last executing test programs: 3m2.040259467s ago: executing program 3 (id=5959): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000000)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) 3m1.740143721s ago: executing program 3 (id=5964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x0, 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000fcdbdf040200010008003f0036000000080061"], 0x24}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) (async) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}}, 0x0) (async, rerun: 64) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r6, 0x111, 0x5, 0x0, &(0x7f0000000080)=0x5a) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00000001010500000000000079660d6aa8f27ee500124000000000"], 0x1c}}, 0x0) (async) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xf, [0x10, 0xe, 0x5, 0xf, 0xc, 0x3, 0x1, 0xe, 0x7, 0x0, 0xf, 0x3, 0x2, 0x8, 0x9, 0xb], 0x0, [0x0, 0x4, 0x1, 0x0, 0x9a5, 0x7, 0x26, 0xbf, 0x7, 0x0, 0x7f, 0x5, 0x800, 0x2, 0x7, 0x4], [0x3, 0x6, 0x5, 0x1, 0xfff, 0x5, 0xfffb, 0xcb, 0x37a, 0x73, 0x6, 0x9, 0x8, 0x4, 0x9, 0xbdd5]}}]}}]}, 0x8c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x20, 0x4040, 0x800, 0x70bd2d, 0x25dfdbff, {0x4, 0x7c}, [@typed={0x8, 0x55, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048081}, 0xc000) 3m1.467519127s ago: executing program 3 (id=5969): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x4e21, @remote}, {0x1, @local}, 0x14, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x23}}, 'dvmrp1\x00'}) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000080)={'netdevsim0\x00'}) (async) vmsplice(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="94f548fbf9a5a91d783008e1dfdc6798872dbb194746560ca6043821b1cfcf06c43c861381ce81f3b30d1c1c356081b6893b028cd3b93e17e0a8502d62ade3", 0x3f}, {&(0x7f0000000100)="fec756acff0c68e86494d6ab6431f11417607f6d33b06add8d84757f1af55c60b8561ae8e76463b4b1a1cb41b7869c31586ef42e56612a47c78bd77e9e546df5cf851d0b6be9fe009ccc946c4c38dea1b2d9a41760f6c7c4dd363c61fbd5e26b10c2f9581b7d8ecc10d4fc207226d1c1afa6761b95c9f9a586ff9f24e158f8411491cee74d9811ba6655abb8", 0x8c}], 0x2, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f00000006c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000240)={0x43c, 0x3f3, 0x300, 0x70bd2c, 0x25dfdbfc, {0x10, 0x1, 0x0, [0x1, 0x3, 0x7fff, 0x8, 0x5, 0x5, 0x5, 0xa, 0x40, 0xfffeffff, 0xfffffff4, 0x691, 0x80000000, 0x3, 0x4abb25e2, 0xe2, 0x0, 0x398e5c05, 0x0, 0x3, 0x6, 0xc1, 0x2aca6414, 0x7fff, 0x1, 0xf, 0x1, 0x9, 0x3, 0x80000001, 0xf, 0xf, 0xc6, 0x10, 0x81, 0xfff, 0x101, 0xaf2, 0x3, 0x3a08227a, 0xfff80000, 0x4, 0x5, 0x9, 0x7, 0x9, 0x80000000, 0x9, 0x0, 0x5, 0x2, 0x9000, 0x2, 0xa, 0x5, 0x6, 0x8e9, 0x7, 0x8, 0x0, 0x5, 0x2b9, 0x6, 0x81], [0xbe, 0x9, 0x7, 0x0, 0x269e, 0x1, 0x4, 0xae, 0x7ff, 0x7, 0xffffffff, 0x3, 0x3, 0x4, 0x5d5, 0x2, 0x8e72, 0x10001, 0xf, 0x8, 0x1, 0x1, 0x1, 0x7, 0x401, 0x8, 0x5, 0x5, 0x1d, 0x6, 0x1, 0xd0b, 0x6, 0x400, 0x8, 0x6, 0xffffffff, 0x0, 0x5, 0x1, 0x2, 0x8f16, 0x9, 0x4a, 0x1, 0xa7, 0x10000, 0x9, 0x0, 0x345, 0x872, 0x6de, 0x1, 0x7, 0xff, 0x9, 0xaaa8, 0x4, 0x4, 0x6, 0x3, 0x101, 0x2, 0x5], [0x0, 0x3ff, 0x6485, 0x4, 0xf10, 0x1, 0xb25, 0x2, 0x6, 0x2, 0x2, 0x1, 0x4, 0xc, 0x401, 0x8, 0x180, 0xfff, 0xdc, 0x626f2ef, 0x5, 0x3, 0x1ff, 0x4, 0x1, 0x6, 0x1000, 0x9, 0x1, 0x7, 0x2, 0x3, 0x9, 0x9, 0x80, 0xf0, 0x7, 0x300, 0x10000, 0x9, 0x8, 0x4, 0x8001, 0x8, 0x401, 0x800, 0xb7, 0x1, 0x9, 0x5, 0x3, 0xf6b8, 0xfffffffc, 0x7ff, 0x7, 0x7, 0x5, 0x8, 0xc, 0x8, 0x42, 0x0, 0x1, 0x6], [0x9, 0x2, 0x500, 0x3, 0xf, 0x8, 0x4c94e060, 0x6, 0x0, 0x6, 0x2, 0x9, 0x5, 0x68f7, 0xe, 0x1, 0x63e7, 0x3, 0x8, 0x1, 0x50, 0x800, 0x40400000, 0x5, 0x0, 0x1, 0x8, 0x9, 0x7, 0x2, 0x4, 0x9, 0x10000, 0x1, 0xfffffffc, 0x23e, 0x81, 0x1, 0x1, 0x5, 0x1, 0x9, 0x2, 0x8, 0x80, 0xfffffffb, 0x9, 0x1, 0x4, 0x9, 0x9, 0xe1, 0x4, 0x4, 0x120, 0x2, 0x9, 0x1, 0x8, 0x7cc6, 0x67, 0x2, 0x1000, 0xec], 0x1a, ['dvmrp1\x00', '[\'!\x00', 'dvmrp1\x00', 'dvmrp1\x00', '\x00']}, ["", "", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'erspan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000007c0)={'wg1\x00', 0x0}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000800)={@remote, 0x0}, &(0x7f0000000840)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000880)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000a00)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xd0, 0x0, 0xb00, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8004}, 0x884) (async) close(r1) (async) pipe(&(0x7f0000000a40)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'ip6tnl0\x00', r4, 0x4, 0x4, 0x8, 0x2, 0x29, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, 0x20, 0x20, 0x9, 0xd13}}) (async) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f0000000b40)={'ip6gre0\x00', 0x7ff}) (async) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000000b80)={r9}, 0x8) sendmsg$nl_route(r11, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)=@mpls_getnetconf={0x64, 0x52, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x1}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7fff}, @NETCONFA_IFINDEX={0x8, 0x1, r7}, @NETCONFA_IFINDEX={0x8, 0x1, r8}, @NETCONFA_IFINDEX={0x8, 0x1, r7}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xd}, @NETCONFA_IFINDEX={0x8, 0x1, r10}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), r9) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r12, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2000010}, 0x10) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r9, 0x84, 0x7b, &(0x7f0000000e40)={0x0, 0x6}, &(0x7f0000000e80)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r13, 0x84, 0x9, &(0x7f0000000ec0)={r14, @in6={{0xa, 0x4e22, 0x52f, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}}, 0x3, 0x1, 0x3, 0x400, 0x36, 0x8, 0x7}, 0x9c) (async) getsockopt$PNPIPE_IFINDEX(r11, 0x113, 0x2, &(0x7f0000000f80), &(0x7f0000000fc0)=0x4) r15 = socket$l2tp6(0xa, 0x2, 0x73) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000001000)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r15, 0xd0009411, &(0x7f0000001200)={{r16, 0x4, 0xbf, 0xffffffffffffffff, 0x40, 0x8, 0x10001, 0xe, 0x3, 0x4, 0xfffffffa, 0x6, 0x8, 0x7, 0x7}}) (async) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x44, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x4}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0xe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0202}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004}, 0x845) 3m1.286318963s ago: executing program 3 (id=5973): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x1f00c00e}, 0xd0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000e40)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x57, 0x0}, 0xc45}], 0x400000000000257, 0x10162, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000000)={'veth1_vlan\x00', 0x1ba}) 3m1.01569404s ago: executing program 3 (id=5978): r0 = socket(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', 0x0}) socket(0xa, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'syztnl1\x00', 0x0}) (async) 3m0.574165904s ago: executing program 3 (id=5984): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x24}}, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000200)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x0, 0x3, 0x0, 0x3, "fec7401c89c0e5ab2cca70d2ede033891aceefda0ae1caebf6e4bc9490a1664d2604a38b5445b6dd4fed7e9ea0425bf7ab1ded760115d624437d0d51c3fd89bce823efa5577788df3e1809bd9f1a9594d0200c25d60affb8ec8a1ee83f8892dc3a1122ade19c470cb43a7c49d97ac64259a85f7d95202f4bfb2e7c278494511aacb146f54dfe"}, 0x89) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000001880)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000080)={0x1d, r8}, 0x10) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r10}, 0x10, &(0x7f00000005c0)={&(0x7f0000000300)=@canfd={{0x2, 0x0, 0x0, 0x1}, 0x1c, 0x1, 0x0, 0x0, "8af584278a900a481dcab8bdb07e94b74fec2635842c376f235ad89bda5d90412dde463b5142f29caa0094cd1c0a1157ff53468534cab13d04fc5bf7f05b2c92"}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)={0x9c, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x0, 0x2, 0x66}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_LANES={0x0, 0x9, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', r12, 0x4, 0x6, 0x9, 0x9f10, 0x18, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x10, 0x6, 0x7}}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@getstats={0x44, 0x5e, 0x10, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x2}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x8084) 2m45.581033337s ago: executing program 32 (id=5984): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x24}}, 0x0) write$nci(0xffffffffffffffff, &(0x7f0000000200)=@NCI_GID_PROPRIETARY_NFT={0xf, 0x0, 0x3, 0x0, 0x3, "fec7401c89c0e5ab2cca70d2ede033891aceefda0ae1caebf6e4bc9490a1664d2604a38b5445b6dd4fed7e9ea0425bf7ab1ded760115d624437d0d51c3fd89bce823efa5577788df3e1809bd9f1a9594d0200c25d60affb8ec8a1ee83f8892dc3a1122ade19c470cb43a7c49d97ac64259a85f7d95202f4bfb2e7c278494511aacb146f54dfe"}, 0x89) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000001880)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d30000000000000080003"], 0x34}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000080)={0x1d, r8}, 0x10) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r9, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r10}, 0x10, &(0x7f00000005c0)={&(0x7f0000000300)=@canfd={{0x2, 0x0, 0x0, 0x1}, 0x1c, 0x1, 0x0, 0x0, "8af584278a900a481dcab8bdb07e94b74fec2635842c376f235ad89bda5d90412dde463b5142f29caa0094cd1c0a1157ff53468534cab13d04fc5bf7f05b2c92"}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)={0x9c, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x9}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xd9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x0, 0x2, 0x66}, @ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x3}]}, @ETHTOOL_A_LINKMODES_LANES={0x0, 0x9, 0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000800) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x14, 0x16, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6tnl0\x00', &(0x7f0000000480)={'ip6gre0\x00', r12, 0x4, 0x6, 0x9, 0x9f10, 0x18, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x10, 0x6, 0x7}}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@getstats={0x44, 0x5e, 0x10, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, 0x2}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x8084) 1.274705243s ago: executing program 0 (id=8790): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 1.052530936s ago: executing program 0 (id=8793): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000240)='timer_start\x00', r1}, 0x18) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 921.747136ms ago: executing program 4 (id=8795): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="b9ff030768f1258c989e14f05c71", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 862.954593ms ago: executing program 0 (id=8797): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 862.696605ms ago: executing program 1 (id=8798): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 842.766501ms ago: executing program 2 (id=8799): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000009000000040000000200000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r2, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000400)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r3, 0x0, &(0x7f0000000500)=""/216}, 0x20) 756.023072ms ago: executing program 5 (id=8800): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x100}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) 727.609911ms ago: executing program 1 (id=8801): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000c40)={&(0x7f00000007c0)=@can, 0x80, 0x0}, 0x10) 713.109106ms ago: executing program 2 (id=8802): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000e00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000a61a7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 648.115235ms ago: executing program 4 (id=8803): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x3, 0x8, 0x2}, 0x50) 647.891674ms ago: executing program 0 (id=8804): socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000100000022bf"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840), 0xffffd6c0, r1, 0x0, 0xfffffffffffffff2}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 644.431449ms ago: executing program 5 (id=8805): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='mmap_lock_acquire_returned\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) 589.868476ms ago: executing program 1 (id=8806): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000000}, 0x2c) 519.802135ms ago: executing program 2 (id=8807): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 519.520895ms ago: executing program 4 (id=8808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 512.137537ms ago: executing program 5 (id=8809): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, &(0x7f00000009c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 433.830641ms ago: executing program 5 (id=8810): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004180)=ANY=[@ANYBLOB="020000000400000007000000020000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 344.730104ms ago: executing program 2 (id=8811): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 324.172111ms ago: executing program 1 (id=8812): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x200fffe, 0xe, 0x55, &(0x7f0000000240)="a06a0064d082778c19380e07c428bd434e3d40cbdb66d20f5732e9d042f0e6002d647aa34bc8226c696919aad7c0525b710a4f4f9bfd6a55a0b5fabed5fd55ea54ae8a36f1cbc7eeab3a6f427d7547ed23dac616de56acf1d984e272c8c0f926136ed8d5e4f87436bf2885d6ec504b8388c8632edc90ca3fbe90ab66ffe4669bdbc67cf2931ebbccf74cde8bb1781b5a54b30e1e4a51841080e2f4f380bec6000000", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x44, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4, 0x40}, 0x28) 308.070474ms ago: executing program 4 (id=8813): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 256.713725ms ago: executing program 0 (id=8814): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 246.056193ms ago: executing program 4 (id=8815): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x10005, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000090000000000000000001d0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 232.131273ms ago: executing program 2 (id=8816): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000b40), 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000000000007000000010000000000000008753e74eb2b00e6cc6b08000000fceedef504f08d14c190147bd6fabebaf556"], 0xfffffffffffffe92}, 0x8000) 159.973615ms ago: executing program 5 (id=8817): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00'}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 124.857364ms ago: executing program 1 (id=8818): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0x8, &(0x7f00000009c0)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x18}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 124.348285ms ago: executing program 0 (id=8819): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 124.208538ms ago: executing program 4 (id=8820): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x2}]}, @func_proto]}}, 0x0, 0x3a}, 0x28) 70.97973ms ago: executing program 2 (id=8821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r0, 0x68, &(0x7f0000000200)}, 0x10) 309.494µs ago: executing program 1 (id=8822): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@enum64={0x2, 0x0, 0x0, 0x13, 0x1, 0x8}]}, {0x0, [0x30, 0x61, 0x20]}}, &(0x7f0000001900)=""/221, 0x29, 0xdd, 0x1}, 0x28) 0s ago: executing program 5 (id=8823): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002c00)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@enum64={0x7, 0x0, 0x0, 0x13, 0x1, 0x2}, @fwd={0x8}]}, {0x0, [0x0, 0x5f, 0x2e, 0x2e, 0x2e, 0x5f, 0x5f, 0x5f]}}, &(0x7f0000000a00)=""/248, 0x3a, 0xf8, 0x1}, 0x28) kernel console output (not intermixed with test programs): audit(1765692559.013:9): pid=26827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='\_' [ 546.129049][ T30] audit: type=1107 audit(1765692559.013:10): pid=26827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='\_' [ 546.311769][T26788] chnl_net:caif_netlink_parms(): no params data found [ 546.345558][T26843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6087'. [ 546.440993][T26847] syzkaller0: entered promiscuous mode [ 546.446599][T26847] syzkaller0: entered allmulticast mode [ 546.633754][T26864] netlink: 'syz.1.6092': attribute type 1 has an invalid length. [ 546.691561][T26864] 8021q: adding VLAN 0 to HW filter on device bond15 [ 546.741116][T26868] 8021q: adding VLAN 0 to HW filter on device bond15 [ 546.748465][T26868] bond15: (slave vxcan1): The slave device specified does not support setting the MAC address [ 546.763230][T26868] bond15: (slave vxcan1): Error -95 calling set_mac_address [ 546.783077][T26788] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.790391][T26788] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.798253][T26788] bridge_slave_0: entered allmulticast mode [ 546.805387][T26788] bridge_slave_0: entered promiscuous mode [ 546.838814][T26864] veth11: entered promiscuous mode [ 546.861472][T26864] bond15: (slave veth11): Enslaving as an active interface with a down link [ 546.889061][T26788] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.899659][T26788] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.907166][T26788] bridge_slave_1: entered allmulticast mode [ 546.915107][T26788] bridge_slave_1: entered promiscuous mode [ 546.944933][T26868] vlan4: entered allmulticast mode [ 546.953432][T26868] bond15: entered allmulticast mode [ 547.054959][T26883] ip6gre3: entered allmulticast mode [ 547.081270][T26788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.112344][T26788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.175888][T26788] team0: Port device team_slave_0 added [ 547.186164][T26788] team0: Port device team_slave_1 added [ 547.239788][T26788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.247726][T26788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.260272][T26897] netlink: 'syz.2.6101': attribute type 1 has an invalid length. [ 547.275101][T26788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.294670][ T5842] Bluetooth: hci4: command tx timeout [ 547.346267][T26897] 8021q: adding VLAN 0 to HW filter on device bond5 [ 547.373925][T26788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.386819][T26788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 547.415162][T26788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.552637][T26788] hsr_slave_0: entered promiscuous mode [ 547.559770][T26788] hsr_slave_1: entered promiscuous mode [ 547.568813][T26788] debugfs: 'hsr0' already exists in 'hsr' [ 547.574637][T26788] Cannot create hsr debugfs directory [ 547.789104][T26923] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6106'. [ 547.822808][T26925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6107'. [ 547.839889][T26788] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 547.851699][T26788] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.862522][T26788] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 547.881858][T26925] netlink: 'syz.1.6107': attribute type 1 has an invalid length. [ 547.890038][T26925] netlink: 'syz.1.6107': attribute type 2 has an invalid length. [ 547.898030][T26926] tipc: Enabling of bearer rejected, already enabled [ 547.957070][T26928] netlink: 596 bytes leftover after parsing attributes in process `syz.1.6108'. [ 547.989401][T26788] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.007878][T26788] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.019951][T26934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6109'. [ 548.030192][T26788] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 548.237714][T26788] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.251141][T26788] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.269351][T26788] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 548.363121][T26952] netlink: 'syz.4.6114': attribute type 10 has an invalid length. [ 548.378713][T26788] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 548.389327][T26788] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.403107][T26788] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 548.437956][T26952] veth0_virt_wifi: entered allmulticast mode [ 548.472320][T26952] team0: Port device veth0_virt_wifi added [ 548.493570][T26958] net_ratelimit: 1 callbacks suppressed [ 548.493593][T26958] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 548.739347][T26788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 548.761274][T26788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 548.763731][T26974] netlink: 'syz.4.6120': attribute type 1 has an invalid length. [ 548.796572][T26788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 548.825723][T26788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 548.955828][T26993] syz.1.6126 uses old SIOCAX25GETINFO [ 549.006277][T26788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.060212][T26788] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.083310][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.090544][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.135870][ T3862] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.143091][ T3862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.366996][ T5842] Bluetooth: hci4: command tx timeout [ 549.441557][T27007] netlink: 'syz.1.6129': attribute type 30 has an invalid length. [ 549.476375][T26788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.582951][T26788] veth0_vlan: entered promiscuous mode [ 549.596607][T26788] veth1_vlan: entered promiscuous mode [ 549.649492][T26788] veth0_macvtap: entered promiscuous mode [ 549.663526][T26788] veth1_macvtap: entered promiscuous mode [ 549.689410][T26788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.714851][T26788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.747078][ T3823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.758368][ T3823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.774841][ T3823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.800419][ T3823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.984226][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.994219][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.054096][T27026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.073451][T27026] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 550.133328][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.146644][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.581812][T27052] __nla_validate_parse: 7 callbacks suppressed [ 550.581832][T27052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6142'. [ 551.055753][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 551.067610][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 551.075973][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 551.095305][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 551.104987][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 551.198325][T27080] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6149'. [ 551.302899][T27087] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 551.311147][T27067] wg1 speed is unknown, defaulting to 1000 [ 551.450328][ T5853] Bluetooth: hci4: command tx timeout [ 551.606630][T27096] netlink: 'syz.4.6152': attribute type 1 has an invalid length. [ 551.689756][T27101] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6152'. [ 551.734869][T27096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6152'. [ 551.793271][T27104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6155'. [ 552.476755][T27115] netlink: 'syz.2.6158': attribute type 1 has an invalid length. [ 552.489102][ T3862] bond14 (unregistering): (slave ip6gretap1): Releasing active interface [ 552.614255][T27119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6159'. [ 552.679772][T27120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6159'. [ 552.695810][ T3862] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 552.979405][ T3862] bond3 (unregistering): (slave bridge5): Releasing active interface [ 553.077770][ T3862] bond11 (unregistering): (slave bridge7): Releasing backup interface [ 553.112774][ T3862] bond0 (unregistering): Released all slaves [ 553.126424][ T3862] bond1 (unregistering): Released all slaves [ 553.139367][ T3862] bond2 (unregistering): Released all slaves [ 553.156023][ T3862] bond3 (unregistering): Released all slaves [ 553.170043][ T3862] bond4 (unregistering): Released all slaves [ 553.207305][ T5853] Bluetooth: hci3: command tx timeout [ 553.281723][ T3862] bond5 (unregistering): Released all slaves [ 553.294487][ T3862] bond6 (unregistering): Released all slaves [ 553.308131][ T3862] bond7 (unregistering): Released all slaves [ 553.321121][ T3862] bond8 (unregistering): Released all slaves [ 553.427695][ T3862] bond9 (unregistering): Released all slaves [ 553.521067][ T3862] bond10 (unregistering): Released all slaves [ 553.527631][ T5853] Bluetooth: hci4: command tx timeout [ 553.537502][ T3862] bond11 (unregistering): Released all slaves [ 553.549842][ T3862] bond12 (unregistering): Released all slaves [ 553.563814][ T3862] bond13 (unregistering): Released all slaves [ 553.663774][ T3862] bond14 (unregistering): Released all slaves [ 553.760295][ T3862] bond15 (unregistering): (slave veth11): Releasing active interface [ 553.771469][ T3862] bond15 (unregistering): Released all slaves [ 553.801819][T27115] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 553.924646][ T3862] : left promiscuous mode [ 553.995501][T27130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6162'. [ 554.078789][ T3862] tipc: Left network mode [ 554.123636][ T3862] IPVS: stopping master sync thread 18082 ... [ 554.283981][T27067] chnl_net:caif_netlink_parms(): no params data found [ 554.353849][T27143] netlink: 149504 bytes leftover after parsing attributes in process `syz.2.6167'. [ 554.555255][T27150] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6170'. [ 554.670807][T27156] sctp: [Deprecated]: syz.4.6171 (pid 27156) Use of struct sctp_assoc_value in delayed_ack socket option. [ 554.670807][T27156] Use struct sctp_sack_info instead [ 554.775866][T27067] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.793077][T27161] netlink: 'syz.0.6173': attribute type 10 has an invalid length. [ 554.823138][T27067] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.831306][T27067] bridge_slave_0: entered allmulticast mode [ 554.832378][ T5842] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 554.839848][T27067] bridge_slave_0: entered promiscuous mode [ 554.852252][T27168] x_tables: duplicate underflow at hook 2 [ 554.859926][ T5842] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 554.868637][ T5842] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 554.876576][ T5842] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 554.884631][ T5842] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 554.894845][T27067] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.945464][T27067] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.954784][T27067] bridge_slave_1: entered allmulticast mode [ 554.963555][T27067] bridge_slave_1: entered promiscuous mode [ 554.978858][T27167] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 554.986373][T27168] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 555.120417][T27067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.165700][T27067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.212143][T27180] netlink: 'syz.0.6178': attribute type 33 has an invalid length. [ 555.292743][ T5842] Bluetooth: hci3: command tx timeout [ 555.454260][T27184] bond1 (unregistering): Released all slaves [ 555.591301][T27164] wg1 speed is unknown, defaulting to 1000 [ 555.648719][T27067] team0: Port device team_slave_0 added [ 555.664118][T27067] team0: Port device team_slave_1 added [ 555.792003][T27196] __nla_validate_parse: 2 callbacks suppressed [ 555.792078][T27196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6182'. [ 555.808912][T27196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6182'. [ 555.832916][ T3862] hsr_slave_0: left promiscuous mode [ 555.840251][ T3862] hsr_slave_1: left promiscuous mode [ 556.015755][ T3862] pimreg (unregistering): left allmulticast mode [ 556.533196][ T3862] team0 (unregistering): Port device dummy0 removed [ 556.674504][T27196] erspan0: entered promiscuous mode [ 556.682279][T27196] batadv_slave_1: entered promiscuous mode [ 556.688766][T27196] batadv_slave_1: left promiscuous mode [ 556.695182][T27196] erspan0: left promiscuous mode [ 556.718678][T27067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 556.725769][T27067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.752809][T27067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 556.779425][T27067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 556.807289][T27067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 556.839215][T27067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 556.939000][T27067] hsr_slave_0: entered promiscuous mode [ 556.945356][T27067] hsr_slave_1: entered promiscuous mode [ 556.951699][T27067] debugfs: 'hsr0' already exists in 'hsr' [ 556.958808][T27067] Cannot create hsr debugfs directory [ 556.968111][ T5842] Bluetooth: hci5: command tx timeout [ 557.261477][T27164] chnl_net:caif_netlink_parms(): no params data found [ 557.342816][T27164] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.350164][T27164] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.357540][T27164] bridge_slave_0: entered allmulticast mode [ 557.364699][T27164] bridge_slave_0: entered promiscuous mode [ 557.370892][ T5842] Bluetooth: hci3: command tx timeout [ 557.390370][T27164] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.397672][T27164] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.404927][T27164] bridge_slave_1: entered allmulticast mode [ 557.412862][T27164] bridge_slave_1: entered promiscuous mode [ 557.455752][T27164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.468896][T27164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 557.505742][T27164] team0: Port device team_slave_0 added [ 557.516676][T27164] team0: Port device team_slave_1 added [ 557.552240][T27164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.559688][T27164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.586425][T27164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.611060][T27164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.619449][T27164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.645693][T27164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.703106][T27164] hsr_slave_0: entered promiscuous mode [ 557.710398][T27164] hsr_slave_1: entered promiscuous mode [ 557.718124][T27164] debugfs: 'hsr0' already exists in 'hsr' [ 557.723856][T27164] Cannot create hsr debugfs directory [ 557.779957][T27067] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 557.802858][T27067] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 557.819080][T27067] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 557.838961][T27067] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 557.994313][T27164] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 558.004976][T27164] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 558.018127][T27164] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 558.033338][T27164] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 558.048190][T27067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.079496][T27067] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.096190][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.103317][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.125943][ T3435] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.133062][ T3435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.240860][T27164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.270253][T27164] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.285244][ T3435] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.292508][ T3435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.319640][T20789] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.326805][T20789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.421497][T27067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.479669][T27067] veth0_vlan: entered promiscuous mode [ 558.499194][T27067] veth1_vlan: entered promiscuous mode [ 558.530355][T27067] veth0_macvtap: entered promiscuous mode [ 558.546651][T27067] veth1_macvtap: entered promiscuous mode [ 558.581643][T27067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.593490][ T3862] IPVS: stop unused estimator thread 0... [ 558.606293][T27067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.634570][ T3435] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.646801][ T3435] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.661488][ T3435] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.672115][ T3435] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.685158][T27164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.782722][ T3435] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.799658][ T3435] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.836060][T20786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.848679][T20786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.012966][T27164] veth0_vlan: entered promiscuous mode [ 559.026234][T27164] veth1_vlan: entered promiscuous mode [ 559.047784][ T5842] Bluetooth: hci5: command tx timeout [ 559.053048][T27164] veth0_macvtap: entered promiscuous mode [ 559.068326][T27164] veth1_macvtap: entered promiscuous mode [ 559.086006][T27164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.099394][T27164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.113084][ T3823] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.123136][ T3823] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.134147][ T3823] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.145344][ T4575] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.214774][T20789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.223583][T20789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.256565][T20785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.264601][T20785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.335211][T27240] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6166'. [ 559.354766][T27240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6166'. [ 559.448785][ T5842] Bluetooth: hci3: command tx timeout [ 561.127352][ T5842] Bluetooth: hci5: command tx timeout [ 563.207511][ T5842] Bluetooth: hci5: command tx timeout [ 580.066227][T21534] IPVS: starting estimator thread 0... [ 580.098549][T27242] IPVS: dh: SCTP 172.20.20.187:0 - no destination available [ 580.182440][T27250] openvswitch: netlink: Key type 31 is not supported [ 580.189330][T27245] IPVS: using max 32 ests per chain, 76800 per kthread [ 580.221964][T27250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6189'. [ 580.279164][T27250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6189'. [ 580.331984][T27250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6189'. [ 580.434829][T27261] netlink: 'syz.1.6193': attribute type 3 has an invalid length. [ 580.453583][T27261] netlink: 'syz.1.6193': attribute type 1 has an invalid length. [ 580.488251][T27261] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6193'. [ 580.559528][T27261] netlink: 'syz.1.6193': attribute type 3 has an invalid length. [ 580.608109][T27261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6193'. [ 580.675724][T27268] bond0: option ad_select: unable to set because the bond device is up [ 580.722619][ T5853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 580.732163][ T5853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 580.742046][ T5853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 580.750950][ T5853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 580.760593][ T5853] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 580.972600][T27286] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6198'. [ 580.987374][T17258] IPVS: ip_vs_send_async error -19 [ 581.088429][T27293] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6201'. [ 581.110358][T27297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6203'. [ 581.170847][T27271] wg1 speed is unknown, defaulting to 1000 [ 581.273372][T27306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6206'. [ 581.313010][T27306] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6206'. [ 581.558818][T27320] IPVS: set_ctl: invalid protocol: 51 127.0.0.1:20002 [ 581.584036][T27311] bond1: Unable to set down delay as MII monitoring is disabled [ 581.628154][T27311] bond1 (unregistering): Released all slaves [ 582.036390][T27337] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 582.044655][T27337] gretap1: entered promiscuous mode [ 582.057551][T27337] gretap1: entered allmulticast mode [ 582.196819][T27346] netlink: 'syz.5.6221': attribute type 16 has an invalid length. [ 582.226516][T27346] netlink: 'syz.5.6221': attribute type 3 has an invalid length. [ 582.244077][T27351] netlink: 'syz.5.6221': attribute type 16 has an invalid length. [ 582.269722][T27351] netlink: 'syz.5.6221': attribute type 3 has an invalid length. [ 582.446323][T27361] netlink: 'syz.0.6225': attribute type 6 has an invalid length. [ 582.548265][T27368] netlink: 'syz.0.6225': attribute type 6 has an invalid length. [ 582.634267][T27271] chnl_net:caif_netlink_parms(): no params data found [ 582.681914][T27372] x_tables: duplicate underflow at hook 1 [ 582.807549][ T5842] Bluetooth: hci6: command tx timeout [ 583.058147][T27400] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 583.076557][T27271] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.119055][T27271] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.126465][T27271] bridge_slave_0: entered allmulticast mode [ 583.171821][T27271] bridge_slave_0: entered promiscuous mode [ 583.201542][T27271] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.220281][T27271] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.233204][T27409] xt_l2tp: unknown flags: 10 [ 583.238625][T27271] bridge_slave_1: entered allmulticast mode [ 583.247053][T27271] bridge_slave_1: entered promiscuous mode [ 583.393665][T27271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.412649][T27271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.523735][T27271] team0: Port device team_slave_0 added [ 583.534416][T27271] team0: Port device team_slave_1 added [ 583.644386][T27271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 583.662139][T27271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.717449][T27271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 583.757832][T27271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 583.764859][T27271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 583.765661][T27436] netlink: 'syz.5.6253': attribute type 4 has an invalid length. [ 583.798707][T27271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 583.980189][T27271] hsr_slave_0: entered promiscuous mode [ 584.005171][T27271] hsr_slave_1: entered promiscuous mode [ 584.026218][T27271] debugfs: 'hsr0' already exists in 'hsr' [ 584.050756][T27271] Cannot create hsr debugfs directory [ 584.145654][T27451] xt_NFQUEUE: number of queues (27568) out of range (got 68779) [ 584.192959][T27453] xt_NFQUEUE: number of total queues is 0 [ 584.535582][T27271] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 584.575623][T27271] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 584.591151][T27271] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.674779][T27271] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 584.730980][T27271] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 584.749969][T27271] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.887833][ T5842] Bluetooth: hci6: command tx timeout [ 584.932905][T27271] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 584.958290][T27488] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 584.966088][T27488] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 585.005816][T27271] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 585.023007][T27271] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.125795][ T5899] IPVS: starting estimator thread 0... [ 585.145932][T27271] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 585.177787][T27271] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 585.207695][T27271] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.244471][T27506] __nla_validate_parse: 19 callbacks suppressed [ 585.244489][T27506] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6276'. [ 585.267121][T27504] IPVS: using max 38 ests per chain, 91200 per kthread [ 585.555703][T27271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 585.581529][T27271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 585.598540][T27271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 585.672887][T27271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 585.948935][T27527] wg1 speed is unknown, defaulting to 1000 [ 585.971443][T27271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 586.069839][T27271] 8021q: adding VLAN 0 to HW filter on device team0 [ 586.100507][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 586.107736][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 586.139845][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 586.147047][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 586.232179][T27549] netlink: 'syz.5.6286': attribute type 10 has an invalid length. [ 586.255506][T27549] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6286'. [ 586.331333][T27554] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6287'. [ 586.347985][T27553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6287'. [ 586.522857][T27561] bond1: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 586.552213][T27561] bond1 (unregistering): Released all slaves [ 586.626128][T27271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 586.665892][T27563] wg1 speed is unknown, defaulting to 1000 [ 586.877893][T27271] veth0_vlan: entered promiscuous mode [ 586.907605][T27271] veth1_vlan: entered promiscuous mode [ 586.913543][T27570] netlink: 1 bytes leftover after parsing attributes in process `syz.0.6291'. [ 586.944284][T27570] xt_policy: neither incoming nor outgoing policy selected [ 586.969597][ T5842] Bluetooth: hci6: command tx timeout [ 586.975477][T27271] veth0_macvtap: entered promiscuous mode [ 587.021292][T27271] veth1_macvtap: entered promiscuous mode [ 587.119895][T27271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.158172][T27271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.213926][T20789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.251733][T20789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.282569][T20789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.345662][T20789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.669838][T20789] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.698506][T20789] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 587.952355][T27594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6298'. [ 587.978229][T27594] netlink: zone id is out of range [ 587.983576][T27594] netlink: get zone limit has 8 unknown bytes [ 588.103420][ T3796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 588.128222][ T3796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 588.222386][T27600] netlink: 'syz.0.6300': attribute type 15 has an invalid length. [ 588.233023][T27600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6300'. [ 588.453387][T27607] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 588.543874][T27609] netlink: 288 bytes leftover after parsing attributes in process `syz.2.6302'. [ 588.554030][T27609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6302'. [ 588.564518][T27609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6302'. [ 588.898935][T27617] netlink: 'syz.1.6305': attribute type 83 has an invalid length. [ 588.929919][T27619] netlink: 'syz.1.6305': attribute type 83 has an invalid length. [ 589.047426][ T5842] Bluetooth: hci6: command tx timeout [ 589.956798][T27654] bond12: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 589.978660][T27654] bond12 (unregistering): Released all slaves [ 590.100868][T27654] syzkaller1: entered promiscuous mode [ 590.126750][T27654] syzkaller1: entered allmulticast mode [ 590.152462][T27654] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 590.529420][T27689] __nla_validate_parse: 2 callbacks suppressed [ 590.529434][T27689] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6325'. [ 590.640244][T27701] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6328'. [ 590.655010][T27701] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6328'. [ 590.796317][T27717] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 590.808689][T27714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6332'. [ 590.847324][T27714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6332'. [ 590.867248][T27714] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6332'. [ 590.876144][T27714] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6332'. [ 590.996390][T27720] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 591.008120][T27729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6334'. [ 591.009973][T27720] bond1 (unregistering): Released all slaves [ 591.018038][T27729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6334'. [ 591.094958][T27730] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6336'. [ 591.580404][T27751] netlink: 'syz.4.6344': attribute type 1 has an invalid length. [ 591.720342][T27773] netlink: 'syz.5.6351': attribute type 1 has an invalid length. [ 591.943968][T27786] sock: sock_timestamping_bind_phc: sock not bind to device [ 592.384165][T27825] sctp: [Deprecated]: syz.1.6364 (pid 27825) Use of int in max_burst socket option deprecated. [ 592.384165][T27825] Use struct sctp_assoc_value instead [ 592.406303][T27829] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 592.602855][T27840] netlink: 'syz.0.6367': attribute type 1 has an invalid length. [ 592.612253][T27840] netlink: 'syz.0.6367': attribute type 7 has an invalid length. [ 592.628001][T27841] netlink: 'syz.2.6368': attribute type 8 has an invalid length. [ 592.647727][T27840] netlink: 'syz.0.6367': attribute type 8 has an invalid length. [ 592.656083][T27840] NCSI netlink: No device for ifindex 65584 [ 592.780169][T27852] netlink: 'syz.4.6370': attribute type 1 has an invalid length. [ 592.884950][T27860] netlink: 'syz.5.6375': attribute type 39 has an invalid length. [ 593.177191][T27874] netlink: 'syz.0.6379': attribute type 3 has an invalid length. [ 593.227789][T27874] netlink: 'syz.0.6379': attribute type 4 has an invalid length. [ 594.675640][T27964] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20000 [ 595.245670][T27989] syzkaller0: entered promiscuous mode [ 595.266532][T27989] syzkaller0: entered allmulticast mode [ 595.321244][T27992] pimreg: entered allmulticast mode [ 597.249403][T28044] __nla_validate_parse: 80 callbacks suppressed [ 597.249422][T28044] netlink: 165 bytes leftover after parsing attributes in process `syz.5.6423'. [ 597.363996][T28050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6422'. [ 597.391158][T28050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6422'. [ 597.430136][T28060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 597.449782][T28060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6428'. [ 597.466205][T28060] validate_nla: 2 callbacks suppressed [ 597.466221][T28060] netlink: 'syz.4.6428': attribute type 39 has an invalid length. [ 597.515262][T28062] syzkaller0: entered promiscuous mode [ 597.522402][T28062] syzkaller0: entered allmulticast mode [ 597.621240][T28074] erspan0: entered allmulticast mode [ 597.723562][T28076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6433'. [ 597.749811][T28078] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 597.764175][T28078] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 597.773052][T28078] gretap1: entered promiscuous mode [ 597.779279][T28078] gretap1: entered allmulticast mode [ 597.944043][T28091] tipc: Started in network mode [ 597.949323][T28091] tipc: Node identity 3a476089e799, cluster identity 4711 [ 597.956601][T28091] tipc: Enabled bearer , priority 0 [ 597.986587][T28091] tipc: Disabling bearer [ 598.112252][T28101] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 598.392204][T28124] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6448'. [ 598.424206][T28120] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6448'. [ 598.437484][T28120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6448'. [ 598.473961][T28128] IPVS: set_ctl: invalid protocol: 60 224.0.0.2:20001 [ 599.079473][T28164] pim6reg1: entered promiscuous mode [ 599.086521][T28164] pim6reg1: entered allmulticast mode [ 599.178277][T28184] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6465'. [ 599.195160][T28184] nbd: couldn't find a device at index 0 [ 599.297597][T28193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6468'. [ 599.335322][T28193] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 599.432438][T28199] sctp: [Deprecated]: syz.0.6470 (pid 28199) Use of struct sctp_assoc_value in delayed_ack socket option. [ 599.432438][T28199] Use struct sctp_sack_info instead [ 599.667333][T28212] netlink: 'syz.1.6474': attribute type 2 has an invalid length. [ 599.857702][T28222] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 600.155217][T28249] tipc: Enabled bearer , priority 0 [ 600.163299][T28249] syzkaller0: entered promiscuous mode [ 600.170137][T28249] syzkaller0: entered allmulticast mode [ 600.180515][T28253] netlink: 'syz.2.6485': attribute type 1 has an invalid length. [ 600.180701][T28251] netlink: 'syz.2.6485': attribute type 1 has an invalid length. [ 600.204491][T28249] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 600.309446][T28261] tipc: Resetting bearer [ 600.355887][T28248] tipc: Resetting bearer [ 600.413657][T28248] tipc: Disabling bearer [ 600.733848][T28291] IPVS: length: 138 != 24 [ 601.028858][T28307] netlink: 'syz.4.6496': attribute type 7 has an invalid length. [ 601.053552][T28307] netlink: 'syz.4.6496': attribute type 8 has an invalid length. [ 601.164579][T28315] tipc: Enabling not permitted [ 601.180740][T28315] tipc: Enabling of bearer rejected, failed to enable media [ 601.401687][T28330] nbd: must specify a size in bytes for the device [ 601.479866][T28339] xt_l2tp: missing protocol rule (udp|l2tpip) [ 601.544068][T28343] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 601.833155][T28359] xt_l2tp: missing protocol rule (udp|l2tpip) [ 601.843189][T28361] netlink: 'syz.2.6513': attribute type 4 has an invalid length. [ 602.130450][T28385] nbd: couldn't find a device at index 0 [ 602.409760][T28398] __nla_validate_parse: 13 callbacks suppressed [ 602.409778][T28398] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6523'. [ 602.962857][T28426] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6530'. [ 602.979163][T28422] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6529'. [ 603.000577][T28424] netlink: 64 bytes leftover after parsing attributes in process `syz.5.6529'. [ 603.417628][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 603.428185][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 603.439373][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 603.453724][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 603.462103][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 603.485932][T28449] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.6539'. [ 603.624522][T28441] wg1 speed is unknown, defaulting to 1000 [ 603.800103][T28467] netlink: 'syz.5.6543': attribute type 3 has an invalid length. [ 603.820158][T28474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6544'. [ 603.878846][T28476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6544'. [ 604.146487][T28485] netlink: 'syz.0.6549': attribute type 2 has an invalid length. [ 604.164466][T28485] : entered promiscuous mode [ 604.403442][T28498] netlink: 'syz.0.6554': attribute type 1 has an invalid length. [ 604.578070][T28507] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6557'. [ 604.621129][T28441] chnl_net:caif_netlink_parms(): no params data found [ 604.751762][T28511] netlink: 'syz.5.6560': attribute type 12 has an invalid length. [ 604.769529][T28511] xt_hashlimit: size too large, truncated to 1048576 [ 604.799422][T28514] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6559'. [ 604.939852][T28526] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 604.963023][T28526] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 604.973181][T28526] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 605.029647][T28441] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.038758][T28441] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.046240][T28441] bridge_slave_0: entered allmulticast mode [ 605.065218][T28441] bridge_slave_0: entered promiscuous mode [ 605.074852][T28441] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.082688][T28441] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.090710][T28441] bridge_slave_1: entered allmulticast mode [ 605.099584][T28441] bridge_slave_1: entered promiscuous mode [ 605.176634][T28441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.203779][T28441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.289229][T28441] team0: Port device team_slave_0 added [ 605.298602][T28441] team0: Port device team_slave_1 added [ 605.383424][T28549] ip6gre1: entered allmulticast mode [ 605.392121][T28441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.402781][T28441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.429722][T28441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.446666][T28441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.454981][T28441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.482284][T28441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.494275][T28555] netlink: 'syz.1.6571': attribute type 4 has an invalid length. [ 605.527863][ T5842] Bluetooth: hci0: command tx timeout [ 605.590818][T28441] hsr_slave_0: entered promiscuous mode [ 605.605277][T28441] hsr_slave_1: entered promiscuous mode [ 605.612567][T28441] debugfs: 'hsr0' already exists in 'hsr' [ 605.619275][T28441] Cannot create hsr debugfs directory [ 605.625847][T28563] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6574'. [ 605.658434][T28562] pim6reg1: entered promiscuous mode [ 605.663782][T28562] pim6reg1: entered allmulticast mode [ 606.001397][T28441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.013502][T28441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.024353][T28441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 606.024414][T28574] netlink: 'syz.2.6579': attribute type 21 has an invalid length. [ 606.035153][T28441] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 606.079253][T28574] netlink: 'syz.2.6579': attribute type 6 has an invalid length. [ 606.176291][T28441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.195467][T28441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.221158][T28441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 606.247829][T28441] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 606.390958][T28441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.410736][T28441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.428413][T28441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 606.441657][T28441] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 606.514264][T28441] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.525071][T28441] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.535826][T28441] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 606.547588][T28441] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 606.794894][T28441] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 606.817301][T28441] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 606.833284][T28441] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 606.854906][T28441] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 607.163752][T28441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.200838][T28441] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.246864][T20789] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.254067][T20789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.297767][T20789] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.305143][T20789] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.607731][ T5842] Bluetooth: hci0: command tx timeout [ 607.720067][T28664] __nla_validate_parse: 1 callbacks suppressed [ 607.720084][T28664] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6604'. [ 607.755251][T28441] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 607.820042][T28664] netlink: 'syz.2.6604': attribute type 2 has an invalid length. [ 607.851730][T28664] netlink: 'syz.2.6604': attribute type 1 has an invalid length. [ 607.869048][T28670] netlink: 'syz.1.6606': attribute type 3 has an invalid length. [ 608.240184][T28686] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6611'. [ 608.401829][T28441] veth0_vlan: entered promiscuous mode [ 608.437417][T28441] veth1_vlan: entered promiscuous mode [ 608.473386][T28441] veth0_macvtap: entered promiscuous mode [ 608.489755][T28441] veth1_macvtap: entered promiscuous mode [ 608.521223][T28708] nbd: nbd64 already in use [ 608.533152][T28441] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 608.563366][T28441] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 608.598842][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.653606][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.682157][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.751490][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.820905][T28715] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 608.846500][T28453] udevd[28453]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 608.916675][ T3823] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 608.925804][ T3823] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.986726][T28722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6620'. [ 609.091635][T20791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.106397][T28725] validate_nla: 1 callbacks suppressed [ 609.106412][T28725] netlink: 'syz.2.6621': attribute type 9 has an invalid length. [ 609.110577][T20791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.133799][T28729] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6622'. [ 609.146046][T28725] netlink: 'syz.2.6621': attribute type 11 has an invalid length. [ 609.180882][T28725] netlink: 'syz.2.6621': attribute type 12 has an invalid length. [ 609.217853][T28725] netlink: 210020 bytes leftover after parsing attributes in process `syz.2.6621'. [ 609.321619][T28742] netlink: 'syz.1.6624': attribute type 1 has an invalid length. [ 609.380501][T28742] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6624'. [ 609.423543][T28742] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6624'. [ 609.439587][ T30] audit: type=1107 audit(1765692622.323:11): pid=28746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 609.468387][T28742] netlink: 658 bytes leftover after parsing attributes in process `syz.1.6624'. [ 609.587427][T28749] netlink: 'syz.4.6526': attribute type 1 has an invalid length. [ 609.595681][T28749] netlink: 'syz.4.6526': attribute type 1 has an invalid length. [ 609.604875][T28749] netlink: 'syz.4.6526': attribute type 1 has an invalid length. [ 609.624610][T28749] netlink: 'syz.4.6526': attribute type 1 has an invalid length. [ 609.644477][T28749] netlink: 'syz.4.6526': attribute type 1 has an invalid length. [ 609.664693][T28749] netlink: 'syz.4.6526': attribute type 1 has an invalid length. [ 609.688933][ T5842] Bluetooth: hci0: command tx timeout [ 610.223189][T28797] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6640'. [ 610.271102][T28797] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6640'. [ 610.512495][T28792] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.520042][T28792] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.582271][T28792] bridge_slave_0: left allmulticast mode [ 610.589033][T28792] bridge_slave_0: left promiscuous mode [ 610.594749][T28792] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.610784][T28792] bridge_slave_1: left allmulticast mode [ 610.616459][T28792] bridge_slave_1: left promiscuous mode [ 610.624434][T28792] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.639979][T28792] bond0: (slave bond_slave_0): Releasing backup interface [ 610.654039][T28792] bond0: (slave bond_slave_1): Releasing backup interface [ 610.674261][T28792] team0: Port device team_slave_0 removed [ 610.690092][T28792] team0: Port device team_slave_1 removed [ 610.699976][T28792] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 610.711136][T28792] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.723184][T28792] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.735755][T28792] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.752639][T28792] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 610.913493][T28824] tipc: Started in network mode [ 610.918803][T28824] tipc: Node identity da3b873f8f45, cluster identity 4711 [ 610.926113][T28824] tipc: Enabled bearer , priority 0 [ 611.118793][T28839] Bluetooth: MGMT ver 1.23 [ 611.144774][T28833] bond1: option arp_missed_max: invalid value (0) [ 611.175853][T28833] bond1: option arp_missed_max: allowed values 1 - 255 [ 611.202856][T28833] bond1 (unregistering): Released all slaves [ 611.238900][T28845] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.252478][T28846] nbd: error processing sock list [ 611.280255][T28846] block nbd1: shutting down sockets [ 611.315777][T28845] bridge_slave_1 (unregistering): left allmulticast mode [ 611.330472][T28845] bridge_slave_1 (unregistering): left promiscuous mode [ 611.338791][T28845] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.690182][T28870] wg1 speed is unknown, defaulting to 1000 [ 611.767367][ T5853] Bluetooth: hci0: command tx timeout [ 612.048223][T21534] tipc: Node number set to 1434355519 [ 612.174271][T28904] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 612.188851][T28904] bond4 (unregistering): Released all slaves [ 612.225166][T28905] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 613.086208][T28944] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 613.396596][T28969] tipc: Started in network mode [ 613.406782][T28969] tipc: Node identity ac14140f, cluster identity 4711 [ 613.414756][T28969] tipc: New replicast peer: 255.255.255.255 [ 613.425669][T28969] tipc: Enabled bearer , priority 10 [ 613.432664][T28972] __nla_validate_parse: 6 callbacks suppressed [ 613.432680][T28972] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6696'. [ 613.446745][T28973] sctp: [Deprecated]: syz.0.6695 (pid 28973) Use of int in maxseg socket option. [ 613.446745][T28973] Use struct sctp_assoc_value instead [ 613.611848][T28976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6697'. [ 613.702162][T28980] tipc: Started in network mode [ 613.732147][T28980] tipc: Node identity 72c72e452492, cluster identity 4711 [ 613.739915][T28980] tipc: Enabled bearer , priority 0 [ 613.781289][T28992] syzkaller0: entered allmulticast mode [ 613.821108][T28979] tipc: Disabling bearer [ 613.872469][T17985] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.903258][T17985] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.930080][T17985] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.955929][T17985] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 614.086300][T29011] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20002 [ 614.201631][T29015] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6710'. [ 614.227514][T29021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6711'. [ 614.236608][T29021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6711'. [ 614.327503][ T5842] Bluetooth: hci0: command 0x0405 tx timeout [ 614.491752][T29037] ip6t_srh: unknown srh invflags 4000 [ 614.537365][T21539] tipc: Node number set to 2886997007 [ 614.680644][T29052] delete_channel: no stack [ 614.935305][T29068] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 614.976622][T29069] team0: Device ip6gre2 is up. Set it down before adding it as a team port [ 615.061800][T29079] validate_nla: 69 callbacks suppressed [ 615.061819][T29079] netlink: 'syz.4.6726': attribute type 1 has an invalid length. [ 615.110740][T29085] netlink: 108 bytes leftover after parsing attributes in process `syz.1.6728'. [ 615.219322][T29079] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6726'. [ 615.272491][T29091] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6730'. [ 615.418144][T29104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6733'. [ 615.443449][T29104] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6733'. [ 615.660313][T29126] veth1_macvtap: left promiscuous mode [ 616.064629][T29160] xt_HMARK: spi-set and port-set can't be combined [ 616.079287][T29160] netlink: 'syz.4.6750': attribute type 1 has an invalid length. [ 616.137796][T29164] netlink: 'syz.1.6752': attribute type 12 has an invalid length. [ 616.313679][T29177] delete_channel: no stack [ 616.400252][T29185] netlink: 'syz.4.6758': attribute type 12 has an invalid length. [ 616.924939][T29212] netlink: 'syz.4.6766': attribute type 9 has an invalid length. [ 617.319795][T29229] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 617.421464][T29238] macvlan2: entered promiscuous mode [ 617.426776][T29238] macvlan2: entered allmulticast mode [ 617.434603][T29238] bond3: entered promiscuous mode [ 617.440211][T29238] bridge3: entered promiscuous mode [ 617.446192][T29238] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 617.462303][T29238] bond3: left promiscuous mode [ 617.468614][T29238] bridge3: left promiscuous mode [ 618.157169][T29286] nbd: couldn't find a device at index 0 [ 618.334228][T29303] netlink: 'syz.0.6795': attribute type 1 has an invalid length. [ 618.405865][T29303] 8021q: adding VLAN 0 to HW filter on device bond1 [ 618.474331][T29303] Bluetooth: MGMT ver 1.23 [ 618.520362][T29303] bond1: (slave geneve2): making interface the new active one [ 618.559589][T29303] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 618.705335][T20791] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 618.730826][T20791] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 618.771508][T20791] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 618.774134][T29321] xt_l2tp: wrong L2TP version: 0 [ 618.792315][T20791] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 618.839282][T29324] __nla_validate_parse: 11 callbacks suppressed [ 618.839299][T29324] netlink: 216 bytes leftover after parsing attributes in process `syz.1.6804'. [ 618.911385][T29324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6804'. [ 618.945274][T29328] geneve2: entered promiscuous mode [ 619.466616][T29359] netlink: 'syz.1.6814': attribute type 1 has an invalid length. [ 620.005724][T29379] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6822'. [ 620.027083][T29379] wg2: entered promiscuous mode [ 620.096763][T29381] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6823'. [ 620.155841][T29382] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6823'. [ 620.308377][T29393] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6826'. [ 620.349560][T29356] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 620.360795][T29396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6826'. [ 620.472510][T29392] netlink: 'syz.0.6825': attribute type 10 has an invalid length. [ 620.516311][T29392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6825'. [ 620.552937][T29400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6828'. [ 620.752253][T29409] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6830'. [ 620.874498][T29412] block nbd1: Unsupported socket: should be TCP or UNIX. [ 620.918668][T29412] nbd: must specify an index to disconnect [ 620.985479][T29424] bond2: (slave vcan0): The slave device specified does not support setting the MAC address [ 621.032667][T29424] bond2: (slave vcan0): Error -95 calling set_mac_address [ 621.171048][T29428] tipc: Enabled bearer , priority 0 [ 621.181309][T29428] tipc: Resetting bearer [ 621.241954][T29425] tipc: Disabling bearer [ 621.447209][ T5842] Bluetooth: hci0: command 0x0405 tx timeout [ 621.532323][T29451] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.540266][T29451] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.625120][T29451] bridge_slave_0: left allmulticast mode [ 621.647274][T29451] bridge_slave_0: left promiscuous mode [ 621.653059][T29451] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.672413][T29451] bridge_slave_1: left allmulticast mode [ 621.679660][T29451] bridge_slave_1: left promiscuous mode [ 621.685593][T29451] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.708059][T29451] bond0: (slave bond_slave_0): Releasing backup interface [ 621.732910][T29451] bond0: (slave bond_slave_1): Releasing backup interface [ 621.757768][T29451] team0: Port device team_slave_0 removed [ 621.776519][T29451] team0: Port device team_slave_1 removed [ 621.789959][T29451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.806533][T29451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.824564][T29451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 621.839764][T29451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.868862][T29451] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 621.924381][T29463] netlink: 'syz.0.6845': attribute type 14 has an invalid length. [ 622.198150][T29494] ipt_ECN: cannot use operation on non-tcp rule [ 622.472244][T29502] wg1 speed is unknown, defaulting to 1000 [ 622.856381][T29540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 622.924468][T29548] syzkaller1: entered promiscuous mode [ 622.930130][T29548] syzkaller1: entered allmulticast mode [ 622.967485][T26009] wlan0: Trigger new scan to find an IBSS to join [ 622.989919][T29551] lo: entered allmulticast mode [ 623.002928][T29551] lo: left allmulticast mode [ 623.319102][T29573] netlink: 'syz.2.6873': attribute type 1 has an invalid length. [ 623.375214][T29573] 8021q: adding VLAN 0 to HW filter on device bond4 [ 623.423842][ T5899] IPVS: starting estimator thread 0... [ 623.428260][T29577] macvlan2: entered promiscuous mode [ 623.443814][T29577] macvlan2: entered allmulticast mode [ 623.450539][T29577] bond4: entered allmulticast mode [ 623.458999][T29577] bond4: entered promiscuous mode [ 623.466154][T29577] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 623.475827][T29577] team0: Port device macvlan2 added [ 623.519402][T29580] IPVS: using max 35 ests per chain, 84000 per kthread [ 623.553872][T29585] netlink: 'syz.1.6876': attribute type 12 has an invalid length. [ 624.116086][T29596] 8021q: adding VLAN 0 to HW filter on device bond3 [ 624.234130][T29608] netlink: 'syz.2.6883': attribute type 10 has an invalid length. [ 624.242990][T29609] netlink: 'syz.2.6883': attribute type 10 has an invalid length. [ 624.253942][T29608] batman_adv: batadv0: Adding interface: netdevsim0 [ 624.307033][T29608] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.415429][T29608] batman_adv: batadv0: Interface activated: netdevsim0 [ 624.698598][T29632] netlink: 'syz.4.6889': attribute type 1 has an invalid length. [ 624.745771][T29632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 624.772139][T29633] netlink: 'syz.2.6890': attribute type 13 has an invalid length. [ 624.972536][T29633] ip6gre1: left allmulticast mode [ 624.999783][T29633] geneve2: left promiscuous mode [ 625.021098][T29633] macvlan2: left promiscuous mode [ 625.039868][T29633] bond4: left promiscuous mode [ 625.053899][T29633] macvlan2: left allmulticast mode [ 625.060768][T29633] bond4: left allmulticast mode [ 625.091843][T29658] __nla_validate_parse: 15 callbacks suppressed [ 625.091862][T29658] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6897'. [ 625.101366][T29661] netlink: 'syz.0.6900': attribute type 11 has an invalid length. [ 625.126279][T29659] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6898'. [ 625.149308][T29661] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6900'. [ 625.434237][T29680] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6906'. [ 625.560752][T29690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6906'. [ 627.274191][T29689] bond_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 627.387659][T29703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6912'. [ 627.423578][T29710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6914'. [ 627.541970][T29717] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6917'. [ 627.622409][T29726] xt_TCPMSS: Only works on TCP SYN packets [ 627.630637][T29725] netlink: 'syz.1.6919': attribute type 1 has an invalid length. [ 627.701205][T29730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6922'. [ 627.744039][T29732] bond2: (slave bridge2): making interface the new active one [ 627.754857][T29732] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 627.861133][T29740] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6923'. [ 627.930985][T29509] wlan0: Trigger new scan to find an IBSS to join [ 628.790058][T29799] netlink: 'syz.1.6939': attribute type 16 has an invalid length. [ 628.825070][T29510] wlan0: Creating new IBSS network, BSSID 1a:e2:6b:41:47:ba [ 629.034385][T29818] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 629.046456][T29819] netlink: 'syz.4.6947': attribute type 21 has an invalid length. [ 629.060721][T29816] netlink: 'syz.2.6946': attribute type 13 has an invalid length. [ 629.069857][T29819] netlink: 'syz.4.6947': attribute type 6 has an invalid length. [ 629.174099][T29823] x_tables: duplicate underflow at hook 1 [ 629.454158][T21539] IPVS: starting estimator thread 0... [ 629.568934][T29852] IPVS: using max 32 ests per chain, 76800 per kthread [ 629.644693][ T5842] block nbd1: Receive control failed (result -1) [ 629.835990][T29863] 8021q: adding VLAN 0 to HW filter on device bond3 [ 629.878859][T29864] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 630.136741][T29875] syzkaller1: entered promiscuous mode [ 630.158856][T29875] syzkaller1: entered allmulticast mode [ 630.248929][T29892] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.265151][T29890] syzkaller0: entered promiscuous mode [ 630.271897][T29890] syzkaller0: entered allmulticast mode [ 630.342979][T29894] netlink: 'syz.0.6966': attribute type 4 has an invalid length. [ 630.352007][T29894] __nla_validate_parse: 8 callbacks suppressed [ 630.352022][T29894] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6966'. [ 630.464459][T29904] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6973'. [ 630.487708][ T5842] Bluetooth: hci0: command 0x0405 tx timeout [ 630.545110][T29905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6973'. [ 630.596570][T29905] nbd: device at index 64 is going down [ 630.686707][T29911] udevd[29911]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 630.752685][T29911] udevd[29911]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 630.814149][T29913] syzkaller1: entered allmulticast mode [ 631.126081][T29948] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6984'. [ 631.159057][T29952] netlink: 'syz.2.6985': attribute type 1 has an invalid length. [ 631.225566][T29952] 8021q: adding VLAN 0 to HW filter on device bond5 [ 631.328815][T29962] bond5: (slave veth3): Enslaving as an active interface with a down link [ 631.352566][T29952] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 631.406650][T29962] bond5: (slave veth5): Enslaving as an active interface with a down link [ 631.409366][T29964] netlink: 'syz.5.6988': attribute type 2 has an invalid length. [ 631.428181][T29964] netlink: 244 bytes leftover after parsing attributes in process `syz.5.6988'. [ 631.495190][T29963] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.708609][T29963] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.719287][T29986] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6994'. [ 631.830783][T29963] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.952705][T29963] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.999669][T30003] gre0: entered promiscuous mode [ 632.004766][T30003] gre0: entered allmulticast mode [ 632.048836][T30012] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7002'. [ 632.218458][T20787] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.233851][T30017] syzkaller0: entered promiscuous mode [ 632.242220][T30017] syzkaller0: entered allmulticast mode [ 632.243900][T30021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7007'. [ 632.275685][T29515] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.295718][T29515] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.310640][T30021] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7007'. [ 632.323148][T29515] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.488116][T27717] IPVS: ip_vs_send_async error -101 [ 632.528553][T30033] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 632.613012][T30036] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7012'. [ 633.119604][T30071] 8021q: VLANs not supported on vcan0 [ 633.132907][T30075] openvswitch: netlink: Flow actions attr not present in new flow. [ 633.618157][T30094] syzkaller0: entered promiscuous mode [ 633.623694][T30094] syzkaller0: entered allmulticast mode [ 633.883607][ T5949] IPVS: starting estimator thread 0... [ 633.977351][T30117] IPVS: using max 29 ests per chain, 69600 per kthread [ 634.283221][T30145] !: renamed from dummy0 (while UP) [ 634.411078][T30157] netlink: 'syz.2.7046': attribute type 7 has an invalid length. [ 634.632072][T30170] tipc: Enabling of bearer rejected, already enabled [ 635.590154][T30211] nbd: illegal input index 2958377 [ 635.625190][T30210] nbd: illegal input index 2958377 [ 635.630213][T30215] netlink: 'syz.5.7066': attribute type 13 has an invalid length. [ 635.796181][T30215] gretap1: left promiscuous mode [ 635.804802][T30215] gretap1: left allmulticast mode [ 636.239331][T30257] set match dimension is over the limit! [ 636.545446][T30274] syzkaller1: entered promiscuous mode [ 636.570183][T30274] syzkaller1: entered allmulticast mode [ 636.712131][T30283] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 636.849450][T30291] __nla_validate_parse: 14 callbacks suppressed [ 636.849470][T30291] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7089'. [ 636.876660][T30294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7090'. [ 637.062027][T30305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7095'. [ 637.325924][T30320] bond5: Removing last ns target with arp_interval on [ 637.413426][T30340] openvswitch: netlink: Duplicate or invalid key (type 0). [ 637.441068][T30330] bond6: Removing last ns target with arp_interval on [ 637.449075][T30328] syzkaller1: entered promiscuous mode [ 637.465126][T30328] syzkaller1: entered allmulticast mode [ 637.505329][T30340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.716608][T30365] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7109'. [ 637.880038][T30370] netlink: 'syz.1.7114': attribute type 1 has an invalid length. [ 638.003674][T30378] team0: Device gtp1 is up. Set it down before adding it as a team port [ 638.018907][T30380] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7118'. [ 638.212338][T30389] netlink: 'syz.1.7120': attribute type 9 has an invalid length. [ 638.358442][T30394] bond6: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 638.381540][T30394] bond6 (unregistering): Released all slaves [ 638.398390][T30401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7126'. [ 638.690887][T30412] mac80211_hwsim hwsim67 syzkaller0: entered promiscuous mode [ 638.698750][T30412] mac80211_hwsim hwsim67 syzkaller0: entered allmulticast mode [ 638.714466][T30414] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7132'. [ 638.744477][T30412] tipc: Enabled bearer , priority 0 [ 638.755034][T30414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7132'. [ 638.805869][T30420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7133'. [ 638.859709][T30414] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7132'. [ 639.258883][T30444] netlink: 'syz.4.7139': attribute type 1 has an invalid length. [ 639.267250][T30444] netlink: 'syz.4.7139': attribute type 3 has an invalid length. [ 639.275090][T30444] NCSI netlink: No device for ifindex 813332851 [ 639.373218][T30455] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 639.486403][T30473] netlink: 'syz.5.7146': attribute type 12 has an invalid length. [ 639.547969][T30462] nbd0: detected capacity change from 0 to 63 [ 639.556786][T30468] block nbd0: NBD_DISCONNECT [ 639.584666][T30468] block nbd0: Disconnected due to user request. [ 639.601925][T30468] block nbd0: shutting down sockets [ 639.639869][ C0] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.650142][ C0] Buffer I/O error on dev nbd0, logical block 0, async page read [ 639.659063][ C0] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.668169][ C0] Buffer I/O error on dev nbd0, logical block 1, async page read [ 639.675984][ C0] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.685082][ C0] Buffer I/O error on dev nbd0, logical block 2, async page read [ 639.692925][ C0] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.702029][ C0] Buffer I/O error on dev nbd0, logical block 3, async page read [ 639.709920][T30077] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.725618][T30077] Buffer I/O error on dev nbd0, logical block 0, async page read [ 639.735358][T30077] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.762592][T30077] Buffer I/O error on dev nbd0, logical block 1, async page read [ 639.787738][T30077] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.799522][T30077] Buffer I/O error on dev nbd0, logical block 2, async page read [ 639.808319][T30077] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.821147][T30077] Buffer I/O error on dev nbd0, logical block 3, async page read [ 639.830259][T30077] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.844056][T30077] Buffer I/O error on dev nbd0, logical block 0, async page read [ 639.856720][T30077] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 639.871493][T30077] Buffer I/O error on dev nbd0, logical block 1, async page read [ 639.877046][ T6354] tipc: Node number set to 1448422981 [ 639.882121][T30077] ldm_validate_partition_table(): Disk read failed. [ 639.922640][T30077] Dev nbd0: unable to read RDB block 0 [ 639.943751][T30077] nbd0: unable to read partition table [ 639.985550][T30077] ldm_validate_partition_table(): Disk read failed. [ 640.057641][T30077] Dev nbd0: unable to read RDB block 0 [ 640.074346][T30077] nbd0: unable to read partition table [ 640.337195][T30505] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 640.430698][T30505] bond4: (slave lo): Enslaving as a backup interface with an up link [ 640.445200][T30525] tipc: Failed to remove unknown binding: 66,1,1/1434355519:1644239655/1644239657 [ 640.470741][T30505] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 640.525116][T30535] C: renamed from team_slave_0 (while UP) [ 640.534393][T30533] openvswitch: netlink: IPv4 tun info is not correct [ 640.549110][T30535] netlink: 'syz.5.7165': attribute type 1 has an invalid length. [ 640.558159][T30535] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 640.850569][T30560] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 641.367553][ T5842] Bluetooth: hci0: command 0x0405 tx timeout [ 642.037542][T30623] veth0: entered promiscuous mode [ 642.179429][T30635] __nla_validate_parse: 11 callbacks suppressed [ 642.179448][T30635] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7199'. [ 642.184038][T30638] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7196'. [ 642.186337][T30635] block nbd0: not configured, cannot reconfigure [ 642.206090][T30637] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7198'. [ 642.255823][T30635] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7199'. [ 642.327629][T17258] IPVS: ip_vs_send_async error -19 [ 642.334742][T30642] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7199'. [ 642.354832][T30640] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7200'. [ 642.386127][T30640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7200'. [ 642.397291][T30640] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7200'. [ 642.522976][T30648] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 642.531204][T30649] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 642.542126][T30649] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 642.560708][T30648] erspan0: left allmulticast mode [ 642.727473][T30648] gretap1: left promiscuous mode [ 642.732726][T30648] gretap1: left allmulticast mode [ 642.758701][T30648] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 642.781166][ T3738] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.806725][ T3738] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 642.857177][ T3738] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.866086][ T3738] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 642.890941][ T3738] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.919075][ T3738] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 642.950269][ T3738] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.955777][T30655] netlink: 220 bytes leftover after parsing attributes in process `syz.0.7204'. [ 642.983970][ T3738] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 643.005817][T30659] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.170606][T30669] tipc: Started in network mode [ 643.190620][T30669] tipc: Node identity ac1414aa, cluster identity 4711 [ 643.215227][T30669] tipc: Enabled bearer , priority 10 [ 643.441457][T30681] bridge0: port 2(ipvlan3) entered blocking state [ 643.459106][T30681] bridge0: port 2(ipvlan3) entered disabled state [ 643.465908][T30681] ipvlan3: entered allmulticast mode [ 643.483105][T30681] bridge0: entered allmulticast mode [ 643.490139][T30687] netlink: 'syz.1.7212': attribute type 32 has an invalid length. [ 643.498325][T30681] ipvlan3: left allmulticast mode [ 643.498344][T30681] bridge0: left allmulticast mode [ 643.558138][T30687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7212'. [ 643.592595][T30687] bond7: option coupled_control: invalid value (52) [ 643.614017][T30687] bond7 (unregistering): Released all slaves [ 643.907250][T30705] sctp: [Deprecated]: syz.4.7218 (pid 30705) Use of struct sctp_assoc_value in delayed_ack socket option. [ 643.907250][T30705] Use struct sctp_sack_info instead [ 643.943476][T30705] sctp: [Deprecated]: syz.4.7218 (pid 30705) Use of struct sctp_assoc_value in delayed_ack socket option. [ 643.943476][T30705] Use struct sctp_sack_info instead [ 643.986968][T30703] wg1 speed is unknown, defaulting to 1000 [ 644.208155][T21534] tipc: Node number set to 2886997162 [ 644.688954][T30736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.127941][T30746] netlink: 'syz.4.7229': attribute type 13 has an invalid length. [ 645.650907][T30786] syzkaller0: entered promiscuous mode [ 645.656424][T30786] syzkaller0: entered allmulticast mode [ 645.667636][T30786] tipc: Enabled bearer , priority 0 [ 645.677658][T30786] tipc: Resetting bearer [ 645.715287][T30785] tipc: Resetting bearer [ 645.751685][T30785] tipc: Disabling bearer [ 645.761393][T30791] netlink: 'syz.4.7238': attribute type 29 has an invalid length. [ 645.898421][T30793] netlink: 'syz.5.7239': attribute type 1 has an invalid length. [ 645.958937][T30795] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.966894][T30795] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.048365][T30795] bridge_slave_0: left allmulticast mode [ 646.054064][T30795] bridge_slave_0: left promiscuous mode [ 646.075604][T30795] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.145786][T30795] bridge_slave_1: left allmulticast mode [ 646.159676][T30795] bridge_slave_1: left promiscuous mode [ 646.165488][T30795] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.198081][T30795] bond0: (slave bond_slave_0): Releasing backup interface [ 646.224522][T30795] bond0: (slave bond_slave_1): Releasing backup interface [ 646.261100][T30795] team0: Port device C removed [ 646.272612][T30795] team0: Port device team_slave_1 removed [ 646.281722][T30795] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.292221][T30795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.303058][T30795] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.313438][T30795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.330560][T30795] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 646.554253][T30812] ip6t_srh: unknown srh match flags 4000 [ 646.617105][T30817] 0: reclassify loop, rule prio 0, protocol 800 [ 646.683087][T30822] netlink: 'syz.5.7248': attribute type 10 has an invalid length. [ 646.714652][T30826] netlink: 'syz.2.7250': attribute type 9 has an invalid length. [ 646.723245][T30822] team0: entered promiscuous mode [ 646.730171][T30822] 8021q: adding VLAN 0 to HW filter on device team0 [ 646.748222][T30828] IPVS: set_ctl: invalid protocol: 4 172.20.20.170:20000 [ 646.784010][T30822] bridge0: port 1(team0) entered blocking state [ 646.811270][T30822] bridge0: port 1(team0) entered disabled state [ 646.833649][T30822] team0: entered allmulticast mode [ 647.146373][T30862] netlink: 'syz.0.7261': attribute type 32 has an invalid length. [ 647.254718][T30862] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 647.574943][T30892] __nla_validate_parse: 12 callbacks suppressed [ 647.574962][T30892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7267'. [ 647.575227][T30897] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 647.691859][T30897] tipc: Enabling of bearer rejected, already enabled [ 647.866298][T30917] : renamed from hsr0 (while UP) [ 648.075327][T30935] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7278'. [ 648.195882][T30940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7280'. [ 648.208162][T30941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7279'. [ 648.256079][T30948] netlink: 'syz.5.7283': attribute type 1 has an invalid length. [ 648.362309][T30937] team_slave_0: entered promiscuous mode [ 648.368088][T30937] team_slave_1: entered promiscuous mode [ 648.376671][T30937] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 648.384574][T30937] team0: Device macvtap1 is already an upper device of the team interface [ 648.396765][T30937] team_slave_0: left promiscuous mode [ 648.402319][T30937] team_slave_1: left promiscuous mode [ 648.502902][T30954] macvlan2: entered promiscuous mode [ 648.508913][T30954] macvlan2: entered allmulticast mode [ 648.515917][T30954] bond5: entered promiscuous mode [ 648.522262][T30954] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 648.581387][T30954] bond5: left promiscuous mode [ 648.741329][T30966] lo: entered promiscuous mode [ 648.746322][T30966] netlink: 'syz.0.7288': attribute type 2 has an invalid length. [ 648.770799][T30966] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 649.148230][T30993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.154457][T30994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.204807][T30996] x_tables: duplicate underflow at hook 2 [ 649.393147][T31003] netlink: 288 bytes leftover after parsing attributes in process `syz.0.7297'. [ 649.509915][T31011] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 649.575169][T31015] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7301'. [ 649.601832][T31017] netlink: 'syz.2.7300': attribute type 3 has an invalid length. [ 649.848389][T31028] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7305'. [ 649.854155][T31027] syzkaller0: entered promiscuous mode [ 649.868473][T31027] syzkaller0: entered allmulticast mode [ 649.886652][T31030] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7306'. [ 649.899702][T31030] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 649.919930][T31031] netlink: 112 bytes leftover after parsing attributes in process `syz.5.7305'. [ 650.076540][T31035] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 650.106332][T31043] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7309'. [ 650.116747][T31043] netlink: 'syz.5.7309': attribute type 7 has an invalid length. [ 650.178017][T31046] validate_nla: 1 callbacks suppressed [ 650.178037][T31046] netlink: 'syz.0.7308': attribute type 1 has an invalid length. [ 650.239986][T31046] 8021q: adding VLAN 0 to HW filter on device bond5 [ 651.268563][T31112] xt_CT: You must specify a L4 protocol and not use inversions on it [ 651.641989][T31139] bond6: entered allmulticast mode [ 651.682531][T31139] ip6gretap1: entered allmulticast mode [ 651.700031][T31139] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 651.754402][T31146] netlink: 'syz.5.7339': attribute type 21 has an invalid length. [ 652.087484][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 652.157086][T31166] Bluetooth: MGMT ver 1.23 [ 652.383356][T31174] netlink: 'syz.2.7351': attribute type 1 has an invalid length. [ 652.391380][T31174] netlink: 'syz.2.7351': attribute type 4 has an invalid length. [ 652.424084][T31177] tipc: New replicast peer: 255.255.255.255 [ 652.435111][T31177] tipc: Enabled bearer , priority 10 [ 652.469827][T31174] netlink: 'syz.2.7351': attribute type 9 has an invalid length. [ 652.638985][T31188] __nla_validate_parse: 14 callbacks suppressed [ 652.639003][T31188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7354'. [ 652.918451][T31204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7358'. [ 653.040334][T31208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7359'. [ 653.053343][T31208] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7359'. [ 653.218497][T31221] syzkaller0: entered promiscuous mode [ 653.233448][T31221] syzkaller0: entered allmulticast mode [ 653.560427][T31247] syzkaller0: left promiscuous mode [ 653.565921][T31247] syzkaller0: left allmulticast mode [ 653.601322][T31251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7375'. [ 653.662597][T31253] IPv6: sit3: Disabled Multicast RS [ 653.669636][T31253] sit3: entered allmulticast mode [ 653.890200][T31265] block nbd0: Unsupported socket: should be TCP or UNIX. [ 653.916769][T31268] netlink: 'syz.5.7381': attribute type 4 has an invalid length. [ 653.916773][T31267] netlink: 'syz.5.7381': attribute type 4 has an invalid length. [ 653.921425][T31268] netlink: 'syz.5.7381': attribute type 4 has an invalid length. [ 653.926405][T31269] netlink: 'syz.5.7381': attribute type 4 has an invalid length. [ 654.043711][T31275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7383'. [ 654.254387][ T5842] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 654.261024][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 654.322288][T31287] netlink: 'syz.0.7387': attribute type 10 has an invalid length. [ 654.335887][T31287] 8021q: adding VLAN 0 to HW filter on device team0 [ 654.345324][T31287] bond0: (slave team0): Enslaving as an active interface with an up link [ 654.522532][T31302] openvswitch: netlink: EtherType 50a is less than min 600 [ 655.712705][T31388] validate_nla: 4 callbacks suppressed [ 655.712725][T31388] netlink: 'syz.5.7430': attribute type 9 has an invalid length. [ 655.748287][T31388] netlink: 'syz.5.7430': attribute type 11 has an invalid length. [ 655.756236][T31388] netlink: 'syz.5.7430': attribute type 12 has an invalid length. [ 655.791802][T31388] netlink: 210020 bytes leftover after parsing attributes in process `syz.5.7430'. [ 655.803805][T31388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7430'. [ 656.073116][T31411] netlink: 'syz.2.7440': attribute type 1 has an invalid length. [ 656.182548][T31416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7443'. [ 656.195885][T31419] netlink: 'syz.0.7444': attribute type 10 has an invalid length. [ 656.223636][T31419] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 656.244576][T31419] team0: Failed to send options change via netlink (err -105) [ 656.259672][T31419] team0: Port device netdevsim0 added [ 656.382276][T31432] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7450'. [ 656.545933][T31441] bridge6: entered promiscuous mode [ 656.553701][T31441] bridge6: entered allmulticast mode [ 657.539676][T31517] netlink: 'syz.0.7489': attribute type 4 has an invalid length. [ 657.665315][T31526] __nla_validate_parse: 10 callbacks suppressed [ 657.665336][T31526] netlink: 288 bytes leftover after parsing attributes in process `syz.4.7491'. [ 658.382163][T31572] tipc: Enabling of bearer rejected, already enabled [ 658.410480][T31572] tipc: Resetting bearer [ 658.661806][T31584] netlink: 320 bytes leftover after parsing attributes in process `syz.2.7518'. [ 659.224030][T31620] netlink: 'syz.2.7535': attribute type 1 has an invalid length. [ 659.227290][T31619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7534'. [ 659.715970][T31650] netlink: 41 bytes leftover after parsing attributes in process `syz.4.7548'. [ 659.725430][T31650] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7548'. [ 659.735039][T31650] netlink: 41 bytes leftover after parsing attributes in process `syz.4.7548'. [ 660.137273][T31680] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7563'. [ 660.149057][T31679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.846074][T31700] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7571'. [ 661.295629][T31729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7585'. [ 661.371367][T31734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7585'. [ 661.597775][T31750] nr0: tun_chr_ioctl cmd 1074025681 [ 661.799067][T31765] netlink: 'syz.5.7600': attribute type 2 has an invalid length. [ 661.821633][T31765] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 662.891851][T31838] batadv_slave_0: entered promiscuous mode [ 662.899850][T31837] batadv_slave_0: left promiscuous mode [ 662.940314][T31840] pimreg: entered allmulticast mode [ 662.948796][T31840] pimreg: left allmulticast mode [ 663.850591][T31897] __nla_validate_parse: 6 callbacks suppressed [ 663.850609][T31897] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7664'. [ 664.351927][T31934] netlink: 'syz.0.7682': attribute type 29 has an invalid length. [ 664.371694][T31934] netlink: 'syz.0.7682': attribute type 29 has an invalid length. [ 664.475947][T31944] netlink: 'syz.1.7687': attribute type 2 has an invalid length. [ 664.484730][T31944] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7687'. [ 664.741242][T31956] netlink: 68 bytes leftover after parsing attributes in process `syz.4.7693'. [ 664.984697][T31966] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7698'. [ 665.355877][T31997] netlink: 35 bytes leftover after parsing attributes in process `syz.1.7711'. [ 665.365239][T31997] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7711'. [ 665.551964][T32010] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7716'. [ 666.274512][T32052] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7736'. [ 666.380581][T32061] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 666.488807][T32069] netlink: 144 bytes leftover after parsing attributes in process `syz.4.7743'. [ 666.558001][T32071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7744'. [ 667.295975][T32103] gretap1: entered promiscuous mode [ 667.301749][T32103] gretap1: entered allmulticast mode [ 667.311320][T32105] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20004 [ 667.437304][T32112] openvswitch: netlink: Flow key attr not present in new flow. [ 667.448338][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 667.584195][T32124] syzkaller0: entered promiscuous mode [ 667.601785][T32124] syzkaller0: entered allmulticast mode [ 667.649185][T32126] netlink: 'syz.2.7764': attribute type 10 has an invalid length. [ 667.659990][T32126] bond0: (slave wlan1): Opening slave failed [ 667.726758][T32132] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 669.540437][T32239] __nla_validate_parse: 5 callbacks suppressed [ 669.540454][T32239] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7815'. [ 669.635933][T32244] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 669.932123][T32268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7829'. [ 669.941400][T32268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7829'. [ 669.982994][T32270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.125701][T32280] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7835'. [ 670.135781][T32280] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 670.282795][T32288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7839'. [ 671.209493][T32345] netlink: 'syz.0.7864': attribute type 1 has an invalid length. [ 671.330741][T32355] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7868'. [ 671.349997][T32355] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 672.132462][T32388] wg1 speed is unknown, defaulting to 1000 [ 672.911360][T32428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7900'. [ 673.720222][T32469] netlink: 'syz.1.7914': attribute type 1 has an invalid length. [ 673.834013][T32477] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7916'. [ 673.847213][T32469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 673.857683][T32478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 673.873299][T32480] netlink: 'syz.5.7915': attribute type 10 has an invalid length. [ 673.881849][T32469] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7914'. [ 673.891759][T32477] nbd: couldn't find device at index 24 [ 673.901756][T32477] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7916'. [ 673.903136][T32469] bond7 (unregistering): Released all slaves [ 674.152206][T32490] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.360153][T32500] netlink: 'syz.2.7923': attribute type 1 has an invalid length. [ 674.476155][T32508] tipc: Enabled bearer , priority 0 [ 674.560445][T32506] __nla_validate_parse: 7 callbacks suppressed [ 674.560462][T32506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7925'. [ 674.587350][T32506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7925'. [ 674.590276][T32507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7925'. [ 674.622187][T32506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7925'. [ 674.656700][T32507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7925'. [ 674.666181][T32506] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7925'. [ 674.688194][T32527] x_tables: unsorted entry at hook 1 [ 674.694921][T32507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7925'. [ 674.722544][T32507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7925'. [ 674.737559][T32531] netlink: 'syz.5.7931': attribute type 1 has an invalid length. [ 674.745422][T32531] netlink: 136 bytes leftover after parsing attributes in process `syz.5.7931'. [ 674.757128][T32531] netlink: 'syz.5.7931': attribute type 1 has an invalid length. [ 674.832235][T32537] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7933'. [ 675.089747][T32553] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 675.111843][T32553] bond7 (unregistering): Released all slaves [ 675.274523][T32566] netlink: 'syz.0.7944': attribute type 4 has an invalid length. [ 675.386127][T32570] openvswitch: netlink: Flow key attr not present in new flow. [ 675.705796][T32580] bond4 (unregistering): Released all slaves [ 676.212858][T32623] netlink: 'syz.1.7962': attribute type 1 has an invalid length. [ 676.213646][T32626] x_tables: duplicate entry at hook 3 [ 676.301924][T32631] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.381133][T32715] lo speed is unknown, defaulting to 1000 [ 677.418354][T32715] lo speed is unknown, defaulting to 1000 [ 677.440252][T32715] lo speed is unknown, defaulting to 1000 [ 677.705841][T32585] Bluetooth: hci5: command 0x0406 tx timeout [ 677.712034][ T52] Bluetooth: hci3: command 0x0406 tx timeout [ 677.778046][T32715] infiniband sz1: set active [ 677.782934][T21534] lo speed is unknown, defaulting to 1000 [ 677.812826][T32715] infiniband sz1: added lo [ 677.999460][T32715] RDS/IB: sz1: added [ 678.003538][T32715] smc: adding ib device sz1 with port count 1 [ 678.042350][T32763] openvswitch: netlink: Multiple metadata blocks provided [ 678.065744][T32715] smc: ib device sz1 port 1 has no pnetid [ 678.081715][T21534] lo speed is unknown, defaulting to 1000 [ 678.098542][T32715] lo speed is unknown, defaulting to 1000 [ 678.270474][ T312] netlink: 'syz.0.8015': attribute type 1 has an invalid length. [ 678.391116][ T314] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 678.456428][ T323] netlink: 'syz.2.8019': attribute type 8 has an invalid length. [ 678.505223][ T318] bond7: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 678.564904][T32715] lo speed is unknown, defaulting to 1000 [ 678.576271][ T323] openvswitch: netlink: Flow key attribute not present in set flow. [ 678.646391][ T323] netlink: 'syz.2.8019': attribute type 21 has an invalid length. [ 678.654434][ T323] IPv6: NLM_F_CREATE should be specified when creating new route [ 678.678121][ T323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 678.685377][ T323] IPv6: NLM_F_CREATE should be set when creating new route [ 678.692652][ T323] IPv6: NLM_F_CREATE should be set when creating new route [ 678.699913][ T323] IPv6: NLM_F_CREATE should be set when creating new route [ 679.154894][T32715] lo speed is unknown, defaulting to 1000 [ 679.712120][T32715] lo speed is unknown, defaulting to 1000 [ 680.118745][ T408] __nla_validate_parse: 22 callbacks suppressed [ 680.118765][ T408] netlink: 104 bytes leftover after parsing attributes in process `syz.2.8042'. [ 680.259336][ T415] xt_hashlimit: overflow, rate too high: 0 [ 680.342320][T32715] lo speed is unknown, defaulting to 1000 [ 680.548745][ T425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8049'. [ 680.593725][ T425] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8049'. [ 680.593766][T17979] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.665490][T17979] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.698610][T17979] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.717194][T17979] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 680.835187][ T435] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.8052'. [ 680.878684][ T434] syzkaller1: entered promiscuous mode [ 680.884202][ T434] syzkaller1: entered allmulticast mode [ 680.943859][ T441] sctp: [Deprecated]: syz.4.8054 (pid 441) Use of int in maxseg socket option. [ 680.943859][ T441] Use struct sctp_assoc_value instead [ 680.983582][ T443] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8055'. [ 680.993271][ T445] netlink: 'syz.2.8055': attribute type 1 has an invalid length. [ 681.001525][ T443] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8055'. [ 681.004646][ T445] netlink: 15922 bytes leftover after parsing attributes in process `syz.2.8055'. [ 681.011185][ T443] netlink: 'syz.2.8055': attribute type 5 has an invalid length. [ 681.037526][ T447] bridge_slave_0: left allmulticast mode [ 681.043247][ T447] bridge_slave_0: left promiscuous mode [ 681.043300][T32715] lo speed is unknown, defaulting to 1000 [ 681.049509][ T443] netlink: 43 bytes leftover after parsing attributes in process `syz.2.8055'. [ 681.049821][ T447] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.108235][ T447] bond0: (slave bond_slave_0): Releasing backup interface [ 681.163126][ T447] bond0: (slave bond_slave_1): Releasing backup interface [ 681.191947][ T452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8054'. [ 681.220751][ T454] ip6t_srh: unknown srh invflags 4000 [ 681.234257][ T458] netlink: 4552 bytes leftover after parsing attributes in process `syz.1.8059'. [ 681.274266][ T447] team0: Port device team_slave_0 removed [ 681.307082][ T447] team0: Port device team_slave_1 removed [ 681.314452][ T447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.323775][ T447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 681.338815][ T447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.350148][ T447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 681.371790][ T447] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 681.446015][T32715] lo speed is unknown, defaulting to 1000 [ 681.879172][T32715] lo speed is unknown, defaulting to 1000 [ 682.343232][T32715] lo speed is unknown, defaulting to 1000 [ 682.482578][ T514] !€ÿ: renamed from bond_slave_0 [ 682.741566][T32715] lo speed is unknown, defaulting to 1000 [ 683.098937][ T541] delete_channel: no stack [ 683.254829][T32715] lo speed is unknown, defaulting to 1000 [ 683.803513][T32715] lo speed is unknown, defaulting to 1000 [ 683.974666][ T596] nbd: must specify a size in bytes for the device [ 684.000350][ T595] nbd: must specify a size in bytes for the device [ 684.102451][ T601] xt_cgroup: path and classid specified [ 684.276191][ T608] syzkaller0: entered promiscuous mode [ 684.283645][ T608] syzkaller0: entered allmulticast mode [ 684.610091][ T638] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 685.224412][ T675] __nla_validate_parse: 45 callbacks suppressed [ 685.224426][ T675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8140'. [ 685.301460][ T680] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8142'. [ 685.316562][ T680] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8142'. [ 685.517785][ T692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8147'. [ 685.541204][ T692] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8147'. [ 685.672912][ T701] netlink: 'syz.5.8151': attribute type 1 has an invalid length. [ 685.790047][ T703] tipc: Enabling of bearer rejected, already enabled [ 685.819940][ T703] tipc: Resetting bearer [ 686.212734][ T737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8164'. [ 686.447470][ T752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.522002][ T752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.597294][ T752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.785485][ T776] netlink: 64 bytes leftover after parsing attributes in process `syz.0.8182'. [ 687.359506][ T813] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8196'. [ 687.534200][ T824] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8201'. [ 687.562375][ T828] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8205'. [ 688.016160][ T864] netlink: 'syz.1.8219': attribute type 12 has an invalid length. [ 688.309437][ T884] wg1 speed is unknown, defaulting to 1000 [ 689.104278][ T884] lo speed is unknown, defaulting to 1000 [ 689.644987][ T961] macsec1: entered promiscuous mode [ 689.651373][ T961] mac80211_hwsim hwsim74 wlan0: entered promiscuous mode [ 689.660269][ T964] batadv0: entered promiscuous mode [ 690.715027][ T1012] netlink: 'syz.4.8278': attribute type 1 has an invalid length. [ 690.763099][ T1019] __nla_validate_parse: 7 callbacks suppressed [ 690.763117][ T1019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8279'. [ 691.095394][ T1046] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8288'. [ 691.106437][ T1046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8288'. [ 691.153267][ T1052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8290'. [ 691.166067][ T1052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8290'. [ 691.175225][ T1052] netlink: 'syz.2.8290': attribute type 6 has an invalid length. [ 691.248661][ T1057] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 691.479355][ T1076] netlink: 'syz.5.8300': attribute type 10 has an invalid length. [ 691.636108][ T1089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8306'. [ 692.262929][ T1131] syzkaller0: left promiscuous mode [ 692.274739][ T1131] syzkaller0: left allmulticast mode [ 692.414361][ T1144] netlink: 'syz.1.8327': attribute type 1 has an invalid length. [ 692.466664][ T1151] netlink: 'syz.2.8329': attribute type 1 has an invalid length. [ 692.531136][ T1151] bond8: entered promiscuous mode [ 692.536773][ T1151] 8021q: adding VLAN 0 to HW filter on device bond8 [ 692.545294][ T1144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8327'. [ 692.573254][ T1144] bond7 (unregistering): Released all slaves [ 692.608286][ T1158] netlink: 'syz.5.8331': attribute type 1 has an invalid length. [ 692.613674][ T1151] bond8: (slave bridge8): making interface the new active one [ 692.625662][ T1151] bridge8: entered promiscuous mode [ 692.633826][ T1151] bridge8: left promiscuous mode [ 692.655187][ T1158] netlink: 'syz.5.8331': attribute type 1 has an invalid length. [ 692.666779][ T1158] netlink: 9172 bytes leftover after parsing attributes in process `syz.5.8331'. [ 692.938439][ T1179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8338'. [ 693.025244][ T1179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8338'. [ 693.585541][ T1228] netlink: 'syz.5.8349': attribute type 10 has an invalid length. [ 693.604724][ T1232] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 693.623492][ T1227] netlink: 'syz.5.8349': attribute type 10 has an invalid length. [ 693.643038][ T1232] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 693.743454][ T1244] openvswitch: netlink: VXLAN extension 30 out of range max 1 [ 693.919915][ T1253] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 693.940282][T27717] IPVS: ip_vs_send_async error -101 [ 693.999483][ T1260] nft_compat: unsupported protocol 5 [ 694.414032][ T1283] bond7: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 694.469655][ T1283] bond7 (unregistering): Released all slaves [ 694.552494][ T1299] syzkaller1: entered promiscuous mode [ 694.575458][ T1299] syzkaller1: entered allmulticast mode [ 694.861388][ T1327] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 694.898611][ T5835] lo speed is unknown, defaulting to 1000 [ 694.950790][ T1332] bond7: option resend_igmp: invalid value (32767) [ 694.958497][ T1332] bond7: option resend_igmp: allowed values 0 - 255 [ 694.970472][ T1332] bond7 (unregistering): Released all slaves [ 695.378226][T29507] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 695.424500][ T1374] openvswitch: netlink: Duplicate or invalid key (type 0). [ 695.440847][ T1374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 696.347844][ T1430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 696.355126][ T1430] IPv6: NLM_F_CREATE should be set when creating new route [ 696.362440][ T1430] IPv6: NLM_F_CREATE should be set when creating new route [ 696.549683][ T1445] __nla_validate_parse: 38 callbacks suppressed [ 696.549702][ T1445] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8410'. [ 696.869024][ T1465] netlink: 'syz.1.8420': attribute type 1 has an invalid length. [ 696.890683][ T1468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8418'. [ 697.261791][ T1486] netlink: 312 bytes leftover after parsing attributes in process `syz.5.8427'. [ 697.771746][ T1510] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8439'. [ 697.795872][ T1510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8439'. [ 697.817468][ T1510] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8439'. [ 698.630015][ T1566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8462'. [ 698.677413][ T1573] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8465'. [ 699.046553][ T1599] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8477'. [ 699.514037][ T1638] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8495'. [ 699.719356][ T1649] bridge8: entered promiscuous mode [ 699.737207][ T1649] bridge8: entered allmulticast mode [ 699.828184][ T1657] netlink: 'syz.1.8503': attribute type 11 has an invalid length. [ 699.965319][ T1663] macsec1: entered promiscuous mode [ 699.997103][ T1663] macsec1: entered allmulticast mode [ 701.065393][ T1744] netlink: 'syz.0.8534': attribute type 11 has an invalid length. [ 701.146106][ T1747] netlink: 'syz.0.8536': attribute type 4 has an invalid length. [ 701.208288][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.393826][ T1769] tipc: Enabling of bearer rejected, already enabled [ 701.413703][ T1771] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 701.436591][ T1769] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 701.685876][ T1791] __nla_validate_parse: 10 callbacks suppressed [ 701.685890][ T1791] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8548'. [ 701.791709][ T1796] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8550'. [ 702.025237][ T1815] macvlan0: entered promiscuous mode [ 702.038925][ T1815] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8556'. [ 702.050782][ T1815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8556'. [ 702.363932][ T1836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8559'. [ 702.460310][ T1844] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8562'. [ 702.473369][ T1845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8561'. [ 702.492573][ T1844] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8562'. [ 702.600981][ T1853] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8562'. [ 702.638517][ T1849] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 702.666521][ T1849] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 703.213722][ T1892] netlink: 'syz.2.8575': attribute type 10 has an invalid length. [ 703.288383][ T5851] Bluetooth: hci6: command 0x0406 tx timeout [ 703.564201][ T1904] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 703.680665][ T1891] wg2: left promiscuous mode [ 704.008399][ T1892] bridge0: port 1(team0) entered blocking state [ 704.026333][ T1892] bridge0: port 1(team0) entered disabled state [ 704.040199][ T1892] team0: entered allmulticast mode [ 704.051225][ T1892] macvlan2: entered allmulticast mode [ 704.059636][ T1892] bond4: entered allmulticast mode [ 704.071453][ T1892] team0: entered promiscuous mode [ 704.076581][ T1892] macvlan2: entered promiscuous mode [ 704.084157][ T1892] bond4: entered promiscuous mode [ 704.214367][ T1925] netlink: 'syz.5.8583': attribute type 1 has an invalid length. [ 704.334740][ T1925] bond7: entered promiscuous mode [ 704.356750][ T1925] 8021q: adding VLAN 0 to HW filter on device bond7 [ 704.414666][ T1948] bond7: (slave bridge5): making interface the new active one [ 704.422384][ T1948] bridge5: entered promiscuous mode [ 704.431064][ T1948] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 704.830448][ T1976] netlink: 'syz.1.8597': attribute type 1 has an invalid length. [ 704.874844][ T1983] x_tables: unsorted underflow at hook 3 [ 704.882812][ T1977] geneve2: entered promiscuous mode [ 704.909435][ T1983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8599'. [ 704.939004][ T1983] netlink: 'syz.0.8599': attribute type 14 has an invalid length. [ 704.948739][ T1983] netlink: 'syz.0.8599': attribute type 13 has an invalid length. [ 704.988465][T17978] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 705.001592][T17978] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 705.014094][T17978] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 705.112581][T17978] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 705.236809][ T2007] bond0: entered promiscuous mode [ 705.248480][ T2007] bond0: left promiscuous mode [ 705.346128][ T2016] netlink: 'syz.5.8608': attribute type 4 has an invalid length. [ 705.456657][ T2026] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 705.680358][ T2045] netlink: 'syz.2.8617': attribute type 1 has an invalid length. [ 705.730479][ T2045] 8021q: adding VLAN 0 to HW filter on device bond9 [ 705.749061][ T2045] macvlan4: entered promiscuous mode [ 705.754401][ T2045] macvlan4: entered allmulticast mode [ 705.760637][ T2045] bond9: entered allmulticast mode [ 705.768951][ T2045] bond9: entered promiscuous mode [ 705.775398][ T2045] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 705.789330][ T2045] team0: Port device macvlan4 added [ 705.813424][ T2049] netlink: 'syz.4.8618': attribute type 7 has an invalid length. [ 705.919294][ T2062] netlink: 'syz.4.8622': attribute type 10 has an invalid length. [ 705.928657][ T2062] syz_tun: entered promiscuous mode [ 705.940816][ T2062] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 706.091181][ T2068] syzkaller0: entered promiscuous mode [ 706.096794][ T2068] syzkaller0: entered allmulticast mode [ 706.149596][ T2014] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 706.157190][ T2014] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 706.164587][ T2070] batadv2: entered allmulticast mode [ 706.196078][ T2070] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 706.212041][ T2070] bridge0: port 1(batadv2) entered blocking state [ 706.224999][ T2070] bridge0: port 1(batadv2) entered disabled state [ 706.246541][ T2070] batadv2: entered promiscuous mode [ 706.295006][ T2014] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 706.304863][ T2014] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 706.329493][ T2014] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 706.352363][ T2014] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 706.390845][ T2014] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 706.413042][ T2014] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 706.480660][ T2014] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 706.493037][ T2014] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 706.551308][ T2093] 8021q: adding VLAN 0 to HW filter on device bond8 [ 706.602778][ T2093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.649987][ T2093] bond8: (slave bond0): Enslaving as an active interface with a down link [ 706.662258][ T12] batman_adv: batadv2: No IGMP Querier present - multicast optimizations disabled [ 706.672614][ T12] batman_adv: batadv2: No MLD Querier present - multicast optimizations disabled [ 706.697501][ T2099] netlink: 'syz.5.8631': attribute type 10 has an invalid length. [ 706.708430][ T2101] team0: left allmulticast mode [ 706.713329][ T2101] macvlan2: left allmulticast mode [ 706.731781][ T2101] bond4: left allmulticast mode [ 706.740338][ T2101] team0: left promiscuous mode [ 706.746745][ T2101] macvlan2: left promiscuous mode [ 706.752807][ T2101] bond4: left promiscuous mode [ 706.758499][ T2101] bridge0: port 1(team0) entered disabled state [ 706.774665][ T2101] bond5: (slave veth0_to_bond): Releasing active interface [ 706.787927][ T2101] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 706.826215][ T2104] team0: Device wireguard0 is of different type [ 706.879386][ T2099] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 706.902491][ T2113] bridge0: port 2(team0) entered blocking state [ 706.910114][ T2113] bridge0: port 2(team0) entered disabled state [ 706.916621][ T2113] team0: entered allmulticast mode [ 706.962847][ T2113] team0: entered promiscuous mode [ 706.986321][ T2108] bond0: (slave syz_tun): Releasing backup interface [ 707.020100][ T2108] team0: left allmulticast mode [ 707.035035][ T2108] team0: left promiscuous mode [ 707.041953][ T2108] bridge0: port 2(team0) entered disabled state [ 707.054255][ T2108] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 707.083432][ T2116] ip6gre0: entered promiscuous mode [ 707.109810][ T2116] team0: Refused to change device type [ 707.129132][ T2124] netlink: 'syz.5.8640': attribute type 10 has an invalid length. [ 707.169345][T17978] bond8: (slave bond0): failed to get link speed/duplex [ 707.200828][ T2124] bond0: (slave wlan1): Opening slave failed [ 707.299579][T17978] bond8: (slave bond0): failed to get link speed/duplex [ 707.386710][ T2118] lo: left promiscuous mode [ 707.403313][ T2118] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 707.437225][T26009] bond8: (slave bond0): failed to get link speed/duplex [ 707.549424][T17978] bond8: (slave bond0): failed to get link speed/duplex [ 707.657675][T26009] bond8: (slave bond0): failed to get link speed/duplex [ 707.673545][ T2153] __nla_validate_parse: 8 callbacks suppressed [ 707.673563][ T2153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8649'. [ 707.767148][T20784] bond8: (slave bond0): failed to get link speed/duplex [ 707.888202][ T3543] bond8: (slave bond0): failed to get link speed/duplex [ 709.279916][ T2233] wg2: entered promiscuous mode [ 709.287640][ T2233] wg2: entered allmulticast mode [ 709.800345][ T2250] pim6reg1: entered promiscuous mode [ 709.805708][ T2250] pim6reg1: entered allmulticast mode [ 710.172689][ T2274] pim6reg1: entered promiscuous mode [ 710.184521][ T2274] pim6reg1: entered allmulticast mode [ 711.887393][ T1214] net_ratelimit: 28 callbacks suppressed [ 711.887415][ T1214] bond8: (slave bond0): failed to get link speed/duplex [ 712.047016][T26009] bond8: (slave bond0): failed to get link speed/duplex [ 712.157020][T26009] bond8: (slave bond0): failed to get link speed/duplex [ 712.267058][T26009] bond8: (slave bond0): failed to get link speed/duplex [ 712.377252][T17973] bond8: (slave bond0): failed to get link speed/duplex [ 712.487411][T20787] bond8: (slave bond0): failed to get link speed/duplex [ 712.597226][T17973] bond8: (slave bond0): failed to get link speed/duplex [ 712.717168][T26009] bond8: (slave bond0): failed to get link speed/duplex [ 712.827129][T29507] bond8: (slave bond0): failed to get link speed/duplex [ 712.938572][T17981] bond8: (slave bond0): failed to get link speed/duplex [ 715.588467][ T2327] pim6reg1: entered promiscuous mode [ 715.594025][ T2327] pim6reg1: entered allmulticast mode [ 716.960388][T26009] net_ratelimit: 34 callbacks suppressed [ 716.960407][T26009] bond8: (slave bond0): failed to get link speed/duplex [ 717.045603][ T2351] pim6reg1: entered promiscuous mode [ 717.087680][ T2351] pim6reg1: entered allmulticast mode [ 717.279325][T17979] bond8: (slave bond0): failed to get link speed/duplex [ 717.371708][ T2373] veth1_macvtap: left promiscuous mode [ 717.379556][ T2373] macsec0: entered promiscuous mode [ 717.389466][ T2363] pim6reg1: entered promiscuous mode [ 717.405145][ T2363] pim6reg1: entered allmulticast mode [ 717.520185][ T1164] bond8: (slave bond0): failed to get link speed/duplex [ 717.647069][ T1164] bond8: (slave bond0): failed to get link speed/duplex [ 717.757731][T29507] bond8: (slave bond0): failed to get link speed/duplex [ 717.867103][ T1214] bond8: (slave bond0): failed to get link speed/duplex [ 717.987045][ T1164] bond8: (slave bond0): failed to get link speed/duplex [ 718.127191][T17978] bond8: (slave bond0): failed to get link speed/duplex [ 718.247838][ T12] bond8: (slave bond0): failed to get link speed/duplex [ 718.358217][ T1215] bond8: (slave bond0): failed to get link speed/duplex [ 719.731255][ T2536] [ 719.733938][ T2536] ============================= [ 719.738915][ T2536] WARNING: suspicious RCU usage [ 719.743783][ T2536] syzkaller #0 Not tainted [ 719.748551][ T2536] ----------------------------- [ 719.753409][ T2536] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 719.762013][ T2536] [ 719.762013][ T2536] other info that might help us debug this: [ 719.762013][ T2536] [ 719.773420][ T2536] [ 719.773420][ T2536] rcu_scheduler_active = 2, debug_locks = 1 [ 719.781751][ T2536] 1 lock held by syz.0.8819/2536: [ 719.787091][ T2536] #0: ffffffff8df41ea0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80 [ 719.797359][ T2536] [ 719.797359][ T2536] stack backtrace: [ 719.803263][ T2536] CPU: 1 UID: 0 PID: 2536 Comm: syz.0.8819 Not tainted syzkaller #0 PREEMPT(full) [ 719.803288][ T2536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 719.803301][ T2536] Call Trace: [ 719.803309][ T2536] [ 719.803318][ T2536] dump_stack_lvl+0x189/0x250 [ 719.803347][ T2536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 719.803367][ T2536] ? __pfx__printk+0x10/0x10 [ 719.803386][ T2536] ? __lock_acquire+0x6b6/0x2cf0 [ 719.803420][ T2536] lockdep_rcu_suspicious+0x140/0x1d0 [ 719.803443][ T2536] get_callchain_entry+0x2b6/0x3c0 [ 719.803468][ T2536] get_perf_callchain+0xb3/0x820 [ 719.803511][ T2536] ? __pfx_get_perf_callchain+0x10/0x10 [ 719.803534][ T2536] ? futex_unqueue+0x22/0x240 [ 719.803560][ T2536] ? futex_unqueue+0x22/0x240 [ 719.803582][ T2536] ? futex_unqueue+0x22/0x240 [ 719.803612][ T2536] __bpf_get_stack+0x45b/0xaa0 [ 719.803643][ T2536] ? __pfx___bpf_get_stack+0x10/0x10 [ 719.803675][ T2536] bpf_get_stack+0x33/0x50 [ 719.803694][ T2536] ? bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 719.803712][ T2536] bpf_get_stack_raw_tp+0x1a9/0x220 [ 719.803737][ T2536] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 719.803753][ T2536] bpf_prog_run_pin_on_cpu+0x143/0x480 [ 719.803776][ T2536] bpf_prog_test_run_syscall+0x312/0x4b0 [ 719.803794][ T2536] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 719.803808][ T2536] ? __fget_files+0x2a/0x420 [ 719.803826][ T2536] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 719.803842][ T2536] bpf_prog_test_run+0x2c7/0x340 [ 719.803863][ T2536] __sys_bpf+0x562/0x860 [ 719.803880][ T2536] ? __pfx___sys_bpf+0x10/0x10 [ 719.803911][ T2536] ? rcu_is_watching+0x15/0xb0 [ 719.803933][ T2536] __x64_sys_bpf+0x7c/0x90 [ 719.803949][ T2536] do_syscall_64+0xfa/0xf80 [ 719.803967][ T2536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.803980][ T2536] ? clear_bhb_loop+0x60/0xb0 [ 719.803997][ T2536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.804010][ T2536] RIP: 0033:0x7f303458f749 [ 719.804023][ T2536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.804035][ T2536] RSP: 002b:00007f30353f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 719.804051][ T2536] RAX: ffffffffffffffda RBX: 00007f30347e5fa0 RCX: 00007f303458f749 [ 719.804061][ T2536] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 719.804070][ T2536] RBP: 00007f3034613f91 R08: 0000000000000000 R09: 0000000000000000 [ 719.804079][ T2536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.804087][ T2536] R13: 00007f30347e6038 R14: 00007f30347e5fa0 R15: 00007fff5dc723e8 [ 719.804110][ T2536] [ 721.999124][ T3738] net_ratelimit: 29 callbacks suppressed [ 721.999146][ T3738] bond8: (slave bond0): failed to get link speed/duplex [ 722.118459][ T3738] bond8: (slave bond0): failed to get link speed/duplex [ 722.228300][ T3738] bond8: (slave bond0): failed to get link speed/duplex [ 722.339356][ T1164] bond8: (slave bond0): failed to get link speed/duplex [ 722.448383][ T3738] bond8: (slave bond0): failed to get link speed/duplex [ 722.558777][T17977] bond8: (slave bond0): failed to get link speed/duplex [ 722.669055][ T3738] bond8: (slave bond0): failed to get link speed/duplex [ 722.778574][ T1215] bond8: (slave bond0): failed to get link speed/duplex [ 722.888546][ T3738] bond8: (slave bond0): failed to get link speed/duplex [ 722.999070][T17981] bond8: (slave bond0): failed to get link speed/duplex [ 727.068191][ T3461] net_ratelimit: 36 callbacks suppressed [ 727.068214][ T3461] bond8: (slave bond0): failed to get link speed/duplex [ 727.197788][T26009] bond8: (slave bond0): failed to get link speed/duplex [ 727.307042][T26009] bond8: (slave bond0): failed to get link speed/duplex [ 727.417090][T17979] bond8: (slave bond0): failed to get link speed/duplex [ 727.527819][T17979] bond8: (slave bond0): failed to get link speed/duplex [ 727.637055][T17979] bond8: (slave bond0): failed to get link speed/duplex [ 727.747455][T17979] bond8: (slave bond0): failed to get link speed/duplex [ 727.857736][ T3461] bond8: (slave bond0): failed to get link speed/duplex [ 727.967476][ T3461] bond8: (slave bond0): failed to get link speed/duplex [ 728.077026][ T3461] bond8: (slave bond0): failed to get link speed/duplex