last executing test programs: 2.724808572s ago: executing program 1 (id=1174): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}}, 0x28) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="0100", 0x2}], 0x1, &(0x7f00000001c0)=[{0x18, 0x11a, 0x1, "15"}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/100, 0x64}], 0x1, &(0x7f0000000340)=""/100, 0x64}, 0x0) 2.724628502s ago: executing program 0 (id=1175): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newaddr={0x34, 0x14, 0x605, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x34}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="3333ff00000100112233445586dd6000000000183a2500000000000000000000000000000000ff0200000000000000000001ff0000018700a5a30000000020010000000000000000000000000001"], 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 2.373623804s ago: executing program 0 (id=1179): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x40, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x31}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @local}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:default_t:s0\x00'}]}, 0x40}}, 0x0) 2.268010448s ago: executing program 0 (id=1180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x1001}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x1388, @loopback}, 0x10) listen(r1, 0x5) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="450000280001000040847cca7f0000017f00000113881388000000000000000006000004"], 0x28) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 2.122831806s ago: executing program 2 (id=1183): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x3d0, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) sendto$inet6(r0, &(0x7f0000000100)='hello', 0x5, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 2.00007025s ago: executing program 2 (id=1184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, '01234567890123456789'}}]}]}, 0x54}}, 0x0) 1.970934164s ago: executing program 3 (id=1185): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'netpci0\x00', &(0x7f0000000280)=@ethtool_eeprom={0xb, 0x0, 0x0, 0x10, '\x00'/16}}) 1.857999952s ago: executing program 0 (id=1186): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000009c0)=@nat={'nat\x00', 0x670, 0x5, 0x678, 0x0, 0x0, 0xfeffffff, 0x330, 0x0, 0x5e0, 0x5e0, 0xffffffff, 0x5e0, 0x5e0, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0x98}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @gre_key=0x80}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010100, @ipv4=@dev, @port=0xfffd, @port=0xfffd}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x0}}}}, 0x6d8) 1.69918853s ago: executing program 1 (id=1188): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000b00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000f00)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001300)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x3e8, 0xa, 0x64, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=@getqdisc={0x24, 0x26, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 1.641923393s ago: executing program 2 (id=1189): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x6bb, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x6bb, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000140)="000000011a2b3c4d000100000100"/154, 0x9c) write(r2, &(0x7f0000000200)="000000011a2b3c4d0002000001000100"/156, 0x9c) write(r1, &(0x7f00000002c0)="000000011a2b3c4d00070000123400"/160, 0xa4) write(r2, &(0x7f0000000380)="000000011a2b3c4d00080000567812340100"/32, 0x20) 1.641688102s ago: executing program 0 (id=1190): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000001000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180)='\x00\x00\x00\x00', &(0x7f00000000c0)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)=""/100, 0x64}], 0x1}, 0x0) 1.4471887s ago: executing program 4 (id=1191): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)={0x18, 0x14, 0x601, 0x0, 0x0, "", [@typed={0x8, 0x2, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0) 1.389206534s ago: executing program 1 (id=1192): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xa, 0xa8, @random='node1\x00'}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xaa, 0xaa}]}, 0x3c}}, 0x0) 1.333981075s ago: executing program 3 (id=1193): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1.273998514s ago: executing program 4 (id=1194): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) 1.229664517s ago: executing program 3 (id=1195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x3c, 0x35, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x14, 0x6, @ip4=@private=0xa010101}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newnexthop={0x3c, 0x35, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}, @NHA_GATEWAY={0x14, 0x6, @ip4=@private=0xa010102}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@newnexthop={0x34, 0x35, 0x501, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x3}, @NHA_GROUP={0x14, 0x2, [{0x1, 0x1}, {0x2, 0x1}]}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv4_newroute={0x2c, 0x18, 0x501, 0x0, 0x0, {0x2, 0x20, 0x0, 0x0, 0x0, 0x3}, [@RTA_DST={0x8, 0x1, @private=0xa010100}, @RTA_NH_ID={0x8, 0x1e, 0x3}]}, 0x2c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xa, &(0x7f00000003c0)=@raw=[@generic={0xb7, 0x1, 0x0, 0x0, 0x2}, @generic={0x7b, 0xa, 0x1, 0xffc0}, @generic={0x30}, @generic={0x7b, 0xa, 0x0, 0xffc8}, @generic={0x30}, @generic={0x30}, @generic={0x30}, @generic={0x30}, @generic={0x30}, @generic={0x95}], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0x1, 0x64, &(0x7f0000000800)='\x00', &(0x7f0000000900)=""/100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.181456906s ago: executing program 1 (id=1196): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x10) connect$llc(r0, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xc, @remote}, 0x10) syz_emit_ethernet(0x1a, &(0x7f0000000200)={@local, @remote, @void, {@llc={0x4, {@llc={0xc, 0xd, 's'}}}}}, 0x0) 975.255079ms ago: executing program 3 (id=1197): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv6_newaddr={0x2c, 0x14, 0x605, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, 0x1}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000200)="8700000000000000fe800000000000000000000000000001", 0x1c, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2, 0x1}, 0x1c) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 933.071497ms ago: executing program 4 (id=1198): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000000000001001000009000000"], 0x10}, 0x0) sendmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="10000000000000001001000003000000"], 0x10}, 0x0) 797.990587ms ago: executing program 4 (id=1199): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x11d8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1234567890abcdef}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfedcba0987654321}]}]}, 0x38}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "0102030405060708090a0b0c0d0e0f1011121314"}}]}]}, 0x54}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="0102030405060708090a0b0c0d0e0f10", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="010001000000000000000000000000010000000000000000400e001c0000001c00"/56, 0x34}], 0x1, &(0x7f0000000500)=[@iv={0x20, 0x117, 0x2, 0xc, "111213140000000000000001"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x18}], 0x50}, 0x0) read$alg(r3, &(0x7f0000000600), 0x44) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r4, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10) sendto$inet(r4, &(0x7f0000000600), 0x44, 0x0, &(0x7f0000000700)={0x2, 0x1127, @loopback}, 0x10) poll(&(0x7f0000000800)=[{r4, 0x1}], 0x1, 0x64) nanosleep(&(0x7f0000000900)={0x0, 0x5f5e100}, 0x0) 746.661131ms ago: executing program 3 (id=1200): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="580000001800050401000000000000000a800000fe040002000000001400010020010db800000000000000000000000106001500070000001800160008000100010000000c000b0008000100020000000800040001000000", 0x58) syz_emit_ethernet(0x6a, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaa86dd6000000000342b4020010db800000000000000000000000220010db8000000000000000000000001110404010100000020010db800000000000000000000000320010db800000000000000000000000430393039000c0000deadbeef"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 633.426031ms ago: executing program 0 (id=1201): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'lo\x00', 0x1}) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x1f90, @loopback}, 0x10) close(r3) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 533.82193ms ago: executing program 3 (id=1202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local, 0x2}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local, 0x2}, 0x1c) r2 = accept4$inet6(r0, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000100)='hello', 0x5) write(r2, &(0x7f0000000140)='world', 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) 449.844608ms ago: executing program 4 (id=1203): socket$inet6(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @rand_addr=0x1020304}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000120)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x1020304, @rand_addr=0x1020305}}}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'sit0\x00', 0x1}) write$tun(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="4500003c000000004029728d01020305010203046000000000083a40fe800000000000000000000000000001fe8000000000000000000000000000028000000000000000"], 0x3c) 445.496273ms ago: executing program 2 (id=1204): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x10, 0x1, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa00}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa00}}, [@NFT_MSG_NEWTABLE={0x14, 0x10, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0xa00}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x10, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0xa00}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xffffffd8}]}]}, @NFT_MSG_NEWRULE={0x40, 0x10, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0xa00}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xb, 0x1, 'TPROXY\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x24, 0x3, '\x00'/32}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa, 0x0, 0xa00}}}, 0xa0}}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x11) sendto$inet6(r1, &(0x7f0000000100)="12345678", 0x8, 0x0, &(0x7f0000000200)={0xa, 0x22b8, 0x0, @loopback}, 0x1c) 239.541786ms ago: executing program 1 (id=1205): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 237.581805ms ago: executing program 2 (id=1206): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @rand_addr=0xa000000}]}, 0x24}}, 0x0) 57.910326ms ago: executing program 2 (id=1207): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0xbe3412, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002000000"], 0x94}}, 0x0) 53.605659ms ago: executing program 1 (id=1208): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x1}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newneigh={0x30, 0x1c, 0x601, 0x0, 0x0, {0x2, 0x0, 0x0, r1, 0x80}, [@NDA_DST_IPV4={0x8, 0x1, @private=0xa010101}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x30}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @private=0xa010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1000}]}, 0x6c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0x2, 0x401, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x80}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWCHAIN={0x54, 0x2, 0x2, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'bridge0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0x2, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x80}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaa00112233445508004500001c0000000040113cce0a0000020a0000013930393000080000"], 0x0) 0s ago: executing program 4 (id=1209): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x805}, @void, @x25={0x0, 0x1, 0xb, "111234560000"}}, 0xd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.111' (ED25519) to the list of known hosts. [ 83.950632][ T5613] cgroup: Unknown subsys name 'net' [ 84.068007][ T5613] cgroup: Unknown subsys name 'cpuset' [ 84.077343][ T5613] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.739186][ T5613] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.638193][ T5636] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.648161][ T5636] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.659735][ T5637] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.668959][ T5637] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.677378][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.681819][ T5640] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.691861][ T5640] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.692750][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.706638][ T5637] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.712951][ T5640] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.722004][ T5640] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.730107][ T5640] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.739763][ T5641] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.744995][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.752698][ T5641] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.758720][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.770097][ T5641] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.772351][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.781752][ T5641] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.802916][ T5641] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.876919][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.889748][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.899503][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.912324][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.922225][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.808562][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.816204][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.823538][ T5629] bridge_slave_0: entered allmulticast mode [ 91.831640][ T5629] bridge_slave_0: entered promiscuous mode [ 91.871390][ T5638] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.879007][ T5638] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.886950][ T5641] Bluetooth: hci1: command tx timeout [ 91.887302][ T5636] Bluetooth: hci3: command tx timeout [ 91.899849][ T4942] Bluetooth: hci2: command tx timeout [ 91.905728][ T5634] Bluetooth: hci0: command tx timeout [ 91.907803][ T5638] bridge_slave_0: entered allmulticast mode [ 91.919319][ T5638] bridge_slave_0: entered promiscuous mode [ 91.926822][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.934143][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.941428][ T5629] bridge_slave_1: entered allmulticast mode [ 91.949872][ T5629] bridge_slave_1: entered promiscuous mode [ 91.956801][ T5636] Bluetooth: hci4: command tx timeout [ 91.968460][ T10] cfg80211: failed to load regulatory.db [ 92.000733][ T5638] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.008164][ T5638] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.015481][ T5638] bridge_slave_1: entered allmulticast mode [ 92.022898][ T5638] bridge_slave_1: entered promiscuous mode [ 92.110262][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.139640][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.146954][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.154254][ T5627] bridge_slave_0: entered allmulticast mode [ 92.161541][ T5627] bridge_slave_0: entered promiscuous mode [ 92.171988][ T5638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.183611][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.212709][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.220069][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.228389][ T5627] bridge_slave_1: entered allmulticast mode [ 92.235920][ T5627] bridge_slave_1: entered promiscuous mode [ 92.245562][ T5638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.272270][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.279991][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.287383][ T5628] bridge_slave_0: entered allmulticast mode [ 92.295028][ T5628] bridge_slave_0: entered promiscuous mode [ 92.350689][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.358077][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.365657][ T5628] bridge_slave_1: entered allmulticast mode [ 92.373653][ T5628] bridge_slave_1: entered promiscuous mode [ 92.405311][ T5629] team0: Port device team_slave_0 added [ 92.435696][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.446941][ T5638] team0: Port device team_slave_0 added [ 92.454954][ T5629] team0: Port device team_slave_1 added [ 92.460809][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.468129][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.475794][ T5644] bridge_slave_0: entered allmulticast mode [ 92.483193][ T5644] bridge_slave_0: entered promiscuous mode [ 92.504956][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.527595][ T5638] team0: Port device team_slave_1 added [ 92.544844][ T5644] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.552165][ T5644] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.559835][ T5644] bridge_slave_1: entered allmulticast mode [ 92.567358][ T5644] bridge_slave_1: entered promiscuous mode [ 92.577109][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.632826][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.644683][ T5627] team0: Port device team_slave_0 added [ 92.662875][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.670057][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.697039][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.734735][ T5627] team0: Port device team_slave_1 added [ 92.741210][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.748488][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.775972][ T5638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.787796][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.795104][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.821135][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.836022][ T5644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.868898][ T5638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.876259][ T5638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.902310][ T5638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.924776][ T5644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.936283][ T5628] team0: Port device team_slave_0 added [ 92.977168][ T5628] team0: Port device team_slave_1 added [ 92.983555][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.991060][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.017246][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.075515][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.082622][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.108644][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.137139][ T5629] hsr_slave_0: entered promiscuous mode [ 93.144344][ T5629] hsr_slave_1: entered promiscuous mode [ 93.153008][ T5644] team0: Port device team_slave_0 added [ 93.195967][ T5638] hsr_slave_0: entered promiscuous mode [ 93.202475][ T5638] hsr_slave_1: entered promiscuous mode [ 93.209366][ T5638] debugfs: 'hsr0' already exists in 'hsr' [ 93.215323][ T5638] Cannot create hsr debugfs directory [ 93.223894][ T5644] team0: Port device team_slave_1 added [ 93.230272][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.237528][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.263540][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.276159][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.283156][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.309227][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.400335][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.407580][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.433946][ T5644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.493454][ T5644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.500543][ T5644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.526845][ T5644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.570877][ T5627] hsr_slave_0: entered promiscuous mode [ 93.577777][ T5627] hsr_slave_1: entered promiscuous mode [ 93.584205][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 93.589998][ T5627] Cannot create hsr debugfs directory [ 93.618634][ T5628] hsr_slave_0: entered promiscuous mode [ 93.625200][ T5628] hsr_slave_1: entered promiscuous mode [ 93.631393][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 93.637251][ T5628] Cannot create hsr debugfs directory [ 93.814186][ T5644] hsr_slave_0: entered promiscuous mode [ 93.820709][ T5644] hsr_slave_1: entered promiscuous mode [ 93.827115][ T5644] debugfs: 'hsr0' already exists in 'hsr' [ 93.832870][ T5644] Cannot create hsr debugfs directory [ 93.955440][ T5636] Bluetooth: hci3: command tx timeout [ 93.961476][ T5634] Bluetooth: hci1: command tx timeout [ 93.967631][ T4942] Bluetooth: hci0: command tx timeout [ 93.967667][ T5641] Bluetooth: hci2: command tx timeout [ 94.034348][ T5641] Bluetooth: hci4: command tx timeout [ 94.218179][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.234987][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.263492][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.278428][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.286847][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.297416][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.321395][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.332167][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.411014][ T5638] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.426013][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.442045][ T5638] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.453311][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.463327][ T5638] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.475630][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.484943][ T5638] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.495102][ T5638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.591355][ T5627] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.603153][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.611909][ T5627] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.624113][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.632108][ T5627] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.643261][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.651856][ T5627] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.664984][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.793349][ T5628] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.806591][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.818407][ T5628] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.827822][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.836961][ T5628] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.847584][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.856086][ T5628] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.867332][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.962159][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.022651][ T5644] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.033606][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 95.043094][ T5644] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.055029][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 95.067720][ T5638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.081775][ T5644] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.091858][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 95.108417][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.117154][ T5644] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.129822][ T5644] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 95.165502][ T5638] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.180255][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.187941][ T3308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.226155][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.233428][ T3308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.263303][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.270627][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.298939][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.306162][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.352801][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.441090][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.480450][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.496725][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.504083][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.550680][ T5644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.573457][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.580973][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.615953][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.669201][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.676494][ T3308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.708388][ T5644] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.732748][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.740038][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.790095][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.797349][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.859101][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.866377][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.036479][ T5641] Bluetooth: hci2: command tx timeout [ 96.038185][ T4942] Bluetooth: hci0: command tx timeout [ 96.042162][ T5641] Bluetooth: hci1: command tx timeout [ 96.042195][ T5641] Bluetooth: hci3: command tx timeout [ 96.113927][ T4942] Bluetooth: hci4: command tx timeout [ 96.751668][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.796356][ T5638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.952240][ T5629] veth0_vlan: entered promiscuous mode [ 97.009852][ T5629] veth1_vlan: entered promiscuous mode [ 97.115581][ T5638] veth0_vlan: entered promiscuous mode [ 97.141510][ T5638] veth1_vlan: entered promiscuous mode [ 97.162375][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.238715][ T5629] veth0_macvtap: entered promiscuous mode [ 97.262898][ T5629] veth1_macvtap: entered promiscuous mode [ 97.307805][ T5638] veth0_macvtap: entered promiscuous mode [ 97.351894][ T5638] veth1_macvtap: entered promiscuous mode [ 97.380866][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.401809][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.432871][ T5644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.447540][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.477524][ T5627] veth0_vlan: entered promiscuous mode [ 97.497322][ T147] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.510974][ T147] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.520808][ T147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.540681][ T147] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.557427][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.568096][ T5627] veth1_vlan: entered promiscuous mode [ 97.590666][ T5638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.652880][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.669181][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.695978][ T57] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.706772][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.838195][ T5627] veth0_macvtap: entered promiscuous mode [ 97.876933][ T5644] veth0_vlan: entered promiscuous mode [ 97.902463][ T5627] veth1_macvtap: entered promiscuous mode [ 97.917546][ T3308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.928026][ T3308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.991471][ T5644] veth1_vlan: entered promiscuous mode [ 97.999698][ T3274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.010196][ T3274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.040332][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.077493][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.085930][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.090763][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.115457][ T4942] Bluetooth: hci3: command tx timeout [ 98.115493][ T5634] Bluetooth: hci1: command tx timeout [ 98.120979][ T4942] Bluetooth: hci2: command tx timeout [ 98.129828][ T5641] Bluetooth: hci0: command tx timeout [ 98.147530][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.174037][ T3308] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.179403][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.194474][ T5641] Bluetooth: hci4: command tx timeout [ 98.222452][ T3308] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.239717][ T5629] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 98.270015][ T5628] veth0_vlan: entered promiscuous mode [ 98.279449][ T3308] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.289174][ T3308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.333587][ T5628] veth1_vlan: entered promiscuous mode [ 98.343461][ T5644] veth0_macvtap: entered promiscuous mode [ 98.360859][ T5644] veth1_macvtap: entered promiscuous mode [ 98.489848][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.561149][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.614583][ T3274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.639493][ T3274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.667554][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.728515][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.750076][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.771323][ T5628] veth0_macvtap: entered promiscuous mode [ 98.807712][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.847828][ T5628] veth1_macvtap: entered promiscuous mode [ 98.868809][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.888842][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.905490][ T5833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6'. [ 98.933070][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.941731][ T5833] netlink: 'syz.1.6': attribute type 1 has an invalid length. [ 98.959603][ T5833] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 99.010463][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.118839][ T3274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.127434][ T3308] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.159669][ T3274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.169287][ T3308] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.222465][ T3308] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.291743][ T3308] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.312277][ T5842] team0: Port device vlan0 added [ 99.362261][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.400434][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.520978][ T5852] Zero length message leads to an empty skb [ 99.562019][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.600683][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.666756][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.710583][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.292235][ T5872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16'. [ 100.323986][ T5875] netlink: 165 bytes leftover after parsing attributes in process `syz.2.18'. [ 100.456962][ T5882] netlink: 'syz.3.19': attribute type 1 has an invalid length. [ 100.550127][ T5882] 8021q: VLANs not supported on ip6_vti0 [ 100.639442][ T5886] netlink: 36 bytes leftover after parsing attributes in process `syz.1.20'. [ 100.688973][ T5888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19'. [ 100.944423][ T5894] geneve2: entered promiscuous mode [ 100.968721][ T5894] geneve2: entered allmulticast mode [ 101.118432][ T5902] netlink: 76 bytes leftover after parsing attributes in process `syz.2.21'. [ 101.179986][ T5903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.195527][ T5910] netlink: 'syz.0.25': attribute type 7 has an invalid length. [ 101.227827][ T5910] netlink: 140 bytes leftover after parsing attributes in process `syz.0.25'. [ 101.384062][ T5891] syzkaller0: entered promiscuous mode [ 101.394425][ T5891] syzkaller0: entered allmulticast mode [ 101.480949][ T5923] netlink: 144 bytes leftover after parsing attributes in process `syz.4.26'. [ 101.933200][ T5934] netlink: 'syz.0.32': attribute type 1 has an invalid length. [ 101.969273][ T5934] wg1: Master is either lo or non-ether device [ 101.980010][ T5933] raw_sendmsg: syz.2.31 forgot to set AF_INET. Fix it! [ 102.040499][ T5939] IPVS: set_ctl: invalid protocol: 65535 224.0.0.2:0 [ 102.079454][ T5942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.32'. [ 102.236475][ T5941] geneve2: entered promiscuous mode [ 102.576683][ T5954] netlink: 'syz.2.37': attribute type 10 has an invalid length. [ 103.567786][ T5992] openvswitch: netlink: Missing valid actions attribute. [ 103.577215][ T5991] IPv6: NLM_F_REPLACE set, but no existing node found! [ 103.586742][ T5992] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 104.057493][ T6017] __nla_validate_parse: 12 callbacks suppressed [ 104.057516][ T6017] netlink: 48 bytes leftover after parsing attributes in process `syz.2.56'. [ 104.338905][ T6033] netlink: 'syz.2.64': attribute type 11 has an invalid length. [ 104.354214][ T6033] netlink: 'syz.2.64': attribute type 4 has an invalid length. [ 104.415755][ T6033] netlink: 224 bytes leftover after parsing attributes in process `syz.2.64'. [ 104.681244][ T6053] netlink: 48 bytes leftover after parsing attributes in process `syz.2.68'. [ 107.443133][ T6040] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.468737][ T6045] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”Œbƺ¥þ àø§%¹ [ 107.796233][ T6096] netlink: 502 bytes leftover after parsing attributes in process `syz.3.73'. [ 107.855800][ T6090] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 107.925146][ T6098] netlink: 'syz.0.77': attribute type 4 has an invalid length. [ 107.981531][ T6090] netlink: 'syz.3.73': attribute type 27 has an invalid length. [ 108.032426][ T6090] netlink: 'syz.3.73': attribute type 4 has an invalid length. [ 108.051790][ T6090] netlink: 152 bytes leftover after parsing attributes in process `syz.3.73'. [ 108.131271][ T6109] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 108.346948][ T6120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.83'. [ 108.471807][ T6135] netlink: 36 bytes leftover after parsing attributes in process `syz.0.86'. [ 108.546478][ T6120] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.579556][ T6136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.87'. [ 108.644301][ T6140] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 108.808583][ T6150] netlink: 40 bytes leftover after parsing attributes in process `syz.3.89'. [ 109.389099][ T10] IPVS: starting estimator thread 0... [ 109.390880][ T6189] netlink: 44 bytes leftover after parsing attributes in process `syz.0.101'. [ 109.407608][ T6184] IPVS: fo: FWM 3 0x00000003 - no destination available [ 109.488098][ T6192] netlink: 104 bytes leftover after parsing attributes in process `syz.3.102'. [ 109.512709][ T6192] netlink: 232 bytes leftover after parsing attributes in process `syz.3.102'. [ 109.523947][ T6190] IPVS: using max 25 ests per chain, 60000 per kthread [ 109.752554][ T6206] syz.3.106 uses obsolete (PF_INET,SOCK_PACKET) [ 110.800374][ T6263] netlink: 16 bytes leftover after parsing attributes in process `syz.2.124'. [ 110.931209][ T6268] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.440949][ T6297] netlink: 180 bytes leftover after parsing attributes in process `syz.1.133'. [ 111.691724][ T6311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.136'. [ 114.147765][ T6279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.422917][ T6339] netlink: 'syz.1.142': attribute type 13 has an invalid length. [ 114.792054][ T6359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.146'. [ 115.014918][ T6371] trusted_key: syz.4.151 sent an empty control message without MSG_MORE. [ 115.168108][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 115.286256][ T6379] netlink: 8 bytes leftover after parsing attributes in process `syz.1.153'. [ 115.461161][ T6392] netlink: 156 bytes leftover after parsing attributes in process `syz.3.157'. [ 115.506173][ T6392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.157'. [ 115.526933][ T6397] Unsupported ieee802154 address type: 0 [ 115.572200][ T6392] syzkaller0: entered promiscuous mode [ 115.592337][ T6392] syzkaller0: entered allmulticast mode [ 115.791401][ T6410] warning: `syz.2.164' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.956788][ T6413] netlink: 'syz.0.165': attribute type 2 has an invalid length. [ 116.013992][ T6413] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 116.066635][ T6420] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 116.091194][ T6424] netlink: 'syz.4.168': attribute type 3 has an invalid length. [ 116.428773][ T6451] netlink: 'syz.1.172': attribute type 7 has an invalid length. [ 116.558637][ T6458] netlink: 'syz.4.175': attribute type 11 has an invalid length. [ 116.586579][ T6458] netlink: 132 bytes leftover after parsing attributes in process `syz.4.175'. [ 116.827094][ T6476] netlink: 'syz.2.180': attribute type 10 has an invalid length. [ 116.877614][ T6483] netlink: 'syz.2.180': attribute type 10 has an invalid length. [ 117.037362][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.184'. [ 117.094769][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 117.114138][ T6493] netlink: 'syz.4.186': attribute type 5 has an invalid length. [ 117.147620][ T6492] netlink: 4 bytes leftover after parsing attributes in process `syz.2.185'. [ 117.565837][ T6514] netlink: 'syz.4.193': attribute type 29 has an invalid length. [ 117.771968][ T6510] "syz.3.192" (6510) uses obsolete ecb(arc4) skcipher [ 118.007356][ T6543] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 118.147894][ T6550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.200'. [ 118.319623][ T1631] IPVS: starting estimator thread 0... [ 118.434509][ T6561] IPVS: using max 29 ests per chain, 69600 per kthread [ 118.671657][ T6570] xt_CT: No such helper "snmp" [ 118.710986][ T6586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.730075][ T6585] block nbd0: not configured, cannot reconfigure [ 119.056996][ T6600] syzkaller0: entered promiscuous mode [ 119.086625][ T6600] syzkaller0: entered allmulticast mode [ 119.139737][ T6610] tipc: Started in network mode [ 119.164294][ T6610] tipc: Node identity 8a8a67d709d8, cluster identity 4711 [ 119.201867][ T6610] tipc: Enabled bearer , priority 0 [ 119.266512][ T6598] tipc: Resetting bearer [ 119.365780][ T6598] tipc: Disabling bearer [ 119.561600][ T6615] syzkaller0: entered promiscuous mode [ 119.590972][ T6615] syzkaller0: entered allmulticast mode [ 119.659203][ T6627] Bluetooth: MGMT ver 1.23 [ 119.928675][ T6642] __nla_validate_parse: 2 callbacks suppressed [ 119.928694][ T6642] netlink: 60 bytes leftover after parsing attributes in process `syz.2.220'. [ 121.568984][ T6638] syzkaller0: entered promiscuous mode [ 121.574689][ T6638] syzkaller0: entered allmulticast mode [ 121.684565][ T6662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.223'. [ 122.109517][ T6678] netlink: 164 bytes leftover after parsing attributes in process `syz.4.227'. [ 122.733131][ T6632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.991921][ T6686] netlink: 16 bytes leftover after parsing attributes in process `syz.2.228'. [ 123.026397][ T6686] netlink: 13 bytes leftover after parsing attributes in process `syz.2.228'. [ 123.119192][ T6697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.229'. [ 123.176724][ T6686] veth3: entered promiscuous mode [ 123.358101][ T6712] netlink: 72 bytes leftover after parsing attributes in process `syz.1.234'. [ 123.399403][ T6712] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 123.545484][ T9] IPVS: starting estimator thread 0... [ 123.653844][ T6725] IPVS: using max 36 ests per chain, 86400 per kthread [ 123.690011][ T6728] netlink: 12 bytes leftover after parsing attributes in process `syz.1.238'. [ 123.968696][ T6730] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 124.029678][ T6737] macvlan2: entered promiscuous mode [ 124.037040][ T6737] macvlan2: entered allmulticast mode [ 124.050087][ T6737] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 124.173606][ T6757] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 124.297163][ T6756] openvswitch: netlink: Duplicate or invalid key (type 0). [ 124.360018][ T6756] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.613980][ T6774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.248'. [ 124.647615][ T6774] netlink: 2 bytes leftover after parsing attributes in process `syz.1.248'. [ 124.904658][ T6786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.985428][ T6793] tipc: Failed to remove unknown binding: 66,1,1/0:1655863916/1655863918 [ 125.017376][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.3.251'. [ 125.355222][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.259'. [ 125.395287][ T6808] block nbd0: not configured, cannot reconfigure [ 125.663216][ T6817] netlink: 256 bytes leftover after parsing attributes in process `syz.0.262'. [ 125.680812][ T6824] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 125.878002][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 125.968496][ T6831] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 126.000316][ T6833] netlink: 'syz.4.266': attribute type 22 has an invalid length. [ 126.024185][ T6833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.266'. [ 126.082368][ T6836] netlink: 45 bytes leftover after parsing attributes in process `syz.4.266'. [ 126.181465][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.217401][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.256734][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.327934][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.734292][ T6864] bridge1: entered promiscuous mode [ 127.179700][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.278'. [ 127.213413][ T6886] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.254550][ T6891] netlink: 16 bytes leftover after parsing attributes in process `syz.0.279'. [ 127.357539][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 127.442715][ T6900] syzkaller0: entered promiscuous mode [ 127.469562][ T6900] syzkaller0: entered allmulticast mode [ 127.566789][ T6900] netlink: 44 bytes leftover after parsing attributes in process `syz.3.281'. [ 127.665379][ T6910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.285'. [ 128.313494][ T6942] ieee802154 phy0 wpan0: encryption failed: -22 [ 128.397613][ T6946] syzkaller0: entered promiscuous mode [ 128.443030][ T6946] syzkaller0: entered allmulticast mode [ 128.735321][ T6959] team0: Port device team_slave_0 removed [ 129.267640][ T6978] syzkaller0: entered promiscuous mode [ 129.289811][ T6978] syzkaller0: entered allmulticast mode [ 129.882000][ T7000] bond1: entered promiscuous mode [ 129.889877][ T7010] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 129.925635][ T7000] bond1: entered allmulticast mode [ 129.960739][ T7000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.989958][ T7002] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 130.040191][ T7010] team0: Device gtp0 is up. Set it down before adding it as a team port [ 130.327506][ T7031] __nla_validate_parse: 8 callbacks suppressed [ 130.327529][ T7031] netlink: 56 bytes leftover after parsing attributes in process `syz.4.316'. [ 130.402614][ T7034] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 130.402912][ T7034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.317'. [ 130.965619][ T7051] syzkaller0: entered promiscuous mode [ 130.985181][ T7051] syzkaller0: entered allmulticast mode [ 131.007982][ T7074] IPv6: addrconf: prefix option has invalid lifetime [ 131.137911][ T7062] bond1: option arp_all_targets: invalid value (18446744073709551613) [ 131.151546][ T7062] bond1 (unregistering): Released all slaves [ 132.925953][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.932436][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.198606][ T7116] openvswitch: netlink: Missing key (keys=40, expected=100) [ 133.210822][ T7115] netlink: 'syz.2.332': attribute type 10 has an invalid length. [ 133.229155][ T7115] openvswitch: netlink: Flow key attr not present in new flow. [ 133.628123][ T7129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.334'. [ 133.715709][ T7131] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 133.755629][ T7131] netlink: 'syz.3.335': attribute type 2 has an invalid length. [ 133.782780][ T7131] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 133.893078][ T7137] netlink: 'syz.1.336': attribute type 8 has an invalid length. [ 133.908888][ T7138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.337'. [ 134.041788][ T7138] vlan2: entered allmulticast mode [ 134.060384][ T7138] bridge2: entered allmulticast mode [ 134.106848][ T7145] bridge2: port 1(erspan0) entered blocking state [ 134.118716][ T7140] lo speed is unknown, defaulting to 1000 [ 134.127363][ T7145] bridge2: port 1(erspan0) entered disabled state [ 134.136470][ T7144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.336'. [ 134.145573][ T7145] erspan0: entered allmulticast mode [ 134.160335][ T7145] erspan0: entered promiscuous mode [ 134.194881][ T7145] bridge2: port 1(erspan0) entered blocking state [ 134.202970][ T7145] bridge2: port 1(erspan0) entered forwarding state [ 134.249724][ T7140] lo speed is unknown, defaulting to 1000 [ 134.282750][ T7140] lo speed is unknown, defaulting to 1000 [ 134.324029][ T7140] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 134.359183][ T7140] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 134.407769][ T7140] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 134.494445][ T7140] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 134.570063][ T7140] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 134.649064][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.341'. [ 134.663469][ T7170] syzkaller1: entered promiscuous mode [ 134.677289][ T7170] syzkaller1: entered allmulticast mode [ 134.699649][ T7140] lo speed is unknown, defaulting to 1000 [ 134.741894][ T7140] lo speed is unknown, defaulting to 1000 [ 134.772091][ T7140] lo speed is unknown, defaulting to 1000 [ 134.821280][ T7140] lo speed is unknown, defaulting to 1000 [ 134.857355][ T7178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 134.880556][ T7140] lo speed is unknown, defaulting to 1000 [ 135.373133][ T7209] netlink: 'syz.0.354': attribute type 24 has an invalid length. [ 135.829257][ T7234] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 135.995075][ T7244] netlink: 40 bytes leftover after parsing attributes in process `syz.1.364'. [ 136.018130][ T7241] vlan2: entered promiscuous mode [ 136.023338][ T7241] bridge0: entered promiscuous mode [ 136.088604][ T7197] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.237257][ T7248] netlink: 68 bytes leftover after parsing attributes in process `syz.0.366'. [ 136.322293][ T7250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.367'. [ 136.399061][ T7258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 136.437094][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.368'. [ 136.615152][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'. [ 136.771811][ T7271] syzkaller1: entered promiscuous mode [ 136.798952][ T7271] syzkaller1: entered allmulticast mode [ 137.103016][ T7300] x_tables: duplicate underflow at hook 3 [ 137.126901][ T7300] macvlan0: entered promiscuous mode [ 137.409915][ T7314] netlink: 'syz.0.387': attribute type 4 has an invalid length. [ 137.425943][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'. [ 137.454628][ T7310] syzkaller0: entered promiscuous mode [ 137.461644][ T7314] netlink: 'syz.0.387': attribute type 4 has an invalid length. [ 137.473910][ T7310] syzkaller0: entered allmulticast mode [ 137.544711][ T7313] lo: entered promiscuous mode [ 137.682818][ T7311] lo: left promiscuous mode [ 138.017779][ T7351] netlink: 36 bytes leftover after parsing attributes in process `syz.1.393'. [ 138.194969][ T13] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 138.566526][ T7364] netlink: 76 bytes leftover after parsing attributes in process `syz.0.396'. [ 138.816060][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 139.350888][ T7395] xt_ecn: cannot match TCP bits for non-tcp packets [ 139.394625][ T7397] xt_ecn: cannot match TCP bits for non-tcp packets [ 139.511677][ T7391] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.520072][ T7391] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.815171][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.852072][ T7391] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.325642][ T7426] 8021q: VLANs not supported on lo [ 140.339347][ T7019] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.373003][ T7019] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.426624][ T7019] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.456168][ T7019] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.693148][ T7437] netlink: 'syz.2.416': attribute type 1 has an invalid length. [ 140.836598][ T7437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.888212][ T7453] sctp: [Deprecated]: syz.1.420 (pid 7453) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.888212][ T7453] Use struct sctp_sack_info instead [ 141.067847][ T7454] bond1: (slave gretap1): making interface the new active one [ 141.098242][ T7454] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 141.150686][ T7458] __nla_validate_parse: 2 callbacks suppressed [ 141.150701][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 141.266190][ T7454] syz.2.416 (7454) used greatest stack depth: 19488 bytes left [ 141.417792][ T7464] netlink: 'syz.3.423': attribute type 13 has an invalid length. [ 141.509182][ T7478] netlink: zone id is out of range [ 141.528502][ T7478] netlink: zone id is out of range [ 141.552522][ T7478] netlink: zone id is out of range [ 141.582347][ T7478] netlink: zone id is out of range [ 141.593899][ T7478] netlink: zone id is out of range [ 141.599740][ T7478] netlink: zone id is out of range [ 141.616296][ T7478] netlink: zone id is out of range [ 141.627188][ T7478] netlink: zone id is out of range [ 141.641623][ T7478] netlink: zone id is out of range [ 141.655470][ T7478] netlink: zone id is out of range [ 141.689406][ T5728] lo speed is unknown, defaulting to 1000 [ 141.744211][ T7482] netlink: 'syz.2.427': attribute type 24 has an invalid length. [ 142.368154][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.433'. [ 142.387153][ T7019] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.387960][ T7507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.433'. [ 142.402029][ T7019] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.417096][ T7019] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.426473][ T7019] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.576498][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 142.576498][ T7513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 142.602686][ T7512] netlink: 'syz.2.434': attribute type 16 has an invalid length. [ 142.930723][ T7523] netlink: 312 bytes leftover after parsing attributes in process `syz.4.438'. [ 142.930724][ T7522] netlink: 312 bytes leftover after parsing attributes in process `syz.4.438'. [ 143.984487][ T7532] v: renamed from veth0_vlan (while UP) [ 144.837321][ T7486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 145.077413][ T7540] netlink: 'syz.4.442': attribute type 21 has an invalid length. [ 145.097871][ T7540] netlink: 128 bytes leftover after parsing attributes in process `syz.4.442'. [ 145.144400][ T7540] netlink: 'syz.4.442': attribute type 5 has an invalid length. [ 145.169022][ T7540] netlink: 'syz.4.442': attribute type 6 has an invalid length. [ 145.211962][ T7540] netlink: 3 bytes leftover after parsing attributes in process `syz.4.442'. [ 145.346416][ T7559] netlink: 'syz.3.441': attribute type 10 has an invalid length. [ 145.418746][ T7559] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 145.626722][ T7569] tipc: Started in network mode [ 145.636838][ T7569] tipc: Node identity 021080e9019, cluster identity 4711 [ 145.647911][ T7569] tipc: Enabled bearer , priority 0 [ 145.732130][ T7582] SET target dimension over the limit! [ 145.862920][ T7566] tipc: Disabling bearer [ 145.907125][ T7590] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 146.075247][ T7590] netlink: 64 bytes leftover after parsing attributes in process `syz.3.453'. [ 146.245354][ T7595] 8021q: adding VLAN 0 to HW filter on device bond5 [ 146.268793][ T7614] netlink: 28 bytes leftover after parsing attributes in process `syz.3.453'. [ 146.315893][ T7595] bond4: (slave bond5): making interface the new active one [ 146.326928][ T7595] bond4: (slave bond5): Enslaving as an active interface with an up link [ 146.350425][ T7599] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 146.380858][ T7614] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.562940][ T7624] netlink: 'syz.4.462': attribute type 10 has an invalid length. [ 146.624193][ T7624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.462'. [ 146.662370][ T7624] team0: Port device geneve1 added [ 146.687929][ T7631] lo: Caught tx_queue_len zero misconfig [ 147.264217][ T7648] netlink: 48 bytes leftover after parsing attributes in process `syz.0.468'. [ 147.481813][ T7662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.471'. [ 147.571729][ T7673] net_ratelimit: 1 callbacks suppressed [ 147.571747][ T7673] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.729243][ T7681] lo: Caught tx_queue_len zero misconfig [ 147.999954][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.477'. [ 148.025087][ T7703] netlink: 28 bytes leftover after parsing attributes in process `syz.4.477'. [ 148.177260][ T7713] syzkaller0: entered promiscuous mode [ 148.182950][ T7713] syzkaller0: entered allmulticast mode [ 148.222982][ T7716] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 148.297853][ T7706] vlan4: entered promiscuous mode [ 148.303137][ T7706] hsr0: entered promiscuous mode [ 148.309559][ T7706] vlan4: entered allmulticast mode [ 148.315495][ T7706] hsr0: entered allmulticast mode [ 148.320700][ T7706] hsr_slave_0: entered allmulticast mode [ 148.336739][ T7706] hsr_slave_1: entered allmulticast mode [ 148.545565][ T7720] syzkaller0: entered promiscuous mode [ 148.560213][ T7720] syzkaller0: entered allmulticast mode [ 148.590469][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.485'. [ 148.818360][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 148.876945][ T7739] netlink: 'syz.3.489': attribute type 2 has an invalid length. [ 148.916585][ T7739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.489'. [ 149.357372][ T7763] tap0: tun_chr_ioctl cmd 1074025676 [ 149.375288][ T7760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.494'. [ 149.375723][ T7763] tap0: owner set to 0 [ 149.663658][ T7419] IPVS: starting estimator thread 0... [ 149.712607][ T7783] syzkaller0: entered promiscuous mode [ 149.730840][ T7783] syzkaller0: entered allmulticast mode [ 149.753537][ T7787] netlink: 'syz.3.502': attribute type 2 has an invalid length. [ 149.764122][ T7787] netlink: 'syz.3.502': attribute type 8 has an invalid length. [ 149.783901][ T7784] IPVS: using max 26 ests per chain, 62400 per kthread [ 149.792372][ T7783] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 150.521220][ T7827] syzkaller0: entered promiscuous mode [ 150.538949][ T7827] syzkaller0: entered allmulticast mode [ 150.699625][ T7840] macsec1: entered promiscuous mode [ 150.705619][ T7840] bridge0: entered promiscuous mode [ 150.711242][ T7840] macsec1: entered allmulticast mode [ 150.717012][ T7840] bridge0: entered allmulticast mode [ 150.723224][ T7840] bridge0: port 3(macsec1) entered blocking state [ 150.735318][ T7840] bridge0: port 3(macsec1) entered disabled state [ 150.775572][ T7840] bridge0: left allmulticast mode [ 150.786847][ T7840] bridge0: left promiscuous mode [ 150.894549][ T7845] tipc: Started in network mode [ 150.917463][ T7845] tipc: Node identity 8e20c7940e4d, cluster identity 4711 [ 150.932991][ T7845] tipc: Enabled bearer , priority 0 [ 150.952405][ T7845] syzkaller0: entered promiscuous mode [ 150.958201][ T7845] syzkaller0: entered allmulticast mode [ 150.979864][ T7845] tipc: Resetting bearer [ 150.992801][ T7845] netlink: 'syz.3.516': attribute type 5 has an invalid length. [ 151.019142][ T7844] tipc: Resetting bearer [ 151.057340][ T7844] tipc: Disabling bearer [ 151.096754][ T7850] syzkaller0: entered promiscuous mode [ 151.102570][ T7850] syzkaller0: entered allmulticast mode [ 151.432791][ T7869] __nla_validate_parse: 12 callbacks suppressed [ 151.432813][ T7869] netlink: 48 bytes leftover after parsing attributes in process `syz.4.522'. [ 151.453117][ T7869] netlink: 48 bytes leftover after parsing attributes in process `syz.4.522'. [ 151.520312][ T7874] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 151.734214][ T7884] netlink: 'syz.4.526': attribute type 1 has an invalid length. [ 151.907625][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.526'. [ 151.987357][ T7899] netlink: 'syz.2.532': attribute type 2 has an invalid length. [ 152.000106][ T7880] veth3: entered allmulticast mode [ 152.015457][ T7901] netlink: 'syz.3.533': attribute type 1 has an invalid length. [ 152.043260][ T7880] bond2: (slave veth3): Enslaving as an active interface with a down link [ 152.056133][ T7901] netlink: 'syz.3.533': attribute type 2 has an invalid length. [ 152.074137][ T7884] bond2: (slave veth0_to_bond): making interface the new active one [ 152.084567][ T7884] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 152.097159][ T7902] syzkaller0: entered promiscuous mode [ 152.116076][ T7902] syzkaller0: entered allmulticast mode [ 152.148314][ T7901] gretap2: entered promiscuous mode [ 152.155278][ T7901] batman_adv: batadv0: Adding interface: gretap2 [ 152.166334][ T7901] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.194602][ T7901] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 152.513046][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.541'. [ 152.539949][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.541'. [ 152.561911][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.541'. [ 152.574955][ T7926] netlink: 20 bytes leftover after parsing attributes in process `syz.3.538'. [ 152.584425][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.541'. [ 152.595142][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.541'. [ 152.605555][ T7923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.541'. [ 152.626187][ T7928] Driver unsupported XDP return value 0 on prog (id 87) dev N/A, expect packet loss! [ 152.738919][ T7907] lo speed is unknown, defaulting to 1000 [ 152.873002][ T7937] netlink: 'syz.0.544': attribute type 64 has an invalid length. [ 153.021132][ T7938] veth1_to_bond: entered allmulticast mode [ 153.029299][ T7937] veth1_to_bond: entered promiscuous mode [ 153.050378][ T7937] veth1_to_bond (unregistering): left allmulticast mode [ 153.061245][ T7937] veth1_to_bond (unregistering): left promiscuous mode [ 153.087744][ T7937] bond0: (slave bond_slave_1): Releasing backup interface [ 153.547955][ T7958] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 153.861414][ T7961] vlan2: entered promiscuous mode [ 153.870630][ T7961] bridge0: entered promiscuous mode [ 153.879561][ T7961] vlan2: entered allmulticast mode [ 153.889868][ T7961] bridge0: entered allmulticast mode [ 154.198461][ T7962] syz.2.548 (7962) used greatest stack depth: 18312 bytes left [ 154.412880][ T7993] netlink: 'syz.2.555': attribute type 1 has an invalid length. [ 154.670024][ T8002] netlink: 'syz.3.557': attribute type 2 has an invalid length. [ 154.672791][ T7993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.765515][ T8003] vcan1: entered promiscuous mode [ 154.793055][ T8003] vcan1: entered allmulticast mode [ 154.915795][ T7998] bond2: (slave geneve2): making interface the new active one [ 154.941326][ T8012] openvswitch: netlink: Missing valid actions attribute. [ 154.966312][ T8012] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.980266][ T7998] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 155.022174][ T8014] syz.3.559: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 155.092386][ T8014] CPU: 1 UID: 0 PID: 8014 Comm: syz.3.559 Not tainted syzkaller #0 PREEMPT(full) [ 155.092417][ T8014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 155.092440][ T8014] Call Trace: [ 155.092449][ T8014] [ 155.092459][ T8014] dump_stack_lvl+0xe8/0x150 [ 155.092509][ T8014] warn_alloc+0x24c/0x270 [ 155.092541][ T8014] ? stack_depot_save_flags+0x33/0x800 [ 155.092574][ T8014] ? __pfx_warn_alloc+0x10/0x10 [ 155.092607][ T8014] ? kasan_save_track+0x3e/0x80 [ 155.092637][ T8014] ? __kasan_kmalloc+0x93/0xb0 [ 155.092670][ T8014] ? xsk_setsockopt+0x52a/0x960 [ 155.092704][ T8014] ? do_sock_setsockopt+0x17c/0x1b0 [ 155.092726][ T8014] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 155.092748][ T8014] ? do_syscall_64+0x174/0x580 [ 155.092774][ T8014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.092807][ T8014] __vmalloc_node_range_noprof+0x12c/0x1730 [ 155.092869][ T8014] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.092904][ T8014] ? __kasan_kmalloc+0x93/0xb0 [ 155.092937][ T8014] ? __kmalloc_cache_noprof+0x32d/0x660 [ 155.092968][ T8014] ? __kmalloc_cache_noprof+0x150/0x660 [ 155.093002][ T8014] vmalloc_user_noprof+0xad/0xe0 [ 155.093031][ T8014] ? xskq_create+0xbf/0x170 [ 155.093055][ T8014] xskq_create+0xbf/0x170 [ 155.093082][ T8014] xsk_init_queue+0x8a/0xe0 [ 155.093108][ T8014] xsk_setsockopt+0x52a/0x960 [ 155.093142][ T8014] ? __fget_files+0x2a/0x420 [ 155.093175][ T8014] ? __pfx_xsk_setsockopt+0x10/0x10 [ 155.093211][ T8014] ? __pfx_aa_sk_perm+0x10/0x10 [ 155.093238][ T8014] ? aa_sock_opt_perm+0xff/0x1a0 [ 155.093267][ T8014] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 155.093292][ T8014] ? __pfx_xsk_setsockopt+0x10/0x10 [ 155.093336][ T8014] do_sock_setsockopt+0x17c/0x1b0 [ 155.093366][ T8014] __x64_sys_setsockopt+0x13d/0x1b0 [ 155.093393][ T8014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.093418][ T8014] do_syscall_64+0x174/0x580 [ 155.093442][ T8014] ? trace_irq_disable+0x3b/0x140 [ 155.093472][ T8014] ? clear_bhb_loop+0x40/0x90 [ 155.093500][ T8014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.093523][ T8014] RIP: 0033:0x7fba7b99de99 [ 155.093550][ T8014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.093569][ T8014] RSP: 002b:00007fba7c799028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 155.093594][ T8014] RAX: ffffffffffffffda RBX: 00007fba7bc25fa0 RCX: 00007fba7b99de99 [ 155.093611][ T8014] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 155.093625][ T8014] RBP: 00007fba7ba33eaf R08: 0000000000000004 R09: 0000000000000000 [ 155.093639][ T8014] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.093654][ T8014] R13: 00007fba7bc26038 R14: 00007fba7bc25fa0 R15: 00007ffc0d93faf8 [ 155.093690][ T8014] [ 155.381762][ T8018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 155.413967][ T5641] Bluetooth: hci0: command tx timeout [ 155.510686][ T8014] Mem-Info: [ 155.515659][ T8014] active_anon:5660 inactive_anon:0 isolated_anon:0 [ 155.515659][ T8014] active_file:2 inactive_file:42544 isolated_file:0 [ 155.515659][ T8014] unevictable:768 dirty:80 writeback:0 [ 155.515659][ T8014] slab_reclaimable:10416 slab_unreclaimable:96759 [ 155.515659][ T8014] mapped:30215 shmem:1288 pagetables:1383 [ 155.515659][ T8014] sec_pagetables:0 bounce:0 [ 155.515659][ T8014] kernel_misc_reclaimable:0 [ 155.515659][ T8014] free:1204151 free_pcp:19217 free_cma:0 [ 155.563505][ T8014] Node 0 active_anon:22640kB inactive_anon:0kB active_file:8kB inactive_file:169972kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120860kB dirty:320kB writeback:0kB shmem:3616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12936kB pagetables:5364kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 155.598331][ T8014] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 155.631479][ T8014] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.667087][ T8014] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 155.677515][ T8014] Node 0 DMA32 free:864452kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22640kB inactive_anon:0kB active_file:8kB inactive_file:169972kB unevictable:1536kB writepending:320kB zspages:0kB present:3129332kB managed:2548584kB mlocked:0kB bounce:0kB free_pcp:78684kB local_pcp:35372kB free_cma:0kB [ 155.774349][ T8014] lowmem_reserve[]: 0 0 0 0 0 [ 155.795434][ T8015] bond6: option all_slaves_active: invalid value (222) [ 155.810992][ T8014] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 155.887798][ T8014] lowmem_reserve[]: 0 0 0 0 0 [ 155.902357][ T8014] Node 1 Normal free:3936792kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:500kB free_cma:0kB [ 155.964145][ T8014] lowmem_reserve[]: 0 0 0 0 0 [ 155.976472][ T8014] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 156.010287][ T8014] Node 0 DMA32: 3*4kB (UME) 3*8kB (UME) 2*16kB (ME) 2*32kB (UM) 2*64kB (ME) 2*128kB (UM) 3*256kB (M) 14*512kB (M) 4*1024kB (M) 2*2048kB (UE) 214*4096kB (UM) = 893188kB [ 156.047536][ T8014] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 156.073921][ T8014] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 2*16kB (UM) 1*32kB (M) 7*64kB (UM) 4*128kB (UM) 2*256kB (M) 2*512kB (M) 2*1024kB (UM) 0*2048kB 960*4096kB (UM) = 3936792kB [ 156.109544][ T8014] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.126925][ T8014] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.168863][ T8014] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 156.199821][ T8014] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 156.216621][ T8014] 43832 total pagecache pages [ 156.221501][ T8014] 0 pages in swap cache [ 156.225938][ T8014] Free swap = 124996kB [ 156.230265][ T8014] Total swap = 124996kB [ 156.235164][ T8014] 2097051 pages RAM [ 156.239038][ T8014] 0 pages HighMem/MovableOnly [ 156.245900][ T8014] 428225 pages reserved [ 156.250177][ T8014] 0 pages cma reserved [ 156.259419][ T8015] bond6 (unregistering): Released all slaves [ 156.278381][ T8030] netlink: 'syz.0.563': attribute type 10 has an invalid length. [ 156.303999][ T8018] ip6tnl0: Caught tx_queue_len zero misconfig [ 156.339770][ T8030] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 156.667894][ T8040] __nla_validate_parse: 31 callbacks suppressed [ 156.667917][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 156.721186][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.567'. [ 156.753401][ T8043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.568'. [ 156.826629][ T8047] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 157.140091][ T8069] netlink: 20 bytes leftover after parsing attributes in process `syz.1.573'. [ 157.159269][ T8073] netlink: 36 bytes leftover after parsing attributes in process `syz.4.574'. [ 157.206400][ T8078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.575'. [ 157.226974][ T8069] netlink: 'syz.1.573': attribute type 7 has an invalid length. [ 157.269937][ T8069] netlink: 140 bytes leftover after parsing attributes in process `syz.1.573'. [ 157.298831][ T8043] team0: Port device vlan0 removed [ 157.342665][ T8061] netlink: 20 bytes leftover after parsing attributes in process `syz.2.571'. [ 157.367712][ T8061] netlink: 'syz.2.571': attribute type 39 has an invalid length. [ 157.547132][ T8070] netlink: 32 bytes leftover after parsing attributes in process `syz.1.573'. [ 157.830083][ T8077] syzkaller0: entered promiscuous mode [ 157.847233][ T8077] syzkaller0: entered allmulticast mode [ 157.972415][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.581'. [ 158.517825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 160.352912][ T8100] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.564699][ T8142] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 162.396396][ T8164] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.411927][ T8164] bridge_slave_0 (unregistering): left allmulticast mode [ 162.420492][ T8164] bridge_slave_0 (unregistering): left promiscuous mode [ 162.428649][ T8164] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.598956][ T8179] syzkaller0: entered promiscuous mode [ 162.620057][ T8179] syzkaller0: entered allmulticast mode [ 194.356034][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.363194][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 216.924077][ T5634] Bluetooth: hci0: command 0x0406 tx timeout [ 216.930531][ T5634] Bluetooth: hci3: command 0x0406 tx timeout [ 216.935360][ T5641] Bluetooth: hci2: command 0x0406 tx timeout [ 216.937202][ T5634] Bluetooth: hci1: command 0x0406 tx timeout [ 225.083880][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 227.059090][ T8218] __nla_validate_parse: 1 callbacks suppressed [ 227.059110][ T8218] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 227.142791][ T8220] IPVS: set_ctl: invalid protocol: 0 172.20.20.16:20002 [ 227.421072][ T8226] netlink: 72 bytes leftover after parsing attributes in process `syz.0.607'. [ 227.438169][ T8232] netlink: 92 bytes leftover after parsing attributes in process `syz.4.611'. [ 227.521415][ T8239] netlink: 44 bytes leftover after parsing attributes in process `syz.1.608'. [ 227.848887][ T8248] netlink: 44 bytes leftover after parsing attributes in process `syz.1.614'. [ 227.872687][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 227.928944][ T8255] netlink: 'syz.2.615': attribute type 11 has an invalid length. [ 227.950076][ T8255] netlink: 132 bytes leftover after parsing attributes in process `syz.2.615'. [ 228.212645][ T8264] netlink: 'syz.2.620': attribute type 58 has an invalid length. [ 228.266903][ T8264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.620'. [ 228.604787][ T8276] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 228.612939][ T8280] syzkaller0: entered promiscuous mode [ 228.612966][ T8280] syzkaller0: entered allmulticast mode [ 228.682032][ T8280] netlink: 44 bytes leftover after parsing attributes in process `syz.1.624'. [ 228.733725][ T8289] netlink: 52 bytes leftover after parsing attributes in process `syz.3.627'. [ 228.835037][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.844520][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.953062][ T8293] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.960451][ T8293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.968815][ T8293] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.976093][ T8293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.081067][ T8303] netlink: 'syz.0.629': attribute type 3 has an invalid length. [ 229.117698][ T8293] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.125819][ T8293] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.521281][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.651339][ T8324] ip_vti0: entered promiscuous mode [ 229.958289][ T4942] Bluetooth: hci4: command 0x0405 tx timeout [ 230.619669][ T8375] netlink: 'syz.0.649': attribute type 33 has an invalid length. [ 230.752885][ T8375] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 230.775909][ T8375] bond1 (unregistering): Released all slaves [ 230.860866][ T8383] netlink: 'syz.3.650': attribute type 1 has an invalid length. [ 230.893479][ T8383] netlink: 'syz.3.650': attribute type 2 has an invalid length. [ 231.358986][ T8401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 231.657524][ T8424] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 232.084857][ T8437] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 232.084857][ T8437] Please contact the netfilter-devel mailing list or update your nftables rules. [ 232.414949][ T8449] __nla_validate_parse: 12 callbacks suppressed [ 232.414971][ T8449] netlink: 48 bytes leftover after parsing attributes in process `syz.2.672'. [ 232.440083][ T8449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 232.461405][ T8416] syzkaller0: entered promiscuous mode [ 232.473833][ T8416] syzkaller0: entered allmulticast mode [ 232.506981][ T8416] tipc: Enabled bearer , priority 0 [ 232.646657][ T8415] tipc: Resetting bearer [ 232.723224][ T8415] tipc: Disabling bearer [ 233.288276][ T8479] netlink: 604 bytes leftover after parsing attributes in process `syz.2.684'. [ 233.460453][ T8491] netlink: 'syz.4.685': attribute type 2 has an invalid length. [ 233.470432][ T8491] netlink: 'syz.4.685': attribute type 8 has an invalid length. [ 233.479538][ T8491] netlink: 132 bytes leftover after parsing attributes in process `syz.4.685'. [ 233.567372][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.685'. [ 233.662929][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 233.779280][ T8501] tipc: Started in network mode [ 233.834370][ T8501] tipc: Node identity 7ef451aadc4a, cluster identity 4711 [ 233.854685][ T8501] tipc: Enabled bearer , priority 0 [ 233.980178][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'. [ 234.103487][ T8512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.691'. [ 234.123287][ T8505] syzkaller0: entered promiscuous mode [ 234.139365][ T8505] syzkaller0: entered allmulticast mode [ 234.155623][ T8505] tipc: Resetting bearer [ 234.161806][ T8506] netlink: 'syz.3.690': attribute type 3 has an invalid length. [ 234.179375][ T8520] netlink: 'syz.4.692': attribute type 5 has an invalid length. [ 234.478102][ T8529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 234.588840][ T8496] tipc: Resetting bearer [ 235.025354][ T8549] netlink: 'syz.2.701': attribute type 15 has an invalid length. [ 235.132250][ T8551] openvswitch: netlink: nsh attr 109 is out of range max 3 [ 238.239054][ T8496] tipc: Disabling bearer [ 238.258126][ T7419] tipc: Node number set to 2730381738 [ 238.459941][ T8558] SET target dimension over the limit! [ 238.619675][ T8564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.629809][ T8561] netlink: 'syz.3.703': attribute type 10 has an invalid length. [ 238.674366][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.703'. [ 238.935580][ T8584] netlink: 'syz.1.709': attribute type 14 has an invalid length. [ 239.064621][ T8591] IPv6: NLM_F_CREATE should be specified when creating new route [ 239.315301][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 239.333455][ T8603] siw: device registration error -23 [ 239.351775][ T8601] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 239.371089][ T8601] netlink: 152 bytes leftover after parsing attributes in process `syz.2.715'. [ 239.440396][ T8606] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 239.459304][ T8603] smbdirect: ib_dev[syz2] removed [ 239.738243][ T8622] netlink: 16 bytes leftover after parsing attributes in process `syz.1.720'. [ 240.049607][ T8644] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 240.062677][ T8645] veth0: entered promiscuous mode [ 240.081288][ T8643] veth0: left promiscuous mode [ 240.187545][ T8650] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 240.214225][ T8652] veth0: entered promiscuous mode [ 240.263165][ T8652] netlink: 12 bytes leftover after parsing attributes in process `syz.4.729'. [ 240.310109][ T8651] veth0: left promiscuous mode [ 240.486048][ T8660] netlink: 16 bytes leftover after parsing attributes in process `syz.4.731'. [ 240.566943][ T8663] tipc: Enabling of bearer rejected, failed to enable media [ 240.687081][ T8669] netlink: 12 bytes leftover after parsing attributes in process `syz.0.734'. [ 240.784804][ T8669] syzkaller0: entered promiscuous mode [ 240.800173][ T8669] syzkaller0: entered allmulticast mode [ 241.141137][ T8681] xt_hashlimit: max too large, truncated to 1048576 [ 241.199237][ T8681] No such timeout policy "syz1" [ 241.260098][ T5636] block nbd0: Receive control failed (result -32) [ 241.695624][ T8713] netlink: 'syz.0.745': attribute type 4 has an invalid length. [ 241.727102][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.0.745'. [ 241.838549][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.746'. [ 241.996564][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.748'. [ 242.109284][ T8730] syzkaller0: entered promiscuous mode [ 242.159149][ T8730] syzkaller0: entered allmulticast mode [ 242.579277][ T8747] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 243.255390][ T8776] netlink: 'syz.2.762': attribute type 1 has an invalid length. [ 243.279200][ T8782] openvswitch: netlink: IP tunnel dst address not specified [ 243.303061][ T8784] netlink: 'syz.0.766': attribute type 1 has an invalid length. [ 244.169136][ T8797] syzkaller0: entered promiscuous mode [ 244.180941][ T8797] syzkaller0: entered allmulticast mode [ 244.238810][ T8792] macvtap1: entered allmulticast mode [ 244.290433][ T8786] macvtap2: entered allmulticast mode [ 246.384148][ T8852] tipc: MTU too low for tipc bearer [ 246.413138][ T48] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.585182][ T48] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.620515][ T48] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.642254][ T8873] __nla_validate_parse: 2 callbacks suppressed [ 246.642274][ T8873] netlink: 244 bytes leftover after parsing attributes in process `syz.4.780'. [ 246.693885][ T48] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.270191][ T8903] netlink: 'syz.0.791': attribute type 1 has an invalid length. [ 247.822689][ T8920] netlink: 'syz.2.794': attribute type 15 has an invalid length. [ 247.862658][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'. [ 247.872472][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.797'. [ 247.919043][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.798'. [ 247.935451][ T8920] netlink: 'syz.2.794': attribute type 15 has an invalid length. [ 247.940799][ T35] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 247.961826][ T8920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.794'. [ 247.963404][ T35] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 248.005616][ T35] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 248.018565][ T8942] netlink: 'syz.4.801': attribute type 4 has an invalid length. [ 248.033554][ T35] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 248.064407][ T8942] netlink: 17 bytes leftover after parsing attributes in process `syz.4.801'. [ 248.188005][ T8946] netlink: 36 bytes leftover after parsing attributes in process `syz.0.802'. [ 248.466003][ T8955] netlink: 348 bytes leftover after parsing attributes in process `syz.0.807'. [ 248.587569][ T8957] syzkaller1: entered promiscuous mode [ 248.603189][ T8957] syzkaller1: entered allmulticast mode [ 248.692834][ T8964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.811'. [ 248.719050][ T8964] netlink: 13 bytes leftover after parsing attributes in process `syz.3.811'. [ 249.297314][ T8964] veth3: entered promiscuous mode [ 249.766377][ T8997] syzkaller0: entered promiscuous mode [ 249.771941][ T8997] syzkaller0: entered allmulticast mode [ 249.794655][ T9017] xt_ipcomp: unknown flags 1D [ 252.018511][ T9051] tipc: Started in network mode [ 252.034729][ T9051] tipc: Node identity ac14140f, cluster identity 4711 [ 252.057250][ T9051] tipc: New replicast peer: 255.255.255.255 [ 252.080853][ T9051] tipc: Enabled bearer , priority 10 [ 252.273891][ T9058] netlink: 'syz.2.828': attribute type 1 has an invalid length. [ 252.552851][ T9077] netlink: 24 bytes leftover after parsing attributes in process `syz.3.835'. [ 252.611844][ T9084] netlink: 'syz.0.833': attribute type 29 has an invalid length. [ 252.998816][ T9101] netlink: 'syz.0.840': attribute type 1 has an invalid length. [ 253.085593][ T9101] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.148463][ T9108] bond0: (slave veth0_to_bond): Releasing backup interface [ 253.208528][ T9113] netlink: 'syz.2.845': attribute type 75 has an invalid length. [ 253.238917][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.843'. [ 253.296986][ T9108] bond3: (slave veth0_to_bond): making interface the new active one [ 253.327977][ T9108] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 253.383541][ T7419] tipc: Node number set to 2886997007 [ 253.419532][ T9123] netlink: 'syz.3.846': attribute type 1 has an invalid length. [ 253.461885][ T9123] netlink: 'syz.3.846': attribute type 11 has an invalid length. [ 253.484947][ T9123] netlink: 224 bytes leftover after parsing attributes in process `syz.3.846'. [ 253.488165][ T9101] bond3: entered promiscuous mode [ 253.524167][ T9101] veth0_to_bond: entered promiscuous mode [ 253.531503][ T9101] bond3: entered allmulticast mode [ 253.537715][ T9129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.848'. [ 253.549071][ T9101] veth0_to_bond: entered allmulticast mode [ 253.594743][ T9115] veth0_macvtap: left promiscuous mode [ 253.865431][ T9129] 8021q: adding VLAN 0 to HW filter on device bond3 [ 253.983165][ T9130] macvlan2: entered promiscuous mode [ 253.990176][ T9144] netlink: 666 bytes leftover after parsing attributes in process `syz.2.852'. [ 254.035983][ T9130] macvlan2: entered allmulticast mode [ 254.064233][ T9130] bond3: entered promiscuous mode [ 254.081699][ T9130] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 254.115431][ T9130] bond3: left promiscuous mode [ 254.884568][ T9181] netlink: 'syz.1.862': attribute type 30 has an invalid length. [ 254.982496][ T9177] netlink: 32 bytes leftover after parsing attributes in process `syz.0.861'. [ 255.622910][ T9222] netlink: 'syz.0.872': attribute type 15 has an invalid length. [ 255.802672][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.809209][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.024134][ T9248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.880'. [ 256.075793][ T9252] pim6reg: entered allmulticast mode [ 256.102932][ T9252] xt_hashlimit: size too large, truncated to 1048576 [ 256.200916][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.881'. [ 256.274729][ T9262] pim6reg: left allmulticast mode [ 256.284711][ T9260] netlink: 5 bytes leftover after parsing attributes in process `syz.3.882'. [ 256.418743][ T9260] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 256.469452][ T9260] 0ªî{X¹¦: entered allmulticast mode [ 256.484405][ T9260] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 256.535739][ T9269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.883'. [ 256.590856][ T9268] 8021q: adding VLAN 0 to HW filter on device bond3 [ 256.714315][ T9275] syzkaller1: entered promiscuous mode [ 256.720082][ T9275] syzkaller1: entered allmulticast mode [ 256.759118][ T9275] team0: entered promiscuous mode [ 256.769886][ T9275] team_slave_0: entered promiscuous mode [ 256.788709][ T9275] team_slave_1: entered promiscuous mode [ 257.255256][ T9291] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 257.301430][ T9298] netlink: 'syz.0.894': attribute type 25 has an invalid length. [ 257.359310][ T9301] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 257.544339][ T9304] pimreg: entered allmulticast mode [ 257.565376][ T9304] __nla_validate_parse: 3 callbacks suppressed [ 257.565395][ T9304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.896'. [ 257.821509][ T9314] netlink: 'syz.2.900': attribute type 1 has an invalid length. [ 257.853830][ T9314] netlink: 144 bytes leftover after parsing attributes in process `syz.2.900'. [ 257.971045][ T9319] netlink: 'syz.1.902': attribute type 8 has an invalid length. [ 257.992978][ T9319] sch_fq: defrate 0 ignored. [ 258.121582][ T9326] xt_hashlimit: size too large, truncated to 1048576 [ 258.152463][ T9326] xt_hashlimit: max too large, truncated to 1048576 [ 258.167877][ T9326] xt_hashlimit: invalid rate [ 258.273919][ T5636] Bluetooth: hci4: command 0x0405 tx timeout [ 258.489350][ T9346] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 258.816312][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.1.909'. [ 258.954660][ T9363] netlink: 'syz.4.913': attribute type 12 has an invalid length. [ 259.059070][ T9369] netlink: 'syz.0.915': attribute type 8 has an invalid length. [ 259.112516][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.915'. [ 259.149145][ T9372] x_tables: duplicate underflow at hook 1 [ 259.209000][ T9374] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.231451][ T9376] netlink: 12 bytes leftover after parsing attributes in process `syz.0.917'. [ 259.590610][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.922'. [ 261.095584][ T9335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 261.432137][ T9408] netlink: 165 bytes leftover after parsing attributes in process `syz.4.926'. [ 261.470578][ T9406] netlink: 165 bytes leftover after parsing attributes in process `syz.4.926'. [ 261.566307][ T9412] netlink: 'syz.1.928': attribute type 13 has an invalid length. [ 261.574392][ T9412] netlink: 40 bytes leftover after parsing attributes in process `syz.1.928'. [ 261.599301][ T9412] sit0: Caught tx_queue_len zero misconfig [ 261.627503][ T9413] netlink: 88 bytes leftover after parsing attributes in process `syz.2.929'. [ 261.833541][ T9420] syzkaller0: entered promiscuous mode [ 261.840183][ T9420] syzkaller0: entered allmulticast mode [ 261.940534][ T9428] nbd: device at index 64 is going down [ 262.132180][ T8553] udevd[8553]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 262.172606][ T8567] udevd[8567]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 263.284538][ T9492] __nla_validate_parse: 4 callbacks suppressed [ 263.284557][ T9492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.940'. [ 263.291816][ T9498] netlink: 8 bytes leftover after parsing attributes in process `syz.3.943'. [ 263.572996][ T9510] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.947'. [ 263.630576][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.948'. [ 263.951379][ T9527] netlink: 104 bytes leftover after parsing attributes in process `syz.0.951'. [ 264.124355][ T9538] Bluetooth: MGMT ver 1.23 [ 264.624285][ T9558] geneve2: entered promiscuous mode [ 264.762018][ T9565] lo speed is unknown, defaulting to 1000 [ 264.784683][ T9565] lo speed is unknown, defaulting to 1000 [ 264.799342][ T9565] lo speed is unknown, defaulting to 1000 [ 264.831409][ T9565] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 264.884753][ T9565] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 264.948775][ T9565] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 265.037014][ T9565] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 265.117903][ T9565] lo speed is unknown, defaulting to 1000 [ 265.127055][ T9565] lo speed is unknown, defaulting to 1000 [ 265.153573][ T9565] lo speed is unknown, defaulting to 1000 [ 265.194699][ T9565] lo speed is unknown, defaulting to 1000 [ 265.241375][ T9565] lo speed is unknown, defaulting to 1000 [ 265.487704][ T9599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'. [ 265.613545][ T9600] bridge2: port 1(erspan0) entered disabled state [ 265.659557][ T9611] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 265.798793][ T9600] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.806663][ T9600] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.817154][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'. [ 265.866079][ T9616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.980'. [ 265.908092][ T9600] team0: left promiscuous mode [ 265.923273][ T9600] team_slave_0: left promiscuous mode [ 265.936114][ T9600] team_slave_1: left promiscuous mode [ 266.028105][ T9600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.072492][ T9600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.163605][ T9600] macvlan0: left promiscuous mode [ 266.194241][ T5636] Bluetooth: hci0: command 0x0406 tx timeout [ 266.211033][ T9600] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 266.302333][ T9600] veth3: left promiscuous mode [ 266.316204][ T9600] vlan2: left allmulticast mode [ 266.321800][ T9600] bridge2: left allmulticast mode [ 266.354613][ T9600] vlan4: left promiscuous mode [ 266.359567][ T9600] hsr0: left promiscuous mode [ 266.364889][ T9600] vlan4: left allmulticast mode [ 266.369913][ T9600] hsr0: left allmulticast mode [ 266.376124][ T9600] hsr_slave_0: left allmulticast mode [ 266.393805][ T9600] hsr_slave_1: left allmulticast mode [ 266.455063][ T9599] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 266.470357][ T9617] netlink: 'syz.0.979': attribute type 29 has an invalid length. [ 266.497613][ T9617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 266.533452][ T9621] netlink: 'syz.0.979': attribute type 29 has an invalid length. [ 266.553214][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 266.616982][ T8823] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.644198][ T8823] netdevsim netdevsim2 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 266.679328][ T8823] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.711634][ T8823] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.743416][ T8823] netdevsim netdevsim2 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 266.757151][ T8823] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.055007][ T9633] bond4 (unregistering): Released all slaves [ 267.104914][ T8823] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.115754][ T8823] netdevsim netdevsim2 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 267.127493][ T8823] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.149667][ T9636] ip6tnl0: Caught tx_queue_len zero misconfig [ 267.220000][ T8823] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 267.248640][ T8823] netdevsim netdevsim2 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 267.282445][ T8823] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.340494][ T9646] 8021q: VLANs not supported on ip6_vti0 [ 267.388157][ T9653] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 267.425236][ T9653] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 267.674845][ T9666] netlink: 'syz.3.992': attribute type 21 has an invalid length. [ 268.083104][ T9679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.336722][ T9700] nbd: must specify a size in bytes for the device [ 268.536046][ T9705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.581633][ T9709] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 268.790507][ T9714] __nla_validate_parse: 3 callbacks suppressed [ 268.790528][ T9714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1008'. [ 268.834501][ T9718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1009'. [ 268.947377][ T9723] ip6tnl3: entered allmulticast mode [ 269.116218][ T9732] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 269.127488][ T9732] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 269.135811][ T9732] gretap1: entered promiscuous mode [ 269.141296][ T9732] gretap1: entered allmulticast mode [ 269.333024][ T9742] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1015'. [ 269.420888][ T9742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'. [ 269.701553][ T9761] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1021'. [ 269.733868][ T9762] syzkaller0: entered promiscuous mode [ 269.740022][ T9762] syzkaller0: entered allmulticast mode [ 269.753729][ T9762] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 269.761791][ T9762] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1022'. [ 269.826383][ T9771] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1022'. [ 270.094341][ T9782] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1026'. [ 272.274012][ T9802] syzkaller1: entered promiscuous mode [ 272.302036][ T9802] syzkaller1: entered allmulticast mode [ 272.427726][ T9800] syzkaller1: entered promiscuous mode [ 272.433472][ T9800] syzkaller1: entered allmulticast mode [ 272.445806][ T9805] veth0_macvtap: Caught tx_queue_len zero misconfig [ 272.605361][ T9817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1035'. [ 272.722662][ T9817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.867022][ T9820] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1036'. [ 273.368956][ T9841] lo speed is unknown, defaulting to 1000 [ 273.427144][ T9844] tipc: New replicast peer: 172.20.20.170 [ 273.500044][ T9844] tipc: Enabled bearer , priority 10 [ 273.537555][ T9841] lo speed is unknown, defaulting to 1000 [ 273.572947][ T9841] lo speed is unknown, defaulting to 1000 [ 274.095827][ T7427] lo speed is unknown, defaulting to 1000 [ 274.137033][ T7427] syz2: Port: 1 Link DOWN [ 274.586023][ T9875] rdma_rxe: rxe_newlink: failed to add lo [ 274.594716][ T24] tipc: Node number set to 2154678164 [ 274.675591][ T7427] lo speed is unknown, defaulting to 1000 [ 274.686313][ T9841] infiniband syz0: set down [ 274.715363][ T9841] infiniband syz0: added lo [ 274.772169][ T9841] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 274.820532][ T9841] infiniband syz0: Couldn't open port 1 [ 274.845057][ T9841] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 274.873957][ T9841] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 274.891833][ T9841] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 274.971041][ T9841] RDS/IB: syz0: added [ 274.976549][ T9841] smc: adding ib device syz0 with port count 1 [ 274.987305][ T9841] smc: ib device syz0 port 1 has no pnetid [ 275.000100][ T24] lo speed is unknown, defaulting to 1000 [ 275.021015][ T9841] lo speed is unknown, defaulting to 1000 [ 275.892931][ T9841] lo speed is unknown, defaulting to 1000 [ 276.414265][ T9920] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1065'. [ 276.463037][ T9920] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1065'. [ 276.496035][ T9920] netlink: 288 bytes leftover after parsing attributes in process `syz.3.1065'. [ 276.670243][ T9841] lo speed is unknown, defaulting to 1000 [ 276.977754][ T9934] x_tables: duplicate underflow at hook 2 [ 277.082744][ T9841] lo speed is unknown, defaulting to 1000 [ 277.340442][ T9841] lo speed is unknown, defaulting to 1000 [ 277.701115][ T9882] smbdirect: ib_dev[syz2] removed [ 277.708528][ T9885] smc: removing ib device syz0 [ 277.814894][ T9885] smbdirect: ib_dev[syz0] removed [ 278.505611][ T9960] tipc: Cannot configure node identity twice [ 278.535996][ T9960] tipc: Enabled bearer , priority 1 [ 278.611687][ T9959] tipc: Resetting bearer [ 278.652796][ T9959] tipc: Disabling bearer [ 279.547072][ T9982] netlink: 'syz.3.1089': attribute type 13 has an invalid length. [ 279.981406][ T9985] tipc: Enabled bearer , priority 1 [ 280.146931][ T9984] tipc: Resetting bearer [ 280.252450][ T9984] tipc: Disabling bearer [ 281.340219][T10017] lo speed is unknown, defaulting to 1000 [ 281.367276][T10017] lo speed is unknown, defaulting to 1000 [ 281.392769][T10017] lo speed is unknown, defaulting to 1000 [ 281.429544][T10020] smc: net device lo applied user defined pnetid SYZ0 [ 282.219701][T10045] netlink: 'syz.1.1111': attribute type 13 has an invalid length. [ 282.308728][T10048] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1112'. [ 282.900945][T10017] infiniband syz0: set down [ 282.905892][ T9625] lo speed is unknown, defaulting to 1000 [ 282.950683][T10017] infiniband syz0: added lo [ 283.032884][T10017] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 283.094273][T10017] infiniband syz0: Couldn't open port 1 [ 283.314958][T10017] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 283.513095][T10017] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 283.574904][T10017] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 283.835611][T10017] RDS/IB: syz0: added [ 283.867501][T10017] smc: adding ib device syz0 with port count 1 [ 283.919928][T10017] smc: ib device syz0 port 1 has no pnetid [ 283.952591][ T9625] lo speed is unknown, defaulting to 1000 [ 283.978985][T10017] lo speed is unknown, defaulting to 1000 [ 284.166897][T10099] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1122'. [ 284.177347][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1122'. [ 284.848241][T10017] lo speed is unknown, defaulting to 1000 [ 285.570911][T10017] lo speed is unknown, defaulting to 1000 [ 286.013380][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1136'. [ 286.052953][T10141] bridge0: port 3(veth0) entered blocking state [ 286.072963][T10141] bridge0: port 3(veth0) entered disabled state [ 286.082000][T10141] veth0: entered allmulticast mode [ 286.091722][T10141] veth0: entered promiscuous mode [ 286.110553][T10141] bridge0: port 4(veth1) entered blocking state [ 286.137871][T10141] bridge0: port 4(veth1) entered disabled state [ 286.150600][T10141] veth1: entered allmulticast mode [ 286.164086][T10141] veth1: entered promiscuous mode [ 286.373252][T10017] lo speed is unknown, defaulting to 1000 [ 286.770941][T10017] lo speed is unknown, defaulting to 1000 [ 287.048949][T10130] rdma_rxe: rxe_newlink: failed to add veth0 [ 287.363251][T10169] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1146'. [ 288.151172][T10186] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1154'. [ 288.576200][T10208] bridge0: port 3(dummy0) entered blocking state [ 288.594315][T10208] bridge0: port 3(dummy0) entered disabled state [ 288.603198][T10208] dummy0: entered allmulticast mode [ 288.621016][T10208] dummy0: entered promiscuous mode [ 289.272334][T10232] bridge0: port 3(syz_tun) entered blocking state [ 289.279387][T10232] bridge0: port 3(syz_tun) entered disabled state [ 289.286620][T10232] syz_tun: entered allmulticast mode [ 289.296396][T10232] syz_tun: entered promiscuous mode [ 289.302694][T10232] bridge0: port 3(syz_tun) entered blocking state [ 289.309396][T10232] bridge0: port 3(syz_tun) entered listening state [ 289.512015][T10239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 289.650591][T10245] x_tables: duplicate underflow at hook 3 [ 289.789978][T10249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1179'. [ 290.096615][T10255] tipc: Cannot configure node identity twice [ 290.113548][T10255] tipc: Enabling of bearer rejected, failed to enable media [ 290.816944][T10281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1192'. [ 290.922474][T10284] ip_tables: iptables: counters copy to user failed while replacing table [ 290.945456][T10284] ip_tables: iptables: counters copy to user failed while replacing table [ 290.976310][T10284] ip_tables: iptables: counters copy to user failed while replacing table [ 290.989107][T10284] ip_tables: iptables: counters copy to user failed while replacing table [ 291.002800][T10284] ip_tables: iptables: counters copy to user failed while replacing table [ 291.013614][T10284] ip_tables: iptables: counters copy to user failed while replacing table [ 291.028464][T10284] ip_tables: iptables: counters copy to user failed while replacing table [ 291.043009][T10284] ip_tables: iptables: counters copy to user failed while replacing table [ 291.054912][T10284] ip_tables: iptables: counters copy to user failed while replacing table [ 291.070836][T10284] ip_tables: iptables: counters copy to user failed while replacing table [ 291.306945][T10296] tipc: Cannot configure node identity twice [ 291.320188][T10296] tipc: New replicast peer: 127.0.0.1 [ 291.329027][T10296] tipc: Enabled bearer , priority 10 [ 291.597997][T10301] syz0: rxe_newlink: already configured on lo [ 291.617643][ T9625] lo speed is unknown, defaulting to 1000 [ 291.626670][ T9625] syz0: Port: 1 Link ACTIVE [ 291.631889][ T9625] lo speed is unknown, defaulting to 1000 [ 292.141835][T10319] [ 292.144544][T10319] ============================= [ 292.149647][T10319] WARNING: suspicious RCU usage [ 292.154774][T10319] syzkaller #0 Not tainted [ 292.159255][T10319] ----------------------------- [ 292.164529][T10319] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 292.172966][T10319] [ 292.172966][T10319] other info that might help us debug this: [ 292.172966][T10319] [ 292.183306][T10319] [ 292.183306][T10319] rcu_scheduler_active = 2, debug_locks = 1 [ 292.191929][T10319] 1 lock held by syz.2.1207/10319: [ 292.197615][T10319] #0: ffff88807d736ad0 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x6a/0x90 [ 292.210117][T10319] [ 292.210117][T10319] stack backtrace: [ 292.216574][T10319] CPU: 0 UID: 0 PID: 10319 Comm: syz.2.1207 Not tainted syzkaller #0 PREEMPT(full) [ 292.216614][T10319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 292.216643][T10319] Call Trace: [ 292.216652][T10319] [ 292.216661][T10319] dump_stack_lvl+0xe8/0x150 [ 292.216702][T10319] lockdep_rcu_suspicious+0x13f/0x1d0 [ 292.216744][T10319] xfrm_nlmsg_multicast+0x1d8/0x1f0 [ 292.216786][T10319] xfrm_send_migrate_state+0x870/0xae0 [ 292.216837][T10319] ? __pfx_xfrm_send_migrate_state+0x10/0x10 [ 292.216879][T10319] ? xfrm_state_migrate_install+0x192/0x630 [ 292.216919][T10319] xfrm_do_migrate_state+0x1703/0x1e50 [ 292.216961][T10319] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 292.217008][T10319] ? apparmor_capable+0x126/0x170 [ 292.217046][T10319] ? __nla_parse+0x40/0x60 [ 292.217084][T10319] xfrm_user_rcv_msg+0x7a8/0xf30 [ 292.217115][T10319] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 292.217175][T10319] ? __mutex_trylock_common+0x15f/0x270 [ 292.217203][T10319] ? __pfx___mutex_trylock_common+0x10/0x10 [ 292.217228][T10319] ? rcu_is_watching+0x15/0xb0 [ 292.217249][T10319] ? trace_contention_end+0x3d/0x140 [ 292.217282][T10319] netlink_rcv_skb+0x226/0x4a0 [ 292.217309][T10319] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 292.217334][T10319] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 292.217375][T10319] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.217399][T10319] ? netlink_deliver_tap+0x2e/0x1b0 [ 292.217428][T10319] xfrm_netlink_rcv+0x79/0x90 [ 292.217452][T10319] netlink_unicast+0x7bb/0x940 [ 292.217485][T10319] netlink_sendmsg+0x813/0xb40 [ 292.217522][T10319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.217552][T10319] ? aa_sock_msg_perm+0xf1/0x1b0 [ 292.217583][T10319] ? __pfx_netlink_sendmsg+0x10/0x10 [ 292.217619][T10319] sock_sendmsg_nosec+0x13a/0x180 [ 292.217655][T10319] ____sys_sendmsg+0x54e/0x850 [ 292.217686][T10319] ? __pfx_____sys_sendmsg+0x10/0x10 [ 292.217722][T10319] ? import_iovec+0x73/0xa0 [ 292.217762][T10319] ___sys_sendmsg+0x2a5/0x360 [ 292.217786][T10319] ? __lock_acquire+0x683/0x2cf0 [ 292.217823][T10319] ? __pfx____sys_sendmsg+0x10/0x10 [ 292.217853][T10319] ? futex_wait+0x2a2/0x390 [ 292.217912][T10319] ? __fget_files+0x2a/0x420 [ 292.217944][T10319] ? __fget_files+0x3a2/0x420 [ 292.217988][T10319] __x64_sys_sendmsg+0x1b1/0x290 [ 292.218015][T10319] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 292.218065][T10319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.218090][T10319] do_syscall_64+0x174/0x580 [ 292.218117][T10319] ? trace_irq_disable+0x3b/0x140 [ 292.218147][T10319] ? clear_bhb_loop+0x40/0x90 [ 292.218176][T10319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.218199][T10319] RIP: 0033:0x7f427499de99 [ 292.218221][T10319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.218239][T10319] RSP: 002b:00007f4275808028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 292.218263][T10319] RAX: ffffffffffffffda RBX: 00007f4274c25fa0 RCX: 00007f427499de99 [ 292.218280][T10319] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 292.218295][T10319] RBP: 00007f4274a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 292.218310][T10319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.218323][T10319] R13: 00007f4274c26038 R14: 00007f4274c25fa0 R15: 00007ffccfedb588 [ 292.218360][T10319] [ 292.582192][ T7427] tipc: Node number set to 58753257 [ 301.875789][ C0] tipc: RX(021080e9019): key[1] is activated