last executing test programs: 6.926482845s ago: executing program 0 (id=835): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040), 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000080), 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x5000, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r3, &(0x7f0000000500)={0x2, 0x5000, @loopback}, 0x10) 5.895653884s ago: executing program 0 (id=844): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@ipv4_newroute={0x40, 0x18, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x1}, [@RTA_DST={0x8, 0x1, @rand_addr=0xa000000}, @RTA_OIF={0x8, 0x4, 0x1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0x8, 0x1, [{0x64, 0x0, 0x1}]}}]}, 0x40}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000000)=0x64, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x1234, @rand_addr=0xa000001}, 0x10) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000400)='\x00'/1000, 0x3e8}], 0x1}, 0x0) 5.763633885s ago: executing program 0 (id=847): r0 = socket$inet(0x2, 0x3, 0xff) setsockopt(r0, 0x0, 0x40, &(0x7f0000000280)="72617700000000000000000000000000000000000000000000000000000000000900000003000000e80100000000000000000000000000005001000000000000b800000000000000000000005001000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000b8000000000000000000000000000000000048004354000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000280000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000280000000000000000000000000000000000000000000000000000000000000000feffffff00000000", 0x248) 5.551526473s ago: executing program 0 (id=848): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x32}, 0x2, @in6=@loopback}}, 0xa8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 4.643731853s ago: executing program 0 (id=856): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x18) connect$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x18) sendto$rxrpc(r0, &(0x7f0000000200)='A', 0x1, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)="00000000000000000000000000000000000000000600000000000001", 0x1c, 0x0, &(0x7f0000000400)={0x2, 0x1234, @loopback}, 0x10) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 4.354842732s ago: executing program 0 (id=861): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000100)={0x2}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000300)=@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) listen(r1, 0x5) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xaa}}, 0x10) 1.667999338s ago: executing program 1 (id=897): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0xa, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x0, 0x0, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0}}}, 0x100}}, 0x0) 1.317172111s ago: executing program 4 (id=902): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000040)={&(0x7f0000000000), 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) 1.309853005s ago: executing program 1 (id=903): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000314010000000000000000000900020073797a30000000000800410072786500090033006574683000000000"], 0x30}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000314010000000000000000000900020073797a30000000000800410072786500070033006c6f0000"], 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000000314010000000000000000000900020073797a31000000000800410073697700090033006574683000000000"], 0x30}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r1, &(0x7f0000000100)=@in={0x2, 0x2389, @loopback}, 0x10) listen(r1, 0x5) connect(r2, &(0x7f0000000100)=@in={0x2, 0x2389, @loopback}, 0x10) r3 = accept(r1, 0x0, 0x0) sendto(r2, &(0x7f0000000200)='hello', 0x5, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)=""/100, 0x64}], 0x1}, 0x0) 1.255677003s ago: executing program 3 (id=904): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, &(0x7f0000000200)="0000002c00000000000000000100000200"/44, 0x2c, 0x0, &(0x7f0000000300)={0x2, 0x111f, @loopback}, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) 1.135686269s ago: executing program 4 (id=905): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x16c, 0x10, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x5c, 0x1, {{'hmac(sha1)\x00'}, 0xa0, "000102030405060708090a0b0c0d0e0f10111213"}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}, 0x16c}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, &(0x7f0000000600)="1234567890", 0xa, 0x0, &(0x7f0000000700)={0xa, 0x1234, 0x0, @loopback}, 0x1c) 1.045601381s ago: executing program 2 (id=906): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x1000, 0x1, 0x10}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r2, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x1000, 0x1, 0x10, 0x80000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) 1.00011754s ago: executing program 1 (id=907): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x5) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200)={0x10, 0x10}, 0x8) connect(r1, &(0x7f0000000100)=@in={0x2, 0x4e20, @loopback}, 0x10) 999.833783ms ago: executing program 3 (id=908): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x10, 0xa, 0x0, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 999.578979ms ago: executing program 4 (id=909): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'bridge0\x00', 0x1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@setlink={0x34, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_ADDRESS={0xa, 0x1, @random="0242ac110002"}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x34}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syz_tun\x00'}) syz_emit_ethernet(0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="0180c20000000242ac110001000742420300000000"], 0x0) 823.6376ms ago: executing program 2 (id=910): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2b, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200009d1}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @dev={0x7f, 0x0, 0x0, 0x1}}, 0x10) 823.288885ms ago: executing program 3 (id=911): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newsa={0x0, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x11}, {@in=@loopback, 0x1234, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80}, [@algo_crypt={0x0, 0xa, {{'cbc(aes)\x00'}, 0x80, "00112233445566778899aabbccddeeff"}}, @replay_esn_val={0x0, 0x15, {0x1, 0x0, 0x0, 0x0, 0x0, 0x20, [0x0]}}]}}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback}}, 0xe8) sendto$inet(r1, &(0x7f0000000500)="12345678", 0x8, 0x0, &(0x7f0000000480)={0x2, 0x4e20, @loopback}, 0x10) 767.588753ms ago: executing program 1 (id=912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)={{0x14, 0x10, 0x0, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x18, 0x0, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x1, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x1, 0xa, 0x0, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}}}]}]}], {0x14, 0x11, 0x0, 0x0, 0x0, {0x2}}}, 0xe4}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)={{0x14, 0x10, 0x0, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELRULE={0x2c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x0, 0x0, 0x0, {0x2}}}, 0x54}}, 0x0) 640.031296ms ago: executing program 4 (id=913): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000100000000000000000000000000000000001c0012800b00010076657468300000000c000280140001000b0001007665746831000000"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000100001000000000000000000000000000100000001000000100003800b0001007665746830000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000100001000000000000000000000000000100000001000000100003800b0001007665746831000000"], 0x20}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}]}]}, 0x28}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x8b88) bind$packet(r3, &(0x7f0000000100)={0x11, 0x8b88, 0x3, 0x1, 0x0, 0x6, @broadcast}, 0x14) sendto$packet(r3, &(0x7f0000000200)="ffffffffffff02000000000188ca1000"/66, 0x40, 0x0, &(0x7f0000000100)={0x11, 0x8b88, 0x3, 0x1, 0x0, 0x6, @broadcast}, 0x14) 625.687569ms ago: executing program 3 (id=914): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000140), 0x10, &(0x7f0000000180)={&(0x7f00000001c0)=@newtclass={0x50, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x18, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x64}, @TCA_QFQ_LMAX={0x8, 0x2, 0x5dc}]}}]}, 0x50}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000500)=0x10001, 0x4) connect$inet(r1, &(0x7f0000000600)={0x2, 0x1234, @loopback}, 0x10) write(r1, &(0x7f0000000700)='hello', 0x5) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)=@deltclass={0x40, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x8}}]}, 0x40}}, 0x0) 588.4455ms ago: executing program 2 (id=915): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000020)={&(0x7f0000000040)={0x20, 0x10, 0x1, 0x0, 0x0, {0x3}, [@typed={0xb, 0x2, 0x0, 0x0, @str='nlctrl\x00'}]}, 0x20}}, 0x0) 490.33629ms ago: executing program 1 (id=916): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r0, &(0x7f0000000000)=@in={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) bind(r1, &(0x7f0000000100)=@in={0x2, 0x0, @loopback}, 0x10) connect(r1, &(0x7f0000000200)=@in={0x2, 0x4e20, @loopback}, 0x10) accept(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300), 0x14) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x1, 0xa, 0x1}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x9c) nanosleep(&(0x7f0000000600)={0x0, 0x11e1a300}, 0x0) 367.694518ms ago: executing program 2 (id=917): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, 0x0, 0x1c, 0x0, @val=@iter={&(0x7f0000000400)=@cgroup={0x0, 0x0}, 0x10}}, 0x40) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000500)={r1}, 0x8) read(r2, &(0x7f0000000600), 0x100) 361.031367ms ago: executing program 4 (id=918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'dvmrp0\x00', 0x1}) r2 = socket(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r2, 0x89e1, &(0x7f0000000100)={'dvmrp0\x00', 0x0, 0x1}) 188.091576ms ago: executing program 3 (id=919): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/65536, 0x10000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x10, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(0x0, 0x1000, 0x3, 0x11, r1, 0x80000000) sendmsg$xdp(r1, &(0x7f0000000200), 0x40) 187.694837ms ago: executing program 2 (id=920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x28, 0x2, 0x3, 0x0, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1000, 0x2}}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0x0, &(0x7f0000000240)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2, 0x0, 0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0x2, 0x201, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0x2, 0x201, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xc, 0x1, 'NFQUEUE\x00'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_INFO={0x6, 0x3, '\x00\x00'}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2, 0x0, 0x2}}}, 0xf4}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000200)="00112233445566778899aabbccddeeff", 0x10, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) 77.636642ms ago: executing program 2 (id=921): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newsa={0x13c, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x49, 0x3, {{'deflate\x00'}, 0x0, '\x00'}}]}, 0x13c}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "000012341234567890123456"}}}}, 0x0) 68.409297ms ago: executing program 3 (id=922): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'}) ioctl$sock_ifreq(r0, 0x89a2, &(0x7f00000000c0)={'bridge0\x00', @ifru_ivalue=0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={&(0x7f0000000100), 0xc, &(0x7f0000000010)={&(0x7f0000000020)=@getlink={0x20, 0x12, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="0180c2000000000000000000001142420300"/33], 0x0) 246.892µs ago: executing program 4 (id=923): r0 = socket(0x8, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r0, 0x40046102, &(0x7f0000000100)="0100") 0s ago: executing program 1 (id=924): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newsa={0x150, 0x10, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {@in=@loopback, 0xbe3412, 0x32}, @in=@loopback, {}, {}, {}, 0x0, 0x1, 0x2}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x150}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="940000002900010000000000000000007f00000100000000000000000000000000be3412020032007f0000020000000000000000000000007f00000100000000000000000000000000000000000000007f0000010000000000000000000000007f000001000000000000000000000000000000000000000002002020000000000000000000000000010000000000000002000000"], 0x94}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.77' (ED25519) to the list of known hosts. [ 82.756998][ T5605] cgroup: Unknown subsys name 'net' [ 82.879060][ T5605] cgroup: Unknown subsys name 'cpuset' [ 82.888945][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.607199][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.556492][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.565878][ T5621] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.576687][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.584519][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.593187][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.602353][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.621352][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.630765][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.634004][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.646858][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.659997][ T4936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.677339][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.691502][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.700892][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.710497][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.727990][ T4936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.736850][ T4936] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.745274][ T4936] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.754499][ T4936] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.762504][ T4936] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.794291][ T5627] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.807936][ T5627] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.819107][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.828163][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.838454][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.735696][ T5625] Bluetooth: hci0: command tx timeout [ 90.741167][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.744238][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.749638][ T5627] Bluetooth: hci2: command tx timeout [ 90.756777][ T5631] bridge_slave_0: entered allmulticast mode [ 90.762810][ T5621] Bluetooth: hci1: command tx timeout [ 90.773336][ T5631] bridge_slave_0: entered promiscuous mode [ 90.815009][ T5621] Bluetooth: hci3: command tx timeout [ 90.837768][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.845062][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.853735][ T5631] bridge_slave_1: entered allmulticast mode [ 90.862193][ T5631] bridge_slave_1: entered promiscuous mode [ 90.894920][ T5621] Bluetooth: hci4: command tx timeout [ 90.908378][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.915712][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.922904][ T5632] bridge_slave_0: entered allmulticast mode [ 90.930470][ T5632] bridge_slave_0: entered promiscuous mode [ 90.976123][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.983822][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.991151][ T5632] bridge_slave_1: entered allmulticast mode [ 90.999069][ T5632] bridge_slave_1: entered promiscuous mode [ 91.023454][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.030662][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.038302][ T5628] bridge_slave_0: entered allmulticast mode [ 91.045828][ T5628] bridge_slave_0: entered promiscuous mode [ 91.084194][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.111363][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.118786][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.126620][ T5628] bridge_slave_1: entered allmulticast mode [ 91.134156][ T5628] bridge_slave_1: entered promiscuous mode [ 91.166775][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.198148][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.205565][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.212988][ T5619] bridge_slave_0: entered allmulticast mode [ 91.221178][ T5619] bridge_slave_0: entered promiscuous mode [ 91.231390][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.277445][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.285099][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.292317][ T5619] bridge_slave_1: entered allmulticast mode [ 91.300089][ T5619] bridge_slave_1: entered promiscuous mode [ 91.310366][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.331599][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.339177][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.346669][ T5618] bridge_slave_0: entered allmulticast mode [ 91.354287][ T5618] bridge_slave_0: entered promiscuous mode [ 91.368538][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.381331][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.414704][ T5631] team0: Port device team_slave_0 added [ 91.421207][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.428474][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.435829][ T5618] bridge_slave_1: entered allmulticast mode [ 91.443251][ T5618] bridge_slave_1: entered promiscuous mode [ 91.485107][ T5631] team0: Port device team_slave_1 added [ 91.516338][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.527698][ T5632] team0: Port device team_slave_0 added [ 91.558226][ T5628] team0: Port device team_slave_0 added [ 91.567036][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.578185][ T5632] team0: Port device team_slave_1 added [ 91.597325][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.609545][ T5628] team0: Port device team_slave_1 added [ 91.643169][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.650339][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.676649][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.691593][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.734801][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.741918][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.768739][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.805400][ T5619] team0: Port device team_slave_0 added [ 91.812071][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.819502][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.845504][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.864002][ T3108] cfg80211: failed to load regulatory.db [ 91.886981][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.893998][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.920267][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.935654][ T5619] team0: Port device team_slave_1 added [ 91.952676][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.960099][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.986308][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.008724][ T5618] team0: Port device team_slave_0 added [ 92.015512][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.022510][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.048583][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.078825][ T5618] team0: Port device team_slave_1 added [ 92.092398][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.099557][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.125831][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.182126][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.189436][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.216188][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.257461][ T5631] hsr_slave_0: entered promiscuous mode [ 92.264104][ T5631] hsr_slave_1: entered promiscuous mode [ 92.271662][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.278835][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.304934][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.330297][ T5632] hsr_slave_0: entered promiscuous mode [ 92.337152][ T5632] hsr_slave_1: entered promiscuous mode [ 92.343311][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 92.349733][ T5632] Cannot create hsr debugfs directory [ 92.378106][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.385243][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.411425][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.445618][ T5628] hsr_slave_0: entered promiscuous mode [ 92.452287][ T5628] hsr_slave_1: entered promiscuous mode [ 92.459010][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 92.464958][ T5628] Cannot create hsr debugfs directory [ 92.501332][ T5619] hsr_slave_0: entered promiscuous mode [ 92.508060][ T5619] hsr_slave_1: entered promiscuous mode [ 92.514217][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 92.520043][ T5619] Cannot create hsr debugfs directory [ 92.659244][ T5618] hsr_slave_0: entered promiscuous mode [ 92.665796][ T5618] hsr_slave_1: entered promiscuous mode [ 92.672020][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 92.678782][ T5618] Cannot create hsr debugfs directory [ 92.816903][ T5621] Bluetooth: hci1: command tx timeout [ 92.822963][ T5627] Bluetooth: hci2: command tx timeout [ 92.828496][ T5625] Bluetooth: hci0: command tx timeout [ 92.895293][ T5625] Bluetooth: hci3: command tx timeout [ 92.975997][ T5625] Bluetooth: hci4: command tx timeout [ 93.208372][ T5632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.227827][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.236055][ T5632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.247763][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.255992][ T5632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.267547][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.276082][ T5632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.288530][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.371909][ T5619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.382802][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.391621][ T5619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.402939][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.411269][ T5619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.423755][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.432746][ T5619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.443670][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.541446][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.553909][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.571820][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.586814][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.600775][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.612057][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.635688][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.647253][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.751684][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.763840][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.773130][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.784634][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.805776][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.815238][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.825756][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.844207][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.854427][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.926226][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.969359][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.977327][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.014349][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.021791][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.037063][ T5631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.048770][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.058131][ T5631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.068211][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.076755][ T5631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.086856][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.108970][ T5631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.119022][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.208743][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.224643][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.277985][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.329823][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.347965][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.355202][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.390175][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.397441][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.414157][ T131] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.421416][ T131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.499860][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.507157][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.554335][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.641448][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.689540][ T131] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.696960][ T131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.767929][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.775377][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.853626][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.895180][ T5627] Bluetooth: hci2: command tx timeout [ 94.901143][ T5621] Bluetooth: hci1: command tx timeout [ 94.906746][ T5625] Bluetooth: hci0: command tx timeout [ 94.975159][ T5625] Bluetooth: hci3: command tx timeout [ 95.027686][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.055892][ T5625] Bluetooth: hci4: command tx timeout [ 95.073201][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.080447][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.133790][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.154603][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.161892][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.429664][ T5632] veth0_vlan: entered promiscuous mode [ 95.512426][ T5632] veth1_vlan: entered promiscuous mode [ 95.690748][ T5632] veth0_macvtap: entered promiscuous mode [ 95.710746][ T5632] veth1_macvtap: entered promiscuous mode [ 95.820683][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.872924][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.930001][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.973021][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.989044][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.009047][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.043239][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.101066][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.383514][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.438551][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.532375][ T5628] veth0_vlan: entered promiscuous mode [ 96.549910][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.562616][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.567513][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.607856][ T5628] veth1_vlan: entered promiscuous mode [ 96.686143][ T5632] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.773284][ T5619] veth0_vlan: entered promiscuous mode [ 96.796280][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.856373][ T5618] veth0_vlan: entered promiscuous mode [ 96.869040][ T5628] veth0_macvtap: entered promiscuous mode [ 96.877931][ T5619] veth1_vlan: entered promiscuous mode [ 96.891463][ T5628] veth1_macvtap: entered promiscuous mode [ 96.923219][ T5618] veth1_vlan: entered promiscuous mode [ 96.975940][ T5621] Bluetooth: hci1: command tx timeout [ 96.981452][ T5627] Bluetooth: hci2: command tx timeout [ 96.985074][ T5625] Bluetooth: hci0: command tx timeout [ 97.004665][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.029136][ T5813] can: request_module (can-proto-5) failed. [ 97.051881][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.060201][ T5625] Bluetooth: hci3: command tx timeout [ 97.090545][ T5619] veth0_macvtap: entered promiscuous mode [ 97.111432][ T5631] veth0_vlan: entered promiscuous mode [ 97.118689][ T5619] veth1_macvtap: entered promiscuous mode [ 97.129800][ T1075] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.138859][ T5625] Bluetooth: hci4: command tx timeout [ 97.157926][ T1075] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.167678][ T1075] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.193145][ T1075] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.204122][ T5618] veth0_macvtap: entered promiscuous mode [ 97.218793][ T5618] veth1_macvtap: entered promiscuous mode [ 97.232324][ T5631] veth1_vlan: entered promiscuous mode [ 97.300757][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.331793][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.351004][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.386841][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.402723][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.415762][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.429440][ T1075] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.439351][ T1075] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.450026][ T1075] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.460977][ T1075] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.489002][ T1075] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.498024][ T1075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.526668][ T5631] veth0_macvtap: entered promiscuous mode [ 97.534361][ T1075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.558307][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.581412][ T5631] veth1_macvtap: entered promiscuous mode [ 97.582817][ T131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.599530][ T131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.720830][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.797094][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.819930][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.850163][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.910664][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.928610][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.941401][ T131] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.961529][ T131] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.983807][ T315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.002331][ T315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.013426][ T131] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.034099][ T131] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.202705][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.245331][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.395720][ T315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.408916][ T315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.640102][ T131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.676909][ T131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.203604][ T5852] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3'. [ 99.502402][ T5861] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20002 [ 99.529154][ T5865] x_tables: duplicate underflow at hook 2 [ 99.574022][ T5865] geneve1: entered promiscuous mode [ 99.604602][ T5865] geneve1: entered allmulticast mode [ 99.687407][ T5865] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 99.761158][ T5845] syz.1.2 (5845) used greatest stack depth: 18312 bytes left [ 99.956103][ T5881] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16'. [ 100.035018][ T5886] netlink: 'syz.3.17': attribute type 83 has an invalid length. [ 100.145771][ T5859] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.155213][ T5859] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.238065][ T5890] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'. [ 100.260327][ T5854] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 100.287369][ T5871] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 100.480138][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.502857][ T5859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.666708][ T5859] geneve1: left promiscuous mode [ 100.671983][ T5859] geneve1: left allmulticast mode [ 100.748990][ T5876] netlink: 24 bytes leftover after parsing attributes in process `syz.2.15'. [ 100.771119][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.807294][ T315] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.827621][ T5895] Bluetooth: MGMT ver 1.23 [ 100.845088][ T315] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.905087][ T315] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.960521][ T315] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.037762][ T5899] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22'. [ 101.060445][ T5899] netlink: 16 bytes leftover after parsing attributes in process `syz.4.22'. [ 101.096674][ T5899] netlink: 36 bytes leftover after parsing attributes in process `syz.4.22'. [ 101.122927][ T5905] syz.4.22 uses obsolete (PF_INET,SOCK_PACKET) [ 101.159033][ T5905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.298281][ T5910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 101.456585][ T5625] Bluetooth: hci0: command 0x0401 tx timeout [ 101.575501][ T5918] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 101.606338][ T5918] bond1 (unregistering): Released all slaves [ 101.717138][ T5927] netlink: 'syz.2.31': attribute type 1 has an invalid length. [ 101.880044][ T5928] netlink: 'syz.1.32': attribute type 3 has an invalid length. [ 101.992282][ T5937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 102.058892][ T5928] netlink: 68 bytes leftover after parsing attributes in process `syz.1.32'. [ 102.330166][ T5953] x_tables: duplicate underflow at hook 2 [ 102.837429][ T5977] netlink: 'syz.1.43': attribute type 1 has an invalid length. [ 102.906823][ T5977] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 102.960762][ T5982] veth0_to_bridge: entered promiscuous mode [ 102.999774][ T5982] veth0_to_bridge: entered allmulticast mode [ 103.392408][ T5989] veth0_to_bond: entered allmulticast mode [ 103.535392][ T5625] Bluetooth: hci0: command 0x0401 tx timeout [ 103.826141][ T6012] Cannot find add_set index 0 as target [ 104.202951][ T6040] 8021q: VLANs not supported on vxcan0 [ 104.408565][ T6047] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 104.456692][ T6047] __nla_validate_parse: 17 callbacks suppressed [ 104.456713][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.59'. [ 104.764519][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'. [ 104.774455][ T6065] Zero length message leads to an empty skb [ 104.814085][ T6063] syzkaller0: entered promiscuous mode [ 104.838618][ T6063] syzkaller0: entered allmulticast mode [ 104.846079][ T6070] xt_ecn: cannot match TCP bits for non-tcp packets [ 104.862928][ T6070] xt_TCPMSS: Only works on TCP SYN packets [ 104.943350][ T6077] netlink: 32 bytes leftover after parsing attributes in process `syz.3.65'. [ 104.962861][ T6066] bond0: (slave bond_slave_1): Releasing backup interface [ 105.099505][ T6070] netlink: 'syz.3.65': attribute type 13 has an invalid length. [ 105.107651][ T6070] netlink: 'syz.3.65': attribute type 12 has an invalid length. [ 105.394002][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.68'. [ 105.408794][ T6084] netlink: 116 bytes leftover after parsing attributes in process `syz.4.70'. [ 105.425688][ T6084] netlink: 56 bytes leftover after parsing attributes in process `syz.4.70'. [ 105.441681][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.70'. [ 105.618557][ T5625] Bluetooth: hci0: command 0x0401 tx timeout [ 105.653621][ T6089] netlink: 200 bytes leftover after parsing attributes in process `syz.0.71'. [ 105.676073][ T6093] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 105.686280][ T6093] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 105.694887][ T6093] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 105.727007][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'. [ 105.742932][ T6096] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 105.770584][ T6096] netlink: 'syz.1.74': attribute type 19 has an invalid length. [ 105.830019][ T3365] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.865040][ T3365] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.889616][ T3365] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.911558][ T3365] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.142928][ T6107] netlink: 'syz.1.76': attribute type 1 has an invalid length. [ 106.550254][ T6122] netlink: 'syz.1.81': attribute type 24 has an invalid length. [ 106.666547][ T6126] syzkaller0: entered promiscuous mode [ 106.692399][ T6126] syzkaller0: entered allmulticast mode [ 107.690224][ T6174] netlink: 'syz.4.89': attribute type 1 has an invalid length. [ 108.513338][ T6158] syzkaller1: entered promiscuous mode [ 108.520104][ T6158] syzkaller1: entered allmulticast mode [ 109.701555][ T6213] netlink: 'syz.0.96': attribute type 1 has an invalid length. [ 109.773504][ T6218] __nla_validate_parse: 6 callbacks suppressed [ 109.773609][ T6218] netlink: 236 bytes leftover after parsing attributes in process `syz.2.99'. [ 109.804889][ T6218] netlink: 236 bytes leftover after parsing attributes in process `syz.2.99'. [ 109.859630][ T6220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.98'. [ 109.980446][ T6222] netlink: 428 bytes leftover after parsing attributes in process `syz.2.99'. [ 110.074792][ T6218] bond1: option fail_over_mac: invalid value (127) [ 110.094564][ T6218] bond1 (unregistering): Released all slaves [ 110.210294][ T6222] netlink: 64 bytes leftover after parsing attributes in process `syz.2.99'. [ 110.513177][ T6254] netlink: 'syz.0.109': attribute type 1 has an invalid length. [ 110.534182][ T6254] netlink: 24 bytes leftover after parsing attributes in process `syz.0.109'. [ 110.601889][ T6252] netlink: 24 bytes leftover after parsing attributes in process `syz.1.108'. [ 110.788019][ T6270] netlink: 388 bytes leftover after parsing attributes in process `syz.0.113'. [ 110.858044][ T6263] syzkaller1: entered promiscuous mode [ 110.869275][ T6263] syzkaller1: entered allmulticast mode [ 110.889412][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz.2.115'. [ 110.989534][ T6279] openvswitch: netlink: Actions may not be safe on all matching packets [ 111.014053][ T6278] openvswitch: netlink: Actions may not be safe on all matching packets [ 111.330510][ T6282] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.338341][ T6282] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.553519][ T6282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 111.590331][ T6282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.883054][ T6283] netlink: 24 bytes leftover after parsing attributes in process `syz.1.118'. [ 111.927734][ T6184] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.968652][ T6184] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.011474][ T6184] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.065286][ T6184] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.701662][ T6373] bond1 (unregistering): Released all slaves [ 113.709503][ T6382] ieee802154 phy0 wpan0: encryption failed: -22 [ 113.972158][ T6390] batman_adv: batadv0: Adding interface: dummy0 [ 114.004643][ T6390] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.075576][ T6390] batman_adv: batadv0: Interface activated: dummy0 [ 114.170904][ T6390] batadv0: mtu less than device minimum [ 114.201265][ T6390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.214381][ T6390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.226276][ T6390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.238159][ T6390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.250045][ T6390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.262023][ T6390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.273889][ T6390] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 114.660675][ T6369] sit0: entered promiscuous mode [ 114.694286][ T6369] netlink: 'syz.2.132': attribute type 1 has an invalid length. [ 115.339767][ T6443] __nla_validate_parse: 2 callbacks suppressed [ 115.339787][ T6443] netlink: 144 bytes leftover after parsing attributes in process `syz.2.147'. [ 116.664905][ T6448] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 117.563901][ T6489] =v: renamed from veth0_to_bond (while UP) [ 117.577984][ T6493] xt_cgroup: xt_cgroup: no path or classid specified [ 117.711752][ T6498] netlink: 32 bytes leftover after parsing attributes in process `syz.0.163'. [ 117.803319][ T6504] nft_compat: unsupported protocol 5 [ 117.818808][ T6504] sctp: [Deprecated]: syz.1.166 (pid 6504) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.818808][ T6504] Use struct sctp_sack_info instead [ 117.961841][ T6506] netlink: 12 bytes leftover after parsing attributes in process `syz.0.167'. [ 118.052876][ T6517] netlink: 28 bytes leftover after parsing attributes in process `syz.0.167'. [ 118.072744][ T6506] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.092005][ T6521] bridge2: entered promiscuous mode [ 118.097801][ T6521] bridge2: entered allmulticast mode [ 118.108188][ T6506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.167'. [ 118.179385][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.1.168'. [ 118.181606][ T6506] bond1 (unregistering): Released all slaves [ 118.268450][ T6525] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 118.355514][ T6508] bond0: (slave bond_slave_1): Releasing backup interface [ 118.388713][ T6528] syz_tun: entered allmulticast mode [ 118.441092][ T6528] syz_tun: left allmulticast mode [ 118.732659][ T6546] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 118.741946][ T6546] syzkaller1: linktype set to 823 [ 118.920607][ T6547] tap0: tun_chr_ioctl cmd 1074025677 [ 118.939682][ T6547] tap0: linktype set to 6 [ 119.263767][ T6574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.184'. [ 119.285661][ T6571] hsr0: entered allmulticast mode [ 119.291325][ T6571] hsr_slave_0: entered allmulticast mode [ 119.298717][ T6571] hsr_slave_1: entered allmulticast mode [ 119.311456][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 119.338762][ T6571] hsr_slave_0: left promiscuous mode [ 119.352101][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 119.361100][ T6571] hsr_slave_1: left promiscuous mode [ 119.370203][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.183'. [ 119.382582][ T6571] hsr0 (unregistering): left allmulticast mode [ 119.400907][ T6574] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.416800][ T6574] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.442309][ T6574] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.450891][ T6574] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.189628][ T6613] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 120.257796][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.266098][ T6617] net_ratelimit: 12 callbacks suppressed [ 120.266119][ T6617] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 123.054338][ T6606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.282376][ T6644] __nla_validate_parse: 2 callbacks suppressed [ 123.282395][ T6644] netlink: 20 bytes leftover after parsing attributes in process `syz.1.199'. [ 123.358975][ T6656] netlink: 68 bytes leftover after parsing attributes in process `syz.4.202'. [ 123.452539][ T6661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.202'. [ 123.498417][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 123.760622][ T6661] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.772723][ T6661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.814963][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.824904][ T6661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.843316][ T6661] veth1_vlan: left promiscuous mode [ 123.850374][ T6661] veth0_vlan: left promiscuous mode [ 123.859015][ T6661] veth0_vlan: entered promiscuous mode [ 123.869704][ T6661] veth1_vlan: entered promiscuous mode [ 123.881800][ T6661] veth1_macvtap: left promiscuous mode [ 123.889192][ T6661] veth0_macvtap: left promiscuous mode [ 123.896153][ T6661] veth0_macvtap: entered promiscuous mode [ 123.903693][ T6661] veth1_macvtap: entered promiscuous mode [ 123.917411][ T6661] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 123.926398][ T6661] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 123.946203][ T6661] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 123.961562][ T6661] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 123.978630][ T6675] netlink: 'syz.3.206': attribute type 32 has an invalid length. [ 123.987522][ T6675] netlink: 48 bytes leftover after parsing attributes in process `syz.3.206'. [ 124.018103][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.025379][ T6177] bridge0: port 1(bridge_slave_0) entered listening state [ 124.052456][ T6177] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.059827][ T6177] bridge0: port 2(bridge_slave_1) entered listening state [ 124.246398][ T131] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.269331][ T131] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.295460][ T131] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.333717][ T131] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.650111][ T6698] netlink: 48 bytes leftover after parsing attributes in process `syz.3.211'. [ 125.115268][ T5746] IPVS: starting estimator thread 0... [ 125.127711][ T6712] netlink: 164 bytes leftover after parsing attributes in process `syz.1.215'. [ 125.224913][ T6717] IPVS: using max 29 ests per chain, 69600 per kthread [ 125.571945][ T6721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 126.156661][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.610321][ T6734] veth0_to_bond: left allmulticast mode [ 126.671006][ T6734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.689030][ T6734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.105032][ T6171] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.141387][ T6171] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.183484][ T6171] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.222001][ T6171] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.670357][ T6752] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.683764][ T6777] netlink: 32 bytes leftover after parsing attributes in process `syz.1.228'. [ 127.745867][ T6777] gre1: entered allmulticast mode [ 129.076723][ T6831] netlink: 'syz.4.241': attribute type 1 has an invalid length. [ 129.208973][ T6831] 8021q: adding VLAN 0 to HW filter on device bond1 [ 129.320062][ T6839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.244'. [ 129.555520][ T6839] team0: Port device team_slave_0 removed [ 129.807498][ T6857] macsec1: entered promiscuous mode [ 129.812888][ T6857] dummy0: entered promiscuous mode [ 129.818931][ T6857] macsec1: entered allmulticast mode [ 129.874009][ T6857] dummy0: entered allmulticast mode [ 129.923081][ T6857] dummy0: left allmulticast mode [ 130.114518][ T5810] dummy0: left promiscuous mode [ 130.471912][ T6867] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.606549][ T6874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.250'. [ 130.688145][ T6867] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.860362][ T6709] Set syz1 is full, maxelem 65536 reached [ 130.921248][ T6867] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.113427][ T6867] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.198928][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 131.269550][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.254'. [ 131.426514][ T6187] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.519499][ T6184] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.560391][ T6905] netlink: 'syz.2.259': attribute type 1 has an invalid length. [ 131.672643][ T6905] 8021q: adding VLAN 0 to HW filter on device bond1 [ 131.680631][ T6187] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.731097][ T6187] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.885595][ T30] audit: type=1800 audit(1785135260.885:2): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.262" name="blkio.bfq.time_recursive" dev="tmpfs" ino=290 res=0 errno=0 [ 132.030149][ T6925] netlink: 148 bytes leftover after parsing attributes in process `syz.2.264'. [ 132.087676][ T6926] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 132.152252][ T6921] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'. [ 132.180295][ T6938] netlink: 52 bytes leftover after parsing attributes in process `syz.1.267'. [ 132.191083][ T6932] netlink: 28 bytes leftover after parsing attributes in process `syz.0.265'. [ 132.224109][ T6937] netlink: 'syz.4.268': attribute type 11 has an invalid length. [ 132.337427][ T6939] netlink: 'syz.4.268': attribute type 2 has an invalid length. [ 132.726217][ T6959] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:0 [ 132.817384][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.826221][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.887910][ T6961] netlink: 28 bytes leftover after parsing attributes in process `syz.4.274'. [ 132.915253][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.274'. [ 134.003416][ T7023] warning: `syz.3.293' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.248036][ T7027] ip6gre1: entered promiscuous mode [ 134.253347][ T7027] ip6gre1: entered allmulticast mode [ 134.592008][ T7047] netlink: 'syz.3.300': attribute type 1 has an invalid length. [ 134.605381][ T7047] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 134.620774][ T7049] =v: renamed from veth0_to_bond [ 134.626929][ T7047] __nla_validate_parse: 4 callbacks suppressed [ 134.626947][ T7047] netlink: 320 bytes leftover after parsing attributes in process `syz.3.300'. [ 134.725559][ T7053] netlink: 'syz.4.301': attribute type 1 has an invalid length. [ 134.897042][ T6181] wlan1: Trigger new scan to find an IBSS to join [ 134.953108][ T7053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.212930][ T7076] netlink: 128 bytes leftover after parsing attributes in process `syz.1.306'. [ 135.439362][ T7065] netlink: 'syz.0.303': attribute type 1 has an invalid length. [ 135.486899][ T7065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 135.515445][ T7065] bond1: (slave geneve2): making interface the new active one [ 135.524475][ T7065] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 135.545015][ T6171] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.554457][ T6171] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.571134][ T6171] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.623566][ T6171] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.668111][ T7093] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.850042][ T7101] 8021q: VLANs not supported on xfrm0 [ 136.680944][ T7016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.879272][ T7109] geneve1: entered promiscuous mode [ 137.007844][ T7119] netlink: 'syz.3.315': attribute type 23 has an invalid length. [ 137.410614][ T7139] netlink: 120 bytes leftover after parsing attributes in process `syz.1.321'. [ 137.435477][ T7141] mac80211_hwsim hwsim7 »»»»»»: renamed from wlan0 (while UP) [ 137.809463][ T7148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.324'. [ 137.855346][ T6181] wlan1: Trigger new scan to find an IBSS to join [ 138.201360][ T7164] netlink: 16 bytes leftover after parsing attributes in process `syz.4.330'. [ 139.061728][ T7192] Cannot find del_set index 0 as target [ 139.142457][ T7195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.340'. [ 139.241327][ T7195] netlink: 32 bytes leftover after parsing attributes in process `syz.1.340'. [ 139.289417][ T7198] netlink: 24 bytes leftover after parsing attributes in process `syz.1.340'. [ 139.837028][ T7224] pimreg: entered allmulticast mode [ 139.870999][ T7224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.347'. [ 139.913885][ T7224] netlink: 64 bytes leftover after parsing attributes in process `syz.0.347'. [ 140.116896][ T7230] batadv0: entered promiscuous mode [ 140.153558][ T7230] macvtap1: entered promiscuous mode [ 140.167706][ T7230] macvtap1: entered allmulticast mode [ 140.188893][ T7230] batadv0: entered allmulticast mode [ 140.225319][ T7230] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 140.276840][ T7230] batadv0: left allmulticast mode [ 140.307031][ T7230] batadv0: left promiscuous mode [ 140.595445][ T7262] netlink: 20 bytes leftover after parsing attributes in process `syz.1.356'. [ 140.615548][ T7256] tipc: Started in network mode [ 140.624642][ T7256] tipc: Node identity e6e65c107b25, cluster identity 4711 [ 140.639085][ T7256] tipc: Enabled bearer , priority 0 [ 140.664372][ T7256] syzkaller0: entered promiscuous mode [ 140.685004][ T7256] syzkaller0: entered allmulticast mode [ 140.732555][ T7256] tipc: Resetting bearer [ 140.771880][ T7264] ip6tnl1: entered allmulticast mode [ 140.811123][ T7268] netlink: 56 bytes leftover after parsing attributes in process `syz.2.362'. [ 140.899457][ T6181] wlan1: Trigger new scan to find an IBSS to join [ 141.110622][ T7289] bridge_slave_0: left allmulticast mode [ 141.154385][ T7289] bridge_slave_0: left promiscuous mode [ 141.164463][ T7289] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.180915][ T7289] bridge_slave_1: left allmulticast mode [ 141.195623][ T7289] bridge_slave_1: left promiscuous mode [ 141.208485][ T7289] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.278979][ T7289] bond0: (slave bond_slave_0): Releasing backup interface [ 141.300585][ T7289] bond0: (slave bond_slave_1): Releasing backup interface [ 141.320065][ T7289] team0: Port device team_slave_0 removed [ 141.333633][ T7289] team0: Port device team_slave_1 removed [ 141.349606][ T7289] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.368020][ T7289] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.379097][ T7289] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 141.408325][ T7291] team0: Mode changed to "loadbalance" [ 141.701067][ T7255] tipc: Resetting bearer [ 141.745529][ T7255] tipc: Disabling bearer [ 141.809264][ T6184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.834849][ T7313] ip6gre1: entered allmulticast mode [ 141.889648][ T7316] netlink: 'syz.1.372': attribute type 15 has an invalid length. [ 142.446726][ T7349] tipc: Started in network mode [ 142.465819][ T7349] tipc: Node identity 82642ec08a18, cluster identity 4711 [ 142.494369][ T7349] tipc: Enabled bearer , priority 0 [ 142.526605][ T7353] syzkaller0: entered promiscuous mode [ 142.552323][ T7353] syzkaller0: entered allmulticast mode [ 142.659535][ T7349] tipc: Resetting bearer [ 142.694053][ T7348] tipc: Resetting bearer [ 142.743582][ T7348] tipc: Disabling bearer [ 142.765795][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.383'. [ 142.792003][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.383'. [ 142.910063][ T7358] dummy0: entered promiscuous mode [ 142.933338][ T7358] dummy0: left promiscuous mode [ 143.270706][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.393'. [ 143.419432][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.394'. [ 143.453667][ T7400] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 143.487002][ T7403] bond3 (unregistering): Released all slaves [ 143.765380][ T7414] can: request_module (can-proto-0) failed. [ 143.855846][ T7414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.398'. [ 143.992058][ T7430] netlink: 24 bytes leftover after parsing attributes in process `syz.0.402'. [ 144.166513][ T7441] xt_HMARK: proto mask must be zero with L3 mode [ 144.802101][ T7477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.941299][ T7490] __nla_validate_parse: 1 callbacks suppressed [ 144.941335][ T7490] netlink: 40 bytes leftover after parsing attributes in process `syz.2.418'. [ 144.987472][ T7491] veth3: entered promiscuous mode [ 144.992819][ T7491] veth3: entered allmulticast mode [ 145.003842][ T7491] team0: Device veth3 is up. Set it down before adding it as a team port [ 145.070507][ T7496] openvswitch: netlink: Flow actions attr not present in new flow. [ 145.291433][ T7504] syzkaller0: entered promiscuous mode [ 145.298578][ T7504] syzkaller0: entered allmulticast mode [ 145.330205][ T7504] tipc: Started in network mode [ 145.342787][ T7504] tipc: Node identity ba722a025863, cluster identity 4711 [ 145.364239][ T7504] tipc: Enabled bearer , priority 0 [ 145.390076][ T7502] tipc: Resetting bearer [ 145.470552][ T7502] tipc: Disabling bearer [ 145.534853][ T7514] netlink: 'syz.1.425': attribute type 13 has an invalid length. [ 145.601462][ T7516] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 145.767661][ T7516] bond3 (unregistering): Released all slaves [ 146.480472][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.783525][ T6187] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.811638][ T6187] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.857933][ T6187] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.896057][ T6187] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.979361][ T7546] netlink: 'syz.4.428': attribute type 2 has an invalid length. [ 146.998361][ T6187] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.022526][ T6187] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.087304][ T6187] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.109363][ T6187] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.383729][ T7567] netlink: 16 bytes leftover after parsing attributes in process `syz.2.436'. [ 147.567965][ T7575] netlink: 20 bytes leftover after parsing attributes in process `syz.0.438'. [ 147.620951][ T7578] netlink: 24 bytes leftover after parsing attributes in process `syz.0.438'. [ 147.643256][ T7575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 147.655047][ T7577] netlink: 36 bytes leftover after parsing attributes in process `syz.4.439'. [ 147.728739][ T7586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.442'. [ 147.819966][ T7586] tipc: Cannot configure node identity twice [ 147.829048][ T7586] tipc: Enabled bearer , priority 10 [ 148.057067][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.446'. [ 148.068512][ T7602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.446'. [ 148.078161][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 148.662317][ T7590] infiniband syz1: set active [ 148.671770][ T7590] infiniband syz1: added syz_tun [ 148.713633][ T7590] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 148.731816][ T7590] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 148.770949][ T7590] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 148.958051][ T29] tipc: Node number set to 3792775682 [ 148.995370][ T7590] RDS/IB: syz1: added [ 149.011066][ T7590] smc: adding ib device syz1 with port count 1 [ 149.030141][ T7590] smc: ib device syz1 port 1 has no pnetid [ 150.114452][ T7672] __nla_validate_parse: 6 callbacks suppressed [ 150.114471][ T7672] netlink: 40 bytes leftover after parsing attributes in process `syz.4.472'. [ 150.138399][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.473'. [ 150.162125][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'. [ 150.191143][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.473'. [ 150.239120][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.0.473'. [ 150.879263][ T7700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.486'. [ 151.289908][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.488'. [ 151.986560][ T7738] netlink: 36 bytes leftover after parsing attributes in process `syz.2.495'. [ 151.996313][ T7738] openvswitch: netlink: Flow key attr not present in new flow. [ 152.068193][ T7740] lo speed is unknown, defaulting to 1000 [ 152.087866][ T7740] lo speed is unknown, defaulting to 1000 [ 152.097088][ T7740] lo speed is unknown, defaulting to 1000 [ 152.347958][ T7749] smc: removing ib device syz1 [ 152.424068][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 152.668104][ T7749] smbdirect: ib_dev[syz1] removed [ 153.038471][ T7781] netlink: 'syz.4.512': attribute type 4 has an invalid length. [ 153.049854][ T7781] netlink: 'syz.4.512': attribute type 4 has an invalid length. [ 153.064085][ T7779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.511'. [ 153.185653][ T7740] infiniband syz0: set down [ 153.191376][ T7533] lo speed is unknown, defaulting to 1000 [ 153.210702][ T7740] infiniband syz0: added lo [ 153.243149][ T7740] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 153.272478][ T7740] infiniband syz0: Couldn't open port 1 [ 153.315520][ T7740] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 153.377050][ T7740] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 153.440512][ T7740] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 153.670085][ T7740] RDS/IB: syz0: added [ 153.687572][ T7740] smc: adding ib device syz0 with port count 1 [ 153.709899][ T7740] smc: ib device syz0 port 1 has no pnetid [ 153.728688][ T5815] lo speed is unknown, defaulting to 1000 [ 153.740844][ T7794] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 153.761620][ T7740] lo speed is unknown, defaulting to 1000 [ 153.872639][ T7797] atomic_op ffff88802aa71998 conn xmit_atomic 0000000000000000 [ 154.031637][ T7805] openvswitch: netlink: Key 2 has unexpected len 12 expected 4 [ 154.577262][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 154.585797][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 154.713726][ T7832] bridge0: port 3(syz_tun) entered blocking state [ 154.743515][ T7832] bridge0: port 3(syz_tun) entered disabled state [ 154.773695][ T7832] syz_tun: entered allmulticast mode [ 154.852714][ T7832] syz_tun: entered promiscuous mode [ 154.879598][ T7832] bridge0: port 3(syz_tun) entered blocking state [ 154.886284][ T7832] bridge0: port 3(syz_tun) entered listening state [ 155.628776][ T7862] netlink: ct family unspecified [ 155.648933][ T7862] openvswitch: netlink: Actions may not be safe on all matching packets [ 155.827637][ T7868] ip_tables: iptables: counters copy to user failed while replacing table [ 157.932586][ T7827] lo speed is unknown, defaulting to 1000 [ 157.951257][ T7888] __nla_validate_parse: 1 callbacks suppressed [ 157.951276][ T7888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.552'. [ 158.128520][ T7900] tipc: Started in network mode [ 158.153247][ T7900] tipc: Node identity 887766554433221100ffeeddccbbaa99, cluster identity 4711 [ 158.391868][ T7831] lo speed is unknown, defaulting to 1000 [ 158.645231][ T7833] lo speed is unknown, defaulting to 1000 [ 158.849904][ T7837] lo speed is unknown, defaulting to 1000 [ 159.100142][ T7918] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 159.216074][ T7740] lo speed is unknown, defaulting to 1000 [ 159.520763][ T7933] openvswitch: netlink: Flow actions attr not present in new flow. [ 159.701138][ T7740] lo speed is unknown, defaulting to 1000 [ 159.956676][ T7740] lo speed is unknown, defaulting to 1000 [ 160.049873][ T7946] tipc: Cannot configure node identity twice [ 160.175680][ T7740] lo speed is unknown, defaulting to 1000 [ 160.346002][ T7740] lo speed is unknown, defaulting to 1000 [ 160.512364][ T7740] lo speed is unknown, defaulting to 1000 [ 160.693426][ T7926] rdma_rxe: rxe_newlink: failed to add lo [ 161.628792][ T7965] syz0: rxe_newlink: already configured on lo [ 161.719096][ T5815] lo speed is unknown, defaulting to 1000 [ 161.726201][ T5815] syz0: Port: 1 Link ACTIVE [ 161.732499][ T5815] lo speed is unknown, defaulting to 1000 [ 161.987653][ T7972] netlink: 32 bytes leftover after parsing attributes in process `syz.2.578'. [ 162.053356][ T7972] tipc: Enabled bearer , priority 10 [ 162.707533][ T7991] rdma_rxe: rxe_newlink: failed to add veth0 [ 162.760455][ T7995] netlink: 84 bytes leftover after parsing attributes in process `syz.1.586'. [ 162.819063][ T7998] netlink: 68 bytes leftover after parsing attributes in process `syz.1.586'. [ 163.166445][ T6314] tipc: Node number set to 3439324893 [ 163.472025][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 163.488317][ T8027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.597'. [ 164.493165][ T8073] syz_tun: entered allmulticast mode [ 164.651683][ T8072] syz_tun: left allmulticast mode [ 164.810340][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.616'. [ 164.835573][ T8085] netlink: 68 bytes leftover after parsing attributes in process `syz.3.617'. [ 164.967220][ T8087] 0: reclassify loop, rule prio 0, protocol 03 [ 165.078367][ T8093] bridge0: port 3(syz_tun) entered blocking state [ 165.085784][ T8093] bridge0: port 3(syz_tun) entered disabled state [ 165.092668][ T8093] syz_tun: entered allmulticast mode [ 165.101589][ T8093] syz_tun: entered promiscuous mode [ 165.610857][ T8120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 165.620923][ T8120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.631'. [ 165.630743][ T8120] openvswitch: netlink: Flow actions attr not present in new flow. [ 165.807506][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 165.903101][ T8130] bridge0: port 3(syz_tun) entered blocking state [ 165.914245][ T8130] bridge0: port 3(syz_tun) entered disabled state [ 165.928927][ T8130] syz_tun: entered allmulticast mode [ 165.950290][ T8130] syz_tun: entered promiscuous mode [ 165.982191][ T8130] bridge0: port 3(syz_tun) entered blocking state [ 165.988971][ T8130] bridge0: port 3(syz_tun) entered listening state [ 166.203684][ T8141] rdma_rxe: rxe_newlink: failed to add lo [ 166.281135][ T8146] rdma_rxe: rxe_newlink: failed to add veth0 [ 166.317389][ T8147] smc: removing ib device syz0 [ 166.381688][ T8147] smbdirect: ib_dev[syz0] removed [ 166.401833][ T8151] netlink: 4 bytes leftover after parsing attributes in process `syz.2.640'. [ 166.423925][ T8151] netlink: 48 bytes leftover after parsing attributes in process `syz.2.640'. [ 166.448003][ T8151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.640'. [ 167.381889][ T8176] tipc: Enabled bearer , priority 10 [ 167.389005][ T8176] tipc: Disabling bearer [ 167.803583][ T8184] rdma_rxe: rxe_newlink: failed to add veth0 [ 167.838212][ T8186] tipc: Started in network mode [ 167.860933][ T8186] tipc: Node identity 7f000001, cluster identity 1 [ 167.906277][ T8186] tipc: New replicast peer: 127.0.0.1 [ 167.951860][ T8186] tipc: Enabled bearer , priority 10 [ 168.000621][ T8189] tipc: New replicast peer: 172.20.20.170 [ 168.033120][ T8189] tipc: Enabled bearer , priority 10 [ 168.696768][ T8209] __nla_validate_parse: 4 callbacks suppressed [ 168.696788][ T8209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.662'. [ 168.774669][ T8210] netlink: 316 bytes leftover after parsing attributes in process `syz.4.661'. [ 168.786475][ T8210] netlink: 316 bytes leftover after parsing attributes in process `syz.4.661'. [ 168.927727][ T8216] lo speed is unknown, defaulting to 1000 [ 168.949269][ T8216] lo speed is unknown, defaulting to 1000 [ 168.965657][ T8216] lo speed is unknown, defaulting to 1000 [ 169.075034][ T29] tipc: Node number set to 2130706433 [ 169.145221][ T6314] tipc: Node number set to 142356160 [ 169.646534][ T8216] infiniband syz0: set active [ 169.651467][ T6314] lo speed is unknown, defaulting to 1000 [ 169.666297][ T8216] infiniband syz0: added lo [ 169.706287][ T8216] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 169.770646][ T8216] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 169.812625][ T8216] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 169.861473][ T8249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.678'. [ 169.961859][ T8216] RDS/IB: syz0: added [ 169.985207][ T8216] smc: adding ib device syz0 with port count 1 [ 169.993092][ T8216] smc: ib device syz0 port 1 has no pnetid [ 170.015208][ T6314] lo speed is unknown, defaulting to 1000 [ 170.033060][ T8216] lo speed is unknown, defaulting to 1000 [ 170.202356][ T8259] smc: net device lo applied user defined pnetid SYZ0 [ 170.634073][ T8216] lo speed is unknown, defaulting to 1000 [ 170.891536][ T8216] lo speed is unknown, defaulting to 1000 [ 171.276094][ T8216] lo speed is unknown, defaulting to 1000 [ 171.749585][ T8314] netlink: 40 bytes leftover after parsing attributes in process `syz.4.703'. [ 171.776181][ T8314] netlink: 40 bytes leftover after parsing attributes in process `syz.4.703'. [ 171.790987][ T8314] netlink: 40 bytes leftover after parsing attributes in process `syz.4.703'. [ 171.817847][ T8314] netlink: 40 bytes leftover after parsing attributes in process `syz.4.703'. [ 171.871255][ T8216] lo speed is unknown, defaulting to 1000 [ 172.074257][ T8328] tipc: Enabled bearer , priority 10 [ 172.182927][ T8333] tipc: Disabling bearer [ 173.355889][ T8381] netlink: 12 bytes leftover after parsing attributes in process `syz.1.730'. [ 173.390308][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.730'. [ 174.066970][ T8416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.743'. [ 174.417931][ T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 175.247605][ T8447] x_tables: duplicate underflow at hook 2 [ 175.623498][ T8465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.765'. [ 175.646713][ T8466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.763'. [ 175.664617][ T8465] openvswitch: netlink: Flow actions attr not present in new flow. [ 176.126933][ T8496] tipc: Enabled bearer , priority 10 [ 176.189725][ T8497] tipc: Disabling bearer [ 176.801437][ T8512] rdma_rxe: rxe_newlink: failed to add lo [ 176.863669][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.782'. [ 177.459305][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.789'. [ 177.472779][ T8529] netlink: 272 bytes leftover after parsing attributes in process `syz.3.789'. [ 177.700188][ T8540] sit0: left promiscuous mode [ 178.145787][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 178.371025][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.802'. [ 178.383059][ T8561] bridge0: port 4(veth0) entered blocking state [ 178.392343][ T8561] bridge0: port 4(veth0) entered disabled state [ 178.407007][ T8561] veth0: entered allmulticast mode [ 178.460759][ T8561] veth0: entered promiscuous mode [ 178.486687][ T8561] bridge0: port 4(veth0) entered blocking state [ 178.493199][ T8561] bridge0: port 4(veth0) entered listening state [ 178.552327][ T8563] bridge0: port 5(veth1) entered blocking state [ 178.595709][ T8563] bridge0: port 5(veth1) entered disabled state [ 178.606834][ T8573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.805'. [ 178.627597][ T8563] veth1: entered allmulticast mode [ 178.637657][ T8573] openvswitch: netlink: Key 2 has unexpected len 12 expected 4 [ 178.663137][ T8563] veth1: entered promiscuous mode [ 178.671468][ T8563] bridge0: port 5(veth1) entered blocking state [ 178.677948][ T8563] bridge0: port 5(veth1) entered listening state [ 178.840990][ T8581] netlink: 'syz.0.810': attribute type 2 has an invalid length. [ 178.889642][ T8581] : entered promiscuous mode [ 178.961574][ T8586] rdma_rxe: rxe_newlink: failed to add lo [ 179.117234][ T8596] smc: removing ib device syz0 [ 179.224857][ T8596] smbdirect: ib_dev[syz0] removed [ 179.312883][ T8604] netlink: 32 bytes leftover after parsing attributes in process `syz.0.814'. [ 179.358761][ T8604] tipc: Enabling of bearer rejected, already enabled [ 179.834278][ T8623] tipc: Enabling of bearer rejected, already enabled [ 179.857709][ C1] bridge0: port 5(veth1) entered blocking state [ 180.655353][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.831'. [ 180.687711][ T8649] netlink: 20 bytes leftover after parsing attributes in process `syz.1.829'. [ 180.706322][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.829'. [ 180.717472][ T8649] netlink: 132 bytes leftover after parsing attributes in process `syz.1.829'. [ 180.728087][ T8649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.829'. [ 180.738326][ T8649] netlink: 132 bytes leftover after parsing attributes in process `syz.1.829'. [ 181.454812][ C0] bridge0: port 3(syz_tun) entered learning state [ 181.727269][ T8681] tipc: Enabled bearer , priority 1 [ 181.888946][ T8679] tipc: Resetting bearer [ 181.944317][ T8679] tipc: Disabling bearer [ 182.177321][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz.1.845'. [ 182.206344][ T8702] netlink: 60 bytes leftover after parsing attributes in process `syz.1.845'. [ 182.528551][ T8714] netlink: 16 bytes leftover after parsing attributes in process `syz.1.849'. [ 182.813069][ T8722] syzkaller0: renamed from veth0 (while UP) [ 183.420627][ T8705] infiniband syz1: set down [ 183.442455][ T8705] infiniband syz1: added veth0 [ 183.478948][ T8705] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 183.487627][ T8705] infiniband syz1: Couldn't open port 1 [ 183.528152][ T8705] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 183.584837][ T8705] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 183.643107][ T8705] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 183.753913][ T8705] RDS/IB: syz1: added [ 183.768204][ T8705] smc: adding ib device syz1 with port count 1 [ 183.797641][ T8705] smc: ib device syz1 port 1 has no pnetid [ 184.031222][ T8761] bridge0: port 3(dummy0) entered blocking state [ 184.038858][ T8761] bridge0: port 3(dummy0) entered disabled state [ 184.053767][ T8761] dummy0: entered allmulticast mode [ 184.072466][ T8761] dummy0: entered promiscuous mode [ 184.409396][ T8773] tipc: Enabling of bearer rejected, already enabled [ 184.421398][ T8774] __nla_validate_parse: 9 callbacks suppressed [ 184.421419][ T8774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.872'. [ 184.654911][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.662306][ C0] bridge0: topology change detected, propagating [ 184.669342][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.676690][ C0] bridge0: topology change detected, propagating [ 185.295194][ C1] bridge0: port 3(syz_tun) entered learning state [ 185.377791][ T8810] smc: net device lo applied user defined pnetid SYZ0 [ 186.020030][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.2.893'. [ 186.032089][ T8828] openvswitch: netlink: Flow actions attr not present in new flow. [ 186.273409][ T8806] rdma_rxe: rxe_newlink: failed to add lo [ 186.328417][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.1.897'. [ 186.715175][ T8851] rdma_rxe: rxe_newlink: failed to add lo [ 186.749578][ T8853] rdma_rxe: rxe_newlink: failed to add lo [ 186.787976][ T8852] tipc: Enabled bearer , priority 10 [ 186.809368][ T8854] tipc: Disabling bearer [ 187.042449][ T8861] bridge0: port 3(syz_tun) entered disabled state [ 187.200344][ T8869] rdma_rxe: rxe_newlink: failed to add veth0 [ 187.346735][ T8744] infiniband syz0: set down [ 187.364070][ T8744] infiniband syz0: added veth0 [ 187.386224][ T8875] netlink: 32 bytes leftover after parsing attributes in process `syz.4.913'. [ 187.399230][ T8744] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 187.412458][ T8744] infiniband syz0: Couldn't open port 1 [ 187.429770][ T8879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.914'. [ 187.441220][ T8875] tipc: Enabling of bearer rejected, failed to enable media [ 187.451616][ T8744] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 187.469434][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.914'. [ 187.479559][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.3.914'. [ 187.495484][ T8744] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 187.527587][ T8879] netlink: 12 bytes leftover after parsing attributes in process `syz.3.914'. [ 187.538610][ T8744] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 187.649910][ T8744] RDS/IB: syz0: added [ 187.664383][ T8744] smc: adding ib device syz0 with port count 1 [ 187.679608][ T8744] smc: ib device syz0 port 1 has no pnetid [ 188.004301][ T8902] [ 188.007108][ T8902] ============================= [ 188.011997][ T8902] WARNING: suspicious RCU usage [ 188.017079][ T8902] syzkaller #0 Not tainted [ 188.021551][ T8902] ----------------------------- [ 188.026469][ T8902] net/xfrm/xfrm_user.c:1630 suspicious rcu_dereference_check() usage! [ 188.034751][ T8902] [ 188.034751][ T8902] other info that might help us debug this: [ 188.034751][ T8902] [ 188.045059][ T8902] [ 188.045059][ T8902] rcu_scheduler_active = 2, debug_locks = 1 [ 188.053215][ T8902] 1 lock held by syz.1.924/8902: [ 188.058256][ T8902] #0: ffff888076869c90 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x6a/0x90 [ 188.069095][ T8902] [ 188.069095][ T8902] stack backtrace: [ 188.075281][ T8902] CPU: 1 UID: 0 PID: 8902 Comm: syz.1.924 Not tainted syzkaller #0 PREEMPT(full) [ 188.075310][ T8902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 188.075331][ T8902] Call Trace: [ 188.075340][ T8902] [ 188.075348][ T8902] dump_stack_lvl+0xe8/0x150 [ 188.075387][ T8902] lockdep_rcu_suspicious+0x13f/0x1d0 [ 188.075427][ T8902] xfrm_nlmsg_multicast+0x1d8/0x1f0 [ 188.075454][ T8902] xfrm_send_migrate_state+0x870/0xae0 [ 188.075503][ T8902] ? __pfx_xfrm_send_migrate_state+0x10/0x10 [ 188.075541][ T8902] ? xfrm_state_migrate_install+0x192/0x630 [ 188.075568][ T8902] xfrm_do_migrate_state+0x1703/0x1e50 [ 188.075609][ T8902] ? __pfx_xfrm_do_migrate_state+0x10/0x10 [ 188.075655][ T8902] ? apparmor_capable+0x126/0x170 [ 188.075693][ T8902] ? __nla_parse+0x40/0x60 [ 188.075731][ T8902] xfrm_user_rcv_msg+0x7a8/0xf30 [ 188.075763][ T8902] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 188.075817][ T8902] ? __mutex_trylock_common+0x15f/0x270 [ 188.075843][ T8902] ? __pfx___mutex_trylock_common+0x10/0x10 [ 188.075868][ T8902] ? rcu_is_watching+0x15/0xb0 [ 188.075890][ T8902] ? trace_contention_end+0x3d/0x140 [ 188.075923][ T8902] netlink_rcv_skb+0x226/0x4a0 [ 188.075950][ T8902] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 188.075977][ T8902] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.076021][ T8902] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.076058][ T8902] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.076088][ T8902] xfrm_netlink_rcv+0x79/0x90 [ 188.076114][ T8902] netlink_unicast+0x7bb/0x940 [ 188.076149][ T8902] netlink_sendmsg+0x813/0xb40 [ 188.076187][ T8902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.076220][ T8902] ? aa_sock_msg_perm+0xf1/0x1b0 [ 188.076251][ T8902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.076278][ T8902] sock_sendmsg_nosec+0x13a/0x180 [ 188.076312][ T8902] ____sys_sendmsg+0x54e/0x850 [ 188.076344][ T8902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.076379][ T8902] ? import_iovec+0x73/0xa0 [ 188.076418][ T8902] ___sys_sendmsg+0x2a5/0x360 [ 188.076442][ T8902] ? __lock_acquire+0x683/0x2cf0 [ 188.076478][ T8902] ? __pfx____sys_sendmsg+0x10/0x10 [ 188.076507][ T8902] ? futex_wait+0x2a2/0x390 [ 188.076563][ T8902] ? __fget_files+0x2a/0x420 [ 188.076593][ T8902] ? __fget_files+0x3a2/0x420 [ 188.076633][ T8902] __x64_sys_sendmsg+0x1b1/0x290 [ 188.076662][ T8902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 188.076708][ T8902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.076732][ T8902] do_syscall_64+0x174/0x580 [ 188.076759][ T8902] ? trace_irq_disable+0x3b/0x140 [ 188.076788][ T8902] ? clear_bhb_loop+0x40/0x90 [ 188.076815][ T8902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.076838][ T8902] RIP: 0033:0x7effc7f9de99 [ 188.076869][ T8902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.076887][ T8902] RSP: 002b:00007effc8ed7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.076910][ T8902] RAX: ffffffffffffffda RBX: 00007effc8225fa0 RCX: 00007effc7f9de99 [ 188.076925][ T8902] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 188.076938][ T8902] RBP: 00007effc8033eaf R08: 0000000000000000 R09: 0000000000000000 [ 188.076951][ T8902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.076963][ T8902] R13: 00007effc8226038 R14: 00007effc8225fa0 R15: 00007ffc8976efb8 [ 188.076998][ T8902] [ 193.614871][ C1] bridge0: port 4(veth0) entered learning state [ 194.261414][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.267969][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.824882][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 196.831680][ C0] bridge0: topology change detected, propagating