last executing test programs: 2m6.586795665s ago: executing program 2 (id=1904): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200002343ffff0000000000000000850000004100000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x4, @void}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x811) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x40084) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000000)=0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@typedef={0x1, 0x0, 0x0, 0x8, 0x3}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}, @type_tag={0x1, 0x0, 0x0, 0x12, 0x2}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x3}, 0x14}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000010c0)=@newqdisc={0x138, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x108, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x138}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 2m6.31075887s ago: executing program 2 (id=1912): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r1}, &(0x7f0000000340)=0x8) 2m5.428735951s ago: executing program 2 (id=1941): socket(0x28, 0x5, 0x0) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) close(0x4) 2m5.383079354s ago: executing program 2 (id=1943): syz_emit_ethernet(0x6e, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xcb, &(0x7f0000000040), 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050840) 2m5.233531232s ago: executing program 2 (id=1947): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0x1}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc", 0x1}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f00000033c0)="c6", 0x1}], 0x4}}], 0x2, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[], 0x18}], 0x1, 0x0, 0x0, 0x84}, 0x300) 2m5.176853175s ago: executing program 2 (id=1951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000640)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = getpid() ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x8, 0x3, 0xc2bf, {{0x21, 0x4, 0x1, 0x8, 0x84, 0x65, 0x0, 0xac, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}, {[@lsrr={0x83, 0x27, 0x15, [@loopback, @local, @multicast1, @broadcast, @local, @broadcast, @multicast2, @multicast2, @loopback]}, @timestamp={0x44, 0xc, 0xe1, 0x0, 0x6, [0x7, 0x2]}, @timestamp_prespec={0x44, 0x14, 0xfa, 0x3, 0x4, [{@loopback, 0x5}, {@empty, 0xf06000}]}, @ssrr={0x89, 0x3, 0x99}, @lsrr={0x83, 0x17, 0x19, [@rand_addr=0x64010100, @private=0xa010100, @rand_addr=0x64010101, @empty, @empty]}, @timestamp_addr={0x44, 0xc, 0xd5, 0x1, 0x0, [{@remote, 0x6}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r2, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, r1}}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x30}}, 0x48850) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r6, 0x89f5, &(0x7f0000000000)) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r7 = socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xffff7d3e, 0x83f0, 0x8a, 0x1, 0x649, 0x4}, {0xcab5, 0xffffff00, 0x7, 0x0, 0x7, 0x3ff}], ['\x00', '\x00']}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r9, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r10, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) 1m49.99978534s ago: executing program 32 (id=1951): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000640)=ANY=[@ANYRES32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = getpid() ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x20, 0x8, 0x3, 0xc2bf, {{0x21, 0x4, 0x1, 0x8, 0x84, 0x65, 0x0, 0xac, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x40}, {[@lsrr={0x83, 0x27, 0x15, [@loopback, @local, @multicast1, @broadcast, @local, @broadcast, @multicast2, @multicast2, @loopback]}, @timestamp={0x44, 0xc, 0xe1, 0x0, 0x6, [0x7, 0x2]}, @timestamp_prespec={0x44, 0x14, 0xfa, 0x3, 0x4, [{@loopback, 0x5}, {@empty, 0xf06000}]}, @ssrr={0x89, 0x3, 0x99}, @lsrr={0x83, 0x17, 0x19, [@rand_addr=0x64010100, @private=0xa010100, @rand_addr=0x64010101, @empty, @empty]}, @timestamp_addr={0x44, 0xc, 0xd5, 0x1, 0x0, [{@remote, 0x6}]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r0, r2, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000480), 0x0, 0x0, 0x0, 0x0, r1}}, 0x40) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@ipv4_newrule={0x30, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x9}]}, 0x30}}, 0x48850) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r6, 0x89f5, &(0x7f0000000000)) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) r7 = socket$nl_route(0x10, 0x3, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$FS_IOC_GETFSMAP(r5, 0xc0c0583b, &(0x7f00000004c0)={0x0, 0x0, 0x2, 0x0, '\x00', [{0xffff7d3e, 0x83f0, 0x8a, 0x1, 0x649, 0x4}, {0xcab5, 0xffffff00, 0x7, 0x0, 0x7, 0x3ff}], ['\x00', '\x00']}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x1c, r9, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x54}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0xf0) ioctl$sock_ax25_SIOCADDRT(r10, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null]}) 50.938130214s ago: executing program 5 (id=2121): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)="28b3", 0x2}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}, {{&(0x7f0000001a80)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000001ac0)="01", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) socket$kcm(0x11, 0x200000000000002, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 50.773927644s ago: executing program 5 (id=2124): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000004c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x7, 0x30}]}, &(0x7f0000000180)='syzkaller\x00', 0x3, 0xdd, &(0x7f00000001c0)=""/221, 0x0, 0x20}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x31) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401000000000000000000090002002f797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x4, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0xe, @in6={0xa, 0x4e20, 0xe3d, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x31, 0x0, 0x0, @in6={0xa, 0x4e20, 0x3ff, @remote, 0x4}}]}, 0x70}}, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x58, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xffffffffffffff9c}, {0xffffffffffffffe8, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r6, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x14040080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 50.339555829s ago: executing program 3 (id=2132): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/9, 0x9}], 0x1, 0xfffffe01, 0x3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 50.162984939s ago: executing program 5 (id=2135): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x84, @remote, 0x0, 0x0, 'sh\x00', 0x21, 0x80, 0x5c}, 0x2c) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 50.162393809s ago: executing program 5 (id=2136): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg$can_raw(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000bc0)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 50.15226928s ago: executing program 1 (id=2137): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x80, 0x9, 0x0, 0x6, 0xb19, 0x116, 0x4, 0x9, r2}, 0x20) 50.115816492s ago: executing program 1 (id=2138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000001100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 49.472013699s ago: executing program 3 (id=2143): unshare(0x22020400) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0xfffffc01, 0x4) 49.464512079s ago: executing program 1 (id=2144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 49.434104711s ago: executing program 3 (id=2145): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a7000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xfffff7ff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80820}, 0xc0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="7d7e158254d4009fac68c6b31434873fffb68bfcb93b49fe5e49f8de18d036082243175735aa6a3e87ed949697579a2e4943790594e40b47d948514536a1ac9876c24a8c905e440d3443acd962f2a5e9a533efee9ee876bcca211dd0cef082bbcd468f1bba644a7f7320f0fa984ac87b552bfc30b935f179be4d615cd8e1b70de175e5af5722f04b05b31e84f3f710b3fa23c6242892"], 0x4c}}, 0x884) 49.382618054s ago: executing program 1 (id=2148): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x80, 0x9, 0x0, 0x6, 0xb19, 0x116, 0x4, 0x9, r2}, 0x20) 49.361921355s ago: executing program 1 (id=2149): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001fffafb3a5b2e76915abe9683c00", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800b00010067656e65766500000c0002800500", @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x0) 49.321159377s ago: executing program 5 (id=2150): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000007cc0)=[{{&(0x7f0000000800)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0xd}, 0x6}, 0x1c, &(0x7f0000001880)=[{&(0x7f0000000340)="28b3", 0x2}], 0x1, &(0x7f00000019c0)=ANY=[@ANYBLOB="24000000000000002001000000000000000000000000000e14b65b156c4d1400", @ANYRES32=0x0, @ANYBLOB="00000000400000000000000029000000360000001d04000000000000000100c90300000000000000000000ffffac1414aac910fe8800000000000000000000000001010014000000000000002900000008000000070000000000000014000000000000002900000008000000060000000000000014"], 0xb0}}, {{&(0x7f0000001a80)={0xa, 0x4e23, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x3}, 0x1c, &(0x7f0000002e00)=[{&(0x7f0000001ac0)="01", 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) socket$kcm(0x11, 0x200000000000002, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10001, 0x1, 0x3, 0x8, 0xffffffc0}, 0x4, 0x1, 0x8, 0x0, 0x3, 0x0, 0x16, 0x13, 0x3, 0xca, {0x0, 0x8, 0x3, 0x5, 0x84, 0x8}}}}]}, 0x78}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 49.202897945s ago: executing program 0 (id=2151): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42008, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'ipvlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x20, r1, 0x1, 0x70bd2d, 0x25dddbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x30008010) 49.135860358s ago: executing program 3 (id=2152): sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008024) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 49.083556322s ago: executing program 3 (id=2153): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000200)=""/9, 0x9}], 0x1, 0xfffffe01, 0x3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) 49.081638511s ago: executing program 1 (id=2154): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x8, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 48.482654796s ago: executing program 5 (id=2156): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x411, 0x70bd27, 0x25dfdbbd, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x40606}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040054}, 0x20048000) 48.436053749s ago: executing program 0 (id=2157): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 48.413546879s ago: executing program 0 (id=2158): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0019402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6", 0xc5}], 0x1}, 0x60044084) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) syz_80211_inject_frame(0x0, &(0x7f0000000040)=@ctrl_frame=@rts={{}, {0xa}, @device_b, @broadcast}, 0x10) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=@NCI_OP_CORE_RESET_NTF={0x0, 0x1, 0x3, 0x0, 0x9, {0x45, 0x2, 0x20, 0x2, 0xf, 0x4}}, 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) bind(r2, &(0x7f00000002c0)=@qipcrtr={0x2a, 0x2, 0x8000}, 0x80) socket(0x15, 0x5, 0x0) 48.260117318s ago: executing program 3 (id=2159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 47.839064653s ago: executing program 0 (id=2160): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg$can_raw(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000bc0)=ANY=[], 0x32600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 47.03602645s ago: executing program 0 (id=2161): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x0) 47.01736624s ago: executing program 0 (id=2162): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 33.357790237s ago: executing program 33 (id=2154): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x8, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 33.340506168s ago: executing program 34 (id=2156): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x411, 0x70bd27, 0x25dfdbbd, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x40606}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24040054}, 0x20048000) 32.356959995s ago: executing program 35 (id=2159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 31.350665173s ago: executing program 36 (id=2162): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}, [@TCA_CHAIN={0x8, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 13.058240047s ago: executing program 4 (id=2182): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x3f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r3) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000001100000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) 1.752553859s ago: executing program 4 (id=2183): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20008024) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 1.683023113s ago: executing program 4 (id=2184): r0 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r0, 0x211, 0x70bd25, 0x25dfdbfb, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x20044010) 1.682599993s ago: executing program 4 (id=2185): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x4924924924924b9, 0x0) recvmsg$can_raw(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000780)=""/4096, 0x1000}], 0x1}, 0x40000003) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 849.788791ms ago: executing program 4 (id=2186): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x80, 0x9, 0x0, 0x6, 0xb19, 0x116, 0x4, 0x9, r2}, 0x20) 0s ago: executing program 4 (id=2187): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 14908][ T5764] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 55.218624][ T5764] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 55.221125][ T5764] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 55.223322][ T5764] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 55.447688][ T5818] device syzkaller0 entered promiscuous mode [ 56.199671][ T5862] netlink: 36 bytes leftover after parsing attributes in process `syz.2.528'. [ 57.212252][ T4327] Bluetooth: hci0: command 0x0c1a tx timeout [ 57.302287][ T4336] Bluetooth: hci4: command 0x0c1a tx timeout [ 57.303318][ T4336] Bluetooth: hci3: command 0x0c1a tx timeout [ 57.304284][ T4336] Bluetooth: hci2: command 0x0c1a tx timeout [ 57.305310][ T4336] Bluetooth: hci1: command 0x0c1a tx timeout [ 57.552447][ T27] audit: type=1326 audit(57.540:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5876 comm="syz.2.535" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f77368 code=0x0 [ 57.655089][ T5877] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 57.656090][ T5877] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 57.657091][ T5877] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 57.658028][ T5877] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 57.658884][ T5877] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 58.430446][ T5831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 58.536819][ T5899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.543'. [ 58.718818][ T27] audit: type=1326 audit(58.700:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5906 comm="syz.2.546" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f77368 code=0x0 [ 58.819763][ T5907] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 58.820787][ T5907] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 58.821711][ T5907] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 58.829757][ T5907] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 58.830795][ T5907] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 59.836305][ T5981] netlink: 'syz.0.576': attribute type 13 has an invalid length. [ 59.840362][ T5981] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 59.843866][ T5981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.845249][ T5981] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.947828][ T27] audit: type=1326 audit(59.930:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.4.577" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4577368 code=0x0 [ 60.056844][ T5984] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 60.064502][ T5984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.065715][ T5984] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.066755][ T5984] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.067718][ T5984] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 60.881093][ T6021] netlink: 'syz.2.590': attribute type 13 has an invalid length. [ 60.884582][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 60.886521][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.887658][ T6021] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 61.205492][ T27] audit: type=1326 audit(61.190:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6042 comm="syz.2.598" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f77368 code=0x0 [ 61.308655][ T6043] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.310444][ T6043] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.311539][ T6043] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.312904][ T6043] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.313963][ T6043] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 62.042047][ T6053] netlink: 'syz.2.601': attribute type 13 has an invalid length. [ 62.045143][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.047142][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.048266][ T6053] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.445371][ T27] audit: type=1326 audit(62.430:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6076 comm="syz.2.610" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f77368 code=0x0 [ 62.547199][ T6077] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 62.548156][ T6077] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 62.549116][ T6077] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 62.550117][ T6077] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 62.550384][ T5964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 62.551102][ T6077] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 62.627774][ T6088] netlink: 'syz.3.612': attribute type 13 has an invalid length. [ 62.651271][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 62.661873][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 62.664477][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 62.844231][ T6120] netlink: 'syz.1.624': attribute type 1 has an invalid length. [ 62.888614][ T6120] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 62.891339][ T6120] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 62.930440][ T6132] netlink: 20 bytes leftover after parsing attributes in process `syz.1.624'. [ 62.935795][ T6132] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 62.940597][ T6132] netlink: 28 bytes leftover after parsing attributes in process `syz.1.624'. [ 62.946275][ T6132] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.952765][ T6120] device macvlan2 entered promiscuous mode [ 62.954431][ T6120] device bond2 entered promiscuous mode [ 62.955838][ T6120] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 62.958562][ T6120] device bond2 left promiscuous mode [ 63.037202][ T6139] netlink: 'syz.3.632': attribute type 1 has an invalid length. [ 63.046464][ T6139] 8021q: adding VLAN 0 to HW filter on device bond3 [ 63.097540][ T6148] netlink: 'syz.1.636': attribute type 13 has an invalid length. [ 63.100882][ T6148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 63.104092][ T6148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.105484][ T6148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.349019][ T6172] netlink: 'syz.1.645': attribute type 1 has an invalid length. [ 63.357359][ T6172] 8021q: adding VLAN 0 to HW filter on device bond3 [ 63.406127][ T6180] netlink: 'syz.1.648': attribute type 13 has an invalid length. [ 63.409107][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 63.411298][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 63.414376][ T6180] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 63.598589][ T27] audit: type=1326 audit(63.580:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6187 comm="syz.2.649" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f77368 code=0x0 [ 63.703820][ T6188] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 63.705052][ T6188] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 63.706208][ T6188] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 63.707341][ T6188] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 63.708386][ T6188] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 63.712131][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.651'. [ 64.493895][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.495008][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 64.519779][ T6211] netlink: 'syz.2.658': attribute type 1 has an invalid length. [ 64.529752][ T6211] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.559278][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 64.561180][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.565053][ T6216] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.870996][ T27] audit: type=1326 audit(64.850:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6220 comm="syz.2.662" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f77368 code=0x0 [ 64.972949][ T6221] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 64.974064][ T6221] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 64.975084][ T6221] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 64.976100][ T6221] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 64.977040][ T6221] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 65.749312][ T6118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.797837][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.664'. [ 65.874911][ T6244] validate_nla: 1 callbacks suppressed [ 65.874926][ T6244] netlink: 'syz.4.671': attribute type 13 has an invalid length. [ 65.880459][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 65.884176][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.885453][ T6244] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.898329][ T6248] netlink: 24 bytes leftover after parsing attributes in process `syz.1.673'. [ 65.906367][ T6247] device syzkaller0 entered promiscuous mode [ 66.019216][ T27] audit: type=1326 audit(66.000:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6249 comm="syz.0.674" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf77368 code=0x0 [ 66.127454][ T6250] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 66.128817][ T6250] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 66.130041][ T6250] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 66.131199][ T6250] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 66.133422][ T6250] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 66.319082][ T6287] device syzkaller0 entered promiscuous mode [ 66.820876][ T6298] netlink: 'syz.2.687': attribute type 13 has an invalid length. [ 66.826237][ T6298] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 66.828128][ T6298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.829518][ T6298] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.188931][ T6318] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 67.335541][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.697'. [ 67.505776][ T6340] netlink: 'syz.4.702': attribute type 13 has an invalid length. [ 67.509008][ T6340] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.511010][ T6340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.512725][ T6340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.906142][ T6319] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 68.092317][ T4327] Bluetooth: hci0: command 0x0c1a tx timeout [ 68.113848][ T6367] netlink: 'syz.0.714': attribute type 13 has an invalid length. [ 68.119238][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.125479][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.126795][ T6367] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.172429][ T4327] Bluetooth: hci4: command 0x0c1a tx timeout [ 68.173491][ T4327] Bluetooth: hci3: command 0x0c1a tx timeout [ 68.174425][ T4327] Bluetooth: hci2: command 0x0c1a tx timeout [ 68.175351][ T4327] Bluetooth: hci1: command 0x0c1a tx timeout [ 68.427537][ T6401] device syzkaller0 entered promiscuous mode [ 68.430256][ T6401] 0: reclassify loop, rule prio 0, protocol 700 [ 68.626919][ T6404] netlink: 8 bytes leftover after parsing attributes in process `syz.3.725'. [ 68.704866][ T6417] netlink: 'syz.0.731': attribute type 13 has an invalid length. [ 68.708203][ T6417] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.710093][ T6417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.711277][ T6417] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.069072][ T6452] netlink: 'syz.0.744': attribute type 13 has an invalid length. [ 69.073366][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.075216][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.076462][ T6452] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.085085][ T6454] netlink: 68 bytes leftover after parsing attributes in process `syz.4.745'. [ 69.351120][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'. [ 69.395625][ T6480] netlink: 24 bytes leftover after parsing attributes in process `syz.4.752'. [ 69.777363][ T6507] netlink: 'syz.0.758': attribute type 13 has an invalid length. [ 69.780812][ T6507] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 69.788488][ T6507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 69.797844][ T6507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 69.824575][ T6510] device syzkaller0 entered promiscuous mode [ 72.021134][ T6456] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 80.956665][ T6546] binder_user_error: 6 callbacks suppressed [ 80.956675][ T6546] binder: 6544:6546 tried to acquire reference to desc 0, got 1 instead [ 80.959591][ T6546] binder: 6544:6546 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 80.961591][ T6546] binder: 6546 RLIMIT_NICE not set [ 80.965900][ T6546] binder: 6544:6546 got reply transaction with bad transaction stack, transaction 71 has target 6544:0 [ 80.967624][ T6546] binder_debug: 10 callbacks suppressed [ 80.967636][ T6546] binder: 6544:6546 transaction reply to 0:0 failed 72/29201/-71, size 0-0 line 2961 [ 80.970308][ T4383] binder: release 6544:6546 transaction 71 out, still active [ 80.971435][ T4383] binder: undelivered TRANSACTION_COMPLETE [ 80.976674][ T4383] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.989576][ T4383] binder: send failed reply for transaction 71, target dead [ 81.116631][ T6569] netlink: 24 bytes leftover after parsing attributes in process `syz.3.775'. [ 81.126437][ T6571] netlink: 'syz.2.776': attribute type 13 has an invalid length. [ 81.129510][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 81.132988][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.134309][ T6571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.204984][ T6575] device syzkaller0 entered promiscuous mode [ 81.206494][ T6578] binder: 6576:6578 tried to acquire reference to desc 0, got 1 instead [ 81.218286][ T6578] binder: 6576:6578 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 81.227048][ T6578] binder: 6578 RLIMIT_NICE not set [ 81.228056][ T6578] binder: 6576:6578 got reply transaction with bad transaction stack, transaction 77 has target 6576:0 [ 81.234420][ T6578] binder: 6576:6578 transaction reply to 0:0 failed 78/29201/-71, size 0-0 line 2961 [ 81.238492][ T7] binder: release 6576:6578 transaction 77 out, still active [ 81.239758][ T7] binder: undelivered TRANSACTION_COMPLETE [ 81.240759][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.250704][ T7] binder: send failed reply for transaction 77, target dead [ 84.090593][ T6572] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 92.276313][ T6623] binder: 6622:6623 tried to acquire reference to desc 0, got 1 instead [ 92.278273][ T6623] binder: 6622:6623 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 92.280535][ T6623] binder: 6623 RLIMIT_NICE not set [ 92.281513][ T6623] binder: 6622:6623 got reply transaction with bad transaction stack, transaction 83 has target 6622:0 [ 92.283750][ T6623] binder: 6622:6623 transaction reply to 0:0 failed 84/29201/-71, size 0-0 line 2961 [ 92.285692][ T14] binder: release 6622:6623 transaction 83 out, still active [ 92.286888][ T14] binder: undelivered TRANSACTION_COMPLETE [ 92.287791][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.298329][ T14] binder: send failed reply for transaction 83, target dead [ 92.504993][ T6643] netlink: 32 bytes leftover after parsing attributes in process `syz.4.796'. [ 92.506594][ T6643] netlink: 64 bytes leftover after parsing attributes in process `syz.4.796'. [ 92.508971][ T6643] tipc: Started in network mode [ 92.509652][ T6643] tipc: Node identity ffffffff, cluster identity 4711 [ 92.512500][ T6643] tipc: Node number set to 4294967295 [ 92.550416][ T6647] netlink: 'syz.4.798': attribute type 13 has an invalid length. [ 92.555113][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 92.555389][ T6641] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 92.557403][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 92.558622][ T6647] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 92.569083][ T6648] device gretap1 entered promiscuous mode [ 92.763229][ T6664] binder: 6663:6664 tried to acquire reference to desc 0, got 1 instead [ 92.766245][ T6664] binder: 6663:6664 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 92.773095][ T6664] binder: 6664 RLIMIT_NICE not set [ 92.774044][ T6664] binder: 6663:6664 got reply transaction with bad transaction stack, transaction 89 has target 6663:0 [ 92.775948][ T6664] binder: 6663:6664 transaction reply to 0:0 failed 90/29201/-71, size 0-0 line 2961 [ 92.777928][ T14] binder: release 6663:6664 transaction 89 out, still active [ 92.779055][ T14] binder: undelivered TRANSACTION_COMPLETE [ 92.779883][ T14] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.789806][ T4376] binder: send failed reply for transaction 89, target dead [ 92.915129][ T6676] netlink: 28 bytes leftover after parsing attributes in process `syz.4.807'. [ 92.987959][ T6683] netlink: 'syz.1.811': attribute type 1 has an invalid length. [ 93.056577][ T6691] binder: 6690:6691 tried to acquire reference to desc 0, got 1 instead [ 93.058295][ T6691] binder: 6690:6691 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 93.565472][ T6733] device syzkaller0 entered promiscuous mode [ 104.515368][ T6744] netlink: 'syz.0.828': attribute type 1 has an invalid length. [ 104.601482][ T6785] binder_user_error: 6 callbacks suppressed [ 104.601491][ T6785] binder: 6783:6785 tried to acquire reference to desc 0, got 1 instead [ 104.615182][ T6785] binder: 6783:6785 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 104.617190][ T6785] binder: 6785 RLIMIT_NICE not set [ 104.618031][ T6785] binder: 6785 RLIMIT_NICE not set [ 104.628028][ T6785] binder: 6783:6785 ioctl c0306201 0 returned -14 [ 104.629318][ T4376] binder_debug: 10 callbacks suppressed [ 104.629324][ T4376] binder: release 6783:6785 transaction 107 out, still active [ 104.631260][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 104.658218][ T4376] binder: release 6783:6785 transaction 107 in, still active [ 104.659435][ T4376] binder: send failed reply for transaction 107, target dead [ 104.747846][ T27] audit: type=1326 audit(104.730:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6797 comm="syz.0.844" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf77368 code=0x0 [ 104.857074][ T6799] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.858346][ T6799] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.859548][ T6799] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.860716][ T6799] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.861886][ T6799] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 104.889693][ T6820] device syzkaller0 entered promiscuous mode [ 104.970510][ T6824] binder: 6823:6824 tried to acquire reference to desc 0, got 1 instead [ 104.972780][ T6824] binder: 6823:6824 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 104.975766][ T6824] binder: 6824 RLIMIT_NICE not set [ 104.976755][ T6824] binder: 6824 RLIMIT_NICE not set [ 104.977898][ T6824] binder: 6823:6824 ioctl c0306201 0 returned -14 [ 104.979167][ T7] binder: release 6823:6824 transaction 112 out, still active [ 104.980373][ T7] binder: undelivered TRANSACTION_COMPLETE [ 104.988063][ T7] binder: release 6823:6824 transaction 112 in, still active [ 104.989151][ T7] binder: send failed reply for transaction 112, target dead [ 105.209080][ T6850] device syzkaller0 entered promiscuous mode [ 105.221565][ T6852] binder: 6851:6852 tried to acquire reference to desc 0, got 1 instead [ 105.223582][ T6852] binder: 6851:6852 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 105.225965][ T6852] binder: 6851:6852 ioctl c0306201 0 returned -14 [ 105.227358][ T4376] binder: release 6851:6852 transaction 117 out, still active [ 105.228911][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 105.339411][ T6864] netlink: 'syz.1.871': attribute type 1 has an invalid length. [ 105.346116][ T6864] 8021q: adding VLAN 0 to HW filter on device bond5 [ 105.593997][ T6891] device syzkaller0 entered promiscuous mode [ 106.812307][ T4336] Bluetooth: hci0: command 0x0c1a tx timeout [ 106.892268][ T4327] Bluetooth: hci4: command 0x0c1a tx timeout [ 106.892313][ T4336] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.893267][ T4327] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.894247][ T4336] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.694351][ T6899] netlink: 'syz.1.884': attribute type 1 has an invalid length. [ 116.839118][ T27] audit: type=1326 audit(116.820:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6921 comm="syz.3.891" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87577368 code=0x0 [ 116.912891][ T6946] binder_user_error: 6 callbacks suppressed [ 116.912901][ T6946] binder: 6945:6946 tried to acquire reference to desc 0, got 1 instead [ 116.916109][ T6946] binder: 6945:6946 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 116.918408][ T6946] binder: 6946 RLIMIT_NICE not set [ 116.919266][ T6946] binder: 6946 RLIMIT_NICE not set [ 116.920588][ T1964] binder_debug: 6 callbacks suppressed [ 116.920595][ T1964] binder: release 6945:6946 transaction 127 out, still active [ 116.923046][ T1964] binder: undelivered TRANSACTION_COMPLETE [ 116.930211][ T3897] binder: release 6945:6946 transaction 127 in, still active [ 116.931430][ T3897] binder: send failed reply for transaction 127, target dead [ 116.949084][ T6926] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 116.950547][ T6926] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.951425][ T6926] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.953226][ T6926] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.954301][ T6926] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 117.041809][ T6960] netlink: 'syz.2.899': attribute type 1 has an invalid length. [ 117.049964][ T6960] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.156845][ T6970] device syzkaller0 entered promiscuous mode [ 117.636283][ T6984] binder: 6983:6984 tried to acquire reference to desc 0, got 1 instead [ 117.638238][ T6984] binder: 6983:6984 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 117.640348][ T6984] binder: 6984 RLIMIT_NICE not set [ 117.641115][ T6984] binder: 6984 RLIMIT_NICE not set [ 117.667320][ T3897] binder: release 6983:6984 transaction 132 out, still active [ 117.668525][ T3897] binder: undelivered TRANSACTION_COMPLETE [ 117.682182][ T3897] binder: release 6983:6984 transaction 132 in, still active [ 117.684100][ T3897] binder: send failed reply for transaction 132, target dead [ 117.684780][ T6991] netlink: 'syz.0.910': attribute type 1 has an invalid length. [ 117.704938][ T6991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 117.911592][ T7012] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 117.920820][ T27] audit: type=1326 audit(117.900:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7013 comm="syz.3.918" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87577368 code=0x0 [ 117.955188][ T7019] binder: 7018:7019 tried to acquire reference to desc 0, got 1 instead [ 117.956881][ T7019] binder: 7018:7019 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 117.959255][ T4376] binder: release 7018:7019 transaction 137 out, still active [ 117.960451][ T4376] binder: undelivered TRANSACTION_COMPLETE [ 118.016063][ T7014] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.017244][ T7014] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 118.018303][ T7014] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.019395][ T7014] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.020656][ T7014] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 118.088104][ T7034] netlink: 'syz.0.926': attribute type 1 has an invalid length. [ 118.095321][ T7034] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.438912][ T7050] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 118.645752][ T7063] device syzkaller0 entered promiscuous mode [ 120.012347][ T4322] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.102267][ T4336] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.103255][ T4336] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.104214][ T4336] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.105138][ T4336] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.932735][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.933809][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 129.954371][ T7068] netlink: 'syz.0.939': attribute type 1 has an invalid length. [ 129.973164][ T7078] netlink: 4 bytes leftover after parsing attributes in process `syz.3.944'. [ 130.024783][ T7106] device syzkaller0 entered promiscuous mode [ 130.088497][ T27] audit: type=1326 audit(130.070:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7107 comm="syz.4.951" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4577368 code=0x0 [ 130.093223][ T7104] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1500) ! [ 130.217476][ T7108] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.219784][ T7108] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.221975][ T7108] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.224535][ T7108] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.225441][ T7108] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 130.250212][ T7135] ax25_connect(): syz.2.961 uses autobind, please contact jreuter@yaina.de [ 130.261813][ T7137] device syzkaller0 entered promiscuous mode [ 130.932038][ T7157] device syzkaller0 entered promiscuous mode [ 132.182311][ T4322] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.252302][ T4336] Bluetooth: hci4: command 0x0c1a tx timeout [ 132.252324][ T4322] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.253336][ T4336] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.254295][ T4322] Bluetooth: hci1: command 0x0c1a tx timeout [ 141.853941][ T7164] device syzkaller0 entered promiscuous mode [ 142.014613][ T7182] device syzkaller0 entered promiscuous mode [ 142.038964][ T27] audit: type=1326 audit(142.020:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7191 comm="syz.3.978" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87577368 code=0x0 [ 142.147320][ T7192] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.148548][ T7192] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 142.149864][ T7192] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 142.150963][ T7192] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.152077][ T7192] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 142.701055][ T7228] netlink: 64 bytes leftover after parsing attributes in process `syz.1.985'. [ 142.795868][ T7237] device syzkaller0 entered promiscuous mode [ 143.264897][ T7252] device syzkaller0 entered promiscuous mode [ 143.685327][ T27] audit: type=1326 audit(143.670:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.4.1002" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4577368 code=0x0 [ 144.052483][ T7270] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 144.053592][ T7270] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 144.054625][ T7270] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 144.055554][ T7270] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 144.056620][ T7270] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 144.065223][ T7281] device syzkaller0 entered promiscuous mode [ 144.296646][ T7303] device syzkaller0 entered promiscuous mode [ 144.298979][ T7305] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 146.092368][ T4322] Bluetooth: hci4: command 0x0c1a tx timeout [ 146.092391][ T4327] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.093406][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.094419][ T4327] Bluetooth: hci1: command 0x0c1a tx timeout [ 146.095296][ T4322] Bluetooth: hci0: command 0x0c1a tx timeout [ 152.552842][ T27] audit: type=1326 audit(152.530:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.1.1027" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b77368 code=0x0 [ 152.636155][ T7359] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.637302][ T7359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.638847][ T7359] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.639754][ T7359] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.640667][ T7359] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 152.756427][ T7390] 8021q: VLANs not supported on vcan0 [ 152.869551][ T7402] netlink: 'syz.4.1042': attribute type 1 has an invalid length. [ 152.892950][ T7402] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 152.895769][ T7402] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 152.939643][ T7402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1042'. [ 152.947518][ T7402] bond3: (slave bridge6): Enslaving as an active interface with a down link [ 152.951226][ T7402] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1042'. [ 153.486872][ T7430] 8021q: VLANs not supported on vcan0 [ 153.581213][ T7441] netlink: 'syz.0.1055': attribute type 1 has an invalid length. [ 153.594413][ T7441] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 153.596872][ T7441] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 153.643425][ T27] audit: type=1326 audit(153.630:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7438 comm="syz.1.1056" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b77368 code=0x0 [ 153.643711][ T7447] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1055'. [ 153.654457][ T7447] bond4: (slave bridge5): Enslaving as an active interface with a down link [ 153.660243][ T7441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1055'. [ 153.741671][ T7440] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.742861][ T7440] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.743759][ T7440] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.744712][ T7440] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.745730][ T7440] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 153.832877][ T7450] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 153.834646][ T7451] device gretap1 entered promiscuous mode [ 153.885649][ T7459] ax25_connect(): syz.2.1061 uses autobind, please contact jreuter@yaina.de [ 154.168499][ C1] vcan0: j1939_tp_rxtimer: 0x0000000004c7294a: rx timeout, send abort [ 154.261883][ T7477] 8021q: VLANs not supported on vcan0 [ 154.488117][ T7489] netlink: 'syz.3.1072': attribute type 1 has an invalid length. [ 154.503928][ T7492] ax25_connect(): syz.1.1073 uses autobind, please contact jreuter@yaina.de [ 154.507969][ T7489] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 154.510585][ T7489] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 154.545007][ T7489] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1072'. [ 154.551712][ T7489] bond4: (slave bridge4): Enslaving as an active interface with a down link [ 154.557678][ T7489] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1072'. [ 154.584319][ T7494] device gretap1 entered promiscuous mode [ 154.669004][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c9902809: rx timeout, send abort [ 154.670480][ C1] vcan0: j1939_tp_rxtimer: 0x0000000004c7294a: abort rx timeout. Force session deactivation [ 154.760112][ T7507] 8021q: VLANs not supported on vcan0 [ 154.878091][ T27] audit: type=1326 audit(154.860:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.3.1081" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87577368 code=0x0 [ 154.904493][ T7521] netlink: 'syz.4.1085': attribute type 1 has an invalid length. [ 154.917517][ T7521] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 154.919858][ T7521] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 154.922934][ T7525] ax25_connect(): syz.2.1086 uses autobind, please contact jreuter@yaina.de [ 154.964559][ T7521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1085'. [ 154.969924][ T7521] bond4: (slave bridge7): Enslaving as an active interface with a down link [ 154.975879][ T7511] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 154.980421][ T7511] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 154.983629][ T7511] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 154.986352][ T7511] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 154.988025][ T7511] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 155.078626][ T7539] device syzkaller0 entered promiscuous mode [ 155.170298][ C1] vcan0: j1939_tp_rxtimer: 0x00000000c9902809: abort rx timeout. Force session deactivation [ 155.287909][ T7542] device gretap2 entered promiscuous mode [ 155.324403][ T7545] 8021q: VLANs not supported on vcan0 [ 155.590835][ T7557] netlink: 'syz.4.1099': attribute type 1 has an invalid length. [ 155.600361][ T7557] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 155.603413][ T7557] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 155.634895][ T7557] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1099'. [ 155.640189][ T7557] bond5: (slave bridge8): Enslaving as an active interface with a down link [ 155.670549][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e9a15e73: rx timeout, send abort [ 155.708147][ T7565] device syzkaller0 entered promiscuous mode [ 155.827839][ T7577] 8021q: VLANs not supported on vcan0 [ 155.998021][ T7592] netlink: 'syz.4.1112': attribute type 1 has an invalid length. [ 156.007716][ T7592] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 156.010391][ T7592] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 156.012149][ T7585] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 156.025082][ T27] audit: type=1326 audit(156.010:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7586 comm="syz.2.1110" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f77368 code=0x0 [ 156.046813][ T7592] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1112'. [ 156.051540][ T7592] bond6: (slave bridge9): Enslaving as an active interface with a down link [ 156.121148][ T7587] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 156.123068][ T7587] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 156.124059][ T7587] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.125027][ T7587] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 156.126567][ T7587] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 156.170582][ C0] vcan0: j1939_tp_rxtimer: 0x000000005fa5ddd6: rx timeout, send abort [ 156.171932][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e9a15e73: abort rx timeout. Force session deactivation [ 156.201737][ T7609] device syzkaller0 entered promiscuous mode [ 156.365434][ T7617] 8021q: VLANs not supported on vcan0 [ 156.495521][ T7623] device syzkaller0 entered promiscuous mode [ 156.574915][ T7625] netlink: 'syz.1.1124': attribute type 1 has an invalid length. [ 156.585375][ T7625] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 156.587799][ T7625] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 156.621941][ T7628] netlink: 'syz.0.1125': attribute type 1 has an invalid length. [ 156.635407][ T7628] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 156.637763][ T7628] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 156.642006][ T7630] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1124'. [ 156.648825][ T7630] bond6: (slave bridge5): Enslaving as an active interface with a down link [ 156.659707][ T7630] 8021q: adding VLAN 0 to HW filter on device bond6 [ 156.667955][ T7630] device macvlan2 entered promiscuous mode [ 156.669777][ T7630] device bond6 entered promiscuous mode [ 156.671093][ T7630] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 156.672177][ C0] vcan0: j1939_tp_rxtimer: 0x000000005fa5ddd6: abort rx timeout. Force session deactivation [ 156.676046][ T7630] device bond6 left promiscuous mode [ 156.688984][ T7631] 8021q: adding VLAN 0 to HW filter on device bond5 [ 156.872575][ T7646] 8021q: VLANs not supported on vcan0 [ 156.997497][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e0f3f96e: rx timeout, send abort [ 157.040337][ T7656] netlink: 'syz.3.1137': attribute type 1 has an invalid length. [ 157.047003][ T7655] device syzkaller0 entered promiscuous mode [ 157.096457][ T7656] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 157.098982][ T7656] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 157.195538][ T7663] 8021q: adding VLAN 0 to HW filter on device bond5 [ 157.310756][ T7673] netlink: 'syz.4.1140': attribute type 1 has an invalid length. [ 157.325302][ T27] audit: type=1326 audit(157.310:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7669 comm="syz.3.1139" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87577368 code=0x0 [ 157.327488][ T7673] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 157.331305][ T7673] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 157.378676][ T7676] bond7: (slave bridge10): Enslaving as an active interface with a down link [ 157.387232][ T7673] device macvlan2 entered promiscuous mode [ 157.388795][ T7673] device bond7 entered promiscuous mode [ 157.389896][ T7673] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 157.392047][ T7673] device bond7 left promiscuous mode [ 157.425894][ T7670] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 157.426966][ T7670] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 157.427939][ T7670] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 157.428859][ T7670] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 157.429847][ T7670] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 157.497530][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d7e81417: rx timeout, send abort [ 157.498940][ C0] vcan0: j1939_tp_rxtimer: 0x00000000e0f3f96e: abort rx timeout. Force session deactivation [ 157.547224][ T7686] 8021q: VLANs not supported on vcan0 [ 157.738473][ T7694] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 157.741696][ T7694] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 157.781363][ T7694] 8021q: adding VLAN 0 to HW filter on device bond6 [ 157.874686][ T7701] device syzkaller0 entered promiscuous mode [ 157.966659][ T7705] validate_nla: 1 callbacks suppressed [ 157.966677][ T7705] netlink: 'syz.2.1152': attribute type 1 has an invalid length. [ 157.977209][ T7705] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 157.979729][ T7705] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 157.998922][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d7e81417: abort rx timeout. Force session deactivation [ 158.027531][ T7707] __nla_validate_parse: 5 callbacks suppressed [ 158.027539][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1152'. [ 158.033902][ T7707] bond3: (slave bridge3): Enslaving as an active interface with a down link [ 158.041286][ T7707] device macvlan2 entered promiscuous mode [ 158.043085][ T7707] device bond3 entered promiscuous mode [ 158.044064][ T7707] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.073856][ T7707] device bond3 left promiscuous mode [ 158.177761][ T7713] 8021q: VLANs not supported on vcan0 [ 158.384394][ T7731] netlink: 'syz.2.1162': attribute type 1 has an invalid length. [ 158.398918][ T7731] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 158.401596][ T7731] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 158.435630][ T7731] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1162'. [ 158.515866][ T7734] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1162'. [ 158.518555][ T7734] 8021q: adding VLAN 0 to HW filter on device bond4 [ 158.534120][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d29be594: rx timeout, send abort [ 158.539196][ T7736] device syzkaller0 entered promiscuous mode [ 158.635951][ T27] audit: type=1326 audit(158.620:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7737 comm="syz.2.1164" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb9f77368 code=0x0 [ 158.740282][ T7738] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.741492][ T7738] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.745532][ T7738] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.746666][ T7738] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.747860][ T7738] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 158.767919][ T7749] netlink: 'syz.1.1168': attribute type 1 has an invalid length. [ 158.779798][ T7749] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 158.782355][ T7749] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 158.829516][ T7751] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1168'. [ 158.834823][ T7751] bond7: (slave bridge6): Enslaving as an active interface with a down link [ 158.841292][ T7751] device macvlan2 entered promiscuous mode [ 158.842952][ T7751] device bond7 entered promiscuous mode [ 158.843950][ T7751] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.845930][ T7751] device bond7 left promiscuous mode [ 158.936048][ T7755] 8021q: VLANs not supported on vcan0 [ 159.034152][ C0] vcan0: j1939_tp_rxtimer: 0x0000000032e86668: rx timeout, send abort [ 159.035674][ C0] vcan0: j1939_tp_rxtimer: 0x00000000d29be594: abort rx timeout. Force session deactivation [ 159.208773][ T7768] device syzkaller0 entered promiscuous mode [ 159.277623][ T7770] netlink: 'syz.0.1176': attribute type 1 has an invalid length. [ 159.294235][ T7770] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 159.296579][ T7770] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 159.324619][ T7770] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1176'. [ 159.377466][ T7776] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1176'. [ 159.380529][ T7776] 8021q: adding VLAN 0 to HW filter on device bond7 [ 159.427446][ T7780] netlink: 'syz.2.1180': attribute type 1 has an invalid length. [ 159.451180][ T7780] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 159.457565][ T7780] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 159.501008][ T7784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1180'. [ 159.510473][ T7784] bond5: (slave bridge4): Enslaving as an active interface with a down link [ 159.521231][ T7784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1180'. [ 159.524321][ T7784] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.526184][ T7786] 8021q: VLANs not supported on vcan0 [ 159.528861][ T7784] device macvlan2 entered promiscuous mode [ 159.530373][ T7784] device bond5 entered promiscuous mode [ 159.531583][ T7784] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 159.535669][ C0] vcan0: j1939_tp_rxtimer: 0x0000000032e86668: abort rx timeout. Force session deactivation [ 159.573432][ T7784] device bond5 left promiscuous mode [ 159.809142][ T7801] device syzkaller0 entered promiscuous mode [ 159.976860][ C1] vcan0: j1939_tp_rxtimer: 0x000000008aa5cc9e: rx timeout, send abort [ 160.046614][ T7810] netlink: 'syz.1.1191': attribute type 1 has an invalid length. [ 160.056477][ T7810] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 160.058675][ T7810] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 160.078767][ T27] audit: type=1326 audit(160.060:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7804 comm="syz.3.1190" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87577368 code=0x0 [ 160.104642][ T7810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1191'. [ 160.158849][ T7813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1191'. [ 160.161563][ T7813] 8021q: adding VLAN 0 to HW filter on device bond8 [ 160.186047][ T7805] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 160.187137][ T7805] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 160.188082][ T7805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.189043][ T7805] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.189990][ T7805] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 160.295873][ T7820] 8021q: VLANs not supported on vcan0 [ 160.476904][ C1] vcan0: j1939_tp_rxtimer: 0x000000002c888efb: rx timeout, send abort [ 160.478265][ C1] vcan0: j1939_tp_rxtimer: 0x000000008aa5cc9e: abort rx timeout. Force session deactivation [ 160.508975][ T7832] device syzkaller0 entered promiscuous mode [ 160.642083][ T7843] netlink: 'syz.4.1202': attribute type 1 has an invalid length. [ 160.652043][ T7843] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 160.654730][ T7843] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 160.682555][ T7846] netlink: 'syz.2.1203': attribute type 1 has an invalid length. [ 160.695927][ T7846] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 160.698652][ T7846] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 160.709923][ T7848] bond8: (slave bridge11): Enslaving as an active interface with a down link [ 160.717143][ T7848] device macvlan2 entered promiscuous mode [ 160.718907][ T7848] device bond8 entered promiscuous mode [ 160.720725][ T7848] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 160.723604][ T7848] device bond8 left promiscuous mode [ 160.750999][ T7846] 8021q: adding VLAN 0 to HW filter on device bond6 [ 160.810407][ T7853] 8021q: VLANs not supported on vcan0 [ 160.928062][ T7865] device syzkaller0 entered promiscuous mode [ 160.978224][ C1] vcan0: j1939_tp_rxtimer: 0x000000002c888efb: abort rx timeout. Force session deactivation [ 161.151380][ C1] vcan0: j1939_tp_rxtimer: 0x00000000551932d5: rx timeout, send abort [ 161.290466][ T7879] netlink: 'syz.1.1214': attribute type 1 has an invalid length. [ 161.306894][ T7879] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 161.309701][ T7879] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 161.373395][ T7879] 8021q: adding VLAN 0 to HW filter on device bond9 [ 161.375284][ T7887] 8021q: VLANs not supported on vcan0 [ 161.394803][ T7889] netlink: 'syz.1.1217': attribute type 1 has an invalid length. [ 161.406792][ T7889] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 161.409327][ T7889] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 161.459876][ T7891] bond10: (slave bridge8): Enslaving as an active interface with a down link [ 161.468708][ T7891] device macvlan2 entered promiscuous mode [ 161.470211][ T7891] device bond10 entered promiscuous mode [ 161.471932][ T7891] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 161.526760][ T7891] device bond10 left promiscuous mode [ 161.588101][ T27] audit: type=1326 audit(161.570:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7894 comm="syz.0.1219" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf77368 code=0x0 [ 161.651419][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b130b9c3: rx timeout, send abort [ 161.652968][ C1] vcan0: j1939_tp_rxtimer: 0x00000000551932d5: abort rx timeout. Force session deactivation [ 161.686593][ T7895] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 161.687665][ T7895] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.688726][ T7895] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.689715][ T7895] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.690593][ T7895] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 161.926454][ T7930] 8021q: VLANs not supported on vcan0 [ 161.955845][ T7932] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 161.958182][ T7932] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 162.001277][ T7932] 8021q: adding VLAN 0 to HW filter on device bond7 [ 162.077428][ T7939] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 162.080478][ T7939] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 162.119443][ T7939] bond9: (slave bridge12): Enslaving as an active interface with a down link [ 162.127310][ T7939] device macvlan2 entered promiscuous mode [ 162.128838][ T7939] device bond9 entered promiscuous mode [ 162.130141][ T7939] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.135494][ T7939] device bond9 left promiscuous mode [ 162.152798][ C1] vcan0: j1939_tp_rxtimer: 0x00000000b130b9c3: abort rx timeout. Force session deactivation [ 162.235189][ T7950] device syzkaller0 entered promiscuous mode [ 162.395180][ T7961] 8021q: VLANs not supported on vcan0 [ 162.501241][ T7968] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 162.504886][ T7968] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 162.552055][ C0] vcan0: j1939_tp_rxtimer: 0x0000000009ddf17c: rx timeout, send abort [ 162.663894][ T7968] 8021q: adding VLAN 0 to HW filter on device bond8 [ 162.737758][ T7988] device syzkaller0 entered promiscuous mode [ 162.845477][ T7997] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 162.847737][ T7997] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 162.859446][ T27] audit: type=1326 audit(162.840:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7994 comm="syz.3.1252" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87577368 code=0x0 [ 162.866235][ T7990] bond9: (slave bridge7): Enslaving as an active interface with a down link [ 162.871318][ T7990] device macvlan2 entered promiscuous mode [ 162.873087][ T7990] device bond9 entered promiscuous mode [ 162.874236][ T7990] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.876466][ T7990] device bond9 left promiscuous mode [ 162.963669][ T7995] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 162.964917][ T7995] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 162.965940][ T7995] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 162.966940][ T7995] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 162.968072][ T7995] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 162.970982][ T8003] 8021q: VLANs not supported on vcan0 [ 163.052098][ C0] vcan0: j1939_tp_rxtimer: 0x00000000029c5267: rx timeout, send abort [ 163.058071][ C0] vcan0: j1939_tp_rxtimer: 0x0000000009ddf17c: abort rx timeout. Force session deactivation [ 163.119744][ T8013] device syzkaller0 entered promiscuous mode [ 163.554028][ C0] vcan0: j1939_tp_rxtimer: 0x00000000029c5267: abort rx timeout. Force session deactivation [ 164.343484][ T8020] validate_nla: 4 callbacks suppressed [ 164.343499][ T8020] netlink: 'syz.3.1260': attribute type 1 has an invalid length. [ 164.361282][ T8021] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 164.369533][ T8021] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 164.374973][ T8023] __nla_validate_parse: 16 callbacks suppressed [ 164.374981][ T8023] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1260'. [ 164.467568][ T8026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1260'. [ 164.470486][ T8026] 8021q: adding VLAN 0 to HW filter on device bond6 [ 164.483515][ T8037] device syzkaller0 entered promiscuous mode [ 164.493476][ T8051] 8021q: VLANs not supported on vcan0 [ 164.725716][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1270'. [ 164.911175][ C0] vcan0: j1939_tp_rxtimer: 0x0000000033a6641d: rx timeout, send abort [ 164.972313][ T4336] Bluetooth: hci4: command 0x0c1a tx timeout [ 164.973334][ T4336] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.974260][ T4336] Bluetooth: hci2: command 0x0c1a tx timeout [ 164.975153][ T4336] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.976041][ T4336] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.411217][ C0] vcan0: j1939_tp_rxtimer: 0x00000000c33cf820: rx timeout, send abort [ 165.412703][ C0] vcan0: j1939_tp_rxtimer: 0x0000000033a6641d: abort rx timeout. Force session deactivation [ 165.912677][ C0] vcan0: j1939_tp_rxtimer: 0x00000000c33cf820: abort rx timeout. Force session deactivation [ 175.537998][ T8072] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 175.539633][ T8072] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 175.601584][ T8111] netlink: 'syz.2.1277': attribute type 1 has an invalid length. [ 175.636760][ T8109] device syzkaller0 entered promiscuous mode [ 175.655016][ T8111] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 175.657245][ T8111] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 186.601473][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1277'. [ 186.804219][ T8123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1277'. [ 186.807023][ T8123] 8021q: adding VLAN 0 to HW filter on device bond10 [ 186.814260][ T8143] 8021q: VLANs not supported on vcan0 [ 186.859032][ T8152] device syzkaller0 entered promiscuous mode [ 187.029630][ T8172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1295'. [ 187.031103][ T8172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1295'. [ 187.033218][ T8172] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1295'. [ 187.055507][ T8174] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1296'. [ 187.075938][ T8168] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 187.077084][ T8170] netlink: 'syz.4.1297': attribute type 1 has an invalid length. [ 187.090787][ T8173] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 187.096515][ T8173] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 187.131462][ T8176] device syzkaller0 entered promiscuous mode [ 187.134192][ T8170] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1297'. [ 187.141582][ T8170] 8021q: adding VLAN 0 to HW filter on device bond10 [ 187.158720][ T8180] device syzkaller0 entered promiscuous mode [ 187.383078][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.384121][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 187.773603][ T8191] 8021q: VLANs not supported on vcan0 [ 187.776433][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1306'. [ 187.779812][ T8199] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 187.797452][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 187.800653][ T8201] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.802088][ T8201] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.803574][ T8201] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.804867][ T8201] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 187.807289][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1307'. [ 187.870744][ T8205] netlink: 'syz.3.1311': attribute type 1 has an invalid length. [ 187.926566][ T8213] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 187.928799][ T8213] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 188.010968][ T8205] 8021q: adding VLAN 0 to HW filter on device bond7 [ 188.018082][ T8219] device syzkaller0 entered promiscuous mode [ 188.041707][ T8205] device macvlan3 entered promiscuous mode [ 188.049571][ T8205] device bond7 entered promiscuous mode [ 188.052880][ T8205] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 188.093562][ T8205] device bond7 left promiscuous mode [ 188.545387][ T8228] device syzkaller0 entered promiscuous mode [ 188.585327][ T8240] 8021q: VLANs not supported on vcan0 [ 188.792460][ T8258] netlink: 'syz.0.1331': attribute type 1 has an invalid length. [ 188.809222][ T8258] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 188.811550][ T8258] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 188.869537][ T8267] 8021q: adding VLAN 0 to HW filter on device bond8 [ 188.874605][ T8267] device macvlan2 entered promiscuous mode [ 188.876367][ T8267] device bond8 entered promiscuous mode [ 188.877574][ T8267] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.909986][ T8267] device bond8 left promiscuous mode [ 189.007691][ T8283] device syzkaller0 entered promiscuous mode [ 189.053730][ T8287] 8021q: VLANs not supported on vcan0 [ 189.311179][ T8315] netlink: 'syz.1.1355': attribute type 1 has an invalid length. [ 189.320870][ T8315] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 189.329014][ T8315] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 189.388761][ T8319] 8021q: adding VLAN 0 to HW filter on device bond11 [ 189.417271][ T8327] device syzkaller0 entered promiscuous mode [ 189.435148][ T8319] device macvlan2 entered promiscuous mode [ 189.436684][ T8319] device bond11 entered promiscuous mode [ 189.440194][ T8319] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 189.483097][ T8319] device bond11 left promiscuous mode [ 189.564886][ T8325] 8021q: VLANs not supported on vcan0 [ 189.881818][ T8362] netlink: 'syz.0.1373': attribute type 1 has an invalid length. [ 189.913588][ T8362] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 189.917196][ T8362] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 189.943214][ T8366] 8021q: VLANs not supported on vcan0 [ 189.946752][ T8368] device syzkaller0 entered promiscuous mode [ 189.975698][ T8373] "syz.4.1378" (8373) uses obsolete ecb(arc4) skcipher [ 190.425415][ T8362] 8021q: adding VLAN 0 to HW filter on device bond9 [ 190.433278][ T8376] device macvlan2 entered promiscuous mode [ 190.434703][ T8376] device bond9 entered promiscuous mode [ 190.435636][ T8376] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 190.472819][ T8376] device bond9 left promiscuous mode [ 190.544980][ T8371] device syzkaller0 entered promiscuous mode [ 190.827685][ T8411] 8021q: VLANs not supported on vcan0 [ 190.888498][ T8415] device syzkaller0 entered promiscuous mode [ 191.475455][ T8423] netlink: 'syz.3.1396': attribute type 1 has an invalid length. [ 191.487829][ T8424] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 191.491096][ T8424] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 191.615827][ T8423] __nla_validate_parse: 15 callbacks suppressed [ 191.615843][ T8423] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1396'. [ 191.619744][ T8423] 8021q: adding VLAN 0 to HW filter on device bond8 [ 191.622605][ T8435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1400'. [ 191.624005][ T8439] device syzkaller0 entered promiscuous mode [ 191.656535][ T8436] device macvlan3 entered promiscuous mode [ 191.658103][ T8436] device bond8 entered promiscuous mode [ 191.659783][ T8436] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 191.703121][ T8436] device bond8 left promiscuous mode [ 191.795730][ T8446] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1402'. [ 192.179909][ T8475] 8021q: adding VLAN 0 to HW filter on device bond9 [ 192.182393][ T8477] lo: Caught tx_queue_len zero misconfig [ 192.305595][ T8486] device syzkaller0 entered promiscuous mode [ 192.307988][ T8484] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 192.362824][ T8484] device gretap1 entered promiscuous mode [ 192.409057][ T8488] bridge10: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 192.411559][ T8492] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1419'. [ 192.793836][ T8511] device syzkaller0 entered promiscuous mode [ 193.255812][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1429'. [ 193.259085][ T8522] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.260551][ T8522] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.261961][ T8522] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.263446][ T8522] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 193.266422][ T8529] device syzkaller0 entered promiscuous mode [ 193.364504][ T8522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1429'. [ 193.601699][ T8552] device syzkaller0 entered promiscuous mode [ 193.607831][ T8552] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 193.647038][ T8395] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 193.694351][ T8557] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1443'. [ 193.874614][ T8553] device syzkaller0 entered promiscuous mode [ 193.876380][ T8565] device syzkaller0 entered promiscuous mode [ 193.997112][ T8567] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 193.999576][ T8567] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 194.000806][ T8567] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.002990][ T8567] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.003913][ T8567] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 194.016372][ T8577] device syzkaller0 entered promiscuous mode [ 194.079834][ T8587] device gretap2 entered promiscuous mode [ 194.366796][ T8617] 8021q: adding VLAN 0 to HW filter on device bond10 [ 194.492373][ T8609] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.496340][ T8609] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 194.497392][ T8609] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.498425][ T8609] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.499365][ T8609] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 194.513008][ T8632] device syzkaller0 entered promiscuous mode [ 194.556194][ T8639] device gretap1 entered promiscuous mode [ 194.694854][ T8648] netlink: 'syz.1.1476': attribute type 1 has an invalid length. [ 194.699864][ T8648] 8021q: adding VLAN 0 to HW filter on device bond12 [ 194.704720][ T8643] device syzkaller0 entered promiscuous mode [ 194.915377][ T8676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1485'. [ 194.976005][ T8682] netlink: 'syz.2.1487': attribute type 1 has an invalid length. [ 194.981683][ T8682] 8021q: adding VLAN 0 to HW filter on device bond11 [ 195.005915][ T8669] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 195.007057][ T8669] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.014689][ T8669] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 195.015918][ T8669] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 195.017028][ T8669] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 195.102556][ T8691] device gretap2 entered promiscuous mode [ 195.138826][ T8688] device syzkaller0 entered promiscuous mode [ 195.340593][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1500'. [ 195.345131][ T8712] netlink: 'syz.1.1499': attribute type 1 has an invalid length. [ 195.357111][ T8712] 8021q: adding VLAN 0 to HW filter on device bond13 [ 195.595821][ T8727] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 195.598165][ T8727] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.599172][ T8727] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 195.600323][ T8727] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 195.601313][ T8727] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 195.741560][ T8765] device gretap1 entered promiscuous mode [ 195.795154][ T8769] netlink: 'syz.2.1516': attribute type 1 has an invalid length. [ 195.800916][ T8769] 8021q: adding VLAN 0 to HW filter on device bond12 [ 195.907142][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1521'. [ 195.908616][ T8787] netlink: 'syz.2.1522': attribute type 4 has an invalid length. [ 196.007906][ T8790] tipc: Enabling of bearer rejected, failed to enable media [ 196.066256][ T8808] netlink: 'syz.2.1530': attribute type 1 has an invalid length. [ 196.075913][ T8808] 8021q: adding VLAN 0 to HW filter on device bond13 [ 196.131784][ T8793] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 196.135206][ T8793] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.141051][ T8793] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 196.142083][ T8793] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.144026][ T8793] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 196.215506][ T8827] device syzkaller0 entered promiscuous mode [ 196.288161][ T8831] device gretap1 entered promiscuous mode [ 196.526316][ T8852] netlink: 'syz.3.1544': attribute type 1 has an invalid length. [ 196.534349][ T8852] 8021q: adding VLAN 0 to HW filter on device bond11 [ 196.625247][ T8858] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 196.626471][ T8858] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 196.627676][ T8858] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 196.628773][ T8858] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 196.629903][ T8858] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 196.781181][ T8893] device gretap1 entered promiscuous mode [ 196.934152][ T8895] __nla_validate_parse: 1 callbacks suppressed [ 196.934166][ T8895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1560'. [ 196.944331][ T8902] device bond14 entered promiscuous mode [ 196.945540][ T8902] 8021q: adding VLAN 0 to HW filter on device bond14 [ 196.955363][ T8904] device bridge11 entered promiscuous mode [ 196.956803][ T8904] bond14: (slave bridge11): Enslaving as an active interface with an up link [ 196.958364][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bond14: link becomes ready [ 197.118566][ T27] audit: type=1326 audit(197.100:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8912 comm="syz.4.1566" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4577368 code=0x0 [ 197.131541][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'. [ 197.167407][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1576'. [ 197.178089][ T8935] device bond10 entered promiscuous mode [ 197.179167][ T8935] 8021q: adding VLAN 0 to HW filter on device bond10 [ 197.188538][ T8935] device bridge7 entered promiscuous mode [ 197.190055][ T8935] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 197.191810][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bond10: link becomes ready [ 197.230335][ T8914] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 197.245028][ T8914] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 197.246034][ T8914] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 197.247668][ T8914] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 197.249887][ T8914] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 197.268294][ T8949] device gretap1 entered promiscuous mode [ 199.132251][ T4322] Bluetooth: hci0: command 0x0c1a tx timeout [ 199.292254][ T4336] Bluetooth: hci4: command 0x0c1a tx timeout [ 199.293396][ T4336] Bluetooth: hci3: command 0x0c1a tx timeout [ 199.294428][ T4336] Bluetooth: hci2: command 0x0c1a tx timeout [ 199.295298][ T4336] Bluetooth: hci1: command 0x0c1a tx timeout [ 199.664728][ T8972] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1587'. [ 199.667661][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 199.669523][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 199.670871][ T8974] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.672650][ T8974] device bridge_slave_0 left promiscuous mode [ 199.674553][ T8974] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.723350][ T8974] device bridge_slave_1 left promiscuous mode [ 199.724416][ T8974] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.763813][ T8974] bond0: (slave bond_slave_0): Releasing backup interface [ 199.807112][ T8974] bond0: (slave bond_slave_1): Releasing backup interface [ 199.844826][ T8974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.846085][ T8974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.849340][ T8974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.850496][ T8974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.855950][ T8974] bond1: (slave bridge2): Releasing backup interface [ 199.907257][ T8974] bond4: (slave bridge5): Releasing active interface [ 199.927846][ T8974] bond10: (slave bridge7): Releasing backup interface [ 199.963297][ T8974] device bridge7 left promiscuous mode [ 199.967623][ T8978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1590'. [ 200.136027][ T9005] device gretap1 entered promiscuous mode [ 200.305975][ T27] audit: type=1326 audit(200.290:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9020 comm="syz.3.1601" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87577368 code=0x0 [ 200.345576][ T9034] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 200.351116][ T9036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1605'. [ 200.419826][ T9048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1608'. [ 200.424084][ T9021] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 200.426479][ T9021] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 200.431270][ T9021] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 200.437341][ T9021] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 200.442743][ T9021] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 200.602017][ T9066] device syzkaller0 entered promiscuous mode [ 200.620743][ T9066] tipc: Enabled bearer , priority 0 [ 200.625979][ T9062] tipc: Resetting bearer [ 200.635829][ T9062] tipc: Disabling bearer [ 200.747454][ T9075] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 200.753526][ T9075] device gretap1 entered promiscuous mode [ 200.787456][ T9082] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1623'. [ 201.195015][ T9112] netlink: 'syz.1.1635': attribute type 1 has an invalid length. [ 201.205005][ T9112] 8021q: adding VLAN 0 to HW filter on device bond15 [ 201.214086][ T9119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1637'. [ 201.230153][ T9112] bond15: (slave gretap1): making interface the new active one [ 201.234467][ T9112] bond15: (slave gretap1): Enslaving as an active interface with an up link [ 201.236473][ T9119] device bond11 entered promiscuous mode [ 201.237630][ T9119] 8021q: adding VLAN 0 to HW filter on device bond11 [ 201.241952][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bond15: link becomes ready [ 201.254459][ T9119] device bridge8 entered promiscuous mode [ 201.255685][ T9119] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 201.258562][ T1302] IPv6: ADDRCONF(NETDEV_CHANGE): bond11: link becomes ready [ 201.261383][ T9123] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 201.267126][ T9123] device gretap1 entered promiscuous mode [ 201.308535][ T9127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1640'. [ 201.496684][ T27] audit: type=1326 audit(201.480:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9135 comm="syz.0.1644" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf77368 code=0x0 [ 201.599527][ T9136] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 201.600705][ T9136] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 201.608946][ T9136] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 201.610871][ T9136] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 201.616842][ T9136] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 201.887809][ T9175] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 201.890987][ T9175] device gretap2 entered promiscuous mode [ 201.965752][ T9180] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 202.203835][ T9200] __nla_validate_parse: 2 callbacks suppressed [ 202.203847][ T9200] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1667'. [ 202.506220][ T9210] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 202.509382][ T9210] device gretap2 entered promiscuous mode [ 202.565076][ T9212] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 202.733740][ T9228] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1680'. [ 202.735293][ T9228] block nbd0: not configured, cannot reconfigure [ 202.767607][ T9230] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1681'. [ 202.771041][ T27] audit: type=1326 audit(202.750:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9222 comm="syz.1.1678" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87b77368 code=0x0 [ 202.884670][ T9223] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 202.885778][ T9223] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 202.893619][ T9223] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 202.894772][ T9223] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 202.895835][ T9223] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 202.905392][ T9244] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1684'. [ 203.021858][ T9258] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 203.028691][ T9258] device gretap1 entered promiscuous mode [ 203.409473][ T9291] device syzkaller0 entered promiscuous mode [ 204.812273][ T4322] Bluetooth: hci0: command 0x0c1a tx timeout [ 204.892355][ T4322] Bluetooth: hci1: command 0x0c1a tx timeout [ 204.972246][ T4336] Bluetooth: hci4: command 0x0c1a tx timeout [ 204.972317][ T4322] Bluetooth: hci3: command 0x0c1a tx timeout [ 204.973378][ T4336] Bluetooth: hci2: command 0x0c1a tx timeout [ 206.892235][ T4327] Bluetooth: hci0: command 0x0c1a tx timeout [ 214.398777][ T9304] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1705'. [ 214.464237][ T9318] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 214.471565][ T9318] device gretap2 entered promiscuous mode [ 214.570929][ T27] audit: type=1326 audit(214.550:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9323 comm="syz.4.1713" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffa4577368 code=0x0 [ 214.678617][ T9324] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 214.680387][ T9324] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 214.684709][ T9324] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 214.685714][ T9324] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 214.686570][ T9324] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 214.767026][ T9358] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1721'. [ 214.853906][ T9367] device syzkaller0 entered promiscuous mode [ 215.060033][ T9386] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 216.652267][ T4336] Bluetooth: hci0: command 0x0c1a tx timeout [ 216.732409][ T4336] Bluetooth: hci4: command 0x0c1a tx timeout [ 216.732426][ T4327] Bluetooth: hci3: command 0x0c1a tx timeout [ 216.733345][ T4336] Bluetooth: hci2: command 0x0c1a tx timeout [ 216.734355][ T4327] Bluetooth: hci1: command 0x0c1a tx timeout [ 218.336797][ T9386] device gretap1 entered promiscuous mode [ 218.573705][ T9425] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1735'. [ 218.737401][ T27] audit: type=1326 audit(218.720:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9434 comm="syz.0.1738" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf77368 code=0x0 [ 218.853877][ T9435] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 218.855104][ T9435] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 218.856216][ T9435] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 218.857244][ T9435] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 218.858278][ T9435] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 218.973252][ T9474] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1747'. [ 219.017465][ T9476] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 219.020710][ T9476] device gretap1 entered promiscuous mode [ 219.278586][ T9490] device syzkaller0 entered promiscuous mode [ 220.742329][ T4322] Bluetooth: hci0: command 0x0c1a tx timeout [ 220.892333][ T4322] Bluetooth: hci4: command 0x0c1a tx timeout [ 220.893326][ T4322] Bluetooth: hci3: command 0x0c1a tx timeout [ 220.894240][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 220.895155][ T4322] Bluetooth: hci1: command 0x0c1a tx timeout [ 228.933160][ T9536] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1761'. [ 228.958348][ T9538] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 229.037412][ T9538] device gretap2 entered promiscuous mode [ 229.121920][ T27] audit: type=1326 audit(229.100:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9557 comm="syz.3.1769" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff87577368 code=0x0 [ 229.232462][ T9558] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 229.233490][ T9558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 229.234494][ T9558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 229.238139][ T9558] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 229.242475][ T9558] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 229.257880][ T9574] device syzkaller0 entered promiscuous mode [ 230.055658][ T9605] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 230.055671][ T9610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1785'. [ 230.059649][ T9605] device gretap2 entered promiscuous mode [ 230.179164][ T9619] device syzkaller0 entered promiscuous mode [ 230.188030][ T9625] netlink: 'syz.4.1791': attribute type 1 has an invalid length. [ 230.360424][ T27] audit: type=1326 audit(230.340:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9627 comm="syz.0.1792" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffff8bf77368 code=0x0 [ 230.924011][ T9625] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1791'. [ 230.928865][ T9625] bond11: (slave bridge13): making interface the new active one [ 230.930651][ T9625] bond11: (slave bridge13): Enslaving as an active interface with an up link [ 230.932534][ T9632] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1791'. [ 230.935299][ T9632] 8021q: adding VLAN 0 to HW filter on device bond11 [ 230.938158][ T9640] device macvlan2 entered promiscuous mode [ 230.940045][ T9640] device bond11 entered promiscuous mode [ 230.941179][ T9640] device bridge13 entered promiscuous mode [ 230.944382][ T9640] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 230.946107][ T9640] bond11: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 230.948842][ T9640] device bond11 left promiscuous mode [ 230.949648][ T9640] device bridge13 left promiscuous mode [ 230.959030][ T9649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1798'. [ 231.007416][ T9628] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 231.008646][ T9628] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.013533][ T9628] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.016768][ T9628] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.019644][ T9628] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 231.021323][ T9659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1801'. [ 231.171228][ T9672] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 231.174406][ T9672] device gretap2 entered promiscuous mode [ 231.294269][ T9686] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1811'. [ 231.304384][ T9683] device syzkaller0 entered promiscuous mode [ 233.052326][ T4322] Bluetooth: hci4: command 0x0c1a tx timeout [ 233.052340][ T4336] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.053304][ T4322] Bluetooth: hci2: command 0x0c1a tx timeout [ 233.054264][ T4336] Bluetooth: hci1: command 0x0c1a tx timeout [ 233.055119][ T4322] Bluetooth: hci0: command 0x0c1a tx timeout [ 242.366065][ T9703] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1816'. [ 242.461012][ T9711] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1816'. [ 242.476335][ T9726] device geneve3 entered promiscuous mode [ 242.557621][ T9737] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1823'. [ 242.601626][ T9740] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 242.616517][ T9740] device gretap1 entered promiscuous mode [ 242.640857][ T9746] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1822'. [ 242.666578][ T9748] netlink: 'syz.2.1829': attribute type 1 has an invalid length. [ 242.780376][ T9751] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.781829][ T9751] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.140912][ T9751] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.162641][ T9751] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.627619][ T9751] device bond1 left promiscuous mode [ 243.703712][ T9751] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.705242][ T9751] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.706573][ T9751] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.707856][ T9751] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.759551][ T9751] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.761011][ T9751] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.762367][ T9751] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.763600][ T9751] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.802393][ T9751] device geneve3 left promiscuous mode [ 243.807252][ T9755] tipc: Enabled bearer , priority 28 [ 243.814514][ T9748] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 243.816845][ T9748] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 243.854086][ T9757] bond14: (slave gretap1): making interface the new active one [ 243.856959][ T9757] bond14: (slave gretap1): Enslaving as an active interface with an up link [ 243.860129][ T9758] device macvlan3 entered promiscuous mode [ 243.861609][ T9758] device bond14 entered promiscuous mode [ 243.863350][ T9758] device gretap1 entered promiscuous mode [ 243.864497][ T9758] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 243.883895][ T9758] bond14: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 243.943343][ T9758] device bond14 left promiscuous mode [ 243.944221][ T9758] device gretap1 left promiscuous mode [ 244.066407][ T9769] netlink: 'syz.4.1837': attribute type 6 has an invalid length. [ 244.067672][ T9769] netlink: 'syz.4.1837': attribute type 1 has an invalid length. [ 244.068884][ T9769] bridge0: port 1(bridge_slave_0) entered learning state [ 244.083688][ T9787] netlink: 'syz.0.1840': attribute type 1 has an invalid length. [ 244.110491][ T9787] 8021q: adding VLAN 0 to HW filter on device bond13 [ 244.117752][ T9773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1838'. [ 244.173965][ T9800] tipc: Started in network mode [ 244.174914][ T9800] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 244.176706][ T9800] tipc: Enabled bearer , priority 28 [ 244.288717][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1842'. [ 244.368736][ T9802] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.370114][ T9802] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.415890][ T9828] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 244.418546][ T9802] tipc: Resetting bearer [ 244.747342][ T9802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.757598][ T9802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.029504][ T9802] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.031071][ T9802] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.032792][ T9802] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.035685][ T9802] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.222998][ T9802] device wlan1 left promiscuous mode [ 245.269229][ T9825] netlink: 'syz.3.1852': attribute type 6 has an invalid length. [ 245.270526][ T9825] netlink: 'syz.3.1852': attribute type 1 has an invalid length. [ 245.271810][ T9827] netlink: 'syz.0.1853': attribute type 1 has an invalid length. [ 245.284525][ T9828] device gretap2 entered promiscuous mode [ 245.368464][ T4368] tipc: Node number set to 8432298 [ 245.522065][ T9871] netlink: 'syz.0.1868': attribute type 1 has an invalid length. [ 245.530819][ T9871] 8021q: adding VLAN 0 to HW filter on device bond14 [ 245.538046][ T9873] ip6tnl0: Caught tx_queue_len zero misconfig [ 245.673710][ T9887] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 245.676844][ T9887] device gretap1 entered promiscuous mode [ 245.826065][ T9890] device syzkaller0 entered promiscuous mode [ 246.161858][ T9896] netlink: 'syz.3.1878': attribute type 6 has an invalid length. [ 246.163228][ T9896] netlink: 'syz.3.1878': attribute type 1 has an invalid length. [ 246.269902][ T9902] 8021q: adding VLAN 0 to HW filter on device bond13 [ 246.464686][ T9909] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 246.566233][ T9912] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 246.569087][ T9912] device gretap1 entered promiscuous mode [ 246.772901][ T9915] device syzkaller0 entered promiscuous mode [ 247.189782][ T9928] 8021q: adding VLAN 0 to HW filter on device bond14 [ 247.410304][ T9937] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 247.416572][ T9937] device gretap1 entered promiscuous mode [ 248.057071][ T9835] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.146600][ T9949] device syzkaller0 entered promiscuous mode [ 248.161926][ T9955] validate_nla: 4 callbacks suppressed [ 248.161936][ T9955] netlink: 'syz.0.1903': attribute type 1 has an invalid length. [ 248.171220][ T9955] 8021q: adding VLAN 0 to HW filter on device bond15 [ 248.173000][ T9953] ip6tnl0: Caught tx_queue_len zero misconfig [ 248.235798][ T9961] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 248.366313][ T9967] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 248.452459][ T9967] device gretap1 entered promiscuous mode [ 248.527911][ T9972] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 248.641329][ T9994] netlink: 'syz.1.1916': attribute type 1 has an invalid length. [ 248.648708][ T9994] 8021q: adding VLAN 0 to HW filter on device bond17 [ 248.682161][T10001] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 248.789357][T10006] device syzkaller0 entered promiscuous mode [ 248.823346][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.824270][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 248.894684][T10018] ip6tnl0: Caught tx_queue_len zero misconfig [ 248.997243][T10027] netlink: 'syz.0.1928': attribute type 1 has an invalid length. [ 249.009478][T10027] 8021q: adding VLAN 0 to HW filter on device bond16 [ 249.012135][T10021] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 249.018333][T10021] device gretap2 entered promiscuous mode [ 249.107749][T10041] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 249.278753][T10048] device syzkaller0 entered promiscuous mode [ 249.285664][T10050] ip6tnl0: Caught tx_queue_len zero misconfig [ 249.442392][T10060] netlink: 'syz.3.1942': attribute type 1 has an invalid length. [ 249.470083][T10060] 8021q: adding VLAN 0 to HW filter on device bond15 [ 249.611295][T10083] device syzkaller0 entered promiscuous mode [ 249.680259][T10096] device syzkaller0 entered promiscuous mode [ 260.769980][T10112] netlink: 'syz.1.1959': attribute type 1 has an invalid length. [ 260.806835][T10112] 8021q: adding VLAN 0 to HW filter on device bond18 [ 260.919428][T10130] device syzkaller0 entered promiscuous mode [ 260.966928][T10139] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 264.808797][ T4327] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 264.810784][ T4327] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 264.812673][ T4327] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 264.814674][ T4327] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 264.816597][ T4327] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 264.817930][ T4327] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.892444][ T4322] Bluetooth: hci5: command 0x0409 tx timeout [ 268.982265][ T4322] Bluetooth: hci5: command 0x041b tx timeout [ 271.052352][ T4327] Bluetooth: hci5: command 0x040f tx timeout [ 271.829689][T10156] netlink: 'syz.4.1975': attribute type 1 has an invalid length. [ 271.928460][T10172] chnl_net:caif_netlink_parms(): no params data found [ 271.990511][T10193] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 272.011908][T10172] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.017555][T10172] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.027427][T10172] device bridge_slave_0 entered promiscuous mode [ 272.037169][T10172] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.041502][T10172] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.043266][T10172] device bridge_slave_1 entered promiscuous mode [ 272.056562][T10172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.060586][T10172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.071153][T10172] team0: Port device team_slave_0 added [ 272.083008][T10172] team0: Port device team_slave_1 added [ 272.107832][T10172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.109055][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.113531][T10172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.118924][T10172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.120082][T10172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.124465][T10172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.173553][T10172] device hsr_slave_0 entered promiscuous mode [ 272.222578][T10172] device hsr_slave_1 entered promiscuous mode [ 272.262639][T10172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.264650][T10172] Cannot create hsr debugfs directory [ 273.132267][ T4327] Bluetooth: hci5: command 0x0419 tx timeout [ 283.044990][T10211] netlink: 'syz.0.1988': attribute type 1 has an invalid length. [ 283.237394][T10172] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 283.295040][T10172] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 283.424948][T10250] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 283.428137][T10251] device gretap1 entered promiscuous mode [ 283.475005][T10172] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 283.514379][T10172] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 283.624991][T10260] netlink: 'syz.3.2000': attribute type 1 has an invalid length. [ 283.631477][T10260] 8021q: adding VLAN 0 to HW filter on device bond16 [ 283.669017][T10276] device syzkaller0 entered promiscuous mode [ 294.817267][ T39] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.852161][T10286] netlink: 'syz.3.2007': attribute type 1 has an invalid length. [ 294.861172][T10292] bond17: (slave vxcan3): The slave device specified does not support setting the MAC address [ 294.865010][T10292] bond17: (slave vxcan3): Error -95 calling set_mac_address [ 294.875157][T10295] bond17: (slave gretap1): making interface the new active one [ 294.877281][T10295] bond17: (slave gretap1): Enslaving as an active interface with an up link [ 294.879076][T10297] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 294.883441][T10172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.944449][ T39] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.954329][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 294.956337][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 294.961162][T10172] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.963726][T10313] netlink: 'syz.3.2012': attribute type 1 has an invalid length. [ 294.970022][T10313] 8021q: adding VLAN 0 to HW filter on device bond18 [ 294.976400][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.978166][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.979576][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.980639][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.985838][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 294.988875][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 294.990471][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 294.991984][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.993197][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.008859][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.010756][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.012970][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.014835][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.016511][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.018019][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.019562][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.021061][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.103884][ T39] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.111060][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.112820][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.114188][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.116472][T10172] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 295.173458][ T39] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.180204][T10323] device syzkaller0 entered promiscuous mode [ 295.210434][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.212014][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.219615][T10172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 295.380402][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 295.382033][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 295.384662][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 295.387758][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 295.396317][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 295.398236][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 295.400006][T10172] device veth0_vlan entered promiscuous mode [ 295.405439][T10172] device veth1_vlan entered promiscuous mode [ 295.438062][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 295.439968][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 295.441512][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.446213][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.455615][T10172] device veth0_macvtap entered promiscuous mode [ 295.528327][T10172] device veth1_macvtap entered promiscuous mode [ 295.541037][T10172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.544276][T10172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.545819][T10172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.547372][T10172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.549658][T10172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.552129][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.554498][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.555915][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.557400][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.577252][T10172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.585925][T10172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.587615][T10172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.589265][T10172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.593788][T10172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.595064][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 295.596872][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 295.906608][T10172] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.908134][T10172] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.909518][T10172] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.910745][T10172] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.943551][T10379] netlink: 'syz.1.2022': attribute type 1 has an invalid length. [ 295.960592][T10379] 8021q: adding VLAN 0 to HW filter on device bond19 [ 296.038824][T10382] netlink: 'syz.0.2023': attribute type 1 has an invalid length. [ 296.039169][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.041356][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.060400][T10383] bond17: (slave vxcan3): The slave device specified does not support setting the MAC address [ 296.063547][T10383] bond17: (slave vxcan3): Error -95 calling set_mac_address [ 296.070946][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.121873][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.123448][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.124806][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 296.131097][T10382] bond17: (slave gretap1): making interface the new active one [ 296.136330][T10382] bond17: (slave gretap1): Enslaving as an active interface with an up link [ 296.344827][T10417] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 296.547384][T10439] netlink: 'syz.4.2034': attribute type 1 has an invalid length. [ 296.559597][T10439] 8021q: adding VLAN 0 to HW filter on device bond12 [ 296.564576][T10439] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2034'. [ 296.663101][ T39] bond14: (slave gretap1): Releasing active interface [ 296.685048][T10448] netlink: 'syz.4.2035': attribute type 1 has an invalid length. [ 296.700899][T10452] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 296.703961][T10452] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 297.181419][T10495] netlink: 'syz.3.2045': attribute type 1 has an invalid length. [ 297.189497][T10495] 8021q: adding VLAN 0 to HW filter on device bond19 [ 297.191669][T10498] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2045'. [ 297.305399][T10507] netlink: 'syz.5.2048': attribute type 1 has an invalid length. [ 297.594059][T10510] device macvlan2 entered promiscuous mode [ 297.595496][T10510] device bond0 entered promiscuous mode [ 297.596467][T10510] device bond_slave_0 entered promiscuous mode [ 297.597455][T10510] device bond_slave_1 entered promiscuous mode [ 297.598651][T10510] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 297.663281][T10510] device bond0 left promiscuous mode [ 297.664159][T10510] device bond_slave_0 left promiscuous mode [ 297.665142][T10510] device bond_slave_1 left promiscuous mode [ 297.794519][ T39] device hsr_slave_0 left promiscuous mode [ 297.835199][ T39] device hsr_slave_1 left promiscuous mode [ 297.902603][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.903931][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.905873][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.907029][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.908352][ T39] device bridge_slave_1 left promiscuous mode [ 297.910049][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.943186][ T39] device bridge_slave_0 left promiscuous mode [ 297.945038][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.072846][ T39] device veth1_macvtap left promiscuous mode [ 298.074054][ T39] device veth0_macvtap left promiscuous mode [ 298.074985][ T39] device veth1_vlan left promiscuous mode [ 298.075934][ T39] device veth0_vlan left promiscuous mode [ 298.151148][ T39] bond14 (unregistering): Released all slaves [ 298.877155][ T39] bond13 (unregistering): Released all slaves [ 299.553448][ T39] bond12 (unregistering): Released all slaves [ 300.224118][ T39] bond11 (unregistering): Released all slaves [ 300.913931][ T39] bond10 (unregistering): Released all slaves [ 300.953420][ T39] bond9 (unregistering): (slave bridge7): Releasing active interface [ 301.083755][ T39] bond9 (unregistering): Released all slaves [ 301.723669][ T39] bond8 (unregistering): Released all slaves [ 302.506198][ T39] bond7 (unregistering): Released all slaves [ 303.253621][ T39] bond6 (unregistering): Released all slaves [ 303.292970][ T39] bond5 (unregistering): (slave bridge4): Releasing active interface [ 304.093780][ T39] bond5 (unregistering): Released all slaves [ 304.753190][ T39] bond4 (unregistering): Released all slaves [ 304.793249][ T39] bond3 (unregistering): (slave bridge3): Releasing active interface [ 304.953651][ T39] bond3 (unregistering): Released all slaves [ 305.695300][ T39] bond2 (unregistering): Released all slaves [ 306.383200][ T39] bond1 (unregistering): Released all slaves [ 308.573937][ T39] team0 (unregistering): Port device team_slave_1 removed [ 308.753003][ T39] team0 (unregistering): Port device team_slave_0 removed [ 308.923925][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.135663][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.253542][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 310.254643][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 310.573301][ T39] bond0 (unregistering): Released all slaves [ 310.878583][T10554] netlink: 'syz.1.2058': attribute type 1 has an invalid length. [ 310.884278][T10555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2058'. [ 310.921125][T10589] device syzkaller0 entered promiscuous mode [ 311.087059][T10617] netlink: 'syz.5.2068': attribute type 1 has an invalid length. [ 311.154664][T10631] device macvlan2 entered promiscuous mode [ 311.246152][T10644] netlink: 'syz.0.2074': attribute type 1 has an invalid length. [ 311.270047][T10644] 8021q: adding VLAN 0 to HW filter on device bond18 [ 311.274953][T10644] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2074'. [ 311.469802][T10670] device syzkaller0 entered promiscuous mode [ 311.766282][T10705] netlink: 'syz.0.2087': attribute type 1 has an invalid length. [ 311.782665][T10705] 8021q: adding VLAN 0 to HW filter on device bond19 [ 311.813960][T10705] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2087'. [ 311.864882][T10713] netlink: 'syz.0.2089': attribute type 1 has an invalid length. [ 311.876072][T10713] bond20: (slave vxcan3): The slave device specified does not support setting the MAC address [ 311.878820][T10713] bond20: (slave vxcan3): Error -95 calling set_mac_address [ 311.929839][T10720] device macvlan2 entered promiscuous mode [ 311.931286][T10720] device bond20 entered promiscuous mode [ 311.933452][T10720] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 311.990794][T10720] device bond20 left promiscuous mode [ 312.244114][T10728] device syzkaller0 entered promiscuous mode [ 312.268435][T10750] netlink: 'syz.3.2099': attribute type 1 has an invalid length. [ 312.275887][T10750] 8021q: adding VLAN 0 to HW filter on device bond20 [ 312.279632][T10750] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2099'. [ 323.063520][T10761] tipc: Enabling of bearer rejected, failed to enable media [ 323.147980][T10802] block nbd4: not configured, cannot reconfigure [ 323.153720][T10797] netlink: 'syz.5.2107': attribute type 1 has an invalid length. [ 323.214603][T10814] netlink: 'syz.4.2111': attribute type 1 has an invalid length. [ 323.226170][T10814] 8021q: adding VLAN 0 to HW filter on device bond14 [ 323.306434][T10814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 323.307841][T10814] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2111'. [ 323.310730][T10797] device macvlan2 entered promiscuous mode [ 323.591812][T10859] device syzkaller0 entered promiscuous mode [ 323.948074][T10900] netlink: 'syz.3.2122': attribute type 1 has an invalid length. [ 323.953681][T10900] 8021q: adding VLAN 0 to HW filter on device bond21 [ 323.957786][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2122'. [ 323.959261][T10900] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2122'. [ 324.031927][T10911] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 324.034873][T10911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 324.036298][T10911] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 324.050263][T10908] device syzkaller0 entered promiscuous mode [ 324.118286][T10911] infiniband !yz!: set active [ 324.118852][T10919] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2124'. [ 324.121662][T10911] infiniband !yz!: added team_slave_0 [ 324.146244][T10911] RDS/IB: !yz!: added [ 324.147520][T10911] smc: adding ib device !yz! with port count 1 [ 324.148594][T10911] smc: ib device !yz! port 1 has pnetid [ 324.217324][T10926] netlink: 'syz.4.2127': attribute type 1 has an invalid length. [ 324.241562][T10926] bond15: (slave vxcan3): The slave device specified does not support setting the MAC address [ 324.251345][T10926] bond15: (slave vxcan3): Error -95 calling set_mac_address [ 324.387525][T10926] device macvlan2 entered promiscuous mode [ 324.388976][T10926] device bond15 entered promiscuous mode [ 324.389984][T10926] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 324.422769][T10926] device bond15 left promiscuous mode [ 324.487272][T10940] device syzkaller0 entered promiscuous mode [ 324.587690][T10949] netlink: 'syz.4.2133': attribute type 1 has an invalid length. [ 324.607206][T10949] 8021q: adding VLAN 0 to HW filter on device bond16 [ 324.610171][T10957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2133'. [ 324.611448][T10957] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2133'. [ 324.676046][T10968] device syzkaller0 entered promiscuous mode [ 325.360574][T10985] netlink: 'syz.3.2145': attribute type 1 has an invalid length. [ 325.375235][T10985] bond22: (slave vxcan3): The slave device specified does not support setting the MAC address [ 325.377703][T10985] bond22: (slave vxcan3): Error -95 calling set_mac_address [ 325.408408][T10988] device syzkaller0 entered promiscuous mode [ 325.423174][T10992] device macvlan3 entered promiscuous mode [ 325.424628][T10992] device bond22 entered promiscuous mode [ 325.425677][T10992] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 325.452965][T10992] device bond22 left promiscuous mode [ 325.574472][T10993] netlink: 'syz.1.2149': attribute type 1 has an invalid length. [ 325.590413][T10993] 8021q: adding VLAN 0 to HW filter on device bond20 [ 325.657334][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2149'. [ 326.298096][T11028] device syzkaller0 entered promiscuous mode [ 326.310076][T11030] device syzkaller0 entered promiscuous mode [ 326.376826][T11048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.471395][ T4322] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.477724][ T4322] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.479910][ T4322] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.483654][ T4336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.485023][ T4336] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 341.486882][ T4336] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 341.488271][ T4336] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 341.490086][ T4336] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.491261][ T4336] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 341.492516][T11099] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.493483][ T4336] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 341.494910][T11099] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 342.459865][ T4336] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 342.462852][ T4336] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 342.464426][ T4336] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 342.465868][ T4336] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 342.467173][ T4336] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 342.468387][ T4336] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 343.464018][ T4322] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 343.466034][ T4322] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 343.467471][ T4322] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 343.468877][ T4322] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 343.470196][ T4322] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 343.471475][ T4322] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 343.542368][ T4322] Bluetooth: hci6: command 0x0409 tx timeout [ 343.542387][ T4336] Bluetooth: hci1: command 0x0409 tx timeout [ 344.492272][ T4327] Bluetooth: hci7: command 0x0409 tx timeout [ 345.532273][ T4327] Bluetooth: hci8: command 0x0409 tx timeout [ 345.612411][ T4327] Bluetooth: hci6: command 0x041b tx timeout [ 345.622318][ T4327] Bluetooth: hci1: command 0x041b tx timeout [ 346.572284][ T4327] Bluetooth: hci7: command 0x041b tx timeout [ 347.612297][ T4327] Bluetooth: hci8: command 0x041b tx timeout [ 347.692280][ T4336] Bluetooth: hci1: command 0x040f tx timeout [ 347.693254][ T4336] Bluetooth: hci6: command 0x040f tx timeout [ 348.652420][ T4327] Bluetooth: hci7: command 0x040f tx timeout [ 348.766123][T11096] chnl_net:caif_netlink_parms(): no params data found [ 348.834070][T11093] chnl_net:caif_netlink_parms(): no params data found [ 348.845907][T11111] chnl_net:caif_netlink_parms(): no params data found [ 348.851905][T11096] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.853962][T11096] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.855480][T11096] device bridge_slave_0 entered promiscuous mode [ 348.867249][T11096] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.868511][T11096] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.870062][T11096] device bridge_slave_1 entered promiscuous mode [ 348.934598][T11096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.937253][T11096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.951437][T11111] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.953049][T11111] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.954847][T11111] device bridge_slave_0 entered promiscuous mode [ 348.958537][T11106] chnl_net:caif_netlink_parms(): no params data found [ 348.960692][T11093] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.961885][T11093] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.964982][T11093] device bridge_slave_0 entered promiscuous mode [ 348.972070][T11096] team0: Port device team_slave_0 added [ 348.973816][T11111] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.975078][T11111] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.976789][T11111] device bridge_slave_1 entered promiscuous mode [ 348.980992][T11096] team0: Port device team_slave_1 added [ 348.982130][T11093] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.983599][T11093] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.985049][T11093] device bridge_slave_1 entered promiscuous mode [ 349.017253][T11093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.020142][T11111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.023899][T11096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.024994][T11096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.028893][T11096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.031673][T11093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.034275][T11111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.038020][T11096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.039091][T11096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.043426][T11096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.065239][T11111] team0: Port device team_slave_0 added [ 349.068586][T11106] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.069892][T11106] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.071525][T11106] device bridge_slave_0 entered promiscuous mode [ 349.079789][T11111] team0: Port device team_slave_1 added [ 349.082744][T11093] team0: Port device team_slave_0 added [ 349.083949][T11106] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.085185][T11106] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.086731][T11106] device bridge_slave_1 entered promiscuous mode [ 349.092765][T11093] team0: Port device team_slave_1 added [ 349.143661][T11096] device hsr_slave_0 entered promiscuous mode [ 349.173010][T11096] device hsr_slave_1 entered promiscuous mode [ 349.193257][T11096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.194379][T11096] Cannot create hsr debugfs directory [ 349.198966][T11093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.200092][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.205131][T11093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.216710][T11106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.223223][T11111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.224289][T11111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.228010][T11111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.230012][T11093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.231037][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.235185][T11093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.247991][T11106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.257923][T11111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.259136][T11111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.263405][T11111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.333954][T11093] device hsr_slave_0 entered promiscuous mode [ 349.342703][T11093] device hsr_slave_1 entered promiscuous mode [ 349.373786][T11093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.375051][T11093] Cannot create hsr debugfs directory [ 349.433528][T11111] device hsr_slave_0 entered promiscuous mode [ 349.477379][T11111] device hsr_slave_1 entered promiscuous mode [ 349.513168][T11111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.514448][T11111] Cannot create hsr debugfs directory [ 349.529036][ T1612] tipc: Disabling bearer [ 349.530347][ T1612] tipc: Left network mode [ 349.542977][T11106] team0: Port device team_slave_0 added [ 349.549485][T11200] device syzkaller0 entered promiscuous mode [ 349.692292][ T4336] Bluetooth: hci8: command 0x040f tx timeout [ 349.772243][ T4327] Bluetooth: hci6: command 0x0419 tx timeout [ 349.772282][ T4336] Bluetooth: hci1: command 0x0419 tx timeout [ 350.732521][ T4322] Bluetooth: hci7: command 0x0419 tx timeout [ 351.772277][ T4322] Bluetooth: hci8: command 0x0419 tx timeout [ 360.291690][T11106] team0: Port device team_slave_1 added [ 360.500674][T11106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.501876][T11106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.511614][T11106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.527201][T11106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.528288][T11106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.531871][T11106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.683659][T11106] device hsr_slave_0 entered promiscuous mode [ 360.702776][T11106] device hsr_slave_1 entered promiscuous mode [ 360.722451][T11106] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.723645][T11106] Cannot create hsr debugfs directory [ 360.844671][T11096] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 360.873817][T11096] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 360.994648][T11096] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 361.046865][T11111] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 361.093531][T11111] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 361.184685][T11096] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 361.231502][T11111] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 361.347861][T11267] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 361.369146][T11111] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 361.463024][ T1612] bond17: (slave gretap1): Releasing active interface [ 361.706511][T11093] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 361.745981][T11093] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 361.781023][T11093] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 362.057167][T11096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.062730][T11093] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 362.113784][T11296] device syzkaller0 entered promiscuous mode [ 362.115455][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 362.117052][ T7177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 362.119590][T11096] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.171335][T11106] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 362.224817][T11106] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 362.264604][T11106] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 371.692665][ T2061] ieee802154 phy0 wpan0: encryption failed: -22 [ 371.693791][ T2061] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.167574][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.169211][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.170598][ T4410] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.171630][ T4410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.175843][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.177435][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.178807][ T4410] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.179852][ T4410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.181217][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 373.183202][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.187614][T11111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.191092][T11106] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 373.241077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 373.242898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 373.245796][T11111] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.304940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 373.306684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 373.308012][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.309097][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.310437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 373.311947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 373.319034][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.320148][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.321618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 373.324909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 373.452282][ T1612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 373.454003][ T1612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.455501][ T1612] device bridge_slave_1 left promiscuous mode [ 373.456519][ T1612] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.493403][ T1612] device bridge_slave_0 left promiscuous mode [ 373.494390][ T1612] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.542124][ T1612] bond22 (unregistering): Released all slaves [ 374.194340][ T1612] bond21 (unregistering): Released all slaves [ 374.833238][ T1612] bond20 (unregistering): Released all slaves [ 375.476811][ T1612] bond19 (unregistering): Released all slaves [ 376.160058][ T1612] bond18 (unregistering): Released all slaves [ 376.163603][ T1612] bond17 (unregistering): Released all slaves [ 376.836124][ T1612] bond16 (unregistering): Released all slaves [ 377.507370][ T1612] bond15 (unregistering): Released all slaves [ 378.193348][ T1612] bond14 (unregistering): Released all slaves [ 378.846402][ T1612] bond13 (unregistering): Released all slaves [ 378.894287][ T1612] bond12 (unregistering): Released all slaves [ 379.566305][ T1612] bond11 (unregistering): Released all slaves [ 380.286478][ T1612] bond10 (unregistering): Released all slaves [ 380.946828][ T1612] bond9 (unregistering): Released all slaves [ 381.634721][ T1612] bond8 (unregistering): Released all slaves [ 381.932216][ C1] ------------[ cut here ]------------ [ 381.933237][ C1] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x344 [ 381.934928][ C1] WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x38c/0x46c [ 381.936306][ C1] Modules linked in: [ 381.936903][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 381.938154][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 381.939568][ C1] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 381.940728][ C1] pc : debug_check_no_obj_freed+0x38c/0x46c [ 381.941590][ C1] lr : debug_check_no_obj_freed+0x38c/0x46c [ 381.942448][ C1] sp : ffff800008017a10 [ 381.943082][ C1] x29: ffff800008017a50 x28: ffff0000f5f49e00 x27: 0000000000000000 [ 381.944276][ C1] x26: ffff800011bab020 x25: ffff0000f5f49c90 x24: ffff800010b810c8 [ 381.945535][ C1] x23: ffff0000da476ab8 x22: ffff0000f5f49000 x21: dfff800000000000 [ 381.946760][ C1] x20: 0000000000000000 x19: ffff0000f5f49c00 x18: ffff800011b8bf60 [ 381.947934][ C1] x17: 6e6968207473696c x16: ffff8000082d9364 x15: 0000000000000000 [ 381.949082][ C1] x14: 0000000000000001 x13: 1fffe00033eac9a3 x12: 0000000000ff0100 [ 381.950289][ C1] x11: ff00800008194238 x10: 0000000000000000 x9 : f9ce4032988b8a00 [ 381.951472][ C1] x8 : f9ce4032988b8a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 381.952699][ C1] x5 : ffff800008017498 x4 : ffff8000152f4cc0 x3 : ffff80000853857c [ 381.953898][ C1] x2 : 0000000000000001 x1 : 0000000000000102 x0 : 0000000000000000 [ 381.955112][ C1] Call trace: [ 381.955618][ C1] debug_check_no_obj_freed+0x38c/0x46c [ 381.956470][ C1] slab_free_freelist_hook+0x104/0x1e8 [ 381.957241][ C1] __kmem_cache_free+0xbc/0x218 [ 381.958015][ C1] kfree+0xd0/0x1a8 [ 381.958544][ C1] rose_timer_expiry+0x43c/0x5a0 [ 381.959320][ C1] call_timer_fn+0x1b8/0x95c [ 381.959950][ C1] __run_timers+0x478/0x6f0 [ 381.960628][ C1] run_timer_softirq+0x7c/0x114 [ 381.961362][ C1] handle_softirqs+0x318/0xc60 [ 381.962015][ C1] __do_softirq+0x14/0x20 [ 381.962627][ C1] ____do_softirq+0x14/0x20 [ 381.963347][ C1] call_on_irq_stack+0x30/0x48 [ 381.964072][ C1] do_softirq_own_stack+0x20/0x2c [ 381.964856][ C1] __irq_exit_rcu+0x23c/0x438 [ 381.965569][ C1] irq_exit_rcu+0x14/0x84 [ 381.966248][ C1] el1_interrupt+0x38/0x54 [ 381.966870][ C1] el1h_64_irq_handler+0x18/0x24 [ 381.967652][ C1] el1h_64_irq+0x64/0x68 [ 381.968266][ C1] arch_local_irq_enable+0xc/0x18 [ 381.969018][ C1] default_idle_call+0x68/0xd8 [ 381.969647][ C1] do_idle+0x1d8/0x4c8 [ 381.970215][ C1] cpu_startup_entry+0x5c/0x74 [ 381.970921][ C1] secondary_start_kernel+0x198/0x1bc [ 381.971797][ C1] __secondary_switched+0xb0/0xb4 [ 381.972496][ C1] irq event stamp: 5083483 [ 381.973152][ C1] hardirqs last enabled at (5083482): [] __up_console_sem+0xb4/0xfc [ 381.974635][ C1] hardirqs last disabled at (5083483): [] el1_dbg+0x24/0x80 [ 381.975851][ C1] softirqs last enabled at (5083414): [] handle_softirqs+0xaec/0xc60 [ 381.977276][ C1] softirqs last disabled at (5083451): [] __do_softirq+0x14/0x20 [ 381.978611][ C1] ---[ end trace 0000000000000000 ]--- SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 382.425624][ T1612] bond7 (unregistering): Released all slaves [ 383.113977][ T1612] bond6 (unregistering): Released all slaves [ 383.775537][ T1612] bond5 (unregistering): Released all slaves [ 383.812844][ T1612] bond4 (unregistering): (slave bridge4): Releasing active interface [ 383.933597][ T1612] bond4 (unregistering): Released all slaves [ 384.726103][ T1612] bond3 (unregistering): Released all slaves [ 384.774976][ T1612] bond2 (unregistering): Released all slaves [ 385.516513][ T1612] bond1 (unregistering): Released all slaves [ 387.052213][ C1] ------------[ cut here ]------------ [ 387.053104][ C1] ODEBUG: free active (active state 0) object type: timer_list hint: rose_t0timer_expiry+0x0/0x344 [ 387.054693][ C1] WARNING: CPU: 1 PID: 0 at lib/debugobjects.c:518 debug_check_no_obj_freed+0x38c/0x46c [ 387.056036][ C1] Modules linked in: [ 387.056631][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 [ 387.057824][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 387.059157][ C1] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 387.060244][ C1] pc : debug_check_no_obj_freed+0x38c/0x46c [ 387.061045][ C1] lr : debug_check_no_obj_freed+0x38c/0x46c [ 387.061867][ C1] sp : ffff800008017a10 [ 387.062468][ C1] x29: ffff800008017a50 x28: ffff0000f4c3ba00 x27: 0000000000000000 [ 387.063608][ C1] x26: ffff800011bab020 x25: ffff0000f4c3b890 x24: ffff800010b810c8 [ 387.064734][ C1] x23: ffff0000c3b19770 x22: ffff0000f4c3b000 x21: dfff800000000000 [ 387.065857][ C1] x20: 0000000000000000 x19: ffff0000f4c3b800 x18: ffff800011b8bf60 [ 387.067016][ C1] x17: 6e6968207473696c x16: ffff8000082d9364 x15: 0000000000000000 [ 387.068143][ C1] x14: 0000000000000001 x13: 1fffe00033eac9a3 x12: 0000000000ff0100 [ 387.069322][ C1] x11: ff00800008194238 x10: 0000000000000000 x9 : f9ce4032988b8a00 [ 387.070438][ C1] x8 : f9ce4032988b8a00 x7 : 0000000000000001 x6 : 0000000000000001 [ 387.071569][ C1] x5 : ffff800008017498 x4 : ffff8000152f4cc0 x3 : ffff80000853857c [ 387.072729][ C1] x2 : 0000000000000001 x1 : 0000000000000102 x0 : 0000000000000000 [ 387.073853][ C1] Call trace: [ 387.074317][ C1] debug_check_no_obj_freed+0x38c/0x46c [ 387.075111][ C1] slab_free_freelist_hook+0x104/0x1e8 [ 387.075877][ C1] __kmem_cache_free+0xbc/0x218 [ 387.076557][ C1] kfree+0xd0/0x1a8 [ 387.077105][ C1] rose_timer_expiry+0x43c/0x5a0 [ 387.077792][ C1] call_timer_fn+0x1b8/0x95c [ 387.078442][ C1] __run_timers+0x478/0x6f0 [ 387.079079][ C1] run_timer_softirq+0x7c/0x114 [ 387.079805][ C1] handle_softirqs+0x318/0xc60 [ 387.080489][ C1] __do_softirq+0x14/0x20 [ 387.081083][ C1] ____do_softirq+0x14/0x20 [ 387.081735][ C1] call_on_irq_stack+0x30/0x48 [ 387.082407][ C1] do_softirq_own_stack+0x20/0x2c [ 387.083124][ C1] __irq_exit_rcu+0x23c/0x438 [ 387.083779][ C1] irq_exit_rcu+0x14/0x84 [ 387.084380][ C1] el1_interrupt+0x38/0x54 [ 387.085014][ C1] el1h_64_irq_handler+0x18/0x24 [ 387.085711][ C1] el1h_64_irq+0x64/0x68 [ 387.086296][ C1] arch_local_irq_enable+0xc/0x18 [ 387.087025][ C1] default_idle_call+0x68/0xd8 [ 387.087696][ C1] do_idle+0x1d8/0x4c8 [ 387.088273][ C1] cpu_startup_entry+0x5c/0x74 [ 387.088951][ C1] secondary_start_kernel+0x198/0x1bc [ 387.089728][ C1] __secondary_switched+0xb0/0xb4 [ 387.090441][ C1] irq event stamp: 5132595 [ 387.091051][ C1] hardirqs last enabled at (5132594): [] __up_console_sem+0xb4/0xfc [ 387.092407][ C1] hardirqs last disabled at (5132595): [] el1_dbg+0x24/0x80 [ 387.093645][ C1] softirqs last enabled at (5132510): [] handle_softirqs+0xaec/0xc60 [ 387.094999][ C1] softirqs last disabled at (5132563): [] __do_softirq+0x14/0x20 [ 387.096261][ C1] ---[ end trace 0000000000000000 ]--- [ 387.614548][ T1612] team0 (unregistering): Port device team_slave_1 removed [ 387.795480][ T1612] team0 (unregistering): Port device team_slave_0 removed [ 387.963126][ T1612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.163018][ T1612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.643690][ T1612] bond0 (unregistering): Released all slaves [ 389.935646][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 389.937493][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 389.938882][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 389.941108][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 389.943563][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 389.945020][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 389.990646][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready