last executing test programs: 6.424110601s ago: executing program 0 (id=2918): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r0}, 0x50) socket(0x40000000015, 0x5, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b"], 0xfdef) r2 = socket(0x10, 0x2, 0x0) write(r2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 6.125215541s ago: executing program 3 (id=2921): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x8}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x1}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0x4}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) 6.112108291s ago: executing program 0 (id=2922): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x34, r3}, 0x10) 5.987614703s ago: executing program 1 (id=2923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e701007cdaddb4b47380c988cafb", 0x2b}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7", 0x1b}], 0x2) 5.895318023s ago: executing program 3 (id=2924): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001300)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x100, @ipv4={'\x00', '\xff\xff', @empty}, 0x10001}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @local, 0x1}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100040808004149004001040800", 0x58}], 0x1) 5.705560848s ago: executing program 3 (id=2925): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x306) 5.368884887s ago: executing program 4 (id=2927): socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x26020480) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002540)="9552", 0x2}], 0x1}}], 0x1, 0x4044805) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000001cc0)=[{{&(0x7f0000000300)={0x2, 0x4e23, @empty}, 0x10, &(0x7f0000001fc0)=[{&(0x7f0000004100)="89", 0x1}], 0x1}}], 0x1, 0x2400c040) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00', 0x2}) 2.556141495s ago: executing program 0 (id=2928): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'ipvlan1\x00', {0x2, 0x4e20, @broadcast}}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000000)={r2}) 2.463810256s ago: executing program 1 (id=2929): unshare(0x20040600) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x1021}}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r1], 0xc4}}, 0x8d0) 2.463529774s ago: executing program 4 (id=2930): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x0) 2.178246149s ago: executing program 1 (id=2931): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xb90, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.156259259s ago: executing program 2 (id=2932): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1f, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0022070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x44004000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r1, &(0x7f0000000080), 0x0}, 0x20) r2 = socket$netlink(0x10, 0x3, 0x1) r3 = epoll_create(0x9) epoll_pwait(r3, &(0x7f0000000180)=[{}], 0x1, 0x3, &(0x7f0000000200)={[0xff]}, 0x8) bind$netlink(r2, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11000000040000000400000022"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r4, &(0x7f0000000540)}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a7c000000060a010400000000000000000a0000013c000480380001800a0001006d617463680000002800028010000300709c897c82b1095a67232d630800024000000002090001006d61726b000000000900020073797a32000000000900010073797a31"], 0xa4}, 0x1, 0x0, 0x0, 0x855}, 0x24000840) 1.512519546s ago: executing program 2 (id=2933): socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1}, 0x50) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={r2, 0x58, &(0x7f0000000600)}, 0x10) 1.486445246s ago: executing program 0 (id=2934): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'syztnl0\x00', 0x0}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) 1.459558131s ago: executing program 1 (id=2935): socket$unix(0x1, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x31, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0x1d, 0x0, @gue={{0x2, 0x0, 0x0, 0xff, 0x100}, "b68ed34f131c03080000000020"}}}}, 0x3f) 1.344184559s ago: executing program 4 (id=2936): socket(0xa, 0x1, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)="16", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x4) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x2017be01}) 1.232410506s ago: executing program 2 (id=2937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet(0x2, 0xa, 0x4) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000048000480100001800c0001006e6f747261636b00340001800c0001007061796c6f616400240002800800024000000000080001400000000a080003400000000508000440000000020900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x24, r4, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0xfffffffc, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x4) 1.20119609s ago: executing program 3 (id=2938): poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x1146}], 0x64, 0x400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) write$nci(r0, 0x0, 0x52) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.187705757s ago: executing program 0 (id=2939): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_LIMIT={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000008c0)="05031400d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.006370175s ago: executing program 4 (id=2940): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x38}}, 0x4000800) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x400c840) 911.583722ms ago: executing program 1 (id=2941): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c00020008"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 864.281479ms ago: executing program 2 (id=2942): syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x44, 0x3, 0x8}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x70bd2c, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x3c, 0xfffffffffff7fffd, 0x50}, {0x5, 0x0, 0x100000001, 0x3}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16, @ANYBLOB="01012abd7000000000002b34000202020202020000080026"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 787.681024ms ago: executing program 3 (id=2943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0x6}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48800}, 0x4050) 679.922401ms ago: executing program 0 (id=2944): r0 = socket$igmp6(0xa, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x35, r3}) 678.236686ms ago: executing program 2 (id=2945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x6, 'hsr0\x00', {0x1}, 0x9}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {0x6}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040098}, 0x880) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000004940)=[{{&(0x7f00000001c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000003380)=[{&(0x7f0000000340)=""/236, 0xec}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/122, 0x7a}, {&(0x7f0000002380)=""/4096, 0x1000}], 0x4, &(0x7f00000033c0)=""/222, 0xde}, 0x2}, {{&(0x7f00000034c0)=@x25={0x9, @remote}, 0x80, &(0x7f00000048c0)=[{&(0x7f0000003540)=""/73, 0x49}, {&(0x7f00000035c0)=""/4096, 0x1000}, {&(0x7f00000045c0)=""/210, 0xd2}, {&(0x7f00000046c0)=""/171, 0xab}, {&(0x7f0000004880)}], 0x5}, 0x20be}], 0x2, 0x2, &(0x7f00000049c0)) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x2270bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) 600.594498ms ago: executing program 4 (id=2946): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 336.762974ms ago: executing program 4 (id=2947): ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[], 0x20) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="18010000210001000000000004000000fc010000000000000000000000000000fe80000000000000000000000000000800000005000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe800000f6ffffff00000000000000bbfe8000000000000000000000000000aa7f000001000000000000000000000000fc0200000000000000f0ffffffffffff320200000135000002000200"], 0x118}}, 0x0) 181.246465ms ago: executing program 1 (id=2948): socket$inet6_icmp(0xa, 0x2, 0x3a) shutdown(0xffffffffffffffff, 0x1) connect$rds(0xffffffffffffffff, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfdfcaf6834df2d14e5b8eb", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) 156.800778ms ago: executing program 3 (id=2949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x7, 0x1}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 0s ago: executing program 2 (id=2950): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001e80)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xe9e9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0xa1b92000) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$rds(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x4, @local}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x5, 0x8}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000001880)=""/4112, 0x1010}], 0x1, 0x20}}], 0x48, 0x80}, 0x0) kernel console output (not intermixed with test programs): with an up link [ 95.578302][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.585646][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.593008][ T5629] bridge_slave_0: entered allmulticast mode [ 95.600841][ T5629] bridge_slave_0: entered promiscuous mode [ 95.645136][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.652320][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.660934][ T5627] bridge_slave_0: entered allmulticast mode [ 95.668602][ T5627] bridge_slave_0: entered promiscuous mode [ 95.677054][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.684428][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.691832][ T5629] bridge_slave_1: entered allmulticast mode [ 95.699412][ T5629] bridge_slave_1: entered promiscuous mode [ 95.709443][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.742467][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.750059][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.757359][ T5627] bridge_slave_1: entered allmulticast mode [ 95.764965][ T5627] bridge_slave_1: entered promiscuous mode [ 95.795877][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.819781][ T5628] team0: Port device team_slave_0 added [ 95.827951][ T5626] team0: Port device team_slave_0 added [ 95.837239][ T5626] team0: Port device team_slave_1 added [ 95.868468][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.892620][ T5628] team0: Port device team_slave_1 added [ 95.915759][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.928849][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.957625][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.987969][ T5630] team0: Port device team_slave_0 added [ 96.042375][ T5630] team0: Port device team_slave_1 added [ 96.061133][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.068460][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.094733][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.109968][ T5627] team0: Port device team_slave_0 added [ 96.118348][ T5629] team0: Port device team_slave_0 added [ 96.137145][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.144490][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.170678][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.183363][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.190660][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.216952][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.239525][ T5627] team0: Port device team_slave_1 added [ 96.247419][ T5629] team0: Port device team_slave_1 added [ 96.265733][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.272866][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.299376][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.355692][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.362920][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.389548][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.403092][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.410264][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.436596][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.472445][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.479649][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.505824][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.549056][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.556262][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.582489][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.594520][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.601578][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.627974][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.659477][ T5626] hsr_slave_0: entered promiscuous mode [ 96.666404][ T5626] hsr_slave_1: entered promiscuous mode [ 96.674275][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.681604][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.708084][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.741848][ T5628] hsr_slave_0: entered promiscuous mode [ 96.748553][ T5628] hsr_slave_1: entered promiscuous mode [ 96.755188][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 96.761822][ T5628] Cannot create hsr debugfs directory [ 96.842947][ T5630] hsr_slave_0: entered promiscuous mode [ 96.850188][ T5630] hsr_slave_1: entered promiscuous mode [ 96.856617][ T5630] debugfs: 'hsr0' already exists in 'hsr' [ 96.862411][ T5630] Cannot create hsr debugfs directory [ 96.940278][ T5627] hsr_slave_0: entered promiscuous mode [ 96.947279][ T5627] hsr_slave_1: entered promiscuous mode [ 96.953598][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 96.959472][ T5627] Cannot create hsr debugfs directory [ 96.971548][ T5629] hsr_slave_0: entered promiscuous mode [ 96.978366][ T5629] hsr_slave_1: entered promiscuous mode [ 96.984909][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 96.990780][ T5629] Cannot create hsr debugfs directory [ 97.324242][ T50] Bluetooth: hci3: command tx timeout [ 97.324266][ T5631] Bluetooth: hci0: command tx timeout [ 97.332527][ T5639] Bluetooth: hci1: command tx timeout [ 97.405157][ T5639] Bluetooth: hci4: command tx timeout [ 97.405191][ T5631] Bluetooth: hci2: command tx timeout [ 97.613627][ T5626] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.635128][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.645308][ T5626] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.657870][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.666778][ T5626] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.678392][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.686772][ T5626] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.699405][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.784172][ T5630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.796924][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.806818][ T5630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.820161][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.836738][ T5630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.847240][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.855660][ T5630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.867949][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.973451][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.988547][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.997598][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.007825][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.017280][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.026877][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.035186][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.050257][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.168250][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.181564][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.193410][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.206018][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.228279][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.239783][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.248466][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.258358][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.367581][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.380564][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.389951][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.400220][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.409228][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.421156][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.429810][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.441062][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.460096][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.536104][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.568074][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.597775][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.606204][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.635309][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.667176][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.674391][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.691576][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.733620][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.740898][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.778595][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.787515][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.794832][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.847075][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.854290][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.884671][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.892094][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.005358][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.125890][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.154871][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.207013][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.214302][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.265799][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.273065][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.355341][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.404525][ T5631] Bluetooth: hci1: command tx timeout [ 99.409712][ T5639] Bluetooth: hci3: command tx timeout [ 99.416420][ T5631] Bluetooth: hci0: command tx timeout [ 99.426519][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.433852][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.464831][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.472169][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.483932][ T5639] Bluetooth: hci2: command tx timeout [ 99.488898][ T5631] Bluetooth: hci4: command tx timeout [ 100.283089][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.400176][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.459191][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.565685][ T5626] veth0_vlan: entered promiscuous mode [ 100.637011][ T5626] veth1_vlan: entered promiscuous mode [ 100.710763][ T5627] veth0_vlan: entered promiscuous mode [ 100.761286][ T5627] veth1_vlan: entered promiscuous mode [ 100.829631][ T5626] veth0_macvtap: entered promiscuous mode [ 100.890618][ T5626] veth1_macvtap: entered promiscuous mode [ 100.977658][ T5627] veth0_macvtap: entered promiscuous mode [ 101.012413][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.063031][ T5627] veth1_macvtap: entered promiscuous mode [ 101.100417][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.113142][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.158179][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.170785][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.183453][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.195257][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.204713][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.230596][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.294220][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.350460][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.379150][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.388460][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.428539][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.462109][ T5628] veth0_vlan: entered promiscuous mode [ 101.471780][ T5630] veth0_vlan: entered promiscuous mode [ 101.484136][ T5631] Bluetooth: hci0: command tx timeout [ 101.489745][ T5639] Bluetooth: hci3: command tx timeout [ 101.495856][ T50] Bluetooth: hci1: command tx timeout [ 101.518657][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.531039][ T5628] veth1_vlan: entered promiscuous mode [ 101.542338][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.563919][ T50] Bluetooth: hci2: command tx timeout [ 101.569439][ T5639] Bluetooth: hci4: command tx timeout [ 101.585712][ T5629] veth0_vlan: entered promiscuous mode [ 101.626912][ T5630] veth1_vlan: entered promiscuous mode [ 101.641745][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.651704][ T5629] veth1_vlan: entered promiscuous mode [ 101.662270][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.759241][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.788749][ T5626] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.797384][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.908785][ T5630] veth0_macvtap: entered promiscuous mode [ 101.936247][ T5629] veth0_macvtap: entered promiscuous mode [ 101.955185][ T5630] veth1_macvtap: entered promiscuous mode [ 101.962553][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.980646][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.989786][ T5628] veth0_macvtap: entered promiscuous mode [ 102.027427][ T5628] veth1_macvtap: entered promiscuous mode [ 102.058056][ T5629] veth1_macvtap: entered promiscuous mode [ 102.087115][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.137086][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.161201][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.184810][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.217912][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.261133][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.285617][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.308490][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.325245][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.370224][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.390278][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.449860][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.487474][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.500601][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.596323][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.639562][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.672647][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.707194][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.946773][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.957997][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.026727][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.077702][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.161320][ T347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.170225][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11'. [ 103.186024][ T347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.240739][ T5834] team0: Port device team_slave_0 removed [ 103.281074][ T5836] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.12'. [ 103.301353][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.318628][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.424434][ T1014] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.447120][ T1014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.495285][ T1119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.515846][ T1119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.756457][ T5842] netlink: 428 bytes leftover after parsing attributes in process `syz.3.15'. [ 103.803569][ T5842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15'. [ 103.961102][ T5845] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3'. [ 104.001938][ T5845] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3'. [ 104.049016][ T5845] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3'. [ 104.384993][ T5854] tipc: Started in network mode [ 104.392998][ T5854] tipc: Node identity ac1414aa, cluster identity 4711 [ 104.410845][ T5854] tipc: Enabled bearer , priority 10 [ 104.442363][ T5856] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 104.689842][ T5866] netlink: 24 bytes leftover after parsing attributes in process `syz.1.24'. [ 105.525237][ T5745] tipc: Node number set to 2886997162 [ 105.545516][ T5890] netlink: 'syz.4.34': attribute type 2 has an invalid length. [ 105.559442][ T5890] netlink: 'syz.4.34': attribute type 1 has an invalid length. [ 105.574772][ T5890] nbd: illegal input index 65544 [ 108.196765][ T5941] syz.4.54 uses obsolete (PF_INET,SOCK_PACKET) [ 111.300277][ T5977] infiniband syz1: set active [ 111.305649][ T5977] infiniband syz1: added syz_tun [ 111.373557][ T5977] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 111.389398][ T5977] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 111.407802][ T5977] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 111.471634][ T5977] RDS/IB: syz1: added [ 111.477640][ T5977] smc: adding ib device syz1 with port count 1 [ 111.485430][ T5977] smc: ib device syz1 port 1 has no pnetid [ 111.974582][ T6004] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 112.001414][ T13] IPVS: starting estimator thread 0... [ 112.103789][ T6006] IPVS: using max 26 ests per chain, 62400 per kthread [ 112.466483][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e8d2c00: rx timeout, send abort [ 112.596255][ T6015] netlink: 'syz.3.82': attribute type 10 has an invalid length. [ 112.975949][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807e8d2c00: abort rx timeout. Force session deactivation [ 114.375674][ T6059] Zero length message leads to an empty skb [ 114.630001][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 114.842812][ T6063] team0: Port device team_slave_0 removed [ 115.928405][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.117'. [ 117.208830][ T6117] netlink: 20 bytes leftover after parsing attributes in process `syz.0.125'. [ 117.295243][ T6119] netlink: 20 bytes leftover after parsing attributes in process `syz.0.125'. [ 117.882393][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.131'. [ 117.907629][ T6133] netlink: 'syz.4.131': attribute type 26 has an invalid length. [ 117.929838][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 117.964543][ T6133] netlink: 8 bytes leftover after parsing attributes in process `syz.4.131'. [ 117.976900][ T6131] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 117.992085][ T6133] netlink: 'syz.4.131': attribute type 26 has an invalid length. [ 118.008705][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.131'. [ 119.794689][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888030cdec00: rx timeout, send abort [ 120.303182][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888030cdec00: abort rx timeout. Force session deactivation [ 122.630274][ T6244] netlink: 'syz.2.170': attribute type 1 has an invalid length. [ 122.679895][ T6246] netlink: 'syz.4.171': attribute type 6 has an invalid length. [ 122.980139][ T6250] syzkaller1: entered promiscuous mode [ 123.005827][ T6250] syzkaller1: entered allmulticast mode [ 124.315733][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 124.385002][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 124.497268][ T48] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.507841][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 124.537819][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.192'. [ 124.547068][ T48] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.649360][ T48] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.676380][ T48] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.901798][ T6306] netlink: 'syz.1.198': attribute type 2 has an invalid length. [ 124.923547][ T6306] netlink: 'syz.1.198': attribute type 1 has an invalid length. [ 124.939042][ T6306] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.198'. [ 125.135592][ T6311] xt_hashlimit: size too large, truncated to 1048576 [ 125.565100][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 125.619820][ T6322] vlan2: entered promiscuous mode [ 125.641380][ T6322] bond0: entered promiscuous mode [ 125.660908][ T6322] bond_slave_0: entered promiscuous mode [ 125.675939][ T6322] bond_slave_1: entered promiscuous mode [ 125.981447][ T6326] syzkaller1: entered promiscuous mode [ 125.988798][ T6326] syzkaller1: entered allmulticast mode [ 126.859189][ T6359] rdma_rxe: rxe_newlink: failed to add syz_tun [ 127.196079][ T6364] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 127.858798][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 128.170542][ T6393] netlink: 'syz.0.232': attribute type 1 has an invalid length. [ 128.432130][ T6393] 8021q: adding VLAN 0 to HW filter on device bond1 [ 128.612990][ T6397] bond1: (slave gretap1): making interface the new active one [ 128.642863][ T6397] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 128.917862][ T6420] netlink: 27 bytes leftover after parsing attributes in process `syz.0.242'. [ 129.400915][ T6432] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 129.884460][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 129.913444][ T6447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.254'. [ 129.975802][ T6447] geneve2: entered promiscuous mode [ 129.992593][ T6447] geneve2: entered allmulticast mode [ 130.036961][ T6449] nbd1: detected capacity change from 0 to 63 [ 130.059191][ T6450] block nbd1: NBD_DISCONNECT [ 130.087480][ T6450] block nbd1: Disconnected due to user request. [ 130.096165][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.110393][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 130.119027][ T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 130.124117][ T6450] block nbd1: shutting down sockets [ 130.132997][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 130.142669][ T11] Buffer I/O error on dev nbd1, logical block 2, async page read [ 130.151509][ T11] Buffer I/O error on dev nbd1, logical block 3, async page read [ 130.160627][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 130.170320][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 130.178222][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 130.186205][ T11] Buffer I/O error on dev nbd1, logical block 2, async page read [ 130.194189][ T11] Buffer I/O error on dev nbd1, logical block 3, async page read [ 130.203529][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 130.215720][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 130.223535][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 130.241613][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 130.253368][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 130.263767][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 130.273555][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 130.288081][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 130.302380][ T5633] ldm_validate_partition_table(): Disk read failed. [ 130.318537][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 130.329817][ T5633] Dev nbd1: unable to read RDB block 0 [ 130.338908][ T5633] nbd1: unable to read partition table [ 130.360260][ T5633] ldm_validate_partition_table(): Disk read failed. [ 130.382716][ T5633] Dev nbd1: unable to read RDB block 0 [ 130.395041][ T5633] nbd1: unable to read partition table [ 131.934739][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.100379][ T6542] batadv_slave_1: entered allmulticast mode [ 133.130985][ T6540] batadv_slave_1: left allmulticast mode [ 133.374477][ T6547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 133.573793][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.585534][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.884686][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 133.927647][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.302'. [ 134.398854][ T6583] bridge1: entered promiscuous mode [ 134.415785][ T6583] bridge1: entered allmulticast mode [ 134.490450][ T6583] team0: Port device bridge1 added [ 134.558429][ T6584] bridge0: port 3(team0) entered blocking state [ 134.585912][ T6584] bridge0: port 3(team0) entered disabled state [ 134.605153][ T6590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.314'. [ 134.619581][ T6584] team0: entered allmulticast mode [ 134.649479][ T6584] team_slave_0: entered allmulticast mode [ 134.676424][ T6584] team_slave_1: entered allmulticast mode [ 134.725483][ T6584] team0: entered promiscuous mode [ 134.738420][ T6584] team_slave_0: entered promiscuous mode [ 134.746947][ T6584] team_slave_1: entered promiscuous mode [ 134.756157][ T6584] bridge0: port 3(team0) entered blocking state [ 134.764158][ T6584] bridge0: port 3(team0) entered forwarding state [ 134.786874][ T6590] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.796126][ T6590] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.172322][ T6604] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 135.196385][ T6604] syzkaller1: Linktype set failed because interface is up [ 135.196540][ T9] syzkaller1: tun_net_xmit 90 [ 137.184711][ T6664] netlink: 'syz.2.344': attribute type 2 has an invalid length. [ 137.204378][ T6664] netlink: 60 bytes leftover after parsing attributes in process `syz.2.344'. [ 137.978714][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 141.235905][ T6704] netlink: 'syz.1.362': attribute type 8 has an invalid length. [ 144.350188][ T6723] team0: left allmulticast mode [ 144.366586][ T6723] team_slave_0: left allmulticast mode [ 144.382278][ T6723] team_slave_1: left allmulticast mode [ 144.392395][ T6723] team0: left promiscuous mode [ 144.397732][ T6723] team_slave_0: left promiscuous mode [ 144.403563][ T6723] team_slave_1: left promiscuous mode [ 144.410414][ T6723] bridge0: port 3(team0) entered disabled state [ 144.445783][ T6723] bridge_slave_0: left allmulticast mode [ 144.457771][ T6723] bridge_slave_0: left promiscuous mode [ 144.473461][ T6723] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.516791][ T6723] bridge_slave_1: left allmulticast mode [ 144.524822][ T6723] bridge_slave_1: left promiscuous mode [ 144.530843][ T6723] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.550669][ T6723] bond0: (slave bond_slave_0): Releasing backup interface [ 144.559166][ T6723] bond_slave_0: left promiscuous mode [ 144.575733][ T6723] bond0: (slave bond_slave_1): Releasing backup interface [ 144.597470][ T6723] bond_slave_1: left promiscuous mode [ 144.629728][ T6723] team0: Port device team_slave_0 removed [ 144.668145][ T6723] team0: Port device team_slave_1 removed [ 144.687580][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.700120][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.861564][ T6723] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.869438][ T6723] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.879805][ T6723] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 144.898839][ T6725] team0: No ports can be present during mode change [ 146.353271][ T6779] netlink: 'syz.3.392': attribute type 1 has an invalid length. [ 146.595384][ T6779] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.664045][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 146.802508][ T6784] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 147.002857][ T6789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.107311][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.401'. [ 147.138456][ T6795] bond1: (slave batadv1): Opening slave failed [ 147.174091][ T6810] netlink: 16 bytes leftover after parsing attributes in process `syz.4.401'. [ 147.240916][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 147.263241][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 147.283815][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 147.308250][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 147.331456][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 147.357812][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.3.404'. [ 147.370940][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.404'. [ 149.519591][ T6872] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.649522][ T6873] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 149.935707][ T6886] netlink: 'syz.3.435': attribute type 10 has an invalid length. [ 150.010756][ T6886] geneve2: entered promiscuous mode [ 150.046434][ T6886] geneve2: entered allmulticast mode [ 151.726246][ T6946] __nla_validate_parse: 11 callbacks suppressed [ 151.726268][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.444'. [ 151.799192][ T6946] warning: `syz.2.444' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 152.258520][ T6971] netlink: 'syz.4.453': attribute type 1 has an invalid length. [ 152.322111][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.453'. [ 152.694239][ T6980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.459'. [ 153.650189][ T7003] syzkaller1: entered promiscuous mode [ 153.666956][ T7003] syzkaller1: entered allmulticast mode [ 154.127968][ T7022] netlink: 20 bytes leftover after parsing attributes in process `syz.2.478'. [ 155.156966][ T7050] netlink: 20 bytes leftover after parsing attributes in process `syz.4.492'. [ 156.774482][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 156.916111][ T7079] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 158.768188][ T7132] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 158.803210][ T7132] netlink: 15918 bytes leftover after parsing attributes in process `syz.3.520'. [ 159.112385][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.523'. [ 159.177232][ T7139] netlink: 28 bytes leftover after parsing attributes in process `syz.1.523'. [ 159.229038][ T7139] geneve2: entered promiscuous mode [ 159.248536][ T7139] geneve2: entered allmulticast mode [ 159.311744][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'. [ 159.330332][ T7141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'. [ 159.363540][ T7141] netlink: 8 bytes leftover after parsing attributes in process `syz.3.524'. [ 159.399232][ T7141] netlink: 12 bytes leftover after parsing attributes in process `syz.3.524'. [ 159.841307][ T7151] netlink: 14 bytes leftover after parsing attributes in process `syz.3.529'. [ 159.931198][ T7151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.024560][ T7151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.079123][ T7151] bond0 (unregistering): Released all slaves [ 162.737887][ T7252] netlink: 'syz.1.567': attribute type 16 has an invalid length. [ 162.771001][ T7252] netlink: 'syz.1.567': attribute type 17 has an invalid length. [ 162.791657][ T7253] netlink: 'syz.2.569': attribute type 4 has an invalid length. [ 162.843268][ T7255] netlink: 'syz.2.569': attribute type 4 has an invalid length. [ 162.944380][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.152797][ T7252] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.160214][ T7252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.180729][ T7252] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.188052][ T7252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.278664][ T7252] geneve2: left promiscuous mode [ 163.288960][ T7252] geneve2: left allmulticast mode [ 163.330811][ T7262] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'. [ 163.357439][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.4.573'. [ 163.544912][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 163.561299][ T7257] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.579468][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 163.717166][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 163.717184][ T80] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.738365][ T7265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'. [ 163.836644][ T7257] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.922541][ T80] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.955767][ T80] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.990327][ T80] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.112149][ T7257] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.265082][ T7257] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.578694][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.638424][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.790303][ T80] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.837007][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.115645][ T7294] netlink: 'syz.3.585': attribute type 22 has an invalid length. [ 165.147631][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 165.169202][ T7294] netlink: 'syz.3.585': attribute type 22 has an invalid length. [ 165.177959][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 166.784117][ T7344] netlink: 'syz.4.606': attribute type 13 has an invalid length. [ 166.900107][ T7347] IPv4: Oversized IP packet from 127.202.26.0 [ 167.567100][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.611'. [ 167.858753][ T7362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.892138][ T7366] bond2: option ad_select: unable to set because the bond device is up [ 167.983413][ T7378] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 168.205101][ T7386] netlink: 'syz.3.621': attribute type 13 has an invalid length. [ 168.785288][ T7394] syzkaller1: entered promiscuous mode [ 168.815062][ T7394] syzkaller1: entered allmulticast mode [ 169.231504][ T7425] team0: Device ipvlan2 failed to register rx_handler [ 169.881806][ T7454] __nla_validate_parse: 1 callbacks suppressed [ 169.881828][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.644'. [ 169.917088][ T7454] bond0: (slave bond_slave_1): Releasing backup interface [ 170.004003][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 170.032357][ T7456] xfrm1: entered promiscuous mode [ 170.049313][ T7456] xfrm1: entered allmulticast mode [ 170.062237][ T7456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.645'. [ 170.249549][ T7465] bridge_slave_0: Caught tx_queue_len zero misconfig [ 171.143517][ T30] audit: type=1800 audit(1785330391.683:2): pid=7476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.653" name="r" dev="tmpfs" ino=695 res=0 errno=0 [ 171.485101][ T7400] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.960735][ T7500] vlan0: entered allmulticast mode [ 171.980342][ T7500] bond0: entered allmulticast mode [ 171.999965][ T7500] bridge0: port 1(vlan0) entered blocking state [ 172.020249][ T7500] bridge0: port 1(vlan0) entered disabled state [ 172.052896][ T7508] netlink: zone id is out of range [ 172.068154][ T7500] vlan0: entered promiscuous mode [ 172.079941][ T7508] netlink: zone id is out of range [ 172.097408][ T7502] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.098086][ T7508] netlink: zone id is out of range [ 172.105079][ T7502] bridge0: port 2(bridge_slave_1) entered listening state [ 172.117629][ T7502] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.124935][ T7502] bridge0: port 1(bridge_slave_0) entered listening state [ 172.132691][ T7508] netlink: zone id is out of range [ 172.151198][ T7502] team0: Port device bridge0 added [ 172.157144][ T7508] netlink: zone id is out of range [ 172.163972][ T7510] netlink: 20 bytes leftover after parsing attributes in process `syz.4.668'. [ 172.177707][ T7508] netlink: zone id is out of range [ 172.212347][ T7508] netlink: zone id is out of range [ 172.250839][ T7508] netlink: zone id is out of range [ 172.263261][ T7509] Set syz1 is full, maxelem 1029 reached [ 172.276041][ T7508] netlink: zone id is out of range [ 172.431151][ T7519] veth1_to_bond: entered allmulticast mode [ 172.454054][ T7519] veth1_to_bond: entered promiscuous mode [ 172.471376][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.672'. [ 172.555339][ T7519] veth1_to_bond (unregistering): left allmulticast mode [ 172.582501][ T7519] veth1_to_bond (unregistering): left promiscuous mode [ 172.632838][ T7519] bond0: (slave bond_slave_1): Releasing backup interface [ 173.734983][ T7562] netlink: 5 bytes leftover after parsing attributes in process `syz.2.689'. [ 173.798758][ T7567] netlink: 'syz.2.689': attribute type 4 has an invalid length. [ 174.272698][ T7573] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 175.583455][ T7592] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 177.209446][ T7636] netlink: 'syz.1.716': attribute type 13 has an invalid length. [ 177.230324][ T7638] pim6reg1: entered promiscuous mode [ 177.243444][ T7638] pim6reg1: entered allmulticast mode [ 177.865642][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.722'. [ 177.886160][ T7652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.912661][ T7652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.939038][ T7652] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.962723][ T7652] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.541475][ T7705] netlink: 24 bytes leftover after parsing attributes in process `syz.0.742'. [ 179.939334][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 181.241102][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.761'. [ 181.320256][ T7746] netlink: 'syz.4.761': attribute type 1 has an invalid length. [ 181.377764][ T7745] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.400353][ T7747] netlink: 'syz.0.762': attribute type 16 has an invalid length. [ 181.434561][ T7745] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.464913][ T7747] netlink: 'syz.0.762': attribute type 17 has an invalid length. [ 181.835481][ T7747] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.842874][ T7747] bridge0: port 1(bridge_slave_0) entered listening state [ 181.894009][ T7747] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.901340][ T7747] bridge0: port 2(bridge_slave_1) entered listening state [ 182.060703][ T7747] geneve2: left promiscuous mode [ 182.077048][ T7747] geneve2: left allmulticast mode [ 182.095904][ T7747] 8021q: adding VLAN 0 to HW filter on device eth0 [ 182.163195][ T7747] 8021q: adding VLAN 0 to HW filter on device eth1 [ 182.215024][ T7747] 8021q: adding VLAN 0 to HW filter on device eth2 [ 182.260384][ T7747] 8021q: adding VLAN 0 to HW filter on device eth3 [ 182.285512][ T7747] xfrm1: left promiscuous mode [ 182.296998][ T7747] xfrm1: left allmulticast mode [ 186.482212][ T7809] netlink: 'syz.3.784': attribute type 16 has an invalid length. [ 186.545572][ T7811] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.555601][ T7809] netlink: 'syz.3.784': attribute type 17 has an invalid length. [ 186.610424][ T7811] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.969178][ T7809] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.976633][ T7809] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.055549][ T7809] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.062942][ T7809] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.224713][ T7809] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 187.591697][ T7828] netlink: 24 bytes leftover after parsing attributes in process `syz.1.791'. [ 187.612921][ T7830] netlink: 24 bytes leftover after parsing attributes in process `syz.1.791'. [ 187.762469][ T1014] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 187.796480][ T5758] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 187.796503][ T1014] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 187.829431][ T12] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 187.838483][ T12] net_ratelimit: 1 callbacks suppressed [ 187.838502][ T12] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 187.878272][ T12] bond1: active interface up! [ 188.092267][ T7852] netlink: 'syz.2.808': attribute type 1 has an invalid length. [ 188.214962][ T809] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 188.274897][ T5608] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 189.543785][ T7897] netlink: 'syz.2.815': attribute type 4 has an invalid length. [ 189.568963][ T7897] netlink: 'syz.2.815': attribute type 8 has an invalid length. [ 189.593092][ T7897] netlink: 'syz.2.815': attribute type 1 has an invalid length. [ 189.625595][ T7897] netlink: 172 bytes leftover after parsing attributes in process `syz.2.815'. [ 189.673420][ T7897] NCSI netlink: No device for ifindex 0 [ 190.452109][ T7916] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 191.267491][ T7936] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 191.963952][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 192.228528][ T7966] netlink: 16 bytes leftover after parsing attributes in process `syz.0.829'. [ 193.271355][ T7994] netlink: 76 bytes leftover after parsing attributes in process `syz.1.839'. [ 194.632707][ T8032] netlink: 52 bytes leftover after parsing attributes in process `syz.4.857'. [ 194.650815][ T8032] ip6tnl0: Caught tx_queue_len zero misconfig [ 195.008608][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.017322][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.135848][ T8074] netlink: 'syz.1.875': attribute type 4 has an invalid length. [ 196.170015][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.874'. [ 196.866001][ T8108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.887'. [ 197.142493][ T8114] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 197.190816][ T8114] 8021q: adding VLAN 0 to HW filter on device bond1 [ 197.222496][ T8114] bond1: (slave geneve2): making interface the new active one [ 197.232222][ T8114] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 199.094417][ T8087] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 199.769117][ T8173] netlink: 'syz.2.909': attribute type 16 has an invalid length. [ 199.825091][ T8173] netlink: 'syz.2.909': attribute type 17 has an invalid length. [ 200.012746][ T8184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.913'. [ 200.288617][ T8173] vlan2: left promiscuous mode [ 200.339224][ T8173] bridge1: left promiscuous mode [ 200.346165][ T8173] bridge1: left allmulticast mode [ 200.764546][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 200.887544][ T30] audit: type=1800 audit(1785330421.433:3): pid=8205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.920" name=B702 dev="tmpfs" ino=913 res=0 errno=0 [ 202.550757][ T8264] atomic_op ffff888029f49998 conn xmit_atomic 0000000000000000 [ 202.749736][ T8273] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 202.981541][ T8280] netlink: 28 bytes leftover after parsing attributes in process `syz.2.947'. [ 204.586366][ T8334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.970'. [ 204.968663][ T8347] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.976'. [ 205.092151][ T8349] Bluetooth: MGMT ver 1.23 [ 205.120671][ T8349] Bluetooth: hci1: too big key_count value 29096 [ 205.846420][ T8371] syzkaller1: entered promiscuous mode [ 205.865829][ T8371] syzkaller1: entered allmulticast mode [ 205.905531][ T8375] netlink: 'syz.2.989': attribute type 1 has an invalid length. [ 206.075222][ T6930] IPVS: starting estimator thread 0... [ 206.089161][ T8375] 8021q: adding VLAN 0 to HW filter on device bond1 [ 206.196831][ T8382] IPVS: using max 23 ests per chain, 55200 per kthread [ 206.789913][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 206.807795][ T8404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 206.821087][ T8404] netlink: 'syz.2.1000': attribute type 18 has an invalid length. [ 206.863995][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1000'. [ 206.904261][ T8407] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 206.938973][ T6935] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 4352 - 0 [ 206.953507][ T6935] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 4352 - 0 [ 206.973566][ T6935] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 4352 - 0 [ 206.986165][ T8407] netlink: 'syz.2.1000': attribute type 18 has an invalid length. [ 207.009258][ T6935] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 4352 - 0 [ 207.039346][ T8410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1002'. [ 207.291985][ T8410] 8021q: adding VLAN 0 to HW filter on device bond3 [ 207.364848][ T8415] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 210.028901][ T8525] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1039'. [ 210.470364][ T8533] bond2: (slave macvlan1): Enslaving as an active interface with an up link [ 210.836454][ T8524] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.875918][ T8542] netlink: 'syz.2.1044': attribute type 1 has an invalid length. [ 210.902620][ T8542] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1044'. [ 211.344972][ T8562] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1051'. [ 211.853269][ T8578] trusted_key: syz.0.1058 sent an empty control message without MSG_MORE. [ 212.151071][ T8591] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1064'. [ 212.285716][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 212.294575][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 212.401933][ T8601] macvlan2: entered promiscuous mode [ 212.420482][ T8601] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 212.442207][ T8601] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 212.457323][ T8601] team0: Port device macvlan2 added [ 212.467407][ T8600] syzkaller1: entered promiscuous mode [ 212.473957][ T8600] syzkaller1: entered allmulticast mode [ 212.578932][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1071'. [ 212.656200][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'. [ 212.675505][ T8613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1071'. [ 212.749577][ T8609] team1: entered promiscuous mode [ 212.765847][ T8609] team1: entered allmulticast mode [ 212.779349][ T8609] 8021q: adding VLAN 0 to HW filter on device team1 [ 212.829604][ T8613] team2: entered promiscuous mode [ 212.838365][ T8613] team2: entered allmulticast mode [ 212.847225][ T8613] 8021q: adding VLAN 0 to HW filter on device team2 [ 213.288691][ T8633] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1080'. [ 213.349129][ T8634] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1080'. [ 213.549668][ T8643] xt_hashlimit: size too large, truncated to 1048576 [ 214.549193][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1096'. [ 214.593369][ T8679] 8021q: adding VLAN 0 to HW filter on device bond4 [ 214.621460][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1097'. [ 214.643280][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1097'. [ 214.694644][ T8683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1096'. [ 214.705036][ T8679] 8021q: adding VLAN 0 to HW filter on device bond5 [ 214.718538][ T8679] bond4: (slave bond5): Enslaving as an active interface with an up link [ 214.747992][ T8683] bond4 (unregistering): (slave bond5): Releasing backup interface [ 214.767738][ T8683] bond4 (unregistering): Released all slaves [ 214.798408][ T8686] lo: Caught tx_queue_len zero misconfig [ 215.175919][ T8671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.136362][ T8761] sctp: [Deprecated]: syz.4.1119 (pid 8761) Use of int in max_burst socket option. [ 217.136362][ T8761] Use struct sctp_assoc_value instead [ 217.246446][ T8771] __nla_validate_parse: 1 callbacks suppressed [ 217.246468][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1123'. [ 217.280376][ T8771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1123'. [ 217.298689][ T8771] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22) [ 217.364891][ T8779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 217.569062][ T5644] Bluetooth: hci1: command 0x0406 tx timeout [ 217.577202][ T5647] Bluetooth: hci2: command 0x0406 tx timeout [ 217.578460][ T5640] Bluetooth: hci4: command 0x0406 tx timeout [ 217.583546][ T5645] Bluetooth: hci0: command 0x0406 tx timeout [ 218.044097][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 218.099928][ T8794] netlink: 'syz.1.1131': attribute type 1 has an invalid length. [ 218.275343][ T8794] bond3: entered promiscuous mode [ 218.299964][ T8794] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.426309][ T8799] 8021q: adding VLAN 0 to HW filter on device bond3 [ 218.434417][ T8799] bond3: (slave ipip2): The slave device specified does not support setting the MAC address [ 218.447168][ T8799] bond3: (slave ipip2): Setting fail_over_mac to active for active-backup mode [ 218.479590][ T8799] bond3: (slave ipip2): making interface the new active one [ 218.489905][ T8799] ipip2: entered promiscuous mode [ 218.498462][ T8799] bond3: (slave ipip2): Enslaving as an active interface with an up link [ 219.134141][ T8823] syzkaller1: entered promiscuous mode [ 219.139975][ T8823] syzkaller1: entered allmulticast mode [ 219.745072][ T8850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 219.873295][ T8854] veth0: entered promiscuous mode [ 219.880359][ T8854] bond0: entered promiscuous mode [ 219.886169][ T8854] bond_slave_0: entered promiscuous mode [ 219.893888][ T8852] bond0: left promiscuous mode [ 219.900038][ T8852] bond_slave_0: left promiscuous mode [ 219.910341][ T8852] veth0: left promiscuous mode [ 220.082786][ T8856] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 224.660691][ T9013] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1196'. [ 225.082614][ T9032] sctp: [Deprecated]: syz.2.1205 (pid 9032) Use of int in maxseg socket option. [ 225.082614][ T9032] Use struct sctp_assoc_value instead [ 225.138896][ T8926] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.146916][ T9041] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.210369][ T9076] hsr0: entered promiscuous mode [ 226.349804][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1214'. [ 226.522321][ T9076] hsr_slave_0: left promiscuous mode [ 226.603496][ T9076] hsr_slave_1: left promiscuous mode [ 226.682335][ T9076] hsr0 (unregistering): left promiscuous mode [ 226.717356][ T9090] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1217'. [ 226.784580][ T9090] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 226.813161][ T9090] bond4 (unregistering): Released all slaves [ 227.219707][ T9101] syzkaller1: entered promiscuous mode [ 227.253869][ T9101] syzkaller1: entered allmulticast mode [ 227.441549][ T9114] netlink: 'syz.4.1223': attribute type 1 has an invalid length. [ 227.525251][ T9116] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 227.722592][ T9119] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1225'. [ 229.580629][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1237'. [ 231.512829][ T9184] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1246'. [ 231.716794][ T9191] netlink: 'syz.3.1248': attribute type 1 has an invalid length. [ 231.928019][ T9191] bond0: (slave bridge2): making interface the new active one [ 231.944735][ T9191] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 234.964221][ T9266] netlink: 67 bytes leftover after parsing attributes in process `syz.1.1274'. [ 235.610248][ T9296] syzkaller0: entered promiscuous mode [ 235.647873][ T9296] syzkaller0: entered allmulticast mode [ 237.062505][ T9339] IPVS: set_ctl: invalid protocol: 33 172.20.20.46:20004 [ 237.284912][ T9346] netlink: 'syz.4.1298': attribute type 1 has an invalid length. [ 237.583417][ T9354] gretap1: entered allmulticast mode [ 237.638415][ T9354] bond2: (slave gretap1): making interface the new active one [ 237.695607][ T9354] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 238.143344][ T9374] netlink: 'syz.4.1305': attribute type 21 has an invalid length. [ 238.164173][ T9367] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.172101][ T9367] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.285654][ T30] audit: type=1800 audit(1785330458.823:4): pid=9378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1306" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072636F6E6E6563742061613A61613A61613A61613A61613A31302030 dev="tmpfs" ino=1367 res=0 errno=0 [ 239.367254][ T9] syz1: Port: 1 Link DOWN [ 239.391135][ T80] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.404845][ T9374] netlink: 'syz.4.1305': attribute type 21 has an invalid length. [ 239.428359][ T80] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.457871][ T80] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.506016][ T80] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.557153][ T80] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.601704][ T80] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.645256][ T80] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.675293][ T80] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 242.420460][ T9498] sit0: entered promiscuous mode [ 242.453264][ T9498] netlink: 'syz.3.1343': attribute type 1 has an invalid length. [ 242.488777][ T9498] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1343'. [ 242.965982][ T9520] syzkaller1: entered promiscuous mode [ 242.993024][ T9520] syzkaller1: entered allmulticast mode [ 243.060708][ T9526] bridge0: port 2(wlan1) entered blocking state [ 243.080093][ T9526] bridge0: port 2(wlan1) entered disabled state [ 243.103309][ T9526] mac80211_hwsim hwsim10 wlan1: entered allmulticast mode [ 243.179193][ T9526] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 243.450612][ T9540] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1359'. [ 243.553966][ T9540] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.283565][ T9568] vlan3: entered promiscuous mode [ 247.479937][ T9654] netlink: 'syz.0.1397': attribute type 1 has an invalid length. [ 247.515815][ T9656] bridge0: port 3(wlan1) entered blocking state [ 247.532689][ T9656] bridge0: port 3(wlan1) entered disabled state [ 247.546059][ T9656] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 247.589438][ T9656] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 247.656714][ T9654] 8021q: adding VLAN 0 to HW filter on device bond4 [ 247.667667][ T9658] bond4: option tlb_dynamic_lb: unable to set because the bond device is up [ 247.969130][ T9670] lo: Caught tx_queue_len zero misconfig [ 248.439473][ T9679] bridge3: entered promiscuous mode [ 248.457795][ T9679] bridge3: entered allmulticast mode [ 249.165061][ T9703] netlink: 'syz.3.1414': attribute type 12 has an invalid length. [ 249.202789][ T9703] netlink: 'syz.3.1414': attribute type 29 has an invalid length. [ 249.232539][ T9703] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1414'. [ 249.270824][ T9703] netlink: 'syz.3.1414': attribute type 1 has an invalid length. [ 249.300979][ T9703] netlink: 'syz.3.1414': attribute type 2 has an invalid length. [ 249.322241][ T9703] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1414'. [ 249.331047][ T9711] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.1416'. [ 250.737735][ T9762] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 250.745341][ T9762] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 250.805313][ T9762] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 250.811832][ T9762] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 250.832444][ T9762] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 250.839014][ T9762] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 250.867334][ T9762] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 250.873945][ T9762] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 250.914485][ T9762] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 250.921058][ T9762] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 251.500146][ T9786] netlink: 'syz.4.1441': attribute type 1 has an invalid length. [ 251.563971][ T9786] bond3: entered promiscuous mode [ 251.574223][ T9786] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.673108][ T9786] 8021q: adding VLAN 0 to HW filter on device bond3 [ 251.727212][ T9786] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 251.779565][ T9786] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 251.801304][ T9786] bond3: (slave xfrm1): making interface the new active one [ 251.809009][ T9786] xfrm1: entered promiscuous mode [ 251.818874][ T9786] bond3: (slave xfrm1): Enslaving as an active interface with an up link [ 252.405297][ T9804] block nbd0: server does not support multiple connections per device. [ 252.447945][ T9804] block nbd0: shutting down sockets [ 252.782336][ T9813] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.790347][ T9813] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.003211][ T9813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.028259][ T9813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.247933][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 253.309999][ T9813] bond3: left promiscuous mode [ 253.320368][ T9813] ipip2: left promiscuous mode [ 253.328264][ T9807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.387179][ T6936] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.427269][ T6936] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.473709][ T6936] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.485326][ T6936] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.584586][ T6936] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.610709][ T6936] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.636567][ T6936] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.674707][ T6936] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.547141][ T9882] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1475'. [ 254.996080][ T48] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.036817][ T48] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 4352 - 0 [ 255.070043][ T48] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.143698][ T48] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.179327][ T48] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 4352 - 0 [ 255.211634][ T48] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.233307][ T48] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.252163][ T48] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 4352 - 0 [ 255.275127][ T48] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.525763][ T48] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.546293][ T48] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 4352 - 0 [ 255.576443][ T48] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.642644][ T9910] mac80211_hwsim hwsim10 wlan1: left allmulticast mode [ 255.689484][ T9910] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 255.705398][ T9910] bridge0: port 2(wlan1) entered disabled state [ 255.762716][ T9910] team0: Port device bridge1 removed [ 255.775868][ T9910] vlan0: left allmulticast mode [ 255.787033][ T9910] bond0: left allmulticast mode [ 255.799149][ T9910] vlan0: left promiscuous mode [ 255.808488][ T9910] bond0: left promiscuous mode [ 255.821208][ T9910] bridge0: port 1(vlan0) entered disabled state [ 256.132959][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1488'. [ 256.173396][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1488'. [ 256.211708][ T9922] netlink: 'syz.1.1488': attribute type 15 has an invalid length. [ 256.272743][ T6935] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 256.281869][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1488'. [ 256.308136][ T6935] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 256.319612][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1488'. [ 256.329274][ T6935] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 256.339509][ T9922] netlink: 'syz.1.1488': attribute type 15 has an invalid length. [ 256.359408][ T6935] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 256.435718][ T6935] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 60387 - 0 [ 256.459818][ T6935] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 60387 - 0 [ 256.469476][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.482938][ T6935] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 60387 - 0 [ 256.502621][ T6935] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 60387 - 0 [ 256.520837][ T9935] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1482'. [ 256.953093][ T9946] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1484'. [ 257.011102][ T9947] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1484'. [ 257.118098][ T9946] gretap0: entered promiscuous mode [ 257.178368][ T9947] 0ªî{X¹¦: renamed from gretap0 [ 257.196302][ T9947] 0ªî{X¹¦: left promiscuous mode [ 257.201401][ T9947] 0ªî{X¹¦: entered allmulticast mode [ 257.255238][ T9947] net_ratelimit: 66 callbacks suppressed [ 257.255258][ T9947] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 257.482591][ T9961] syzkaller0: entered promiscuous mode [ 257.515425][ T9938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.632185][ T9967] netlink: 'syz.2.1492': attribute type 1 has an invalid length. [ 257.641275][ T9967] netlink: 'syz.2.1492': attribute type 4 has an invalid length. [ 257.651531][ T9967] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1492'. [ 257.840464][ T9973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1495'. [ 259.479269][T10030] netlink: 'syz.1.1518': attribute type 1 has an invalid length. [ 259.605970][T10030] bond4: entered promiscuous mode [ 259.614658][T10030] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.778039][T10039] 8021q: adding VLAN 0 to HW filter on device bond4 [ 259.802730][T10039] bond4: (slave xfrm1): The slave device specified does not support setting the MAC address [ 259.825730][T10039] bond4: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 259.850385][T10039] bond4: (slave xfrm1): making interface the new active one [ 259.864601][T10039] xfrm1: entered promiscuous mode [ 259.877710][T10039] bond4: (slave xfrm1): Enslaving as an active interface with an up link [ 260.061733][T10049] syzkaller1: entered promiscuous mode [ 260.087477][T10049] syzkaller1: entered allmulticast mode [ 261.365294][T10078] syzkaller1: entered promiscuous mode [ 261.386701][T10078] syzkaller1: entered allmulticast mode [ 261.537476][T10080] __nla_validate_parse: 2 callbacks suppressed [ 261.537497][T10080] netlink: 47 bytes leftover after parsing attributes in process `syz.2.1535'. [ 261.871608][T10094] netlink: 'syz.3.1539': attribute type 1 has an invalid length. [ 261.939266][T10094] bond3: entered promiscuous mode [ 261.949923][T10094] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.067694][T10094] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.096352][T10094] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 262.121193][T10094] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 262.152459][T10094] bond3: (slave gre1): making interface the new active one [ 262.168609][T10094] gre1: entered promiscuous mode [ 262.184221][T10094] bond3: (slave gre1): Enslaving as an active interface with an up link [ 262.749252][T10097] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.786625][T10115] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1545'. [ 263.369446][T10132] xt_hashlimit: size too large, truncated to 1048576 [ 263.932865][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1556'. [ 263.951143][T10141] iwpm_parse_nlmsg: Invalid attribute (msg type Remote Mapping info ret = -34) [ 264.028857][T10151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1556'. [ 264.104726][T10151] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 264.514011][T10158] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1561'. [ 264.544131][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'. [ 264.786266][T10167] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1564'. [ 264.867833][T10173] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1568'. [ 265.497401][T10188] gretap2: entered promiscuous mode [ 265.895121][T10197] netlink: 'syz.2.1579': attribute type 1 has an invalid length. [ 266.113153][T10197] bond4: entered promiscuous mode [ 266.138610][T10197] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.185276][T10201] 8021q: adding VLAN 0 to HW filter on device bond4 [ 266.206647][T10201] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 266.221148][T10201] bond4: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 266.247674][T10201] bond4: (slave ip6gre1): making interface the new active one [ 266.271613][T10201] ip6gre1: entered promiscuous mode [ 266.285597][T10201] bond4: (slave ip6gre1): Enslaving as an active interface with an up link [ 266.934721][T10232] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1591'. [ 267.641666][T10263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1602'. [ 267.682710][T10263] netlink: 'syz.1.1602': attribute type 3 has an invalid length. [ 267.727477][T10263] netlink: 'syz.1.1602': attribute type 5 has an invalid length. [ 267.778215][T10263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1602'. [ 267.846718][T10263] geneve3: entered promiscuous mode [ 267.852108][T10263] geneve3: entered allmulticast mode [ 267.860465][ T48] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 35582 - 0 [ 267.872949][ T48] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 35582 - 0 [ 267.892885][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 35582 - 0 [ 267.913721][ T48] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 35582 - 0 [ 268.114497][T10276] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1608'. [ 268.145337][T10276] netlink: 73 bytes leftover after parsing attributes in process `syz.4.1608'. [ 268.171796][T10283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1612'. [ 268.198374][T10276] netlink: 73 bytes leftover after parsing attributes in process `syz.4.1608'. [ 269.469347][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1631'. [ 269.479787][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1631'. [ 270.765716][ T7958] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0x7 [ 270.946406][T10360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1640'. [ 270.963964][T10360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.019149][T10360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.630454][T10372] xt_hashlimit: size too large, truncated to 1048576 [ 271.712697][T10375] netlink: 'syz.4.1645': attribute type 2 has an invalid length. [ 271.818796][T10375] : entered promiscuous mode [ 272.656698][T10391] __nla_validate_parse: 1 callbacks suppressed [ 272.656717][T10391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 273.967937][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1659'. [ 273.983201][T10418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1659'. [ 275.117792][T10380] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.003518][T10460] pim6reg1: entered promiscuous mode [ 276.038412][T10460] pim6reg1: entered allmulticast mode [ 276.239519][T10469] openvswitch: netlink: Missing key (keys=40, expected=100) [ 276.403520][T10473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1682'. [ 276.850423][T10364] Set syz1 is full, maxelem 65536 reached [ 277.131533][T10496] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1689'. [ 277.150688][T10496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1689'. [ 277.169114][T10496] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1689'. [ 277.188485][T10496] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1689'. [ 277.207815][T10496] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1689'. [ 277.722545][T10507] syzkaller1: entered promiscuous mode [ 277.729143][T10507] syzkaller1: entered allmulticast mode [ 277.849111][T10511] netlink: 'syz.1.1695': attribute type 8 has an invalid length. [ 277.878837][T10511] netlink: 'syz.1.1695': attribute type 9 has an invalid length. [ 278.407233][T10524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1703'. [ 278.458944][T10531] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1704'. [ 278.507668][T10531] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1704'. [ 278.669721][T10541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1706'. [ 278.988430][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1710'. [ 280.297120][T10575] syzkaller1: entered promiscuous mode [ 280.311387][T10575] syzkaller1: entered allmulticast mode [ 280.509258][T10579] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1722'. [ 280.999408][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1727'. [ 281.400059][T10605] syzkaller1: entered promiscuous mode [ 281.406044][T10605] syzkaller1: entered allmulticast mode [ 282.447373][T10634] netlink: 'syz.1.1744': attribute type 13 has an invalid length. [ 282.520817][T10634] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 282.569283][T10634] syzkaller0: entered promiscuous mode [ 282.586149][T10634] syzkaller0: entered allmulticast mode [ 282.861580][T10643] netlink: 'syz.0.1747': attribute type 1 has an invalid length. [ 282.886557][T10643] netlink: 64851 bytes leftover after parsing attributes in process `syz.0.1747'. [ 283.022401][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1749'. [ 283.471413][T10664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1756'. [ 283.715311][T10670] syzkaller1: entered promiscuous mode [ 283.721171][T10670] syzkaller1: entered allmulticast mode [ 284.140189][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1765'. [ 284.250676][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1764'. [ 284.260990][T10683] 8021q: adding VLAN 0 to HW filter on device bond5 [ 284.281545][T10690] bond5: entered promiscuous mode [ 284.303656][T10690] bond5: entered allmulticast mode [ 284.383053][T10687] erspan0: entered promiscuous mode [ 284.427969][T10687] erspan0: entered allmulticast mode [ 284.452234][T10687] bond5: (slave erspan0): Enslaving as an active interface with an up link [ 285.584115][T10707] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 285.826545][T10737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1780'. [ 286.139762][T10744] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1782'. [ 286.174172][T10745] netlink: 'syz.4.1783': attribute type 1 has an invalid length. [ 286.324499][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1785'. [ 286.353500][T10745] bond4: entered promiscuous mode [ 286.361030][T10745] 8021q: adding VLAN 0 to HW filter on device bond4 [ 286.449172][T10757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1787'. [ 286.465208][T10753] 8021q: adding VLAN 0 to HW filter on device bond4 [ 286.476723][T10753] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 286.487392][T10753] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 286.519288][T10753] bond4: (slave ip6gre2): making interface the new active one [ 286.540252][T10753] ip6gre2: entered promiscuous mode [ 286.565311][T10753] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 287.467062][T10787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.476119][T10787] IPv6: NLM_F_CREATE should be set when creating new route [ 287.498805][T10787] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.027728][T10779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 288.305889][T10817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1808'. [ 289.359750][T10848] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1820'. [ 289.548781][T10855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1821'. [ 289.579807][T10854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1822'. [ 289.809976][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1822'. [ 290.193208][T10880] bridge0: port 3(syz_tun) entered blocking state [ 290.213954][T10880] bridge0: port 3(syz_tun) entered disabled state [ 290.258721][T10880] syz_tun: entered allmulticast mode [ 290.301175][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1833'. [ 290.311107][T10880] syz_tun: entered promiscuous mode [ 290.326720][T10883] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.345057][T10883] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 290.644463][T10896] syzkaller1: entered promiscuous mode [ 290.669619][T10896] syzkaller1: entered allmulticast mode [ 290.798296][T10904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1842'. [ 290.888001][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1843'. [ 290.901079][T10904] netlink: 'syz.0.1842': attribute type 1 has an invalid length. [ 290.910254][T10907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1843'. [ 292.409476][T10943] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1855'. [ 292.726358][T10954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1860'. [ 293.102854][T10964] netlink: 'syz.1.1862': attribute type 1 has an invalid length. [ 293.211931][T10964] bond6: entered promiscuous mode [ 293.226097][T10964] 8021q: adding VLAN 0 to HW filter on device bond6 [ 293.404613][T10971] bond6: (slave bridge1): making interface the new active one [ 293.430606][T10971] bridge1: entered promiscuous mode [ 293.452638][T10971] bond6: (slave bridge1): Enslaving as an active interface with an up link [ 294.992381][T11016] bond7: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 295.231401][T11016] bond7 (unregistering): Released all slaves [ 295.687716][T11031] __nla_validate_parse: 6 callbacks suppressed [ 295.687739][T11031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1886'. [ 295.706256][T11033] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1887'. [ 295.726866][T10956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.915223][T11033] 8021q: adding VLAN 0 to HW filter on device bond7 [ 296.032292][T11035] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 296.372901][T11053] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1894'. [ 296.486288][T11053] netlink: 'syz.0.1894': attribute type 1 has an invalid length. [ 296.988568][T11069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1901'. [ 297.122671][T11077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1904'. [ 297.165766][ T76] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.174995][T11077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1904'. [ 297.190833][ T76] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.211635][ T76] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.243863][ T76] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 297.746974][T11097] syzkaller0: entered promiscuous mode [ 297.761161][T11097] syzkaller0: entered allmulticast mode [ 301.000174][T11113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 303.422649][T11156] netlink: 'syz.4.1933': attribute type 1 has an invalid length. [ 303.455284][T11156] netlink: 'syz.4.1933': attribute type 4 has an invalid length. [ 303.480009][T11156] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1933'. [ 303.508714][T11160] netlink: 'syz.4.1933': attribute type 1 has an invalid length. [ 303.534770][T11160] netlink: 'syz.4.1933': attribute type 4 has an invalid length. [ 303.566352][T11160] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1933'. [ 303.842775][T11173] veth0: entered promiscuous mode [ 304.600941][T11168] veth0: left promiscuous mode [ 305.153324][T11205] IPv4: Oversized IP packet from 127.202.26.0 [ 305.443058][T11214] netlink: 'syz.4.1954': attribute type 1 has an invalid length. [ 305.480714][T11211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.511055][T11211] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.586618][T11211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.671181][T11211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.681877][T11211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.699749][T11211] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 305.773235][T11214] bond5: entered promiscuous mode [ 305.780181][T11214] 8021q: adding VLAN 0 to HW filter on device bond5 [ 305.802722][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.809985][ T13] bridge0: port 1(bridge_slave_0) entered listening state [ 305.860318][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.867776][ T13] bridge0: port 2(bridge_slave_1) entered listening state [ 306.378526][T11253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.685695][T11231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.061092][T11285] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1976'. [ 307.364577][T11293] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1978'. [ 307.505172][T11300] syzkaller1: entered promiscuous mode [ 307.524279][T11300] syzkaller1: entered allmulticast mode [ 307.722175][T11308] gretap0: entered promiscuous mode [ 308.074432][T11323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1990'. [ 309.517791][T11359] netlink: 'syz.3.2003': attribute type 10 has an invalid length. [ 310.091692][T11376] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2008'. [ 311.153453][T11397] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2016'. [ 312.404690][T11404] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 313.389076][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2031'. [ 313.618764][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807aa9c400: rx timeout, send abort [ 313.869867][T11456] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2035'. [ 314.093488][T11460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2037'. [ 314.116949][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807aa9d800: rx timeout, send abort [ 314.135405][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807aa9c400: abort rx timeout. Force session deactivation [ 314.629530][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88807aa9d800: abort rx timeout. Force session deactivation [ 315.982955][T11475] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2042'. [ 316.139010][T11480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2045'. [ 316.310599][T11487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2047'. [ 316.494313][T11496] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2051'. [ 316.753081][T11508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2056'. [ 316.764206][T11506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2055'. [ 316.957109][T11517] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2058'. [ 317.182792][T11523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2061'. [ 317.495199][T11534] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2066'. [ 317.562365][T11505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.619545][T11538] netlink: 'syz.4.2068': attribute type 39 has an invalid length. [ 317.890725][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.956670][T11553] syzkaller1: entered promiscuous mode [ 317.973463][T11553] syzkaller1: entered allmulticast mode [ 318.618747][T11570] sctp: [Deprecated]: syz.0.2081 (pid 11570) Use of struct sctp_assoc_value in delayed_ack socket option. [ 318.618747][T11570] Use struct sctp_sack_info instead [ 318.910668][T11577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2084'. [ 321.083782][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 321.091617][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 321.139753][T11641] netlink: 'syz.1.2101': attribute type 1 has an invalid length. [ 321.172600][T11641] netlink: 'syz.1.2101': attribute type 4 has an invalid length. [ 321.229867][T11655] netlink: 'syz.1.2101': attribute type 1 has an invalid length. [ 321.292265][T11641] __nla_validate_parse: 6 callbacks suppressed [ 321.292285][T11641] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2101'. [ 321.402681][T11655] netlink: 'syz.1.2101': attribute type 4 has an invalid length. [ 321.452152][T11655] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.2101'. [ 321.749030][T11664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2106'. [ 321.772116][T11664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2106'. [ 321.887008][T11670] netlink: 'syz.2.2109': attribute type 1 has an invalid length. [ 322.035721][T11670] 8021q: adding VLAN 0 to HW filter on device bond5 [ 322.411275][T11675] bond5: (slave veth9): Enslaving as an active interface with a down link [ 322.469588][T11679] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 322.494529][T11679] bond5: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 322.886512][T11714] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 323.458040][T11701] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 323.795929][T11729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2128'. [ 324.194248][T11749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2134'. [ 324.459212][T11756] syzkaller0: entered promiscuous mode [ 324.465182][T11756] syzkaller0: entered allmulticast mode [ 327.503167][T11819] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2162'. [ 329.479361][T11871] bond4: (slave ip6gre1): Releasing backup interface [ 329.487351][T11871] ip6gre1: left promiscuous mode [ 329.535115][T11871] bond5: (slave veth9): Releasing active interface [ 329.617955][T11873] team0: Mode changed to "loadbalance" [ 331.091183][T11892] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 331.109509][T11892] netlink: 'syz.3.2189': attribute type 1 has an invalid length. [ 331.151163][T11892] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2189'. [ 331.591558][T11932] 0: reclassify loop, rule prio 0, protocol 03 [ 332.002793][ T5282] veth0_vlan: left promiscuous mode [ 332.049214][ T9842] veth0_vlan: entered promiscuous mode [ 332.478984][T11963] syzkaller0: entered promiscuous mode [ 332.484787][T11963] syzkaller0: entered allmulticast mode [ 332.502246][T11965] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2206'. [ 332.617283][T11969] smc: removing ib device syz1 [ 332.652710][T11970] netlink: 'syz.4.2207': attribute type 3 has an invalid length. [ 332.834387][T11969] smbdirect: ib_dev[syz1] removed [ 334.017429][T11915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 334.288714][T11975] netlink: 'syz.2.2209': attribute type 13 has an invalid length. [ 335.878621][T11984] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2211'. [ 336.446474][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.453881][ C1] bridge0: topology change detected, propagating [ 336.460650][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.468130][ C0] bridge0: topology change detected, propagating [ 336.699759][T12022] Bluetooth: MGMT ver 1.23 [ 337.693339][T12057] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.701205][T12057] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.807219][T12057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.110751][ T6936] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.121451][ T6936] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.143507][ T6936] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.153225][ T6936] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.496189][T12073] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2236'. [ 338.517339][T12073] syzkaller1: entered promiscuous mode [ 338.522906][T12073] syzkaller1: entered allmulticast mode [ 338.681003][T12071] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 339.377814][T12005] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 339.556670][T12094] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.430584][T12133] IPv6: sit3: Disabled Multicast RS [ 343.918364][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'. [ 343.960561][T12190] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2264'. [ 344.073176][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2266'. [ 344.397056][T12204] team0 (unregistering): Port device team_slave_0 removed [ 344.433212][T12204] team0 (unregistering): Port device team_slave_1 removed [ 344.456917][T12204] team0 (unregistering): Port device bridge0 removed [ 344.989809][T12228] netlink: 'syz.3.2278': attribute type 4 has an invalid length. [ 345.041392][T12228] netlink: 'syz.3.2278': attribute type 4 has an invalid length. [ 345.281877][T12237] tipc: Started in network mode [ 345.288393][T12237] tipc: Node identity 02d33f7f5776, cluster identity 4711 [ 345.306060][T12237] tipc: Enabled bearer , priority 0 [ 345.397027][T12237] syzkaller0: entered promiscuous mode [ 345.402700][T12237] syzkaller0: entered allmulticast mode [ 345.411019][T12237] tipc: Resetting bearer [ 345.445955][T12240] 0: reclassify loop, rule prio 0, protocol 03 [ 345.510407][T12234] tipc: Resetting bearer [ 346.604113][T12267] netlink: 'syz.4.2293': attribute type 1 has an invalid length. [ 348.233019][T12234] tipc: Disabling bearer [ 348.406676][ T9830] tipc: Node number set to 1436893055 [ 348.417442][T12267] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 348.474221][T12273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2294'. [ 348.524666][T12280] batadv_slave_1: entered allmulticast mode [ 349.267429][T12313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2310'. [ 350.433463][T12349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2323'. [ 350.815235][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2329'. [ 350.825563][T12367] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2329'. [ 351.181775][T12380] bond8: entered allmulticast mode [ 351.311266][T12382] gre3: entered promiscuous mode [ 351.338097][T12382] gre3: entered allmulticast mode [ 351.370798][T12382] bond8: (slave gre3): The slave device specified does not support setting the MAC address [ 351.424144][T12382] bond8: (slave gre3): Error -95 calling set_mac_address [ 351.663058][T12399] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2339'. [ 351.799355][T12399] 8021q: adding VLAN 0 to HW filter on device bond4 [ 351.869691][T12407] vlan4: entered allmulticast mode [ 351.892789][T12407] erspan0: entered allmulticast mode [ 351.905142][T12407] bond4: (slave vlan4): Error -34 calling dev_set_mtu [ 351.963105][T12411] geneve3: entered promiscuous mode [ 352.098827][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 45271 - 0 [ 352.119380][T12421] netlink: 'syz.2.2345': attribute type 1 has an invalid length. [ 352.133205][ T36] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 45271 - 0 [ 352.151509][T12421] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2345'. [ 352.164658][ T6936] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 45271 - 0 [ 352.182235][ T6936] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 45271 - 0 [ 352.186819][T12421] netlink: 'syz.2.2345': attribute type 1 has an invalid length. [ 352.239912][T12421] netlink: 29 bytes leftover after parsing attributes in process `syz.2.2345'. [ 353.007250][T12446] sctp: [Deprecated]: syz.3.2355 (pid 12446) Use of int in max_burst socket option. [ 353.007250][T12446] Use struct sctp_assoc_value instead [ 353.922895][ T9830] hid-generic 0005:0C45:1030.0001: unknown main item tag 0x0 [ 354.135836][ T9830] hid-generic 0005:0C45:1030.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 354.444812][T12470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2365'. [ 354.468007][T12470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2365'. [ 354.521319][T12477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2365'. [ 354.532639][T12477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2365'. [ 354.761048][T12481] netlink: 'syz.4.2369': attribute type 1 has an invalid length. [ 354.873601][T12488] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2371'. [ 354.878796][T12481] 8021q: adding VLAN 0 to HW filter on device bond6 [ 354.940583][T12486] bond6: (slave geneve3): making interface the new active one [ 354.952868][T12486] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 355.341908][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2375'. [ 355.367729][T12498] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2375'. [ 356.013182][T12533] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2386'. [ 357.093353][T12571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2399'. [ 357.134046][T12569] team0: Port device team_slave_1 removed [ 357.461841][T12585] netlink: 'syz.0.2405': attribute type 1 has an invalid length. [ 357.502838][T12585] 8021q: adding VLAN 0 to HW filter on device bond9 [ 357.522798][T12589] bond9: (slave dummy0): making interface the new active one [ 357.535289][T12589] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 357.592309][T12591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2407'. [ 357.628472][T12591] gretap0: entered promiscuous mode [ 357.651627][T12591] gretap0: left promiscuous mode [ 357.681728][T12585] : renamed from dummy0 (while UP) [ 357.885399][T12601] tipc: Started in network mode [ 357.890540][T12601] tipc: Node identity 4a8663a07223, cluster identity 4711 [ 357.901871][T12601] tipc: Enabled bearer , priority 0 [ 358.038646][T12601] syzkaller0: entered promiscuous mode [ 358.047567][T12601] syzkaller0: entered allmulticast mode [ 358.054158][T12601] tipc: Resetting bearer [ 358.122151][T12600] tipc: Resetting bearer [ 360.927396][T12600] tipc: Disabling bearer [ 361.278730][T12621] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.286547][T12621] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.721210][T12621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.415226][ T9842] tipc: Node number set to 950363040 [ 362.571152][ T1172] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.613707][ T1172] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.631923][ T1172] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.651671][ T1172] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.707901][ T1172] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.749551][ T1172] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.761814][T12663] __nla_validate_parse: 6 callbacks suppressed [ 362.761862][T12663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2425'. [ 362.800224][ T1172] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 362.838931][ T1172] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.966071][T12673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2428'. [ 363.030819][T12675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2429'. [ 363.240720][T12683] bond5 (unregistering): Released all slaves [ 364.007574][T12685] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 364.655834][T12726] bond6: entered allmulticast mode [ 364.679749][T12725] netlink: 'syz.0.2445': attribute type 1 has an invalid length. [ 364.751467][T12734] macvlan0: entered promiscuous mode [ 364.780164][T12734] macvlan0: entered allmulticast mode [ 364.816202][T12734] bond6: (slave macvlan0): Opening slave failed [ 365.160552][T12751] netlink: 'syz.0.2456': attribute type 1 has an invalid length. [ 365.296328][T12751] 8021q: adding VLAN 0 to HW filter on device bond10 [ 365.350055][T12754] bond10: (slave syz_tun): Enslaving as a backup interface with an up link [ 365.378246][T12760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2457'. [ 365.393993][ T6935] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 365.414835][T12756] veth0: entered promiscuous mode [ 366.336305][T12770] bond2: (slave macvlan1): Releasing backup interface [ 366.598465][T12788] syzkaller1: entered promiscuous mode [ 366.606450][T12788] syzkaller1: entered allmulticast mode [ 366.701510][T12795] netlink: 'syz.0.2467': attribute type 3 has an invalid length. [ 367.670226][T12825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.676447][T12843] team0: Port device macvlan2 removed [ 372.037975][T12899] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2503'. [ 372.135932][T12901] syzkaller0: entered promiscuous mode [ 372.151948][T12901] syzkaller0: entered allmulticast mode [ 372.209152][T12901] tipc: Started in network mode [ 372.226600][T12901] tipc: Node identity 8608564cc1a8, cluster identity 4711 [ 372.236230][T12901] tipc: Enabled bearer , priority 0 [ 372.255848][T12901] tipc: Resetting bearer [ 372.276975][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2506'. [ 372.328023][T12909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2506'. [ 372.341838][T12901] tipc: Disabling bearer [ 372.533850][T12922] hsr0: entered allmulticast mode [ 372.546929][T12922] hsr_slave_0: entered allmulticast mode [ 372.566896][T12922] hsr_slave_1: entered allmulticast mode [ 372.804553][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2515'. [ 373.196063][T12945] netlink: 'syz.2.2521': attribute type 1 has an invalid length. [ 373.234883][T12945] 8021q: adding VLAN 0 to HW filter on device bond7 [ 373.384006][T12945] bond7: (slave gretap1): making interface the new active one [ 373.422805][T12945] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 373.497144][T12948] bond7 (unregistering): (slave gretap1): Releasing active interface [ 373.536753][T12948] bond7 (unregistering): Released all slaves [ 374.096257][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 374.130295][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2535'. [ 374.469066][T12987] syzkaller1: entered promiscuous mode [ 374.499214][T12987] syzkaller1: entered allmulticast mode [ 376.092008][T13065] syzkaller0: entered promiscuous mode [ 376.103829][T13065] syzkaller0: entered allmulticast mode [ 376.111018][T13066] netlink: 'syz.1.2560': attribute type 12 has an invalid length. [ 377.045564][T13076] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2564'. [ 377.170349][T13079] syzkaller0: entered promiscuous mode [ 377.184560][T13079] syzkaller0: entered allmulticast mode [ 377.436943][T13091] netlink: 'syz.0.2569': attribute type 1 has an invalid length. [ 377.544104][T13099] 8021q: adding VLAN 0 to HW filter on device bond12 [ 377.555364][T13099] bond11: (slave bond12): making interface the new active one [ 377.564671][T13099] bond11: (slave bond12): Enslaving as an active interface with an up link [ 377.620912][T13091] bond11: (slave gretap3): Enslaving as a backup interface with an up link [ 377.655202][T13091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2569'. [ 377.692154][T13091] 8021q: adding VLAN 0 to HW filter on device bond11 [ 378.584043][T13134] xt_policy: output policy not valid in PREROUTING and INPUT [ 378.907341][ C1] TC_ACT_REPEAT abuse ? [ 378.951050][T13148] syzkaller0: entered promiscuous mode [ 378.970158][T13148] syzkaller0: entered allmulticast mode [ 379.249450][T13165] netlink: 'syz.1.2594': attribute type 4 has an invalid length. [ 379.294447][T13165] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2594'. [ 379.634095][T13177] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2598'. [ 379.896316][T13192] netlink: 'syz.4.2603': attribute type 1 has an invalid length. [ 379.946103][T13192] 8021q: adding VLAN 0 to HW filter on device bond7 [ 380.000191][T13192] bond7: (slave gretap2): making interface the new active one [ 380.040337][T13192] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 380.082214][T13197] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 380.097890][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2606'. [ 380.114157][T13192] netlink: 'syz.4.2603': attribute type 10 has an invalid length. [ 380.122533][T13192] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2603'. [ 380.149592][T13192] dummy0: entered promiscuous mode [ 380.156935][T13192] bond7: (slave dummy0): Releasing active interface [ 380.292778][T13207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2608'. [ 380.325334][T13207] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2608'. [ 380.972475][T13224] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2613'. [ 381.151655][T13227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2613'. [ 382.119450][T13157] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 383.533190][T13216] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 384.296816][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2629'. [ 384.328111][T13269] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2629'. [ 384.347951][T13271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2630'. [ 384.462122][T13275] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2631'. [ 384.636231][T13281] netlink: 'syz.1.2642': attribute type 1 has an invalid length. [ 384.716860][T13281] 8021q: adding VLAN 0 to HW filter on device bond7 [ 384.731802][T13286] bond7: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 384.779186][T13286] bond7: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 384.816732][T13281] bond7: (slave ip6gretap1): making interface the new active one [ 384.832688][T13281] bond7: (slave ip6gretap1): Enslaving as an active interface with an up link [ 385.064931][T13296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2637'. [ 385.202067][T13277] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 385.688400][T13327] netlink: 'syz.2.2645': attribute type 1 has an invalid length. [ 385.919197][T13327] 8021q: adding VLAN 0 to HW filter on device bond7 [ 386.027286][T13330] bond7: (slave geneve2): making interface the new active one [ 386.036112][T13338] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 386.089612][T13330] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 386.186917][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.339719][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.411013][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.456075][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 386.629125][T13360] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2649'. [ 386.804995][T13371] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2652'. [ 386.876227][T13360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 387.144534][T13382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2656'. [ 387.241943][T13388] geneve3: entered promiscuous mode [ 389.350464][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2679'. [ 389.410138][T13448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2679'. [ 389.832862][T13459] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2683'. [ 390.267540][T13465] netlink: 'syz.4.2685': attribute type 12 has an invalid length. [ 390.866628][T13505] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2697'. [ 391.018271][T13508] bond8: entered promiscuous mode [ 391.243436][T13524] lo: Caught tx_queue_len zero misconfig [ 391.365291][T13527] netlink: 'syz.2.2704': attribute type 12 has an invalid length. [ 391.528428][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'. [ 391.537749][T13535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2707'. [ 392.405646][T13569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'. [ 393.420318][T13580] netlink: 'syz.0.2718': attribute type 12 has an invalid length. [ 393.678898][T13610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2722'. [ 393.699503][T13610] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2722'. [ 393.729750][T13610] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2722'. [ 394.452586][T13631] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 394.995801][T13657] __nla_validate_parse: 1 callbacks suppressed [ 394.995820][T13657] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2741'. [ 395.879811][T13686] bond9: option ad_user_port_key: invalid value (65535) [ 395.892842][T13686] bond9: option ad_user_port_key: allowed values 0 - 1023 [ 395.908028][T13686] bond9 (unregistering): Released all slaves [ 396.235078][T13695] tipc: Enabled bearer , priority 0 [ 396.307075][T13695] syzkaller0: entered promiscuous mode [ 396.312813][T13695] syzkaller0: entered allmulticast mode [ 396.319863][T13695] tipc: Resetting bearer [ 396.354852][T13694] tipc: Resetting bearer [ 396.518200][T13700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2756'. [ 396.789304][ T80] IPVS: starting estimator thread 0... [ 396.899220][T13711] IPVS: using max 28 ests per chain, 67200 per kthread [ 399.236285][T13694] tipc: Disabling bearer [ 399.505944][T13754] tipc: Started in network mode [ 399.511005][T13754] tipc: Node identity b2b63225cd05, cluster identity 4711 [ 399.519816][T13754] tipc: Enabled bearer , priority 0 [ 399.568710][T13754] tipc: Resetting bearer [ 399.601073][T13753] tipc: Resetting bearer [ 400.936007][T13795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2781'. [ 402.342274][T13753] tipc: Disabling bearer [ 402.409959][ T9837] tipc: Node number set to 2142450213 [ 402.702514][T13809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2787'. [ 402.724520][T13809] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2787'. [ 402.746629][T13809] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2787'. [ 402.770840][T13808] block nbd0: server does not support multiple connections per device. [ 402.782621][T13808] block nbd0: shutting down sockets [ 402.812705][T13812] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.829011][T13812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.881047][ T48] nci: nci_rsp_packet: unknown rsp opcode 0x6 [ 402.932977][T13812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.948735][T13812] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.961000][T13812] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.979812][T13812] veth1_macvtap: left promiscuous mode [ 402.987720][T13812] veth0_macvtap: left promiscuous mode [ 402.995383][T13812] veth0_macvtap: entered promiscuous mode [ 403.002843][T13812] veth1_macvtap: entered promiscuous mode [ 403.018984][T13812] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 403.028354][T13812] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.038085][T13812] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.049084][T13812] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.069678][T13812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.110648][T13812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.122727][T13812] 8021q: adding VLAN 0 to HW filter on device bond3 [ 403.131870][T13812] veth0_to_team: entered promiscuous mode [ 403.142414][T13812] 8021q: adding VLAN 0 to HW filter on device bond4 [ 403.178252][T13812] 8021q: adding VLAN 0 to HW filter on device bond5 [ 403.214498][T13812] 8021q: adding VLAN 0 to HW filter on device bond6 [ 403.247731][ T6932] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.254975][ T6932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.266077][ T6932] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.273349][ T6932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.313019][ T6935] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.322190][ T6935] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.332580][ T6935] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.342732][ T6935] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.411950][ T6935] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.438796][ T6935] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.465894][ T6935] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.480569][ T6935] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.664249][T13884] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 405.762973][T13814] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 406.223108][T13902] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2817'. [ 407.377365][T13950] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2829'. [ 407.401440][T13950] bridge_slave_1: Caught tx_queue_len zero misconfig [ 407.435992][T13950] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.533131][T13950] bridge_slave_1 (unregistering): left allmulticast mode [ 407.540855][T13950] bridge_slave_1 (unregistering): left promiscuous mode [ 407.548382][T13950] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.640088][ T5639] Bluetooth: hci3: link tx timeout [ 407.646666][T13931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.661501][ T5639] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 407.932245][T13976] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2835'. [ 408.774110][T14004] block nbd0: server does not support multiple connections per device. [ 408.786428][T14004] block nbd0: shutting down sockets [ 408.849914][T14015] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2850'. [ 409.396396][ T6935] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.413182][ T6935] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.433860][ T6935] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.460643][ T6935] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.614293][T14036] bridge0: port 3(wlan1) entered disabled state [ 409.723943][ T5639] Bluetooth: hci3: command 0x0406 tx timeout [ 409.739964][T14049] syzkaller0: entered promiscuous mode [ 409.752217][T14049] syzkaller0: entered allmulticast mode [ 410.582200][T14085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2868'. [ 410.610329][T14085] netlink: 'syz.1.2868': attribute type 1 has an invalid length. [ 410.620286][T14085] netlink: 'syz.1.2868': attribute type 1 has an invalid length. [ 411.051981][T14095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2872'. [ 411.125870][T14095] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 411.806052][T14115] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 411.828325][T14115] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 411.842224][T14115] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 411.954272][T14119] netlink: 'syz.0.2882': attribute type 10 has an invalid length. [ 411.962926][T14119] syz_tun: entered promiscuous mode [ 411.973003][T14119] bond10: (slave syz_tun): Removing an active aggregator [ 411.984702][T14119] bond10: (slave syz_tun): Releasing backup interface [ 412.000084][T14119] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 412.018347][ T6935] bond0: (slave bond_slave_0): interface is now down [ 412.054664][ T6935] bond0: (slave syz_tun): interface is now down [ 412.061101][ T6935] bond0: no route to arp_ip_target 24.0.0.0 and arp_validate is set [ 412.111713][ T6935] bond0: now running without any active interface! [ 412.344979][T14128] syzkaller0: entered promiscuous mode [ 412.350700][T14128] syzkaller0: entered allmulticast mode [ 412.582899][T14137] netlink: 'syz.2.2889': attribute type 10 has an invalid length. [ 412.601730][T14137] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.635701][T14137] bond0: (slave team0): Enslaving as an active interface with an up link [ 412.798424][T14140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.832141][T14144] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2892'. [ 412.867005][T14140] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.950553][T14150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.998426][T14152] netlink: 'syz.2.2894': attribute type 21 has an invalid length. [ 413.020729][T14148] xt_CT: You must specify a L4 protocol and not use inversions on it [ 414.163284][T14193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2910'. [ 414.165426][T14191] bridge_slave_0: left allmulticast mode [ 414.263621][T14191] bridge_slave_0: left promiscuous mode [ 414.293874][T14191] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.441194][T14191] bridge_slave_1: left allmulticast mode [ 414.486190][T14191] bridge_slave_1: left promiscuous mode [ 414.527146][T14191] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.572383][T14191] bond0: (slave bond_slave_0): Releasing backup interface [ 414.645247][T14191] team0: Port device team_slave_0 removed [ 414.652950][T14191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.678565][T14191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.692212][T14191] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 414.767304][T14199] bridge0: port 2(veth0) entered blocking state [ 414.789894][T14199] bridge0: port 2(veth0) entered disabled state [ 414.810717][T14199] veth0: entered allmulticast mode [ 414.835773][T14199] veth0: entered promiscuous mode [ 414.863282][T14198] team0: Mode changed to "loadbalance" [ 414.870377][T14203] bridge0: port 4(veth1) entered blocking state [ 414.886784][T14203] bridge0: port 4(veth1) entered disabled state [ 414.902326][T14203] veth1: entered allmulticast mode [ 414.920311][T14203] veth1: entered promiscuous mode [ 414.960581][T14215] syzkaller0: entered promiscuous mode [ 414.973420][T14215] syzkaller0: entered allmulticast mode [ 415.358409][T14231] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2917'. [ 415.714644][T14235] syzkaller0: entered promiscuous mode [ 415.725211][T14235] syzkaller0: entered allmulticast mode [ 416.018167][T14244] tipc: Enabled bearer , priority 0 [ 416.130109][T14244] syzkaller0: entered promiscuous mode [ 416.144011][T14244] syzkaller0: entered allmulticast mode [ 416.152092][T14244] tipc: Resetting bearer [ 416.252819][ T6935] tipc: Resetting bearer [ 416.311546][T14243] tipc: Resetting bearer [ 419.345244][T14243] tipc: Disabling bearer [ 419.387511][T14258] tipc: Enabled bearer , priority 0 [ 419.418833][T14264] syzkaller0: entered promiscuous mode [ 419.450834][T14264] syzkaller0: entered allmulticast mode [ 419.468078][ T9837] tipc: Node number set to 1201690188 [ 419.581397][T14256] tipc: Resetting bearer [ 419.636883][T14256] tipc: Disabling bearer [ 419.844762][T14284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2930'. [ 420.001118][T14291] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2932'. [ 420.670091][T14305] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2935'. [ 420.761143][T14310] syzkaller1: entered promiscuous mode [ 420.793789][T14310] syzkaller1: entered allmulticast mode [ 421.013809][T14322] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2940'. [ 421.032285][T14318] syzkaller0: entered promiscuous mode [ 421.044109][T14318] syzkaller0: entered allmulticast mode [ 421.452725][T14333] 8021q: adding VLAN 0 to HW filter on device bond10 [ 421.487147][T14333] bond9: (slave bond10): Enslaving as an active interface with an up link [ 421.607631][T14327] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 421.833092][T14364] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2947'. [ 421.900101][T14366] netlink: 'syz.1.2948': attribute type 1 has an invalid length. [ 422.067707][T14366] bond11: entered promiscuous mode [ 422.108894][T14366] bond11: entered allmulticast mode [ 422.138487][T14366] 8021q: adding VLAN 0 to HW filter on device bond11 [ 422.260717][T14371] erspan1: entered allmulticast mode [ 422.322272][T14371] bond11: (slave erspan1): making interface the new active one [ 422.335442][T14371] erspan1: entered promiscuous mode [ 422.348591][T14371] [ 422.350977][T14371] ============================================ [ 422.357219][T14371] WARNING: possible recursive locking detected [ 422.363826][T14371] syzkaller #0 Not tainted [ 422.368712][T14371] -------------------------------------------- [ 422.374964][T14371] syz.1.2948/14371 is trying to acquire lock: [ 422.381167][T14371] ffff88807a4ec958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 422.391194][T14371] [ 422.391194][T14371] but task is already holding lock: [ 422.398571][T14371] ffff888034805d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 422.408440][T14371] [ 422.408440][T14371] other info that might help us debug this: [ 422.416606][T14371] Possible unsafe locking scenario: [ 422.416606][T14371] [ 422.424333][T14371] CPU0 [ 422.427629][T14371] ---- [ 422.430976][T14371] lock(&qdisc_xmit_lock_key#4); [ 422.436085][T14371] lock(&qdisc_xmit_lock_key#4); [ 422.441309][T14371] [ 422.441309][T14371] *** DEADLOCK *** [ 422.441309][T14371] [ 422.449506][T14371] May be due to missing lock nesting notation [ 422.449506][T14371] [ 422.457976][T14371] 9 locks held by syz.1.2948/14371: [ 422.463191][T14371] #0: ffffffff90591188 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 422.472960][T14371] #1: ffffffff9002d000 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 422.482043][T14371] #2: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 422.492076][T14371] #3: ffff888020783228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820 [ 422.504996][T14371] #4: ffff888034805d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 422.515489][T14371] #5: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 422.524558][T14371] #6: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 422.534343][T14371] #7: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3820 [ 422.544297][T14371] #8: ffff88807f161228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x1143/0x3820 [ 422.557041][T14371] [ 422.557041][T14371] stack backtrace: [ 422.562990][T14371] CPU: 1 UID: 0 PID: 14371 Comm: syz.1.2948 Not tainted syzkaller #0 PREEMPT(full) [ 422.563014][T14371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 422.563036][T14371] Call Trace: [ 422.563043][T14371] [ 422.563066][T14371] dump_stack_lvl+0xe8/0x150 [ 422.563152][T14371] print_deadlock_bug+0x279/0x290 [ 422.563171][T14371] __lock_acquire+0x24df/0x2cf0 [ 422.563201][T14371] ? __pfx_netif_skb_features+0x10/0x10 [ 422.563249][T14371] ? unwind_next_frame+0x8f/0x2550 [ 422.563268][T14371] ? rcu_is_watching+0x15/0xb0 [ 422.563283][T14371] ? __kasan_check_byte+0x12/0x40 [ 422.563311][T14371] ? __lock_acquire+0x683/0x2cf0 [ 422.563337][T14371] ? sch_direct_xmit+0x15f/0x4c0 [ 422.563352][T14371] lock_acquire+0x106/0x350 [ 422.563375][T14371] ? sch_direct_xmit+0x15f/0x4c0 [ 422.563396][T14371] _raw_spin_lock+0x2e/0x40 [ 422.563440][T14371] ? sch_direct_xmit+0x15f/0x4c0 [ 422.563455][T14371] sch_direct_xmit+0x15f/0x4c0 [ 422.563475][T14371] ? __pfx_sch_direct_xmit+0x10/0x10 [ 422.563495][T14371] __dev_queue_xmit+0x177f/0x3820 [ 422.563524][T14371] ? __dev_queue_xmit+0x29b/0x3820 [ 422.563548][T14371] ? add_lock_to_list+0xc7/0x100 [ 422.563565][T14371] ? lockdep_unlock+0x5d/0xd0 [ 422.563585][T14371] ? __lock_acquire+0x13e8/0x2cf0 [ 422.563610][T14371] ? __pfx___dev_queue_xmit+0x10/0x10 [ 422.563644][T14371] ? ip_finish_output2+0x972/0x10b0 [ 422.563664][T14371] ip_finish_output2+0xbda/0x10b0 [ 422.563683][T14371] ? ip_finish_output2+0x3de/0x10b0 [ 422.563704][T14371] ip_output+0x29f/0x450 [ 422.563719][T14371] ? ip_output+0x5a/0x450 [ 422.563741][T14371] iptunnel_xmit+0x626/0xd10 [ 422.563794][T14371] ip_tunnel_xmit+0x195b/0x2040 [ 422.563839][T14371] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 422.563858][T14371] ? __pfx_gre_build_header+0x10/0x10 [ 422.563905][T14371] ? kfree+0x1c5/0x640 [ 422.563924][T14371] ? pskb_expand_head+0x469/0x13a0 [ 422.563970][T14371] __gre_xmit+0x19e/0x240 [ 422.563997][T14371] ? __pfx___gre_xmit+0x10/0x10 [ 422.564025][T14371] erspan_xmit+0xad5/0x1590 [ 422.564055][T14371] ? __pfx_erspan_xmit+0x10/0x10 [ 422.564097][T14371] dev_hard_start_xmit+0x2cd/0x830 [ 422.564125][T14371] sch_direct_xmit+0x257/0x4c0 [ 422.564144][T14371] ? __pfx_sch_direct_xmit+0x10/0x10 [ 422.564161][T14371] ? do_set_master+0x470/0x720 [ 422.564184][T14371] __dev_queue_xmit+0x177f/0x3820 [ 422.564212][T14371] ? __dev_queue_xmit+0x29b/0x3820 [ 422.564239][T14371] ? __pfx___dev_queue_xmit+0x10/0x10 [ 422.564261][T14371] ? rcu_is_watching+0x15/0xb0 [ 422.564276][T14371] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 422.564298][T14371] ? trace_kmem_cache_alloc+0x29/0xe0 [ 422.564317][T14371] ? kmem_cache_alloc_node_noprof+0x111/0x610 [ 422.564339][T14371] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 422.564360][T14371] ? local_lock_release+0x9c/0x160 [ 422.564375][T14371] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 422.564401][T14371] ? __alloc_skb+0x4cc/0x7a0 [ 422.564418][T14371] ? alb_send_lp_vid+0x14e/0x550 [ 422.564506][T14371] alb_send_lp_vid+0x348/0x550 [ 422.564534][T14371] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 422.564562][T14371] ? __pfx_alb_set_slave_mac_addr+0x10/0x10 [ 422.564590][T14371] alb_send_learning_packets+0x12c/0x300 [ 422.564617][T14371] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 422.564644][T14371] ? alb_swap_mac_addr+0x230/0x340 [ 422.564672][T14371] alb_fasten_mac_swap+0x45d/0xf70 [ 422.564698][T14371] ? dev_addr_mod+0x1ba/0x350 [ 422.564747][T14371] bond_alb_handle_active_change+0xc85/0xf50 [ 422.564776][T14371] ? __pfx_bond_alb_handle_active_change+0x10/0x10 [ 422.564801][T14371] ? __hw_addr_add_ex+0x182/0x520 [ 422.564832][T14371] ? __local_bh_enable_ip+0xd0/0x130 [ 422.564855][T14371] bond_change_active_slave+0x1098/0x36d0 [ 422.564899][T14371] ? __pfx_do_sync_core+0x10/0x10 [ 422.564924][T14371] ? smp_call_function_many_cond+0x112a/0x14b0 [ 422.564951][T14371] ? __pfx_bond_change_active_slave+0x10/0x10 [ 422.564974][T14371] ? __pfx_do_sync_core+0x10/0x10 [ 422.564998][T14371] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 422.565023][T14371] ? bond_start_xmit+0x92/0x19e0 [ 422.565039][T14371] ? __pfx___text_poke+0x10/0x10 [ 422.565068][T14371] bond_select_active_slave+0x8a6/0xcd0 [ 422.565093][T14371] ? __pfx_bond_select_active_slave+0x10/0x10 [ 422.565122][T14371] bond_enslave+0x239c/0x3b10 [ 422.565154][T14371] ? __pfx_bond_enslave+0x10/0x10 [ 422.565175][T14371] ? __dev_notify_flags+0x3d4/0x510 [ 422.565199][T14371] ? __pfx___dev_change_flags+0x10/0x10 [ 422.565219][T14371] ? mutex_is_locked+0x17/0x50 [ 422.565237][T14371] do_set_master+0x563/0x720 [ 422.565260][T14371] rtnl_newlink_create+0x4c8/0x7b0 [ 422.565282][T14371] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 422.565303][T14371] ? __pfx___mutex_lock+0x10/0x10 [ 422.565352][T14371] ? ns_capable+0x89/0xe0 [ 422.565374][T14371] rtnl_newlink+0x166d/0x1c30 [ 422.565398][T14371] ? __pfx_rtnl_newlink+0x10/0x10 [ 422.565414][T14371] ? do_syscall_64+0x174/0x580 [ 422.565455][T14371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.565487][T14371] ? kasan_quarantine_put+0xbb/0x1f0 [ 422.565510][T14371] ? lockdep_hardirqs_on+0x7a/0x110 [ 422.565532][T14371] ? nlmon_xmit+0xb0/0x100 [ 422.565578][T14371] ? kmem_cache_free+0x182/0x650 [ 422.565607][T14371] ? __lock_acquire+0x683/0x2cf0 [ 422.565633][T14371] ? __dev_queue_xmit+0x29b/0x3820 [ 422.565685][T14371] ? __local_bh_enable_ip+0xd0/0x130 [ 422.565705][T14371] ? lockdep_hardirqs_on+0x7a/0x110 [ 422.565730][T14371] ? __dev_queue_xmit+0x29b/0x3820 [ 422.565752][T14371] ? __local_bh_enable_ip+0xd0/0x130 [ 422.565771][T14371] ? __dev_queue_xmit+0x29b/0x3820 [ 422.565795][T14371] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 422.565818][T14371] ? __pfx_rtnl_newlink+0x10/0x10 [ 422.565834][T14371] rtnetlink_rcv_msg+0x802/0xc00 [ 422.565852][T14371] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 422.565868][T14371] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 422.565884][T14371] ? ref_tracker_free+0x689/0x830 [ 422.565967][T14371] ? __pfx_ref_tracker_free+0x10/0x10 [ 422.565995][T14371] netlink_rcv_skb+0x226/0x4a0 [ 422.566054][T14371] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 422.566072][T14371] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 422.566097][T14371] ? netlink_deliver_tap+0x2e/0x1b0 [ 422.566116][T14371] ? netlink_deliver_tap+0x2e/0x1b0 [ 422.566139][T14371] netlink_unicast+0x7bb/0x940 [ 422.566162][T14371] netlink_sendmsg+0x813/0xb40 [ 422.566187][T14371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.566207][T14371] ? kasan_save_free_info+0x40/0x50 [ 422.566229][T14371] ? aa_sock_msg_perm+0xf1/0x1b0 [ 422.566275][T14371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.566295][T14371] sock_sendmsg_nosec+0x13a/0x180 [ 422.566361][T14371] ____sys_sendmsg+0x54e/0x850 [ 422.566383][T14371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.566406][T14371] ? import_iovec+0x73/0xa0 [ 422.566473][T14371] ___sys_sendmsg+0x2a5/0x360 [ 422.566493][T14371] ? __lock_acquire+0x683/0x2cf0 [ 422.566520][T14371] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.566542][T14371] ? tomoyo_path_number_perm+0x219/0x5f0 [ 422.566619][T14371] ? __fget_files+0x2a/0x420 [ 422.566643][T14371] ? __fget_files+0x3a2/0x420 [ 422.566671][T14371] __x64_sys_sendmsg+0x1b1/0x290 [ 422.566692][T14371] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.566711][T14371] ? kfree+0x4d/0x640 [ 422.566757][T14371] ? __pfx_kcov_ioctl+0x10/0x10 [ 422.566782][T14371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.566800][T14371] do_syscall_64+0x174/0x580 [ 422.566822][T14371] ? trace_irq_disable+0x3b/0x140 [ 422.566845][T14371] ? clear_bhb_loop+0x40/0x90 [ 422.566864][T14371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.566882][T14371] RIP: 0033:0x7ff08a79de99 [ 422.566935][T14371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.566951][T14371] RSP: 002b:00007ff08b70e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.566997][T14371] RAX: ffffffffffffffda RBX: 00007ff08aa26090 RCX: 00007ff08a79de99 [ 422.567010][T14371] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 422.567021][T14371] RBP: 00007ff08a833eaf R08: 0000000000000000 R09: 0000000000000000 [ 422.567032][T14371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.567042][T14371] R13: 00007ff08aa26128 R14: 00007ff08aa26090 R15: 00007ffdfe930c58 [ 422.567062][T14371] [ 423.458214][T14371] bond11: (slave erspan1): Enslaving as an active interface with an up link [ 423.570158][T14371] syz.1.2948 (14371) used greatest stack depth: 17864 bytes left