last executing test programs: 4.033145891s ago: executing program 2 (id=1948): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000003c0), 0x3528a9c0}], 0x1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 3.848009926s ago: executing program 0 (id=1951): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) 3.798758347s ago: executing program 0 (id=1952): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7ce", 0x6c}], 0x1}, 0x60044084) 3.725734168s ago: executing program 0 (id=1954): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x2, 0x3}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44040) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000600)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 3.303883349s ago: executing program 0 (id=1959): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r3, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000500)={0x17, {{0x29, 0x0, 0x43000000, @private1, 0x6}}, {{0xa, 0x0, 0x4, @remote}}}, 0x108) 3.303276469s ago: executing program 4 (id=1960): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001440)={0x1, 0x0}, 0x8) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001480)=r0, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000014c0)=@bpf_lsm={0x1d, 0x3, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xc06}}, &(0x7f00000015c0)='syzkaller\x00', 0x7, 0x9a, &(0x7f0000001600)=""/154, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0xed00, 0x10, 0x0, 0x0, r0, 0x0, 0x1, 0x0, &(0x7f00000016c0)=[{0x0, 0x2, 0xd, 0x2}], 0x10, 0x3}, 0x94) 3.183890272s ago: executing program 4 (id=1962): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="820000007002080008000f0008000000180012800800010073697400", @ANYBLOB="0400140008001d000200000008002e"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) 3.183697402s ago: executing program 0 (id=1963): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001d80)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newchain={0x24, 0x64, 0x800, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x4, 0xfff1}, {0x3, 0xc}, {0x1b, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000845}, 0x2000c8c1) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) write$nci(r2, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="7c468e48dc0ce95bc9627d4374eb7a570bff497f96a57f4798ac3850266226180c4f0a1450c981b42324023825c82bf073dd4c8abd05f9", @ANYBLOB="010065bd7000ffdbdf25210000000800"], 0x40}, 0x1, 0x0, 0x0, 0x24081}, 0x404c800) write$nci(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) 3.160725672s ago: executing program 1 (id=1964): socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$nl_generic(0x10, 0x3, 0x10) ioctl$OCFS2_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r2, @ANYBLOB="0028000000000000140012800c0001006d6163766c616e00", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040", 0xa2}], 0x1}, 0x60044084) 3.040097005s ago: executing program 4 (id=1966): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000003c0), 0x3528a9c0}], 0x1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYBLOB='&'], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 3.039507125s ago: executing program 2 (id=1967): unshare(0x20000400) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) 3.020020906s ago: executing program 1 (id=1968): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8}, @TCA_FQ_TIMER_SLACK={0x8, 0xd, 0x82}]}}]}, 0x40}}, 0x4000010) 2.916005568s ago: executing program 2 (id=1969): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x2, 0x3}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44040) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @link_local}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000600)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 2.915817778s ago: executing program 1 (id=1970): close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, 0x0, 0x0, 0xc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000009c0)) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'syz_tun\x00', 0x0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c00)={r2, r0}, 0x14) syz_emit_ethernet(0x1f, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @random="6487a2bed3d6", @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x6, 0x0, 0x4}}, {@llc={0x4, {@snap={0xaa, 0x1fe, "0e", "33e8cb", 0x1b, "8a"}}}}}, 0x0) 2.873400449s ago: executing program 1 (id=1971): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0) close(r0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000400), 0x56) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 2.806286131s ago: executing program 3 (id=1972): setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000009, 0x3032, 0xffffffffffffffff, 0xc6dd5000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bpf$MAP_LOOKUP_BATCH(0x19, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f00000001c0)={&(0x7f0000000140)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f0000000980)=[{&(0x7f0000002600)=""/4115, 0x1013}], 0x1) 2.609692916s ago: executing program 2 (id=1973): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x50, r1, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0xe}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x3}]}, 0x50}}, 0x0) 2.548043577s ago: executing program 3 (id=1974): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffd}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x7fffffffffffffff}]}, 0x108) 2.545593247s ago: executing program 1 (id=1975): close(0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x202000, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x6, 0x99, 0x9, 0x5, 0x6, 0x40000007, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x4, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x5, 0x7, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0x5, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x2, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x5, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x5, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0xd, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x10000068, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x8001, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x10000002, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x7, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0x8001, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x48001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0x80, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x6, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x1, 0x9da, 0x9, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x8, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8000008, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0x0, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0xd, 0x3, 0x88, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x5, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x4a0, 0xa, 0x0, 0x1, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000d40)={'syzkaller0\x00', @multicast}) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d80), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 2.535763888s ago: executing program 3 (id=1976): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000a40)=0x1, 0x4) connect$inet(r0, &(0x7f0000000a80)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000ac0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c80)='\x00\x00', 0x2}], 0x1}}], 0x1, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000001300)=0x7fffffff, 0x4) 2.470866129s ago: executing program 3 (id=1977): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x8e, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x58, 0x6, 0xff, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x16, 0x8, 0x1000, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xe1, 0x6}, @sack={0x5, 0x12, [0x8, 0x2, 0x8, 0x1]}, @timestamp={0x8, 0xa, 0x8, 0x10001}, @timestamp={0x8, 0xa, 0xfffffa76, 0xf3b7}, @generic={0x22, 0xe, "9539cda99496dacbee3cb2bb"}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) 2.117485478s ago: executing program 4 (id=1978): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f00000003c0), 0x3528a9c0}], 0x1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), &(0x7f0000000700), 0x10, 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) 1.564044781s ago: executing program 3 (id=1979): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000540)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000580)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000600)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x4, {0xa, 0x4e22, 0xe38, @private0={0xfc, 0x0, '\x00', 0x81}}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r5) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) 1.22768107s ago: executing program 4 (id=1980): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1801000026000103000000000000000005"], 0x118}], 0x1}, 0x0) recvfrom(r0, 0x0, 0x0, 0x2020, 0x0, 0x0) 126.454687ms ago: executing program 2 (id=1981): close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x3, 0x0, 0x0, 0xc}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000009c0)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a00)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x6, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000c00)={r3, r1}, 0x14) syz_emit_ethernet(0x1f, &(0x7f0000000040)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, @random="6487a2bed3d6", @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x6, 0x0, 0x4}}, {@llc={0x4, {@snap={0xaa, 0x1fe, "0e", "33e8cb", 0x1b, "8a"}}}}}, 0x0) 104.056448ms ago: executing program 1 (id=1982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0x6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x6975, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, 0x0, 0x24000084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) 103.877608ms ago: executing program 3 (id=1983): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x2, 0x3}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40800}, 0x44040) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000480)={'syzkaller0\x00', @link_local}) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000500)={&(0x7f0000000600)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) 103.331888ms ago: executing program 4 (id=1984): socket$inet_smc(0x2b, 0x1, 0x0) r0 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x8}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xc, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x3, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0000000e000000cc0002000600000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)='P', &(0x7f0000000380), 0x800000, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f0000000400)=""/231, &(0x7f0000000500), &(0x7f0000000540), 0x2, r1}, 0x38) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) syz_emit_ethernet(0x92, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x1a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x2000000, @rand_addr, {[@lsrr={0x83, 0x13, 0x0, [@local, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@multicast1=0xe0000089}, {@private}, {@local}, {@loopback}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 84.186808ms ago: executing program 2 (id=1985): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0) close(r0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000400), 0x56) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000480)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000680)=[{&(0x7f00000006c0)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 0s ago: executing program 0 (id=1986): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000300)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x40040) write$nci(r0, &(0x7f0000001700)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x5, {0x1, 0x9, "189bcc"}}, 0x8) write$nci(r0, &(0x7f0000001740)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)={0x24, r3, 0x1, 0x70bd27, 0x25dfdb7d, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c004}, 0x4000000) write$nci(r0, &(0x7f0000001840)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) kernel console output (not intermixed with test programs): T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.426741][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.436936][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.445557][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.454723][ T4231] Bluetooth: hci4: command 0x040f tx timeout [ 66.465638][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.474954][ T4231] Bluetooth: hci3: command 0x040f tx timeout [ 66.481069][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.492157][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.501443][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.514016][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.530754][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.541652][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.552331][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.562500][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.573103][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.583247][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.594747][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.606921][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.642344][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.650419][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.653266][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.663173][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.675610][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.685985][ T4192] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.695034][ T4192] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.707674][ T4192] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.717426][ T4192] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.807712][ T4213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.816453][ T1486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.823816][ T4213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.842815][ T1486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.876387][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.884564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.024622][ T4213] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.033161][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.044878][ T4213] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.049150][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.086323][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.097019][ T436] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.122534][ T4289] device syzkaller0 entered promiscuous mode [ 67.158456][ T4213] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.167565][ T436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.182784][ T4213] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.191959][ T436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.230836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.253736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.393673][ T4301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 67.527170][ T4310] batman_adv: batadv0: Adding interface: dummy0 [ 67.543975][ T4310] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.573580][ T4310] batman_adv: batadv0: Interface activated: dummy0 [ 67.676882][ T4310] batadv0: mtu less than device minimum [ 67.719007][ T4310] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.731646][ T4310] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.744081][ T4310] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.756431][ T4310] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.768788][ T4310] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.781165][ T4310] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.793437][ T4310] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.805718][ T4310] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.818064][ T4310] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 67.907997][ T4325] device syzkaller0 entered promiscuous mode [ 68.103759][ T4339] netlink: 8 bytes leftover after parsing attributes in process `syz.0.25'. [ 68.114255][ T4339] netlink: 12 bytes leftover after parsing attributes in process `syz.0.25'. [ 68.435463][ T4370] netlink: 24 bytes leftover after parsing attributes in process `syz.2.34'. [ 68.449314][ T4234] Bluetooth: hci0: command 0x0419 tx timeout [ 68.455391][ T4234] Bluetooth: hci2: command 0x0419 tx timeout [ 68.472727][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 68.540038][ T4234] Bluetooth: hci3: command 0x0419 tx timeout [ 68.554377][ T4234] Bluetooth: hci4: command 0x0419 tx timeout [ 68.563210][ T4383] netlink: 'syz.0.40': attribute type 1 has an invalid length. [ 68.603461][ T4384] device syzkaller0 entered promiscuous mode [ 68.603871][ T4386] syz.4.42 uses obsolete (PF_INET,SOCK_PACKET) [ 68.718938][ T4389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.44'. [ 68.727799][ T4389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.44'. [ 68.815862][ T4399] netlink: 'syz.2.47': attribute type 11 has an invalid length. [ 69.220455][ T4426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.54'. [ 69.234608][ T4426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.54'. [ 69.307393][ T4435] device syzkaller0 entered promiscuous mode [ 69.370585][ T4437] device syzkaller0 entered promiscuous mode [ 69.439855][ T4443] device syzkaller0 entered promiscuous mode [ 69.465019][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.475984][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.483991][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.630891][ T4456] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 69.649447][ T4456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.67'. [ 69.769944][ T4465] device syzkaller0 entered promiscuous mode [ 69.859451][ T4472] device syzkaller0 entered promiscuous mode [ 70.055527][ T4200] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 70.273109][ T4513] device syzkaller0 entered promiscuous mode [ 70.415962][ T4518] tc action pedit 'at' offset 2 out of bounds [ 70.422341][ T4518] tc action pedit 'at' offset 2 out of bounds [ 70.428435][ T4518] tc action pedit 'at' offset 2 out of bounds [ 70.434567][ T4518] tc action pedit 'at' offset 2 out of bounds [ 70.440676][ T4518] tc action pedit 'at' offset 2 out of bounds [ 70.446755][ T4518] tc action pedit 'at' offset 2 out of bounds [ 70.452891][ T4518] tc action pedit 'at' offset 2 out of bounds [ 70.458994][ T4518] tc action pedit 'at' offset 2 out of bounds [ 70.465064][ T4518] tc action pedit 'at' offset 2 out of bounds [ 70.471208][ T4518] tc action pedit 'at' offset 2 out of bounds [ 70.816853][ T4552] device syzkaller0 entered promiscuous mode [ 70.988119][ T4200] Bluetooth: unknown link type 231 [ 71.107262][ T4564] device syzkaller0 entered promiscuous mode [ 71.263271][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.271228][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.290199][ T4582] device syzkaller0 entered promiscuous mode [ 71.308609][ T4584] device syzkaller0 entered promiscuous mode [ 71.395061][ T4586] device syzkaller0 entered promiscuous mode [ 71.563862][ T4603] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.775284][ T4619] device syzkaller0 entered promiscuous mode [ 71.814769][ T4621] device syzkaller0 entered promiscuous mode [ 71.957034][ T4630] device syzkaller0 entered promiscuous mode [ 72.180226][ T4651] Zero length message leads to an empty skb [ 72.234996][ T4659] tipc: Started in network mode [ 72.245927][ T4659] tipc: Node identity 327e2d921eb7, cluster identity 4711 [ 72.263151][ T4659] tipc: Enabled bearer , priority 0 [ 72.278052][ T4659] device syzkaller0 entered promiscuous mode [ 72.321737][ T4659] tipc: Resetting bearer [ 72.346737][ T4656] tipc: Resetting bearer [ 72.380746][ T4656] tipc: Disabling bearer [ 72.495285][ T4672] __nla_validate_parse: 7 callbacks suppressed [ 72.495299][ T4672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.159'. [ 72.516537][ T4675] netlink: 404 bytes leftover after parsing attributes in process `syz.2.161'. [ 72.545369][ T4672] netlink: 4 bytes leftover after parsing attributes in process `syz.0.159'. [ 72.606558][ T4677] netlink: 'syz.0.159': attribute type 4 has an invalid length. [ 72.641257][ T4677] netlink: 152 bytes leftover after parsing attributes in process `syz.0.159'. [ 72.674185][ T4677] .`: renamed from bond0 [ 72.697661][ T4672] syz.0.159 (4672) used greatest stack depth: 20944 bytes left [ 72.732967][ T4679] device syzkaller0 entered promiscuous mode [ 72.848148][ T4681] device syzkaller0 entered promiscuous mode [ 72.895752][ T4683] device syzkaller0 entered promiscuous mode [ 72.964812][ T4690] device syzkaller0 entered promiscuous mode [ 73.008945][ T4234] Bluetooth: hci3: command 0x0409 tx timeout [ 73.083589][ T4698] netlink: 32 bytes leftover after parsing attributes in process `syz.4.168'. [ 73.127162][ T4702] device syzkaller0 entered promiscuous mode [ 73.221828][ T4710] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.325175][ T4717] netlink: 404 bytes leftover after parsing attributes in process `syz.1.173'. [ 73.391278][ T4721] device syzkaller1 entered promiscuous mode [ 73.420371][ T4721] net_ratelimit: 17 callbacks suppressed [ 73.420387][ T4721] 0: reclassify loop, rule prio 0, protocol 03 [ 73.434204][ T4725] device syzkaller0 entered promiscuous mode [ 73.604293][ T4729] device syzkaller0 entered promiscuous mode [ 73.656326][ T4730] device syzkaller0 entered promiscuous mode [ 73.845456][ T4742] device syzkaller0 entered promiscuous mode [ 73.951538][ T4749] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 74.007568][ T4755] netlink: 404 bytes leftover after parsing attributes in process `syz.3.188'. [ 74.030216][ T4751] device syzkaller0 entered promiscuous mode [ 74.231095][ T4753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'. [ 74.270927][ T4766] device syzkaller0 entered promiscuous mode [ 74.278017][ T4753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.187'. [ 74.290700][ T4753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.187'. [ 74.304426][ T4753] device bridge1 entered promiscuous mode [ 74.407255][ T4771] device syzkaller0 entered promiscuous mode [ 74.545477][ T4777] device syzkaller0 entered promiscuous mode [ 74.670658][ T4781] device syzkaller0 entered promiscuous mode [ 74.813216][ T4789] device syzkaller0 entered promiscuous mode [ 74.902248][ T4799] device syzkaller0 entered promiscuous mode [ 74.956338][ T4283] tipc: Subscription rejected, illegal request [ 75.021293][ T4805] device syzkaller0 entered promiscuous mode [ 75.208151][ T4814] device syzkaller0 entered promiscuous mode [ 75.236814][ T4819] device syzkaller0 entered promiscuous mode [ 75.378628][ T4824] device syzkaller0 entered promiscuous mode [ 75.697010][ T4846] device syzkaller0 entered promiscuous mode [ 75.912302][ T4862] device syzkaller0 entered promiscuous mode [ 75.948180][ T4867] device syzkaller0 entered promiscuous mode [ 76.145582][ T4880] device syzkaller0 entered promiscuous mode [ 76.156166][ T4886] IPVS: Error joining to the multicast group [ 76.257677][ T4894] device syzkaller0 entered promiscuous mode [ 76.382373][ T4898] device syzkaller0 entered promiscuous mode [ 76.434533][ T4902] device syzkaller0 entered promiscuous mode [ 76.460054][ T4904] device syzkaller0 entered promiscuous mode [ 76.695183][ T4925] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 76.833947][ T4934] device syzkaller0 entered promiscuous mode [ 76.844309][ T4931] tc action pedit offset must be on 32 bit boundaries [ 77.103272][ T4949] device syzkaller0 entered promiscuous mode [ 77.193440][ T4953] device syzkaller0 entered promiscuous mode [ 77.289254][ T4957] device syzkaller0 entered promiscuous mode [ 77.513050][ T4972] device syzkaller0 entered promiscuous mode [ 77.581285][ T4978] __nla_validate_parse: 13 callbacks suppressed [ 77.581299][ T4978] netlink: 84 bytes leftover after parsing attributes in process `syz.3.279'. [ 77.590517][ T4980] netlink: 404 bytes leftover after parsing attributes in process `syz.0.280'. [ 77.695894][ T4984] device syzkaller0 entered promiscuous mode [ 77.729741][ T4231] Bluetooth: hci0: command 0x0c13 tx timeout [ 77.754825][ T4988] device syzkaller0 entered promiscuous mode [ 77.995296][ T5003] netlink: 404 bytes leftover after parsing attributes in process `syz.2.292'. [ 78.012638][ T5004] device syzkaller0 entered promiscuous mode [ 78.158697][ T5011] device syzkaller0 entered promiscuous mode [ 78.228382][ T5013] device syzkaller0 entered promiscuous mode [ 78.333670][ T5019] ieee802154 phy0 wpan0: encryption failed: -22 [ 78.359826][ T5018] netlink: 84 bytes leftover after parsing attributes in process `syz.4.298'. [ 78.501035][ T5029] netlink: 404 bytes leftover after parsing attributes in process `syz.4.304'. [ 78.558287][ T5031] netlink: 20 bytes leftover after parsing attributes in process `syz.3.305'. [ 78.569757][ T5031] 8021q: VLANs not supported on caif0 [ 78.610763][ T5036] device syzkaller0 entered promiscuous mode [ 78.683349][ T5044] device syzkaller0 entered promiscuous mode [ 78.695133][ T5041] device syzkaller0 entered promiscuous mode [ 78.928080][ T5057] netlink: 84 bytes leftover after parsing attributes in process `syz.4.315'. [ 78.967379][ T5064] netlink: 404 bytes leftover after parsing attributes in process `syz.1.318'. [ 79.167373][ T5074] device syzkaller0 entered promiscuous mode [ 79.211512][ T5076] device syzkaller0 entered promiscuous mode [ 79.228945][ T5080] device syzkaller0 entered promiscuous mode [ 79.237732][ T5078] device syzkaller0 entered promiscuous mode [ 79.306419][ T5082] netlink: 108 bytes leftover after parsing attributes in process `syz.1.327'. [ 79.384099][ T5085] netlink: 228 bytes leftover after parsing attributes in process `syz.0.328'. [ 79.662159][ T5103] device syzkaller0 entered promiscuous mode [ 79.774597][ T5105] device syzkaller0 entered promiscuous mode [ 79.847457][ T5111] device syzkaller0 entered promiscuous mode [ 79.875057][ T5114] device syzkaller0 entered promiscuous mode [ 80.151802][ T5135] device syzkaller0 entered promiscuous mode [ 80.222356][ T5139] device syzkaller0 entered promiscuous mode [ 80.315717][ T5143] device syzkaller0 entered promiscuous mode [ 80.329840][ T5145] device syzkaller0 entered promiscuous mode [ 80.437809][ T5153] qfq: no options [ 80.596735][ T5165] device syzkaller0 entered promiscuous mode [ 80.633009][ T5168] device syzkaller0 entered promiscuous mode [ 80.812282][ T5180] device syzkaller0 entered promiscuous mode [ 80.966730][ T5189] qfq: no options [ 81.494310][ T13] cfg80211: failed to load regulatory.db [ 82.045393][ T5215] device syzkaller0 entered promiscuous mode [ 82.055685][ T5216] device syzkaller0 entered promiscuous mode [ 82.259469][ T5222] device syzkaller0 entered promiscuous mode [ 82.473795][ T5239] qfq: no options [ 82.597799][ T5251] device syzkaller0 entered promiscuous mode [ 82.624908][ T5253] device syzkaller0 entered promiscuous mode [ 82.669120][ T5255] __nla_validate_parse: 12 callbacks suppressed [ 82.669134][ T5255] netlink: 84 bytes leftover after parsing attributes in process `syz.2.396'. [ 82.823889][ T5265] netlink: 404 bytes leftover after parsing attributes in process `syz.0.398'. [ 82.903141][ T5271] device syzkaller0 entered promiscuous mode [ 82.935811][ T5269] device syzkaller0 entered promiscuous mode [ 83.205685][ T5292] netlink: 84 bytes leftover after parsing attributes in process `syz.0.408'. [ 83.225519][ T5292] qfq: no options [ 83.235784][ T5291] device syzkaller0 entered promiscuous mode [ 83.326451][ T5297] netlink: 404 bytes leftover after parsing attributes in process `syz.3.411'. [ 83.418822][ T5301] device syzkaller0 entered promiscuous mode [ 83.522415][ T5306] tipc: Started in network mode [ 83.535435][ T5306] tipc: Node identity 22333efc18ef, cluster identity 4711 [ 83.547482][ T5306] tipc: Enabled bearer , priority 0 [ 83.570491][ T5306] device syzkaller0 entered promiscuous mode [ 83.638041][ T5306] tipc: Resetting bearer [ 83.668436][ T5305] tipc: Resetting bearer [ 83.711862][ T5305] tipc: Disabling bearer [ 83.731558][ T5319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 83.749687][ T5319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 83.783706][ T5326] netlink: 'syz.1.421': attribute type 4 has an invalid length. [ 83.809040][ T5326] netlink: 152 bytes leftover after parsing attributes in process `syz.1.421'. [ 83.835514][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.423'. [ 83.849169][ T5326] .`: renamed from bond0 [ 83.853945][ T5328] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 83.954380][ T5336] netlink: 404 bytes leftover after parsing attributes in process `syz.2.426'. [ 84.021767][ T5337] device syzkaller0 entered promiscuous mode [ 84.136759][ T5340] device syzkaller0 entered promiscuous mode [ 84.203747][ T5344] device syzkaller0 entered promiscuous mode [ 84.285548][ T5347] device syzkaller0 entered promiscuous mode [ 84.392119][ T5351] device syzkaller0 entered promiscuous mode [ 84.496623][ T5355] qfq: no options [ 84.605786][ T5358] qfq: no options [ 84.872483][ T5369] device syzkaller0 entered promiscuous mode [ 84.894776][ T5370] device syzkaller0 entered promiscuous mode [ 84.908675][ T5373] device syzkaller0 entered promiscuous mode [ 85.193394][ T5379] device syzkaller0 entered promiscuous mode [ 85.209356][ T5383] qfq: no options [ 85.244356][ T5382] device syzkaller0 entered promiscuous mode [ 85.289016][ T5385] qfq: no options [ 85.432414][ T5392] netlink: 'syz.1.450': attribute type 4 has an invalid length. [ 85.500821][ T5397] tipc: Started in network mode [ 85.506057][ T5397] tipc: Node identity 8255ac870144, cluster identity 4711 [ 85.551317][ T5397] tipc: Enabled bearer , priority 0 [ 85.576398][ T5403] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 85.656954][ T5397] tipc: Resetting bearer [ 85.665736][ T5405] device syzkaller0 entered promiscuous mode [ 85.691969][ T5393] tipc: Disabling bearer [ 85.967977][ T5415] device syzkaller0 entered promiscuous mode [ 85.990269][ T5417] device syzkaller0 entered promiscuous mode [ 86.114428][ T5419] device syzkaller0 entered promiscuous mode [ 86.292829][ T5425] device syzkaller0 entered promiscuous mode [ 86.358827][ T5429] qfq: no options [ 86.480582][ T5433] qfq: no options [ 86.535179][ T5437] device syzkaller0 entered promiscuous mode [ 86.618356][ T5445] netlink: 'syz.0.469': attribute type 4 has an invalid length. [ 86.721095][ T5448] device syzkaller0 entered promiscuous mode [ 86.806134][ T5451] device syzkaller0 entered promiscuous mode [ 86.855923][ T5453] device syzkaller0 entered promiscuous mode [ 87.039702][ T5460] tipc: Enabled bearer , priority 0 [ 87.067390][ T5460] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 87.087062][ T5462] device syzkaller0 entered promiscuous mode [ 87.099682][ T5460] tipc: Resetting bearer [ 87.144284][ T5458] tipc: Disabling bearer [ 87.208849][ T5470] netlink: 'syz.2.481': attribute type 1 has an invalid length. [ 87.325790][ T5476] device syzkaller0 entered promiscuous mode [ 87.367942][ T5478] qfq: no options [ 87.536829][ T5486] device syzkaller0 entered promiscuous mode [ 87.595919][ T5488] device syzkaller0 entered promiscuous mode [ 87.754160][ T5490] device syzkaller0 entered promiscuous mode [ 87.837866][ T5498] __nla_validate_parse: 30 callbacks suppressed [ 87.837882][ T5498] netlink: 404 bytes leftover after parsing attributes in process `syz.0.493'. [ 87.876795][ T5500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.492'. [ 87.907080][ T5500] netlink: 'syz.1.492': attribute type 4 has an invalid length. [ 87.920652][ T5500] netlink: 152 bytes leftover after parsing attributes in process `syz.1.492'. [ 87.931807][ T5503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.494'. [ 88.005661][ T5508] device syzkaller0 entered promiscuous mode [ 88.020851][ T5505] device syzkaller0 entered promiscuous mode [ 88.057710][ T5510] netlink: 'syz.0.496': attribute type 1 has an invalid length. [ 88.067012][ T5510] netlink: 84 bytes leftover after parsing attributes in process `syz.0.496'. [ 88.076746][ T5511] tipc: Enabled bearer , priority 0 [ 88.086991][ T5511] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 88.098278][ T5511] tipc: Resetting bearer [ 88.107130][ T5509] tipc: Disabling bearer [ 88.204342][ T5515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.500'. [ 88.229799][ T5515] netlink: 16 bytes leftover after parsing attributes in process `syz.0.500'. [ 88.254994][ T5519] device syzkaller0 entered promiscuous mode [ 88.333228][ T5523] netlink: 84 bytes leftover after parsing attributes in process `syz.4.503'. [ 88.349223][ T5524] device syzkaller0 entered promiscuous mode [ 88.365249][ T5523] qfq: no options [ 88.467052][ T5529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 88.489785][ T5531] netlink: 404 bytes leftover after parsing attributes in process `syz.1.506'. [ 88.519847][ T5529] netlink: 'syz.4.507': attribute type 4 has an invalid length. [ 88.565316][ T5529] .`: renamed from bond0 [ 88.613687][ T5534] device syzkaller0 entered promiscuous mode [ 88.714380][ T5536] device syzkaller0 entered promiscuous mode [ 88.752585][ T5539] device syzkaller0 entered promiscuous mode [ 88.814851][ T5542] netlink: 'syz.2.512': attribute type 1 has an invalid length. [ 88.830074][ T5547] tipc: Enabled bearer , priority 0 [ 88.851227][ T5547] device syzkaller0 entered promiscuous mode [ 88.867758][ T5547] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 88.893673][ T5547] tipc: Resetting bearer [ 88.900932][ T5551] device syzkaller0 entered promiscuous mode [ 88.926388][ T5546] tipc: Resetting bearer [ 88.967493][ T5546] tipc: Disabling bearer [ 89.029828][ T5557] device syzkaller0 entered promiscuous mode [ 89.149596][ T5566] qfq: no options [ 89.414936][ T5581] netlink: 'syz.2.525': attribute type 4 has an invalid length. [ 89.453017][ T5581] .`: renamed from bond0 [ 89.475600][ T5584] device syzkaller0 entered promiscuous mode [ 89.532967][ T5586] device syzkaller0 entered promiscuous mode [ 89.562254][ T5588] device syzkaller0 entered promiscuous mode [ 89.620754][ T5591] netlink: 'syz.0.529': attribute type 1 has an invalid length. [ 89.647999][ T5593] device syzkaller0 entered promiscuous mode [ 89.713612][ T5595] device syzkaller0 entered promiscuous mode [ 89.765756][ T5597] qfq: no options [ 89.795889][ T5599] device syzkaller0 entered promiscuous mode [ 89.811916][ T5599] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 90.011878][ T5617] netlink: 'syz.3.542': attribute type 1 has an invalid length. [ 90.078659][ T5620] device syzkaller0 entered promiscuous mode [ 90.155364][ T5630] device syzkaller0 entered promiscuous mode [ 90.303698][ T5634] device syzkaller0 entered promiscuous mode [ 90.345972][ T5640] netlink: 'syz.1.543': attribute type 4 has an invalid length. [ 90.377644][ T5638] device syzkaller0 entered promiscuous mode [ 90.431999][ T5642] device syzkaller0 entered promiscuous mode [ 90.508401][ T5648] qfq: no options [ 90.645658][ T5660] device syzkaller0 entered promiscuous mode [ 90.661039][ T5658] netlink: 'syz.1.554': attribute type 1 has an invalid length. [ 90.714563][ T5661] device syzkaller0 entered promiscuous mode [ 90.732615][ T5661] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 91.015128][ T5678] device syzkaller0 entered promiscuous mode [ 91.028573][ T5680] device syzkaller0 entered promiscuous mode [ 91.250652][ T5689] device syzkaller0 entered promiscuous mode [ 91.279358][ T5687] device syzkaller0 entered promiscuous mode [ 91.360380][ T5693] netlink: 'syz.1.563': attribute type 4 has an invalid length. [ 91.465114][ T5699] qfq: no options [ 91.484500][ T5699] qfq: no options [ 91.521135][ T5702] device syzkaller0 entered promiscuous mode [ 91.544885][ T5705] netlink: 'syz.2.569': attribute type 1 has an invalid length. [ 91.623442][ T5708] device syzkaller0 entered promiscuous mode [ 91.652981][ T5708] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 91.680761][ T5711] device syzkaller0 entered promiscuous mode [ 91.948474][ T5726] device syzkaller0 entered promiscuous mode [ 92.153920][ T5737] device syzkaller0 entered promiscuous mode [ 92.207110][ T5736] device syzkaller0 entered promiscuous mode [ 92.365180][ T5746] qfq: no options [ 92.382867][ T5748] device syzkaller0 entered promiscuous mode [ 92.396296][ T5746] qfq: no options [ 92.415453][ T5752] netlink: 'syz.2.583': attribute type 1 has an invalid length. [ 92.446272][ T5750] netlink: 'syz.3.584': attribute type 4 has an invalid length. [ 92.457891][ T5750] .`: renamed from bond0 [ 92.505208][ T5754] device syzkaller0 entered promiscuous mode [ 92.535192][ T5756] device syzkaller0 entered promiscuous mode [ 92.556268][ T5756] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 92.973135][ T5778] device syzkaller0 entered promiscuous mode [ 93.034982][ T5784] __nla_validate_parse: 35 callbacks suppressed [ 93.035006][ T5784] netlink: 28 bytes leftover after parsing attributes in process `syz.0.593'. [ 93.078100][ T5786] device syzkaller0 entered promiscuous mode [ 93.149496][ T5790] device syzkaller0 entered promiscuous mode [ 93.169539][ T5792] qfq: no options [ 93.197681][ T5792] netlink: 84 bytes leftover after parsing attributes in process `syz.0.596'. [ 93.207542][ T5792] qfq: no options [ 93.245940][ T5794] netlink: 84 bytes leftover after parsing attributes in process `syz.1.597'. [ 93.289399][ T5796] device syzkaller0 entered promiscuous mode [ 93.326158][ T5798] device syzkaller0 entered promiscuous mode [ 93.372906][ T5805] netlink: 404 bytes leftover after parsing attributes in process `syz.1.601'. [ 93.382277][ T5804] netlink: 8 bytes leftover after parsing attributes in process `syz.0.600'. [ 93.395286][ T5800] netlink: 152 bytes leftover after parsing attributes in process `syz.0.600'. [ 93.486830][ T5808] device syzkaller0 entered promiscuous mode [ 93.504932][ T5808] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 93.535478][ T5809] device syzkaller0 entered promiscuous mode [ 93.729892][ T5818] device syzkaller0 entered promiscuous mode [ 93.834501][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.891863][ T5827] device syzkaller0 entered promiscuous mode [ 93.965829][ T5831] validate_nla: 3 callbacks suppressed [ 93.965843][ T5831] netlink: 'syz.1.611': attribute type 1 has an invalid length. [ 93.995808][ T5829] device syzkaller0 entered promiscuous mode [ 94.005307][ T5831] netlink: 84 bytes leftover after parsing attributes in process `syz.1.611'. [ 94.015555][ T5831] qfq: no options [ 94.021867][ T5833] device syzkaller0 entered promiscuous mode [ 94.077856][ T5836] device syzkaller0 entered promiscuous mode [ 94.140317][ T5839] netlink: 404 bytes leftover after parsing attributes in process `syz.2.615'. [ 94.145508][ T5840] netlink: 'syz.4.614': attribute type 1 has an invalid length. [ 94.165092][ T5840] qfq: no options [ 94.170235][ T5840] netlink: 84 bytes leftover after parsing attributes in process `syz.4.614'. [ 94.246658][ T5849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.617'. [ 94.264993][ T5849] netlink: 'syz.3.617': attribute type 4 has an invalid length. [ 94.287933][ T5851] device syzkaller0 entered promiscuous mode [ 94.354099][ T5854] netlink: 'syz.4.620': attribute type 1 has an invalid length. [ 94.384051][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.418106][ T5857] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 94.651172][ T5864] device syzkaller0 entered promiscuous mode [ 94.775982][ T5868] device syzkaller0 entered promiscuous mode [ 94.832214][ T5866] device syzkaller0 entered promiscuous mode [ 94.874385][ T5878] device syzkaller0 entered promiscuous mode [ 94.962440][ T5880] netlink: 'syz.4.626': attribute type 1 has an invalid length. [ 94.975506][ T5882] device syzkaller0 entered promiscuous mode [ 94.985487][ T5880] qfq: no options [ 95.051404][ T5886] device syzkaller0 entered promiscuous mode [ 95.114222][ T5890] netlink: 'syz.4.631': attribute type 1 has an invalid length. [ 95.147483][ T5890] qfq: no options [ 95.184549][ T5894] netlink: 'syz.2.632': attribute type 1 has an invalid length. [ 95.209945][ T5894] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.269689][ T5904] netlink: 'syz.0.634': attribute type 4 has an invalid length. [ 95.454224][ T5906] device syzkaller0 entered promiscuous mode [ 95.586704][ T5914] device syzkaller0 entered promiscuous mode [ 95.686290][ T5916] device syzkaller0 entered promiscuous mode [ 95.806714][ T5927] device syzkaller0 entered promiscuous mode [ 95.852002][ T5929] device syzkaller0 entered promiscuous mode [ 95.894868][ T5931] netlink: 'syz.0.643': attribute type 1 has an invalid length. [ 95.909662][ T5931] qfq: no options [ 95.961736][ T5935] netlink: 'syz.2.646': attribute type 1 has an invalid length. [ 95.989553][ T5939] 8021q: adding VLAN 0 to HW filter on device bond1 [ 95.997170][ T5935] qfq: no options [ 96.106112][ T5943] device syzkaller0 entered promiscuous mode [ 96.251343][ T5948] device syzkaller0 entered promiscuous mode [ 96.334305][ T5956] device syzkaller0 entered promiscuous mode [ 96.435719][ T5961] device syzkaller0 entered promiscuous mode [ 96.596727][ T5965] device syzkaller0 entered promiscuous mode [ 96.629125][ T5971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.637229][ T5967] device syzkaller0 entered promiscuous mode [ 96.718167][ T5975] qfq: no options [ 96.870628][ T5977] device syzkaller0 entered promiscuous mode [ 97.052501][ T5992] device syzkaller0 entered promiscuous mode [ 97.127178][ T5996] device syzkaller0 entered promiscuous mode [ 97.315799][ T6010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.355629][ T6015] device syzkaller0 entered promiscuous mode [ 97.548420][ T6023] device syzkaller0 entered promiscuous mode [ 97.647978][ T6031] device syzkaller0 entered promiscuous mode [ 97.665778][ T6029] qfq: no options [ 97.695291][ T6033] device syzkaller0 entered promiscuous mode [ 97.861905][ T6041] device syzkaller0 entered promiscuous mode [ 97.956953][ T6048] 8021q: adding VLAN 0 to HW filter on device bond2 [ 97.990747][ T6045] tipc: Enabled bearer , priority 0 [ 98.037002][ T6045] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 98.102344][ T6044] tipc: Disabling bearer [ 98.121463][ T6056] device syzkaller0 entered promiscuous mode [ 98.286549][ T6072] device syzkaller0 entered promiscuous mode [ 98.492663][ T6081] device syzkaller0 entered promiscuous mode [ 98.613360][ T6083] device syzkaller0 entered promiscuous mode [ 98.687062][ T6086] __nla_validate_parse: 20 callbacks suppressed [ 98.687077][ T6086] netlink: 404 bytes leftover after parsing attributes in process `syz.3.694'. [ 98.748568][ T6088] netlink: 84 bytes leftover after parsing attributes in process `syz.1.695'. [ 98.775067][ T6088] qfq: no options [ 98.784824][ T6092] device syzkaller0 entered promiscuous mode [ 98.813783][ T6094] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 98.824731][ T6094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 98.850778][ T6094] netlink: 152 bytes leftover after parsing attributes in process `syz.0.698'. [ 98.908084][ T6098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.924187][ T6100] device syzkaller0 entered promiscuous mode [ 98.932292][ T6103] tipc: Started in network mode [ 98.938078][ T6103] tipc: Node identity 46c0883683d2, cluster identity 4711 [ 98.947753][ T6103] tipc: Enabled bearer , priority 0 [ 99.008278][ T6103] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 99.051463][ T6102] tipc: Disabling bearer [ 99.062391][ T6107] device syzkaller0 entered promiscuous mode [ 99.120760][ T6109] device syzkaller0 entered promiscuous mode [ 99.171543][ T6118] netlink: 404 bytes leftover after parsing attributes in process `syz.0.707'. [ 99.419685][ T6128] device syzkaller0 entered promiscuous mode [ 99.452667][ T6135] validate_nla: 14 callbacks suppressed [ 99.452683][ T6135] netlink: 'syz.2.710': attribute type 1 has an invalid length. [ 99.588880][ T6139] netlink: 'syz.4.712': attribute type 1 has an invalid length. [ 99.620485][ T6139] netlink: 84 bytes leftover after parsing attributes in process `syz.4.712'. [ 99.651795][ T6139] qfq: no options [ 99.672454][ T6141] device syzkaller0 entered promiscuous mode [ 99.723390][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.3.714'. [ 99.743645][ T6147] netlink: 'syz.3.714': attribute type 4 has an invalid length. [ 99.768913][ T6147] netlink: 152 bytes leftover after parsing attributes in process `syz.3.714'. [ 99.808916][ T6150] netlink: 'syz.4.716': attribute type 1 has an invalid length. [ 99.882231][ T6150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.930444][ T6157] device syzkaller0 entered promiscuous mode [ 99.959613][ T6155] device syzkaller0 entered promiscuous mode [ 100.003873][ T6162] netlink: 404 bytes leftover after parsing attributes in process `syz.4.719'. [ 100.059405][ T6160] device syzkaller0 entered promiscuous mode [ 100.158264][ T6166] tipc: Enabled bearer , priority 0 [ 100.166908][ T6166] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 100.203954][ T6165] tipc: Disabling bearer [ 100.222890][ T6168] netlink: 'syz.4.723': attribute type 1 has an invalid length. [ 100.346844][ T6180] device syzkaller0 entered promiscuous mode [ 100.448913][ T6186] device syzkaller0 entered promiscuous mode [ 100.617998][ T6195] netlink: 'syz.2.729': attribute type 1 has an invalid length. [ 100.664472][ T6195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 100.672839][ T6193] netlink: 'syz.3.728': attribute type 1 has an invalid length. [ 100.698771][ T6193] qfq: no options [ 100.722252][ T6200] device syzkaller0 entered promiscuous mode [ 100.736289][ T6203] device syzkaller0 entered promiscuous mode [ 100.840198][ T6210] device syzkaller0 entered promiscuous mode [ 100.964368][ T6214] netlink: 'syz.4.737': attribute type 1 has an invalid length. [ 100.986241][ T6219] netlink: 'syz.3.736': attribute type 4 has an invalid length. [ 101.034506][ T6220] device syzkaller0 entered promiscuous mode [ 101.042811][ T6217] tipc: Enabled bearer , priority 0 [ 101.087228][ T6217] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 101.137854][ T6216] tipc: Disabling bearer [ 101.282715][ T6238] netlink: 'syz.0.743': attribute type 1 has an invalid length. [ 101.349774][ T6238] 8021q: adding VLAN 0 to HW filter on device bond3 [ 101.531497][ T6249] device syzkaller0 entered promiscuous mode [ 101.671799][ T6255] qfq: no options [ 101.727736][ T6257] device syzkaller0 entered promiscuous mode [ 101.760240][ T6259] device syzkaller0 entered promiscuous mode [ 101.807344][ T6261] device syzkaller0 entered promiscuous mode [ 101.877978][ T6265] device syzkaller0 entered promiscuous mode [ 101.978435][ T6273] 8021q: adding VLAN 0 to HW filter on device bond3 [ 102.008617][ T6270] tipc: Started in network mode [ 102.023793][ T6270] tipc: Node identity 061e4653c533, cluster identity 4711 [ 102.032083][ T6270] tipc: Enabled bearer , priority 0 [ 102.041331][ T6270] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 102.078006][ T6268] tipc: Disabling bearer [ 102.394002][ T6296] device syzkaller0 entered promiscuous mode [ 102.417624][ T6298] device syzkaller0 entered promiscuous mode [ 102.470025][ T6300] device syzkaller0 entered promiscuous mode [ 102.618604][ T6305] qfq: no options [ 102.634587][ T6305] qfq: no options [ 102.648097][ T6306] device syzkaller0 entered promiscuous mode [ 102.734649][ T6310] 8021q: adding VLAN 0 to HW filter on device bond4 [ 102.778188][ T6315] tipc: Enabled bearer , priority 0 [ 102.804543][ T6315] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 102.817471][ T6314] tipc: Disabling bearer [ 102.857312][ T6323] device syzkaller0 entered promiscuous mode [ 102.896499][ T6325] device syzkaller0 entered promiscuous mode [ 103.037066][ T6331] device syzkaller0 entered promiscuous mode [ 103.221755][ T6337] qfq: no options [ 103.239191][ T6337] qfq: no options [ 103.300948][ T6341] device syzkaller0 entered promiscuous mode [ 103.342900][ T6343] 8021q: adding VLAN 0 to HW filter on device bond4 [ 103.418518][ T6350] tipc: Enabling of bearer rejected, failed to enable media [ 103.523290][ T6354] device syzkaller0 entered promiscuous mode [ 103.614776][ T6361] device syzkaller0 entered promiscuous mode [ 103.794061][ T6371] device syzkaller0 entered promiscuous mode [ 103.823493][ T6376] __nla_validate_parse: 17 callbacks suppressed [ 103.823507][ T6376] netlink: 152 bytes leftover after parsing attributes in process `syz.3.791'. [ 103.865337][ T6378] netlink: 404 bytes leftover after parsing attributes in process `syz.4.793'. [ 103.945771][ T6381] qfq: no options [ 103.951054][ T6381] netlink: 84 bytes leftover after parsing attributes in process `syz.3.794'. [ 103.962160][ T6381] qfq: no options [ 104.116892][ T6390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.165346][ T6392] device syzkaller0 entered promiscuous mode [ 104.245615][ T6394] device syzkaller0 entered promiscuous mode [ 104.261553][ T6396] device syzkaller0 entered promiscuous mode [ 104.334844][ T6400] tipc: Enabling of bearer rejected, failed to enable media [ 104.465996][ T6411] netlink: 404 bytes leftover after parsing attributes in process `syz.0.805'. [ 104.642907][ T6416] validate_nla: 16 callbacks suppressed [ 104.642922][ T6416] netlink: 'syz.0.806': attribute type 1 has an invalid length. [ 104.679215][ T6419] netlink: 'syz.3.807': attribute type 4 has an invalid length. [ 104.704766][ T6419] netlink: 152 bytes leftover after parsing attributes in process `syz.3.807'. [ 104.765003][ T6421] device syzkaller0 entered promiscuous mode [ 104.837005][ T6425] netlink: 'syz.3.810': attribute type 1 has an invalid length. [ 104.861318][ T6429] netlink: 'syz.0.811': attribute type 1 has an invalid length. [ 104.884038][ T6429] 8021q: adding VLAN 0 to HW filter on device bond5 [ 104.902566][ T6427] device syzkaller0 entered promiscuous mode [ 104.920877][ T6429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.811'. [ 104.936686][ T6425] qfq: no options [ 105.045986][ T6435] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 105.122951][ T6438] netlink: 404 bytes leftover after parsing attributes in process `syz.2.816'. [ 105.128917][ T6441] device syzkaller0 entered promiscuous mode [ 105.190773][ T6440] device syzkaller0 entered promiscuous mode [ 105.268659][ T6445] tipc: Enabling of bearer rejected, failed to enable media [ 105.293101][ T6447] netlink: 'syz.1.820': attribute type 4 has an invalid length. [ 105.318930][ T6447] netlink: 152 bytes leftover after parsing attributes in process `syz.1.820'. [ 105.354768][ T6450] netlink: 'syz.4.821': attribute type 1 has an invalid length. [ 105.510130][ T6462] device syzkaller0 entered promiscuous mode [ 105.622621][ T6469] netlink: 'syz.4.825': attribute type 1 has an invalid length. [ 105.643655][ T6469] 8021q: adding VLAN 0 to HW filter on device bond5 [ 105.657929][ T6469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.825'. [ 105.694543][ T6472] device syzkaller0 entered promiscuous mode [ 105.740035][ T6476] netlink: 404 bytes leftover after parsing attributes in process `syz.4.828'. [ 105.744654][ T6474] netlink: 'syz.3.827': attribute type 1 has an invalid length. [ 105.787579][ T6474] qfq: no options [ 105.888708][ T6480] device syzkaller0 entered promiscuous mode [ 105.951137][ T6485] device syzkaller0 entered promiscuous mode [ 106.037717][ T6488] netlink: 'syz.4.833': attribute type 4 has an invalid length. [ 106.174498][ T6490] netlink: 'syz.3.834': attribute type 1 has an invalid length. [ 106.221742][ T6494] tipc: Enabling of bearer rejected, failed to enable media [ 106.245660][ T6490] qfq: no options [ 106.302921][ T6496] device syzkaller0 entered promiscuous mode [ 106.536904][ T6510] device syzkaller0 entered promiscuous mode [ 106.648938][ T6516] 8021q: adding VLAN 0 to HW filter on device bond4 [ 106.665499][ T6517] device syzkaller0 entered promiscuous mode [ 106.722950][ T6521] device syzkaller0 entered promiscuous mode [ 106.737284][ T6522] device syzkaller0 entered promiscuous mode [ 106.793654][ T6524] qfq: no options [ 106.875919][ T6533] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 107.012088][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 107.034191][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 107.044225][ T6539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 107.131583][ T6537] device syzkaller0 entered promiscuous mode [ 107.158962][ T6545] tipc: Enabling of bearer rejected, failed to enable media [ 107.339129][ T6556] device syzkaller0 entered promiscuous mode [ 107.446110][ T6559] 8021q: adding VLAN 0 to HW filter on device bond6 [ 107.563776][ T6571] device syzkaller0 entered promiscuous mode [ 107.628614][ T6574] device syzkaller0 entered promiscuous mode [ 107.638329][ T6573] device syzkaller0 entered promiscuous mode [ 107.754961][ T6577] qfq: no options [ 107.914047][ T6588] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 107.997827][ T6587] device syzkaller0 entered promiscuous mode [ 108.135164][ T6594] device syzkaller0 entered promiscuous mode [ 108.179655][ T6597] tipc: Enabling of bearer rejected, failed to enable media [ 108.236493][ T6598] 8021q: adding VLAN 0 to HW filter on device bond7 [ 108.402747][ T6610] device syzkaller0 entered promiscuous mode [ 108.423623][ T6615] device syzkaller0 entered promiscuous mode [ 108.440490][ T6613] device syzkaller0 entered promiscuous mode [ 108.528502][ T6621] qfq: no options [ 108.696949][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 108.723380][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.740573][ T6631] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.010595][ T6645] __nla_validate_parse: 11 callbacks suppressed [ 109.010610][ T6645] netlink: 152 bytes leftover after parsing attributes in process `syz.4.882'. [ 109.086786][ T6647] device syzkaller0 entered promiscuous mode [ 109.127103][ T6653] 8021q: adding VLAN 0 to HW filter on device bond6 [ 109.175371][ T6653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.886'. [ 109.190470][ T6656] device syzkaller0 entered promiscuous mode [ 109.263698][ T6661] netlink: 404 bytes leftover after parsing attributes in process `syz.1.889'. [ 109.282208][ T6659] device syzkaller0 entered promiscuous mode [ 109.309066][ T6663] tipc: Enabling of bearer rejected, failed to enable media [ 109.428959][ T6669] device syzkaller0 entered promiscuous mode [ 109.502246][ T6673] qfq: no options [ 109.735730][ T6681] device syzkaller0 entered promiscuous mode [ 109.791761][ T6686] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 109.813869][ T6686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.844229][ T6686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.997965][ T6695] validate_nla: 12 callbacks suppressed [ 109.997980][ T6695] netlink: 'syz.1.898': attribute type 1 has an invalid length. [ 110.046468][ T6695] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.062185][ T6697] netlink: 'syz.4.899': attribute type 4 has an invalid length. [ 110.073967][ T6697] netlink: 152 bytes leftover after parsing attributes in process `syz.4.899'. [ 110.092792][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 110.104561][ T6705] device syzkaller0 entered promiscuous mode [ 110.173993][ T6702] device syzkaller0 entered promiscuous mode [ 110.223603][ T6700] device syzkaller0 entered promiscuous mode [ 110.316864][ T6713] device syzkaller0 entered promiscuous mode [ 110.376991][ T6718] netlink: 'syz.3.906': attribute type 1 has an invalid length. [ 110.395168][ T6718] qfq: no options [ 110.420071][ T6721] device syzkaller0 entered promiscuous mode [ 110.476225][ T6725] tipc: Enabling of bearer rejected, failed to enable media [ 110.840675][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 110.878202][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.912689][ T6744] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.975520][ T6746] netlink: 'syz.1.914': attribute type 1 has an invalid length. [ 111.021854][ T6746] 8021q: adding VLAN 0 to HW filter on device bond3 [ 111.035557][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.914'. [ 111.066998][ T6754] device syzkaller0 entered promiscuous mode [ 111.214780][ T6757] netlink: 'syz.1.916': attribute type 4 has an invalid length. [ 111.238695][ T6757] netlink: 152 bytes leftover after parsing attributes in process `syz.1.916'. [ 111.296709][ T6758] device syzkaller0 entered promiscuous mode [ 111.311317][ T6760] device syzkaller0 entered promiscuous mode [ 111.363726][ T6766] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.452592][ T6769] device syzkaller0 entered promiscuous mode [ 111.648236][ T6775] device syzkaller0 entered promiscuous mode [ 111.682249][ T6777] batman_adv: batadv0: Adding interface: dummy0 [ 111.692353][ T6777] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.728341][ T6777] batman_adv: batadv0: Interface activated: dummy0 [ 111.810321][ T6784] netlink: 'syz.3.927': attribute type 1 has an invalid length. [ 111.838677][ T6784] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.847418][ T6789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.927'. [ 111.865540][ T6777] batadv0: mtu less than device minimum [ 111.877365][ T6781] Set syz0 is full, maxelem 0 reached [ 111.885774][ T6777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.898124][ T6777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.910507][ T6777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.922833][ T6777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.935173][ T6777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.947566][ T6777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 111.959943][ T6777] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 112.121282][ T6788] device syzkaller0 entered promiscuous mode [ 112.155575][ T6802] netlink: 'syz.2.931': attribute type 1 has an invalid length. [ 112.215652][ T6802] qfq: no options [ 112.226546][ T6804] netlink: 'syz.1.932': attribute type 4 has an invalid length. [ 112.235242][ T6804] netlink: 152 bytes leftover after parsing attributes in process `syz.1.932'. [ 112.250493][ T6801] device syzkaller0 entered promiscuous mode [ 112.322095][ T6806] tipc: Enabling of bearer rejected, failed to enable media [ 112.346644][ T6808] device syzkaller0 entered promiscuous mode [ 112.532032][ T6811] device syzkaller0 entered promiscuous mode [ 112.637140][ T6828] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 112.661453][ T6828] 8021q: adding VLAN 0 to HW filter on device bond5 [ 112.673464][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.940'. [ 112.928425][ T6834] device syzkaller0 entered promiscuous mode [ 112.952936][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 112.977986][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.004389][ T6839] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.046734][ T6844] netlink: 'syz.3.944': attribute type 4 has an invalid length. [ 113.143635][ T6846] device syzkaller0 entered promiscuous mode [ 113.231555][ T6850] device syzkaller0 entered promiscuous mode [ 113.299929][ T6857] 8021q: adding VLAN 0 to HW filter on device bond5 [ 113.309416][ T6858] qfq: no options [ 113.314233][ T6854] device syzkaller0 entered promiscuous mode [ 113.462139][ T6862] device syzkaller0 entered promiscuous mode [ 113.513908][ T6866] tipc: Enabling of bearer rejected, failed to enable media [ 113.746815][ T6883] device syzkaller0 entered promiscuous mode [ 113.776089][ T6885] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 113.795109][ T6885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 113.825371][ T6885] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 113.961868][ T6890] device syzkaller0 entered promiscuous mode [ 114.051437][ T6894] batman_adv: batadv0: Adding interface: dummy0 [ 114.073527][ T6894] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.105904][ T6894] batman_adv: batadv0: Interface activated: dummy0 [ 114.157070][ T6900] device syzkaller0 entered promiscuous mode [ 114.444342][ T6910] 8021q: adding VLAN 0 to HW filter on device bond3 [ 114.500841][ T6913] device syzkaller0 entered promiscuous mode [ 114.513773][ T6916] __nla_validate_parse: 5 callbacks suppressed [ 114.513788][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.968'. [ 114.529043][ T6916] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 114.541913][ T6910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.966'. [ 114.585264][ T6916] netlink: 152 bytes leftover after parsing attributes in process `syz.1.968'. [ 114.596430][ T6920] tipc: Enabling of bearer rejected, failed to enable media [ 114.665633][ T6918] device syzkaller0 entered promiscuous mode [ 114.913977][ T6945] device syzkaller0 entered promiscuous mode [ 115.156169][ T6956] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 115.165421][ T6956] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 115.179407][ T6956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.193376][ T6956] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.264396][ T6960] device syzkaller0 entered promiscuous mode [ 115.317144][ T6958] device syzkaller0 entered promiscuous mode [ 115.374193][ T6972] validate_nla: 6 callbacks suppressed [ 115.374206][ T6972] netlink: 'syz.0.979': attribute type 1 has an invalid length. [ 115.426164][ T6972] qfq: no options [ 115.436028][ T6974] netlink: 'syz.1.980': attribute type 1 has an invalid length. [ 115.478257][ T6974] 8021q: adding VLAN 0 to HW filter on device bond6 [ 115.505743][ T6977] netlink: 8 bytes leftover after parsing attributes in process `syz.4.981'. [ 115.524437][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.4.981'. [ 115.566998][ T6978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.980'. [ 115.604232][ T6980] netlink: 'syz.4.981': attribute type 4 has an invalid length. [ 115.615992][ T6980] netlink: 152 bytes leftover after parsing attributes in process `syz.4.981'. [ 115.633826][ T6981] device syzkaller0 entered promiscuous mode [ 115.647751][ T6985] tipc: Enabling of bearer rejected, failed to enable media [ 115.702297][ T6983] device syzkaller0 entered promiscuous mode [ 115.896964][ T7004] device syzkaller0 entered promiscuous mode [ 116.158053][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.200458][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 116.228271][ T7020] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 116.382482][ T7022] device syzkaller0 entered promiscuous mode [ 116.454883][ T7027] device syzkaller0 entered promiscuous mode [ 116.575491][ T7038] netlink: 'syz.2.993': attribute type 1 has an invalid length. [ 116.609743][ T7038] 8021q: adding VLAN 0 to HW filter on device bond6 [ 116.631248][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 116.652079][ T7046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.995'. [ 116.675685][ T7046] netlink: 'syz.0.995': attribute type 4 has an invalid length. [ 116.702044][ T7040] netlink: 'syz.4.994': attribute type 1 has an invalid length. [ 116.718247][ T7049] device syzkaller0 entered promiscuous mode [ 116.728228][ T7040] qfq: no options [ 116.805346][ T7052] device syzkaller0 entered promiscuous mode [ 116.817163][ T7053] batman_adv: batadv0: Adding interface: dummy0 [ 116.829965][ T7053] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.856583][ T7053] batman_adv: batadv0: Interface activated: dummy0 [ 116.929081][ T7061] net_ratelimit: 33 callbacks suppressed [ 116.929096][ T7061] ip_tables: iptables: counters copy to user failed while replacing table [ 116.962528][ T7053] batadv0: mtu less than device minimum [ 116.974421][ T7053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.986791][ T7053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 116.999241][ T7053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.008647][ T7054] Set syz0 is full, maxelem 0 reached [ 117.011494][ T7053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.027319][ T7053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.039699][ T7053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.052042][ T7053] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 117.135472][ T7066] tipc: Enabled bearer , priority 0 [ 117.225981][ T7060] device syzkaller0 entered promiscuous mode [ 117.249118][ T7057] tipc: Disabling bearer [ 117.411187][ T7085] device syzkaller0 entered promiscuous mode [ 117.482591][ T7089] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 117.545162][ T7089] 8021q: adding VLAN 0 to HW filter on device bond4 [ 117.565501][ T7092] device syzkaller0 entered promiscuous mode [ 117.728050][ T7100] netlink: 'syz.3.1011': attribute type 1 has an invalid length. [ 117.751801][ T7098] device syzkaller0 entered promiscuous mode [ 117.770056][ T7103] netlink: 'syz.4.1012': attribute type 4 has an invalid length. [ 117.777855][ T7100] qfq: no options [ 117.846557][ T7104] qfq: no options [ 117.895243][ T7106] device syzkaller0 entered promiscuous mode [ 118.045838][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.061597][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 118.083952][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.092138][ T7113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.184124][ T7119] device syzkaller0 entered promiscuous mode [ 118.363910][ T7132] netlink: 'syz.4.1020': attribute type 1 has an invalid length. [ 118.405151][ T7132] 8021q: adding VLAN 0 to HW filter on device bond7 [ 118.418621][ T7134] device syzkaller0 entered promiscuous mode [ 118.518463][ T7138] device syzkaller0 entered promiscuous mode [ 118.595212][ T7142] device syzkaller0 entered promiscuous mode [ 118.680852][ T7144] qfq: no options [ 118.685803][ T7148] tipc: Enabled bearer , priority 0 [ 118.699118][ T7144] qfq: no options [ 118.713099][ T7148] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 118.744255][ T7152] device syzkaller0 entered promiscuous mode [ 118.755979][ T7145] tipc: Disabling bearer [ 118.820187][ T7154] device syzkaller0 entered promiscuous mode [ 118.882005][ T7157] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 118.893686][ T7157] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 118.902873][ T7157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.912921][ T7157] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.998446][ T7161] 8021q: adding VLAN 0 to HW filter on device bond8 [ 119.502768][ T7186] device syzkaller0 entered promiscuous mode [ 119.531041][ T7190] __nla_validate_parse: 11 callbacks suppressed [ 119.531054][ T7190] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1039'. [ 119.550122][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1039'. [ 119.584365][ T7190] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1039'. [ 119.612962][ T7192] device syzkaller0 entered promiscuous mode [ 119.683535][ T7195] device syzkaller0 entered promiscuous mode [ 119.690792][ T7198] tipc: Enabled bearer , priority 0 [ 119.700496][ T7196] qfq: no options [ 119.704174][ T7198] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 119.724520][ T7196] qfq: no options [ 119.741600][ T7197] tipc: Disabling bearer [ 119.763542][ T7200] device syzkaller0 entered promiscuous mode [ 119.841570][ T7202] 8021q: adding VLAN 0 to HW filter on device bond10 [ 119.968475][ T7205] device syzkaller0 entered promiscuous mode [ 119.990366][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.010960][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.033300][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 120.305313][ T7233] device syzkaller0 entered promiscuous mode [ 120.337458][ T7236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1054'. [ 120.359039][ T7236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1054'. [ 120.408887][ T7239] validate_nla: 6 callbacks suppressed [ 120.408901][ T7239] netlink: 'syz.4.1054': attribute type 4 has an invalid length. [ 120.437896][ T7239] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1054'. [ 120.473560][ T7241] device syzkaller0 entered promiscuous mode [ 120.549732][ T7245] device syzkaller0 entered promiscuous mode [ 120.565757][ T7245] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 120.584262][ T7244] device syzkaller0 entered promiscuous mode [ 120.689588][ T7247] netlink: 'syz.1.1059': attribute type 1 has an invalid length. [ 120.705280][ T7247] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1059'. [ 120.765955][ T7254] netlink: 'syz.3.1062': attribute type 1 has an invalid length. [ 120.794836][ T7254] 8021q: adding VLAN 0 to HW filter on device bond5 [ 120.839519][ T7256] device syzkaller0 entered promiscuous mode [ 120.887102][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 120.919487][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 120.938201][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 120.963524][ T7260] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.126321][ T7271] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 121.152476][ T7271] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 121.186495][ T7271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 121.215309][ T7271] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 121.355756][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1067'. [ 121.367936][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1067'. [ 121.382345][ T7284] netlink: 'syz.4.1067': attribute type 4 has an invalid length. [ 121.394217][ T7284] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1067'. [ 121.412191][ T7286] device syzkaller0 entered promiscuous mode [ 121.459933][ T7288] device syzkaller0 entered promiscuous mode [ 121.551232][ T7294] device syzkaller0 entered promiscuous mode [ 121.637303][ T7301] netlink: 'syz.3.1075': attribute type 1 has an invalid length. [ 121.688379][ T7301] 8021q: adding VLAN 0 to HW filter on device bond6 [ 121.702280][ T7300] netlink: 'syz.1.1074': attribute type 1 has an invalid length. [ 121.830534][ T7309] device syzkaller0 entered promiscuous mode [ 121.874510][ T7309] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 122.028668][ T7321] netlink: 'syz.3.1081': attribute type 4 has an invalid length. [ 122.192218][ T7331] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 122.220090][ T7331] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 122.245153][ T7331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 122.267428][ T7331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 122.371932][ T7335] device syzkaller0 entered promiscuous mode [ 122.591599][ T7351] netlink: 'syz.3.1089': attribute type 1 has an invalid length. [ 122.654692][ T7351] 8021q: adding VLAN 0 to HW filter on device bond7 [ 122.671915][ T7357] device syzkaller0 entered promiscuous mode [ 122.717372][ T7353] device syzkaller0 entered promiscuous mode [ 122.815302][ T7363] net_ratelimit: 18 callbacks suppressed [ 122.815316][ T7363] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 122.837456][ T7362] netlink: 'syz.3.1092': attribute type 1 has an invalid length. [ 122.862503][ T7365] device syzkaller0 entered promiscuous mode [ 122.874202][ T7365] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 122.913914][ T7367] netlink: 'syz.2.1094': attribute type 4 has an invalid length. [ 123.062702][ T7378] device syzkaller0 entered promiscuous mode [ 123.163834][ T7385] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 123.192228][ T7385] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 123.224522][ T7385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.242130][ T7385] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.397966][ T7391] 8021q: adding VLAN 0 to HW filter on device bond7 [ 123.570975][ T7406] device syzkaller0 entered promiscuous mode [ 123.668571][ T7413] device syzkaller0 entered promiscuous mode [ 123.677879][ T7413] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 123.822733][ T7424] device syzkaller0 entered promiscuous mode [ 123.991772][ T7431] tcf_pedit_act: 7 callbacks suppressed [ 123.991786][ T7431] tc action pedit 'at' offset 2 out of bounds [ 124.003522][ T7431] tc action pedit 'at' offset 2 out of bounds [ 124.009625][ T7431] tc action pedit 'at' offset 2 out of bounds [ 124.015698][ T7431] tc action pedit 'at' offset 2 out of bounds [ 124.021810][ T7431] tc action pedit 'at' offset 2 out of bounds [ 124.027880][ T7431] tc action pedit 'at' offset 2 out of bounds [ 124.033994][ T7431] tc action pedit 'at' offset 2 out of bounds [ 124.040099][ T7431] tc action pedit 'at' offset 2 out of bounds [ 124.046199][ T7431] tc action pedit 'at' offset 2 out of bounds [ 124.052312][ T7431] tc action pedit 'at' offset 2 out of bounds [ 124.058402][ T7431] 0: reclassify loop, rule prio 0, protocol 800 [ 124.094201][ T7433] 8021q: adding VLAN 0 to HW filter on device bond8 [ 124.283698][ T7455] device syzkaller0 entered promiscuous mode [ 124.328900][ T7450] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 124.347798][ T7450] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 124.358633][ T7450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 124.373545][ T7450] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 124.555659][ T7463] device syzkaller0 entered promiscuous mode [ 124.676100][ T7474] device syzkaller0 entered promiscuous mode [ 124.711202][ T7476] device syzkaller0 entered promiscuous mode [ 124.856404][ T7483] __nla_validate_parse: 18 callbacks suppressed [ 124.856418][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1129'. [ 124.878008][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1129'. [ 124.912009][ T7487] 8021q: adding VLAN 0 to HW filter on device bond9 [ 124.921224][ T7485] device syzkaller0 entered promiscuous mode [ 124.928666][ T7483] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1129'. [ 124.944773][ T7487] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1130'. [ 125.202676][ T7502] device syzkaller0 entered promiscuous mode [ 125.221198][ T7499] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1132'. [ 125.412272][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 125.427787][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 125.439759][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.447551][ T7509] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.495005][ T7518] device syzkaller0 entered promiscuous mode [ 125.507458][ T7515] device syzkaller0 entered promiscuous mode [ 125.536175][ T7515] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 125.686500][ T7528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1143'. [ 125.699390][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1143'. [ 125.708547][ T7527] validate_nla: 9 callbacks suppressed [ 125.708560][ T7527] netlink: 'syz.1.1144': attribute type 1 has an invalid length. [ 125.775847][ T7527] 8021q: adding VLAN 0 to HW filter on device bond10 [ 125.789107][ T7528] netlink: 'syz.0.1143': attribute type 4 has an invalid length. [ 125.805282][ T7528] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1143'. [ 125.845338][ T7533] device syzkaller0 entered promiscuous mode [ 125.859431][ T7535] ip_tables: iptables: counters copy to user failed while replacing table [ 125.905254][ T7539] device syzkaller0 entered promiscuous mode [ 125.948121][ T7541] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 126.087421][ T7544] netlink: 'syz.4.1149': attribute type 1 has an invalid length. [ 126.130910][ T7544] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1149'. [ 126.214793][ T7550] device syzkaller0 entered promiscuous mode [ 126.277216][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 126.305412][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 126.313986][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.323357][ T7554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.453331][ T7567] device syzkaller0 entered promiscuous mode [ 126.471935][ T7567] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 126.542445][ T7572] netlink: 'syz.2.1157': attribute type 1 has an invalid length. [ 126.574186][ T7572] 8021q: adding VLAN 0 to HW filter on device bond8 [ 126.605585][ T7577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1158'. [ 126.639323][ T7575] device syzkaller0 entered promiscuous mode [ 126.653220][ T7580] netlink: 'syz.1.1158': attribute type 4 has an invalid length. [ 126.677068][ T7582] device syzkaller0 entered promiscuous mode [ 126.926623][ T7595] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 126.945593][ T7593] device syzkaller0 entered promiscuous mode [ 126.983426][ T7597] netlink: 'syz.0.1166': attribute type 1 has an invalid length. [ 127.188571][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 127.203055][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 127.215717][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 127.242023][ T7602] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 127.376500][ T7614] netlink: 'syz.1.1170': attribute type 1 has an invalid length. [ 127.510247][ T7614] 8021q: adding VLAN 0 to HW filter on device bond11 [ 127.577971][ T7624] netlink: 'syz.4.1172': attribute type 4 has an invalid length. [ 127.612677][ T7628] device syzkaller0 entered promiscuous mode [ 127.630183][ T7628] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 127.682014][ T7630] device syzkaller0 entered promiscuous mode [ 127.804148][ T7632] device syzkaller0 entered promiscuous mode [ 127.897065][ T7638] device syzkaller0 entered promiscuous mode [ 127.960888][ T7643] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 127.980028][ T7642] netlink: 'syz.3.1179': attribute type 1 has an invalid length. [ 128.120118][ T7651] netlink: 'syz.4.1182': attribute type 1 has an invalid length. [ 128.163566][ T7651] 8021q: adding VLAN 0 to HW filter on device bond8 [ 128.340463][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 128.364689][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 128.388309][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 128.406387][ T7661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 128.445265][ T7667] device syzkaller0 entered promiscuous mode [ 128.474234][ T7670] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 128.496636][ T7669] device syzkaller0 entered promiscuous mode [ 128.557863][ T7672] device syzkaller0 entered promiscuous mode [ 128.631668][ T7674] device syzkaller0 entered promiscuous mode [ 128.739930][ T7678] device syzkaller1 entered promiscuous mode [ 128.748918][ T7684] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 128.785917][ T7678] 0: reclassify loop, rule prio 0, protocol 03 [ 128.893666][ T7686] 8021q: adding VLAN 0 to HW filter on device bond9 [ 129.144833][ T7697] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.156031][ T7697] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 129.165321][ T7697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.174051][ T7697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.246613][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.264145][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.275693][ T7706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.312756][ T7705] device syzkaller0 entered promiscuous mode [ 129.322917][ T7709] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 129.368266][ T7711] device syzkaller0 entered promiscuous mode [ 129.413290][ T7713] device syzkaller0 entered promiscuous mode [ 129.457319][ T7715] device syzkaller0 entered promiscuous mode [ 129.560490][ T7721] 8021q: adding VLAN 0 to HW filter on device bond10 [ 129.650070][ T7728] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 129.803192][ T7738] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 129.823704][ T7738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 129.832664][ T7738] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 129.957529][ T7742] device syzkaller0 entered promiscuous mode [ 130.152995][ T7750] device syzkaller0 entered promiscuous mode [ 130.168067][ T7750] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 130.198398][ T7752] device syzkaller0 entered promiscuous mode [ 130.269866][ T7756] device syzkaller0 entered promiscuous mode [ 130.342487][ T7761] 8021q: adding VLAN 0 to HW filter on device bond8 [ 130.353038][ T7761] __nla_validate_parse: 16 callbacks suppressed [ 130.353052][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1224'. [ 130.414960][ T7766] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1225'. [ 130.425110][ T7766] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1225'. [ 130.576616][ T7776] device syzkaller0 entered promiscuous mode [ 130.925428][ T7785] device syzkaller0 entered promiscuous mode [ 130.966834][ T7790] tcf_pedit_act: 7 callbacks suppressed [ 130.966847][ T7790] tc action pedit 'at' offset 2 out of bounds [ 130.969025][ T7792] device syzkaller0 entered promiscuous mode [ 130.972512][ T7790] tc action pedit 'at' offset 2 out of bounds [ 130.982768][ T7792] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 130.984553][ T7790] tc action pedit 'at' offset 2 out of bounds [ 131.004513][ T7790] tc action pedit 'at' offset 2 out of bounds [ 131.010704][ T7790] tc action pedit 'at' offset 2 out of bounds [ 131.016772][ T7790] tc action pedit 'at' offset 2 out of bounds [ 131.022904][ T7790] tc action pedit 'at' offset 2 out of bounds [ 131.029001][ T7790] tc action pedit 'at' offset 2 out of bounds [ 131.035070][ T7790] tc action pedit 'at' offset 2 out of bounds [ 131.041165][ T7790] tc action pedit 'at' offset 2 out of bounds [ 131.047248][ T7790] 0: reclassify loop, rule prio 0, protocol 800 [ 131.218839][ T7799] validate_nla: 7 callbacks suppressed [ 131.218853][ T7799] netlink: 'syz.2.1238': attribute type 1 has an invalid length. [ 131.255015][ T7799] 8021q: adding VLAN 0 to HW filter on device bond11 [ 131.262994][ T7802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1238'. [ 131.275080][ T7801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1239'. [ 131.309832][ T7801] netlink: 'syz.3.1239': attribute type 4 has an invalid length. [ 131.317787][ T7801] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1239'. [ 131.470657][ T7818] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 131.553876][ T7822] device syzkaller0 entered promiscuous mode [ 131.770211][ T7826] device syzkaller0 entered promiscuous mode [ 131.835474][ T7829] device syzkaller0 entered promiscuous mode [ 131.851727][ T7829] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 131.930163][ T7834] netlink: 'syz.2.1252': attribute type 1 has an invalid length. [ 131.950559][ T7834] 8021q: adding VLAN 0 to HW filter on device bond12 [ 131.962386][ T7834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1252'. [ 132.043825][ T7842] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1255'. [ 132.054266][ T7842] netlink: 'syz.0.1255': attribute type 4 has an invalid length. [ 132.062213][ T7842] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1255'. [ 132.269217][ T7859] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 132.354907][ T7860] device syzkaller0 entered promiscuous mode [ 132.531998][ T7864] device syzkaller0 entered promiscuous mode [ 132.554414][ T7866] device syzkaller0 entered promiscuous mode [ 132.691158][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.697480][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.849277][ T7872] netlink: 'syz.2.1265': attribute type 1 has an invalid length. [ 132.869459][ T7872] 8021q: adding VLAN 0 to HW filter on device bond13 [ 132.878487][ T7874] device syzkaller0 entered promiscuous mode [ 132.913102][ T7872] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1265'. [ 132.926311][ T7880] netlink: 'syz.1.1269': attribute type 4 has an invalid length. [ 132.958929][ T7874] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 133.075842][ T7892] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 133.244548][ T7895] device syzkaller0 entered promiscuous mode [ 133.333281][ T7900] device syzkaller0 entered promiscuous mode [ 133.401901][ T7902] device syzkaller1 entered promiscuous mode [ 133.413338][ T7904] lo: Caught tx_queue_len zero misconfig [ 133.414027][ T7902] 0: reclassify loop, rule prio 0, protocol 03 [ 133.571787][ T7914] netlink: 'syz.2.1282': attribute type 1 has an invalid length. [ 133.613849][ T7914] 8021q: adding VLAN 0 to HW filter on device bond14 [ 133.640312][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 133.648634][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 133.665382][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.674270][ T7913] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.764775][ T7920] netlink: 'syz.4.1283': attribute type 4 has an invalid length. [ 133.808693][ T7923] device syzkaller0 entered promiscuous mode [ 133.833855][ T7923] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 134.017922][ T7936] device syzkaller0 entered promiscuous mode [ 134.189616][ T7942] device syzkaller0 entered promiscuous mode [ 134.346384][ T7948] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 134.383100][ T7948] 8021q: adding VLAN 0 to HW filter on device bond15 [ 134.493166][ T7957] lo: Caught tx_queue_len zero misconfig [ 134.539064][ T7954] netlink: 'syz.3.1306': attribute type 1 has an invalid length. [ 134.560809][ T7954] 8021q: adding VLAN 0 to HW filter on device bond9 [ 134.717168][ T7965] device syzkaller0 entered promiscuous mode [ 134.755092][ T7967] device syzkaller0 entered promiscuous mode [ 134.802013][ T7970] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 134.842947][ T7967] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 134.992658][ T7976] 0: reclassify loop, rule prio 0, protocol 800 [ 135.007867][ T7978] device syzkaller0 entered promiscuous mode [ 135.081875][ T7982] device syzkaller0 entered promiscuous mode [ 135.304658][ T7991] 8021q: adding VLAN 0 to HW filter on device bond12 [ 135.447892][ T8005] device syzkaller0 entered promiscuous mode [ 135.472719][ T8007] device syzkaller0 entered promiscuous mode [ 135.520532][ T8007] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 135.660033][ T8014] device syzkaller0 entered promiscuous mode [ 135.716825][ T8016] device syzkaller0 entered promiscuous mode [ 135.813755][ T8020] __nla_validate_parse: 15 callbacks suppressed [ 135.813769][ T8020] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1324'. [ 135.830150][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1324'. [ 135.848678][ T8021] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1324'. [ 135.983975][ T8026] 8021q: adding VLAN 0 to HW filter on device bond11 [ 136.021156][ T8026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1326'. [ 136.228804][ T8042] validate_nla: 5 callbacks suppressed [ 136.228820][ T8042] netlink: 'syz.4.1332': attribute type 10 has an invalid length. [ 136.323671][ T8044] device syzkaller0 entered promiscuous mode [ 136.349596][ T8044] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 136.377311][ T8047] device syzkaller0 entered promiscuous mode [ 136.414174][ T8051] device syzkaller0 entered promiscuous mode [ 136.464444][ T8053] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 136.566399][ T8056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1337'. [ 136.605928][ T8056] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 136.630061][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 136.643237][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 136.653236][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 136.677662][ T8058] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 136.737867][ T8060] netlink: 'syz.4.1339': attribute type 1 has an invalid length. [ 136.753672][ T8060] 8021q: adding VLAN 0 to HW filter on device bond9 [ 136.762485][ T8061] netlink: 'syz.0.1337': attribute type 4 has an invalid length. [ 136.770670][ T8061] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1337'. [ 136.780365][ T8064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1339'. [ 137.161998][ T8092] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1347'. [ 137.289962][ T8098] device syzkaller0 entered promiscuous mode [ 137.357864][ T8100] device syzkaller0 entered promiscuous mode [ 137.385876][ T8100] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 137.400181][ T8102] device syzkaller0 entered promiscuous mode [ 137.486732][ T8105] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 137.508383][ T8107] netlink: 'syz.4.1352': attribute type 1 has an invalid length. [ 137.544890][ T8107] 8021q: adding VLAN 0 to HW filter on device bond10 [ 137.568531][ T8109] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1352'. [ 137.625954][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 137.636374][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 137.643993][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 137.690719][ T8114] netlink: 'syz.0.1353': attribute type 4 has an invalid length. [ 138.148593][ T8140] device syzkaller0 entered promiscuous mode [ 138.269047][ T8148] netlink: 'syz.3.1364': attribute type 1 has an invalid length. [ 138.305120][ T8148] 8021q: adding VLAN 0 to HW filter on device bond10 [ 138.344719][ T8153] device syzkaller0 entered promiscuous mode [ 138.355334][ T8151] device syzkaller0 entered promiscuous mode [ 138.367524][ T8151] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 138.455794][ T8158] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 138.493181][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 138.510014][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 138.560849][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 138.610512][ T8161] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 138.735093][ T8166] netlink: 'syz.1.1368': attribute type 4 has an invalid length. [ 138.838305][ T8182] device syzkaller0 entered promiscuous mode [ 138.949622][ T8186] netlink: 'syz.2.1377': attribute type 1 has an invalid length. [ 138.975252][ T8186] 8021q: adding VLAN 0 to HW filter on device bond16 [ 139.058382][ T8188] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 139.072058][ T8183] device syzkaller0 entered promiscuous mode [ 139.082193][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): bond16: link becomes ready [ 139.156304][ T8193] device syzkaller0 entered promiscuous mode [ 139.254641][ T8199] device syzkaller0 entered promiscuous mode [ 139.270903][ T8199] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 139.350355][ T8207] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.358340][ T8207] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 139.367906][ T8207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 139.376074][ T8207] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 139.407258][ T8209] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 139.630688][ T8220] netlink: 'syz.1.1387': attribute type 4 has an invalid length. [ 139.740569][ T8225] netlink: 'syz.0.1389': attribute type 1 has an invalid length. [ 139.770782][ T8225] 8021q: adding VLAN 0 to HW filter on device bond12 [ 139.792875][ T8226] device syzkaller0 entered promiscuous mode [ 139.819668][ T8225] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 139.882625][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 140.944769][ T8256] device syzkaller0 entered promiscuous mode [ 140.957118][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 140.971150][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 140.983672][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 140.993332][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 141.031437][ T8256] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 141.056512][ T8264] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 141.124894][ T8268] __nla_validate_parse: 10 callbacks suppressed [ 141.124908][ T8268] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1400'. [ 141.168961][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1400'. [ 141.187361][ T8276] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1400'. [ 141.283790][ T8281] validate_nla: 1 callbacks suppressed [ 141.283803][ T8281] netlink: 'syz.4.1403': attribute type 1 has an invalid length. [ 141.313696][ T8281] 8021q: adding VLAN 0 to HW filter on device bond11 [ 141.342182][ T8281] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 141.371033][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 141.484965][ T8292] device syzkaller0 entered promiscuous mode [ 141.587058][ T8297] device syzkaller0 entered promiscuous mode [ 142.522252][ T8315] device syzkaller0 entered promiscuous mode [ 142.538866][ T8319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1415'. [ 142.558241][ T8319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'. [ 142.568693][ T8315] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 142.578145][ T8319] netlink: 'syz.0.1415': attribute type 4 has an invalid length. [ 142.587568][ T8319] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1415'. [ 142.618480][ T8324] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 142.661915][ T8323] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 142.685775][ T8323] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 142.716294][ T8323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 142.724462][ T8323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 142.808852][ T8330] netlink: 'syz.1.1419': attribute type 1 has an invalid length. [ 142.846224][ T8330] 8021q: adding VLAN 0 to HW filter on device bond13 [ 142.871866][ T8335] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 142.908848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready [ 143.160813][ T8348] device syzkaller0 entered promiscuous mode [ 143.718432][ T8356] device syzkaller0 entered promiscuous mode [ 143.738570][ T8362] device syzkaller0 entered promiscuous mode [ 143.849394][ T8365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1429'. [ 143.873520][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1429'. [ 143.906709][ T8366] netlink: 'syz.3.1429': attribute type 4 has an invalid length. [ 143.934860][ T8366] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1429'. [ 144.085835][ T8373] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 144.673385][ T8375] device syzkaller0 entered promiscuous mode [ 144.688157][ T8377] netlink: 'syz.3.1434': attribute type 1 has an invalid length. [ 144.717066][ T8377] 8021q: adding VLAN 0 to HW filter on device bond11 [ 144.725204][ T8375] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 144.781753][ T8377] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 144.794591][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 144.823946][ T8382] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.836907][ T8382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.848762][ T8382] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.108005][ T8399] device syzkaller0 entered promiscuous mode [ 145.129769][ T8402] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1442'. [ 145.206373][ T8402] netlink: 'syz.4.1442': attribute type 4 has an invalid length. [ 145.301189][ T8409] device syzkaller0 entered promiscuous mode [ 145.354382][ T8412] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 145.469054][ T8414] netlink: 'syz.2.1448': attribute type 1 has an invalid length. [ 145.509776][ T8414] 8021q: adding VLAN 0 to HW filter on device bond17 [ 145.522715][ T8417] nbd: must specify at least one socket [ 145.550966][ T8414] bond16: (slave veth0_to_bond): Releasing backup interface [ 145.593962][ T8414] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 145.614891][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bond17: link becomes ready [ 145.643491][ T8421] device syzkaller0 entered promiscuous mode [ 145.664510][ T8425] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 145.672556][ T8425] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 145.681417][ T8425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 145.690040][ T8425] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 145.713425][ T8420] device syzkaller0 entered promiscuous mode [ 145.725433][ T8421] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 145.939303][ T8441] netlink: 'syz.4.1457': attribute type 4 has an invalid length. [ 145.995770][ T8445] device syzkaller0 entered promiscuous mode [ 146.034504][ T8447] nbd: must specify at least one socket [ 146.115991][ T8451] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 146.143094][ T8455] netlink: 'syz.4.1463': attribute type 1 has an invalid length. [ 146.183473][ T8455] 8021q: adding VLAN 0 to HW filter on device bond12 [ 146.194532][ T8456] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 146.208575][ T8456] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 146.220920][ T8456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 146.233888][ T8456] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 146.287050][ T8455] bond11: (slave veth0_to_bond): Releasing backup interface [ 146.354376][ T8455] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 146.389018][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 146.405816][ T8467] device syzkaller0 entered promiscuous mode [ 146.593303][ T8478] netlink: 'syz.1.1468': attribute type 1 has an invalid length. [ 146.614679][ T8478] 8021q: adding VLAN 0 to HW filter on device bond14 [ 146.623010][ T8474] device syzkaller0 entered promiscuous mode [ 146.656038][ T8478] bond13: (slave veth0_to_bond): Releasing backup interface [ 146.690266][ T8478] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 146.700492][ T4213] IPv6: ADDRCONF(NETDEV_CHANGE): bond14: link becomes ready [ 146.715330][ T8485] __nla_validate_parse: 4 callbacks suppressed [ 146.715343][ T8485] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1470'. [ 146.721801][ T8474] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 146.770979][ T8483] device bridge1 entered promiscuous mode [ 146.786889][ T8483] bond14: (slave bridge1): Enslaving as an active interface with an up link [ 146.795988][ T8487] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1471'. [ 146.806129][ T8487] netlink: 'syz.3.1471': attribute type 4 has an invalid length. [ 146.816611][ T8487] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1471'. [ 146.900719][ T8492] nbd: must specify at least one socket [ 146.990541][ T8496] device syzkaller0 entered promiscuous mode [ 147.057746][ T8498] netlink: 'syz.1.1476': attribute type 1 has an invalid length. [ 147.115827][ T8498] 8021q: adding VLAN 0 to HW filter on device bond15 [ 147.152825][ T8503] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 147.228317][ T8502] bond14: (slave veth0_to_bond): Releasing backup interface [ 147.254238][ T8502] bond14: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 147.287162][ T8502] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 147.303433][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 147.320759][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 147.329632][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 147.337546][ T8505] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 147.394964][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): bond15: link becomes ready [ 147.421856][ T8517] device syzkaller0 entered promiscuous mode [ 147.693873][ T8533] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1485'. [ 147.703664][ T8533] netlink: 'syz.2.1485': attribute type 4 has an invalid length. [ 147.719311][ T8533] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1485'. [ 147.745132][ T8537] nbd: must specify a size in bytes for the device [ 147.784917][ T8535] device syzkaller0 entered promiscuous mode [ 147.811453][ T8535] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 147.823946][ T8539] device syzkaller0 entered promiscuous mode [ 147.837218][ T8543] netlink: 'syz.3.1490': attribute type 1 has an invalid length. [ 147.855210][ T8543] 8021q: adding VLAN 0 to HW filter on device bond12 [ 147.916705][ T8543] bond11: (slave veth0_to_bond): Releasing backup interface [ 147.933812][ T8543] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 147.965725][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): bond12: link becomes ready [ 148.061176][ T8554] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 148.069338][ T8554] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 148.079431][ T8556] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 148.097090][ T8554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 148.105428][ T8554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 148.301365][ T8567] device syzkaller0 entered promiscuous mode [ 148.475130][ T8574] netlink: 'syz.4.1498': attribute type 4 has an invalid length. [ 148.491737][ T8574] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1498'. [ 148.546854][ T8580] nbd: must specify a size in bytes for the device [ 148.590099][ T8583] netlink: 'syz.4.1502': attribute type 1 has an invalid length. [ 148.611421][ T8583] 8021q: adding VLAN 0 to HW filter on device bond13 [ 148.685482][ T8583] bond12: (slave veth0_to_bond): Releasing backup interface [ 148.744782][ T8583] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 148.760642][ T6942] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready [ 148.792477][ T8586] device syzkaller0 entered promiscuous mode [ 148.889926][ T8594] tipc: Enabling of bearer rejected, failed to enable media [ 148.915375][ T8594] device syzkaller0 entered promiscuous mode [ 148.934508][ T8594] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 148.955614][ T8597] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 149.027123][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.038385][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 149.055445][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.070526][ T8600] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.155663][ T8604] device syzkaller0 entered promiscuous mode [ 149.207499][ T8614] nbd: must specify a size in bytes for the device [ 149.255560][ T8611] netlink: 'syz.2.1511': attribute type 4 has an invalid length. [ 149.265659][ T8611] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1511'. [ 149.366883][ T8622] netlink: 'syz.2.1516': attribute type 1 has an invalid length. [ 149.397987][ T8622] 8021q: adding VLAN 0 to HW filter on device bond18 [ 149.471616][ T8622] bond17: (slave veth0_to_bond): Releasing backup interface [ 149.491411][ T8622] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 149.507819][ T1486] IPv6: ADDRCONF(NETDEV_CHANGE): bond18: link becomes ready [ 149.669209][ T8634] device syzkaller0 entered promiscuous mode [ 149.703153][ T8640] tipc: Enabling of bearer rejected, failed to enable media [ 149.715642][ T8640] device syzkaller0 entered promiscuous mode [ 149.753949][ T8640] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 149.786776][ T8648] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 149.911820][ T8653] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 149.920155][ T8653] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 149.928275][ T8653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 149.936818][ T8653] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 149.967523][ T8655] netlink: 'syz.3.1526': attribute type 4 has an invalid length. [ 149.977698][ T8655] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1526'. [ 150.073741][ T8662] device syzkaller0 entered promiscuous mode [ 150.083553][ T8665] IPv6: Can't replace route, no match found [ 150.164818][ T8669] 8021q: adding VLAN 0 to HW filter on device bond16 [ 150.198629][ T8669] bond15: (slave veth0_to_bond): Releasing backup interface [ 150.224575][ T8669] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 150.248895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond16: link becomes ready [ 150.396830][ T8679] device syzkaller0 entered promiscuous mode [ 150.561332][ T8687] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1538'. [ 150.587302][ T8685] tipc: Enabling of bearer rejected, failed to enable media [ 150.630046][ T8685] device syzkaller0 entered promiscuous mode [ 150.656874][ T8685] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 150.704751][ T8694] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 150.751914][ T8696] 8021q: adding VLAN 0 to HW filter on device bond19 [ 150.771326][ T8696] bond18: (slave veth0_to_bond): Releasing backup interface [ 150.793442][ T8696] bond19: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 150.814029][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bond19: link becomes ready [ 151.189492][ T8710] device syzkaller0 entered promiscuous mode [ 151.274872][ T8716] device syzkaller0 entered promiscuous mode [ 151.343613][ T8724] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1551'. [ 151.404732][ T8729] 8021q: adding VLAN 0 to HW filter on device bond17 [ 151.422341][ T8729] bond16: (slave veth0_to_bond): Releasing backup interface [ 151.434932][ T8729] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 151.444642][ T6942] IPv6: ADDRCONF(NETDEV_CHANGE): bond17: link becomes ready [ 151.528605][ T8737] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 151.562472][ T8736] tipc: Enabling of bearer rejected, failed to enable media [ 151.601234][ T8736] device syzkaller0 entered promiscuous mode [ 151.623583][ T8736] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 151.986087][ T8755] device syzkaller0 entered promiscuous mode [ 152.083143][ T8757] validate_nla: 5 callbacks suppressed [ 152.083159][ T8757] netlink: 'syz.4.1564': attribute type 4 has an invalid length. [ 152.108168][ T8757] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1564'. [ 152.117978][ T8759] netlink: 'syz.1.1565': attribute type 1 has an invalid length. [ 152.145553][ T8759] 8021q: adding VLAN 0 to HW filter on device bond18 [ 152.168138][ T8760] bond17: (slave veth0_to_bond): Releasing backup interface [ 152.190174][ T8760] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 152.210106][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): bond18: link becomes ready [ 152.230801][ T8762] device syzkaller0 entered promiscuous mode [ 152.334655][ T8775] tipc: Enabling of bearer rejected, failed to enable media [ 152.348542][ T8775] device syzkaller0 entered promiscuous mode [ 152.376677][ T8775] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 152.748427][ T8789] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1577'. [ 152.768311][ T8790] netlink: 'syz.3.1577': attribute type 4 has an invalid length. [ 152.786418][ T8790] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1577'. [ 152.818362][ T8792] nbd: must specify at least one socket [ 152.852318][ T8794] device syzkaller0 entered promiscuous mode [ 152.906079][ T8799] netlink: 'syz.4.1581': attribute type 1 has an invalid length. [ 152.935282][ T8799] 8021q: adding VLAN 0 to HW filter on device bond14 [ 152.948666][ T8800] device syzkaller0 entered promiscuous mode [ 152.965794][ T8799] bond13: (slave veth0_to_bond): Releasing backup interface [ 152.982429][ T8799] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 152.994160][ T6942] IPv6: ADDRCONF(NETDEV_CHANGE): bond14: link becomes ready [ 153.064825][ T8812] tipc: Enabling of bearer rejected, failed to enable media [ 153.080444][ T8812] device syzkaller0 entered promiscuous mode [ 153.096040][ T8812] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 153.316141][ T8824] nbd: must specify at least one socket [ 153.508821][ T8831] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1592'. [ 153.525815][ T8830] device syzkaller0 entered promiscuous mode [ 153.534274][ T8831] netlink: 'syz.2.1592': attribute type 4 has an invalid length. [ 153.548845][ T8831] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1592'. [ 153.621689][ T8835] netlink: 'syz.2.1595': attribute type 1 has an invalid length. [ 153.638387][ T8835] 8021q: adding VLAN 0 to HW filter on device bond20 [ 153.656643][ T8835] bond19: (slave veth0_to_bond): Releasing backup interface [ 153.676958][ T8835] bond20: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 153.687268][ T6942] IPv6: ADDRCONF(NETDEV_CHANGE): bond20: link becomes ready [ 153.733789][ T8838] device syzkaller0 entered promiscuous mode [ 153.760703][ T8840] device syzkaller1 entered promiscuous mode [ 153.768336][ T8840] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 153.836367][ T8845] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 153.943176][ T8848] tipc: Enabling of bearer rejected, failed to enable media [ 153.976804][ T8850] nbd: must specify at least one socket [ 153.977161][ T8848] device syzkaller0 entered promiscuous mode [ 154.026709][ T8848] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 154.284963][ T8860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1606'. [ 154.304452][ T8862] netlink: 'syz.1.1607': attribute type 1 has an invalid length. [ 154.335940][ T8862] 8021q: adding VLAN 0 to HW filter on device bond19 [ 154.348396][ T8860] netlink: 'syz.3.1606': attribute type 4 has an invalid length. [ 154.378132][ T8860] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1606'. [ 154.419543][ T8864] bond18: (slave veth0_to_bond): Releasing backup interface [ 154.442327][ T8864] bond19: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 154.457121][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond19: link becomes ready [ 154.492723][ T8866] device syzkaller0 entered promiscuous mode [ 154.502821][ T8871] device syzkaller0 entered promiscuous mode [ 154.685533][ T8878] netlink: 'syz.1.1621': attribute type 1 has an invalid length. [ 154.741505][ T8885] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 154.825514][ T8878] 8021q: adding VLAN 0 to HW filter on device bond20 [ 154.898900][ T8884] bond19: (slave veth0_to_bond): Releasing backup interface [ 154.922879][ T8884] bond20: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 154.934210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond20: link becomes ready [ 155.052040][ T8902] tipc: Enabling of bearer rejected, failed to enable media [ 155.067946][ T8902] device syzkaller0 entered promiscuous mode [ 155.112175][ T8902] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 155.348657][ T8911] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1622'. [ 155.421271][ T8911] netlink: 'syz.3.1622': attribute type 4 has an invalid length. [ 155.430931][ T8911] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1622'. [ 155.446950][ T8913] device syzkaller0 entered promiscuous mode [ 155.527772][ T8918] device syzkaller0 entered promiscuous mode [ 155.624415][ T8923] 8021q: adding VLAN 0 to HW filter on device bond21 [ 155.656231][ T8923] bond20: (slave veth0_to_bond): Releasing backup interface [ 155.680160][ T8923] bond21: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 155.698821][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond21: link becomes ready [ 155.875740][ T8936] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 155.949923][ T8938] tipc: Enabling of bearer rejected, failed to enable media [ 155.973092][ T8938] device syzkaller0 entered promiscuous mode [ 155.994694][ T8938] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 156.050268][ T8942] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1634'. [ 157.103409][ T8967] device syzkaller0 entered promiscuous mode [ 157.153466][ T8969] validate_nla: 2 callbacks suppressed [ 157.153480][ T8969] netlink: 'syz.0.1641': attribute type 1 has an invalid length. [ 157.173328][ T8969] 8021q: adding VLAN 0 to HW filter on device bond13 [ 157.237164][ T8973] bond12: (slave veth0_to_bond): Releasing backup interface [ 157.253999][ T8973] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 157.266868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond13: link becomes ready [ 157.289042][ T8981] __nla_validate_parse: 1 callbacks suppressed [ 157.289058][ T8981] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1645'. [ 157.318882][ T8985] device syzkaller0 entered promiscuous mode [ 157.327392][ T8985] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 157.376161][ T8981] netlink: 'syz.2.1645': attribute type 4 has an invalid length. [ 157.394081][ T8981] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1645'. [ 157.553708][ T8998] device syzkaller0 entered promiscuous mode [ 157.607764][ T8999] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 158.145767][ T9020] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1660'. [ 158.165900][ T9020] netlink: 'syz.2.1660': attribute type 4 has an invalid length. [ 158.184103][ T9020] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1660'. [ 158.220498][ T9026] device syzkaller0 entered promiscuous mode [ 158.229724][ T9026] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 158.258174][ T9028] device syzkaller0 entered promiscuous mode [ 158.544379][ T9045] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 158.697286][ T9052] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1675'. [ 158.723989][ T9052] netlink: 'syz.2.1675': attribute type 4 has an invalid length. [ 158.743377][ T9052] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1675'. [ 158.774202][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1676'. [ 158.828317][ T9058] device syzkaller0 entered promiscuous mode [ 158.850012][ T9058] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 158.908561][ T9060] device syzkaller0 entered promiscuous mode [ 159.409367][ T9082] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1688'. [ 159.416002][ T9083] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 159.444215][ T9082] netlink: 'syz.0.1688': attribute type 4 has an invalid length. [ 159.458863][ T9082] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1688'. [ 159.572983][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1690'. [ 159.602452][ T9090] device syzkaller0 entered promiscuous mode [ 159.612836][ T9090] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 159.764606][ T9099] device syzkaller0 entered promiscuous mode [ 159.854914][ T9104] device syzkaller0 entered promiscuous mode [ 160.009880][ T9112] netlink: 'syz.3.1700': attribute type 4 has an invalid length. [ 160.097186][ T9122] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 160.234394][ T9128] device syzkaller0 entered promiscuous mode [ 160.261573][ T9128] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 160.479012][ T9141] device syzkaller0 entered promiscuous mode [ 160.867592][ T9150] device syzkaller0 entered promiscuous mode [ 160.944555][ T9152] netlink: 'syz.0.1714': attribute type 4 has an invalid length. [ 161.066187][ T9159] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 161.074642][ T9159] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 161.090792][ T9159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 161.098541][ T9159] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 161.231326][ T9171] ip_tables: iptables: counters copy to user failed while replacing table [ 161.268292][ T9172] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 161.294839][ T9174] device syzkaller0 entered promiscuous mode [ 161.315611][ T9174] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 161.354111][ T9177] device syzkaller0 entered promiscuous mode [ 162.474108][ T9187] __nla_validate_parse: 6 callbacks suppressed [ 162.474119][ T9187] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1725'. [ 162.491845][ T9187] netlink: 'syz.3.1725': attribute type 4 has an invalid length. [ 162.499788][ T9187] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1725'. [ 163.376540][ T9134] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.531978][ T9194] device syzkaller0 entered promiscuous mode [ 163.572236][ T9205] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 163.591584][ T9205] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 163.610040][ T9205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.618353][ T9205] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.756900][ T9210] device syzkaller0 entered promiscuous mode [ 163.876855][ T9220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1737'. [ 163.893820][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1737'. [ 164.043761][ T9228] device syzkaller0 entered promiscuous mode [ 164.062094][ T9229] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 164.092643][ T9228] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 164.291414][ T9244] device syzkaller0 entered promiscuous mode [ 164.474852][ T9249] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 164.487507][ T9249] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 164.501115][ T9249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 164.509559][ T9249] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 164.698503][ T9255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'. [ 164.710767][ T9255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1750'. [ 164.813844][ T9258] device syzkaller0 entered promiscuous mode [ 164.821629][ T9260] device macvlan0 entered promiscuous mode [ 164.828349][ T9260] netlink: 'syz.0.1753': attribute type 2 has an invalid length. [ 165.023637][ T9272] device syzkaller0 entered promiscuous mode [ 165.031339][ T9274] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 165.047668][ T9273] device syzkaller0 entered promiscuous mode [ 165.102760][ T9275] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 165.264461][ T9283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'. [ 165.274405][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1762'. [ 165.310885][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1764'. [ 165.604728][ T9291] device syzkaller0 entered promiscuous mode [ 165.977238][ T9299] device syzkaller0 entered promiscuous mode [ 166.268404][ T9308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1774'. [ 166.545359][ T9314] device syzkaller0 entered promiscuous mode [ 167.085083][ T9233] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.285320][ T9337] device syzkaller0 entered promiscuous mode [ 167.443351][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 167.797974][ T9360] device syzkaller0 entered promiscuous mode [ 167.806983][ T9360] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 167.945932][ T9363] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 168.060706][ T9367] __nla_validate_parse: 5 callbacks suppressed [ 168.060723][ T9367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1799'. [ 168.076988][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 168.228022][ T9381] device syzkaller0 entered promiscuous mode [ 168.447587][ T9393] device syzkaller0 entered promiscuous mode [ 168.719136][ T9407] device syzkaller0 entered promiscuous mode [ 168.743679][ T9407] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 168.794516][ T9411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1812'. [ 168.811571][ T9411] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1812'. [ 169.030218][ T9416] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 170.794323][ T9437] device syzkaller0 entered promiscuous mode [ 171.158303][ T9374] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 171.235090][ T9440] device syzkaller0 entered promiscuous mode [ 171.257738][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1824'. [ 171.274413][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1824'. [ 171.892659][ T9480] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 171.968069][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1838'. [ 171.989613][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1838'. [ 172.098148][ T9487] device syzkaller0 entered promiscuous mode [ 172.134231][ T9487] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 172.155104][ T9489] device syzkaller0 entered promiscuous mode [ 172.314494][ T9497] netlink: 'syz.2.1844': attribute type 27 has an invalid length. [ 172.612986][ T9520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1850'. [ 172.650167][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1850'. [ 172.726000][ T9529] device syzkaller0 entered promiscuous mode [ 172.758011][ T9530] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 172.767290][ T9533] device syzkaller0 entered promiscuous mode [ 172.815260][ T9533] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 172.948885][ T9539] netlink: 'syz.1.1858': attribute type 27 has an invalid length. [ 173.263946][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1866'. [ 173.297873][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1866'. [ 173.467501][ T9574] device syzkaller0 entered promiscuous mode [ 173.503458][ T9574] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 173.579303][ T9576] device syzkaller0 entered promiscuous mode [ 173.741793][ T9583] netlink: 'syz.2.1873': attribute type 27 has an invalid length. [ 173.940266][ T9593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1878'. [ 173.961206][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1878'. [ 174.131914][ T9608] device syzkaller0 entered promiscuous mode [ 174.180070][ T9608] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 174.347081][ T9620] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1886'. [ 174.488841][ T9629] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 174.531720][ T9631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1891'. [ 174.562936][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1891'. [ 174.955746][ T9654] device syzkaller0 entered promiscuous mode [ 175.006677][ T9654] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 175.179170][ T9666] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1902'. [ 175.256044][ T9672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1904'. [ 175.284428][ T9672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1904'. [ 175.590071][ T9697] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 175.795393][ T9706] device syzkaller0 entered promiscuous mode [ 175.858331][ T9711] tipc: Enabled bearer , priority 0 [ 175.918900][ T9705] tipc: Resetting bearer [ 175.967589][ T9705] tipc: Disabling bearer [ 176.014064][ T9715] tipc: Enabled bearer , priority 0 [ 176.035352][ T9715] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 176.102862][ T9715] tipc: Resetting bearer [ 176.139492][ T9714] tipc: Disabling bearer [ 176.621756][ T9755] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: ba:00:00:00:37:51 [ 177.046862][ T9775] tipc: Enabled bearer , priority 0 [ 177.057912][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.065947][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 177.074105][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.082202][ T9776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.114314][ T9775] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 177.173947][ T9775] tipc: Resetting bearer [ 177.196078][ T9772] tipc: Disabling bearer [ 177.255779][ T9785] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.264948][ T9785] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.273761][ T9785] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.282967][ T9785] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 177.503918][ T9798] ip_tables: iptables: counters copy to user failed while replacing table [ 177.832906][ T9827] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 177.870273][ T9827] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 177.892101][ T9827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.909002][ T9827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.079563][ T9838] tipc: Enabled bearer , priority 0 [ 178.099808][ T9838] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 178.127694][ T9838] tipc: Resetting bearer [ 178.172386][ T9837] tipc: Disabling bearer [ 178.600833][ T9873] __nla_validate_parse: 20 callbacks suppressed [ 178.600852][ T9873] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1962'. [ 178.625413][ T9873] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1962'. [ 178.645675][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1964'. [ 178.665052][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1964'. [ 178.721356][ T9880] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 178.752659][ T9880] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 178.762047][ T9880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.773588][ T9880] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.801399][ T9890] veth0_to_team: Caught tx_queue_len zero misconfig [ 179.266601][ T9924] device syzkaller0 entered promiscuous mode [ 181.587874][ T9875] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 181.802117][ T9951] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 181.814606][ T9951] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 181.833722][ T9951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 181.855556][ T9951] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 181.916045][ T9965] [ 181.918413][ T9965] ====================================================== [ 181.925415][ T9965] WARNING: possible circular locking dependency detected [ 181.932464][ T9965] syzkaller #0 Not tainted [ 181.936860][ T9965] ------------------------------------------------------ [ 181.943863][ T9965] syz.0.1986/9965 is trying to acquire lock: [ 181.949829][ T9965] ffff88805c34c350 (&ndev->req_lock){+.+.}-{3:3}, at: nci_start_poll+0x8de/0xd10 [ 181.958973][ T9965] [ 181.958973][ T9965] but task is already holding lock: [ 181.966321][ T9965] ffff88805c34d5d8 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 181.976918][ T9965] [ 181.976918][ T9965] which lock already depends on the new lock. [ 181.976918][ T9965] [ 181.987403][ T9965] [ 181.987403][ T9965] the existing dependency chain (in reverse order) is: [ 181.996406][ T9965] [ 181.996406][ T9965] -> #3 (&genl_data->genl_data_mutex){+.+.}-{3:3}: [ 182.005115][ T9965] __mutex_lock_common+0x1e5/0x2400 [ 182.010834][ T9965] mutex_lock_nested+0x17/0x20 [ 182.016107][ T9965] nfc_urelease_event_work+0x120/0x310 [ 182.022087][ T9965] process_one_work+0x867/0xff0 [ 182.027451][ T9965] worker_thread+0xad7/0x12a0 [ 182.032639][ T9965] kthread+0x42e/0x520 [ 182.037215][ T9965] ret_from_fork+0x1f/0x30 [ 182.042314][ T9965] [ 182.042314][ T9965] -> #2 (nfc_devlist_mutex){+.+.}-{3:3}: [ 182.050111][ T9965] __mutex_lock_common+0x1e5/0x2400 [ 182.055827][ T9965] mutex_lock_nested+0x17/0x20 [ 182.061179][ T9965] nfc_register_device+0x38/0x300 [ 182.066732][ T9965] nci_register_device+0x89f/0x9f0 [ 182.072351][ T9965] virtual_ncidev_open+0x55/0xc0 [ 182.077831][ T9965] misc_open+0x31f/0x390 [ 182.082617][ T9965] chrdev_open+0x585/0x5f0 [ 182.087558][ T9965] do_dentry_open+0x7f7/0xf90 [ 182.092773][ T9965] path_openat+0x2718/0x2fb0 [ 182.097894][ T9965] do_filp_open+0x1df/0x400 [ 182.102907][ T9965] do_sys_openat2+0x14b/0x500 [ 182.108116][ T9965] __x64_sys_openat+0x135/0x160 [ 182.113495][ T9965] do_syscall_64+0x4c/0xa0 [ 182.118442][ T9965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.124846][ T9965] [ 182.124846][ T9965] -> #1 (nci_mutex){+.+.}-{3:3}: [ 182.131955][ T9965] __mutex_lock_common+0x1e5/0x2400 [ 182.137663][ T9965] mutex_lock_nested+0x17/0x20 [ 182.142947][ T9965] virtual_nci_close+0x13/0x40 [ 182.148231][ T9965] nci_dev_up+0x976/0xd90 [ 182.153103][ T9965] nfc_dev_up+0x15d/0x310 [ 182.157939][ T9965] nfc_genl_dev_up+0x85/0xd0 [ 182.163036][ T9965] genl_rcv_msg+0xd0b/0xfa0 [ 182.168065][ T9965] netlink_rcv_skb+0x1e9/0x430 [ 182.173338][ T9965] genl_rcv+0x24/0x40 [ 182.177839][ T9965] netlink_unicast+0x78f/0x940 [ 182.183116][ T9965] netlink_sendmsg+0x8ba/0xbe0 [ 182.188389][ T9965] ____sys_sendmsg+0x5be/0x8f0 [ 182.193693][ T9965] ___sys_sendmsg+0x236/0x2e0 [ 182.198894][ T9965] __se_sys_sendmsg+0x1b7/0x2a0 [ 182.204260][ T9965] do_syscall_64+0x4c/0xa0 [ 182.209198][ T9965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.215607][ T9965] [ 182.215607][ T9965] -> #0 (&ndev->req_lock){+.+.}-{3:3}: [ 182.223236][ T9965] __lock_acquire+0x38f7/0x7d40 [ 182.228781][ T9965] lock_acquire+0x19f/0x400 [ 182.233793][ T9965] __mutex_lock_common+0x1e5/0x2400 [ 182.239497][ T9965] mutex_lock_nested+0x17/0x20 [ 182.244767][ T9965] nci_start_poll+0x8de/0xd10 [ 182.250024][ T9965] nfc_start_poll+0x141/0x2c0 [ 182.255238][ T9965] nfc_genl_start_poll+0x1d7/0x340 [ 182.260857][ T9965] genl_rcv_msg+0xd0b/0xfa0 [ 182.265897][ T9965] netlink_rcv_skb+0x1e9/0x430 [ 182.271182][ T9965] genl_rcv+0x24/0x40 [ 182.275693][ T9965] netlink_unicast+0x78f/0x940 [ 182.280968][ T9965] netlink_sendmsg+0x8ba/0xbe0 [ 182.286237][ T9965] ____sys_sendmsg+0x5be/0x8f0 [ 182.291507][ T9965] ___sys_sendmsg+0x236/0x2e0 [ 182.296688][ T9965] __se_sys_sendmsg+0x1b7/0x2a0 [ 182.302059][ T9965] do_syscall_64+0x4c/0xa0 [ 182.306984][ T9965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.313385][ T9965] [ 182.313385][ T9965] other info that might help us debug this: [ 182.313385][ T9965] [ 182.323629][ T9965] Chain exists of: [ 182.323629][ T9965] &ndev->req_lock --> nfc_devlist_mutex --> &genl_data->genl_data_mutex [ 182.323629][ T9965] [ 182.337859][ T9965] Possible unsafe locking scenario: [ 182.337859][ T9965] [ 182.345302][ T9965] CPU0 CPU1 [ 182.350662][ T9965] ---- ---- [ 182.356017][ T9965] lock(&genl_data->genl_data_mutex); [ 182.361571][ T9965] lock(nfc_devlist_mutex); [ 182.368676][ T9965] lock(&genl_data->genl_data_mutex); [ 182.376658][ T9965] lock(&ndev->req_lock); [ 182.381061][ T9965] [ 182.381061][ T9965] *** DEADLOCK *** [ 182.381061][ T9965] [ 182.389186][ T9965] 4 locks held by syz.0.1986/9965: [ 182.394278][ T9965] #0: ffffffff8e2aa550 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 182.402443][ T9965] #1: ffffffff8e2aa3a8 (genl_mutex){+.+.}-{3:3}, at: genl_rcv_msg+0x161/0xfa0 [ 182.411385][ T9965] #2: ffff88805c34d5d8 (&genl_data->genl_data_mutex){+.+.}-{3:3}, at: nfc_genl_start_poll+0x1c9/0x340 [ 182.422434][ T9965] #3: ffff88805c34d190 (&dev->mutex){....}-{3:3}, at: nfc_start_poll+0x4f/0x2c0 [ 182.431561][ T9965] [ 182.431561][ T9965] stack backtrace: [ 182.437462][ T9965] CPU: 1 PID: 9965 Comm: syz.0.1986 Not tainted syzkaller #0 [ 182.444818][ T9965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 182.454887][ T9965] Call Trace: [ 182.458155][ T9965] [ 182.461509][ T9965] dump_stack_lvl+0x188/0x250 [ 182.466171][ T9965] ? load_image+0x410/0x410 [ 182.470659][ T9965] ? show_regs_print_info+0x20/0x20 [ 182.475845][ T9965] ? print_circular_bug+0x12b/0x1a0 [ 182.481051][ T9965] check_noncircular+0x2f8/0x400 [ 182.485994][ T9965] ? 0xffffffffa002a000 [ 182.490129][ T9965] ? print_deadlock_bug+0x5d0/0x5d0 [ 182.495306][ T9965] ? lockdep_lock+0xf1/0x1f0 [ 182.499883][ T9965] ? mark_lock+0x94/0x320 [ 182.504197][ T9965] ? _find_first_zero_bit+0xd1/0xf0 [ 182.509384][ T9965] __lock_acquire+0x38f7/0x7d40 [ 182.514229][ T9965] ? stack_trace_save+0xf0/0xf0 [ 182.519076][ T9965] ? verify_lock_unused+0x140/0x140 [ 182.524308][ T9965] ? stack_trace_save+0xa6/0xf0 [ 182.529149][ T9965] ? stack_trace_snprint+0xe0/0xe0 [ 182.534251][ T9965] ? check_noncircular+0x186/0x400 [ 182.539346][ T9965] ? print_deadlock_bug+0x5d0/0x5d0 [ 182.544529][ T9965] lock_acquire+0x19f/0x400 [ 182.549029][ T9965] ? nci_start_poll+0x8de/0xd10 [ 182.553891][ T9965] ? __might_sleep+0xf0/0xf0 [ 182.558472][ T9965] ? read_lock_is_recursive+0x10/0x10 [ 182.563857][ T9965] __mutex_lock_common+0x1e5/0x2400 [ 182.569048][ T9965] ? nci_start_poll+0x8de/0xd10 [ 182.573916][ T9965] ? verify_lock_unused+0x140/0x140 [ 182.579124][ T9965] ? nci_start_poll+0x8de/0xd10 [ 182.583973][ T9965] ? mutex_lock_io_nested+0x60/0x60 [ 182.589202][ T9965] mutex_lock_nested+0x17/0x20 [ 182.593953][ T9965] nci_start_poll+0x8de/0xd10 [ 182.598626][ T9965] ? nci_dev_down+0x40/0x40 [ 182.603114][ T9965] ? __mutex_lock_common+0x435/0x2400 [ 182.608470][ T9965] ? klist_iter_exit+0xbc/0xf0 [ 182.613222][ T9965] ? class_find_device+0x232/0x290 [ 182.618315][ T9965] ? nfc_start_poll+0x4f/0x2c0 [ 182.623063][ T9965] ? class_for_each_device+0x290/0x290 [ 182.628512][ T9965] ? nfc_genl_start_poll+0x1c9/0x340 [ 182.633787][ T9965] ? mutex_lock_io_nested+0x60/0x60 [ 182.638973][ T9965] ? nfc_get_device+0x82/0xd0 [ 182.643631][ T9965] ? nfc_release+0x2e0/0x2e0 [ 182.648211][ T9965] nfc_start_poll+0x141/0x2c0 [ 182.652876][ T9965] nfc_genl_start_poll+0x1d7/0x340 [ 182.657972][ T9965] genl_rcv_msg+0xd0b/0xfa0 [ 182.662476][ T9965] ? genl_bind+0x370/0x370 [ 182.666874][ T9965] ? verify_lock_unused+0x140/0x140 [ 182.672058][ T9965] ? verify_lock_unused+0x140/0x140 [ 182.677244][ T9965] ? nfc_genl_dev_down+0xd0/0xd0 [ 182.682170][ T9965] netlink_rcv_skb+0x1e9/0x430 [ 182.687002][ T9965] ? genl_bind+0x370/0x370 [ 182.691418][ T9965] ? netlink_ack+0xb10/0xb10 [ 182.695994][ T9965] ? down_read+0x1aa/0x2e0 [ 182.700404][ T9965] genl_rcv+0x24/0x40 [ 182.704365][ T9965] netlink_unicast+0x78f/0x940 [ 182.709135][ T9965] netlink_sendmsg+0x8ba/0xbe0 [ 182.713903][ T9965] ? netlink_getsockopt+0x570/0x570 [ 182.719112][ T9965] ? aa_sock_msg_perm+0x94/0x150 [ 182.724085][ T9965] ? apparmor_socket_sendmsg+0x88/0x230 [ 182.729620][ T9965] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 182.734893][ T9965] ? security_socket_sendmsg+0x7c/0xa0 [ 182.740347][ T9965] ? netlink_getsockopt+0x570/0x570 [ 182.745538][ T9965] ____sys_sendmsg+0x5be/0x8f0 [ 182.750296][ T9965] ? __sys_sendmsg_sock+0x30/0x30 [ 182.755397][ T9965] ? import_iovec+0x6f/0xa0 [ 182.759900][ T9965] ___sys_sendmsg+0x236/0x2e0 [ 182.764561][ T9965] ? __sys_sendmsg+0x290/0x290 [ 182.769326][ T9965] __se_sys_sendmsg+0x1b7/0x2a0 [ 182.774176][ T9965] ? __x64_sys_sendmsg+0x80/0x80 [ 182.779128][ T9965] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 182.785103][ T9965] ? lockdep_hardirqs_on+0x94/0x140 [ 182.790400][ T9965] do_syscall_64+0x4c/0xa0 [ 182.794822][ T9965] ? clear_bhb_loop+0x30/0x80 [ 182.799502][ T9965] ? clear_bhb_loop+0x30/0x80 [ 182.804164][ T9965] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 182.810053][ T9965] RIP: 0033:0x7f2064a2a1d9 [ 182.814451][ T9965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.834048][ T9965] RSP: 002b:00007f2062c61028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 182.842489][ T9965] RAX: ffffffffffffffda RBX: 00007f2064cb2090 RCX: 00007f2064a2a1d9 [ 182.850470][ T9965] RDX: 0000000004000000 RSI: 0000200000001780 RDI: 0000000000000005 [ 182.858424][ T9965] RBP: 00007f2064ac1888 R08: 0000000000000000 R09: 0000000000000000 [ 182.866374][ T9965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.874329][ T9965] R13: 00007f2064cb2128 R14: 00007f2064cb2090 R15: 00007fff396ef308 [ 182.882296][ T9965] [ 183.060834][ T9958] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.068117][ T9958] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.273189][ T9958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.289906][ T9958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.436792][ T9958] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.447786][ T9958] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.457070][ T9958] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.467876][ T9958] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.747696][ T9965] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 184.757342][ T9952] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 185.968910][ T9980] Bluetooth: hci2: command 0x0406 tx timeout [ 185.974977][ T9980] Bluetooth: hci0: command 0x0406 tx timeout [ 185.981095][ T9980] Bluetooth: hci1: command 0x0406 tx timeout [ 185.987268][ T9980] Bluetooth: hci3: command 0x0406 tx timeout