last executing test programs: 2.306185434s ago: executing program 2 (id=19981): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f800"/204, 0xcc}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098", 0x29}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf", 0x7e}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca", 0xac}, {&(0x7f0000000d00)="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", 0x13d}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef0fcbe09cd9e34c6b9d641ba6fb677edede91", 0x9c}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962", 0xad}, {0x0}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355", 0x12}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.836590792s ago: executing program 0 (id=19991): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x33, 0x0, 0x4) 1.68742364s ago: executing program 3 (id=19993): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4051) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 1.588612558s ago: executing program 4 (id=19995): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r4}) 1.571808428s ago: executing program 3 (id=19996): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r3, 0x1, 0xff1f0000, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}]}]}, 0x28}}, 0x0) 1.483088355s ago: executing program 4 (id=19998): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0) 1.341724982s ago: executing program 2 (id=19999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x8, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x20000044) 1.264824804s ago: executing program 2 (id=20001): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.199588856s ago: executing program 4 (id=20002): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e23, 0xb9ad, @remote, 0x37f}}, [0x7fffffff, 0xfffffffffffff575, 0x0, 0xde1f, 0xfffffffffffffff8, 0x5, 0x5513, 0x2, 0x8000, 0x3c, 0x8, 0x2, 0x3ff, 0x100, 0xffffffffffffff43]}, &(0x7f0000000080)=0x100) 1.065046936s ago: executing program 1 (id=20004): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x24c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x21c, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_EMATCHES={0x214, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x54b0}}, @TCA_EMATCH_TREE_LIST={0x84, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x1}, {{0x81, 0x1, 0x1, 0x1}, {0x1}}}}, @TCF_EM_IPT={0x28, 0x3, 0x0, 0x0, {{0x9, 0x9, 0x3}, [@TCA_EM_IPT_NFPROTO={0x5}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0xff80, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x400, 0x4}, {0x6, 0x4}}}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0xb}, {0x1, 0x5, 0x3}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x0, 0x2, 0x72}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0xc, 0x2, 0x0, 0x0, {{0xfff, 0x4, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4f}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0xc8, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x2000, 0x8, 0x4}, {0x2, 0xfe, 0x3}}}, @TCF_EM_IPT={0x60, 0x2, 0x0, 0x0, {{0xd781, 0x9, 0x4}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x3}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x2}, @TCA_EM_IPT_MATCH_DATA={0x42, 0x5, "ba043935e06c1fab3f0badd0e2d3772c00e9b44508b1e847bdc3228f686c743b6aca6759920cb5402f2dd06dbd467b035a9192766edf8496c0dad67a1b66"}]}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xffff, 0x3, 0x9}, {0x6, 0x2, 0x1ff, 0xfffffffd}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x0, 0x3, 0x3ff}, {0x3, 0x10, 0x4, 0xf896}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xddf, 0x3, 0x6}, {0x2, 0x5, 0xff}}}]}, @TCA_EMATCH_TREE_LIST={0xa4, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x8, 0x1, 0x7}, {0x97e, 0x9, 0xfff, 0x5, 0x5, 0x2, 0x1}}}, @TCF_EM_META={0xc, 0x3, 0x0, 0x0, {{0x8, 0x4, 0x4}}}, @TCF_EM_CONTAINER={0x7c, 0x1, 0x0, 0x0, {{0x9, 0x0, 0x3}, "4e5b801d9c661d3f0f434583f586bf4f3d509e582142c967d7687c945ef84576c6e876740473249469d3ac9f9c42d4f2250148e1b8112f4ffa4634d98504c069741c00e2e7cf01a34d32556f8de6e564c922d4b60f6fbf0d5560f2d8d18d22eefea30e83a06042d532c33f7ecce7f694"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x24c}}, 0x20000084) 1.018736022s ago: executing program 4 (id=20005): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="40005200060010"], 0x24}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r1, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 987.921314ms ago: executing program 1 (id=20006): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4051) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 932.906783ms ago: executing program 4 (id=20007): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) recvfrom(r0, 0x0, 0x0, 0x99bcb88de02507f2, 0x0, 0x0) 853.421285ms ago: executing program 1 (id=20008): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="460400", @ANYRES16, @ANYBLOB="ff830500000700ff"], 0x4}}, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000180)=0x68) 802.833481ms ago: executing program 0 (id=20009): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 796.867994ms ago: executing program 4 (id=20010): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f800"/204, 0xcc}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098", 0x29}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf", 0x7e}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca", 0xac}, {&(0x7f0000000d00)="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", 0x13d}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95b04a2653e8a7c9ab042ea1b0bf4bde850bc9f6147f1a48e86eec8223fd33fc83374393fbd08a3281a268aff6688fb41eecbdd328ef0fcbe09cd9e34c6b9d641ba6fb677edede91", 0x9c}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962", 0xad}, {0x0}, {&(0x7f0000000740)="b176d469f44ff7e206a24a3a5f3a112da355", 0x12}], 0x3}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 706.278805ms ago: executing program 0 (id=20011): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x8, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x20000044) 626.412247ms ago: executing program 1 (id=20012): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB="240012800b000100627269646765"], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01"], 0x3c}}, 0x0) 625.694187ms ago: executing program 3 (id=20013): r0 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 552.126991ms ago: executing program 0 (id=20014): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="7a0af8ff75257000bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b25952850a84a70002b2ab3d6ffaa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48e999bb004823ebcd8c65743f31f84b263ab9b3426692d01ad194f302d7a658e9e54687d3c56d7bedb6b2f25ddb8c640bb321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6a54c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dcce8db910f93c49b9e0b6dd7356aa79d5fabb5c0d0da6d719d7e0efb2bb713d18242cd5df6ca53307a4cdd91be4587f90e317c8de5e5c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1786eda2b20"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) sendmsg$xdp(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000005c0)="a0725cb469", 0x5}], 0x1, 0x0, 0x0, 0x20008040}, 0x4) 470.373372ms ago: executing program 3 (id=20015): bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r4}) 392.054523ms ago: executing program 3 (id=20016): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}, @IFLA_GROUP={0x8, 0x1b, 0x1d}]}, 0x3c}}, 0x0) 326.720987ms ago: executing program 1 (id=20017): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000002060108000000000000000001000000050005000a000000050001000700040005000400000000000900020073797a31"], 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 322.084192ms ago: executing program 0 (id=20018): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)={0x118, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_NAT={0xfc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x74, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x64, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}]}, 0x118}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) 275.142833ms ago: executing program 2 (id=20019): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x404c444) 227.343819ms ago: executing program 3 (id=20020): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff"], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x28, 0x3a, 0x0, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}}}}}}}, 0x0) 181.362309ms ago: executing program 2 (id=20021): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 111.141526ms ago: executing program 0 (id=20022): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) 94.039845ms ago: executing program 1 (id=20023): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0xfffffffffffffffe, 0x0, 0x0, 0x5b3}, 0x9, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x80400c0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8, 0x4}, {0x0, 0x8}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) 0s ago: executing program 2 (id=20024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, 0x8, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x20000044) kernel console output (not intermixed with test programs): 4] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16980'. [ 1920.967186][T27946] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 1921.673989][T27974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16991'. [ 1921.938952][T27974] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1922.039957][T27977] bond3: (slave macvlan2): Enslaving as an active interface with an up link [ 1922.417729][T27997] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16993'. [ 1923.131499][T28023] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1923.233864][T28028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17003'. [ 1923.424784][T28031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1923.901184][T28048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17006'. [ 1924.378059][T28064] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17008'. [ 1924.397316][T28063] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1924.425638][T28058] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17008'. [ 1924.570210][T28062] A٨ speed is unknown, defaulting to 1000 [ 1924.617628][T28062] gre0 speed is unknown, defaulting to 1000 [ 1925.348281][T28067] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1930.176563][T28105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17015'. [ 1930.221599][T28112] netlink: 60 bytes leftover after parsing attributes in process `syz.2.17014'. [ 1931.459660][T28142] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1931.648079][T28146] syzkaller0: entered promiscuous mode [ 1931.654030][T28146] syzkaller0: entered allmulticast mode [ 1931.792210][T28155] lo speed is unknown, defaulting to 1000 [ 1931.854785][T28155] lo speed is unknown, defaulting to 1000 [ 1931.885890][T28155] lo speed is unknown, defaulting to 1000 [ 1932.029788][T28169] netlink: 'syz.2.17032': attribute type 1 has an invalid length. [ 1932.054442][T28166] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17031'. [ 1932.069060][T28144] delete_channel: no stack [ 1932.379064][T28169] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1932.698046][T28184] A٨ speed is unknown, defaulting to 1000 [ 1932.752707][T28184] gre0 speed is unknown, defaulting to 1000 [ 1933.254704][T28199] tls: option downdelay: invalid value (18446744073709547007) [ 1933.293921][T28199] tls: option downdelay: allowed values 0 - 2147483647 [ 1933.347551][T28199] tls (unregistering): Released all slaves [ 1933.968455][T28207] netlink: 'syz.3.17041': attribute type 1 has an invalid length. [ 1933.996810][T28155] infiniband sqz0: set active [ 1934.003410][ T1813] lo speed is unknown, defaulting to 1000 [ 1934.009704][T28155] infiniband sqz0: added lo [ 1934.037063][T28155] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1934.039458][T28155] infiniband sqz0: Couldn't open port 1 [ 1934.188820][T28155] RDS/IB: sqz0: added [ 1934.204529][T28155] smc: adding ib device sqz0 with port count 1 [ 1934.255925][T28155] smc: ib device sqz0 port 1 has no pnetid [ 1934.289857][T28207] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1934.410329][ T1813] lo speed is unknown, defaulting to 1000 [ 1934.454209][T28155] lo speed is unknown, defaulting to 1000 [ 1934.653786][T28217] A link change request failed with some changes committed already. Interface 1x9 may have been left with an inconsistent configuration, please check. [ 1934.676883][T28219] netlink: 'syz.2.17044': attribute type 27 has an invalid length. [ 1934.883541][T28219] tipc: Resetting bearer [ 1934.915306][T28219] syzkaller0: left promiscuous mode [ 1934.922681][T28219] syzkaller0: left allmulticast mode [ 1935.322159][T28230] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1935.347667][T28230] bond6 (unregistering): Released all slaves [ 1935.482776][T28155] lo speed is unknown, defaulting to 1000 [ 1935.798250][T28255] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 1935.974046][T28261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17056'. [ 1936.187792][T28155] lo speed is unknown, defaulting to 1000 [ 1936.588515][T28155] lo speed is unknown, defaulting to 1000 [ 1936.834256][T28271] syzkaller0: entered promiscuous mode [ 1936.859451][T28271] syzkaller0: entered allmulticast mode [ 1936.887746][T28264] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1936.897970][T28264] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1937.071702][T28276] netlink: 132 bytes leftover after parsing attributes in process `syz.2.17061'. [ 1937.073373][T28155] lo speed is unknown, defaulting to 1000 [ 1937.108707][ T6328] Bluetooth: hci3: command 0x0406 tx timeout [ 1938.586527][T28248] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1938.691163][T28285] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 1940.668041][T28155] lo speed is unknown, defaulting to 1000 [ 1940.895023][T28298] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 1941.017000][T28302] tls: option downdelay: invalid value (18446744073709547007) [ 1941.056107][T28302] tls: option downdelay: allowed values 0 - 2147483647 [ 1941.100978][T28302] tls (unregistering): Released all slaves [ 1941.427292][T28155] lo speed is unknown, defaulting to 1000 [ 1941.813983][T28326] netlink: 56 bytes leftover after parsing attributes in process `syz.1.17074'. [ 1941.882683][T28327] veth6: entered allmulticast mode [ 1942.243468][T28155] lo speed is unknown, defaulting to 1000 [ 1948.105561][T28362] openvswitch: netlink: Message has 24 unknown bytes. [ 1948.178579][T28373] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1948.202310][T28362] netlink: 'syz.0.17079': attribute type 5 has an invalid length. [ 1948.529352][T28377] : renamed from veth0_to_bond [ 1948.609654][T28379] tls: option downdelay: invalid value (18446744073709547007) [ 1948.641521][T28379] tls: option downdelay: allowed values 0 - 2147483647 [ 1948.650533][T28379] tls (unregistering): Released all slaves [ 1948.736855][T28389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17090'. [ 1948.892892][T28394] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17088'. [ 1948.988875][ T1813] lo speed is unknown, defaulting to 1000 [ 1949.197769][T28404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17093'. [ 1949.322198][T28404] team0: Port device team_slave_0 removed [ 1950.037922][T28431] netlink: 41 bytes leftover after parsing attributes in process `syz.0.17103'. [ 1950.047458][T28431] netlink: 140 bytes leftover after parsing attributes in process `syz.0.17103'. [ 1950.057816][T28431] netlink: 41 bytes leftover after parsing attributes in process `syz.0.17103'. [ 1950.086192][T23836] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1950.671265][T28449] netlink: 36 bytes leftover after parsing attributes in process `syz.3.17109'. [ 1951.006796][T28457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17112'. [ 1951.037920][T28457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17112'. [ 1951.237673][T28466] netlink: 'syz.0.17116': attribute type 1 has an invalid length. [ 1951.246210][T28466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17116'. [ 1951.262789][T28462] ip6tnl2: entered promiscuous mode [ 1951.339986][T28466] A٨ speed is unknown, defaulting to 1000 [ 1951.375541][T28466] gre0 speed is unknown, defaulting to 1000 [ 1952.005923][T28466] lo speed is unknown, defaulting to 1000 [ 1960.091179][T28574] __nla_validate_parse: 11 callbacks suppressed [ 1960.091210][T28574] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17137'. [ 1960.235167][T28586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17141'. [ 1960.258882][T28574] vlan4: entered allmulticast mode [ 1960.288417][T28574] bridge0: entered allmulticast mode [ 1960.312280][T28583] erspan0: left allmulticast mode [ 1960.336334][T28583] erspan0: left promiscuous mode [ 1960.349531][T28583] bridge3: port 1(erspan0) entered disabled state [ 1960.553853][T28583] bridge0: port 1(erspan0) entered blocking state [ 1960.572839][T28583] bridge0: port 1(erspan0) entered disabled state [ 1960.591667][T28583] erspan0: entered allmulticast mode [ 1960.621020][T28601] xt_TCPMSS: Only works on TCP SYN packets [ 1960.638239][T28583] erspan0: entered promiscuous mode [ 1960.673471][T28583] bridge0: port 1(erspan0) entered blocking state [ 1960.680258][T28583] bridge0: port 1(erspan0) entered forwarding state [ 1961.306617][T28622] tls: option downdelay: invalid value (18446744073709547007) [ 1961.361090][T28622] tls: option downdelay: allowed values 0 - 2147483647 [ 1961.420573][T28622] tls (unregistering): Released all slaves [ 1961.573135][T28644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17151'. [ 1961.956448][T28653] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17156'. [ 1962.014500][T28660] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17159'. [ 1962.142760][T28660] vlan5: entered allmulticast mode [ 1962.170945][T28660] bridge7: entered allmulticast mode [ 1962.217241][T28665] erspan0: left allmulticast mode [ 1962.243771][T28665] erspan0: left promiscuous mode [ 1962.260298][T28668] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17161'. [ 1962.276184][T28665] bridge0: port 1(erspan0) entered disabled state [ 1962.340769][T28665] bridge7: port 1(erspan0) entered blocking state [ 1962.357840][T28665] bridge7: port 1(erspan0) entered disabled state [ 1962.364768][T28665] erspan0: entered allmulticast mode [ 1962.403370][T28665] erspan0: entered promiscuous mode [ 1962.426130][T28665] bridge7: port 1(erspan0) entered blocking state [ 1962.433094][T28665] bridge7: port 1(erspan0) entered forwarding state [ 1962.458603][T28669] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17162'. [ 1962.538770][T28668] A٨ speed is unknown, defaulting to 1000 [ 1962.548577][T28668] gre0 speed is unknown, defaulting to 1000 [ 1963.138160][T28701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17170'. [ 1963.225789][T28697] A٨ speed is unknown, defaulting to 1000 [ 1963.347625][T28697] gre0 speed is unknown, defaulting to 1000 [ 1963.357445][T28668] lo speed is unknown, defaulting to 1000 [ 1963.581927][T28707] A٨ speed is unknown, defaulting to 1000 [ 1963.842521][T28712] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 1964.173531][T28707] gre0 speed is unknown, defaulting to 1000 [ 1964.173644][T28697] lo speed is unknown, defaulting to 1000 [ 1964.459478][T28722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17176'. [ 1965.013199][T28736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17180'. [ 1965.125949][T28707] lo speed is unknown, defaulting to 1000 [ 1965.455288][T28744] netlink: 'syz.0.17181': attribute type 1 has an invalid length. [ 1965.515028][T28745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17181'. [ 1965.545061][T28745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17181'. [ 1965.946206][T28744] bond2: entered promiscuous mode [ 1965.966471][T28744] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1966.020584][T28751] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17183'. [ 1966.061153][T28746] bond2: (slave bridge8): making interface the new active one [ 1966.077016][T28746] bridge8: entered promiscuous mode [ 1966.089367][T28746] bond2: (slave bridge8): Enslaving as an active interface with an up link [ 1966.119644][T28750] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17183'. [ 1966.425927][T28756] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 1966.849473][T28768] FAULT_INJECTION: forcing a failure. [ 1966.849473][T28768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1966.863439][T28768] CPU: 1 UID: 0 PID: 28768 Comm: syz.0.17187 Not tainted syzkaller #0 PREEMPT(full) [ 1966.863471][T28768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1966.863486][T28768] Call Trace: [ 1966.863495][T28768] [ 1966.863505][T28768] dump_stack_lvl+0xe8/0x150 [ 1966.863543][T28768] should_fail_ex+0x412/0x560 [ 1966.863578][T28768] _copy_from_user+0x2d/0xb0 [ 1966.863613][T28768] get_timespec64+0x96/0x1b0 [ 1966.863642][T28768] ? __pfx_get_timespec64+0x10/0x10 [ 1966.863683][T28768] __se_sys_pselect6+0x13a/0x320 [ 1966.863721][T28768] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1966.863752][T28768] ? __pfx_ksys_write+0x10/0x10 [ 1966.863782][T28768] ? __x64_sys_pselect6+0x21/0xf0 [ 1966.863816][T28768] do_syscall_64+0x14d/0xf80 [ 1966.863848][T28768] ? trace_irq_disable+0x3b/0x150 [ 1966.863880][T28768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1966.863903][T28768] ? clear_bhb_loop+0x40/0x90 [ 1966.863930][T28768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1966.863953][T28768] RIP: 0033:0x7f6cfc79c799 [ 1966.863975][T28768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1966.863995][T28768] RSP: 002b:00007f6cfa9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1966.864020][T28768] RAX: ffffffffffffffda RBX: 00007f6cfca15fa0 RCX: 00007f6cfc79c799 [ 1966.864036][T28768] RDX: 00002000000001c0 RSI: 0000200000000140 RDI: 0000000000000040 [ 1966.864052][T28768] RBP: 00007f6cfa9f6090 R08: 0000200000000240 R09: 0000000000000000 [ 1966.864067][T28768] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1966.864081][T28768] R13: 00007f6cfca16038 R14: 00007f6cfca15fa0 R15: 00007fffd06f17f8 [ 1966.864119][T28768] [ 1967.473098][T28783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17189'. [ 1968.567148][T28804] veth0: entered promiscuous mode [ 1968.680504][T28809] veth0: left promiscuous mode [ 1968.896635][T28813] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 1969.007482][T28817] netlink: 'syz.1.17201': attribute type 1 has an invalid length. [ 1969.300884][T28827] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17201'. [ 1969.579403][T28819] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1969.629289][T28825] veth19: entered promiscuous mode [ 1969.657437][T28827] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1969.666947][T25498] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1969.834180][T25155] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1970.204598][T28859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17210'. [ 1970.572107][T28870] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 1970.914695][T28876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17216'. [ 1971.108261][T28879] vlan4: entered allmulticast mode [ 1971.144960][T28879] bridge5: entered allmulticast mode [ 1971.165327][T28880] erspan0: left allmulticast mode [ 1971.171964][T28880] erspan0: left promiscuous mode [ 1971.227088][T28880] bridge0: port 1(erspan0) entered disabled state [ 1971.276981][T28880] bridge5: port 1(erspan0) entered blocking state [ 1971.296590][T28880] bridge5: port 1(erspan0) entered disabled state [ 1971.304607][T28880] erspan0: entered allmulticast mode [ 1971.363738][T28880] erspan0: entered promiscuous mode [ 1971.376537][T28880] bridge5: port 1(erspan0) entered blocking state [ 1971.386504][T28880] bridge5: port 1(erspan0) entered forwarding state [ 1971.816003][T28908] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17223'. [ 1971.856134][T28908] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17223'. [ 1971.880297][T28901] netlink: 'syz.3.17222': attribute type 4 has an invalid length. [ 1972.152945][T28911] bond3: peer notification delay (7) is not a multiple of miimon (2), value rounded to 6 ms [ 1972.179529][T28911] bond3 (unregistering): Released all slaves [ 1975.992804][ T1298] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 1976.006360][ T1298] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1978.241594][T28945] tipc: Trying to set illegal importance in message [ 1978.524438][T28963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17234'. [ 1978.837604][T28970] tipc: Started in network mode [ 1978.860738][T28970] tipc: Node identity befbdd48bbe8, cluster identity 4711 [ 1978.885044][T28970] tipc: Enabled bearer , priority 0 [ 1978.926807][T28973] syzkaller0: entered promiscuous mode [ 1978.960154][T28973] syzkaller0: entered allmulticast mode [ 1979.074312][T28975] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17239'. [ 1979.090243][T28970] tipc: Resetting bearer [ 1979.107135][T28968] tipc: Resetting bearer [ 1979.169451][T28968] tipc: Disabling bearer [ 1979.206339][T28983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17244'. [ 1979.556520][T28999] bond_slave_0: entered promiscuous mode [ 1979.569623][T28999] bond_slave_0: left promiscuous mode [ 1979.575644][T29001] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1979.776175][T29008] netlink: 52 bytes leftover after parsing attributes in process `syz.1.17255'. [ 1980.070244][T29017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1980.151457][T29028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1980.412135][T29032] syzkaller0: entered promiscuous mode [ 1980.422613][T29032] tipc: Resetting bearer [ 1980.582808][T29041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17268'. [ 1980.708009][T29042] netlink: set zone limit has 4 unknown bytes [ 1980.770845][T29046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17271'. [ 1980.781854][T29046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17271'. [ 1980.941054][T29052] xt_hashlimit: size too large, truncated to 1048576 [ 1981.631335][T29082] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17286'. [ 1981.775101][T29086] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17289'. [ 1981.800501][T29086] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17289'. [ 1982.162143][T29108] netlink: 'syz.1.17298': attribute type 32 has an invalid length. [ 1982.427470][T29122] netlink: 'syz.0.17307': attribute type 39 has an invalid length. [ 1982.846354][T29143] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1984.531855][T29206] __nla_validate_parse: 9 callbacks suppressed [ 1984.531880][T29206] netlink: 27 bytes leftover after parsing attributes in process `syz.2.17348'. [ 1985.178566][T29237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17363'. [ 1985.329649][T29245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17367'. [ 1985.371685][T29245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17367'. [ 1985.411330][T29247] xt_hashlimit: size too large, truncated to 1048576 [ 1985.594345][T29263] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17374'. [ 1985.687875][T29265] syzkaller0: left promiscuous mode [ 1985.702523][T29265] tipc: Resetting bearer [ 1985.888668][T29271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17377'. [ 1985.985814][T29275] netlink: 'syz.3.17380': attribute type 4 has an invalid length. [ 1987.013388][T29320] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17400'. [ 1987.130979][T29326] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17403'. [ 1987.236480][T29330] bridge0: port 1(team0) entered blocking state [ 1987.242913][T29330] bridge0: port 1(team0) entered disabled state [ 1987.263991][T29330] team0: entered allmulticast mode [ 1987.281952][T29330] team_slave_0: entered allmulticast mode [ 1987.294279][T29330] team_slave_1: entered allmulticast mode [ 1987.345164][T29330] team0: entered promiscuous mode [ 1987.351489][T29330] team_slave_0: entered promiscuous mode [ 1987.368652][T29330] team_slave_1: entered promiscuous mode [ 1987.880161][T29349] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1987.896251][T29349] 8021q: adding VLAN 0 to HW filter on device team0 [ 1987.929335][T29349] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1988.127867][T29368] tipc: Resetting bearer [ 1988.215413][T29367] tipc: Resetting bearer [ 1988.394947][T29379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17427'. [ 1989.054669][T25155] tipc: Resetting bearer [ 1989.528408][T29429] netlink: 'syz.1.17449': attribute type 10 has an invalid length. [ 1996.125724][T29482] netlink: 48 bytes leftover after parsing attributes in process `syz.2.17463'. [ 1996.266379][T29490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17465'. [ 1996.285751][T29493] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17467'. [ 1996.315799][T29495] Bluetooth: MGMT ver 1.23 [ 1997.023949][ T6328] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1997.039133][ T6328] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1997.048566][ T6328] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1997.060700][ T6328] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1997.068818][ T6328] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1997.125542][T29522] "syz.2.17477" (29522) uses obsolete ecb(arc4) skcipher [ 1997.224011][T29517] A٨ speed is unknown, defaulting to 1000 [ 1997.272635][T29517] gre0 speed is unknown, defaulting to 1000 [ 1997.651991][T29538] netlink: 184 bytes leftover after parsing attributes in process `syz.0.17486'. [ 1998.024612][T29517] lo speed is unknown, defaulting to 1000 [ 1998.088511][T29557] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.17494'. [ 1998.425218][T29569] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17501'. [ 1998.909074][T29584] syz_tun: entered allmulticast mode [ 1998.955401][T29583] syz_tun: left allmulticast mode [ 1998.981209][T29589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17509'. [ 1999.105233][ T6328] Bluetooth: hci1: command tx timeout [ 1999.346835][T29517] chnl_net:caif_netlink_parms(): no params data found [ 1999.582391][T29517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1999.594099][T29517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1999.602758][T29517] bridge_slave_0: entered allmulticast mode [ 1999.612622][T29517] bridge_slave_0: entered promiscuous mode [ 1999.624603][T29517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1999.634471][T29517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1999.642535][T29517] bridge_slave_1: entered allmulticast mode [ 1999.648556][T29611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17517'. [ 1999.659690][ T1813] IPVS: starting estimator thread 0... [ 1999.664182][T29517] bridge_slave_1: entered promiscuous mode [ 1999.740690][T29611] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1999.755012][T29612] IPVS: using max 26 ests per chain, 62400 per kthread [ 1999.779493][T29517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1999.793039][T29517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1999.841375][T29517] team0: Port device team_slave_0 added [ 1999.855396][T29517] team0: Port device team_slave_1 added [ 1999.921778][T29611] bond3 (unregistering): Released all slaves [ 1999.963164][T29517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1999.979647][T29517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2000.028588][T29517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2000.070987][T29517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2000.089312][T29517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2000.182960][T29517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2000.436981][T29517] hsr_slave_0: entered promiscuous mode [ 2000.467500][T29517] hsr_slave_1: entered promiscuous mode [ 2000.721774][T29646] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2000.802219][T29648] syzkaller0: entered promiscuous mode [ 2000.825204][T29648] tipc: Resetting bearer [ 2001.005956][T29659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17538'. [ 2001.064501][T29659] hsr_slave_1 (unregistering): left promiscuous mode [ 2001.167599][T29662] syzkaller0: entered promiscuous mode [ 2001.173257][T29662] syzkaller0: entered allmulticast mode [ 2001.195834][ T6328] Bluetooth: hci1: command tx timeout [ 2001.466154][T29680] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17545'. [ 2001.476142][T29680] netlink: 43 bytes leftover after parsing attributes in process `syz.2.17545'. [ 2001.485485][T29680] netlink: 'syz.2.17545': attribute type 6 has an invalid length. [ 2001.495981][T29680] netlink: 43 bytes leftover after parsing attributes in process `syz.2.17545'. [ 2001.517025][T29684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17544'. [ 2001.606068][T29684] sit1: entered allmulticast mode [ 2002.497063][T29715] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17556'. [ 2002.619163][T29517] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2002.669935][T29517] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2002.718990][T29517] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2002.761325][T29517] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2003.062032][T29517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2003.127831][T29517] 8021q: adding VLAN 0 to HW filter on device team0 [ 2003.154723][T25155] bridge0: port 1(bridge_slave_0) entered blocking state [ 2003.163649][T25155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2003.242853][T25506] bridge0: port 2(bridge_slave_1) entered blocking state [ 2003.250141][T25506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2003.269694][ T6328] Bluetooth: hci1: command tx timeout [ 2003.303721][T29745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17568'. [ 2003.778816][T29765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17575'. [ 2003.924085][T29517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2004.305840][T29781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17582'. [ 2004.615446][T29796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17587'. [ 2004.869743][T29517] veth0_vlan: entered promiscuous mode [ 2004.918552][T29517] veth1_vlan: entered promiscuous mode [ 2005.026616][T29517] veth0_macvtap: entered promiscuous mode [ 2005.077260][T29517] veth1_macvtap: entered promiscuous mode [ 2005.172876][T29517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2005.223811][T29517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2005.299458][T25506] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.320923][T25506] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.352621][ T6328] Bluetooth: hci1: command tx timeout [ 2005.371508][T25506] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.392690][T25506] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.507469][T29824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17599'. [ 2005.816200][T29835] netlink: 'syz.0.17605': attribute type 1 has an invalid length. [ 2005.934690][T29835] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2006.010845][T25155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2006.048450][T25155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2006.150718][T29842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2006.203179][T29842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2006.215100][T29842] bond0 (unregistering): Released all slaves [ 2006.348814][T29835] vlan7: entered allmulticast mode [ 2006.365584][T29835] bond3: entered allmulticast mode [ 2006.412387][T25506] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2006.466414][T25506] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2006.539802][T29858] __nla_validate_parse: 1 callbacks suppressed [ 2006.539825][T29858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17613'. [ 2006.797561][T29869] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17619'. [ 2006.897065][T29869] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17619'. [ 2007.331414][T29892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17627'. [ 2014.461270][T23836] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2014.859151][T29924] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17631'. [ 2015.059122][T29934] netlink: 100 bytes leftover after parsing attributes in process `syz.2.17635'. [ 2015.088865][T29934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17635'. [ 2015.121895][T29934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17635'. [ 2016.369840][T29988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17661'. [ 2016.671909][T30003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17666'. [ 2016.681479][T30003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17666'. [ 2016.691174][T30003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17666'. [ 2016.989969][T30020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17675'. [ 2017.242261][T30020] 8021q: VLANs not supported on ipvlan0 [ 2017.324258][T30021] syzkaller1: entered promiscuous mode [ 2017.334986][T30021] syzkaller1: entered allmulticast mode [ 2019.017849][T30101] netlink: 'syz.0.17706': attribute type 9 has an invalid length. [ 2019.055644][T30101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17706'. [ 2019.132340][T30101] macvlan2: entered promiscuous mode [ 2019.168110][T30101] hsr0: entered promiscuous mode [ 2019.174275][T30101] macvlan2: entered allmulticast mode [ 2019.229097][T30101] hsr0: entered allmulticast mode [ 2019.239257][T30101] hsr_slave_0: entered allmulticast mode [ 2019.275082][T30101] hsr_slave_1: entered allmulticast mode [ 2026.449627][T30155] syzkaller0: entered promiscuous mode [ 2026.473711][T30155] syzkaller0: entered allmulticast mode [ 2026.595585][T30162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17722'. [ 2027.882648][T30215] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17745'. [ 2027.936307][T30218] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17745'. [ 2028.635112][T30238] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17756'. [ 2029.501612][T21565] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2029.515444][T21565] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2029.542153][T21565] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2029.555596][T21565] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2029.566717][T21565] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2029.669640][T30275] A٨ speed is unknown, defaulting to 1000 [ 2029.732476][T30275] gre0 speed is unknown, defaulting to 1000 [ 2030.370193][T30275] lo speed is unknown, defaulting to 1000 [ 2031.089035][T30336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2031.383374][T30275] chnl_net:caif_netlink_parms(): no params data found [ 2031.565611][T30356] netlink: 76 bytes leftover after parsing attributes in process `syz.4.17811'. [ 2031.620829][T30275] bridge0: port 1(bridge_slave_0) entered blocking state [ 2031.628751][T30275] bridge0: port 1(bridge_slave_0) entered disabled state [ 2031.636907][T30275] bridge_slave_0: entered allmulticast mode [ 2031.643552][T30356] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17811'. [ 2031.654694][T30275] bridge_slave_0: entered promiscuous mode [ 2031.664153][T30275] bridge0: port 2(bridge_slave_1) entered blocking state [ 2031.674679][T30275] bridge0: port 2(bridge_slave_1) entered disabled state [ 2031.683479][T21565] Bluetooth: hci5: command tx timeout [ 2031.759097][T30275] bridge_slave_1: entered allmulticast mode [ 2031.793025][T30275] bridge_slave_1: entered promiscuous mode [ 2031.969082][T30275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2031.999812][T30275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2032.029781][T30369] syzkaller0: entered promiscuous mode [ 2032.178611][T30275] team0: Port device team_slave_0 added [ 2032.216436][T30275] team0: Port device team_slave_1 added [ 2032.335447][T30379] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17820'. [ 2032.425466][T30275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2032.432497][T30275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2032.467838][T30385] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17824'. [ 2032.497364][T30385] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17824'. [ 2032.599120][T30275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2032.612956][T30275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2032.620826][T30275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2032.647730][T30275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2032.905512][T30399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17830'. [ 2033.040039][T30275] hsr_slave_0: entered promiscuous mode [ 2033.056518][T30275] hsr_slave_1: entered promiscuous mode [ 2033.066582][T30275] debugfs: 'hsr0' already exists in 'hsr' [ 2033.099535][T30275] Cannot create hsr debugfs directory [ 2033.258955][T30410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17834'. [ 2033.300965][T30406] syzkaller0: entered promiscuous mode [ 2033.311486][T30413] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17834'. [ 2033.443434][T30419] netlink: 76 bytes leftover after parsing attributes in process `syz.1.17836'. [ 2033.453049][T30419] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17836'. [ 2033.748878][T21565] Bluetooth: hci5: command tx timeout [ 2034.249769][T30451] netlink: 76 bytes leftover after parsing attributes in process `syz.3.17848'. [ 2034.858745][T30275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2034.915599][T30275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2035.116941][T30275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2035.176748][T30275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2035.271674][T30478] syzkaller0: entered promiscuous mode [ 2035.279785][T30478] syzkaller0: entered allmulticast mode [ 2035.566893][T30275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2035.612407][T30275] 8021q: adding VLAN 0 to HW filter on device team0 [ 2035.648345][T25151] bridge0: port 1(bridge_slave_0) entered blocking state [ 2035.655676][T25151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2035.687419][T30494] A٨ speed is unknown, defaulting to 1000 [ 2035.702553][T30494] gre0 speed is unknown, defaulting to 1000 [ 2035.713681][ T686] bridge0: port 2(bridge_slave_1) entered blocking state [ 2035.720930][ T686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2035.826704][T21565] Bluetooth: hci5: command tx timeout [ 2036.613087][T30494] lo speed is unknown, defaulting to 1000 [ 2036.743260][T30275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2036.999418][T30275] veth0_vlan: entered promiscuous mode [ 2037.039095][T30275] veth1_vlan: entered promiscuous mode [ 2037.216891][T30275] veth0_macvtap: entered promiscuous mode [ 2037.257005][T30275] veth1_macvtap: entered promiscuous mode [ 2037.366136][T30275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2037.403574][T30275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2037.446777][ T1298] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 2037.459845][ T1298] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2037.579679][T25507] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.778365][T25507] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.816875][T25507] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.877127][T25507] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2037.905983][T21565] Bluetooth: hci5: command tx timeout [ 2038.139814][T25507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2038.155040][T25507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2038.258754][T20560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2038.270067][T20560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2038.463634][T30561] __nla_validate_parse: 1 callbacks suppressed [ 2038.463667][T30561] netlink: 72 bytes leftover after parsing attributes in process `syz.2.17766'. [ 2043.833606][T30583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17886'. [ 2044.030902][T30583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17886'. [ 2044.260069][ T6328] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2044.270677][ T6328] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2044.285701][ T6328] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2044.298625][ T6328] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2044.306722][ T6328] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2044.399063][T30600] A٨ speed is unknown, defaulting to 1000 [ 2044.451137][T30600] gre0 speed is unknown, defaulting to 1000 [ 2045.167987][T30600] lo speed is unknown, defaulting to 1000 [ 2046.388809][ T6328] Bluetooth: hci0: command tx timeout [ 2046.471028][T30600] chnl_net:caif_netlink_parms(): no params data found [ 2046.768926][T30600] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.776579][T30600] bridge0: port 1(bridge_slave_0) entered disabled state [ 2046.783972][T30600] bridge_slave_0: entered allmulticast mode [ 2046.794072][T30600] bridge_slave_0: entered promiscuous mode [ 2046.805712][T30600] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.813109][T30600] bridge0: port 2(bridge_slave_1) entered disabled state [ 2046.821003][T30600] bridge_slave_1: entered allmulticast mode [ 2046.829838][T30600] bridge_slave_1: entered promiscuous mode [ 2046.880962][T30600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2046.894516][T30600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2046.967171][T30600] team0: Port device team_slave_0 added [ 2046.979724][T30600] team0: Port device team_slave_1 added [ 2047.102165][T30600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2047.141683][T30600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2047.222173][T30600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2047.255560][T30600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2047.275086][T30600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2047.355301][T30600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2047.570582][T30600] hsr_slave_0: entered promiscuous mode [ 2047.588030][T30600] hsr_slave_1: entered promiscuous mode [ 2047.606599][T30600] debugfs: 'hsr0' already exists in 'hsr' [ 2047.620381][T30600] Cannot create hsr debugfs directory [ 2048.246622][T30732] bridge5: port 1(erspan0) entered disabled state [ 2048.470208][ T6328] Bluetooth: hci0: command tx timeout [ 2048.830444][T30600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2048.875819][T30600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2048.958209][T30600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2049.005652][T30600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2049.084475][T30756] netlink: 'syz.1.17960': attribute type 3 has an invalid length. [ 2049.122145][T30756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17960'. [ 2049.369049][T30600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2049.464024][T30600] 8021q: adding VLAN 0 to HW filter on device team0 [ 2049.483962][T30774] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17964'. [ 2049.502415][T25151] bridge0: port 1(bridge_slave_0) entered blocking state [ 2049.509708][T25151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2049.577976][T25151] bridge0: port 2(bridge_slave_1) entered blocking state [ 2049.585238][T25151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2050.102147][T30799] tipc: Enabling of bearer rejected, failed to enable media [ 2050.314012][T30600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2050.534300][T30600] veth0_vlan: entered promiscuous mode [ 2050.551634][ T6328] Bluetooth: hci0: command tx timeout [ 2050.667976][T30600] veth1_vlan: entered promiscuous mode [ 2050.804216][T30600] veth0_macvtap: entered promiscuous mode [ 2050.873815][T30600] veth1_macvtap: entered promiscuous mode [ 2050.999501][T30600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2051.070489][T30600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2051.123211][T25498] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.138450][T30833] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17990'. [ 2051.158303][T25498] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.301246][T25498] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.329768][T25498] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2051.407458][T30843] syzkaller0: entered promiscuous mode [ 2051.413107][T30843] syzkaller0: entered allmulticast mode [ 2051.520104][T30843] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 2051.754394][T25498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2051.773850][T25498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2051.914502][T25498] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2051.928332][T25498] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2052.607243][T30879] syzkaller0: entered promiscuous mode [ 2052.612682][T21565] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2052.623922][T21565] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2052.633314][T30879] syzkaller0: entered allmulticast mode [ 2052.639502][T21565] Bluetooth: hci0: command tx timeout [ 2052.650173][T21565] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2052.665984][T21565] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2052.675599][T21565] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2052.795708][T30879] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 2053.107879][T30891] netlink: 'syz.3.18015': attribute type 1 has an invalid length. [ 2053.280211][T30896] netlink: 'syz.2.18016': attribute type 3 has an invalid length. [ 2053.312129][T30896] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18016'. [ 2053.348901][T30880] A٨ speed is unknown, defaulting to 1000 [ 2053.477396][T30880] gre0 speed is unknown, defaulting to 1000 [ 2053.733530][T30900] syzkaller0: entered promiscuous mode [ 2053.755643][T30900] syzkaller0: entered allmulticast mode [ 2054.722048][T21565] Bluetooth: hci4: command tx timeout [ 2055.280513][T30932] netlink: 25 bytes leftover after parsing attributes in process `syz.3.18030'. [ 2056.796703][T21565] Bluetooth: hci4: command tx timeout [ 2057.153445][T30916] netlink: 'syz.4.18024': attribute type 2 has an invalid length. [ 2057.225174][T30880] lo speed is unknown, defaulting to 1000 [ 2057.820558][T25498] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2057.898821][T25151] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2057.946995][T25151] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2058.071066][T20560] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 2058.092699][T25155] vlan4: left allmulticast mode [ 2058.102220][T25155] vlan4: left promiscuous mode [ 2058.118243][T25155] bridge0: port 3(vlan4) entered disabled state [ 2058.150446][T25155] bridge_slave_1: left allmulticast mode [ 2058.156428][T25155] bridge_slave_1: left promiscuous mode [ 2058.168417][T25155] bridge0: port 2(bridge_slave_1) entered disabled state [ 2058.191207][T25155] x9: left allmulticast mode [ 2058.199357][T25155] x9: left promiscuous mode [ 2058.210433][T25155] bridge0: port 1(1x9) entered disabled state [ 2058.270314][T25155] erspan0: left allmulticast mode [ 2058.281342][T25155] bridge3: port 1(erspan0) entered disabled state [ 2058.719546][T25155] bond6 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 2058.738531][T25155] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 2058.866125][T21565] Bluetooth: hci4: command tx timeout [ 2059.326287][T25155] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 2059.347435][T25155] bridge4 (unregistering): left promiscuous mode [ 2059.374963][T25155] bridge4 (unregistering): left allmulticast mode [ 2059.425297][T25155] bond3 (unregistering): (slave bridge5): Removing an active aggregator [ 2059.445593][T25155] bond3 (unregistering): (slave bridge5): Releasing backup interface [ 2059.465163][T25155] bond3 (unregistering): (slave bridge5): the permanent HWaddr of slave - 6e:0f:8a:30:a5:b5 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 2059.525623][T25155] bridge5 (unregistering): left promiscuous mode [ 2059.533238][T25155] bridge5 (unregistering): left allmulticast mode [ 2059.612315][T25155] bond3 (unregistering): (slave bridge6): Releasing backup interface [ 2059.635621][T25155] bridge6 (unregistering): left promiscuous mode [ 2059.642536][T25155] bridge6 (unregistering): left allmulticast mode [ 2059.715481][T25155] bond5 (unregistering): (slave bridge7): Releasing active interface [ 2059.884310][T25155] bond0 (unregistering): (slave c5): Releasing backup interface [ 2059.918547][T25155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2059.946335][T25155] bond0 (unregistering): Released all slaves [ 2059.970084][T25155] bond1 (unregistering): Released all slaves [ 2059.998842][T25155] bond2 (unregistering): Released all slaves [ 2060.058164][T25155] bond3 (unregistering): Released all slaves [ 2060.136410][T25155] bond4 (unregistering): Released all slaves [ 2060.189722][T25155] bond5 (unregistering): Released all slaves [ 2060.228203][T25155] bond6 (unregistering): Released all slaves [ 2060.407505][T25155] tipc: Left network mode [ 2060.922920][T30880] chnl_net:caif_netlink_parms(): no params data found [ 2060.953866][T21565] Bluetooth: hci4: command tx timeout [ 2061.308740][T30880] bridge0: port 1(bridge_slave_0) entered blocking state [ 2061.337240][T30880] bridge0: port 1(bridge_slave_0) entered disabled state [ 2061.366025][T30880] bridge_slave_0: entered allmulticast mode [ 2061.397846][T30880] bridge_slave_0: entered promiscuous mode [ 2061.450438][T30880] bridge0: port 2(bridge_slave_1) entered blocking state [ 2061.485318][T30880] bridge0: port 2(bridge_slave_1) entered disabled state [ 2061.517050][T30880] bridge_slave_1: entered allmulticast mode [ 2061.549594][T30880] bridge_slave_1: entered promiscuous mode [ 2061.692342][T30880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2061.729118][T30880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2061.869781][T30880] team0: Port device team_slave_0 added [ 2061.879314][T30880] team0: Port device team_slave_1 added [ 2061.922908][T25155] hsr_slave_0: left promiscuous mode [ 2061.929690][T25155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2061.939078][T25155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2061.958641][T25155] batman_adv: batadv0: Removing interface: ipvlan2 [ 2061.973491][T25155] veth1: left allmulticast mode [ 2062.525648][T25155] team0 (unregistering): Port device team_slave_1 removed [ 2062.906935][T30880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2062.914063][T30880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2062.943358][T30880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2062.962679][T30880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2062.970394][T30880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2063.012428][T30880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2063.098705][T30880] hsr_slave_0: entered promiscuous mode [ 2063.106778][T30880] hsr_slave_1: entered promiscuous mode [ 2063.115003][T30880] debugfs: 'hsr0' already exists in 'hsr' [ 2063.121725][T30880] Cannot create hsr debugfs directory [ 2063.281313][T25155] IPVS: stop unused estimator thread 0... [ 2063.428234][T30880] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2063.503393][T30880] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2063.586649][T30880] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2063.679748][T30880] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2064.053414][T30880] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2064.093750][T30880] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2064.108872][T30880] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2064.138036][T30880] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2064.405437][T30880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2064.511062][T30880] 8021q: adding VLAN 0 to HW filter on device team0 [ 2064.616819][ T686] bridge0: port 1(bridge_slave_0) entered blocking state [ 2064.625608][ T686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2064.697943][ T686] bridge0: port 2(bridge_slave_1) entered blocking state [ 2064.705886][ T686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2065.760227][T30880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2065.940505][T30880] veth0_vlan: entered promiscuous mode [ 2065.975243][T30880] veth1_vlan: entered promiscuous mode [ 2066.100117][T30880] veth0_macvtap: entered promiscuous mode [ 2066.141557][T30880] veth1_macvtap: entered promiscuous mode [ 2066.251835][T30880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2066.293838][T30880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2066.376766][T25507] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.443673][T25507] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.510067][T25507] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.560667][T25507] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.987020][T25507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2067.018861][T25507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2067.205339][T31087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18078'. [ 2067.237972][ T686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2067.256205][ T686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2068.130149][T31121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18091'. [ 2068.215795][T31117] syzkaller0: entered promiscuous mode [ 2068.240312][ T6328] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2068.258398][ T6328] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2068.269602][ T6328] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2068.283545][ T6328] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2068.294385][ T6328] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2069.483376][T31160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18107'. [ 2070.398398][ T6328] Bluetooth: hci2: command tx timeout [ 2072.482074][ T6328] Bluetooth: hci2: command tx timeout [ 2072.769366][T31126] A٨ speed is unknown, defaulting to 1000 [ 2072.916464][T31126] gre0 speed is unknown, defaulting to 1000 [ 2073.522659][T31195] netlink: 'syz.2.18120': attribute type 10 has an invalid length. [ 2073.531938][T25507] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2073.726883][T31195] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2073.829222][T25151] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2073.865335][T31126] lo speed is unknown, defaulting to 1000 [ 2074.026061][T25155] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2074.050948][T25155] netdevsim netdevsim3 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 2074.092819][T25498] team0: left allmulticast mode [ 2074.108358][T25498] team_slave_0: left allmulticast mode [ 2074.114470][T25498] team_slave_1: left allmulticast mode [ 2074.144835][T25498] team0: left promiscuous mode [ 2074.149705][T25498] team_slave_0: left promiscuous mode [ 2074.187891][T25498] team_slave_1: left promiscuous mode [ 2074.194818][T25498] bridge0: port 1(team0) entered disabled state [ 2074.229561][T25498] geneve2: left allmulticast mode [ 2074.234683][T25498] geneve2: left promiscuous mode [ 2074.259376][T25498] bridge1: port 1(geneve2) entered disabled state [ 2074.307479][T25498] erspan0: left allmulticast mode [ 2074.312614][T25498] erspan0: left promiscuous mode [ 2074.335295][T25498] bridge5: port 1(erspan0) entered disabled state [ 2074.554978][ T6328] Bluetooth: hci2: command tx timeout [ 2074.849826][T25498] bond2 (unregistering): (slave bridge4): Releasing backup interface [ 2075.001146][T25498] bond1 (unregistering): Released all slaves [ 2075.023239][T25498] bond2 (unregistering): Released all slaves [ 2075.057519][T25498] bond3 (unregistering): (slave macvlan2): Releasing backup interface [ 2075.069310][T25498] bond3 (unregistering): Released all slaves [ 2075.089837][T25498] bond4 (unregistering): Released all slaves [ 2075.233505][T25498] tipc: Left network mode [ 2075.502180][T31126] chnl_net:caif_netlink_parms(): no params data found [ 2075.737741][T31126] bridge0: port 1(bridge_slave_0) entered blocking state [ 2075.760293][T31126] bridge0: port 1(bridge_slave_0) entered disabled state [ 2075.777197][T31126] bridge_slave_0: entered allmulticast mode [ 2075.795573][T31126] bridge_slave_0: entered promiscuous mode [ 2075.816301][T31126] bridge0: port 2(bridge_slave_1) entered blocking state [ 2075.824026][T31126] bridge0: port 2(bridge_slave_1) entered disabled state [ 2075.850681][T31126] bridge_slave_1: entered allmulticast mode [ 2075.867665][T31126] bridge_slave_1: entered promiscuous mode [ 2076.012298][T31126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2076.042836][T31126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2076.236968][T31126] team0: Port device team_slave_0 added [ 2076.256999][T31126] team0: Port device team_slave_1 added [ 2076.282811][T25498] hsr_slave_0: left promiscuous mode [ 2076.289556][T25498] hsr_slave_1: left promiscuous mode [ 2076.301497][T25498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2076.317453][T25498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2076.612143][T25498] team0 (unregistering): Port device team_slave_1 removed [ 2076.629420][ T6328] Bluetooth: hci2: command tx timeout [ 2076.649716][T25498] team0 (unregistering): Port device team_slave_0 removed [ 2076.930174][T31126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2076.945701][T31126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2076.977081][T31126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2076.990973][T31126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2076.998397][T31126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2077.025022][T31126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2077.128974][T31126] hsr_slave_0: entered promiscuous mode [ 2077.137409][T31126] hsr_slave_1: entered promiscuous mode [ 2077.144104][T31126] debugfs: 'hsr0' already exists in 'hsr' [ 2077.167517][T31126] Cannot create hsr debugfs directory [ 2077.387376][T31126] netdevsim netdevsim3 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2077.437182][T31126] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2077.493060][T31126] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2077.536343][T31126] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2077.717763][T31126] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2077.730804][T31126] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2077.750200][T31126] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2077.768034][T31126] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2077.918713][T31126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2077.946582][T31126] 8021q: adding VLAN 0 to HW filter on device team0 [ 2077.962752][T25155] bridge0: port 1(bridge_slave_0) entered blocking state [ 2077.970100][T25155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2077.993419][T25498] bridge0: port 2(bridge_slave_1) entered blocking state [ 2078.000676][T25498] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2078.304011][T31126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2078.366526][T31126] veth0_vlan: entered promiscuous mode [ 2078.380822][T31126] veth1_vlan: entered promiscuous mode [ 2078.434616][T31126] veth0_macvtap: entered promiscuous mode [ 2078.447610][T31126] veth1_macvtap: entered promiscuous mode [ 2078.474507][T31126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2078.497716][T31126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2078.515991][ T686] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2078.534402][ T686] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2078.554477][ T686] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2078.564263][ T686] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2078.628256][T23836] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2078.696206][T25498] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2078.715283][T25498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2078.772025][T25507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2078.791092][T25507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2081.870082][T31309] netlink: 'syz.4.18150': attribute type 10 has an invalid length. [ 2082.021946][T31309] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 2082.258421][T31325] netlink: 620 bytes leftover after parsing attributes in process `syz.2.18157'. [ 2083.006332][T31350] netlink: 'syz.2.18167': attribute type 10 has an invalid length. [ 2083.620514][T31376] syz.3.18178: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2083.725608][T31376] CPU: 0 UID: 0 PID: 31376 Comm: syz.3.18178 Not tainted syzkaller #0 PREEMPT(full) [ 2083.725646][T31376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2083.725663][T31376] Call Trace: [ 2083.725673][T31376] [ 2083.725685][T31376] dump_stack_lvl+0xe8/0x150 [ 2083.725733][T31376] warn_alloc+0x249/0x340 [ 2083.725766][T31376] ? stack_trace_save+0xa9/0x100 [ 2083.725799][T31376] ? __pfx_warn_alloc+0x10/0x10 [ 2083.725838][T31376] ? kasan_save_track+0x4f/0x80 [ 2083.725863][T31376] ? kasan_save_track+0x3e/0x80 [ 2083.725888][T31376] ? __kasan_kmalloc+0x93/0xb0 [ 2083.725914][T31376] ? __kmalloc_cache_noprof+0x31c/0x660 [ 2083.725940][T31376] ? xskq_create+0x56/0x170 [ 2083.726113][T31376] ? xsk_setsockopt+0x54c/0x990 [ 2083.726143][T31376] ? do_sock_setsockopt+0x17c/0x1b0 [ 2083.726182][T31376] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 2083.726226][T31376] ? do_syscall_64+0x14d/0xf80 [ 2083.726270][T31376] __vmalloc_node_range_noprof+0x132/0x1730 [ 2083.726339][T31376] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2083.726376][T31376] ? __kasan_kmalloc+0x93/0xb0 [ 2083.726412][T31376] vmalloc_user_noprof+0xad/0xe0 [ 2083.726440][T31376] ? xskq_create+0xbf/0x170 [ 2083.726474][T31376] xskq_create+0xbf/0x170 [ 2083.726511][T31376] xsk_init_queue+0x8a/0xe0 [ 2083.726547][T31376] xsk_setsockopt+0x54c/0x990 [ 2083.726582][T31376] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2083.726613][T31376] ? __pfx_aa_sk_perm+0x10/0x10 [ 2083.726651][T31376] ? aa_sock_opt_perm+0xff/0x1a0 [ 2083.726687][T31376] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2083.726717][T31376] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2083.726750][T31376] do_sock_setsockopt+0x17c/0x1b0 [ 2083.726796][T31376] __x64_sys_setsockopt+0x13d/0x1b0 [ 2083.726842][T31376] do_syscall_64+0x14d/0xf80 [ 2083.726878][T31376] ? trace_irq_disable+0x3b/0x150 [ 2083.726914][T31376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2083.726942][T31376] ? clear_bhb_loop+0x40/0x90 [ 2083.726973][T31376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2083.726998][T31376] RIP: 0033:0x7f56de99c799 [ 2083.727023][T31376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2083.727046][T31376] RSP: 002b:00007f56df791028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2083.727074][T31376] RAX: ffffffffffffffda RBX: 00007f56dec15fa0 RCX: 00007f56de99c799 [ 2083.727093][T31376] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 2083.727109][T31376] RBP: 00007f56dea32c99 R08: 0000000000000004 R09: 0000000000000000 [ 2083.727125][T31376] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2083.727141][T31376] R13: 00007f56dec16038 R14: 00007f56dec15fa0 R15: 00007fff0430bcd8 [ 2083.727183][T31376] [ 2083.727210][T31376] Mem-Info: [ 2084.094870][T31376] active_anon:5687 inactive_anon:0 isolated_anon:0 [ 2084.094870][T31376] active_file:3786 inactive_file:41196 isolated_file:0 [ 2084.094870][T31376] unevictable:768 dirty:103 writeback:0 [ 2084.094870][T31376] slab_reclaimable:23735 slab_unreclaimable:138803 [ 2084.094870][T31376] mapped:30435 shmem:1369 pagetables:1293 [ 2084.094870][T31376] sec_pagetables:0 bounce:0 [ 2084.094870][T31376] kernel_misc_reclaimable:0 [ 2084.094870][T31376] free:1236702 free_pcp:26513 free_cma:0 [ 2084.230350][T31376] Node 0 active_anon:22748kB inactive_anon:0kB active_file:15144kB inactive_file:164580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:19340kB dirty:404kB writeback:0kB shmem:3940kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19920kB pagetables:5120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2084.366753][T31376] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102400kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2084.490112][T31376] Node 0 DMA free:11208kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:56kB local_pcp:8kB free_cma:0kB [ 2084.609954][T31376] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 2084.644192][T31376] Node 0 DMA32 free:1284580kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22648kB inactive_anon:0kB active_file:15144kB inactive_file:164580kB unevictable:1536kB writepending:404kB zspages:0kB present:3129332kB managed:2552564kB mlocked:0kB bounce:0kB free_pcp:40056kB local_pcp:18472kB free_cma:0kB [ 2084.775092][T31376] lowmem_reserve[]: 0 0 0 0 0 [ 2084.783477][T31376] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 2084.851571][T31393] netlink: 'syz.0.18184': attribute type 11 has an invalid length. [ 2084.868776][T31393] netlink: 228 bytes leftover after parsing attributes in process `syz.0.18184'. [ 2084.895653][T31376] lowmem_reserve[]: 0 0 0 0 0 [ 2084.902508][T31376] Node 1 Normal free:3652848kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:8kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:65804kB local_pcp:32868kB free_cma:0kB [ 2084.976845][T31376] lowmem_reserve[]: 0 0 0 0 0 [ 2084.981945][T31376] Node 0 DMA: 2*4kB (U) 2*8kB (U) 3*16kB (U) 2*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 1*2048kB (M) 1*4096kB (U) = 11208kB [ 2085.032646][T31376] Node 0 DMA32: 7505*4kB (UME) 12669*8kB (UME) 9181*16kB (UME) 549*32kB (UME) 896*64kB (UME) 961*128kB (UME) 766*256kB (UME) 486*512kB (UM) 303*1024kB (UME) 27*2048kB (UM) 0*4096kB = 1286684kB [ 2085.153990][T31376] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2085.215542][T31376] Node 1 Normal: 5*4kB (U) 16*8kB (UM) 13*16kB (UM) 4*32kB (UM) 9*64kB (UM) 10*128kB (UM) 6*256kB (UM) 9*512kB (UM) 5*1024kB (UM) 5*2048kB (U) 886*4096kB (UM) = 3652900kB [ 2085.334455][T31376] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2085.439776][T31376] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2085.481565][T31376] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2085.543602][T31376] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2085.603942][T31376] 46349 total pagecache pages [ 2085.652215][T31376] 0 pages in swap cache [ 2085.678878][T31376] Free swap = 124996kB [ 2085.728288][T31376] Total swap = 124996kB [ 2085.757654][T31414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18191'. [ 2085.795067][T31376] 2097051 pages RAM [ 2085.799967][T31376] 0 pages HighMem/MovableOnly [ 2085.829487][T31376] 427074 pages reserved [ 2085.858745][T31376] 0 pages cma reserved [ 2095.985580][T31481] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18209'. [ 2096.417918][T31490] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18214'. [ 2097.681638][T31531] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18230'. [ 2098.467690][T31556] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input8 [ 2098.878145][ T1298] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 2098.902368][ T1298] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2098.934098][T31577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18248'. [ 2099.061522][T31581] netlink: 'syz.4.18250': attribute type 1 has an invalid length. [ 2099.156248][T31581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2099.254090][T31587] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2099.261903][T31587] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 2099.275229][T31587] bond1: (slave vcan1): Error -95 calling set_mac_address [ 2099.378124][T31581] bond1: (slave gretap1): making interface the new active one [ 2099.390562][T31581] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2099.421542][T31589] macvlan2: entered promiscuous mode [ 2099.447998][T31589] macvlan2: entered allmulticast mode [ 2099.486756][T31589] bond1: entered promiscuous mode [ 2099.555115][T31589] gretap1: entered promiscuous mode [ 2099.576365][T31589] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2099.599558][T31589] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 2099.635937][T31589] bond1: left promiscuous mode [ 2099.648007][T31589] gretap1: left promiscuous mode [ 2099.910267][T31609] netlink: 'syz.3.18262': attribute type 10 has an invalid length. [ 2099.922621][T31609] bond0: (slave wlan1): Opening slave failed [ 2100.469893][T31634] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18270'. [ 2100.742931][T31640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18273'. [ 2100.802656][T31642] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18273'. [ 2100.876129][T31644] netlink: 'syz.0.18274': attribute type 10 has an invalid length. [ 2100.903895][T31644] bond0: (slave wlan1): Opening slave failed [ 2101.980101][T31667] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18282'. [ 2103.295629][T31622] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2103.452172][T31683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18285'. [ 2103.565251][T31688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18285'. [ 2103.896056][T31700] A٨ speed is unknown, defaulting to 1000 [ 2103.907893][T31700] gre0 speed is unknown, defaulting to 1000 [ 2104.267212][T31700] lo speed is unknown, defaulting to 1000 [ 2110.067865][T31731] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.18295'. [ 2110.079367][T31732] IPv6: NLM_F_CREATE should be specified when creating new route [ 2110.095099][T31734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18298'. [ 2110.106787][T31736] netlink: 608 bytes leftover after parsing attributes in process `syz.1.18296'. [ 2110.204955][T31734] hsr_slave_1 (unregistering): left promiscuous mode [ 2110.348204][T31744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18301'. [ 2110.400605][T31746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18301'. [ 2110.705237][T31760] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18310'. [ 2110.904253][T31767] netlink: 608 bytes leftover after parsing attributes in process `syz.0.18313'. [ 2111.199751][T31781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18319'. [ 2111.307822][T31786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18319'. [ 2111.580465][T31794] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18326'. [ 2112.715222][T31833] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 2112.730445][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b3f0c00: rx timeout, send abort [ 2112.748326][T31833] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2113.230563][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804d2a2800: rx timeout, send abort [ 2113.241805][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b3f0c00: abort rx timeout. Force session deactivation [ 2113.593932][T31864] syzkaller0: entered promiscuous mode [ 2113.605487][T31864] syzkaller0: entered allmulticast mode [ 2113.665390][ T6328] Bluetooth: hci2: command tx timeout [ 2113.740392][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804d2a2800: abort rx timeout. Force session deactivation [ 2114.463214][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031787000: rx timeout, send abort [ 2114.963394][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031786000: rx timeout, send abort [ 2114.974411][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031787000: abort rx timeout. Force session deactivation [ 2115.141952][T31915] __nla_validate_parse: 11 callbacks suppressed [ 2115.141977][T31915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18379'. [ 2115.267864][T31919] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18379'. [ 2115.474202][ C1] vcan0: j1939_tp_rxtimer: 0xffff888031786000: abort rx timeout. Force session deactivation [ 2116.262152][T31948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18394'. [ 2116.354979][T31950] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18394'. [ 2117.259162][T31979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18408'. [ 2117.311873][T31979] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18408'. [ 2117.439430][T27425] IPVS: starting estimator thread 0... [ 2117.535259][T31989] IPVS: using max 28 ests per chain, 67200 per kthread [ 2117.866554][T32006] netlink: 'syz.0.18420': attribute type 10 has an invalid length. [ 2117.902010][T32006] bond0: (slave wlan1): Opening slave failed [ 2118.096078][T32016] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18425'. [ 2118.109181][T32016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18425'. [ 2118.376788][T32023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18429'. [ 2118.406002][T32023] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 2118.666935][T32035] netlink: 'syz.4.18435': attribute type 10 has an invalid length. [ 2118.761726][T32039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18438'. [ 2119.657032][T32070] netlink: 'syz.2.18450': attribute type 10 has an invalid length. [ 2120.368182][T32100] __nla_validate_parse: 2 callbacks suppressed [ 2120.368212][T32100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18465'. [ 2120.526498][T32106] syzkaller0: entered promiscuous mode [ 2120.533119][T32106] syzkaller0: entered allmulticast mode [ 2121.288945][T32133] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18479'. [ 2121.427065][T21565] Bluetooth: hci1: command 0x0406 tx timeout [ 2121.863951][ T6328] block nbd2: Receive control failed (result -32) [ 2121.864006][T21565] block nbd2: Receive control failed (result -32) [ 2121.978266][T32115] nbd2: detected capacity change from 0 to 63 [ 2128.818927][T32191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18493'. [ 2129.078755][T32199] netlink: 96 bytes leftover after parsing attributes in process `syz.4.18495'. [ 2129.702638][T32223] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18506'. [ 2129.828701][T32225] bond3: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 2129.855830][T32225] bond3 (unregistering): Released all slaves [ 2129.927363][T32230] netlink: 96 bytes leftover after parsing attributes in process `syz.0.18509'. [ 2130.196411][T32237] syzkaller0: entered promiscuous mode [ 2130.516968][T32249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18519'. [ 2131.860555][T32289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18534'. [ 2133.058935][T32325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18547'. [ 2133.793023][T11046] IPVS: starting estimator thread 0... [ 2133.917661][T32345] IPVS: using max 28 ests per chain, 67200 per kthread [ 2139.798907][T32387] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18570'. [ 2142.862318][T23836] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2146.458468][T32420] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 2146.522994][T32425] siw: device registration error -23 [ 2146.576514][T32425] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 2146.594273][T32425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2146.766615][T32429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18578'. [ 2147.018923][T32444] netlink: 56 bytes leftover after parsing attributes in process `syz.4.18585'. [ 2147.177163][T32445] bond1: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 2147.228605][T32445] bond1 (unregistering): Released all slaves [ 2147.895523][T32473] tipc: Started in network mode [ 2147.915704][T32473] tipc: Node identity c670e187ed9f, cluster identity 4711 [ 2147.959372][T32473] tipc: Enabled bearer , priority 0 [ 2148.024204][T32473] tipc: Resetting bearer [ 2148.180632][T32472] tipc: Disabling bearer [ 2148.702103][T32500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18607'. [ 2148.981149][T32508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18611'. [ 2148.985077][ C0] hrtimer: interrupt took 223403 ns [ 2149.017401][T32508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18611'. [ 2149.530634][T32521] tipc: Started in network mode [ 2149.552349][T32521] tipc: Node identity f6ead35e5a47, cluster identity 4711 [ 2149.596598][T32521] tipc: Enabled bearer , priority 0 [ 2149.654564][T32521] tipc: Resetting bearer [ 2149.771094][T32520] tipc: Disabling bearer [ 2150.255991][T32550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18627'. [ 2150.321446][T32550] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18627'. [ 2150.663083][T32558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18631'. [ 2151.233575][T32568] tipc: Started in network mode [ 2151.268464][T32568] tipc: Node identity 46d8453fd09d, cluster identity 4711 [ 2151.305866][T32568] tipc: Enabled bearer , priority 0 [ 2151.381914][T32568] tipc: Resetting bearer [ 2151.570822][T32566] tipc: Disabling bearer [ 2151.930725][T32596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18647'. [ 2152.154057][ T6328] Bluetooth: hci5: command 0x0406 tx timeout [ 2152.654158][T32617] tipc: Started in network mode [ 2152.686044][T32617] tipc: Node identity 080211, cluster identity 4711 [ 2152.713444][T32617] tipc: Enabled bearer , priority 0 [ 2152.755838][T32622] IPv6: NLM_F_CREATE should be specified when creating new route [ 2152.852314][T32626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18661'. [ 2152.946564][T32631] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18661'. [ 2152.960551][T32627] tipc: Resetting bearer [ 2152.992000][T32632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18662'. [ 2153.045134][T32632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18662'. [ 2153.371499][T32636] syzkaller0: entered promiscuous mode [ 2153.380273][T32636] syzkaller0: entered allmulticast mode [ 2153.826007][T29827] tipc: Node number set to 134353152 [ 2153.973425][T32653] IPv6: NLM_F_CREATE should be specified when creating new route [ 2154.341736][T32669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18676'. [ 2155.043008][T32685] netlink: 172 bytes leftover after parsing attributes in process `syz.2.18684'. [ 2155.413094][T32690] syzkaller0: entered promiscuous mode [ 2155.421586][T32690] syzkaller0: entered allmulticast mode [ 2157.278174][T32709] netlink: 16166 bytes leftover after parsing attributes in process `syz.3.18693'. [ 2160.331486][ T1298] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 2160.345511][ T1298] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2160.671610][T32688] Set syz1 is full, maxelem 65536 reached [ 2161.083655][T32719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2161.094398][T32719] IPv6: NLM_F_CREATE should be set when creating new route [ 2161.101999][T32719] IPv6: NLM_F_CREATE should be set when creating new route [ 2163.600822][T32734] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18704'. [ 2163.725752][T32740] Bluetooth: MGMT ver 1.23 [ 2163.884684][T32745] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2167.508948][T21565] Bluetooth: hci0: command 0x0406 tx timeout [ 2171.132835][ T323] tipc: Started in network mode [ 2171.161120][ T323] tipc: Node identity a6d8022319cb, cluster identity 4711 [ 2171.187495][ T323] tipc: Enabled bearer , priority 0 [ 2171.236587][ T325] syzkaller0: entered promiscuous mode [ 2171.295642][ T325] syzkaller0: entered allmulticast mode [ 2171.557657][ T332] syzkaller0: entered promiscuous mode [ 2171.570134][ T332] syzkaller0: entered allmulticast mode [ 2171.580205][ T336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18722'. [ 2171.637781][ T327] tipc: Resetting bearer [ 2171.677201][ T339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18723'. [ 2171.694290][ T321] tipc: Resetting bearer [ 2171.740534][ T321] tipc: Disabling bearer [ 2172.176034][ T345] netlink: 'syz.1.18725': attribute type 10 has an invalid length. [ 2172.703218][ T351] netlink: 'syz.4.18727': attribute type 10 has an invalid length. [ 2175.192241][ T338] bridge1: port 1(veth3) entered blocking state [ 2175.223075][ T338] bridge1: port 1(veth3) entered disabled state [ 2175.239178][ T338] veth3: entered allmulticast mode [ 2175.258474][ T338] veth3: entered promiscuous mode [ 2175.303541][ T336] vlan2: entered allmulticast mode [ 2175.314647][ T336] vlan0: entered allmulticast mode [ 2175.331128][ T336] veth0_vlan: entered allmulticast mode [ 2175.343416][ T336] bridge1: port 2(vlan2) entered blocking state [ 2175.360404][ T336] bridge1: port 2(vlan2) entered disabled state [ 2175.369764][ T336] vlan2: entered promiscuous mode [ 2175.375251][ T336] vlan0: entered promiscuous mode [ 2175.381972][ T336] bridge1: port 2(vlan2) entered blocking state [ 2175.388464][ T336] bridge1: port 2(vlan2) entered forwarding state [ 2175.435753][ T345] team0: Device vxcan1 is of different type [ 2175.509204][ T351] syz_tun: entered promiscuous mode [ 2175.536630][ T351] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2176.135425][ T379] netlink: zone id is out of range [ 2176.148412][ T379] netlink: del zone limit has 4 unknown bytes [ 2176.172810][ T380] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18740'. [ 2176.384223][ T386] netlink: 'syz.2.18742': attribute type 10 has an invalid length. [ 2176.419813][ T377] syzkaller0: entered promiscuous mode [ 2176.443513][ T377] syzkaller0: entered allmulticast mode [ 2176.571795][ T388] netlink: 'syz.4.18743': attribute type 10 has an invalid length. [ 2176.590403][ T386] team0: Device vxcan1 is of different type [ 2176.613305][ C0] PF_CAN: dropped non conform CAN skbuff: dev type 1, len 16 [ 2176.782952][ T392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18744'. [ 2177.750898][T21565] Bluetooth: hci4: command 0x0406 tx timeout [ 2181.003261][ T443] syzkaller0: entered promiscuous mode [ 2181.019240][ T443] syzkaller0: entered allmulticast mode [ 2181.735059][ T483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18781'. [ 2181.800508][ T485] netlink: 'syz.2.18782': attribute type 10 has an invalid length. [ 2184.460629][ T485] team0: Device vxcan1 is of different type [ 2188.628600][ T511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18787'. [ 2188.737532][ T518] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2189.262034][ T532] syzkaller0: entered promiscuous mode [ 2189.285868][ T532] syzkaller0: entered allmulticast mode [ 2189.373116][ T538] netlink: 'syz.4.18796': attribute type 10 has an invalid length. [ 2189.639314][ T542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18798'. [ 2190.750444][ T576] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18809'. [ 2193.304230][ T538] team0: Device vxcan1 is of different type [ 2195.122963][ T657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18847'. [ 2195.187272][ T659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18847'. [ 2195.577471][ T672] netlink: 'syz.4.18853': attribute type 10 has an invalid length. [ 2195.972396][ T663] bridge0: port 2(bridge_slave_1) entered disabled state [ 2195.980280][ T663] bridge0: port 1(bridge_slave_0) entered disabled state [ 2196.759015][ T663] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2196.808541][ T663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2197.255130][ T663] bridge1: port 2(vlan2) entered disabled state [ 2197.637034][ T672] team0: Device vxcan1 is of different type [ 2197.742154][T25506] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2197.771731][T25506] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2197.819971][T25506] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2197.864930][T25506] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2198.171726][ T706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2198.314143][ T712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18870'. [ 2198.472680][ T713] bridge_slave_0: left allmulticast mode [ 2198.485174][ T713] bridge_slave_0: left promiscuous mode [ 2198.491353][ T713] bridge0: port 1(bridge_slave_0) entered disabled state [ 2198.509098][ T713] bridge_slave_1: left allmulticast mode [ 2198.536096][ T713] bridge_slave_1: left promiscuous mode [ 2198.546674][ T713] bridge0: port 2(bridge_slave_1) entered disabled state [ 2198.571374][ T713] bond0: (slave bond_slave_0): Releasing backup interface [ 2198.593873][ T713] bond0: (slave bond_slave_1): Releasing backup interface [ 2198.619949][ T713] team0: Port device team_slave_0 removed [ 2198.638685][ T713] team0: Port device team_slave_1 removed [ 2198.648072][ T713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2198.658360][ T713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2198.673607][ T713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2198.682326][ T713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2198.701393][ T713] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2199.218190][ T744] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18879'. [ 2199.301555][ T737] bridge0: port 2(bridge_slave_1) entered disabled state [ 2199.309374][ T737] bridge0: port 1(bridge_slave_0) entered disabled state [ 2199.374241][ T747] netlink: 'syz.4.18883': attribute type 10 has an invalid length. [ 2199.567599][ T737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2199.602076][ T737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2199.954265][ T747] team0: Device vxcan1 is of different type [ 2200.061750][T25498] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2200.113803][T25498] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2200.174143][T25498] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2200.203682][T25498] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2206.185229][T23836] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2206.682240][ T798] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2206.708890][ T798] tipc: Enabled bearer , priority 10 [ 2206.728842][ T794] tipc: Enabled bearer , priority 0 [ 2206.748127][ T801] syzkaller0: entered promiscuous mode [ 2206.769833][ T801] syzkaller0: entered allmulticast mode [ 2206.863043][ T794] tipc: Resetting bearer [ 2206.934464][ T790] tipc: Resetting bearer [ 2207.015681][ T790] tipc: Disabling bearer [ 2207.100779][ T814] bridge_slave_0: left allmulticast mode [ 2207.117840][ T814] bridge_slave_0: left promiscuous mode [ 2207.133656][ T814] bridge0: port 1(bridge_slave_0) entered disabled state [ 2207.157863][ T814] bridge_slave_1: left allmulticast mode [ 2207.163627][ T814] bridge_slave_1: left promiscuous mode [ 2207.177840][ T814] bridge0: port 2(bridge_slave_1) entered disabled state [ 2207.235957][ T814] bond0: (slave bond_slave_0): Releasing backup interface [ 2207.256020][ T814] bond0: (slave bond_slave_1): Releasing backup interface [ 2207.281108][ T814] team0: Port device team_slave_0 removed [ 2207.290587][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050dc8400: rx timeout, send abort [ 2207.303109][ T814] team0: Port device team_slave_1 removed [ 2207.319104][ T814] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2207.343403][ T814] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2207.363256][ T814] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2207.444369][ T824] netlink: 'syz.2.18903': attribute type 10 has an invalid length. [ 2207.490788][ T824] team0: Port device vxcan1 added [ 2207.700793][ T830] netlink: 'syz.0.18906': attribute type 10 has an invalid length. [ 2207.746401][ T830] team0: Port device vxcan1 added [ 2207.790724][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050dc9800: rx timeout, send abort [ 2207.799210][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050dc8400: abort rx timeout. Force session deactivation [ 2207.835460][ T1813] tipc: Node number set to 2897072990 [ 2208.168840][ T851] netlink: 'syz.0.18915': attribute type 10 has an invalid length. [ 2208.299091][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050dc9800: abort rx timeout. Force session deactivation [ 2208.807193][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078de3800: rx timeout, send abort [ 2209.033058][ T879] tipc: Enabling of bearer rejected, already enabled [ 2209.180122][ T883] netlink: 'syz.3.18928': attribute type 10 has an invalid length. [ 2209.307319][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078de1800: rx timeout, send abort [ 2209.316176][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078de3800: abort rx timeout. Force session deactivation [ 2209.663729][ T899] tipc: Enabled bearer , priority 0 [ 2209.798975][ T897] tipc: Disabling bearer [ 2209.815813][ C0] vcan0: j1939_tp_rxtimer: 0xffff888078de1800: abort rx timeout. Force session deactivation [ 2209.847554][ T904] netlink: 'syz.4.18937': attribute type 3 has an invalid length. [ 2209.912395][ T910] netlink: 'syz.2.18939': attribute type 10 has an invalid length. [ 2210.308412][ T933] syzkaller0: entered promiscuous mode [ 2210.334873][ T933] syzkaller0: entered allmulticast mode [ 2210.931286][ T962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18957'. [ 2210.997209][ T962] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18957'. [ 2211.067140][ T968] mac80211_hwsim hwsim154 syzkaller0: entered promiscuous mode [ 2211.088398][ T968] mac80211_hwsim hwsim154 syzkaller0: entered allmulticast mode [ 2211.254410][ T978] netlink: 'syz.2.18964': attribute type 10 has an invalid length. [ 2211.661674][ T996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18972'. [ 2211.794439][ T1001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18974'. [ 2211.812703][ T1000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18975'. [ 2211.846543][ T1001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.18974'. [ 2211.991812][ T1007] netlink: 'syz.2.18977': attribute type 10 has an invalid length. [ 2212.151361][ T1012] ip6gre0: entered allmulticast mode [ 2212.199211][ T1012] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 2212.536869][ T1035] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18989'. [ 2212.592925][ T1035] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18989'. [ 2212.608664][ T1037] netlink: 'syz.0.18990': attribute type 10 has an invalid length. [ 2212.977897][ T1058] tipc: Enabling of bearer rejected, already enabled [ 2213.455704][ T1076] netlink: 36 bytes leftover after parsing attributes in process `syz.3.19005'. [ 2213.490756][ T1078] netlink: 'syz.2.19006': attribute type 10 has an invalid length. [ 2213.969435][ T1098] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19016'. [ 2214.297022][ T1110] netlink: 'syz.2.19022': attribute type 10 has an invalid length. [ 2214.396267][ T1109] syzkaller0: entered promiscuous mode [ 2214.464969][ T1109] syzkaller0: entered allmulticast mode [ 2215.823899][ T1154] netlink: 'syz.3.19041': attribute type 3 has an invalid length. [ 2216.350850][ T1162] __nla_validate_parse: 3 callbacks suppressed [ 2216.350876][ T1162] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19044'. [ 2216.466399][ T1162] netlink: 60 bytes leftover after parsing attributes in process `syz.0.19044'. [ 2216.504069][ T1166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19047'. [ 2217.009185][ T1181] tipc: Enabled bearer , priority 0 [ 2217.124558][ T1178] tipc: Resetting bearer [ 2217.222089][ T1176] tipc: Disabling bearer [ 2217.334395][ T1187] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19055'. [ 2217.397032][ T1191] netlink: 'syz.0.19056': attribute type 3 has an invalid length. [ 2221.751167][ T1298] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 2221.769349][ T1298] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2223.754921][ T1228] tipc: Enabling of bearer rejected, already enabled [ 2224.111371][ T1240] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19070'. [ 2224.997986][ T1264] netlink: 'syz.4.19077': attribute type 3 has an invalid length. [ 2225.229708][ T1268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2225.246430][ T1285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19080'. [ 2225.297133][ T1268] 8021q: adding VLAN 0 to HW filter on device team0 [ 2225.380997][ T1268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2225.573406][ T1272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2225.657969][ T1286] tipc: Enabled bearer , priority 0 [ 2225.936194][ T1310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19086'. [ 2225.959558][ T1271] tipc: Disabling bearer [ 2226.140387][ T1315] netlink: 'syz.0.19087': attribute type 10 has an invalid length. [ 2226.306432][ T1323] netlink: 'syz.0.19092': attribute type 3 has an invalid length. [ 2226.411104][ T1327] xt_hashlimit: size too large, truncated to 1048576 [ 2226.851087][ T1342] syzkaller0: entered promiscuous mode [ 2226.872822][ T1346] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19100'. [ 2226.888639][ T1342] syzkaller0: entered allmulticast mode [ 2227.089479][ T1356] netlink: 'syz.3.19102': attribute type 10 has an invalid length. [ 2227.102351][ T1349] tipc: Enabled bearer , priority 0 [ 2227.169099][ T1349] tipc: Resetting bearer [ 2227.204348][ T1348] tipc: Disabling bearer [ 2227.305925][ T1361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19106'. [ 2227.407330][ T1361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19106'. [ 2227.517732][ T1366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19107'. [ 2227.525622][ T1370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19106'. [ 2227.537646][ T1361] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 2227.591405][ T1370] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2227.818593][ T1374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2227.861667][ T1374] 8021q: adding VLAN 0 to HW filter on device team0 [ 2227.897359][ T1374] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2227.981883][ T1380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2228.120015][ T1389] tipc: Enabled bearer , priority 0 [ 2228.139922][ T1389] tipc: Resetting bearer [ 2228.207405][ T1388] tipc: Disabling bearer [ 2228.314211][ T1395] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.19121'. [ 2228.413128][ T1401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19120'. [ 2228.691201][ T1416] netlink: 'syz.2.19130': attribute type 10 has an invalid length. [ 2228.738179][ T1414] syzkaller0: entered promiscuous mode [ 2228.745151][ T1414] syzkaller0: entered allmulticast mode [ 2229.156469][ T1434] __nla_validate_parse: 1 callbacks suppressed [ 2229.156492][ T1434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19138'. [ 2229.451012][ T1445] netlink: 'syz.3.19143': attribute type 10 has an invalid length. [ 2229.784950][ T1464] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19147'. [ 2230.584680][ T1500] bridge0: port 3(vlan2) entered blocking state [ 2230.592533][ T1500] bridge0: port 3(vlan2) entered disabled state [ 2230.599735][ T1500] vlan2: entered allmulticast mode [ 2230.608529][ T1500] geneve0: entered allmulticast mode [ 2230.619866][ T1500] vlan2: entered promiscuous mode [ 2230.636222][ T1500] geneve0: entered promiscuous mode [ 2231.113199][ T1518] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2231.149842][ T1518] tipc: Enabled bearer , priority 10 [ 2231.430089][ T1531] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19181'. [ 2231.515365][ T1528] netlink: 60 bytes leftover after parsing attributes in process `syz.2.19181'. [ 2231.619222][ T1541] mac80211_hwsim hwsim154 syzkaller0: left promiscuous mode [ 2231.627571][ T1541] mac80211_hwsim hwsim154 syzkaller0: left allmulticast mode [ 2231.792220][ T1546] tipc: Enabled bearer , priority 0 [ 2231.823639][ T1546] tipc: Resetting bearer [ 2232.023087][ T1558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19192'. [ 2232.054883][ T1545] tipc: Disabling bearer [ 2232.265141][T11046] tipc: Node number set to 737141127 [ 2232.299607][ T1568] tipc: Enabled bearer , priority 0 [ 2232.321772][ T1568] syzkaller0: entered promiscuous mode [ 2232.335764][ T1568] syzkaller0: entered allmulticast mode [ 2232.387959][ T1568] tipc: Resetting bearer [ 2232.412608][ T1567] tipc: Resetting bearer [ 2232.474114][ T1567] tipc: Disabling bearer [ 2232.788571][ T1585] mac80211_hwsim hwsim154 syzkaller0: entered promiscuous mode [ 2232.804477][ T1585] mac80211_hwsim hwsim154 syzkaller0: entered allmulticast mode [ 2233.042986][ T1592] tipc: Enabled bearer , priority 0 [ 2233.053623][ T1592] tipc: Resetting bearer [ 2233.075588][ T1590] tipc: Disabling bearer [ 2233.333915][ T1605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19212'. [ 2233.552398][ T1612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19214'. [ 2233.636229][ T1616] mac80211_hwsim hwsim154 syzkaller0: left promiscuous mode [ 2233.653974][ T1616] mac80211_hwsim hwsim154 syzkaller0: left allmulticast mode [ 2234.409265][ T1643] tipc: Enabled bearer , priority 0 [ 2234.571778][ T1633] syzkaller0: entered promiscuous mode [ 2234.589841][ T1633] syzkaller0: entered allmulticast mode [ 2234.621482][ T1649] tipc: Resetting bearer [ 2234.745752][ T1652] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19226'. [ 2237.750888][ T1640] tipc: Disabling bearer [ 2237.839253][ T1813] tipc: Node number set to 3205693987 [ 2237.881684][T25498] erspan0: left allmulticast mode [ 2237.907619][T25498] erspan0: left promiscuous mode [ 2237.935047][T25498] bridge3: port 1(erspan0) entered disabled state [ 2238.581698][ T686] smc: removing ib device syz1 [ 2239.171998][T25498] bond1 (unregistering): Released all slaves [ 2239.221475][T25498] bond2 (unregistering): Released all slaves [ 2239.333138][T25498] bond3 (unregistering): Released all slaves [ 2239.381258][T25498] bond0 (unregistering): Released all slaves [ 2239.455594][ T1815] gre0 speed is unknown, defaulting to 1000 [ 2239.479221][ T1815] syz1: Port: 1 Link DOWN [ 2239.719408][ T1707] A٨ speed is unknown, defaulting to 1000 [ 2239.766343][ T1707] lo speed is unknown, defaulting to 1000 [ 2241.895931][T25498] tipc: Left network mode [ 2242.307719][T25498] hsr_slave_0: left promiscuous mode [ 2242.343972][T25498] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2242.352339][T25498] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2242.669214][T25153] smc: removing ib device sqz0 [ 2242.692082][ T1813] lo speed is unknown, defaulting to 1000 [ 2242.708036][ T1813] sqz0: Port: 1 Link DOWN [ 2244.308947][ T6328] Bluetooth: hci2: command 0x0406 tx timeout [ 2245.322160][T25498] IPVS: stop unused estimator thread 0... [ 2245.761253][ T1750] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19246'. [ 2245.790616][ T1748] tipc: Enabled bearer , priority 0 [ 2245.826813][ T1748] tipc: Resetting bearer [ 2245.907424][ T1747] tipc: Disabling bearer [ 2245.968867][ T1759] tipc: Enabling of bearer rejected, already enabled [ 2245.986826][ T1757] mac80211_hwsim hwsim154 syzkaller0: entered promiscuous mode [ 2246.014834][ T1757] mac80211_hwsim hwsim154 syzkaller0: entered allmulticast mode [ 2246.646742][ T1786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19262'. [ 2246.733928][ T1792] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19264'. [ 2246.814650][ T1794] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 2246.839866][ T1794] tipc: Enabled bearer , priority 10 [ 2247.400579][ T1828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19280'. [ 2247.513903][ T1830] netlink: 40 bytes leftover after parsing attributes in process `syz.0.19281'. [ 2247.648522][ T1833] tipc: Enabling of bearer rejected, already enabled [ 2247.854538][ T1846] mac80211_hwsim hwsim154 syzkaller0: left promiscuous mode [ 2247.871402][ T1846] mac80211_hwsim hwsim154 syzkaller0: left allmulticast mode [ 2247.907043][ T1840] tipc: Enabled bearer , priority 0 [ 2247.917858][ T1840] tipc: Resetting bearer [ 2247.989014][ T1839] tipc: Disabling bearer [ 2248.089738][ T1854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19293'. [ 2248.159450][ T1858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19295'. [ 2248.386397][ T1868] tipc: Enabling of bearer rejected, already enabled [ 2248.543495][ T1876] netlink: 'syz.4.19303': attribute type 1 has an invalid length. [ 2248.656146][ T1876] 8021q: adding VLAN 0 to HW filter on device bond4 [ 2248.722628][ T1879] ipvlan2: entered promiscuous mode [ 2248.742255][ T1879] ipvlan2: entered allmulticast mode [ 2248.758271][ T1879] bond4: entered allmulticast mode [ 2248.827294][ T1887] tipc: Enabled bearer , priority 0 [ 2248.838587][ T1887] tipc: Resetting bearer [ 2248.901243][ T1886] tipc: Disabling bearer [ 2249.034945][ T1895] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19310'. [ 2249.068503][ T1897] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19311'. [ 2249.338033][ T1911] tipc: Enabling of bearer rejected, already enabled [ 2249.754401][ T1931] tipc: Enabling of bearer rejected, already enabled [ 2249.764357][ T1930] netlink: 'syz.1.19323': attribute type 13 has an invalid length. [ 2249.769409][ T1929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19325'. [ 2250.072251][ T1944] tipc: Enabling of bearer rejected, already enabled [ 2250.262148][ T1949] mac80211_hwsim hwsim154 syzkaller0: entered promiscuous mode [ 2250.272067][ T1949] mac80211_hwsim hwsim154 syzkaller0: entered allmulticast mode [ 2250.607289][ T1966] tipc: Enabled bearer , priority 0 [ 2250.640818][ T1966] tipc: Resetting bearer [ 2250.911892][ T1979] tipc: Enabling of bearer rejected, already enabled [ 2251.077365][ T1983] mac80211_hwsim hwsim162 syzkaller0: entered promiscuous mode [ 2251.095875][ T1983] mac80211_hwsim hwsim162 syzkaller0: entered allmulticast mode [ 2251.143544][ T1987] __nla_validate_parse: 2 callbacks suppressed [ 2251.143571][ T1987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19352'. [ 2251.288967][ T1992] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2251.422467][ T1998] tipc: Enabled bearer , priority 0 [ 2251.439727][ T1998] tipc: Resetting bearer [ 2251.458018][ T1996] tipc: Disabling bearer [ 2251.572405][ T2004] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19359'. [ 2251.644198][ T2006] tipc: Enabling of bearer rejected, already enabled [ 2251.801639][ T2015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19365'. [ 2252.124167][ T2029] tipc: Enabling of bearer rejected, already enabled [ 2252.160942][ T2027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19370'. [ 2252.272815][ T2033] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19372'. [ 2252.449962][ T2039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19376'. [ 2253.061226][ T2065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19387'. [ 2253.098422][ T2068] netlink: 'syz.1.19388': attribute type 1 has an invalid length. [ 2253.115559][ T2068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19388'. [ 2259.956144][ T2128] Set syz1 is full, maxelem 2 reached [ 2260.167242][ T2138] netlink: 'syz.2.19405': attribute type 1 has an invalid length. [ 2260.188550][ T2138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19405'. [ 2260.367148][ T2145] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19408'. [ 2260.930294][ T2167] netlink: 'syz.4.19419': attribute type 1 has an invalid length. [ 2260.952663][ T2167] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19419'. [ 2261.213109][ T2180] syz_tun: entered allmulticast mode [ 2261.387973][ T2186] netlink: 'syz.4.19428': attribute type 10 has an invalid length. [ 2261.417256][ T2186] team0: Device vxcan1 is of different type [ 2261.799433][ T2205] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19436'. [ 2261.875796][ T2209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19436'. [ 2261.941365][ T2209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2262.085212][ T2211] tipc: Enabled bearer , priority 0 [ 2262.106914][ T2214] bridge0: port 4(erspan0) entered blocking state [ 2262.126101][ T2214] bridge0: port 4(erspan0) entered disabled state [ 2262.136078][ T2214] erspan0: entered allmulticast mode [ 2262.143922][ T2214] erspan0: entered promiscuous mode [ 2262.150713][ T2214] bridge0: port 4(erspan0) entered blocking state [ 2262.157377][ T2214] bridge0: port 4(erspan0) entered forwarding state [ 2262.171295][ T2211] syzkaller0: entered promiscuous mode [ 2262.177202][ T2211] syzkaller0: entered allmulticast mode [ 2262.187741][ T2217] erspan0: left allmulticast mode [ 2262.194610][ T2217] erspan0: left promiscuous mode [ 2262.200430][ T2217] bridge0: port 4(erspan0) entered disabled state [ 2262.242465][ T2211] tipc: Resetting bearer [ 2262.272336][ T2210] tipc: Resetting bearer [ 2262.313197][ T2210] tipc: Disabling bearer [ 2262.940774][ T2251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19454'. [ 2262.960202][ T2251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19454'. [ 2263.011402][ T2251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19454'. [ 2263.020624][T25151] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2263.045137][T25151] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2263.045826][ T2251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19454'. [ 2263.073862][T25151] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2263.103506][T25151] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2263.276411][ T2259] mac80211_hwsim hwsim154 syzkaller0: left promiscuous mode [ 2263.290351][ T2259] mac80211_hwsim hwsim154 syzkaller0: left allmulticast mode [ 2263.549015][ T2274] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19463'. [ 2263.926822][ T2289] mac80211_hwsim hwsim162 syzkaller0: left allmulticast mode [ 2265.221327][ T1813] IPVS: starting estimator thread 0... [ 2265.320453][ T2349] IPVS: using max 27 ests per chain, 64800 per kthread [ 2265.683879][ T2361] __nla_validate_parse: 5 callbacks suppressed [ 2265.683906][ T2361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19495'. [ 2265.719825][ T2361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19495'. [ 2265.754642][T25507] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 2265.760464][ T2361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19495'. [ 2265.786178][T25507] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 2265.815064][T25507] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 2265.837619][ T2361] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19495'. [ 2265.851810][T25507] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 2265.989590][ T2368] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19497'. [ 2266.062467][ T2372] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19497'. [ 2271.035733][T23836] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2273.147066][ T2403] mac80211_hwsim hwsim162 syzkaller0: left promiscuous mode [ 2273.182546][ T2404] smc: adding net device ip6erspan0 with user defined pnetid SYZ2 [ 2273.372534][ T2415] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2273.678501][ T2432] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19508'. [ 2273.958339][ T2441] netlink: 256 bytes leftover after parsing attributes in process `syz.2.19510'. [ 2273.968379][ T2441] netlink: 256 bytes leftover after parsing attributes in process `syz.2.19510'. [ 2274.574989][ T2471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19519'. [ 2274.625774][ T2473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19520'. [ 2274.639880][ T2473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19520'. [ 2274.700150][ T2473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19520'. [ 2274.727477][ T2473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19520'. [ 2275.005143][ T2495] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 2275.410908][ T2515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19532'. [ 2276.050794][ T2551] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19541'. [ 2276.611323][ T2576] mac80211_hwsim hwsim162 syzkaller0: entered promiscuous mode [ 2276.637165][ T2576] mac80211_hwsim hwsim162 syzkaller0: entered allmulticast mode [ 2277.063389][ T2608] mac80211_hwsim hwsim162 syzkaller0: left promiscuous mode [ 2277.078451][ T2608] mac80211_hwsim hwsim162 syzkaller0: left allmulticast mode [ 2278.970361][ T2719] __nla_validate_parse: 7 callbacks suppressed [ 2278.970398][ T2719] netlink: 43 bytes leftover after parsing attributes in process `syz.1.19603'. [ 2279.132774][ T2724] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19605'. [ 2279.326632][ T2736] mac80211_hwsim hwsim154 syzkaller0: entered promiscuous mode [ 2279.345887][ T2736] mac80211_hwsim hwsim154 syzkaller0: entered allmulticast mode [ 2279.410324][ T2739] mac80211_hwsim hwsim160 syzkaller0: entered promiscuous mode [ 2279.427711][ T2739] mac80211_hwsim hwsim160 syzkaller0: entered allmulticast mode [ 2279.711048][ T2755] netlink: 43 bytes leftover after parsing attributes in process `syz.2.19617'. [ 2279.859606][ T2758] mac80211_hwsim hwsim154 syzkaller0: left promiscuous mode [ 2279.876946][ T2758] mac80211_hwsim hwsim154 syzkaller0: left allmulticast mode [ 2279.926429][ T2759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19619'. [ 2280.361817][ T2784] netlink: 43 bytes leftover after parsing attributes in process `syz.1.19630'. [ 2280.580639][ T2795] A٨ speed is unknown, defaulting to 1000 [ 2280.599016][ T2800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19635'. [ 2280.658647][ T2799] A٨ speed is unknown, defaulting to 1000 [ 2281.371702][ T2829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19642'. [ 2281.439861][ T2833] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19642'. [ 2281.518167][ T2839] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19642'. [ 2281.567472][ T2846] netlink: 43 bytes leftover after parsing attributes in process `syz.4.19645'. [ 2282.592550][ T2896] mac80211_hwsim hwsim154 syzkaller0: entered promiscuous mode [ 2282.602209][ T2896] mac80211_hwsim hwsim154 syzkaller0: entered allmulticast mode [ 2283.086954][ T2917] A٨ speed is unknown, defaulting to 1000 [ 2283.194754][ T1298] aoe: packet could not be sent on lo. consider increasing tx_queue_len [ 2283.211266][ T1298] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 2289.914553][ T2974] netlink: 'syz.1.19686': attribute type 16 has an invalid length. [ 2289.947846][ T2974] netlink: 'syz.1.19686': attribute type 17 has an invalid length. [ 2290.035630][ T2974] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2290.172956][ T2990] __nla_validate_parse: 4 callbacks suppressed [ 2290.172979][ T2990] netlink: 43 bytes leftover after parsing attributes in process `syz.3.19695'. [ 2290.558770][ T3007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19703'. [ 2290.570957][ T3007] bridge0: port 2(bridge_slave_1) entered disabled state [ 2290.578616][ T3007] bridge0: port 1(bridge_slave_0) entered disabled state [ 2290.994514][ T3023] netlink: 43 bytes leftover after parsing attributes in process `syz.4.19709'. [ 2291.436147][ T3046] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19718'. [ 2291.756758][ T3060] netlink: 43 bytes leftover after parsing attributes in process `syz.0.19725'. [ 2292.045866][ T3072] netlink: 'syz.1.19731': attribute type 16 has an invalid length. [ 2292.080812][ T3072] netlink: 'syz.1.19731': attribute type 17 has an invalid length. [ 2292.109681][ T3072] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2292.545774][ T3086] netlink: 43 bytes leftover after parsing attributes in process `syz.1.19737'. [ 2292.821576][ T3102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19745'. [ 2292.917166][ T3111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19745'. [ 2292.973834][ T3102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19745'. [ 2293.367279][ T3127] netlink: 43 bytes leftover after parsing attributes in process `syz.4.19754'. [ 2294.209221][ T3153] bridge6: entered promiscuous mode [ 2294.218130][ T3153] bridge6: entered allmulticast mode [ 2294.386863][ T3163] mac80211_hwsim hwsim162 syzkaller0: entered promiscuous mode [ 2294.431490][ T3163] mac80211_hwsim hwsim162 syzkaller0: entered allmulticast mode [ 2295.451153][ T3214] netlink: 'syz.0.19789': attribute type 16 has an invalid length. [ 2295.468758][ T3214] netlink: 'syz.0.19789': attribute type 17 has an invalid length. [ 2295.543942][ T3214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2295.577181][ T3221] __nla_validate_parse: 9 callbacks suppressed [ 2295.577206][ T3221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19792'. [ 2295.636243][ T3221] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19792'. [ 2295.712199][ T3225] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19792'. [ 2295.771916][ T3226] netlink: 'syz.3.19794': attribute type 9 has an invalid length. [ 2295.785070][ T3226] netlink: 27 bytes leftover after parsing attributes in process `syz.3.19794'. [ 2295.804582][ T3229] syzkaller0: entered promiscuous mode [ 2295.813088][ T3229] syzkaller0: entered allmulticast mode [ 2295.962442][ T3196] delete_channel: no stack [ 2296.102664][ T3233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19798'. [ 2296.128369][ T3233] bridge_slave_0: left allmulticast mode [ 2296.134110][ T3233] bridge_slave_0: left promiscuous mode [ 2296.145366][ T3233] bridge0: port 1(bridge_slave_0) entered disabled state [ 2296.243194][ T3238] syzkaller1: entered promiscuous mode [ 2296.259267][ T3238] syzkaller1: entered allmulticast mode [ 2296.279815][ T3242] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 2296.578901][ T3252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19807'. [ 2296.611069][ T3252] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19807'. [ 2296.671535][ T3260] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19807'. [ 2296.708951][ T3261] netlink: 'syz.1.19808': attribute type 9 has an invalid length. [ 2296.721617][ T3261] netlink: 27 bytes leftover after parsing attributes in process `syz.1.19808'. [ 2297.038539][ T3276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19813'. [ 2297.106636][ T3276] team1: entered promiscuous mode [ 2297.122013][ T3276] team1: entered allmulticast mode [ 2297.145446][ T3276] 8021q: adding VLAN 0 to HW filter on device team1 [ 2297.167259][ T3280] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 2297.276795][ T3280] team2: entered promiscuous mode [ 2297.292205][ T3280] team2: entered allmulticast mode [ 2297.320480][ T3280] 8021q: adding VLAN 0 to HW filter on device team2 [ 2297.605943][ T3301] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 2297.644559][ T3297] netlink: 'syz.1.19823': attribute type 9 has an invalid length. [ 2297.997151][ T3315] syzkaller1: entered promiscuous mode [ 2298.009916][ T3315] syzkaller1: entered allmulticast mode [ 2298.246803][ T3324] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 2299.057924][ T3350] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 2299.378104][ T3358] bond0: entered promiscuous mode [ 2299.395292][ T3358] bond0: entered allmulticast mode [ 2300.098002][ T3383] batman_adv: batadv0: Adding interface: geneve2 [ 2300.115157][ T3383] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 2300.700333][ T3415] __nla_validate_parse: 12 callbacks suppressed [ 2300.700360][ T3415] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19868'. [ 2300.755385][ T3417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19868'. [ 2301.334849][ T3443] netlink: 48 bytes leftover after parsing attributes in process `syz.4.19876'. [ 2301.517437][ T3448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19879'. [ 2308.860959][ T3487] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19886'. [ 2308.925286][ T3492] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19886'. [ 2309.074493][ T3499] batadv_slave_1: entered allmulticast mode [ 2309.148259][ T3503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19890'. [ 2309.295051][ T3507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19892'. [ 2309.364538][ T3509] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19893'. [ 2309.431171][ T3513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19894'. [ 2309.456050][ T3513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19894'. [ 2311.171797][ T3587] netlink: 'syz.3.19926': attribute type 13 has an invalid length. [ 2311.245849][ T3587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2311.264333][ T3600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19931'. [ 2311.291772][ T3587] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 2311.393522][ T3608] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19934'. [ 2311.452357][ T3610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19934'. [ 2311.656146][ T3613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2311.776053][ T3613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2311.798943][ T3613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2312.093502][ T3627] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 2312.113308][ T3627] tipc: Enabled bearer , priority 0 [ 2313.148349][ T3661] sch_tbf: burst 3 is lower than device syzkaller0 mtu (313) ! [ 2313.167499][ T3661] tipc: Enabling of bearer rejected, already enabled [ 2313.878491][ T3690] __nla_validate_parse: 6 callbacks suppressed [ 2313.878513][ T3690] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19963'. [ 2314.000513][ T3695] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 2314.017702][ T3695] tipc: Enabled bearer , priority 0 [ 2314.086309][ T3694] tipc: Disabling bearer [ 2314.233697][ T3705] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19970'. [ 2314.592369][ T3722] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19977'. [ 2314.764129][ T3728] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19978'. [ 2314.837851][ T3730] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19978'. [ 2314.944008][ T3734] bridge0: port 2(bridge_slave_1) entered disabled state [ 2314.951432][ T3734] bridge0: port 1(bridge_slave_0) entered disabled state [ 2315.007721][ T3734] bridge0: entered allmulticast mode [ 2315.717980][ T3774] netlink: 20 bytes leftover after parsing attributes in process `syz.4.19998'. [ 2315.787698][ T3776] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19998'. [ 2316.551812][ T3806] netlink: 20 bytes leftover after parsing attributes in process `syz.1.20012'. [ 2316.623426][ T3809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.20012'. [ 2317.122037][ T3829] [ 2317.126998][ T3829] ============================= [ 2317.131945][ T3829] WARNING: suspicious RCU usage [ 2317.137117][ T3829] syzkaller #0 Not tainted [ 2317.141600][ T3829] ----------------------------- [ 2317.146704][ T3829] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 2317.155433][ T3829] [ 2317.155433][ T3829] other info that might help us debug this: [ 2317.155433][ T3829] [ 2317.165775][ T3829] [ 2317.165775][ T3829] rcu_scheduler_active = 2, debug_locks = 1 [ 2317.174169][ T3829] 1 lock held by syz.0.20022/3829: [ 2317.179476][ T3829] #0: ffffffff8e75e618 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 2317.191272][ T3829] [ 2317.191272][ T3829] stack backtrace: [ 2317.197960][ T3829] CPU: 1 UID: 0 PID: 3829 Comm: syz.0.20022 Not tainted syzkaller #0 PREEMPT(full) [ 2317.197993][ T3829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2317.198008][ T3829] Call Trace: [ 2317.198031][ T3829] [ 2317.198044][ T3829] dump_stack_lvl+0xe8/0x150 [ 2317.198097][ T3829] lockdep_rcu_suspicious+0x13f/0x1d0 [ 2317.198139][ T3829] get_callchain_entry+0x2b6/0x3c0 [ 2317.198216][ T3829] get_perf_callchain+0xd5/0x880 [ 2317.198275][ T3829] ? __pfx_get_perf_callchain+0x10/0x10 [ 2317.198314][ T3829] ? futex_unqueue+0x22/0x240 [ 2317.198343][ T3829] ? futex_unqueue+0x22/0x240 [ 2317.198368][ T3829] ? futex_unqueue+0x22/0x240 [ 2317.198401][ T3829] __bpf_get_stack+0x445/0xab0 [ 2317.198450][ T3829] ? __pfx___bpf_get_stack+0x10/0x10 [ 2317.198502][ T3829] bpf_get_stack+0x33/0x50 [ 2317.198536][ T3829] ? bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 2317.198560][ T3829] bpf_get_stack_raw_tp+0x1a9/0x220 [ 2317.198600][ T3829] bpf_prog_e8e6327ccf46c9a7+0x46/0x4e [ 2317.198622][ T3829] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 2317.198667][ T3829] bpf_prog_test_run_syscall+0x318/0x4c0 [ 2317.198708][ T3829] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 2317.198743][ T3829] ? __fget_files+0x2a/0x420 [ 2317.198787][ T3829] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 2317.198826][ T3829] bpf_prog_test_run+0x2c7/0x340 [ 2317.198856][ T3829] __sys_bpf+0x643/0x950 [ 2317.198894][ T3829] ? __pfx___sys_bpf+0x10/0x10 [ 2317.198954][ T3829] ? rcu_is_watching+0x15/0xb0 [ 2317.199000][ T3829] __x64_sys_bpf+0x7c/0x90 [ 2317.199035][ T3829] do_syscall_64+0x14d/0xf80 [ 2317.199084][ T3829] ? trace_irq_disable+0x3b/0x150 [ 2317.199119][ T3829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2317.199146][ T3829] ? clear_bhb_loop+0x40/0x90 [ 2317.199176][ T3829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2317.199201][ T3829] RIP: 0033:0x7f4bcad9c799 [ 2317.199224][ T3829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2317.199246][ T3829] RSP: 002b:00007f4bcbc1f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2317.199272][ T3829] RAX: ffffffffffffffda RBX: 00007f4bcb015fa0 RCX: 00007f4bcad9c799 [ 2317.199290][ T3829] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 2317.199305][ T3829] RBP: 00007f4bcae32c99 R08: 0000000000000000 R09: 0000000000000000 [ 2317.199319][ T3829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2317.199333][ T3829] R13: 00007f4bcb016038 R14: 00007f4bcb015fa0 R15: 00007ffc358349c8 [ 2317.199371][ T3829]