0812859dd206cadbc9880520e56c91e09550cf15b5ef20f6ff10e1ddd2cae1b2242cc6c60519fc660ce63f518839c4d7b23fd2027cb3a8d2c3a27b6462418c9eccf1742099f6906d2b8627c543b05eddf968a1e", 0xf9a}], 0x5}, 0x0) 2.216264691s ago: executing program 0 (id=3545): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast2, 0x3}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x240488d0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x29, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c}, 0x94) socket$igmp(0x2, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f0000000580)="06c3", 0x2}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.180866046s ago: executing program 1 (id=3546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x7, 0xb}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000900)="bad330fbc93f0700000000ea0756a85d86ddbe5dc25eb6c43848678a5aafaf629e8212ecccbb27a97b379d7390f08bb649c882a400e6e7f543db", 0x3a, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xdb, 0x6, @multicast}, 0x14) 2.118208591s ago: executing program 0 (id=3547): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) 2.044360984s ago: executing program 0 (id=3548): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x11, &(0x7f0000000c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x23ffd, 0x0, 0x0, 0x0, 0x9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/174, 0xae}], 0x1}, 0xfffffffb}], 0x1, 0x40000023, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.988473192s ago: executing program 3 (id=3549): socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x3, 0x11, &(0x7f00000009c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000a80)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b80)='memory.events\x00', 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@local, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000003c0)=0x1, 0x4) sendmsg$inet6(r1, &(0x7f0000000400)={&(0x7f0000000100)={0xa, 0x4e23, 0x80000, @private1={0xfc, 0x1, '\x00', 0x2}}, 0x1c, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="120000000000000029000000", @ANYRES16=r1], 0x18}, 0x2000c8d0) 1.944778358s ago: executing program 4 (id=3550): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @local, 0x15, 0x3, 'lc\x00', 0xb, 0x4, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)={0x44, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x3}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x42890}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) r5 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f00000000c0)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xcd}}, 0x44) sendmsg$sock(r4, &(0x7f0000000140)={&(0x7f0000000180)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r6, &(0x7f00000002c0)={&(0x7f0000000300)=@in6={0x2, 0x15, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000380)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.839885763s ago: executing program 3 (id=3551): setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4894}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r1) 1.314781286s ago: executing program 4 (id=3552): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000280)="dc", 0x1}], 0x1, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000001a40)="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", 0x5c1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000680)="a7", 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000002bc0)='>', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="b2", 0x1}], 0x1}}], 0x3, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) connect$unix(r1, &(0x7f00000019c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x107fff, 0x1, 0x4, 0x89, 0x0, 0xffb, 0x7, 0xb6b, 0x0, 0x4, 0x1, 0x3, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x3, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x9, 0x3, 0x63c, 0xe, 0x6, 0x2, 0x6, 0x1bfa, 0xb, 0x40, 0x40bed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x3, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0x100aa, 0x7f, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x1, 0x9, 0x4, 0x7, 0x1, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10000, 0x3f6, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x0, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0x20004, 0xc50, 0x2, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x5, 0x1fc, 0x9, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1.236039333s ago: executing program 1 (id=3553): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x148, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {0x0, 0xfff1}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x118, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_DPS={0x10, 0x3, {0x0, 0xd, 0x1, 0x4}}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x480d8}, 0x4000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.15097421s ago: executing program 3 (id=3554): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) 1.149904403s ago: executing program 4 (id=3555): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000380), 0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x54) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="090000000400000004000000", @ANYRES32=0x0, @ANYBLOB="01000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) r2 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.116399238s ago: executing program 0 (id=3556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a31000000001400048008000240e7b140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x404c801}, 0x24000840) r1 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d2b24", 0x2a}], 0x1}, 0x30008b08) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'vlan0\x00', &(0x7f0000000140)=@ethtool_link_settings={0x4c, 0x3, 0x2, 0x8, 0x0, 0x26, 0x7, 0xd7, 0x8, 0x4, [0x400000, 0xc, 0x2, 0x800, 0x3, 0x6, 0x5, 0x3]}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) 1.02096605s ago: executing program 3 (id=3557): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x1000) mmap(&(0x7f000086a000/0x2000)=nil, 0x2000, 0x4, 0x11, r4, 0x2000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 1.020426964s ago: executing program 1 (id=3558): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000500)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000540)={0x1d, r1}, 0x10) sendmmsg$sock(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)="0100000003000000640000000000000000000000000000000000000000000000000000000000000002000000000000000100000001000000010000000100"/72, 0x48}], 0x1}}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) close(0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket(0x11, 0x4, 0x5) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, &(0x7f0000000080)) connect$bt_l2cap(r2, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x8, &(0x7f0000000ac0)=""/102400, 0x0) 984.073499ms ago: executing program 3 (id=3559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET(r0, 0x0, 0x40000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000480)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000780)='\t', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000011}, 0x40) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000880)={0x0, 0xffff}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000008c0)={0x0, 0x7, 0x1, [0x6]}, 0xa) 941.098549ms ago: executing program 4 (id=3560): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000a00)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000a40), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="4c000000000101040d0000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001"], 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x0) 807.274402ms ago: executing program 1 (id=3561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000011c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x9, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfffa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000014c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001500)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001540)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000001580)={&(0x7f00000015c0)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000001640)=[{&(0x7f0000001680)="da", 0x14}], 0x1}, 0x20000885) 748.86209ms ago: executing program 4 (id=3562): socket$kcm(0x1e, 0x4, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) close(0x3) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) unshare(0x28000600) bpf$MAP_CREATE_TAIL_CALL(0x9, &(0x7f0000000380)=ANY=[@ANYBLOB="03000000040000000400", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0xc) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 732.231308ms ago: executing program 0 (id=3563): write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='b '], 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24000000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1, 0x0, 0x0, 0x44800}, 0x4004810) recvmmsg(r0, &(0x7f00000001c0), 0x4000000000000e9, 0x60, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) 0s ago: executing program 2 (id=3564): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000003"], 0x50) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) kernel console output (not intermixed with test programs): state [ 166.889334][ T8347] veth0: entered allmulticast mode [ 166.915685][ T8347] veth0: entered promiscuous mode [ 167.738454][ T8382] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 167.823183][ T8386] lo: Caught tx_queue_len zero misconfig [ 168.486860][ T8415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 168.529174][ T8417] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 169.270439][ T8449] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1009'. [ 169.296754][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 169.663964][ T8470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1019'. [ 169.697930][ T8470] 8021q: adding VLAN 0 to HW filter on device bond3 [ 169.715979][ T8470] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 169.932442][ T8483] netlink: 'syz.4.1024': attribute type 12 has an invalid length. [ 170.239310][ T8496] batman_adv: batadv0: Adding interface: syzkaller0 [ 170.239332][ T8496] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.239366][ T8496] batman_adv: batadv0: Interface activated: syzkaller0 [ 170.286755][ T8494] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 170.358771][ T8494] batman_adv: batadv0: Removing interface: syzkaller0 [ 170.386225][ T8502] netlink: 'syz.2.1035': attribute type 1 has an invalid length. [ 170.455123][ T8502] gretap1: entered allmulticast mode [ 170.466782][ T8502] bond3: (slave gretap1): making interface the new active one [ 170.479298][ T8502] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 170.517343][ T8507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1036'. [ 170.614841][ T8511] netlink: 58 bytes leftover after parsing attributes in process `syz.2.1039'. [ 170.693833][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1040'. [ 170.837635][ T8519] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 170.838523][ T8519] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 171.013806][ T8534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1045'. [ 171.138845][ T8538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1047'. [ 171.152137][ T8538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1047'. [ 171.221866][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'. [ 171.261578][ T8542] netlink: 'syz.1.1050': attribute type 1 has an invalid length. [ 171.496547][ T8542] bond2: entered promiscuous mode [ 171.497083][ T8542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.554816][ T8550] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.555376][ T8550] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 171.555400][ T8550] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 171.592434][ T8550] bond2: (slave xfrm1): making interface the new active one [ 171.592461][ T8550] xfrm1: entered promiscuous mode [ 171.597689][ T8550] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 171.788539][ T8558] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 171.952779][ T8570] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1059'. [ 172.069064][ T8578] ip_tables: iptables: counters copy to user failed while replacing table [ 172.070138][ T8578] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 172.257499][ T8589] xt_hashlimit: size too large, truncated to 1048576 [ 172.337161][ T8591] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'. [ 172.368936][ T8595] netlink: 606 bytes leftover after parsing attributes in process `syz.2.1068'. [ 173.179270][ T8621] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 173.509493][ T8623] syzkaller0: entered promiscuous mode [ 173.509521][ T8623] syzkaller0: entered allmulticast mode [ 174.479289][ T50] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x2c [ 175.847793][ T8650] syzkaller1: entered promiscuous mode [ 175.847818][ T8650] syzkaller1: entered allmulticast mode [ 176.764347][ T8732] __nla_validate_parse: 1 callbacks suppressed [ 176.764372][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1120'. [ 176.884323][ T8735] ip_tables: iptables: counters copy to user failed while replacing table [ 177.584780][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1132'. [ 177.855427][ T8779] netlink: 'syz.0.1138': attribute type 1 has an invalid length. [ 178.311564][ T8810] netlink: 'syz.3.1153': attribute type 1 has an invalid length. [ 179.447419][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1165'. [ 179.447439][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'. [ 179.447457][ T8842] netlink: 'syz.0.1165': attribute type 6 has an invalid length. [ 179.447466][ T8842] netlink: 'syz.0.1165': attribute type 5 has an invalid length. [ 179.472062][ T8842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1165'. [ 179.472085][ T8842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1165'. [ 179.472110][ T8842] netlink: 'syz.0.1165': attribute type 6 has an invalid length. [ 179.472123][ T8842] netlink: 'syz.0.1165': attribute type 5 has an invalid length. [ 179.490541][ T50] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.529214][ T434] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.529261][ T434] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.529296][ T434] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.856675][ T8854] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1170'. [ 179.856729][ T8854] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1170'. [ 180.570284][ T8763] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.191208][ T8895] netlink: 'syz.4.1189': attribute type 1 has an invalid length. [ 181.296444][ T8895] bond4: entered promiscuous mode [ 181.297195][ T8895] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.466009][ T8895] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.468942][ T8895] bond4: (slave gre2): The slave device specified does not support setting the MAC address [ 181.468973][ T8895] bond4: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 181.520530][ T8895] bond4: (slave gre2): making interface the new active one [ 181.520553][ T8895] gre2: entered promiscuous mode [ 181.540965][ T8895] bond4: (slave gre2): Enslaving as an active interface with an up link [ 182.680834][ T8945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1207'. [ 184.174863][ T8997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1229'. [ 185.308696][ T9048] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1246'. [ 185.776285][ T9065] ip_tables: iptables: counters copy to user failed while replacing table [ 186.189886][ T9071] ip_tables: iptables: counters copy to user failed while replacing table [ 186.850298][ T9100] ip_tables: iptables: counters copy to user failed while replacing table [ 186.872470][ T9100] syzkaller1: entered promiscuous mode [ 186.872496][ T9100] syzkaller1: entered allmulticast mode [ 187.209496][ T9114] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 187.227625][ T9114] bond3 (unregistering): Released all slaves [ 187.258758][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1266'. [ 187.258783][ T9118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1266'. [ 187.324636][ T9012] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 187.977246][ T9152] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1276'. [ 188.136916][ T9156] netlink: 'syz.1.1278': attribute type 1 has an invalid length. [ 188.219033][ T9156] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.274938][ T9158] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.319018][ T9158] bond3: (slave batadv0): Enslaving as a backup interface with an up link [ 188.346076][ T1412] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 188.491404][ T434] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 189.513684][ T9184] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1289'. [ 189.860082][ T9202] netlink: 'syz.3.1295': attribute type 5 has an invalid length. [ 190.090942][ T9212] batman_adv: batadv0: Adding interface: syzkaller0 [ 190.090962][ T9212] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.090994][ T9212] batman_adv: batadv0: Interface activated: syzkaller0 [ 190.167859][ T9211] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 190.223078][ T9211] batman_adv: batadv0: Removing interface: syzkaller0 [ 190.389013][ T9234] ip_tables: iptables: counters copy to user failed while replacing table [ 191.202756][ T9265] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1319'. [ 191.259343][ T9265] 8021q: adding VLAN 0 to HW filter on device bond4 [ 191.302541][ T9268] bond4: (slave veth5): Enslaving as an active interface with an up link [ 191.364789][ T9265] lo: entered promiscuous mode [ 191.369787][ T9265] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 191.561660][ T9279] bridge_slave_1: left allmulticast mode [ 191.561690][ T9279] bridge_slave_1: left promiscuous mode [ 191.561900][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.600201][ T9279] bond0: (slave bond_slave_0): Releasing backup interface [ 191.631945][ T9279] bond0: (slave bond_slave_1): Releasing backup interface [ 191.673026][ T9279] team0: Port device team_slave_0 removed [ 191.706451][ T9279] team0: Port device team_slave_1 removed [ 191.711051][ T9279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.711075][ T9279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.748343][ T9279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.748372][ T9279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.787694][ T9279] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 191.853092][ T9283] macvlan2: entered promiscuous mode [ 191.853118][ T9283] bond0: entered promiscuous mode [ 191.853134][ T9283] bond_slave_0: entered promiscuous mode [ 191.853378][ T9283] bond_slave_1: entered promiscuous mode [ 191.853928][ T9283] macvlan2: entered allmulticast mode [ 191.853945][ T9283] bond0: entered allmulticast mode [ 191.853958][ T9283] bond_slave_0: entered allmulticast mode [ 191.853974][ T9283] bond_slave_1: entered allmulticast mode [ 191.861026][ T9283] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 191.932090][ T9283] bond0: left allmulticast mode [ 191.932115][ T9283] bond_slave_0: left allmulticast mode [ 191.932131][ T9283] bond_slave_1: left allmulticast mode [ 191.932178][ T9283] bond0: left promiscuous mode [ 191.986156][ T4944] bond_slave_0: left promiscuous mode [ 191.986202][ T4944] bond_slave_1: left promiscuous mode [ 192.262027][ T9296] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1332'. [ 192.307149][ T9296] netlink: 'syz.2.1332': attribute type 1 has an invalid length. [ 192.377624][ T9300] syz_tun: entered allmulticast mode [ 192.388358][ T9299] syz_tun: left allmulticast mode [ 192.634846][ T9314] netlink: 5636 bytes leftover after parsing attributes in process `syz.3.1341'. [ 192.907791][ T9216] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.415957][ T9347] dummy0: Caught tx_queue_len zero misconfig [ 194.240381][ T9393] netlink: 'syz.4.1371': attribute type 1 has an invalid length. [ 194.285646][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.285699][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.348343][ T9393] bond5: entered promiscuous mode [ 194.348799][ T9393] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.519934][ T9393] 8021q: adding VLAN 0 to HW filter on device bond5 [ 194.520380][ T9393] bond5: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 194.520400][ T9393] bond5: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 194.565451][ T9393] bond5: (slave ip6gre2): making interface the new active one [ 194.565479][ T9393] ip6gre2: entered promiscuous mode [ 194.568784][ T9393] bond5: (slave ip6gre2): Enslaving as an active interface with an up link [ 195.162338][ T9426] ip_tables: iptables: counters copy to user failed while replacing table [ 195.659243][ T9446] netlink: 'syz.3.1389': attribute type 10 has an invalid length. [ 195.659270][ T9446] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1389'. [ 195.909508][ T9454] sctp: [Deprecated]: syz.4.1395 (pid 9454) Use of struct sctp_assoc_value in delayed_ack socket option. [ 195.909508][ T9454] Use struct sctp_sack_info instead [ 196.373260][ T9466] batman_adv: batadv0: Adding interface: syzkaller0 [ 196.373282][ T9466] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.373795][ T9466] batman_adv: batadv0: Interface activated: syzkaller0 [ 196.433455][ T9463] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 196.489949][ T9463] batman_adv: batadv0: Removing interface: syzkaller0 [ 196.619958][ T9479] netlink: 'syz.1.1401': attribute type 2 has an invalid length. [ 196.699932][ T9484] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 197.050888][ T9502] team0: Port device team_slave_1 removed [ 197.266788][ T9513] macvlan2: entered promiscuous mode [ 197.266812][ T9513] macvlan2: entered allmulticast mode [ 197.268846][ T9513] geneve1: entered promiscuous mode [ 197.271049][ T9513] geneve1: entered allmulticast mode [ 197.344758][ T9513] team0: Port device macvlan2 added [ 197.435390][ T9516] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.437075][ T9516] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.572699][ T9516] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 197.603713][ T13] bond3: (slave batadv0): link status definitely down, disabling slave [ 198.543746][ T9557] netlink: 'syz.0.1434': attribute type 1 has an invalid length. [ 198.676155][ T9557] 8021q: adding VLAN 0 to HW filter on device bond5 [ 198.799967][ T9561] bond5: (slave veth7): Enslaving as a backup interface with a down link [ 198.835993][ T9564] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 198.913993][ T84] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 198.989579][ T9579] syzkaller1: entered promiscuous mode [ 198.989606][ T9579] syzkaller1: entered allmulticast mode [ 199.041545][ T43] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 199.260784][ T9588] netlink: 'syz.2.1446': attribute type 4 has an invalid length. [ 199.502546][ T9601] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1451'. [ 199.609331][ T9601] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1451'. [ 199.670063][ T9602] batman_adv: batadv0: Adding interface: syzkaller0 [ 199.670092][ T9602] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.670127][ T9602] batman_adv: batadv0: Interface activated: syzkaller0 [ 200.339542][ T9621] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1456'. [ 200.362844][ T9600] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 200.429000][ T9600] batman_adv: batadv0: Removing interface: syzkaller0 [ 200.539028][ T9623] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 200.638966][ T9625] netlink: 'syz.0.1458': attribute type 1 has an invalid length. [ 200.701084][ T9625] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.768582][ T9629] bond6: (slave syz_tun): Enslaving as a backup interface with an up link [ 201.029186][ T9614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 201.771526][ T9666] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1471'. [ 201.811250][ T9666] netlink: 'syz.3.1471': attribute type 3 has an invalid length. [ 201.811276][ T9666] netlink: 'syz.3.1471': attribute type 2 has an invalid length. [ 201.811291][ T9666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1471'. [ 202.516718][ T9693] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1481'. [ 203.089945][ T9711] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1490'. [ 203.347774][ T9723] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1494'. [ 203.928424][ T9752] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1506'. [ 204.080380][ T9757] Bluetooth: MGMT ver 1.23 [ 204.133410][ T9757] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1507'. [ 204.883763][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1514'. [ 204.938237][ T9777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1514'. [ 205.152464][ T9784] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1516'. [ 206.122405][ T4932] Bluetooth: hci1: command 0x0c24 tx timeout [ 206.124368][ T5637] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 206.147291][ T9828] syzkaller0: entered promiscuous mode [ 206.147317][ T9828] syzkaller0: entered allmulticast mode [ 206.664775][ T9848] syzkaller1: entered promiscuous mode [ 206.664800][ T9848] syzkaller1: entered allmulticast mode [ 206.944254][ T9851] syzkaller1: entered promiscuous mode [ 206.944281][ T9851] syzkaller1: entered allmulticast mode [ 206.949076][ T84] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 208.174358][ T9904] __nla_validate_parse: 5 callbacks suppressed [ 208.174385][ T9904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1562'. [ 208.300939][ T9906] tipc: Enabled bearer , priority 0 [ 208.314817][ T9908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1564'. [ 208.319728][ T9905] tipc: Resetting bearer [ 208.448063][ T9905] tipc: Disabling bearer [ 208.490600][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1569'. [ 208.974481][ T9933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1575'. [ 209.235010][ T9946] netlink: 316 bytes leftover after parsing attributes in process `syz.3.1579'. [ 209.236607][ T9949] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1581'. [ 209.721613][ T9967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 209.757077][ T9967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1587'. [ 210.733964][ T9983] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1592'. [ 210.799999][ T9988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1595'. [ 210.920081][ T9990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.956099][ T9990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.508460][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056c8e000: rx timeout, send abort [ 212.010899][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880699b5c00: rx timeout, send abort [ 212.010944][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056c8e000: abort rx timeout. Force session deactivation [ 212.510992][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880699b5c00: abort rx timeout. Force session deactivation [ 212.997532][T10012] ipvlan2: entered promiscuous mode [ 213.006796][T10012] team0: Device ipvlan2 failed to register rx_handler [ 213.132685][T10021] ip_tables: iptables: counters copy to user failed while replacing table [ 213.139351][T10015] ipvlan2: entered promiscuous mode [ 213.165858][T10015] team0: Device ipvlan2 failed to register rx_handler [ 213.656803][T10042] __nla_validate_parse: 3 callbacks suppressed [ 213.656825][T10042] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1614'. [ 213.832693][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1614'. [ 213.959812][T10057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1622'. [ 214.153798][T10072] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1627'. [ 214.496305][T10084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1630'. [ 214.833359][T10101] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1637'. [ 214.833676][T10101] unsupported nlmsg_type 40 [ 215.381034][T10117] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1643'. [ 215.591666][T10126] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 215.782849][T10127] netlink: 'syz.1.1648': attribute type 5 has an invalid length. [ 215.885167][ T5637] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 215.919220][T10134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1652'. [ 216.088518][T10148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1657'. [ 216.251731][T10153] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.1660'. [ 216.558768][T10166] Bluetooth: MGMT ver 1.23 [ 216.820275][T10176] netlink: 'syz.3.1668': attribute type 4 has an invalid length. [ 216.846097][ T5637] Bluetooth: hci1: command 0x0c24 tx timeout [ 216.846142][ T5637] Bluetooth: hci2: command 0x0406 tx timeout [ 216.846432][T10097] Bluetooth: hci3: command 0x0406 tx timeout [ 216.879585][T10179] netlink: 'syz.3.1668': attribute type 4 has an invalid length. [ 217.042675][T10183] 8021q: adding VLAN 0 to HW filter on device bond7 [ 217.117077][T10187] netlink: 'syz.0.1669': attribute type 10 has an invalid length. [ 217.228707][T10183] bond5: (slave dummy0): Removing an active aggregator [ 217.271888][T10183] bond5: (slave dummy0): Releasing backup interface [ 217.306937][T10183] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 217.307134][T10187] dummy0: entered promiscuous mode [ 217.314663][T10187] bond7: (slave dummy0): Releasing backup interface [ 217.789156][T10218] netlink: 'syz.0.1685': attribute type 1 has an invalid length. [ 217.831266][T10218] bond8: entered promiscuous mode [ 217.833102][T10218] 8021q: adding VLAN 0 to HW filter on device bond8 [ 217.910121][T10218] 8021q: adding VLAN 0 to HW filter on device bond8 [ 217.919115][T10218] bond8: (slave xfrm1): The slave device specified does not support setting the MAC address [ 217.919141][T10218] bond8: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 217.945680][T10218] bond8: (slave xfrm1): making interface the new active one [ 217.945704][T10218] xfrm1: entered promiscuous mode [ 217.972478][T10218] xfrm1: left promiscuous mode [ 218.141664][T10226] netlink: 'syz.3.1687': attribute type 178 has an invalid length. [ 218.819912][T10252] batman_adv: batadv0: Adding interface: syzkaller0 [ 218.819940][T10252] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.819977][T10252] batman_adv: batadv0: Interface activated: syzkaller0 [ 219.124482][ T43] tipc: Subscription rejected, illegal request [ 221.344476][T10251] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 221.424661][T10251] batman_adv: batadv0: Removing interface: syzkaller0 [ 221.931055][T10293] __nla_validate_parse: 4 callbacks suppressed [ 221.931078][T10293] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1715'. [ 222.110332][T10302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1718'. [ 222.214681][T10306] netlink: 'syz.4.1720': attribute type 1 has an invalid length. [ 222.307411][T10306] 8021q: adding VLAN 0 to HW filter on device bond6 [ 222.358877][T10310] bond6: (slave veth9): Enslaving as an active interface with a down link [ 222.394531][T10306] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 222.395111][T10306] bond6: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 222.887688][T10334] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1731'. [ 223.044687][ T50] IPVS: starting estimator thread 0... [ 223.087686][T10343] netlink: Failed to add  helper -22 [ 223.087730][T10343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.106047][T10263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.132279][T10345] IPVS: using max 31 ests per chain, 74400 per kthread [ 223.266627][T10353] netlink: 'syz.0.1738': attribute type 1 has an invalid length. [ 223.277760][T10349] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1736'. [ 223.311654][T10353] 8021q: adding VLAN 0 to HW filter on device bond9 [ 223.336512][T10353] macvlan4: entered promiscuous mode [ 223.336536][T10353] macvlan4: entered allmulticast mode [ 223.337669][T10353] bond9: entered promiscuous mode [ 223.339592][T10353] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 223.402177][T10353] bond9: left promiscuous mode [ 223.516319][T10359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1739'. [ 224.417960][T10404] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1753'. [ 224.518907][T10412] hsr0: entered promiscuous mode [ 224.605678][T10408] hsr0: left promiscuous mode [ 225.848210][T10462] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1768'. [ 226.693776][T10372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 227.378361][T10505] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1780'. [ 227.503442][T10505] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1780'. [ 228.023959][T10536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1789'. [ 228.043861][T10536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1789'. [ 228.535428][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1786'. [ 228.950918][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1798'. [ 229.075851][T10575] netlink: 'syz.3.1798': attribute type 1 has an invalid length. [ 229.145592][T10577] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 229.158978][T10577] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 229.287016][T10584] ieee802154 phy0 wpan0: encryption failed: -22 [ 229.360982][T10590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1808'. [ 229.376060][T10590] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1808'. [ 229.696150][T10606] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1812'. [ 230.715893][T10639] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1821'. [ 233.837177][T10696] __nla_validate_parse: 1 callbacks suppressed [ 233.837199][T10696] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1840'. [ 233.882560][T10696] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1840'. [ 234.095703][T10713] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1845'. [ 234.098033][T10713] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1845'. [ 234.811313][T10744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1852'. [ 235.284574][T10768] netlink: 'syz.3.1858': attribute type 83 has an invalid length. [ 235.690024][T10786] netlink: 'syz.3.1866': attribute type 1 has an invalid length. [ 235.743816][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1866'. [ 235.743855][T10788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1866'. [ 235.892187][T10786] bond5: entered promiscuous mode [ 235.892723][T10786] 8021q: adding VLAN 0 to HW filter on device bond5 [ 235.997718][T10793] bond5: (slave bridge5): making interface the new active one [ 235.997746][T10793] bridge5: entered promiscuous mode [ 235.999440][T10793] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 236.451336][T10811] syz.1.1874 (10811) used greatest stack depth: 18024 bytes left [ 237.619748][T10861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.376783][T10897] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1911'. [ 239.057870][T10913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 239.485624][T10928] netlink: 'syz.1.1922': attribute type 1 has an invalid length. [ 239.485651][T10928] netlink: 'syz.1.1922': attribute type 4 has an invalid length. [ 239.485666][T10928] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1922'. [ 239.486781][T10928] netlink: 'syz.1.1922': attribute type 1 has an invalid length. [ 239.486801][T10928] netlink: 'syz.1.1922': attribute type 4 has an invalid length. [ 239.486816][T10928] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1922'. [ 240.322539][T10972] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 240.667611][T10986] syzkaller1: entered promiscuous mode [ 240.667637][T10986] syzkaller1: entered allmulticast mode [ 241.508588][T11006] batman_adv: batadv0: Adding interface: dummy0 [ 241.508609][T11006] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.508642][T11006] batman_adv: batadv0: Interface activated: dummy0 [ 241.605166][T11006] batadv0: mtu less than device minimum [ 241.607767][T11006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.609909][T11006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.611428][T11006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.612928][T11006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.614371][T11006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.615860][T11006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.617346][T11006] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 241.623640][T11015] netlink: 'syz.4.1946': attribute type 10 has an invalid length. [ 241.623660][T11015] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1946'. [ 241.627903][T11012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1948'. [ 241.770265][T11015] batadv0: entered promiscuous mode [ 241.770295][T11015] batadv0: entered allmulticast mode [ 241.795168][T11015] bridge0: port 4(batadv0) entered blocking state [ 241.798103][T11015] bridge0: port 4(batadv0) entered disabled state [ 242.065732][T11025] sctp: [Deprecated]: syz.4.1953 (pid 11025) Use of int in max_burst socket option deprecated. [ 242.065732][T11025] Use struct sctp_assoc_value instead [ 242.112106][ T1412] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 242.112127][ T1412] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 242.652995][T11048] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1960'. [ 242.816186][T11053] bond5: entered allmulticast mode [ 242.816215][T11053] ip6gre2: entered allmulticast mode [ 244.972632][T11135] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1981'. [ 245.012130][T11024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.325719][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1985'. [ 245.408797][T11144] syzkaller1: entered promiscuous mode [ 245.408823][T11144] syzkaller1: entered allmulticast mode [ 245.420101][T11152] sch_tbf: burst 88 is lower than device veth9 mtu (1514) ! [ 246.026478][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1994'. [ 246.413297][T11179] syzkaller0: renamed from gre5 [ 246.837202][T11204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2000'. [ 248.967788][T11221] veth0_to_team: entered promiscuous mode [ 249.001397][T11221] 8021q: adding VLAN 0 to HW filter on device eth0 [ 249.003942][T11221] 8021q: adding VLAN 0 to HW filter on device eth1 [ 249.005827][T11221] 8021q: adding VLAN 0 to HW filter on device eth2 [ 249.007546][T11221] 8021q: adding VLAN 0 to HW filter on device eth3 [ 249.049496][T11221] 8021q: adding VLAN 0 to HW filter on device bond8 [ 249.066920][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'. [ 249.099754][T11232] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2010'. [ 249.136539][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2011'. [ 249.189604][ T1412] bond5: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 249.189675][ T1412] net_ratelimit: 12 callbacks suppressed [ 249.189688][ T1412] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 249.222742][ T1412] bond5: active interface up! [ 249.264827][T11241] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2013'. [ 249.431366][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2016'. [ 250.551310][T11265] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 250.557949][T11273] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 250.559587][T11276] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 250.586957][T11296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2032'. [ 250.673274][T11298] pimreg: entered allmulticast mode [ 250.697479][T11297] pimreg: left allmulticast mode [ 250.746567][T11296] netlink: 'syz.2.2032': attribute type 1 has an invalid length. [ 250.746594][T11296] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2032'. [ 250.908381][T11307] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2035'. [ 251.156324][T11324] tipc: Enabled bearer , priority 0 [ 251.157112][T11324] +: renamed from syzkaller0 [ 251.169253][T11324] tipc: Disabling bearer [ 251.217175][T11327] vlan0: entered promiscuous mode [ 252.552713][T11368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2057'. [ 253.371794][T11388] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2066'. [ 253.449805][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2067'. [ 254.575696][T11443] syzkaller1: entered promiscuous mode [ 254.575722][T11443] syzkaller1: entered allmulticast mode [ 255.081463][T11460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2092'. [ 255.723905][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.723959][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.106551][T11509] trusted_key: syz.2.2112 sent an empty control message without MSG_MORE. [ 256.130865][T11510] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2111'. [ 256.418788][T11523] netlink: 'syz.0.2117': attribute type 1 has an invalid length. [ 256.455241][T11523] 8021q: adding VLAN 0 to HW filter on device bond10 [ 256.543076][T11523] bond10: (slave veth19): Enslaving as an active interface with a down link [ 256.568277][T11527] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 256.586515][T11489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 256.629444][T11527] bond10: (slave wlan1): Enslaving as an active interface with a down link [ 256.698250][T11528] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2119'. [ 256.743335][T11528] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 256.777224][T11528] erspan0: entered promiscuous mode [ 256.787484][T11528] debugfs: 'hsr1' already exists in 'hsr' [ 256.787503][T11528] Cannot create hsr debugfs directory [ 256.934468][T11536] bond4: option updelay: invalid value (18446744073709518847) [ 256.934496][T11536] bond4: option updelay: allowed values 0 - 2147483647 [ 256.940996][T11536] bond4 (unregistering): Released all slaves [ 257.260096][T11556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2129'. [ 257.415002][T11562] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2131'. [ 258.414366][T11589] TC_ACT_REPEAT abuse ? [ 258.589796][T11565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 258.765840][T11603] ip_tables: iptables: counters copy to user failed while replacing table [ 258.924031][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2147'. [ 258.950752][T11607] batman_adv: batadv0: Adding interface: syzkaller0 [ 258.950773][T11607] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.950807][T11607] batman_adv: batadv0: Interface activated: syzkaller0 [ 258.995264][T11605] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 259.054025][T11605] batman_adv: batadv0: Removing interface: syzkaller0 [ 259.208372][T11617] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.2150'. [ 259.649219][T11645] syzkaller1: entered promiscuous mode [ 259.649246][T11645] syzkaller1: entered allmulticast mode [ 260.523227][T11683] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 261.694483][T11598] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.974373][T11713] ip_tables: iptables: counters copy to user failed while replacing table [ 262.134036][T11713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.147074][T11721] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 262.164933][T11713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.223094][T11725] netlink: 'syz.0.2185': attribute type 1 has an invalid length. [ 262.293677][T11713] vlan0: left promiscuous mode [ 262.337240][T11732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2185'. [ 262.408936][T11735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2189'. [ 262.408936][T11713] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 262.488121][T11713] gretap1: left promiscuous mode [ 262.554034][T11713] bond2: left promiscuous mode [ 262.554053][T11713] xfrm1: left promiscuous mode [ 262.624705][T11725] bond11: entered promiscuous mode [ 262.625250][T11725] 8021q: adding VLAN 0 to HW filter on device bond11 [ 262.678382][T11729] 8021q: adding VLAN 0 to HW filter on device bond11 [ 262.678828][T11729] bond11: (slave gre4): The slave device specified does not support setting the MAC address [ 262.678850][T11729] bond11: (slave gre4): Setting fail_over_mac to active for active-backup mode [ 262.730555][T11729] bond11: (slave gre4): making interface the new active one [ 262.730585][T11729] gre4: entered promiscuous mode [ 262.747319][T11729] bond11: (slave gre4): Enslaving as an active interface with an up link [ 262.752414][ T434] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.752505][ T434] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.752631][ T434] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.796294][ T434] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.831021][T11732] bond11 (unregistering): (slave gre4): Releasing backup interface [ 262.831053][T11732] gre4: left promiscuous mode [ 262.849262][T11732] bond11 (unregistering): Released all slaves [ 262.913229][T11723] syzkaller1: entered promiscuous mode [ 262.913249][T11723] syzkaller1: entered allmulticast mode [ 263.631901][T11766] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.631945][T11766] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.044453][T11766] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.044491][T11766] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.387887][T11766] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.387932][T11766] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.635133][T11766] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 264.635174][T11766] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.941807][ T434] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.941847][ T434] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.941897][ T434] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.941925][ T434] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.101734][ T43] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.101773][ T43] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.111283][ T84] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.111319][ T84] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.610873][T11927] ip_tables: iptables: counters copy to user failed while replacing table [ 270.622154][T11927] netlink: 'syz.2.2229': attribute type 1 has an invalid length. [ 270.737752][T11927] 8021q: adding VLAN 0 to HW filter on device bond4 [ 270.797827][T11930] bond4: (slave gretap2): making interface the new active one [ 270.800244][T11930] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 271.386055][T11957] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2235'. [ 271.661970][T11972] netlink: 'syz.4.2239': attribute type 10 has an invalid length. [ 271.940604][T11972] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 272.021648][T11972] team0: Port device wlan0 added [ 272.889298][T12020] netlink: 'syz.3.2256': attribute type 1 has an invalid length. [ 272.937729][T12020] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.075178][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2258'. [ 273.659276][T12055] tipc: Enabled bearer , priority 0 [ 273.833045][T12055] syzkaller0: entered promiscuous mode [ 273.833072][T12055] syzkaller0: entered allmulticast mode [ 273.833796][T12055] tipc: Resetting bearer [ 273.993739][T12052] tipc: Resetting bearer [ 276.353479][T12052] tipc: Disabling bearer [ 276.356951][T12064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2270'. [ 276.391435][T12070] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 276.455272][ T10] tipc: Node number set to 3532758524 [ 276.461065][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2278'. [ 276.759934][T12104] bond7: entered allmulticast mode [ 276.843618][T12111] macvlan0: entered promiscuous mode [ 276.843645][T12111] macvlan0: entered allmulticast mode [ 276.849376][T12111] bond7: (slave macvlan0): Opening slave failed [ 277.002785][T12123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2286'. [ 277.065828][T12123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2286'. [ 277.308145][ T5632] Bluetooth: hci2: connection err: -111 [ 277.368303][T12131] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 277.369131][T12131] team0: Device ipvlan0 is already an upper device of the team interface [ 277.931617][T12145] sctp: [Deprecated]: syz.1.2295 (pid 12145) Use of int in max_burst socket option. [ 277.931617][T12145] Use struct sctp_assoc_value instead [ 278.590097][T12172] netlink: 15143 bytes leftover after parsing attributes in process `syz.1.2306'. [ 278.709217][T12177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2307'. [ 278.872570][T12184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'. [ 279.120714][T12194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2313'. [ 279.358504][T12200] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 279.507012][T12200] bond7 (unregistering): Released all slaves [ 279.869511][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2321'. [ 279.869544][T12218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2321'. [ 280.077150][T12229] bond2: entered allmulticast mode [ 280.077177][T12229] xfrm1: entered allmulticast mode [ 280.078314][T12229] bond2: left allmulticast mode [ 280.078332][T12229] xfrm1: left allmulticast mode [ 280.164960][T12232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2327'. [ 280.443817][T12240] netlink: 'syz.1.2331': attribute type 11 has an invalid length. [ 280.537939][T12243] 0: reclassify loop, rule prio 0, protocol 03 [ 282.168434][T12283] __nla_validate_parse: 1 callbacks suppressed [ 282.168459][T12283] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2345'. [ 282.204159][T12283] syzkaller1: entered promiscuous mode [ 282.204185][T12283] syzkaller1: entered allmulticast mode [ 282.306091][T12286] ip_tables: iptables: counters copy to user failed while replacing table [ 282.514307][T12290] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 282.542996][T12290] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 283.028681][T12301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2353'. [ 283.222077][T12311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2358'. [ 283.926302][T12341] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 284.266129][T12354] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2371'. [ 284.697821][T12352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2372'. [ 284.837984][T12376] netlink: 'syz.3.2378': attribute type 4 has an invalid length. [ 284.893885][T12376] netlink: 'syz.3.2378': attribute type 4 has an invalid length. [ 285.055884][T12382] x_tables: duplicate underflow at hook 1 [ 285.812564][T12405] rxe_eth0 speed is unknown, defaulting to 1000 [ 286.717965][T12427] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2398'. [ 286.736216][T12427] syzkaller1: entered promiscuous mode [ 286.736238][T12427] syzkaller1: entered allmulticast mode [ 287.185099][T12442] 0: reclassify loop, rule prio 0, protocol 800 [ 287.733983][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2413'. [ 287.734013][T12459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2413'. [ 287.862741][T12466] netlink: 'syz.0.2414': attribute type 4 has an invalid length. [ 287.902921][T12466] netlink: 'syz.0.2414': attribute type 4 has an invalid length. [ 288.256741][T12475] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 288.345308][T12481] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 288.386649][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'. [ 288.386679][T12483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2421'. [ 288.657937][T12489] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 288.843101][T12493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2426'. [ 288.843131][T12493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2426'. [ 288.843148][T12493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2426'. [ 289.154878][T12507] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2431'. [ 289.403718][T12510] syzkaller1: entered promiscuous mode [ 289.403744][T12510] syzkaller1: entered allmulticast mode [ 289.509918][T12519] TC_ACT_REPEAT abuse ? [ 289.702896][T12533] netlink: 'syz.3.2440': attribute type 1 has an invalid length. [ 289.702921][T12533] netlink: 64543 bytes leftover after parsing attributes in process `syz.3.2440'. [ 290.278285][T12560] syzkaller1: entered promiscuous mode [ 290.278319][T12560] syzkaller1: entered allmulticast mode [ 291.017528][T12573] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2454'. [ 291.042686][T12573] syzkaller1: entered promiscuous mode [ 291.042710][T12573] syzkaller1: entered allmulticast mode [ 291.288833][T12589] 0: reclassify loop, rule prio 0, protocol 03 [ 291.409989][T12582] syzkaller1: entered promiscuous mode [ 291.410016][T12582] syzkaller1: entered allmulticast mode [ 292.738981][T12635] batman_adv: batadv0: Adding interface: syzkaller0 [ 292.739005][T12635] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.739127][T12635] batman_adv: batadv0: Interface activated: syzkaller0 [ 292.779668][T12640] tipc: Enabled bearer , priority 0 [ 292.796103][T12632] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 292.892675][T12632] batman_adv: batadv0: Removing interface: syzkaller0 [ 293.103667][T12657] netlink: 'syz.0.2481': attribute type 4 has an invalid length. [ 293.130311][T12657] netlink: 'syz.0.2481': attribute type 4 has an invalid length. [ 293.172886][T12657] lo: left promiscuous mode [ 293.365067][T12660] netlink: 'syz.2.2484': attribute type 5 has an invalid length. [ 293.762078][T12679] netlink: 'syz.2.2491': attribute type 19 has an invalid length. [ 294.884803][T12716] tipc: Started in network mode [ 294.884838][T12716] tipc: Node identity 56bae7ca93d1, cluster identity 4711 [ 294.885003][T12716] tipc: Enabled bearer , priority 0 [ 294.974909][T12724] __nla_validate_parse: 1 callbacks suppressed [ 294.974931][T12724] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2506'. [ 295.055522][T12716] syzkaller0: entered promiscuous mode [ 295.055550][T12716] syzkaller0: entered allmulticast mode [ 295.060590][T12716] tipc: Resetting bearer [ 295.254921][T12715] tipc: Resetting bearer [ 296.460685][T12751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 298.177507][T12715] tipc: Disabling bearer [ 298.266449][ T5735] tipc: Node number set to 3312183242 [ 298.659951][T12791] tipc: New replicast peer: 127.0.0.1 [ 298.664971][T12791] tipc: Enabled bearer , priority 10 [ 298.761244][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 298.963315][T12799] TC_ACT_REPEAT abuse ? [ 299.445542][T12829] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2540'. [ 299.501627][T12829] syzkaller1: entered promiscuous mode [ 299.501652][T12829] syzkaller1: entered allmulticast mode [ 300.625506][T12863] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 300.625540][T12863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 300.865971][T12866] ip_tables: iptables: counters copy to user failed while replacing table [ 301.133933][T12879] netlink: 'syz.1.2560': attribute type 1 has an invalid length. [ 301.259146][T12879] 8021q: adding VLAN 0 to HW filter on device bond4 [ 301.432867][T12879] bond4: (slave geneve2): making interface the new active one [ 301.436518][T12879] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 301.436706][T12890] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 301.487559][T12890] sch_tbf: burst 6281 is lower than device lo mtu (11337746) ! [ 301.661735][T12899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.679041][T12899] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.697918][T12899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.781644][T12899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.784188][T12899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.789658][T12899] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 301.834613][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.834758][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.837076][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.837184][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.035457][T12911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2573'. [ 302.141269][ T434] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.141331][ T434] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.141369][ T434] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.141416][ T434] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.390832][T12926] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2580'. [ 302.407099][T12927] netlink: 'syz.0.2581': attribute type 2 has an invalid length. [ 302.525449][T12930] netlink: 'syz.2.2583': attribute type 2 has an invalid length. [ 302.913319][T12952] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2588'. [ 303.163123][T12959] ip_tables: iptables: counters copy to user failed while replacing table [ 303.210433][T12959] syzkaller1: entered promiscuous mode [ 303.210460][T12959] syzkaller1: entered allmulticast mode [ 303.418520][T12967] ip_tables: iptables: counters copy to user failed while replacing table [ 303.439942][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2593'. [ 303.439972][T12963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2593'. [ 303.594200][T12975] tipc: Resetting bearer [ 304.264199][T12995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2605'. [ 304.654833][T13001] netlink: 'syz.1.2608': attribute type 1 has an invalid length. [ 304.654860][T13001] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2608'. [ 304.916982][T13008] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.141753][ T62] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 305.581481][ T43] IPVS: starting estimator thread 0... [ 305.672380][T13043] IPVS: using max 27 ests per chain, 64800 per kthread [ 305.735433][T13050] netlink: 'syz.4.2624': attribute type 27 has an invalid length. [ 305.759157][T13050] bridge0: port 4(batadv0) entered blocking state [ 305.759327][T13050] bridge0: port 4(batadv0) entered listening state [ 305.759629][T13050] bridge0: port 3(veth0) entered blocking state [ 305.759765][T13050] bridge0: port 3(veth0) entered listening state [ 305.760202][T13050] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.760366][T13050] bridge0: port 2(bridge_slave_1) entered listening state [ 305.760679][T13050] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.760856][T13050] bridge0: port 1(bridge_slave_0) entered listening state [ 305.852424][ C0] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:19 [ 305.878097][ C0] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 305.879802][ C0] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 305.947440][T13050] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 305.948691][T13050] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 305.992478][T13050] 8021q: adding VLAN 0 to HW filter on device bond1 [ 306.020663][T13050] bond2: left promiscuous mode [ 306.020687][T13050] ip6gre1: left promiscuous mode [ 306.231126][T13050] bond4: left promiscuous mode [ 306.231152][T13050] gre2: left promiscuous mode [ 306.234423][T13050] bond5: left promiscuous mode [ 306.235881][T13050] ip6gre2: left promiscuous mode [ 306.265877][T13050] macvlan2: left promiscuous mode [ 306.266559][T13050] macvlan2: left allmulticast mode [ 306.266591][T13050] geneve1: left allmulticast mode [ 306.322029][ C0] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 306.335576][ T5632] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 306.566676][T13054] bridge7: entered promiscuous mode [ 306.566705][T13054] bridge7: entered allmulticast mode [ 306.681946][ C0] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 306.714078][ T62] bond6: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 306.794725][ T62] bond6: (slave veth9): making interface the new active one [ 306.808686][ T62] bond6: active interface up! [ 306.845495][ C0] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:19 [ 307.255585][T13083] veth1_to_bond: entered promiscuous mode [ 307.259988][T13082] veth1_to_bond: left promiscuous mode [ 307.320323][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 307.364685][T13088] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2635'. [ 307.627996][T13103] ip_tables: iptables: counters copy to user failed while replacing table [ 307.640771][T13103] tipc: Enabled bearer , priority 10 [ 307.904738][T13116] netlink: 'syz.3.2648': attribute type 1 has an invalid length. [ 307.947349][T13116] 8021q: adding VLAN 0 to HW filter on device bond8 [ 308.040302][T13116] bond8: (slave geneve3): making interface the new active one [ 308.044444][T13116] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 308.211035][T13130] netlink: 'syz.3.2652': attribute type 2 has an invalid length. [ 308.211062][T13130] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.2652'. [ 308.212588][T13130] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2652'. [ 308.873957][T13147] syzkaller1: entered promiscuous mode [ 308.873983][T13147] syzkaller1: entered allmulticast mode [ 309.660243][T13159] syzkaller0: entered promiscuous mode [ 309.660269][T13159] syzkaller0: entered allmulticast mode [ 310.005757][T13167] rxe_eth0 speed is unknown, defaulting to 1000 [ 310.746831][T13195] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2676'. [ 310.811060][T13197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2676'. [ 311.069804][T13205] netlink: 'syz.1.2680': attribute type 1 has an invalid length. [ 311.069832][T13205] netlink: 64511 bytes leftover after parsing attributes in process `syz.1.2680'. [ 312.198917][T13248] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 312.269910][T13246] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 312.804792][T13270] TC_ACT_REPEAT abuse ? [ 313.587319][T13186] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.876863][T13297] netlink: 'syz.0.2704': attribute type 2 has an invalid length. [ 313.876887][T13297] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2704'. [ 313.908908][T13300] syzkaller1: entered promiscuous mode [ 313.908932][T13300] syzkaller1: entered allmulticast mode [ 314.018867][T13304] ip_tables: iptables: counters copy to user failed while replacing table [ 315.286401][T13338] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2721'. [ 315.459885][ C1] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 315.463025][ C1] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 315.477531][ C1] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:19 [ 315.542191][ C1] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 315.595058][T13345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2723'. [ 315.783523][ C1] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:19 [ 316.094403][T13357] syzkaller1: entered promiscuous mode [ 316.094430][T13357] syzkaller1: entered allmulticast mode [ 316.203689][ C1] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 316.280385][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2730'. [ 316.280434][T13364] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2730'. [ 316.656787][T13375] netlink: 'syz.1.2733': attribute type 10 has an invalid length. [ 316.657116][T13375] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.657788][T13375] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.697925][T13377] netlink: 'syz.3.2734': attribute type 1 has an invalid length. [ 316.698254][T13375] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.698363][T13375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.698623][T13375] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.698736][T13375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.752568][T13379] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2733'. [ 316.753796][T13375] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.754028][T13375] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.874127][T13390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2734'. [ 316.907147][T13379] bridge_slave_1: left allmulticast mode [ 316.907179][T13379] bridge_slave_1: left promiscuous mode [ 316.907422][T13379] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.930875][T13379] bridge_slave_0: left allmulticast mode [ 316.930920][T13379] bridge_slave_0: left promiscuous mode [ 316.943852][T13379] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.989471][T13382] 8021q: adding VLAN 0 to HW filter on device bond10 [ 316.998685][T13382] bond9: (slave bond10): making interface the new active one [ 316.999216][T13382] bond9: (slave bond10): Enslaving as an active interface with an up link [ 317.008831][T13390] 8021q: adding VLAN 0 to HW filter on device bond9 [ 317.075267][T13391] syzkaller0: create flow: hash 254895326 index 1 [ 317.143274][T13395] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2736'. [ 317.166127][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.191746][ T50] syzkaller0: tun_net_xmit 76 [ 317.191947][ T50] syzkaller0: tun_net_xmit 48 [ 317.236492][ T5743] syzkaller0: tun_net_xmit 76 [ 317.335321][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2736'. [ 317.411429][ T10] syzkaller0: tun_net_xmit 76 [ 317.438485][T13387] syzkaller0: delete flow: hash 254895326 index 1 [ 317.478750][T13408] netlink: 'syz.4.2740': attribute type 4 has an invalid length. [ 317.535106][T13411] netlink: 'syz.4.2740': attribute type 4 has an invalid length. [ 317.643267][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2742'. [ 317.815332][T13420] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 319.728144][T13435] __nla_validate_parse: 1 callbacks suppressed [ 319.728167][T13435] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2748'. [ 319.874862][T13444] netlink: 272 bytes leftover after parsing attributes in process `syz.4.2750'. [ 320.305191][T13455] ip_tables: iptables: counters copy to user failed while replacing table [ 320.699475][T13476] sctp: [Deprecated]: syz.2.2763 (pid 13476) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.699475][T13476] Use struct sctp_sack_info instead [ 321.228270][T13459] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.032131][T13501] netlink: 'syz.0.2772': attribute type 2 has an invalid length. [ 324.032160][T13501] netlink: 'syz.0.2772': attribute type 2 has an invalid length. [ 324.157570][T13505] syzkaller0: entered promiscuous mode [ 324.157597][T13505] syzkaller0: entered allmulticast mode [ 324.339888][T13511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2777'. [ 324.996809][T13539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2788'. [ 326.266483][T13558] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 327.039711][T13566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2796'. [ 327.107654][T13594] bridge0: port 3(bond0) entered blocking state [ 327.107820][T13594] bridge0: port 3(bond0) entered disabled state [ 327.108151][T13594] bond0: entered allmulticast mode [ 327.108171][T13594] bond_slave_0: entered allmulticast mode [ 327.108299][T13594] bond_slave_1: entered allmulticast mode [ 327.228175][T13594] bond0: entered promiscuous mode [ 327.228201][T13594] bond_slave_0: entered promiscuous mode [ 327.228400][T13594] bond_slave_1: entered promiscuous mode [ 327.254613][T13597] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2803'. [ 327.260697][T13594] bridge0: port 3(bond0) entered blocking state [ 327.260878][T13594] bridge0: port 3(bond0) entered forwarding state [ 327.585851][T13597] hsr_slave_1 (unregistering): left promiscuous mode [ 330.871541][T13623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 331.145323][T13680] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2829'. [ 332.824436][T13684] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2831'. [ 332.864877][T13686] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2832'. [ 332.908349][T13684] vlan3: entered allmulticast mode [ 332.908376][T13684] dummy0: entered allmulticast mode [ 332.926927][T13686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.926953][T13686] batadv0: mtu less than device minimum [ 332.929754][T13686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 332.933085][T13686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 332.936771][T13686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 332.940591][T13686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 332.944198][T13686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 332.947554][T13686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 332.951250][T13686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 332.954712][T13686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 332.957649][T13686] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 333.182066][T13686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.546125][T13733] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2848'. [ 335.332925][T13752] batman_adv: batadv0: Adding interface: syzkaller0 [ 335.332945][T13752] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.332973][T13752] batman_adv: batadv0: Interface activated: syzkaller0 [ 335.407242][T13750] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 335.517345][T13750] batman_adv: batadv0: Removing interface: syzkaller0 [ 335.886365][T13770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2859'. [ 335.903218][ T50] nci: nci_rsp_packet: unknown rsp opcode 0x102 [ 336.363880][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 336.364565][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 336.364766][ C0] bridge0: port 3(veth0) entered learning state [ 336.364952][ C0] bridge0: port 4(batadv0) entered learning state [ 337.879016][T13818] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2876'. [ 338.737321][T13761] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 340.822977][T13876] netlink: 'syz.0.2891': attribute type 1 has an invalid length. [ 341.152875][T13886] net_ratelimit: 11 callbacks suppressed [ 341.152896][T13886] TC_ACT_REPEAT abuse ? [ 341.437652][T13899] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2902'. [ 341.556706][T13904] lo: entered promiscuous mode [ 341.557032][T13904] tunl0: entered promiscuous mode [ 341.579366][T13904] gre0: entered promiscuous mode [ 341.607014][T13904] gretap0: entered promiscuous mode [ 341.640915][T13904] erspan0: entered promiscuous mode [ 341.674951][T13904] ip_vti0: entered promiscuous mode [ 341.695325][T13904] ip6_vti0: entered promiscuous mode [ 341.711900][T13904] sit0: entered promiscuous mode [ 341.738188][T13904] ip6tnl0: entered promiscuous mode [ 341.765808][T13904] ip6gre0: entered promiscuous mode [ 341.796659][T13904] syz_tun: entered promiscuous mode [ 341.818811][T13904] ip6gretap0: entered promiscuous mode [ 341.877622][T13904] bridge0: entered promiscuous mode [ 341.905792][T13904] vcan0: entered promiscuous mode [ 341.918622][T13904] bond0: entered promiscuous mode [ 341.939065][T13904] team0: entered promiscuous mode [ 341.977758][T13904] nlmon0: entered promiscuous mode [ 341.983949][T13904] batadv0: entered promiscuous mode [ 342.026464][T13904] veth0: entered promiscuous mode [ 342.054488][T13904] veth1: entered promiscuous mode [ 342.071701][T13904] wg0: entered promiscuous mode [ 342.075937][T13904] wg1: entered promiscuous mode [ 342.077953][T13932] netlink: 'syz.1.2908': attribute type 3 has an invalid length. [ 342.079849][T13904] wg2: entered promiscuous mode [ 342.105105][T13904] veth1_to_bridge: entered promiscuous mode [ 342.107895][T13904] bridge_slave_1: entered promiscuous mode [ 342.109735][T13904] veth0_to_bond: entered promiscuous mode [ 342.133191][T13904] bond_slave_0: entered promiscuous mode [ 342.138354][T13904] veth1_to_bond: entered promiscuous mode [ 342.158961][T13904] bond_slave_1: entered promiscuous mode [ 342.177050][T13904] team_slave_0: entered promiscuous mode [ 342.179171][T13904] veth1_to_team: entered promiscuous mode [ 342.204101][T13904] team_slave_1: entered promiscuous mode [ 342.206182][T13904] veth0_to_batadv: entered promiscuous mode [ 342.208601][T13904] batadv_slave_0: entered promiscuous mode [ 342.240505][T13904] veth1_to_batadv: entered promiscuous mode [ 342.260795][T13904] batadv_slave_1: entered promiscuous mode [ 342.272728][T13904] xfrm0: entered promiscuous mode [ 342.280861][T13904] veth0_to_hsr: entered promiscuous mode [ 342.299474][T13904] veth1_to_hsr: entered promiscuous mode [ 342.315831][T13904] hsr0: entered promiscuous mode [ 342.318387][T13904] veth1_virt_wifi: entered promiscuous mode [ 342.321047][T13904] veth0_virt_wifi: entered promiscuous mode [ 342.349941][T13904] virt_wifi0: entered promiscuous mode [ 342.378802][T13904] vlan0: entered promiscuous mode [ 342.414961][T13904] vlan1: entered promiscuous mode [ 342.432789][T13904] macvlan0: entered promiscuous mode [ 342.450003][T13904] macvlan1: entered promiscuous mode [ 342.455658][T13904] ipvlan0: entered promiscuous mode [ 342.457978][T13904] ipvlan1: entered promiscuous mode [ 342.493403][T13904] geneve0: entered promiscuous mode [ 342.506712][T13904] geneve1: entered promiscuous mode [ 342.560514][T13904] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 342.636310][T13904] bond1: entered promiscuous mode [ 342.636337][T13904] gretap1: entered promiscuous mode [ 342.659212][T13904] bond2: entered promiscuous mode [ 342.659240][T13904] gretap2: entered promiscuous mode [ 342.678874][T13904] bridge1: entered promiscuous mode [ 342.694280][T13904] erspan1: entered promiscuous mode [ 342.707732][T13904] gtp0: entered promiscuous mode [ 342.708786][T13904] sit1: entered promiscuous mode [ 342.754477][T13904] gtp1: entered promiscuous mode [ 342.763564][T13904] macvlan2: entered promiscuous mode [ 342.790970][T13904] macvlan3: entered promiscuous mode [ 342.800423][T13904] gtp2: entered promiscuous mode [ 342.820725][T13904] dummy1: entered promiscuous mode [ 342.831934][T13904] gre1: entered promiscuous mode [ 342.879544][T13904] veth2: entered promiscuous mode [ 342.890279][T13904] veth3: entered promiscuous mode [ 342.918098][T13904] netdevsim netdevsim0 eth0: entered promiscuous mode [ 342.930317][T13904] netdevsim netdevsim0 eth1: entered promiscuous mode [ 342.967180][T13904] netdevsim netdevsim0 eth2: entered promiscuous mode [ 342.986865][T13904] netdevsim netdevsim0 eth3: entered promiscuous mode [ 342.996605][T13904] vxlan0: entered promiscuous mode [ 343.009065][T13904] vlan2: entered promiscuous mode [ 343.017800][T13904] bond4: entered promiscuous mode [ 343.017823][T13904] veth5: entered promiscuous mode [ 343.026663][T13904] veth4: entered promiscuous mode [ 343.042218][T13904] syztnl0: entered promiscuous mode [ 343.045294][T13904] bond5: entered promiscuous mode [ 343.045315][T13904] veth7: entered promiscuous mode [ 343.048942][T13904] veth6: entered promiscuous mode [ 343.077743][T13904] bond6: entered promiscuous mode [ 343.092556][T13904] bridge2: entered promiscuous mode [ 343.094506][T13904] veth8: entered promiscuous mode [ 343.112092][T13904] veth9: entered promiscuous mode [ 343.115010][T13904] veth10: entered promiscuous mode [ 343.147805][T13904] veth11: entered promiscuous mode [ 343.159446][T13904] bond7: entered promiscuous mode [ 343.160211][T13904] gre2: entered promiscuous mode [ 343.239578][T13904] bond9: entered promiscuous mode [ 343.248754][T13904] veth12: entered promiscuous mode [ 343.259826][T13904] veth13: entered promiscuous mode [ 343.268128][T13904] veth14: entered promiscuous mode [ 343.278564][T13904] veth15: entered promiscuous mode [ 343.297483][T13904] vrf0: entered promiscuous mode [ 343.299880][T13904] bridge3: entered promiscuous mode [ 343.316105][T13904] veth16: entered promiscuous mode [ 343.316299][T13904] veth17: entered promiscuous mode [ 343.317648][T13904] bond10: entered promiscuous mode [ 343.319595][T13904] veth18: entered promiscuous mode [ 343.344410][T13904] veth19: entered promiscuous mode [ 343.348080][T13904] gre3: entered promiscuous mode [ 343.349764][T13904] gre4: entered promiscuous mode [ 343.349902][T13904] gtp3: entered promiscuous mode [ 343.386415][T13904] bridge4: entered promiscuous mode [ 343.395426][T13904] bond11: entered promiscuous mode [ 343.410758][T13904] bridge5: entered promiscuous mode [ 343.421926][T13904] vlan3: entered promiscuous mode [ 343.422288][T13904] veth20: entered promiscuous mode [ 343.422450][T13904] veth21: entered promiscuous mode [ 343.514168][T13961] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2913'. [ 343.652187][T12976] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.652227][T12976] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.652266][T12976] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.652294][T12976] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.652329][T12976] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.652356][T12976] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.652391][T12976] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.652418][T12976] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.857985][T13973] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 343.858033][T13973] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 343.858077][T13973] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 343.887413][T13981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2918'. [ 344.020743][T13981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2918'. [ 344.260329][T13995] netlink: 'syz.2.2923': attribute type 12 has an invalid length. [ 344.287564][T13995] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 344.354869][T13998] netlink: 'syz.3.2924': attribute type 1 has an invalid length. [ 344.354895][T13998] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2924'. [ 344.697716][T14008] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 345.025572][T14024] syzkaller1: entered allmulticast mode [ 345.285955][T14033] ip_tables: iptables: counters copy to user failed while replacing table [ 345.306985][T14034] batman_adv: batadv0: Adding interface: syzkaller0 [ 345.307006][T14034] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.307039][T14034] batman_adv: batadv0: Interface activated: syzkaller0 [ 346.292096][T14032] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 346.334672][T14041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2940'. [ 346.340050][T14032] batman_adv: batadv0: Removing interface: syzkaller0 [ 346.408169][T14046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2942'. [ 346.824705][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'. [ 346.827681][T14064] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2947'. [ 346.944061][T14070] lo: entered allmulticast mode [ 346.951052][T14070] lo: left allmulticast mode [ 347.145162][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2953'. [ 347.257007][T14083] netlink: 'syz.4.2955': attribute type 1 has an invalid length. [ 347.311741][T14083] 8021q: adding VLAN 0 to HW filter on device bond7 [ 347.442876][T14087] bond7: (slave veth17): Enslaving as an active interface with a down link [ 347.522758][ C0] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 347.524129][ C0] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:19 [ 347.546010][ C0] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 347.615396][ C0] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:19 [ 347.708138][T14087] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 347.718322][T14087] bond7: (slave batadv1): making interface the new active one [ 347.720160][T14087] batadv1: entered promiscuous mode [ 347.742730][T14087] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 347.795605][T14098] batman_adv: batadv0: Adding interface: syzkaller0 [ 347.795625][T14098] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 347.795748][T14098] batman_adv: batadv0: Interface activated: syzkaller0 [ 347.851028][T14093] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 347.886729][ C1] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 347.915383][T14093] batman_adv: batadv0: Removing interface: syzkaller0 [ 348.000844][ T434] bond7: (slave veth17): link status definitely up, 10000 Mbps full duplex [ 348.102749][ C0] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 348.166103][T14109] netlink: 'syz.0.2964': attribute type 12 has an invalid length. [ 348.527958][ C0] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1b [ 348.630037][ T43] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 348.630274][ T43] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 348.652772][ T5756] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 348.990681][T14142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2978'. [ 349.064392][T14142] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 349.460796][T14163] netlink: 'syz.3.2985': attribute type 3 has an invalid length. [ 349.606335][T14167] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2987'. [ 349.641491][ T5756] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 349.641702][ T5756] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 349.752756][T14167] 8021q: adding VLAN 0 to HW filter on device bond12 [ 349.778854][T14172] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2988'. [ 349.858715][T14172] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2988'. [ 350.023960][T14183] syzkaller0: entered promiscuous mode [ 350.023987][T14183] syzkaller0: entered allmulticast mode [ 350.390914][T14196] syzkaller0: entered promiscuous mode [ 350.390940][T14196] syzkaller0: entered allmulticast mode [ 350.635384][T14207] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3001'. [ 350.864305][T14203] syzkaller1: entered promiscuous mode [ 350.864334][T14203] syzkaller1: entered allmulticast mode [ 351.304222][T14222] syzkaller0: entered promiscuous mode [ 351.304248][T14222] syzkaller0: entered allmulticast mode [ 351.798870][T14240] lo: entered allmulticast mode [ 351.877516][T14240] lo: left allmulticast mode [ 351.896715][T14242] ip_tables: iptables: counters copy to user failed while replacing table [ 352.030548][T14246] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3015'. [ 352.073992][T14251] syzkaller0: entered promiscuous mode [ 352.074011][T14251] syzkaller0: entered allmulticast mode [ 352.761422][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 352.976448][T14264] syzkaller0: entered promiscuous mode [ 352.976467][T14264] syzkaller0: entered allmulticast mode [ 353.010072][ C1] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:1c [ 354.128518][T14215] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.291598][T14275] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3025'. [ 354.410278][T14282] syzkaller0: entered promiscuous mode [ 354.410303][T14282] syzkaller0: entered allmulticast mode [ 354.426599][T14282] tipc: Enabled bearer , priority 0 [ 354.427759][T14281] tipc: Resetting bearer [ 354.498114][T14288] netlink: 'syz.0.3030': attribute type 1 has an invalid length. [ 354.498575][T14281] tipc: Disabling bearer [ 354.769205][T14289] 8021q: adding VLAN 0 to HW filter on device bond14 [ 354.779725][T14289] bond13: (slave bond14): making interface the new active one [ 354.780482][T14289] bond13: (slave bond14): Enslaving as an active interface with an up link [ 354.845277][T14305] syzkaller0: entered promiscuous mode [ 354.845321][T14305] syzkaller0: entered allmulticast mode [ 355.018055][T14308] syzkaller1: entered promiscuous mode [ 355.018081][T14308] syzkaller1: entered allmulticast mode [ 355.094596][T14316] syzkaller0: entered promiscuous mode [ 355.094622][T14316] syzkaller0: entered allmulticast mode [ 355.123625][T14317] netlink: 976 bytes leftover after parsing attributes in process `syz.2.3037'. [ 355.123654][T14317] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 355.443823][T14330] netlink: 'syz.4.3043': attribute type 1 has an invalid length. [ 355.462190][T14327] dvmrp0: entered allmulticast mode [ 355.462411][T14327] dvmrp0: left allmulticast mode [ 355.578374][T14330] 8021q: adding VLAN 0 to HW filter on device bond8 [ 355.629202][T14330] netlink: 'syz.4.3043': attribute type 10 has an invalid length. [ 355.629220][T14330] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3043'. [ 355.720287][T14332] bond8: (slave veth21): Enslaving as an active interface with a down link [ 355.721046][T14338] batman_adv: batadv0: Interface deactivated: dummy0 [ 355.743087][T14338] batman_adv: batadv0: Removing interface: dummy0 [ 355.780935][T14338] bond8: (slave dummy0): making interface the new active one [ 355.790391][T14338] dummy0: entered promiscuous mode [ 355.790796][T14338] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 355.813369][T14330] bond8: (slave dummy0): Releasing active interface [ 359.360514][T14371] syz_tun: entered promiscuous mode [ 359.383487][ T84] batadv1: left promiscuous mode [ 359.463349][T14406] syzkaller0: entered promiscuous mode [ 359.463373][T14406] syzkaller0: entered allmulticast mode [ 359.488757][T14408] netlink: 'syz.4.3061': attribute type 1 has an invalid length. [ 359.564626][T14408] ip6tnl2: entered promiscuous mode [ 359.564653][T14408] ip6tnl2: entered allmulticast mode [ 359.657073][T14416] lo: entered promiscuous mode [ 359.657390][T14416] tunl0: entered promiscuous mode [ 359.692724][T14416] gre0: entered promiscuous mode [ 359.875735][T14373] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 360.015193][T14416] gretap0: entered promiscuous mode [ 360.097702][T14416] erspan0: entered promiscuous mode [ 360.110867][T14416] ip_vti0: entered promiscuous mode [ 360.154972][T14416] ip6_vti0: entered promiscuous mode [ 360.247121][T14433] tipc: Failed to remove unknown binding: 66,0,0/3312183242:302453243/302453245 [ 360.247158][T14433] tipc: Failed to remove unknown binding: 66,0,0/3312183242:302453243/302453244 [ 360.247864][T14433] tipc: Failed to remove unknown binding: 66,0,0/3312183242:302453243/302453245 [ 360.247894][T14433] tipc: Failed to remove unknown binding: 66,0,0/3312183242:302453243/302453244 [ 360.313188][T14416] sit0: entered promiscuous mode [ 360.313459][T14416] ip6tnl0: entered promiscuous mode [ 360.361974][T14416] ip6gre0: entered promiscuous mode [ 360.426585][T14416] tipc: Resetting bearer [ 360.428648][T14416] syz_tun: entered promiscuous mode [ 360.479814][T14416] ip6gretap0: entered promiscuous mode [ 360.512296][T14416] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.515126][T14416] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.536662][T14416] bridge0: entered promiscuous mode [ 360.568342][T14416] bond0: entered promiscuous mode [ 360.568362][T14416] bond_slave_0: entered promiscuous mode [ 360.568521][T14416] bond_slave_1: entered promiscuous mode [ 360.649972][T14416] team0: entered promiscuous mode [ 360.649997][T14416] team_slave_0: entered promiscuous mode [ 360.650209][T14416] team_slave_1: entered promiscuous mode [ 360.723502][T14416] nlmon0: entered promiscuous mode [ 360.743571][T14416] batadv0: entered promiscuous mode [ 360.781610][T14416] vxcan0: entered promiscuous mode [ 360.788785][T14416] vxcan1: entered promiscuous mode [ 360.808150][T14416] veth0: entered promiscuous mode [ 360.852875][T14416] veth1: entered promiscuous mode [ 360.888818][T14416] wg0: entered promiscuous mode [ 360.915696][T14416] wg1: entered promiscuous mode [ 360.937815][T14416] wg2: entered promiscuous mode [ 360.964308][T14416] veth0_to_bridge: entered promiscuous mode [ 361.015283][T14416] veth1_to_bridge: entered promiscuous mode [ 361.059138][T14416] veth0_to_bond: entered promiscuous mode [ 361.103857][T14416] veth1_to_bond: entered promiscuous mode [ 361.150153][T14416] veth0_to_team: entered promiscuous mode [ 361.208883][T14416] veth1_to_team: entered promiscuous mode [ 361.257233][T14416] veth0_to_batadv: entered promiscuous mode [ 361.300809][T14416] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.300871][T14416] batadv_slave_0: entered promiscuous mode [ 361.346340][T14416] xfrm0: entered promiscuous mode [ 361.382892][T14416] veth0_to_hsr: entered promiscuous mode [ 361.429856][T14416] veth1_to_hsr: entered promiscuous mode [ 361.472587][T14416] hsr0: entered promiscuous mode [ 361.498396][T14416] veth1_virt_wifi: entered promiscuous mode [ 361.526323][T14416] veth0_virt_wifi: entered promiscuous mode [ 361.556154][T14416] virt_wifi0: entered promiscuous mode [ 361.618241][T14416] vlan0: entered promiscuous mode [ 361.647121][T14416] macvlan0: entered promiscuous mode [ 361.674711][T14416] macvlan1: entered promiscuous mode [ 361.699965][T14416] ipvlan0: entered promiscuous mode [ 361.731897][T14416] ipvlan1: entered promiscuous mode [ 361.804753][T14416] macvtap0: entered promiscuous mode [ 361.817626][T14416] macsec0: entered promiscuous mode [ 361.838332][T14416] geneve1: entered promiscuous mode [ 361.852496][T14416] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 361.875085][T14416] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 361.879209][T14416] gtp0: entered promiscuous mode [ 361.890724][T14416] veth2: entered promiscuous mode [ 361.901754][T14416] veth3: entered promiscuous mode [ 361.918694][T14416] bond2: entered promiscuous mode [ 361.922578][T14416] geneve2: entered promiscuous mode [ 361.926178][T14416] @: entered promiscuous mode [ 361.943323][T14416] erspan1: entered promiscuous mode [ 361.947003][T14416] bond3: entered promiscuous mode [ 361.947026][T14416] gretap1: entered promiscuous mode [ 361.955395][T14416] veth4: entered promiscuous mode [ 361.957899][T14416] veth5: entered promiscuous mode [ 361.958683][T14416] gtp1: entered promiscuous mode [ 361.961852][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 362.022885][T14416] veth6: entered promiscuous mode [ 362.023100][T14416] veth7: entered promiscuous mode [ 362.023255][T14416] veth8: entered promiscuous mode [ 362.023407][T14416] veth9: entered promiscuous mode [ 362.023575][T14416] veth10: entered promiscuous mode [ 362.023728][T14416] veth11: entered promiscuous mode [ 362.026045][T14416] bridge1: entered promiscuous mode [ 362.029601][T14416] veth12: entered promiscuous mode [ 362.029789][T14416] veth13: entered promiscuous mode [ 362.075906][T14416] bridge2: entered promiscuous mode [ 362.095935][T14416] veth14: entered promiscuous mode [ 362.096134][T14416] veth15: entered promiscuous mode [ 362.096287][T14416] veth16: entered promiscuous mode [ 362.096450][T14416] veth17: entered promiscuous mode [ 362.096597][T14416] syztnl1: entered promiscuous mode [ 362.097329][T14416] bridge3: entered promiscuous mode [ 362.112411][T14416] veth18: entered promiscuous mode [ 362.112637][T14416] veth19: entered promiscuous mode [ 362.146211][T14416] bridge4: entered promiscuous mode [ 362.157303][T14416] bridge5: entered promiscuous mode [ 362.167129][T14416] dummy0: entered promiscuous mode [ 362.167342][T14416] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 362.167506][T14416] netdevsim netdevsim2 eth0: entered promiscuous mode [ 362.167634][T14416] netdevsim netdevsim2 eth1: entered promiscuous mode [ 362.167758][T14416] netdevsim netdevsim2 eth2: entered promiscuous mode [ 362.167890][T14416] netdevsim netdevsim2 eth3: entered promiscuous mode [ 362.168408][T14416] bond4: entered promiscuous mode [ 362.168428][T14416] gretap2: entered promiscuous mode [ 362.209001][T14416] bridge6: entered promiscuous mode [ 362.256760][T14416] gtp2: entered promiscuous mode [ 362.257920][T14416] bridge7: entered promiscuous mode [ 362.412937][T14467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3075'. [ 362.414185][ T5632] block nbd0: Receive control failed (result -107) [ 362.582476][ T43] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.582515][ T43] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.582561][ T43] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.582589][ T43] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.582627][ T43] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.582655][ T43] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.592805][ T43] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.592924][ T43] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.813688][T14478] batman_adv: batadv0: Adding interface: syzkaller0 [ 362.813708][T14478] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.813742][T14478] batman_adv: batadv0: Interface activated: syzkaller0 [ 362.866905][T14478] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3077'. [ 362.885196][T14476] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 362.943823][T14486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3079'. [ 362.963919][T14476] batman_adv: batadv0: Removing interface: syzkaller0 [ 362.981639][T14486] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3079'. [ 363.154607][T14490] syzkaller1: entered promiscuous mode [ 363.154637][T14490] syzkaller1: entered allmulticast mode [ 363.274286][T14500] netlink: 'syz.3.3082': attribute type 1 has an invalid length. [ 363.448498][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3086'. [ 363.478595][T14506] 8021q: adding VLAN 0 to HW filter on device bond12 [ 363.491853][T14506] bond11: (slave bond12): making interface the new active one [ 363.492379][T14506] bond11: (slave bond12): Enslaving as an active interface with an up link [ 363.517713][T14500] bond11: (slave gretap1): Enslaving as a backup interface with an up link [ 363.559700][T14509] bond10: option ad_user_port_key: invalid value (65535) [ 363.559728][T14509] bond10: option ad_user_port_key: allowed values 0 - 1023 [ 363.583583][T14509] bond10 (unregistering): Released all slaves [ 364.276816][T14548] IPv6: NLM_F_CREATE should be specified when creating new route [ 364.806403][T14572] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3100'. [ 364.808242][T14572] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 365.716033][T14588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 365.812204][T14612] netlink: 'syz.3.3110': attribute type 10 has an invalid length. [ 365.812233][T14612] netlink: 55 bytes leftover after parsing attributes in process `syz.3.3110'. [ 366.240133][T14626] tipc: Failed to remove unknown binding: 66,0,0/3312183242:3548961634/3548961636 [ 366.240170][T14626] tipc: Failed to remove unknown binding: 66,0,0/3312183242:3548961634/3548961635 [ 366.241419][T14626] tipc: Failed to remove unknown binding: 66,0,0/3312183242:3548961634/3548961636 [ 366.241450][T14626] tipc: Failed to remove unknown binding: 66,0,0/3312183242:3548961634/3548961635 [ 366.441210][ C0] bridge0: port 4(batadv0) entered forwarding state [ 366.441237][ C0] bridge0: topology change detected, propagating [ 366.441636][ C0] bridge0: port 3(veth0) entered forwarding state [ 366.441656][ C0] bridge0: topology change detected, propagating [ 366.441854][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.441871][ C0] bridge0: topology change detected, propagating [ 366.442045][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.442063][ C0] bridge0: topology change detected, propagating [ 367.365408][T14655] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 367.378519][T14555] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.472884][T14637] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 367.548182][T14655] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3118'. [ 367.950709][T14674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3124'. [ 368.052941][T14677] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3125'. [ 368.177442][T14685] bond15: (slave bridge6): Enslaving as an active interface with an up link [ 368.231423][T14677] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3125'. [ 368.233357][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3128'. [ 368.235312][T14677] bond15: entered promiscuous mode [ 368.235335][T14677] bridge6: entered promiscuous mode [ 368.237723][T14677] bond15: entered allmulticast mode [ 368.237906][T14677] bridge6: entered allmulticast mode [ 368.239253][T14677] 8021q: adding VLAN 0 to HW filter on device bond15 [ 368.385460][T14695] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1709664147/1709664149 [ 368.385497][T14695] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1709664147/1709664148 [ 368.386358][T14695] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1709664147/1709664148 [ 368.386407][T14695] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1709664147/1709664149 [ 368.386433][T14695] tipc: Failed to remove unknown binding: 66,0,0/2886997162:1709664147/1709664148 [ 368.585029][T14699] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3130'. [ 368.743465][T14707] netlink: 'syz.2.3133': attribute type 1 has an invalid length. [ 368.822085][T14707] bond5: (slave veth21): Enslaving as an active interface with a down link [ 368.858934][T14707] bond5: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 368.943915][T14712] syzkaller0: entered promiscuous mode [ 368.943943][T14712] syzkaller0: entered allmulticast mode [ 369.207133][T14711] tipc: Failed to remove unknown binding: 66,1,1/3312183242:2274462355/2274462357 [ 369.239780][T14722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.350246][T14725] syz_tun: entered promiscuous mode [ 369.350612][T14725] vlan2: entered promiscuous mode [ 369.410277][T14727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3141'. [ 369.410302][T14727] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3141'. [ 370.985685][T14783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3163'. [ 371.068690][T14783] 8021q: adding VLAN 0 to HW filter on device bond13 [ 371.091696][T14787] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 371.102572][T14787] bond13: (slave batadv1): Enslaving as an active interface with an up link [ 371.229902][T14783] bond13 (unregistering): (slave batadv1): Releasing backup interface [ 371.250300][T14783] bond13 (unregistering): Released all slaves [ 371.364599][T14786] syzkaller1: entered allmulticast mode [ 371.413925][T14804] netlink: 'syz.0.3167': attribute type 39 has an invalid length. [ 371.435494][T14792] syzkaller1: entered promiscuous mode [ 371.569125][T14807] xt_ipcomp: unknown flags 1D [ 371.996441][T14822] tipc: Enabled bearer , priority 0 [ 371.996604][T14824] syzkaller0: entered promiscuous mode [ 371.996625][T14824] syzkaller0: entered allmulticast mode [ 372.032926][T14821] tipc: Resetting bearer [ 372.109118][T14821] tipc: Disabling bearer [ 372.992999][T14854] syzkaller1: entered promiscuous mode [ 372.993026][T14854] syzkaller1: entered allmulticast mode [ 373.662856][T14876] sch_fq: defrate 3 ignored. [ 373.664043][T14876] syzkaller0: entered promiscuous mode [ 373.664065][T14876] syzkaller0: entered allmulticast mode [ 373.955251][T14885] syzkaller0: entered promiscuous mode [ 373.955277][T14885] syzkaller0: entered allmulticast mode [ 373.974173][T14887] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3198'. [ 374.102585][T14889] syzkaller0: entered promiscuous mode [ 374.102610][T14889] syzkaller0: entered allmulticast mode [ 374.217148][T14893] netlink: 'syz.2.3201': attribute type 6 has an invalid length. [ 374.264578][T14895] syzkaller0: entered promiscuous mode [ 374.264605][T14895] syzkaller0: entered allmulticast mode [ 374.522091][T14903] syzkaller0: entered promiscuous mode [ 374.522117][T14903] syzkaller0: entered allmulticast mode [ 374.678140][T14910] syzkaller1: entered promiscuous mode [ 374.678167][T14910] syzkaller1: entered allmulticast mode [ 374.828332][T14924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3214'. [ 375.135772][T14931] syzkaller0: entered promiscuous mode [ 375.135798][T14931] syzkaller0: entered allmulticast mode [ 375.716332][T14955] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3228'. [ 377.027915][T15011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3242'. [ 377.027947][T15011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3242'. [ 377.027968][T15011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3242'. [ 377.233104][T15019] syzkaller0: entered promiscuous mode [ 377.233131][T15019] syzkaller0: entered allmulticast mode [ 377.357475][T15022] bond6: (slave syz_tun): Removing an active aggregator [ 377.358181][T15022] bond6: (slave syz_tun): Releasing backup interface [ 377.368102][T15022] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 377.411034][T15022] team0: Port device xfrm0 added [ 377.424951][T15022] tipc: Enabled bearer , priority 0 [ 377.611766][T15030] bond10: (slave vlan0): making interface the new active one [ 377.612882][T15030] bond10: (slave vlan0): Enslaving as an active interface with an up link [ 377.618969][T15039] ip_tables: iptables: counters copy to user failed while replacing table [ 377.626977][T15039] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3252'. [ 377.748817][T15030] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:a8aa:aaff:feaa:aa17 error=-28 [ 377.970035][T15048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3255'. [ 377.985266][T15050] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3256'. [ 378.026779][T15052] netlink: ct family unspecified [ 378.026827][T15052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.116811][T15054] batman_adv: batadv0: Adding interface: veth0 [ 378.116832][T15054] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.116985][T15054] batman_adv: batadv0: Interface activated: veth0 [ 378.120376][T15054] batman_adv: batadv0: Interface deactivated: veth0 [ 378.120399][T15054] batman_adv: batadv0: Removing interface: veth0 [ 378.353985][T15030] infiniband syz0: set active [ 378.354202][T15030] infiniband syz0: added bond0 [ 378.415014][T15062] syzkaller0: entered promiscuous mode [ 378.415038][T15062] syzkaller0: entered allmulticast mode [ 378.462682][T15062] tipc: Enabled bearer , priority 0 [ 378.494656][T15060] tipc: Resetting bearer [ 378.511985][T15030] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 378.512049][T15030] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 378.512091][T15030] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 378.587610][T15060] tipc: Disabling bearer [ 378.610918][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.637866][T15030] RDS/IB: syz0: added [ 378.637926][T15030] smc: adding ib device syz0 with port count 1 [ 378.637945][T15030] smc: ib device syz0 port 1 has no pnetid [ 378.804646][T15072] syzkaller1: entered promiscuous mode [ 378.804672][T15072] syzkaller1: entered allmulticast mode [ 378.808760][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3265'. [ 379.140942][T15085] bridge0: port 1(syz_tun) entered blocking state [ 379.141458][T15085] bridge0: port 1(syz_tun) entered disabled state [ 379.141643][T15085] syz_tun: entered allmulticast mode [ 379.241457][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 379.482124][ T5632] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 379.482521][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 379.786572][T15101] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3273'. [ 380.636602][T15117] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 380.825483][T15117] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.855860][T15117] 8021q: adding VLAN 0 to HW filter on device bond11 [ 380.859353][T15117] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 380.917539][T15118] netlink: 'syz.3.3280': attribute type 3 has an invalid length. [ 380.917810][T15118] netlink: 'syz.3.3280': attribute type 3 has an invalid length. [ 380.987883][ T50] ip6_tunnel: 8 xmit: Local address not yet configured! [ 381.062229][T15123] syzkaller0: entered promiscuous mode [ 381.062258][T15123] syzkaller0: entered allmulticast mode [ 381.066017][T15121] syzkaller0: entered promiscuous mode [ 381.066042][T15121] syzkaller0: entered allmulticast mode [ 381.298101][T15139] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3285'. [ 381.473546][T15145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3285'. [ 381.770179][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3290'. [ 383.775964][T15140] bridge11: entered promiscuous mode [ 383.775991][T15140] bridge11: entered allmulticast mode [ 383.778573][T15140] team0: Port device bridge11 added [ 383.786930][T15141] bridge0: port 4(team0) entered blocking state [ 383.787184][T15141] bridge0: port 4(team0) entered disabled state [ 383.794501][T15141] team0: entered allmulticast mode [ 383.794575][T15141] team_slave_0: entered allmulticast mode [ 383.836236][T15141] team0: entered promiscuous mode [ 383.836261][T15141] team_slave_0: entered promiscuous mode [ 383.839115][T15141] bridge0: port 4(team0) entered blocking state [ 383.839356][T15141] bridge0: port 4(team0) entered forwarding state [ 384.159099][T15170] x_tables: duplicate underflow at hook 1 [ 384.272436][T15176] netlink: 'syz.4.3299': attribute type 39 has an invalid length. [ 384.361754][T15181] ip_tables: iptables: counters copy to user failed while replacing table [ 384.406711][T15183] ip6gretap1: entered allmulticast mode [ 384.499559][T15188] syzkaller0: entered promiscuous mode [ 384.499585][T15188] syzkaller0: entered allmulticast mode [ 385.031939][T15215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3310'. [ 385.034653][T15215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3310'. [ 385.161541][ C0] ip6_tunnel: 8 xmit: Local address not yet configured! [ 385.240134][T15226] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3315'. [ 385.258577][T15226] vlan2: entered promiscuous mode [ 385.339924][T15230] syzkaller0: entered promiscuous mode [ 385.339948][T15230] syzkaller0: entered allmulticast mode [ 385.924562][T15239] syzkaller0: entered promiscuous mode [ 385.924587][T15239] syzkaller0: entered allmulticast mode [ 386.014725][T15243] netlink: 'syz.2.3322': attribute type 1 has an invalid length. [ 386.073767][T15243] 8021q: adding VLAN 0 to HW filter on device bond6 [ 386.079867][T15247] veth0_to_bond: left promiscuous mode [ 386.103134][T15247] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 386.105231][T15248] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 386.179964][T15243] bond6: entered promiscuous mode [ 386.179993][T15243] bond6: entered allmulticast mode [ 386.220332][T15243] macvlan2: entered promiscuous mode [ 386.220358][T15243] macvlan2: entered allmulticast mode [ 386.225370][T15243] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 386.467814][T15261] syzkaller0: entered promiscuous mode [ 386.467847][T15261] syzkaller0: entered allmulticast mode [ 386.679458][T15268] syzkaller0: entered promiscuous mode [ 386.679485][T15268] syzkaller0: entered allmulticast mode [ 386.755313][T15271] lo: entered allmulticast mode [ 386.888068][T15270] lo: left allmulticast mode [ 387.004621][T15281] ip_tables: iptables: counters copy to user failed while replacing table [ 387.398529][T15293] syzkaller1: entered promiscuous mode [ 387.398555][T15293] syzkaller1: entered allmulticast mode [ 387.525771][T15297] ip_tables: iptables: counters copy to user failed while replacing table [ 387.588542][T15300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3343'. [ 387.700693][T15300] macvlan2: entered promiscuous mode [ 387.700721][T15300] macvlan2: entered allmulticast mode [ 387.715981][T15300] bond7: entered promiscuous mode [ 387.716849][T15300] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 387.739964][T15300] bond7: left promiscuous mode [ 387.758189][T15197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 387.819997][T15308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3346'. [ 388.045945][T15321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3349'. [ 388.045975][T15321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3349'. [ 388.109982][T15308] 8021q: adding VLAN 0 to HW filter on device bond14 [ 388.161970][T15308] bond14 (unregistering): Released all slaves [ 388.201766][T15314] syzkaller0: entered promiscuous mode [ 388.201791][T15314] syzkaller0: entered allmulticast mode [ 388.316617][T15330] syzkaller0: entered promiscuous mode [ 388.316646][T15330] syzkaller0: entered allmulticast mode [ 388.446588][T15332] syzkaller0: entered promiscuous mode [ 388.446613][T15332] syzkaller0: entered allmulticast mode [ 388.626698][T15342] netlink: 'syz.0.3359': attribute type 1 has an invalid length. [ 388.664874][T15338] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 388.785865][T15346] bond16: (slave bridge7): Enslaving as a backup interface with an up link [ 388.813325][T15342] macvlan4: entered promiscuous mode [ 388.813352][T15342] macvlan4: entered allmulticast mode [ 388.814022][T15342] bond16: entered promiscuous mode [ 388.814042][T15342] bridge7: entered promiscuous mode [ 388.815068][T15342] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 388.816248][T15342] bond16: left promiscuous mode [ 388.816268][T15342] bridge7: left promiscuous mode [ 389.107545][T15360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3364'. [ 389.461753][T15364] syzkaller0: entered promiscuous mode [ 389.461780][T15364] syzkaller0: entered allmulticast mode [ 390.282111][T15399] ip_tables: iptables: counters copy to user failed while replacing table [ 393.961623][ C0] ip6_tunnel: 8 xmit: Local address not yet configured! [ 394.671961][T15490] TC_ACT_REPEAT abuse ? [ 394.880202][T15499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3403'. [ 394.928505][T15500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3402'. [ 395.022392][T15502] syzkaller0: entered promiscuous mode [ 395.022417][T15502] syzkaller0: entered allmulticast mode [ 395.160770][ T5632] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 395.162671][ T5632] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 395.180710][ T5632] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 395.231673][T15509] Bluetooth: ISO socket layer initialized [ 398.100779][T15504] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.419017][T15549] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3418'. [ 398.445252][T15549] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 399.069667][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3427'. [ 399.069706][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3427'. [ 399.170315][T15580] syzkaller0: entered promiscuous mode [ 399.170340][T15580] syzkaller0: entered allmulticast mode [ 399.306374][T15584] netlink: 'syz.1.3430': attribute type 29 has an invalid length. [ 399.700386][T15593] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3432'. [ 399.700766][T15594] syzkaller0: entered promiscuous mode [ 399.700788][T15594] syzkaller0: entered allmulticast mode [ 399.905703][T15599] syzkaller0: entered promiscuous mode [ 399.905730][T15599] syzkaller0: entered allmulticast mode [ 400.361848][ T5632] Bluetooth: hci3: command 0x0406 tx timeout [ 400.595412][T15603] ip_tables: iptables: counters copy to user failed while replacing table [ 400.729800][T15608] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3439'. [ 401.350287][T15605] macsec0: entered promiscuous mode [ 401.374747][T15608] macsec0 (unregistering): left promiscuous mode [ 401.719104][T15622] ip_tables: iptables: counters copy to user failed while replacing table [ 401.719742][T15623] Bluetooth: MGMT ver 1.23 [ 401.738846][T15623] netlink: zone id is out of range [ 401.797350][T15627] syzkaller0: entered promiscuous mode [ 401.797378][T15627] syzkaller0: entered allmulticast mode [ 401.947516][T15638] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3449'. [ 402.395962][T15649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3453'. [ 402.396000][T15649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3453'. [ 402.409516][T15649] bridge4: entered promiscuous mode [ 402.409579][T15649] bridge4: entered allmulticast mode [ 402.592094][T15656] syzkaller0: entered promiscuous mode [ 402.592120][T15656] syzkaller0: entered allmulticast mode [ 403.140664][T15674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3462'. [ 403.172621][T15676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3463'. [ 403.259231][T15676] netlink: 'syz.4.3463': attribute type 5 has an invalid length. [ 403.259258][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3463'. [ 403.416454][T15682] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 403.416602][T15682] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 403.552963][T15693] syzkaller0: entered promiscuous mode [ 403.552989][T15693] syzkaller0: entered allmulticast mode [ 403.622090][T15697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3470'. [ 403.795624][T15702] bond5: entered promiscuous mode [ 403.795650][T15702] bond5: entered allmulticast mode [ 403.801697][ T4932] Bluetooth: hci4: command 0x0406 tx timeout [ 404.190817][T15716] syzkaller0: entered promiscuous mode [ 404.190843][T15716] syzkaller0: entered allmulticast mode [ 404.216345][T15718] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3479'. [ 404.256604][T15716] tipc: Enabled bearer , priority 0 [ 404.270612][T15715] tipc: Resetting bearer [ 404.303842][T15722] Bluetooth: MGMT ver 1.23 [ 404.378818][T15715] tipc: Disabling bearer [ 404.413783][T15727] netlink: 'syz.3.3482': attribute type 1 has an invalid length. [ 404.501436][T15727] 8021q: adding VLAN 0 to HW filter on device bond14 [ 404.735825][T15731] bond14: (slave veth17): Enslaving as an active interface with a down link [ 404.888541][T15727] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 404.898297][T15727] bond14: (slave batadv2): making interface the new active one [ 404.910748][T15727] batadv2: entered promiscuous mode [ 404.917930][T15727] bond14: (slave batadv2): Enslaving as an active interface with an up link [ 405.161902][T15735] bond14 (unregistering): (slave veth17): Releasing active interface [ 405.197082][T15735] bond14 (unregistering): (slave batadv2): Releasing active interface [ 405.197126][T15735] batadv2: left promiscuous mode [ 405.237838][T15735] bond14 (unregistering): Released all slaves [ 405.313448][T15723] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 405.489076][T15750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3487'. [ 405.960739][T15764] ip_tables: iptables: counters copy to user failed while replacing table [ 406.074032][T15769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3494'. [ 406.108853][T15769] 8021q: adding VLAN 0 to HW filter on device bond11 [ 406.141521][T15769] macvtap1: entered allmulticast mode [ 406.162020][T15769] bond11: (slave sit2): refused to change device type [ 407.110982][T15783] netlink: 'syz.4.3498': attribute type 1 has an invalid length. [ 407.412115][T15787] bond12: entered promiscuous mode [ 407.412145][T15787] bond12: entered allmulticast mode [ 407.421487][T15787] 8021q: adding VLAN 0 to HW filter on device bond12 [ 407.493363][T15788] bridge6: entered promiscuous mode [ 407.493553][T15788] bridge6: entered allmulticast mode [ 407.494229][T15788] bond12: (slave bridge6): Enslaving as a backup interface with an up link [ 407.526786][T12976] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 407.615004][T15789] bridge7: entered promiscuous mode [ 407.615211][T15789] bridge7: entered allmulticast mode [ 407.627601][T15789] bond12: (slave bridge7): Enslaving as a backup interface with a down link [ 407.652751][ T84] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 407.680036][T15789] bridge8: entered promiscuous mode [ 407.680222][T15789] bridge8: entered allmulticast mode [ 407.693232][T15789] bond12: (slave bridge8): Enslaving as a backup interface with a down link [ 407.770618][T15794] syzkaller0: entered promiscuous mode [ 407.770646][T15794] syzkaller0: entered allmulticast mode [ 407.825446][T15800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3504'. [ 407.828534][T15800] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3504'. [ 408.022049][T15810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3507'. [ 408.061583][T15810] vlan4: entered allmulticast mode [ 408.061607][T15810] bridge12: entered allmulticast mode [ 408.066242][T15810] bridge12: port 1(erspan0) entered blocking state [ 408.066479][T15810] bridge12: port 1(erspan0) entered disabled state [ 408.066632][T15810] erspan0: entered allmulticast mode [ 408.068684][T15810] erspan0: entered promiscuous mode [ 408.069733][T15810] bridge12: port 1(erspan0) entered blocking state [ 408.069859][T15810] bridge12: port 1(erspan0) entered forwarding state [ 408.617410][T15829] tipc: Enabled bearer , priority 0 [ 408.631448][T15829] syzkaller0: entered promiscuous mode [ 408.631473][T15829] syzkaller0: entered allmulticast mode [ 408.716112][T15829] tipc: Resetting bearer [ 408.727544][T15828] tipc: Resetting bearer [ 408.766885][T15828] tipc: Disabling bearer [ 408.910932][T15838] netlink: 'syz.0.3514': attribute type 1 has an invalid length. [ 408.962803][T15838] 8021q: adding VLAN 0 to HW filter on device bond17 [ 409.054851][T15838] bond17: (slave veth23): Enslaving as an active interface with a down link [ 409.076475][T15838] syz_tun: left allmulticast mode [ 409.076504][T15838] syz_tun: left promiscuous mode [ 409.076736][T15838] bridge0: port 1(syz_tun) entered disabled state [ 409.100057][T15838] bond17: (slave syz_tun): making interface the new active one [ 409.102098][T15838] syz_tun: entered promiscuous mode [ 409.102467][T15838] bond17: (slave syz_tun): Enslaving as an active interface with an up link [ 409.215302][T15838] bond17: (slave bridge8): Enslaving as an active interface with a down link [ 409.971296][ C0] ip6_tunnel: 8 xmit: Local address not yet configured! [ 410.080664][T15854] syzkaller0: entered promiscuous mode [ 410.080689][T15854] syzkaller0: entered allmulticast mode [ 411.308277][T15884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3529'. [ 411.609135][T15893] netlink: 'syz.0.3533': attribute type 1 has an invalid length. [ 411.635828][T15893] bond18: entered promiscuous mode [ 411.636189][T15893] 8021q: adding VLAN 0 to HW filter on device bond18 [ 411.636739][T15891] syzkaller0: entered promiscuous mode [ 411.636759][T15891] syzkaller0: entered allmulticast mode [ 411.740186][T15893] bond18: (slave bridge9): making interface the new active one [ 411.740214][T15893] bridge9: entered promiscuous mode [ 411.759155][T15893] bond18: (slave bridge9): Enslaving as an active interface with an up link [ 411.804313][T15831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 412.204333][T15915] syzkaller0: entered promiscuous mode [ 412.204358][T15915] syzkaller0: entered allmulticast mode [ 412.242425][T15918] netlink: 'syz.0.3542': attribute type 1 has an invalid length. [ 412.340254][T15918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3542'. [ 412.390481][T15918] 8021q: adding VLAN 0 to HW filter on device bond19 [ 412.440994][T15921] 8021q: adding VLAN 0 to HW filter on device bond19 [ 412.479143][T15921] bond19: (slave geneve2): making interface the new active one [ 412.492357][T15921] bond19: (slave geneve2): Enslaving as an active interface with an up link [ 412.546904][T15923] bond6: (slave macvlan3): Error -22 calling dev_set_mtu [ 412.602376][T12976] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 412.602504][T12976] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 412.602543][T12976] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 412.602580][T12976] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 412.650313][T15928] syzkaller0: entered promiscuous mode [ 412.650339][T15928] syzkaller0: entered allmulticast mode [ 412.705943][T15930] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 412.852850][T15934] syzkaller0: entered promiscuous mode [ 412.852874][T15934] syzkaller0: entered allmulticast mode [ 413.090786][T15944] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 413.090886][ C0] IPVS: wrr: FWM 3 0x00000003 - no destination available: all destinations are overloaded [ 413.482791][T15954] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 414.080714][T15976] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3560'. [ 414.349922][T15977] bridge12: port 1(erspan0) entered disabled state [ 414.700433][T15977] bridge0: port 4(team0) entered disabled state [ 414.700581][T15977] bridge0: port 3(bond0) entered disabled state [ 414.702051][T15977] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.703579][T15977] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.780973][T15898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.868262][T16000] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3564'. [ 415.081397][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 415.218728][T15977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.244866][T15977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.341854][T12976] [ 415.344260][T12976] ====================================================== [ 415.351330][T12976] WARNING: possible circular locking dependency detected [ 415.358468][T12976] syzkaller #0 Not tainted [ 415.362917][T12976] ------------------------------------------------------ [ 415.370022][T12976] kworker/u8:10/12976 is trying to acquire lock: [ 415.376383][T12976] ffff8880381b5070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 415.385651][T12976] [ 415.385651][T12976] but task is already holding lock: [ 415.393057][T12976] ffff88807f1b7558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 415.403096][T12976] [ 415.403096][T12976] which lock already depends on the new lock. [ 415.403096][T12976] [ 415.413618][T12976] [ 415.413618][T12976] the existing dependency chain (in reverse order) is: [ 415.422699][T12976] [ 415.422699][T12976] -> #1 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}: [ 415.431124][T12976] _raw_spin_lock+0x2e/0x40 [ 415.436288][T12976] sch_direct_xmit+0x15f/0x4c0 [ 415.441621][T12976] __dev_queue_xmit+0x179a/0x3920 [ 415.447301][T12976] hsr_forward_skb+0x1701/0x2b70 [ 415.452808][T12976] hsr_dev_xmit+0x242/0x360 [ 415.457867][T12976] dev_hard_start_xmit+0x2cd/0x830 [ 415.463554][T12976] __dev_queue_xmit+0x14d1/0x3920 [ 415.469167][T12976] ip6_output+0x337/0x540 [ 415.474174][T12976] NF_HOOK+0x177/0x4f0 [ 415.478957][T12976] mld_sendpack+0x890/0xe10 [ 415.484028][T12976] mld_ifc_work+0x842/0xd60 [ 415.489100][T12976] process_scheduled_works+0xc3d/0x1630 [ 415.495278][T12976] worker_thread+0xa47/0xfb0 [ 415.500439][T12976] kthread+0x38b/0x480 [ 415.505096][T12976] ret_from_fork+0x514/0xb70 [ 415.510303][T12976] ret_from_fork_asm+0x1a/0x30 [ 415.515667][T12976] [ 415.515667][T12976] -> #0 (&hsr->seqnr_lock){+.-.}-{3:3}: [ 415.523462][T12976] __lock_acquire+0x164c/0x2de0 [ 415.528915][T12976] lock_acquire+0x115/0x350 [ 415.533989][T12976] _raw_spin_lock_bh+0x36/0x50 [ 415.539317][T12976] hsr_dev_xmit+0x237/0x360 [ 415.544378][T12976] dev_hard_start_xmit+0x2cd/0x830 [ 415.550067][T12976] __dev_queue_xmit+0x14d1/0x3920 [ 415.555659][T12976] NF_HOOK+0x33a/0x3c0 [ 415.560377][T12976] arp_xmit+0x16c/0x270 [ 415.565092][T12976] arp_solicit+0xbdc/0xe40 [ 415.570072][T12976] __neigh_event_send+0xf0c/0x1510 [ 415.575811][T12976] neigh_resolve_output+0x1a1/0x720 [ 415.581649][T12976] ip_finish_output2+0xc4b/0x10b0 [ 415.587343][T12976] ip_output+0x29f/0x450 [ 415.592152][T12976] iptunnel_xmit+0x626/0xd10 [ 415.597399][T12976] ip_tunnel_xmit+0x195b/0x2040 [ 415.602819][T12976] erspan_xmit+0xb6a/0x1620 [ 415.607946][T12976] dev_hard_start_xmit+0x2cd/0x830 [ 415.613631][T12976] sch_direct_xmit+0x257/0x4c0 [ 415.618969][T12976] __dev_queue_xmit+0x179a/0x3920 [ 415.624595][T12976] alb_send_lp_vid+0x348/0x550 [ 415.630091][T12976] alb_send_learning_packets+0x12c/0x300 [ 415.636296][T12976] bond_alb_monitor+0x3da/0x1840 [ 415.641803][T12976] process_scheduled_works+0xc3d/0x1630 [ 415.647909][T12976] worker_thread+0xa47/0xfb0 [ 415.653047][T12976] kthread+0x38b/0x480 [ 415.657673][T12976] ret_from_fork+0x514/0xb70 [ 415.662807][T12976] ret_from_fork_asm+0x1a/0x30 [ 415.668113][T12976] [ 415.668113][T12976] other info that might help us debug this: [ 415.668113][T12976] [ 415.679144][T12976] Possible unsafe locking scenario: [ 415.679144][T12976] [ 415.686688][T12976] CPU0 CPU1 [ 415.692063][T12976] ---- ---- [ 415.697451][T12976] lock(&qdisc_xmit_lock_key#4); [ 415.702493][T12976] lock(&hsr->seqnr_lock); [ 415.709522][T12976] lock(&qdisc_xmit_lock_key#4); [ 415.717086][T12976] lock(&hsr->seqnr_lock); [ 415.721601][T12976] [ 415.721601][T12976] *** DEADLOCK *** [ 415.721601][T12976] [ 415.729838][T12976] locks held by kworker/u8:10/12976: 11, last CPU#0: [ 415.736598][T12976] #0: ffff888013520940 ((wq_completion)bond4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.747537][T12976] #1: ffffc90006c8fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 415.760438][T12976] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf0/0x1840 [ 415.770060][T12976] #3: ffffffff8fd5c940 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920 [ 415.780011][T12976] #4: ffff888035570228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x114e/0x3920 [ 415.792660][T12976] #5: ffff88807f1b7558 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 415.802974][T12976] #6: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 415.811999][T12976] #7: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 415.821769][T12976] #8: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 415.830578][T12976] #9: ffffffff8fd5c940 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920 [ 415.840519][T12976] #10: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 415.849758][T12976] [ 415.849758][T12976] stack backtrace: [ 415.855815][T12976] CPU: 0 UID: 0 PID: 12976 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 415.865487][T12976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 415.875558][T12976] Workqueue: bond4 bond_alb_monitor [ 415.880797][T12976] Call Trace: [ 415.884088][T12976] [ 415.887098][T12976] dump_stack_lvl+0xe8/0x150 [ 415.891771][T12976] print_circular_bug+0x2e2/0x300 [ 415.896815][T12976] check_noncircular+0x12f/0x150 [ 415.901770][T12976] __lock_acquire+0x164c/0x2de0 [ 415.906638][T12976] ? __siphash_unaligned+0x28d/0x3e0 [ 415.912083][T12976] ? __flow_hash_from_keys+0x431/0x6c0 [ 415.917638][T12976] lock_acquire+0x115/0x350 [ 415.922150][T12976] ? hsr_dev_xmit+0x237/0x360 [ 415.926848][T12976] ? hsr_dev_xmit+0x237/0x360 [ 415.931539][T12976] _raw_spin_lock_bh+0x36/0x50 [ 415.936377][T12976] ? hsr_dev_xmit+0x237/0x360 [ 415.941109][T12976] hsr_dev_xmit+0x237/0x360 [ 415.945648][T12976] ? hsr_dev_xmit+0x2d/0x360 [ 415.950257][T12976] dev_hard_start_xmit+0x2cd/0x830 [ 415.955387][T12976] ? validate_xmit_skb+0xec3/0x1a00 [ 415.960630][T12976] __dev_queue_xmit+0x14d1/0x3920 [ 415.965702][T12976] ? __dev_queue_xmit+0x29b/0x3920 [ 415.970839][T12976] ? lockdep_hardirqs_on+0x7b/0x110 [ 415.976139][T12976] ? __lock_acquire+0x747/0x2de0 [ 415.981121][T12976] ? arpt_do_table+0x25b/0x1f90 [ 415.986098][T12976] ? __pfx___dev_queue_xmit+0x10/0x10 [ 415.991513][T12976] ? __pfx_arpt_do_table+0x10/0x10 [ 415.996680][T12976] ? NF_HOOK+0xa2/0x3c0 [ 416.000897][T12976] NF_HOOK+0x33a/0x3c0 [ 416.004978][T12976] ? __pfx_arp_xmit_finish+0x10/0x10 [ 416.010281][T12976] ? NF_HOOK+0xa2/0x3c0 [ 416.014545][T12976] ? __pfx_NF_HOOK+0x10/0x10 [ 416.019150][T12976] ? lock_acquire+0x115/0x350 [ 416.023843][T12976] ? __pfx_arp_xmit_finish+0x10/0x10 [ 416.029155][T12976] ? inet_addr_type_dev_table+0x25/0x190 [ 416.034839][T12976] arp_xmit+0x16c/0x270 [ 416.039032][T12976] ? arp_xmit+0x23/0x270 [ 416.043291][T12976] arp_solicit+0xbdc/0xe40 [ 416.047733][T12976] ? __pfx_arp_solicit+0x10/0x10 [ 416.052695][T12976] ? __neigh_event_send+0xea4/0x1510 [ 416.058028][T12976] ? __pfx_arp_solicit+0x10/0x10 [ 416.063023][T12976] __neigh_event_send+0xf0c/0x1510 [ 416.068158][T12976] neigh_resolve_output+0x1a1/0x720 [ 416.073383][T12976] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 416.078460][T12976] ? ip_finish_output2+0x3de/0x10b0 [ 416.083675][T12976] ip_finish_output2+0xc4b/0x10b0 [ 416.088736][T12976] ? ip_skb_dst_mtu+0x811/0xa50 [ 416.093596][T12976] ? ip_finish_output2+0x3de/0x10b0 [ 416.098812][T12976] ? ip_finish_output+0x40b/0x530 [ 416.103850][T12976] ip_output+0x29f/0x450 [ 416.108129][T12976] ? ip_output+0x5a/0x450 [ 416.112470][T12976] iptunnel_xmit+0x626/0xd10 [ 416.117184][T12976] ip_tunnel_xmit+0x195b/0x2040 [ 416.122082][T12976] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 416.127415][T12976] ? __gre_xmit+0x106/0x1a0 [ 416.131986][T12976] erspan_xmit+0xb6a/0x1620 [ 416.136530][T12976] ? __pfx_erspan_xmit+0x10/0x10 [ 416.141512][T12976] ? __lock_acquire+0x747/0x2de0 [ 416.146465][T12976] dev_hard_start_xmit+0x2cd/0x830 [ 416.151605][T12976] sch_direct_xmit+0x257/0x4c0 [ 416.156393][T12976] ? __pfx_sch_direct_xmit+0x10/0x10 [ 416.161696][T12976] ? __switch_to_asm+0x50/0x70 [ 416.166483][T12976] __dev_queue_xmit+0x179a/0x3920 [ 416.171528][T12976] ? __dev_queue_xmit+0x29b/0x3920 [ 416.176663][T12976] ? __pfx___dev_queue_xmit+0x10/0x10 [ 416.182052][T12976] ? __alloc_skb+0x27a/0x7a0 [ 416.186736][T12976] ? rcu_is_watching+0x16/0xb0 [ 416.191523][T12976] ? __alloc_skb+0x27a/0x7a0 [ 416.196130][T12976] ? trace_kmem_cache_alloc+0x29/0xe0 [ 416.201550][T12976] ? __alloc_skb+0x27a/0x7a0 [ 416.206153][T12976] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 416.212241][T12976] ? __alloc_skb+0x4d0/0x7a0 [ 416.216852][T12976] ? alb_send_lp_vid+0x14e/0x550 [ 416.221806][T12976] alb_send_lp_vid+0x348/0x550 [ 416.226587][T12976] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 416.231936][T12976] alb_send_learning_packets+0x12c/0x300 [ 416.237584][T12976] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 416.243761][T12976] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 416.250508][T12976] bond_alb_monitor+0x3da/0x1840 [ 416.255460][T12976] ? bond_alb_monitor+0xf0/0x1840 [ 416.260517][T12976] ? lock_acquire+0x115/0x350 [ 416.265210][T12976] ? __pfx_bond_alb_monitor+0x10/0x10 [ 416.270598][T12976] ? rcu_is_watching+0x16/0xb0 [ 416.275390][T12976] ? process_scheduled_works+0x97a/0x1630 [ 416.281135][T12976] process_scheduled_works+0xc3d/0x1630 [ 416.286715][T12976] ? trace_contention_end+0x3b/0x160 [ 416.292050][T12976] ? __pfx_process_scheduled_works+0x10/0x10 [ 416.298075][T12976] ? assign_work+0x3cf/0x5d0 [ 416.302707][T12976] worker_thread+0xa47/0xfb0 [ 416.307322][T12976] ? __kthread_parkme+0x71/0x1f0 [ 416.312280][T12976] kthread+0x38b/0x480 [ 416.316376][T12976] ? __pfx_worker_thread+0x10/0x10 [ 416.321505][T12976] ? __pfx_kthread+0x10/0x10 [ 416.326115][T12976] ret_from_fork+0x514/0xb70 [ 416.330733][T12976] ? __pfx_ret_from_fork+0x10/0x10 [ 416.335952][T12976] ? __switch_to+0xc89/0x1420 [ 416.340648][T12976] ? __pfx_kthread+0x10/0x10 [ 416.345244][T12976] ret_from_fork_asm+0x1a/0x30 [ 416.350057][T12976] [ 417.687567][T16000] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 417.690520][T16002] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 417.722084][T12976] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.722123][T12976] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.722183][T12976] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.722210][T12976] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.722243][T12976] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.722269][T12976] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.722302][T12976] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.722330][T12976] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.091531][ T43] syz_tun: left promiscuous mode