last executing test programs: 2.94689361s ago: executing program 4 (id=1535): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x24, r1, 0x1, 0x3, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48881}, 0x40) 2.850411734s ago: executing program 2 (id=1536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0xffff], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x3c}}, 0x0) 1.21169492s ago: executing program 4 (id=1541): pipe(&(0x7f0000000340)) write(0xffffffffffffffff, 0x0, 0x0) unshare(0x20000400) socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r4, 0x40047435, &(0x7f0000000200)=0x1) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000500)=0x2) 1.124298815s ago: executing program 4 (id=1543): unshare(0x24060400) connect$unix(0xffffffffffffffff, 0x0, 0x0) 1.072121813s ago: executing program 3 (id=1544): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-avx\x00'}, 0x58) r1 = accept(r0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001040)={0x44, 0x36, 0x20, 0x70bd2b, 0x25dedbfe, "", [@generic="89f99ea23336769a5cc46eda28cdf6ebf7805aa0561a081068e605e507bbc30e375d90f786a3fa37d6cca2bc622a2618cb"]}, 0x44}], 0x1, 0x0, 0x0, 0x20040840}, 0x4050) 1.072022518s ago: executing program 0 (id=1545): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x104) 1.030180399s ago: executing program 2 (id=1546): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 982.544057ms ago: executing program 1 (id=1547): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000d80)=ANY=[@ANYRESOCT], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000", @ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de135771"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[], 0xbc}}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 919.864294ms ago: executing program 4 (id=1548): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000380)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) 895.089983ms ago: executing program 2 (id=1549): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) write$bt_hci(r0, 0x0, 0x7) 802.906717ms ago: executing program 4 (id=1550): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x40, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_COOKIE={0x5}]}, 0x95}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 740.644087ms ago: executing program 3 (id=1551): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)={0x20, r1, 0x1, 0x50bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc884}, 0x4010084) 740.526542ms ago: executing program 0 (id=1552): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x4ea92e5f9cbcdc23, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="997425bd7000fbdbdf2515000000580001800d0001007564703a73797a320000000044000400200001000a00fe000000000000000000bb0300003ce4fb2200200002000a004e2000000033fe8000000000000000000000000000bb000001022000"], 0x6c}, 0x1, 0x0, 0x0, 0x24000884}, 0x2400c000) 740.417797ms ago: executing program 2 (id=1553): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050200000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="11002a00dd0b6162636465"], 0x40}}, 0x0) 723.407583ms ago: executing program 1 (id=1554): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f00000001c0)={0x24, @short={0x2, 0xffff, 0xaaa2}}, 0x14) 611.794014ms ago: executing program 4 (id=1555): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001e00)="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", 0x446}], 0x1}}], 0x2, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 585.889662ms ago: executing program 1 (id=1556): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x34, r2, 0x1, 0x1070bd0c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40811}, 0x20) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, '`\x00\x00\x00\x00\x00'}}}}}}}, 0x0) 585.052228ms ago: executing program 0 (id=1557): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbf7, {0x0, 0x0, 0x0, r1, {0x6, 0xfff5}, {}, {0x7, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004094}, 0x4) 508.145101ms ago: executing program 2 (id=1558): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4800) 437.922869ms ago: executing program 3 (id=1559): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x6}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000004}, 0x10) 423.405993ms ago: executing program 2 (id=1560): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000280)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x810, 0x208, 0xe, 0x2, 0x3, 0x8, 0x9, r1}, 0x20) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) connect$ax25(r0, &(0x7f0000000180)={{0x3, @bcast, 0x5}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) syz_emit_ethernet(0x80, &(0x7f0000000580)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000286dd605f1060004a2f00fc000000000000000000000000000000ff"], 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x22020400) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r4}, 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000040)="09000000010001", 0x7) connect$can_bcm(r2, 0x0, 0x0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000003e40), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010013bd7000fcdbdf25010000000500afef420000000800030006000000050005"], 0x2c}}, 0x24000806) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20008804}, 0xc2cc66ca1526115c) sendmsg$netlink(r2, &(0x7f0000005d80)={&(0x7f0000000440)=@kern={0x1d, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x20000c4}, 0x0) accept4$ax25(r0, 0x0, 0x0, 0x800) syz_emit_ethernet(0xab, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010120", 0x75, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000000400260004000000"}, {0x1, 0x0, "fe906d"}]}}}}}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x1) 316.286203ms ago: executing program 0 (id=1561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000008000000020000000900010073797a30000000000900020073797a32"], 0xc4}}, 0x0) 311.794685ms ago: executing program 1 (id=1562): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x4}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x3, 0x9}]}}]}, 0x38}}, 0x4048000) 309.100599ms ago: executing program 3 (id=1563): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r0, &(0x7f00000006c0)="49de92a82bde78fb2f28969f3be6f8882273e3a86df96631c5824b796389a3e6316bf472b8e3d3ca007ff3413b8ae24eeae251006c87816508ea66afbee653b70c30", 0x42, 0x200) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random="0a0000000100"}) 186.734656ms ago: executing program 3 (id=1564): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) shutdown(r0, 0x1) 140.588435ms ago: executing program 1 (id=1565): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0xfffffffe}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r0) 140.411596ms ago: executing program 0 (id=1566): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}) 106.298419ms ago: executing program 3 (id=1567): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x0) getsockname$packet(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 102.353496ms ago: executing program 1 (id=1568): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x0, 0x33, 0x5, 0xa, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x7, 0xc, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r3, &(0x7f0000000680)="bbbbb9a94bf668884d1ab9754029684b3fbb03000000000000024f0a086ccd507dbf1f035d6f6503", 0x28, 0x4000800, &(0x7f00000001c0)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @link_local}, 0x14) 0s ago: executing program 0 (id=1569): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c020001000000000000400002fffffffb05000500000000000a"], 0x80}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 65.778522][ T5805] cgroup: Unknown subsys name 'net' [ 65.912675][ T5805] cgroup: Unknown subsys name 'cpuset' [ 65.921354][ T5805] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.287017][ T5805] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.367780][ T5831] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.380251][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.389674][ T5837] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.397747][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.406113][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.406334][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.416305][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.423388][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.436383][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.439461][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.444361][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.460929][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.468863][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.469717][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.484438][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.484884][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.492157][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.500858][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.507046][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.513866][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.527881][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.528655][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.556061][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.573582][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.582369][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.136348][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 70.186656][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 70.226065][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 70.341363][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 70.423937][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 70.484997][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.492289][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.500071][ T5823] bridge_slave_0: entered allmulticast mode [ 70.507161][ T5823] bridge_slave_0: entered promiscuous mode [ 70.541243][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.548475][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.555979][ T5820] bridge_slave_0: entered allmulticast mode [ 70.563085][ T5820] bridge_slave_0: entered promiscuous mode [ 70.572073][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.579311][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.586676][ T5823] bridge_slave_1: entered allmulticast mode [ 70.594425][ T5823] bridge_slave_1: entered promiscuous mode [ 70.615859][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.623160][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.630462][ T5818] bridge_slave_0: entered allmulticast mode [ 70.637439][ T5818] bridge_slave_0: entered promiscuous mode [ 70.645435][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.652744][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.660133][ T5818] bridge_slave_1: entered allmulticast mode [ 70.667048][ T5818] bridge_slave_1: entered promiscuous mode [ 70.674231][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.681438][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.688582][ T5820] bridge_slave_1: entered allmulticast mode [ 70.696512][ T5820] bridge_slave_1: entered promiscuous mode [ 70.784478][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.806056][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.818468][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.827797][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.835104][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.843319][ T5819] bridge_slave_0: entered allmulticast mode [ 70.850472][ T5819] bridge_slave_0: entered promiscuous mode [ 70.865037][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.876833][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.903130][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.910762][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.918218][ T5819] bridge_slave_1: entered allmulticast mode [ 70.925461][ T5819] bridge_slave_1: entered promiscuous mode [ 70.952795][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.964143][ T5823] team0: Port device team_slave_0 added [ 71.006122][ T5823] team0: Port device team_slave_1 added [ 71.029038][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.036753][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.044254][ T5822] bridge_slave_0: entered allmulticast mode [ 71.051582][ T5822] bridge_slave_0: entered promiscuous mode [ 71.060804][ T5818] team0: Port device team_slave_0 added [ 71.066495][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.073700][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.081878][ T5822] bridge_slave_1: entered allmulticast mode [ 71.089272][ T5822] bridge_slave_1: entered promiscuous mode [ 71.120429][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.131815][ T5818] team0: Port device team_slave_1 added [ 71.140248][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.158760][ T5820] team0: Port device team_slave_0 added [ 71.165871][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.173856][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.200637][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.243005][ T5820] team0: Port device team_slave_1 added [ 71.251360][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.261671][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.268715][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.295530][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.327491][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.335143][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.361521][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.384186][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.404357][ T5819] team0: Port device team_slave_0 added [ 71.413125][ T5819] team0: Port device team_slave_1 added [ 71.415280][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.426308][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.433360][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.440766][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.467080][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.531079][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.538231][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.564762][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.570240][ T5831] Bluetooth: hci4: command tx timeout [ 71.575610][ T5840] Bluetooth: hci1: command tx timeout [ 71.581753][ T5831] Bluetooth: hci3: command tx timeout [ 71.586885][ T5833] Bluetooth: hci2: command tx timeout [ 71.611667][ T5822] team0: Port device team_slave_0 added [ 71.631203][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.638302][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.664897][ T5840] Bluetooth: hci0: command tx timeout [ 71.665048][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.691956][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.698974][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.726015][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.738661][ T5822] team0: Port device team_slave_1 added [ 71.750518][ T5823] hsr_slave_0: entered promiscuous mode [ 71.757005][ T5823] hsr_slave_1: entered promiscuous mode [ 71.764167][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.771411][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.797829][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.813018][ T5818] hsr_slave_0: entered promiscuous mode [ 71.819313][ T5818] hsr_slave_1: entered promiscuous mode [ 71.825552][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 71.831494][ T5818] Cannot create hsr debugfs directory [ 71.871345][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.878318][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.905712][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.918443][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.925614][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.952026][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.045151][ T5822] hsr_slave_0: entered promiscuous mode [ 72.051726][ T5822] hsr_slave_1: entered promiscuous mode [ 72.057946][ T5822] debugfs: 'hsr0' already exists in 'hsr' [ 72.064043][ T5822] Cannot create hsr debugfs directory [ 72.149530][ T5819] hsr_slave_0: entered promiscuous mode [ 72.156033][ T5819] hsr_slave_1: entered promiscuous mode [ 72.162498][ T5819] debugfs: 'hsr0' already exists in 'hsr' [ 72.168230][ T5819] Cannot create hsr debugfs directory [ 72.178232][ T5820] hsr_slave_0: entered promiscuous mode [ 72.184790][ T5820] hsr_slave_1: entered promiscuous mode [ 72.191315][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 72.197206][ T5820] Cannot create hsr debugfs directory [ 72.658580][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.672598][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.683088][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.703084][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.763874][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.775585][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.786871][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.797001][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.883030][ T5822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.902261][ T5822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.912936][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.938962][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.046287][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.056653][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.066388][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.101845][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.126558][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.164107][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.206764][ T5820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.217965][ T5820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.237451][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.246095][ T5820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.256894][ T5820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.287545][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.294941][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.311132][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.347396][ T447] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.354715][ T447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.367822][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.375131][ T447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.407464][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.437431][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.444721][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.463285][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.494926][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.502162][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.551292][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.558704][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.618501][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.650681][ T5840] Bluetooth: hci1: command tx timeout [ 73.650836][ T5831] Bluetooth: hci4: command tx timeout [ 73.656110][ T5840] Bluetooth: hci3: command tx timeout [ 73.661971][ T5831] Bluetooth: hci2: command tx timeout [ 73.730334][ T5144] Bluetooth: hci0: command tx timeout [ 73.742920][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.768119][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.775478][ T447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.830605][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.837747][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.878970][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.964215][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.013381][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.046056][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.053404][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.076985][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.084271][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.172522][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.267218][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.305672][ T5823] veth0_vlan: entered promiscuous mode [ 74.348435][ T5818] veth0_vlan: entered promiscuous mode [ 74.372593][ T5823] veth1_vlan: entered promiscuous mode [ 74.412355][ T5818] veth1_vlan: entered promiscuous mode [ 74.433503][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.502745][ T5823] veth0_macvtap: entered promiscuous mode [ 74.536066][ T5823] veth1_macvtap: entered promiscuous mode [ 74.556300][ T5822] veth0_vlan: entered promiscuous mode [ 74.583608][ T5818] veth0_macvtap: entered promiscuous mode [ 74.611900][ T5818] veth1_macvtap: entered promiscuous mode [ 74.620542][ T5819] veth0_vlan: entered promiscuous mode [ 74.643232][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.658350][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.666724][ T5822] veth1_vlan: entered promiscuous mode [ 74.681004][ T5819] veth1_vlan: entered promiscuous mode [ 74.709011][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.718942][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.739638][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.750169][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.767003][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.780317][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.814280][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.852279][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.870548][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.887665][ T5819] veth0_macvtap: entered promiscuous mode [ 74.901267][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.917544][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.941048][ T5822] veth0_macvtap: entered promiscuous mode [ 74.981844][ T5819] veth1_macvtap: entered promiscuous mode [ 75.007414][ T5822] veth1_macvtap: entered promiscuous mode [ 75.033746][ T447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.054559][ T447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.077115][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.119007][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.141215][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.152249][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.164532][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.203036][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.232475][ T447] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.253969][ T447] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.272418][ T35] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.286012][ T5823] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.309964][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.317815][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.351838][ T35] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.418723][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.429804][ T35] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.459996][ T5935] netlink: 'syz.0.1': attribute type 11 has an invalid length. [ 75.467872][ T5935] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1'. [ 75.471608][ T35] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.495817][ T35] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.515503][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.528021][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.546413][ T5820] veth0_vlan: entered promiscuous mode [ 75.587026][ T5938] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 75.599287][ T5938] veth0_macvtap: left promiscuous mode [ 75.651837][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.679770][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.731943][ T5144] Bluetooth: hci2: command tx timeout [ 75.737095][ T5940] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.739805][ T5144] Bluetooth: hci3: command tx timeout [ 75.747233][ T5831] Bluetooth: hci4: command tx timeout [ 75.751903][ T5840] Bluetooth: hci1: command tx timeout [ 75.763598][ T5940] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2'. [ 75.777120][ T5820] veth1_vlan: entered promiscuous mode [ 75.810815][ T5144] Bluetooth: hci0: command tx timeout [ 75.817133][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.852211][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.886661][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.911077][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.992340][ T447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.996100][ T5820] veth0_macvtap: entered promiscuous mode [ 76.033082][ T447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.057691][ T5820] veth1_macvtap: entered promiscuous mode [ 76.155524][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.203292][ T5959] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 76.224291][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.271150][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.291687][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.300795][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.309971][ T5958] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 76.353482][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.558662][ T5967] netlink: 'syz.1.11': attribute type 2 has an invalid length. [ 76.575610][ T5967] tipc: Started in network mode [ 76.582639][ T5967] tipc: Node identity 7000f, cluster identity 4711 [ 76.589651][ T5967] tipc: Node number set to 458767 [ 76.623660][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.658161][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.782513][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.792032][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.805440][ T5981] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16'. [ 76.969924][ T5984] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 77.512235][ T6007] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 77.546545][ T6007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.550132][ T6008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.24'. [ 77.594344][ T6008] netlink: 216 bytes leftover after parsing attributes in process `syz.4.24'. [ 77.604044][ T6008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.24'. [ 77.711331][ T6018] Zero length message leads to an empty skb [ 77.747008][ T6020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 77.788780][ T6020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 77.804203][ T6026] xt_TCPMSS: Only works on TCP SYN packets [ 77.821941][ T5144] Bluetooth: hci4: command tx timeout [ 77.821958][ T5831] Bluetooth: hci3: command tx timeout [ 77.821983][ T5831] Bluetooth: hci1: command tx timeout [ 77.828723][ T5144] Bluetooth: hci2: command tx timeout [ 77.890437][ T5144] Bluetooth: hci0: command tx timeout [ 78.015664][ T6033] warning: `syz.4.34' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.854154][ T6084] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 79.316676][ T6099] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.702241][ T6121] netlink: 'syz.1.58': attribute type 5 has an invalid length. [ 81.098756][ T6181] syz_tun: entered allmulticast mode [ 81.194776][ T6180] syz_tun: left allmulticast mode [ 81.220190][ T6191] __nla_validate_parse: 4 callbacks suppressed [ 81.220209][ T6191] netlink: 4 bytes leftover after parsing attributes in process `syz.0.80'. [ 81.428664][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 81.652631][ T6216] syzkaller1: entered promiscuous mode [ 81.658355][ T6216] syzkaller1: entered allmulticast mode [ 81.717708][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.87'. [ 81.727569][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.87'. [ 81.943473][ T6238] netlink: 'syz.1.92': attribute type 11 has an invalid length. [ 81.951552][ T6238] netlink: 'syz.1.92': attribute type 11 has an invalid length. [ 81.961358][ T6238] netlink: 224 bytes leftover after parsing attributes in process `syz.1.92'. [ 82.142609][ T6244] netlink: zone id is out of range [ 82.158169][ T6244] netlink: zone id is out of range [ 82.198748][ T6244] netlink: zone id is out of range [ 82.220998][ T6244] netlink: zone id is out of range [ 82.242033][ T6244] netlink: zone id is out of range [ 82.401021][ T6256] netlink: 28 bytes leftover after parsing attributes in process `syz.1.96'. [ 82.435083][ T6255] bond1: Unable to set down delay as MII monitoring is disabled [ 82.458372][ T6255] bond1 (unregistering): Released all slaves [ 82.649578][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.101'. [ 82.675736][ T1840] cfg80211: failed to load regulatory.db [ 82.705858][ T6274] netlink: 44 bytes leftover after parsing attributes in process `syz.2.102'. [ 82.744556][ T6273] netlink: 44 bytes leftover after parsing attributes in process `syz.2.102'. [ 82.759466][ T6276] pim6reg: entered allmulticast mode [ 82.803582][ T6276] pim6reg: left allmulticast mode [ 82.819092][ T6278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.877594][ T6273] netlink: 64905 bytes leftover after parsing attributes in process `syz.2.102'. [ 83.136285][ T6300] trusted_key: syz.4.109 sent an empty control message without MSG_MORE. [ 83.279039][ T6306] netlink: 'syz.2.111': attribute type 32 has an invalid length. [ 83.383591][ T6315] lo: entered promiscuous mode [ 83.451134][ T6315] netlink: 'syz.4.113': attribute type 2 has an invalid length. [ 83.476095][ T6315] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 83.598793][ T6329] netlink: 'syz.3.117': attribute type 10 has an invalid length. [ 83.673208][ T6326] syzkaller0: entered promiscuous mode [ 83.678941][ T6326] syzkaller0: entered allmulticast mode [ 83.754947][ T6329] batman_adv: batadv0: Adding interface: netdevsim0 [ 83.776561][ T6337] syzkaller0: tun_net_xmit 14 [ 83.782495][ T6329] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.784626][ T6337] syzkaller0: tun_net_xmit 28 [ 83.821322][ T6329] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 85.003466][ T6349] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.016758][ T6349] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.027271][ T6349] bond0 (unregistering): Released all slaves [ 85.633403][ T6386] openvswitch: netlink: IPv6 tunnel dst address is zero [ 86.094000][ T6417] ipt_ECN: cannot use operation on non-tcp rule [ 86.488713][ T6437] __nla_validate_parse: 8 callbacks suppressed [ 86.488731][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 86.511711][ T6439] netlink: 'syz.0.139': attribute type 1 has an invalid length. [ 86.549444][ T6437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.570974][ T6439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.139'. [ 86.616350][ T6437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.630562][ T6439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'. [ 86.646124][ T6439] netlink: 'syz.0.139': attribute type 2 has an invalid length. [ 86.657728][ T6439] netlink: 'syz.0.139': attribute type 2 has an invalid length. [ 86.687618][ T6439] netlink: 'syz.0.139': attribute type 2 has an invalid length. [ 86.899506][ T6472] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.147'. [ 87.017120][ T6476] netlink: 'syz.2.149': attribute type 21 has an invalid length. [ 87.032430][ T6483] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 87.069613][ T6476] bond1: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 87.126990][ T6476] bond1 (unregistering): Released all slaves [ 87.192343][ T6492] netlink: 16 bytes leftover after parsing attributes in process `syz.2.149'. [ 87.212030][ T6498] netlink: 44 bytes leftover after parsing attributes in process `syz.0.152'. [ 87.259081][ T6499] netlink: 44 bytes leftover after parsing attributes in process `syz.0.152'. [ 87.345147][ T6508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.156'. [ 87.437116][ T5921] IPVS: starting estimator thread 0... [ 87.449517][ T6511] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 87.542183][ T6514] IPVS: using max 36 ests per chain, 86400 per kthread [ 87.580319][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 87.642827][ T6523] netlink: 'syz.2.160': attribute type 1 has an invalid length. [ 87.645236][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 87.705410][ T6527] team0: Port device team_slave_0 removed [ 88.201512][ T6552] tipc: Started in network mode [ 88.206782][ T6552] tipc: Node identity 8aedf4b32605, cluster identity 4711 [ 88.231317][ T6552] tipc: Enabled bearer , priority 0 [ 88.242149][ T6552] +: renamed from syzkaller0 [ 88.254294][ T6554] netlink: 'syz.4.168': attribute type 1 has an invalid length. [ 88.273487][ T6552] tipc: Disabling bearer [ 88.392606][ T6554] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.455367][ T6563] gretap1: entered promiscuous mode [ 88.460717][ T6563] gretap1: entered allmulticast mode [ 89.253607][ T6605] sch_fq: defrate 53322 ignored. [ 89.339046][ T6547] batadv1: entered allmulticast mode [ 89.406108][ T6610] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 89.685060][ T6628] netlink: 'syz.2.184': attribute type 21 has an invalid length. [ 90.934715][ T6540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.173815][ T6650] syzkaller0: entered promiscuous mode [ 91.197818][ T6650] syzkaller0: entered allmulticast mode [ 91.762952][ T6684] tipc: Failed to remove unknown binding: 66,0,0/0:3900290243/3900290244 [ 91.810339][ T6684] tipc: Failed to remove unknown binding: 66,0,0/0:3900290243/3900290244 [ 91.831800][ T6684] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.958314][ T6699] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 2, id = 0 [ 92.184362][ T6710] __nla_validate_parse: 12 callbacks suppressed [ 92.184383][ T6710] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.209'. [ 92.204761][ T6710] netlink: 3648 bytes leftover after parsing attributes in process `syz.2.209'. [ 92.465564][ T29] audit: type=1800 audit(1773943897.482:2): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.215" name="memory.events" dev="tmpfs" ino=242 res=0 errno=0 [ 92.515313][ T29] audit: type=1804 audit(1773943897.482:3): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.215" name="/newroot/44/memory.events" dev="tmpfs" ino=242 res=1 errno=0 [ 92.691808][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.219'. [ 92.805073][ T6751] netlink: 'syz.3.220': attribute type 1 has an invalid length. [ 92.814414][ T6751] netlink: 224 bytes leftover after parsing attributes in process `syz.3.220'. [ 93.060165][ T6767] netlink: 'syz.0.224': attribute type 2 has an invalid length. [ 93.067853][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 93.103439][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.3.226'. [ 93.347904][ T6789] xt_ecn: cannot match TCP bits for non-tcp packets [ 93.462855][ T6797] netlink: 15 bytes leftover after parsing attributes in process `syz.1.232'. [ 93.607003][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.235'. [ 93.869668][ T58] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x18 [ 94.153046][ T6831] veth0_to_hsr: entered promiscuous mode [ 94.170142][ T6831] batadv0: entered promiscuous mode [ 94.177192][ T6831] hsr1: entered promiscuous mode [ 94.193906][ T6831] hsr1: entered allmulticast mode [ 94.200698][ T6831] veth0_to_hsr: entered allmulticast mode [ 94.206670][ T6831] batadv0: entered allmulticast mode [ 94.230685][ T6831] veth0_to_hsr: left promiscuous mode [ 94.237271][ T6831] batadv0: left promiscuous mode [ 94.253202][ T6838] netlink: 28 bytes leftover after parsing attributes in process `syz.2.242'. [ 94.450569][ T6848] netlink: 'syz.4.244': attribute type 12 has an invalid length. [ 94.489710][ T6848] netlink: 'syz.4.244': attribute type 12 has an invalid length. [ 94.497933][ T6848] netlink: 'syz.4.244': attribute type 12 has an invalid length. [ 94.535663][ T6848] netlink: 'syz.4.244': attribute type 12 has an invalid length. [ 94.553609][ T6848] netlink: 'syz.4.244': attribute type 12 has an invalid length. [ 94.567287][ T6848] netlink: 40 bytes leftover after parsing attributes in process `syz.4.244'. [ 94.857593][ T6870] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 94.894442][ T6870] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 94.903753][ T6870] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 95.307304][ T6892] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.581400][ T6905] Cannot find set identified by id 3 to match [ 95.835296][ T6916] netlink: 'syz.1.266': attribute type 11 has an invalid length. [ 95.873048][ T6918] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 96.016958][ T6918] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.096974][ T6909] bond2: entered allmulticast mode [ 96.148099][ T29] audit: type=1800 audit(1773943901.162:4): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.264" name="memory.events" dev="tmpfs" ino=222 res=0 errno=0 [ 96.204603][ T6934] veth0_to_bond: entered allmulticast mode [ 96.445281][ T6953] vlan2: entered promiscuous mode [ 96.450884][ T6953] bridge0: entered promiscuous mode [ 97.282616][ T7010] __nla_validate_parse: 12 callbacks suppressed [ 97.282634][ T7010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.293'. [ 97.435364][ T7018] netlink: 160 bytes leftover after parsing attributes in process `syz.3.295'. [ 97.671048][ T7034] netlink: 'syz.4.300': attribute type 4 has an invalid length. [ 98.334107][ T7064] netlink: 'syz.1.306': attribute type 1 has an invalid length. [ 98.391100][ T7064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.306'. [ 98.479967][ T7068] netlink: 'syz.0.305': attribute type 1 has an invalid length. [ 99.171262][ T7068] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 99.178049][ T7083] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 99.446077][ T7106] netlink: 'syz.1.315': attribute type 10 has an invalid length. [ 99.486308][ T7106] netlink: 228 bytes leftover after parsing attributes in process `syz.1.315'. [ 99.511017][ T7112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.315'. [ 99.528245][ T7111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.318'. [ 99.539878][ T7111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.318'. [ 99.662735][ T7121] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 99.699559][ T7122] netlink: 'syz.1.319': attribute type 1 has an invalid length. [ 99.965992][ T7134] syzkaller1: entered promiscuous mode [ 99.973723][ T7134] syzkaller1: entered allmulticast mode [ 100.168711][ T7156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.329'. [ 100.180459][ T7143] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_cmd_wq": -EINTR [ 100.224769][ T7156] sch_tbf: peakrate 8388611 is lower than or equals to rate 7352655427609315151 ! [ 100.491105][ T7176] netlink: 52 bytes leftover after parsing attributes in process `syz.2.332'. [ 100.841537][ T7194] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 100.879491][ T7196] netlink: 100 bytes leftover after parsing attributes in process `syz.4.340'. [ 100.885835][ T7199] Bluetooth: MGMT ver 1.23 [ 100.930460][ T7200] bond0: (slave ip6gretap1): making interface the new active one [ 100.940821][ T7200] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 100.953221][ T7200] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 100.961812][ T7200] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 101.126799][ T7209] xt_socket: unknown flags 0xe4 [ 101.215654][ T7211] bond3: Removing last ns target with arp_interval on [ 101.230773][ T7220] sctp: [Deprecated]: syz.0.348 (pid 7220) Use of int in maxseg socket option. [ 101.230773][ T7220] Use struct sctp_assoc_value instead [ 101.558077][ T7237] xt_TPROXY: Can be used only with -p tcp or -p udp [ 102.264425][ T7282] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 102.303666][ T7284] xt_TPROXY: Can be used only with -p tcp or -p udp [ 102.329417][ T7287] netlink: 'syz.1.371': attribute type 21 has an invalid length. [ 102.338083][ T7287] __nla_validate_parse: 8 callbacks suppressed [ 102.338109][ T7287] netlink: 132 bytes leftover after parsing attributes in process `syz.1.371'. [ 102.509030][ T7303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 102.642636][ T7307] tap0: tun_chr_ioctl cmd 1074025676 [ 102.648258][ T7307] tap0: owner set to 0 [ 102.791513][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.3.380'. [ 103.011411][ T7322] netlink: 108 bytes leftover after parsing attributes in process `syz.3.381'. [ 103.261766][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 103.295276][ T7330] tipc: Started in network mode [ 103.303595][ T7330] tipc: Node identity fffffffd, cluster identity 4711 [ 103.321501][ T7330] tipc: Node number set to 4294967293 [ 103.642015][ T7358] netlink: 'syz.2.392': attribute type 11 has an invalid length. [ 103.660202][ T7361] atomic_op ffff888056f07998 conn xmit_atomic 0000000000000000 [ 103.714525][ T7361] atomic_op ffff888054a5c198 conn xmit_atomic 0000000000000000 [ 103.733855][ T7361] atomic_op ffff888054a5b198 conn xmit_atomic 0000000000000000 [ 103.742102][ T7361] atomic_op ffff888054a59998 conn xmit_atomic 0000000000000000 [ 103.751749][ T7361] atomic_op ffff888054a5a198 conn xmit_atomic 0000000000000000 [ 103.859124][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.395'. [ 103.894242][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 103.904628][ T7373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 103.921811][ T7373] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 104.561922][ T7401] macvlan0: entered promiscuous mode [ 104.598045][ T7397] syzkaller0: entered promiscuous mode [ 104.603736][ T7397] syzkaller0: entered allmulticast mode [ 106.807822][ T7365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 107.063217][ T7437] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 107.201485][ T7441] syzkaller1: entered promiscuous mode [ 107.207683][ T7441] syzkaller1: entered allmulticast mode [ 107.364980][ T7451] netlink: 'syz.0.411': attribute type 10 has an invalid length. [ 107.386415][ T7451] syz_tun: entered promiscuous mode [ 107.405568][ T7451] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 107.777223][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.416'. [ 107.877751][ T7476] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 107.924937][ T7476] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 107.951279][ T7476] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 107.971415][ T7476] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 107.990331][ T7476] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 108.018913][ T7476] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 108.038292][ T7476] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 108.058984][ T7476] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 108.067491][ T7476] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 108.315407][ T7495] syzkaller0: entered promiscuous mode [ 108.353182][ T7495] syzkaller0: entered allmulticast mode [ 108.374509][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 108.393119][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 108.409775][ T7498] netlink: 36 bytes leftover after parsing attributes in process `syz.0.424'. [ 108.470107][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 108.499354][ T7501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.424'. [ 108.519591][ T7501] netlink: 36 bytes leftover after parsing attributes in process `syz.0.424'. [ 109.245052][ T7539] netlink: 200 bytes leftover after parsing attributes in process `syz.4.439'. [ 109.374124][ T7541] netlink: 132 bytes leftover after parsing attributes in process `syz.3.440'. [ 109.423274][ T7546] xt_hashlimit: size too large, truncated to 1048576 [ 109.835124][ T7562] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 110.336094][ T7592] netlink: 256 bytes leftover after parsing attributes in process `syz.4.456'. [ 110.552739][ T7608] block nbd0: not configured, cannot reconfigure [ 110.599023][ T7615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.618623][ T7615] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 110.643213][ T7615] bond0: (slave gre0): Error -95 calling set_mac_address [ 110.966395][ T7634] ipt_REJECT: TCP_RESET invalid for non-tcp [ 110.966844][ T7632] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.180615][ T7643] 8021q: VLANs not supported on lo [ 111.424775][ T7650] bond1: option miimon: invalid value (18446744073709551614) [ 111.451704][ T7650] bond1: option miimon: allowed values 0 - 2147483647 [ 111.460807][ T7650] bond1 (unregistering): Released all slaves [ 111.518218][ T7659] IPv6: sit1: Disabled Multicast RS [ 111.870459][ T7677] Bluetooth: MGMT ver 1.23 [ 112.370423][ T7708] validate_nla: 64 callbacks suppressed [ 112.370444][ T7708] netlink: 'syz.2.488': attribute type 5 has an invalid length. [ 112.455882][ T7721] netlink: 'syz.4.492': attribute type 1 has an invalid length. [ 112.609500][ T7721] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.037343][ T7755] netlink: 'syz.3.498': attribute type 17 has an invalid length. [ 113.045528][ T7755] __nla_validate_parse: 13 callbacks suppressed [ 113.045545][ T7755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.498'. [ 113.076803][ T7755] netlink: 28 bytes leftover after parsing attributes in process `syz.3.498'. [ 113.412228][ T7775] bond1: option fail_over_mac: invalid value (16) [ 113.423100][ T7775] bond1 (unregistering): Released all slaves [ 115.510254][ T7726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.131155][ T7837] openvswitch: netlink: IP tunnel dst address not specified [ 116.301343][ T7849] netlink: 'syz.2.514': attribute type 10 has an invalid length. [ 116.336974][ T7849] team0: Device vxcan1 is of different type [ 116.651169][ T7864] bond1: entered promiscuous mode [ 117.179386][ T7897] netlink: 4 bytes leftover after parsing attributes in process `syz.4.529'. [ 117.500692][ T7915] netlink: 20 bytes leftover after parsing attributes in process `syz.4.535'. [ 117.577824][ T7915] netlink: 24 bytes leftover after parsing attributes in process `syz.4.535'. [ 117.835295][ T7933] netlink: 'syz.1.539': attribute type 16 has an invalid length. [ 117.858153][ T7933] netlink: 20 bytes leftover after parsing attributes in process `syz.1.539'. [ 117.917278][ T7940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.543'. [ 117.924925][ T7933] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 117.942815][ T7933] xt_SECMARK: invalid mode: 9 [ 117.993212][ T7939] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.542'. [ 118.137254][ T7953] syzkaller1: entered allmulticast mode [ 118.454041][ T7971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.551'. [ 118.459358][ T7970] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.478393][ T7970] bridge_slave_0 (unregistering): left allmulticast mode [ 118.487171][ T7970] bridge_slave_0 (unregistering): left promiscuous mode [ 118.498405][ T7970] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.591419][ T7975] netlink: 32 bytes leftover after parsing attributes in process `syz.0.552'. [ 118.605146][ T7976] netlink: 'syz.0.552': attribute type 1 has an invalid length. [ 118.656272][ T7976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.905218][ T7992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.558'. [ 118.918073][ T7992] veth1_macvtap: left promiscuous mode [ 118.926190][ T7992] macsec0: entered promiscuous mode [ 119.097232][ T8001] xt_l2tp: unknown flags: 10 [ 119.104811][ T8003] netlink: 32 bytes leftover after parsing attributes in process `syz.2.561'. [ 119.117118][ T8004] xt_socket: unknown flags 0x50 [ 119.548093][ T8037] netlink: 'syz.0.571': attribute type 1 has an invalid length. [ 119.577017][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 119.590837][ T8037] netlink: 228 bytes leftover after parsing attributes in process `syz.0.571'. [ 119.593544][ T8043] netlink: 'syz.2.572': attribute type 1 has an invalid length. [ 119.609972][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.570'. [ 119.624514][ T8040] netlink: 'syz.1.570': attribute type 15 has an invalid length. [ 119.670779][ T8048] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.572'. [ 119.680817][ T8045] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 119.742263][ T8043] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.773534][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.570'. [ 119.816638][ T8053] netlink: 104 bytes leftover after parsing attributes in process `syz.3.575'. [ 119.830327][ T8048] bond2: (slave geneve3): making interface the new active one [ 119.849714][ T8040] netlink: 'syz.1.570': attribute type 15 has an invalid length. [ 119.866346][ T8048] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 119.877713][ T58] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 119.894307][ T58] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 119.922912][ T8053] macvtap1: entered allmulticast mode [ 119.928425][ T8053] veth0_macvtap: entered allmulticast mode [ 119.945281][ T58] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 120.002270][ T447] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 120.388688][ T8089] 8021q: VLANs not supported on wg0 [ 120.699994][ T8113] syzkaller0: entered promiscuous mode [ 120.713155][ T8113] syzkaller0: entered allmulticast mode [ 121.199013][ T8142] SET target dimension over the limit! [ 121.236799][ T8142] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 122.604179][ T8221] openvswitch: netlink: IP tunnel dst address not specified [ 123.295105][ T8251] : entered promiscuous mode [ 123.403771][ T8261] netlink: 'syz.2.637': attribute type 21 has an invalid length. [ 123.421649][ T8265] netlink: 'syz.4.634': attribute type 1 has an invalid length. [ 123.450962][ T8248] macvtap1: entered promiscuous mode [ 123.456855][ T8248] vlan0: entered promiscuous mode [ 123.462847][ T8248] macvtap1: entered allmulticast mode [ 123.468335][ T8248] vlan0: entered allmulticast mode [ 123.478676][ T8248] veth0_vlan: entered allmulticast mode [ 123.706771][ T8275] wg1 speed is unknown, defaulting to 1000 [ 123.716389][ T8275] wg1 speed is unknown, defaulting to 1000 [ 123.745743][ T8277] __nla_validate_parse: 16 callbacks suppressed [ 123.745763][ T8277] netlink: 8 bytes leftover after parsing attributes in process `syz.4.639'. [ 123.773446][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.640'. [ 123.882513][ T8275] wg1 speed is unknown, defaulting to 1000 [ 123.915859][ T8282] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 123.935825][ T8282] netlink: 32 bytes leftover after parsing attributes in process `syz.2.640'. [ 123.994896][ T8295] tunl0: entered promiscuous mode [ 124.024688][ T8295] netlink: 'syz.4.645': attribute type 3 has an invalid length. [ 124.049469][ T8295] netlink: 9 bytes leftover after parsing attributes in process `syz.4.645'. [ 124.513225][ T8322] netlink: 248 bytes leftover after parsing attributes in process `syz.1.654'. [ 124.535016][ T8322] set match dimension is over the limit! [ 124.536236][ T8275] infiniband syz2: set active [ 124.548451][ T1840] wg1 speed is unknown, defaulting to 1000 [ 124.556394][ T8275] infiniband syz2: added wg1 [ 124.570424][ T8275] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 124.574814][ T8275] infiniband syz2: Couldn't open port 1 [ 124.626517][ T8275] RDS/IB: syz2: added [ 124.636330][ T8275] smc: adding ib device syz2 with port count 1 [ 124.648008][ T8275] smc: ib device syz2 port 1 has no pnetid [ 124.661191][ T1840] wg1 speed is unknown, defaulting to 1000 [ 124.684786][ T8275] wg1 speed is unknown, defaulting to 1000 [ 124.794767][ T8331] syzkaller1: entered promiscuous mode [ 124.802466][ T8331] syzkaller1: entered allmulticast mode [ 125.253232][ T8275] wg1 speed is unknown, defaulting to 1000 [ 125.603286][ T8373] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.934999][ T8275] wg1 speed is unknown, defaulting to 1000 [ 125.989031][ T8388] netlink: 'syz.1.671': attribute type 2 has an invalid length. [ 126.295552][ T8363] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 126.424179][ T8411] tipc: Started in network mode [ 126.447853][ T8411] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 126.485906][ T8411] tipc: Enabled bearer , priority 10 [ 126.526260][ T8420] tipc: Failed to remove unknown binding: 66,0,0/0:4270075457/4270075458 [ 126.548927][ T8420] tipc: Failed to remove unknown binding: 66,0,0/0:4270075457/4270075458 [ 126.651139][ T8423] netlink: 'syz.1.680': attribute type 33 has an invalid length. [ 126.671766][ T8275] wg1 speed is unknown, defaulting to 1000 [ 127.302504][ T8275] wg1 speed is unknown, defaulting to 1000 [ 127.305152][ T8454] netlink: 7 bytes leftover after parsing attributes in process `syz.0.686'. [ 127.420344][ T8454] erspan0: entered promiscuous mode [ 127.555918][ T8464] netlink: 4 bytes leftover after parsing attributes in process `syz.1.687'. [ 127.620322][ T8464] veth0_macvtap: left promiscuous mode [ 127.757658][ T42] tipc: Node number set to 4269801492 [ 127.943574][ T8475] netlink: 'syz.4.691': attribute type 1 has an invalid length. [ 127.979735][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.693'. [ 128.013714][ T8479] netlink: 60 bytes leftover after parsing attributes in process `syz.0.693'. [ 128.026186][ T8479] netlink: 12 bytes leftover after parsing attributes in process `syz.0.693'. [ 128.089542][ T8484] netlink: 'syz.2.694': attribute type 3 has an invalid length. [ 128.157446][ T8481] bond5: (slave bridge2): making interface the new active one [ 128.166485][ T8481] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 128.408466][ T8507] netlink: 'syz.4.697': attribute type 1 has an invalid length. [ 128.775387][ T8518] __nla_validate_parse: 6 callbacks suppressed [ 128.775407][ T8518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.703'. [ 128.958697][ T8530] IPv6: addrconf: prefix option has invalid lifetime [ 128.965689][ T8530] IPv6: addrconf: prefix option has invalid lifetime [ 128.971990][ T8539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.706'. [ 129.006394][ T8533] macvtap0: entered promiscuous mode [ 129.105994][ T8541] IPVS: ip_vs_add_dest(): server weight less than zero [ 129.153719][ T8539] macvtap0 (unregistering): left promiscuous mode [ 129.178307][ T8551] netlink: 'syz.0.710': attribute type 39 has an invalid length. [ 129.270902][ T8547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.298936][ T8554] netlink: 'syz.0.710': attribute type 2 has an invalid length. [ 129.355129][ T8557] netlink: 'syz.4.711': attribute type 21 has an invalid length. [ 129.378168][ T8554] 9: entered promiscuous mode [ 129.389640][ T8557] netlink: 128 bytes leftover after parsing attributes in process `syz.4.711'. [ 129.422185][ T8557] netlink: 'syz.4.711': attribute type 4 has an invalid length. [ 129.472027][ T8557] netlink: 'syz.4.711': attribute type 5 has an invalid length. [ 129.487535][ T8557] netlink: 3 bytes leftover after parsing attributes in process `syz.4.711'. [ 129.714753][ T8571] block nbd2: NBD_DISCONNECT [ 129.777712][ T8580] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 129.800681][ T8571] netlink: 'syz.2.715': attribute type 10 has an invalid length. [ 129.818399][ T8571] netlink: 396 bytes leftover after parsing attributes in process `syz.2.715'. [ 129.841916][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 129.852201][ T8582] sctp: [Deprecated]: syz.3.717 (pid 8582) Use of int in max_burst socket option deprecated. [ 129.852201][ T8582] Use struct sctp_assoc_value instead [ 129.874687][ T8581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.718'. [ 129.972527][ T8586] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 130.145378][ T8588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.719'. [ 130.155722][ T8594] veth3: entered promiscuous mode [ 130.190292][ T8594] veth3: entered allmulticast mode [ 130.748417][ T8628] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.865758][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 130.914086][ T8635] netlink: 'syz.1.731': attribute type 11 has an invalid length. [ 131.061962][ T8645] syzkaller1: entered promiscuous mode [ 131.067476][ T8645] syzkaller1: entered allmulticast mode [ 131.158183][ T8658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 131.803452][ T8699] SET target dimension over the limit! [ 132.102653][ T8719] netlink: 'syz.2.750': attribute type 29 has an invalid length. [ 132.188651][ T8725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.203811][ T8725] netlink: 'syz.3.752': attribute type 83 has an invalid length. [ 132.222474][ T8727] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.261602][ T8733] netlink: 'syz.1.753': attribute type 2 has an invalid length. [ 132.408598][ T8740] tipc: New replicast peer: 255.255.255.255 [ 132.452452][ T8740] tipc: Enabled bearer , priority 10 [ 132.853696][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.860883][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.346441][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.354143][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.413373][ T8782] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 133.506830][ T8777] veth0_to_team: entered promiscuous mode [ 133.531885][ T8779] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 133.575847][ T8777] veth0_to_team: left promiscuous mode [ 134.088555][ T8816] __nla_validate_parse: 39 callbacks suppressed [ 134.088577][ T8816] netlink: 40 bytes leftover after parsing attributes in process `syz.0.769'. [ 134.284715][ T8827] netlink: 4 bytes leftover after parsing attributes in process `syz.3.773'. [ 134.310114][ T8821] syz.1.772 (8821) used greatest stack depth: 17472 bytes left [ 134.365819][ T8830] netlink: 40 bytes leftover after parsing attributes in process `syz.2.774'. [ 134.380111][ T8830] netlink: 16 bytes leftover after parsing attributes in process `syz.2.774'. [ 134.526650][ T8836] syzkaller0: entered promiscuous mode [ 134.532956][ T8836] syzkaller0: entered allmulticast mode [ 134.572645][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.776'. [ 134.589742][ T8841] validate_nla: 32 callbacks suppressed [ 134.589762][ T8841] netlink: 'syz.2.777': attribute type 1 has an invalid length. [ 134.610044][ T8836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.776'. [ 135.726606][ T8883] netlink: 'syz.2.786': attribute type 1 has an invalid length. [ 135.880928][ T8898] netlink: 24 bytes leftover after parsing attributes in process `syz.3.789'. [ 136.133903][ T8907] netlink: 'syz.1.791': attribute type 1 has an invalid length. [ 136.197518][ T8912] xt_hashlimit: max too large, truncated to 1048576 [ 136.211366][ T8907] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.225860][ T8912] x_tables: ip6_tables: SYNPROXY target: used from hooks OUTPUT, but only usable from INPUT/FORWARD [ 136.297406][ T8913] bond1: (slave geneve2): making interface the new active one [ 136.346794][ T8913] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 136.375747][ T447] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.394982][ T447] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.433705][ T447] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.490529][ T1144] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 136.715822][ T8943] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.819750][ T8946] netlink: 16 bytes leftover after parsing attributes in process `syz.1.799'. [ 136.983405][ T8953] netlink: 4 bytes leftover after parsing attributes in process `syz.3.800'. [ 137.088615][ T8953] netlink: 207952 bytes leftover after parsing attributes in process `syz.3.800'. [ 137.476287][ T8979] macsec1: entered promiscuous mode [ 137.657381][ T8979] macsec1: entered promiscuous mode [ 137.778548][ T8979] macsec1: entered promiscuous mode [ 137.903890][ T8979] macsec1: entered promiscuous mode [ 137.985422][ T9009] IPv6: addrconf: prefix option has invalid lifetime [ 138.057249][ T8979] macsec1: entered promiscuous mode [ 138.212296][ T8979] macsec1: entered promiscuous mode [ 139.137992][ T9055] bond0: mtu less than device minimum [ 139.169888][ T9055] syzkaller0: entered allmulticast mode [ 139.461293][ T9074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 139.474304][ T9078] __nla_validate_parse: 5 callbacks suppressed [ 139.474320][ T9078] netlink: 32 bytes leftover after parsing attributes in process `syz.3.833'. [ 139.871147][ T9099] netlink: 'syz.3.837': attribute type 2 has an invalid length. [ 140.032321][ T9103] netlink: 'syz.1.841': attribute type 1 has an invalid length. [ 140.134415][ T9108] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.142939][ T9110] netlink: 20 bytes leftover after parsing attributes in process `syz.4.843'. [ 140.255232][ T9117] netlink: 'syz.3.844': attribute type 4 has an invalid length. [ 140.282447][ T9120] netlink: 104 bytes leftover after parsing attributes in process `syz.2.846'. [ 140.301555][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.845'. [ 140.433639][ T9128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.844'. [ 141.024124][ T9158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.054903][ T9166] x_tables: ip_tables: ah match: only valid for protocol 51 [ 141.177515][ T9172] netlink: 220 bytes leftover after parsing attributes in process `syz.2.858'. [ 141.222031][ T9177] netlink: 220 bytes leftover after parsing attributes in process `syz.2.858'. [ 141.266293][ T9176] xt_ecn: cannot match TCP bits for non-tcp packets [ 141.476077][ T9194] netlink: 'syz.2.867': attribute type 1 has an invalid length. [ 141.484600][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.867'. [ 141.494943][ T9194] netlink: 658 bytes leftover after parsing attributes in process `syz.2.867'. [ 141.505145][ T9194] netlink: 'syz.2.867': attribute type 1 has an invalid length. [ 141.768954][ T9213] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 141.782232][ T9213] netlink: 'syz.0.870': attribute type 3 has an invalid length. [ 141.794124][ T9213] netlink: 'syz.0.870': attribute type 3 has an invalid length. [ 141.841948][ T9213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.870'. [ 141.950851][ T9224] netlink: 'syz.0.870': attribute type 1 has an invalid length. [ 142.424900][ T9246] wg1 speed is unknown, defaulting to 1000 [ 142.554542][ T9260] netlink: 'syz.2.883': attribute type 1 has an invalid length. [ 142.790687][ T9274] veth0: entered promiscuous mode [ 142.809673][ T9274] veth0: left promiscuous mode [ 143.440110][ T9301] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.457710][ T9302] xt_CT: You must specify a L4 protocol and not use inversions on it [ 143.856503][ T9288] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 144.019908][ T9320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.103893][ T9321] netlink: 'syz.3.904': attribute type 10 has an invalid length. [ 144.158301][ T9321] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.200005][ T9321] bridge_slave_1: left allmulticast mode [ 144.207178][ T9321] bridge_slave_1: left promiscuous mode [ 144.213570][ T9321] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.348719][ T9338] .`: renamed from bond0 (while UP) [ 144.536819][ T9354] __nla_validate_parse: 13 callbacks suppressed [ 144.536839][ T9354] netlink: 20 bytes leftover after parsing attributes in process `syz.0.915'. [ 144.792835][ T9368] netlink: 24 bytes leftover after parsing attributes in process `syz.0.919'. [ 144.840066][ T9372] netlink: 56 bytes leftover after parsing attributes in process `syz.4.921'. [ 144.887277][ T9378] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 144.905313][ T9374] syzkaller0: entered promiscuous mode [ 144.919712][ T9374] syzkaller0: entered allmulticast mode [ 144.933188][ T9368] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'. [ 144.940129][ T9369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'. [ 145.084549][ T9382] validate_nla: 2 callbacks suppressed [ 145.084567][ T9382] netlink: 'syz.4.924': attribute type 20 has an invalid length. [ 145.101103][ T9387] netlink: 'syz.4.924': attribute type 20 has an invalid length. [ 145.110419][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.924'. [ 145.120881][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.924'. [ 145.141826][ T1144] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.153067][ T9387] netlink: 'syz.4.924': attribute type 20 has an invalid length. [ 145.161022][ T1144] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.172399][ T9382] netlink: 'syz.4.924': attribute type 20 has an invalid length. [ 145.184042][ T9382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.924'. [ 145.195071][ T1144] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.207007][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.924'. [ 145.216633][ T1144] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.545465][ T9356] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.794046][ T9418] netlink: 220 bytes leftover after parsing attributes in process `syz.4.929'. [ 147.836818][ T9418] netlink: 'syz.4.929': attribute type 2 has an invalid length. [ 148.295845][ T9456] netlink: 'syz.0.944': attribute type 1 has an invalid length. [ 148.313145][ T9451] bond3: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 148.332256][ T9451] bond3 (unregistering): Released all slaves [ 148.589046][ T9476] netlink: 'syz.2.947': attribute type 33 has an invalid length. [ 148.688879][ T9482] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 149.081988][ T9506] netlink: 'syz.3.955': attribute type 4 has an invalid length. [ 149.223809][ T9516] netlink: 'syz.2.959': attribute type 1 has an invalid length. [ 149.238973][ T9516] netlink: 'syz.2.959': attribute type 3 has an invalid length. [ 149.342069][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 149.356921][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 149.393674][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 149.408974][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 149.789544][ T9551] wg1 speed is unknown, defaulting to 1000 [ 150.002285][ T9567] __nla_validate_parse: 11 callbacks suppressed [ 150.002303][ T9567] netlink: 2 bytes leftover after parsing attributes in process `syz.0.973'. [ 150.053654][ T9567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.076722][ T9567] bond0: (slave geneve3): making interface the new active one [ 150.086369][ T9567] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 150.148453][ T9574] netlink: 16 bytes leftover after parsing attributes in process `syz.1.976'. [ 150.757306][ T9586] bond6: entered allmulticast mode [ 150.778015][ T9590] netlink: 20 bytes leftover after parsing attributes in process `syz.4.978'. [ 150.800904][ T9603] netlink: 220 bytes leftover after parsing attributes in process `syz.2.982'. [ 150.830582][ T9586] netlink: 48 bytes leftover after parsing attributes in process `syz.4.978'. [ 150.842186][ T9598] validate_nla: 4 callbacks suppressed [ 150.842203][ T9598] netlink: 'syz.3.981': attribute type 29 has an invalid length. [ 150.898693][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.981'. [ 150.941475][ T9597] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.980'. [ 150.964405][ T9607] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.063859][ T9607] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 151.534868][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.987'. [ 151.538145][ T9634] netlink: 40 bytes leftover after parsing attributes in process `syz.1.990'. [ 151.690278][ T9638] openvswitch: netlink: IP tunnel dst address not specified [ 151.927860][ T9658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.997'. [ 151.953379][ T9658] xfrm1: entered promiscuous mode [ 151.958571][ T9658] xfrm1: entered allmulticast mode [ 152.000368][ T9657] syzkaller1: entered promiscuous mode [ 152.009055][ T9657] syzkaller1: entered allmulticast mode [ 152.192981][ T9679] netlink: 'syz.3.1001': attribute type 11 has an invalid length. [ 152.378014][ T9689] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 152.393467][ T9693] Driver unsupported XDP return value 0 on prog (id 168) dev N/A, expect packet loss! [ 152.436219][ T9696] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.448239][ T9697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.782143][ T9714] netlink: 'syz.0.1014': attribute type 1 has an invalid length. [ 152.874968][ T9722] netlink: 'syz.1.1015': attribute type 1 has an invalid length. [ 152.948575][ T9715] netlink: 'syz.0.1014': attribute type 1 has an invalid length. [ 153.729932][ T5144] Bluetooth: hci2: command tx timeout [ 154.284838][ T9810] netlink: 'syz.0.1040': attribute type 2 has an invalid length. [ 154.716424][ T9834] bridge_slave_1: default FDB implementation only supports local addresses [ 154.769914][ T9836] netlink: 'syz.4.1048': attribute type 4 has an invalid length. [ 154.818382][ T9836] netlink: 'syz.4.1048': attribute type 1 has an invalid length. [ 154.950978][ T9841] syzkaller0: entered promiscuous mode [ 154.962451][ T9841] syzkaller0: entered allmulticast mode [ 155.341078][ T9844] __nla_validate_parse: 12 callbacks suppressed [ 155.341093][ T9844] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1050'. [ 155.776093][ T9876] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1056'. [ 155.827481][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1057'. [ 155.842645][ T9879] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 157.715041][ T9836] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 157.734021][ T9847] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1050'. [ 157.916267][ T9911] netlink: 'syz.0.1065': attribute type 4 has an invalid length. [ 157.924669][ T9913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1066'. [ 157.954304][ T9913] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1066'. [ 158.089675][ T9917] netlink: 'syz.1.1064': attribute type 3 has an invalid length. [ 158.097854][ T9917] netlink: 'syz.1.1064': attribute type 3 has an invalid length. [ 158.226226][ T9933] netlink: 'syz.3.1071': attribute type 2 has an invalid length. [ 158.281131][ T9933] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1071'. [ 158.301275][ T9936] netlink: 'syz.4.1072': attribute type 10 has an invalid length. [ 158.312551][ T9933] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1071'. [ 158.344481][ T9936] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 158.362556][ T9938] syzkaller0: entered promiscuous mode [ 158.368361][ T9938] syzkaller0: entered allmulticast mode [ 158.376842][ T9942] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1071'. [ 158.603844][ T9948] IPVS: set_ctl: invalid protocol: 98 224.0.0.2:20001 [ 158.658650][ T9955] syzkaller1: entered promiscuous mode [ 158.671467][ T9955] syzkaller1: entered allmulticast mode [ 158.784711][ T9967] openvswitch: netlink: IP tunnel dst address not specified [ 158.848619][ T9968] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1081'. [ 159.198033][ T9983] netlink: set zone limit has 4 unknown bytes [ 159.238259][ T9984] nbd: device at index 64 is going down [ 159.492048][ T5841] udevd[5841]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 159.674330][T10009] netlink: 'syz.4.1095': attribute type 5 has an invalid length. [ 159.689679][ T5921] IPVS: starting estimator thread 0... [ 159.791721][T10010] IPVS: using max 30 ests per chain, 72000 per kthread [ 159.816227][T10013] bond3 (unregistering): Released all slaves [ 160.303973][T10050] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.379640][T10056] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 160.450508][ T5144] block nbd0: Receive control failed (result -32) [ 160.495014][T10063] veth1_macvtap: left promiscuous mode [ 160.542386][T10067] __nla_validate_parse: 7 callbacks suppressed [ 160.542407][T10067] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1114'. [ 160.689127][T10083] ipt_REJECT: TCP_RESET invalid for non-tcp [ 160.892205][T10094] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1119'. [ 160.924085][T10095] netlink: zone id is out of range [ 160.943369][T10095] netlink: zone id is out of range [ 160.948590][T10095] netlink: zone id is out of range [ 160.967955][T10095] netlink: zone id is out of range [ 160.977718][T10095] netlink: zone id is out of range [ 161.046590][T10108] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1121'. [ 161.071584][T10095] netlink: zone id is out of range [ 161.119559][T10095] netlink: zone id is out of range [ 161.177763][T10112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1123'. [ 161.254690][T10117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1123'. [ 161.424956][T10129] netlink: 'syz.1.1129': attribute type 3 has an invalid length. [ 161.623272][T10144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1132'. [ 161.657160][T10144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1132'. [ 161.873093][T10159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'. [ 161.931404][T10161] syzkaller0: entered promiscuous mode [ 161.938123][T10161] syzkaller0: entered allmulticast mode [ 162.261877][T10174] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1144'. [ 162.280064][T10176] x_tables: duplicate underflow at hook 2 [ 162.298102][T10174] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1144'. [ 162.421425][T10183] netlink: 'syz.0.1148': attribute type 10 has an invalid length. [ 162.540946][T10183] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 162.650210][T10197] bond3: (slave bond_slave_1): Device is not our slave [ 162.657370][T10197] bond3: option active_slave: invalid value (bond_slave_1) [ 162.705507][T10197] bond3 (unregistering): Released all slaves [ 162.849936][ T447] wlan1: Trigger new scan to find an IBSS to join [ 162.893388][T10201] wg1 speed is unknown, defaulting to 1000 [ 162.924121][T10215] netlink: 'syz.4.1156': attribute type 1 has an invalid length. [ 163.295653][T10239] netlink: 'syz.1.1162': attribute type 10 has an invalid length. [ 163.313470][T10239] bridge_slave_1: left allmulticast mode [ 163.319680][T10239] bridge_slave_1: left promiscuous mode [ 163.325658][T10239] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.344080][T10239] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 163.378014][T10245] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.433150][T10245] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.091593][T10272] bridge3: port 1(veth3) entered blocking state [ 164.098204][T10272] bridge3: port 1(veth3) entered disabled state [ 164.105290][T10272] veth3: entered allmulticast mode [ 164.113461][T10272] veth3: entered promiscuous mode [ 164.123678][T10276] sch_fq: defrate 0 ignored. [ 164.145691][T10272] bridge3: port 2(veth0_to_bond) entered blocking state [ 164.154604][T10272] bridge3: port 2(veth0_to_bond) entered disabled state [ 164.162274][T10272] veth0_to_bond: entered allmulticast mode [ 164.173049][T10272] veth0_to_bond: entered promiscuous mode [ 164.785143][T10314] bond2: entered promiscuous mode [ 164.791449][T10314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 164.864299][T10326] bridge6: entered promiscuous mode [ 164.911417][T10326] bond2: (slave bridge6): Enslaving as an active interface with an up link [ 164.935017][T10338] x_tables: unsorted underflow at hook 3 [ 164.964398][T10334] macvlan2: entered promiscuous mode [ 164.978619][T10334] macvlan2: entered allmulticast mode [ 165.011871][T10334] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 165.630150][T10378] __nla_validate_parse: 17 callbacks suppressed [ 165.630170][T10378] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1199'. [ 165.765984][T10378] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1199'. [ 165.890539][ T447] wlan1: Trigger new scan to find an IBSS to join [ 165.984526][T10393] wg1 speed is unknown, defaulting to 1000 [ 165.994348][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1203'. [ 166.123715][T10399] ipt_ECN: cannot use operation on non-tcp rule [ 166.147879][T10399] net_ratelimit: 47 callbacks suppressed [ 166.147895][T10399] openvswitch: netlink: IP tunnel dst address not specified [ 166.768156][T10425] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1210'. [ 167.224600][T10439] gre0: entered promiscuous mode [ 167.232560][T10439] gre0: entered allmulticast mode [ 167.369082][T10449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1215'. [ 167.386237][T10448] nbd: device at index 2 is going down [ 167.697996][ T5827] udevd[5827]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 167.739697][T10470] wg1 speed is unknown, defaulting to 1000 [ 167.775526][ T5841] udevd[5841]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 167.786083][T10477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'. [ 167.822526][T10477] vlan4: entered allmulticast mode [ 168.273256][T10495] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1227'. [ 168.291296][T10496] sctp: [Deprecated]: syz.0.1228 (pid 10496) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.291296][T10496] Use struct sctp_sack_info instead [ 168.307989][T10495] openvswitch: netlink: Flow key attr not present in new flow. [ 168.904875][T10530] netlink: 'syz.4.1239': attribute type 1 has an invalid length. [ 168.931254][ T58] wlan1: Creating new IBSS network, BSSID d6:91:b1:08:0e:9d [ 168.962008][T10534] netlink: 'syz.3.1241': attribute type 33 has an invalid length. [ 169.096296][T10549] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 169.127116][T10534] bond4: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 169.146951][T10534] bond4 (unregistering): Released all slaves [ 169.232003][T10545] tipc: Started in network mode [ 169.255165][T10545] tipc: Node identity 5a12b4385aab, cluster identity 4711 [ 169.265074][T10545] tipc: Enabled bearer , priority 0 [ 169.363923][T10545] tipc: Disabling bearer [ 169.388917][T10561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 169.419927][T10561] bond7: Removing last arp target with arp_interval on [ 169.463346][T10563] syzkaller0: entered promiscuous mode [ 169.475710][T10563] syzkaller0: entered allmulticast mode [ 169.535961][T10567] xt_recent: Unsupported userspace flags (000000b1) [ 169.616671][T10571] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1251'. [ 169.688924][T10573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1252'. [ 169.868123][T10580] netlink: 'syz.4.1255': attribute type 4 has an invalid length. [ 170.033106][T10593] xt_l2tp: v2 sid > 0xffff: 1114112 [ 170.923644][T10653] __nla_validate_parse: 8 callbacks suppressed [ 170.923661][T10653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1278'. [ 170.944338][T10651] syzkaller0: entered promiscuous mode [ 170.950739][T10651] syzkaller0: entered allmulticast mode [ 170.970445][T10651] netlink: 'syz.0.1277': attribute type 2 has an invalid length. [ 171.513496][T10679] syzkaller0: entered promiscuous mode [ 171.524964][T10679] syzkaller0: entered allmulticast mode [ 171.743482][T10696] netlink: 'syz.0.1291': attribute type 11 has an invalid length. [ 171.751840][T10696] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1291'. [ 173.081136][T10689] veth1_macvtap: left promiscuous mode [ 173.209676][T10701] xt_l2tp: v2 doesn't support IP mode [ 173.272555][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1293'. [ 173.283026][T10701] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1293'. [ 173.386432][T10710] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1293'. [ 174.751168][T10721] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1295'. [ 174.808068][T10721] vlan2: entered allmulticast mode [ 174.814277][T10721] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 175.255117][T10749] ipt_rpfilter: unknown options [ 175.475247][T10770] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.1314'. [ 175.527996][T10771] vlan2: entered promiscuous mode [ 175.533770][T10771] vlan2: entered allmulticast mode [ 175.538923][T10771] hsr_slave_1: entered allmulticast mode [ 175.852039][T10795] xt_ecn: cannot match TCP bits for non-tcp packets [ 176.689874][T10824] vcan0: entered allmulticast mode [ 176.801709][T10838] netlink: 'syz.1.1333': attribute type 10 has an invalid length. [ 176.843738][T10838] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 176.883456][T10830] netlink: 'syz.3.1331': attribute type 10 has an invalid length. [ 176.892017][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'. [ 176.922327][T10843] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.224786][T10858] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1339'. [ 177.366905][T10868] netlink: 'syz.0.1340': attribute type 21 has an invalid length. [ 177.423217][T10868] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1340'. [ 177.509886][T10868] netlink: 700 bytes leftover after parsing attributes in process `syz.0.1340'. [ 177.523945][T10868] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1340'. [ 177.553346][T10868] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1340'. [ 177.596785][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1340'. [ 177.935122][T10895] xt_socket: unknown flags 0x50 [ 178.035038][T10905] netlink: 294 bytes leftover after parsing attributes in process `syz.3.1350'. [ 178.071983][T10905] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.139853][T10906] bond8 (unregistering): Released all slaves [ 178.277139][T10918] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1355'. [ 178.856875][T10952] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1364'. [ 179.344449][T10977] syzkaller0: entered promiscuous mode [ 179.369314][T10977] syzkaller0: entered allmulticast mode [ 179.768850][T11005] team0: Cannot enslave team device to itself [ 179.782960][T11004] 0: renamed from hsr_slave_1 (while UP) [ 179.820756][T11004] 0: entered allmulticast mode [ 179.827970][T11004] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 179.847691][T11012] netlink: 'syz.1.1379': attribute type 3 has an invalid length. [ 180.071268][T11026] openvswitch: netlink: Invalid VLAN frame [ 180.073622][T11021] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 180.096425][T11021] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.108519][T11021] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.292020][T11021] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 180.304991][T11021] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.316445][T11021] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.435645][T11021] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 180.447970][T11021] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.459130][T11021] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.562213][T11021] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 180.573631][T11021] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.587178][T11021] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.907767][ T447] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 256 - 0 [ 180.925759][ T447] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.935403][ T447] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 181.003113][ T447] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 256 - 0 [ 181.040092][ T447] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.059523][ T447] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 181.131920][ T447] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 256 - 0 [ 181.155744][ T447] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.181673][ T447] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 181.212337][ T447] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 256 - 0 [ 181.229460][ T447] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 181.254041][ T447] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 181.277937][T11083] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 181.281249][T11092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 181.336101][T11097] xt_cgroup: path and classid specified [ 181.975583][T11140] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 182.211060][T11153] syzkaller1: entered promiscuous mode [ 182.238079][T11153] syzkaller1: entered allmulticast mode [ 182.540880][T11182] __nla_validate_parse: 3 callbacks suppressed [ 182.540898][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1423'. [ 182.586805][T11182] hsr_slave_0: left promiscuous mode [ 182.600044][T11182] hsr_slave_1: left promiscuous mode [ 182.635542][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 182.657080][T11187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1426'. [ 182.669723][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 182.858655][T11190] syzkaller1: entered promiscuous mode [ 182.881918][T11190] syzkaller1: entered allmulticast mode [ 182.934076][T11207] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1430'. [ 182.945359][T11207] openvswitch: netlink: Flow key attr not present in new flow. [ 183.103762][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'. [ 183.113196][T11213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1431'. [ 183.312571][T11219] bond8: (slave gre0): Device is not bonding slave [ 183.319522][T11219] bond8: option active_slave: invalid value (gre0) [ 183.327398][T11219] bond8 (unregistering): Released all slaves [ 183.636318][T11236] netlink: 'syz.4.1436': attribute type 2 has an invalid length. [ 183.648876][T11236] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1436'. [ 183.702672][T11238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 183.776036][T11239] bond3: Unable to set down delay as MII monitoring is disabled [ 183.787041][T11239] bond3 (unregistering): Released all slaves [ 183.978572][T11253] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1440'. [ 184.245603][T11265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 184.384214][T11275] wg1 speed is unknown, defaulting to 1000 [ 184.586210][T11292] netlink: 'syz.3.1454': attribute type 6 has an invalid length. [ 184.787454][T11276] wg1 speed is unknown, defaulting to 1000 [ 185.019282][T11311] batadv_slave_1: entered allmulticast mode [ 185.041968][T11320] tipc: Enabling of bearer rejected, failed to enable media [ 185.172077][T11333] Cannot find map_set index 65533 as target [ 185.670266][T11327] syzkaller0: entered promiscuous mode [ 185.682169][T11327] syzkaller0: entered allmulticast mode [ 187.556249][T11385] ip6gre1: entered promiscuous mode [ 187.578819][T11385] ip6gre1: entered allmulticast mode [ 187.779471][T11406] __nla_validate_parse: 5 callbacks suppressed [ 187.779498][T11406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1480'. [ 188.103900][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1485'. [ 188.740636][T11440] nbd: must specify a size in bytes for the device [ 188.813303][T11442] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 189.017047][T11451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1492'. [ 189.345866][T11468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1497'. [ 189.477137][T11476] syzkaller0: entered promiscuous mode [ 189.514074][T11476] syzkaller0: entered allmulticast mode [ 189.611619][T11483] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 189.770964][T11493] netlink: 'syz.4.1504': attribute type 1 has an invalid length. [ 189.867460][T11493] bond8: entered promiscuous mode [ 189.887700][T11493] 8021q: adding VLAN 0 to HW filter on device bond8 [ 190.042081][T11508] 8021q: adding VLAN 0 to HW filter on device bond8 [ 190.052334][T11508] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 190.065766][T11508] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 190.078100][T11508] bond8: (slave vti0): making interface the new active one [ 190.086060][T11508] vti0: entered promiscuous mode [ 190.092706][T11508] bond8: (slave vti0): Enslaving as an active interface with an up link [ 190.121125][T11518] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1509'. [ 191.407303][T11569] syzkaller0: entered promiscuous mode [ 191.425968][T11569] syzkaller0: entered allmulticast mode [ 191.508644][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1528'. [ 193.474624][T11618] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 193.678970][T11626] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1542'. [ 194.033761][T11645] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1550'. [ 194.066059][T11645] l2tp_ppp: sess 2/0: no socket in recv [ 194.097697][T11654] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1553'. [ 194.276562][T11664] l2tp_ppp: sess 2/0: no socket in recv [ 194.318759][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.477081][T11673] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1561'. [ 194.750822][T11688] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1567'. [ 194.774040][T11688] ------------[ cut here ]------------ [ 194.780902][T11688] memcpy: detected field-spanning write (size 32) of single field "&new->sel" at net/sched/cls_u32.c:855 (size 16) [ 194.793600][T11688] WARNING: net/sched/cls_u32.c:855 at u32_change+0x1da0/0x2720, CPU#1: syz.3.1567/11688 [ 194.804841][T11688] Modules linked in: [ 194.809518][T11688] CPU: 1 UID: 0 PID: 11688 Comm: syz.3.1567 Not tainted syzkaller #0 PREEMPT(full) [ 194.819995][T11688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 194.831027][T11688] RIP: 0010:u32_change+0x1daf/0x2720 [ 194.836458][T11688] Code: 3d b5 da 43 06 01 75 33 e8 3e 00 0e f8 eb 50 e8 37 00 0e f8 48 8d 3d a0 09 69 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 00 74 e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 12 00 0e f8 eb 24 e8 0b 00 0e f8 [ 194.856913][T11688] RSP: 0018:ffffc90002e76fc0 EFLAGS: 00010283 [ 194.863406][T11688] RAX: ffffffff89b79d79 RBX: ffff88807b9a4400 RCX: 0000000000000010 [ 194.871909][T11688] RDX: ffffffff8ce17400 RSI: 0000000000000020 RDI: ffffffff9020a720 [ 194.879962][T11688] RBP: ffffc90002e77178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 194.888232][T11688] R10: dffffc0000000000 R11: fffffbfff20232d7 R12: ffff888035d820e8 [ 194.896848][T11688] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 194.905019][T11688] FS: 00007fdbfb8e96c0(0000) GS:ffff888125560000(0000) knlGS:0000000000000000 [ 194.914080][T11688] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.921098][T11688] CR2: 00007f00084a7d58 CR3: 00000000774e6000 CR4: 00000000003526f0 [ 194.929872][T11688] Call Trace: [ 194.933183][T11688] [ 194.936154][T11688] ? __pfx_u32_change+0x10/0x10 [ 194.941101][T11688] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 194.946787][T11688] tc_new_tfilter+0xff8/0x1780 [ 194.952275][T11688] ? __pfx_tc_new_tfilter+0x10/0x10 [ 194.957527][T11688] ? __pfx_tc_new_tfilter+0x10/0x10 [ 194.962911][T11688] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 194.967888][T11688] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 194.973333][T11688] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 194.978937][T11688] ? ref_tracker_free+0x693/0x840 [ 194.984473][T11688] ? __copy_skb_header+0xa3/0x4a0 [ 194.989691][T11688] ? __pfx_ref_tracker_free+0x10/0x10 [ 194.995284][T11688] netlink_rcv_skb+0x232/0x4b0 [ 195.000125][T11688] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.005609][T11688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.011413][T11688] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.016806][T11688] netlink_unicast+0x80f/0x9b0 [ 195.021649][T11688] ? __pfx_netlink_unicast+0x10/0x10 [ 195.026966][T11688] ? netlink_sendmsg+0x650/0xb40 [ 195.032000][T11688] ? skb_put+0x11b/0x210 [ 195.036280][T11688] netlink_sendmsg+0x813/0xb40 [ 195.041404][T11688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.046786][T11688] ? aa_sock_msg_perm+0xf1/0x1b0 [ 195.051953][T11688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.057441][T11688] ____sys_sendmsg+0x972/0x9f0 [ 195.062319][T11688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.067634][T11688] ? import_iovec+0x73/0xa0 [ 195.072494][T11688] ___sys_sendmsg+0x2a5/0x360 [ 195.077369][T11688] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.082705][T11688] ? __pfx_futex_wake_mark+0x10/0x10 [ 195.088068][T11688] ? __fget_files+0x2a/0x420 [ 195.093238][T11688] ? __fget_files+0x3a0/0x420 [ 195.097976][T11688] __sys_sendmmsg+0x27c/0x4e0 [ 195.103134][T11688] ? __pfx___sys_sendmmsg+0x10/0x10 [ 195.108453][T11688] ? do_futex+0x333/0x420 [ 195.112930][T11688] ? rcu_is_watching+0x15/0xb0 [ 195.117863][T11688] __x64_sys_sendmmsg+0xa0/0xc0 [ 195.123085][T11688] do_syscall_64+0x14d/0xf80 [ 195.128048][T11688] ? trace_irq_disable+0x3b/0x150 [ 195.133533][T11688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.139884][T11688] ? clear_bhb_loop+0x40/0x90 [ 195.144693][T11688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.150714][T11688] RIP: 0033:0x7fdbfa99c799 [ 195.156057][T11688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.176177][T11688] RSP: 002b:00007fdbfb8e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 195.184725][T11688] RAX: ffffffffffffffda RBX: 00007fdbfac15fa0 RCX: 00007fdbfa99c799 [ 195.193313][T11688] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 195.201756][T11688] RBP: 00007fdbfaa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 195.209911][T11688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.218251][T11688] R13: 00007fdbfac16038 R14: 00007fdbfac15fa0 R15: 00007ffc5f28f2d8 [ 195.226431][T11688] [ 195.229950][T11688] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 195.237435][T11688] CPU: 1 UID: 0 PID: 11688 Comm: syz.3.1567 Not tainted syzkaller #0 PREEMPT(full) [ 195.247209][T11688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 195.257352][T11688] Call Trace: [ 195.260637][T11688] [ 195.263562][T11688] vpanic+0x56c/0xa60 [ 195.267727][T11688] ? __pfx__printk+0x10/0x10 [ 195.272336][T11688] ? __pfx_vpanic+0x10/0x10 [ 195.277472][T11688] ? is_bpf_text_address+0x292/0x2b0 [ 195.282809][T11688] ? is_bpf_text_address+0x26/0x2b0 [ 195.288038][T11688] panic+0xc5/0xd0 [ 195.291905][T11688] ? __pfx_panic+0x10/0x10 [ 195.296552][T11688] __warn+0x315/0x4f0 [ 195.300635][T11688] ? u32_change+0x1da0/0x2720 [ 195.305513][T11688] ? u32_change+0x1da0/0x2720 [ 195.310731][T11688] __report_bug+0x29a/0x540 [ 195.315281][T11688] ? ___sys_sendmsg+0x2a5/0x360 [ 195.320140][T11688] ? __sys_sendmmsg+0x27c/0x4e0 [ 195.325090][T11688] ? __x64_sys_sendmmsg+0xa0/0xc0 [ 195.330124][T11688] ? u32_change+0x1da0/0x2720 [ 195.334896][T11688] ? __pfx___report_bug+0x10/0x10 [ 195.340128][T11688] report_bug_entry+0x19a/0x290 [ 195.345101][T11688] ? u32_change+0x1daf/0x2720 [ 195.349808][T11688] ? u32_change+0x1db4/0x2720 [ 195.354502][T11688] handle_bug+0xce/0x200 [ 195.358757][T11688] exc_invalid_op+0x1a/0x50 [ 195.363262][T11688] asm_exc_invalid_op+0x1a/0x20 [ 195.368104][T11688] RIP: 0010:u32_change+0x1daf/0x2720 [ 195.373381][T11688] Code: 3d b5 da 43 06 01 75 33 e8 3e 00 0e f8 eb 50 e8 37 00 0e f8 48 8d 3d a0 09 69 06 b9 10 00 00 00 4c 89 f6 48 c7 c2 00 74 e1 8c <67> 48 0f b9 3a e9 af ee ff ff e8 12 00 0e f8 eb 24 e8 0b 00 0e f8 [ 195.393345][T11688] RSP: 0018:ffffc90002e76fc0 EFLAGS: 00010283 [ 195.399952][T11688] RAX: ffffffff89b79d79 RBX: ffff88807b9a4400 RCX: 0000000000000010 [ 195.407927][T11688] RDX: ffffffff8ce17400 RSI: 0000000000000020 RDI: ffffffff9020a720 [ 195.416174][T11688] RBP: ffffc90002e77178 R08: 0000000000000dc0 R09: 00000000ffffffff [ 195.424162][T11688] R10: dffffc0000000000 R11: fffffbfff20232d7 R12: ffff888035d820e8 [ 195.432143][T11688] R13: 0000000000000001 R14: 0000000000000020 R15: 0000000000000001 [ 195.440151][T11688] ? u32_change+0x1d99/0x2720 [ 195.444857][T11688] ? __pfx_u32_change+0x10/0x10 [ 195.449707][T11688] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 195.455359][T11688] tc_new_tfilter+0xff8/0x1780 [ 195.460144][T11688] ? __pfx_tc_new_tfilter+0x10/0x10 [ 195.465367][T11688] ? __pfx_tc_new_tfilter+0x10/0x10 [ 195.470923][T11688] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 195.476042][T11688] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 195.481166][T11688] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.486628][T11688] ? ref_tracker_free+0x693/0x840 [ 195.491777][T11688] ? __copy_skb_header+0xa3/0x4a0 [ 195.496888][T11688] ? __pfx_ref_tracker_free+0x10/0x10 [ 195.502274][T11688] netlink_rcv_skb+0x232/0x4b0 [ 195.507048][T11688] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 195.512599][T11688] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.517990][T11688] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.523643][T11688] netlink_unicast+0x80f/0x9b0 [ 195.528417][T11688] ? __pfx_netlink_unicast+0x10/0x10 [ 195.533698][T11688] ? netlink_sendmsg+0x650/0xb40 [ 195.538821][T11688] ? skb_put+0x11b/0x210 [ 195.543079][T11688] netlink_sendmsg+0x813/0xb40 [ 195.547934][T11688] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.553310][T11688] ? aa_sock_msg_perm+0xf1/0x1b0 [ 195.558245][T11688] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 195.563524][T11688] ____sys_sendmsg+0x972/0x9f0 [ 195.568291][T11688] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.573711][T11688] ? import_iovec+0x73/0xa0 [ 195.578277][T11688] ___sys_sendmsg+0x2a5/0x360 [ 195.582972][T11688] ? __pfx____sys_sendmsg+0x10/0x10 [ 195.588176][T11688] ? __pfx_futex_wake_mark+0x10/0x10 [ 195.593572][T11688] ? __fget_files+0x2a/0x420 [ 195.598194][T11688] ? __fget_files+0x3a0/0x420 [ 195.603065][T11688] __sys_sendmmsg+0x27c/0x4e0 [ 195.607752][T11688] ? __pfx___sys_sendmmsg+0x10/0x10 [ 195.612993][T11688] ? do_futex+0x333/0x420 [ 195.617344][T11688] ? rcu_is_watching+0x15/0xb0 [ 195.622131][T11688] __x64_sys_sendmmsg+0xa0/0xc0 [ 195.627012][T11688] do_syscall_64+0x14d/0xf80 [ 195.631603][T11688] ? trace_irq_disable+0x3b/0x150 [ 195.636721][T11688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.642965][T11688] ? clear_bhb_loop+0x40/0x90 [ 195.647742][T11688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.653723][T11688] RIP: 0033:0x7fdbfa99c799 [ 195.658134][T11688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.678362][T11688] RSP: 002b:00007fdbfb8e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 195.686972][T11688] RAX: ffffffffffffffda RBX: 00007fdbfac15fa0 RCX: 00007fdbfa99c799 [ 195.695040][T11688] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 195.703044][T11688] RBP: 00007fdbfaa32c99 R08: 0000000000000000 R09: 0000000000000000 [ 195.711051][T11688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.719124][T11688] R13: 00007fdbfac16038 R14: 00007fdbfac15fa0 R15: 00007ffc5f28f2d8 [ 195.727392][T11688] [ 195.731121][T11688] Kernel Offset: disabled [ 195.735526][T11688] Rebooting in 86400 seconds..