last executing test programs: 3.078216321s ago: executing program 3 (id=1395): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) recvmmsg(r5, &(0x7f0000005300)=[{{0x0, 0x0, 0x0}, 0xb}, {{&(0x7f0000001fc0)=@ethernet={0x0, @multicast}, 0x80, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xffffffff}], 0x3, 0x100, &(0x7f00000054c0)={0x77359400}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r4, {0x2, 0x1}, {0x5, 0x10}, {0xd, 0x3}}}, 0x2f}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0xa0000001}) 2.650138318s ago: executing program 3 (id=1399): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r4}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.240143241s ago: executing program 3 (id=1403): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x8, 0x2, 0x2, 0x9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x3, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bind$llc(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) syz_emit_ethernet(0x6e, 0x0, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r3, r2}) sendmsg$kcm(r1, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 2.116357779s ago: executing program 4 (id=1405): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) syz_init_net_socket$x25(0x9, 0x5, 0x0) 2.064049634s ago: executing program 2 (id=1407): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) 1.979828521s ago: executing program 4 (id=1408): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c8f0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x5ea, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @multicast}, 0x14) 1.959353912s ago: executing program 2 (id=1409): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234784900527800", "12347800000000002000", '\x00', "1234567812345678"}, 0x28) sendto$inet(r1, 0x0, 0x0, 0x40, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x4000, 0x40, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x0, 0x0, 0x0) 1.876054107s ago: executing program 1 (id=1410): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0x8000}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1010000007c0004060000000000bf852c8986626691b01b5f44e4ce287128"], 0xe0}], 0x1}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40050) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x17, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @broadcast}) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xe3]}}, 0x5c) 1.548700225s ago: executing program 1 (id=1414): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x4, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r6, 0x42}, 0x80, &(0x7f0000000980)=[{&(0x7f00000001c0)='\x00\x00', 0x12}, {&(0x7f0000000480)="34058a63c4934da4b9a24af8fcfa583c373d", 0x12}], 0x2}, 0x2000600d) 1.529872971s ago: executing program 4 (id=1415): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000707000/0x2000)=nil, 0x2000, 0x3, 0x12, r1, 0xc3ceb000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x8fbc0e6f77c18ed3, 0x11, r4, 0x70fa0000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) 1.384091112s ago: executing program 1 (id=1417): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x40000) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 1.370929256s ago: executing program 4 (id=1418): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x3e, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x4c}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2c3f, 0x3, 0x20000000, 0x2, 0x7}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc14a888004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.26341166s ago: executing program 1 (id=1420): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@ipv4_newaddr={0x18, 0x14, 0x300, 0x70bd2a, 0x25dfdbfb, {0x2, 0x20, 0x9a}}, 0x18}, 0x1, 0x0, 0x0, 0x400c001}, 0x8004) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x12, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000009feffff720a00fef8ffffff71a400fe0000000071101000000000001d410200000000004704000001ed030407000000c00000001d440000000000006b0a00fe000000007203"], 0x0}, 0x94) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) 1.26297986s ago: executing program 3 (id=1421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfdfffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff, 0xffff}, {0xfff1, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x3c0d, 0x5, 0xe4, 0x5}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x10000, 0x8, 0xbb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x7, [0xc, 0xb, 0x5, 0x5, 0x1, 0xd, 0x1, 0x8, 0xa, 0x4, 0xb, 0xa, 0x10, 0x6, 0x2], 0x9, [0x78ec, 0x400, 0x3c09, 0x8733, 0x4, 0x4054, 0x4, 0x24, 0x1, 0xbe7, 0x9, 0x8, 0x1, 0x6, 0x1, 0xfffa], [0x1, 0x3, 0x8000, 0x6, 0x7, 0x4692, 0x7, 0x7fff, 0x2, 0x6, 0x9a, 0x3, 0x8, 0x7f, 0x6, 0x4]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x24008890}, 0x4000080) 1.214587612s ago: executing program 0 (id=1422): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40) socket$inet6(0xa, 0x802, 0x0) epoll_create1(0x80000) 1.056569512s ago: executing program 0 (id=1423): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x48000) recvmsg$can_raw(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@netkit}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.01428293s ago: executing program 2 (id=1424): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x437b, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="9ad0c7c5ea8ded2f36d411b49aed248f010cf36989bcf6f373", 0x19}], 0x1}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x7, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x9e, 0x6a, 0xa, 0xff49}}, 0x0, 0x2}, 0x94) 985.606976ms ago: executing program 3 (id=1425): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000500)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x8d4) 872.690756ms ago: executing program 2 (id=1426): socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xf8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=@framed, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtclass={0x40, 0x28, 0x100, 0x50bd2e, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff2}, {0xa, 0x1}, {0x10, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x41, 0x3}}, @TCA_RATE={0x6, 0x5, {0x0, 0x70}}, @tclass_kind_options=@c_multiq={0xb}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0x2, [{}, {}]}, 0x48) 867.386218ms ago: executing program 4 (id=1427): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000200)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x38}], 0x1}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4820, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f0000000180)={0x2, 0x0, @broadcast, 0x2}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xb0}}], 0x1, 0x4000801) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x400d4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 813.551248ms ago: executing program 0 (id=1428): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x15, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 782.764556ms ago: executing program 1 (id=1429): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x8f45f000) 761.291433ms ago: executing program 3 (id=1430): r0 = socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x60600) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, &(0x7f0000000140)}, 0x20) ppoll(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendfile(r3, 0xffffffffffffffff, 0x0, 0xffffffff000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x34, r2, 0x1, 0x70bd28, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x34}}, 0xc010) 756.112476ms ago: executing program 4 (id=1431): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000500)=0xd0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) recvmsg$can_raw(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40000003) sendmsg$NFT_MSG_GETFLOWTABLE(r1, 0x0, 0x20008004) sendmmsg$inet6(r1, 0x0, 0x0, 0x40000) 571.058753ms ago: executing program 0 (id=1432): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000180)={0x1100, 0x0, 0x52, 0x11000}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x21, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 447.530292ms ago: executing program 0 (id=1433): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1000}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 318.904488ms ago: executing program 0 (id=1434): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x800) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0x6}], 0x31680, 0x40000000, 0x0) 216.442966ms ago: executing program 1 (id=1435): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x1, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) socket$inet6_sctp(0xa, 0x6, 0x84) sendfile(r0, r3, 0x0, 0x20000000002) 143.565283ms ago: executing program 2 (id=1436): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'netdevsim0\x00', 0x0}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x1c, 0x6a, 0x0, 0x6, 0x2, 0x0, @private=0xa010102, @local}, {0x16, 0xfb, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400001d000080000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32, @ANYBLOB="080004"], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@getqdisc={0x38, 0x26, 0x0, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfff3, 0xfff2}, {0x9, 0x8}, {0xffff, 0x8}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'veth1_to_hsr\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x4a88, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x10, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x40}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x7fffffff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) sendmsg$nl_route_sched(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) 0s ago: executing program 2 (id=1437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f00000006c0)=[{0x0}, {&(0x7f00000002c0)="37a0a6c482b23cba92ffffff3f7b42590e180c07f3c193b532f3080000008c191f", 0x21}], 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x5}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.50' (ED25519) to the list of known hosts. [ 76.594052][ T5598] cgroup: Unknown subsys name 'net' [ 76.769984][ T5598] cgroup: Unknown subsys name 'cpuset' [ 76.779198][ T5598] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.449169][ T5598] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 82.212779][ T4929] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.221874][ T4929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.233224][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.242605][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 82.251100][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 82.259573][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 82.273046][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 82.280405][ T5613] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 82.301841][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.309539][ T5613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 82.325856][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.326428][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.328634][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 82.352028][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.362872][ T5613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 82.371500][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.379806][ T5613] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 82.393657][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.401908][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 82.412278][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 82.446191][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.456194][ T5612] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 82.464607][ T5612] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 82.475105][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 82.483983][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.322550][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.330387][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.342645][ T5609] bridge_slave_0: entered allmulticast mode [ 84.351524][ T5609] bridge_slave_0: entered promiscuous mode [ 84.358083][ T4929] Bluetooth: hci1: command tx timeout [ 84.404938][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.412168][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.420087][ T5609] bridge_slave_1: entered allmulticast mode [ 84.427886][ T5609] bridge_slave_1: entered promiscuous mode [ 84.436624][ T5612] Bluetooth: hci0: command tx timeout [ 84.442676][ T4929] Bluetooth: hci2: command tx timeout [ 84.505416][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.512857][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.519974][ T4929] Bluetooth: hci3: command tx timeout [ 84.521308][ T5612] Bluetooth: hci4: command tx timeout [ 84.526767][ T5618] bridge_slave_0: entered allmulticast mode [ 84.539425][ T5618] bridge_slave_0: entered promiscuous mode [ 84.579903][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.589896][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.598429][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.605653][ T5618] bridge_slave_1: entered allmulticast mode [ 84.613142][ T5618] bridge_slave_1: entered promiscuous mode [ 84.633309][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.640857][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.648675][ T5619] bridge_slave_0: entered allmulticast mode [ 84.656194][ T5619] bridge_slave_0: entered promiscuous mode [ 84.666056][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.715237][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.722509][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.729924][ T5619] bridge_slave_1: entered allmulticast mode [ 84.737372][ T5619] bridge_slave_1: entered promiscuous mode [ 84.806681][ T5609] team0: Port device team_slave_0 added [ 84.815542][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.835524][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.843801][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.851177][ T5627] bridge_slave_0: entered allmulticast mode [ 84.858571][ T5627] bridge_slave_0: entered promiscuous mode [ 84.869773][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.881552][ T5609] team0: Port device team_slave_1 added [ 84.889922][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.915275][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.922638][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.930261][ T5627] bridge_slave_1: entered allmulticast mode [ 84.937785][ T5627] bridge_slave_1: entered promiscuous mode [ 84.947021][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.989003][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.996393][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.003596][ T5610] bridge_slave_0: entered allmulticast mode [ 85.012076][ T5610] bridge_slave_0: entered promiscuous mode [ 85.063134][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.070642][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.078327][ T5610] bridge_slave_1: entered allmulticast mode [ 85.085654][ T5610] bridge_slave_1: entered promiscuous mode [ 85.106187][ T5619] team0: Port device team_slave_0 added [ 85.114025][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.121133][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.147079][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.166367][ T5618] team0: Port device team_slave_0 added [ 85.187326][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.199535][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.210834][ T5619] team0: Port device team_slave_1 added [ 85.227662][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.234651][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.260936][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.273910][ T5618] team0: Port device team_slave_1 added [ 85.335674][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.356316][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.363434][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.389989][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.403425][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.410474][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.436761][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.461799][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.473245][ T5627] team0: Port device team_slave_0 added [ 85.482226][ T5627] team0: Port device team_slave_1 added [ 85.500492][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.507605][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.533773][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.600454][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.607698][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.633754][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.647047][ T5610] team0: Port device team_slave_0 added [ 85.670770][ T5609] hsr_slave_0: entered promiscuous mode [ 85.677880][ T5609] hsr_slave_1: entered promiscuous mode [ 85.685287][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.692525][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.718802][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.740766][ T5610] team0: Port device team_slave_1 added [ 85.770919][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.778240][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.804372][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.833193][ T5619] hsr_slave_0: entered promiscuous mode [ 85.839807][ T5619] hsr_slave_1: entered promiscuous mode [ 85.846499][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 85.852375][ T5619] Cannot create hsr debugfs directory [ 85.920761][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.928069][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.954252][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.006658][ T5618] hsr_slave_0: entered promiscuous mode [ 86.013131][ T5618] hsr_slave_1: entered promiscuous mode [ 86.020127][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 86.026060][ T5618] Cannot create hsr debugfs directory [ 86.038996][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.046162][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.072452][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.148835][ T5627] hsr_slave_0: entered promiscuous mode [ 86.155293][ T5627] hsr_slave_1: entered promiscuous mode [ 86.161783][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 86.167714][ T5627] Cannot create hsr debugfs directory [ 86.347909][ T5610] hsr_slave_0: entered promiscuous mode [ 86.354352][ T5610] hsr_slave_1: entered promiscuous mode [ 86.361186][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 86.367036][ T5610] Cannot create hsr debugfs directory [ 86.437815][ T5612] Bluetooth: hci1: command tx timeout [ 86.516908][ T4929] Bluetooth: hci0: command tx timeout [ 86.522486][ T5612] Bluetooth: hci2: command tx timeout [ 86.596279][ T5612] Bluetooth: hci4: command tx timeout [ 86.602054][ T4929] Bluetooth: hci3: command tx timeout [ 86.768460][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.781502][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.789608][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.802090][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.810112][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.821885][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.847006][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.859742][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.962356][ T5618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 86.983703][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.008964][ T5618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.023366][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.033708][ T5618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.047473][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.080080][ T5618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.092757][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.228564][ T5627] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.242841][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.251904][ T5627] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.264195][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.285169][ T5627] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.305218][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.334726][ T5627] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.345600][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.369924][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.458650][ T5619] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.469805][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.482483][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.499344][ T5619] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.515541][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.537107][ T5619] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.548600][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.563728][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.571390][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.581506][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.588714][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.611687][ T5619] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.622122][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.735354][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.747131][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.759274][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.767485][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.777877][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.790593][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.801867][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.822470][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.832338][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.888843][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.938093][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.945335][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.993161][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.000656][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.051917][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.158387][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.191517][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.199091][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.221383][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.248370][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.255555][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.324517][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.399476][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.406780][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.458563][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.478192][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.485456][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.516979][ T5612] Bluetooth: hci1: command tx timeout [ 88.596182][ T5612] Bluetooth: hci2: command tx timeout [ 88.602163][ T4929] Bluetooth: hci0: command tx timeout [ 88.630933][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.676733][ T4929] Bluetooth: hci4: command tx timeout [ 88.682258][ T5612] Bluetooth: hci3: command tx timeout [ 88.707149][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.714409][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.794141][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.801408][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.826919][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.079773][ T5609] veth0_vlan: entered promiscuous mode [ 89.152983][ T5609] veth1_vlan: entered promiscuous mode [ 89.352294][ T5609] veth0_macvtap: entered promiscuous mode [ 89.391275][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.409112][ T5609] veth1_macvtap: entered promiscuous mode [ 89.524607][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.591893][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.707089][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.744400][ T5618] veth0_vlan: entered promiscuous mode [ 89.788733][ T3310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.840011][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.882931][ T5618] veth1_vlan: entered promiscuous mode [ 90.011929][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.034494][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.111980][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.126564][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.144930][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.156858][ T5618] veth0_macvtap: entered promiscuous mode [ 90.170871][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.180862][ T5627] veth0_vlan: entered promiscuous mode [ 90.194568][ T3310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.203935][ T5618] veth1_macvtap: entered promiscuous mode [ 90.211754][ T3310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.288753][ T5627] veth1_vlan: entered promiscuous mode [ 90.314533][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.344492][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.365468][ T5609] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.418732][ T3310] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.554492][ T5627] veth0_macvtap: entered promiscuous mode [ 90.584525][ T5610] veth0_vlan: entered promiscuous mode [ 90.615026][ T4929] Bluetooth: hci1: command tx timeout [ 90.642123][ T5627] veth1_macvtap: entered promiscuous mode [ 90.679113][ T4929] Bluetooth: hci0: command tx timeout [ 90.684615][ T5612] Bluetooth: hci2: command tx timeout [ 90.724219][ T5610] veth1_vlan: entered promiscuous mode [ 90.758322][ T5612] Bluetooth: hci4: command tx timeout [ 90.763829][ T4929] Bluetooth: hci3: command tx timeout [ 90.790486][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.798847][ T1172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.819721][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.886423][ T1172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.929178][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.956590][ T5812] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 91.022097][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.049147][ T3310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.057927][ T3310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.066187][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.083180][ T5619] veth0_vlan: entered promiscuous mode [ 91.215568][ T5610] veth0_macvtap: entered promiscuous mode [ 91.262342][ T5619] veth1_vlan: entered promiscuous mode [ 91.280316][ T5610] veth1_macvtap: entered promiscuous mode [ 91.391349][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.437949][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.446209][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.530495][ T5619] veth0_macvtap: entered promiscuous mode [ 91.560782][ T969] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.581983][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.598415][ T5619] veth1_macvtap: entered promiscuous mode [ 91.602939][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.770303][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.779837][ T3310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.804713][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.813993][ T3310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.842282][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.970039][ T24] cfg80211: failed to load regulatory.db [ 91.982874][ T1172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.990973][ T35] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.054147][ T1172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.118955][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.248452][ T5824] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 92.290374][ T1172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.307883][ T1172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.329691][ T969] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.364481][ T5823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 92.444888][ T3310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.488329][ T3310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.556204][ T3310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.660249][ T3310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.679315][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.699427][ T3310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.716247][ T48] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.974316][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.997059][ T1172] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.006516][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.351716][ T5838] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11'. [ 93.461716][ T5836] netlink: 'syz.1.11': attribute type 1 has an invalid length. [ 96.192554][ T5901] syzkaller0: entered promiscuous mode [ 96.220495][ T5901] syzkaller0: entered allmulticast mode [ 97.759371][ T5930] netlink: 'syz.1.33': attribute type 1 has an invalid length. [ 99.830981][ T5911] warning: `syz.4.29' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.952131][ T5931] macvlan2: entered promiscuous mode [ 99.966474][ T5931] macvlan2: entered allmulticast mode [ 101.071692][ T5986] netlink: 24 bytes leftover after parsing attributes in process `syz.1.41'. [ 102.708579][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.717419][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.864314][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.883938][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.127106][ T1099] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.428151][ T48] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.599235][ T6028] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.862841][ T6028] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.046210][ T48] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.199559][ T6028] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.278088][ T114] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.388570][ T6028] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.709359][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.776168][ T114] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.886316][ T114] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.917422][ T114] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.296528][ T6016] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 105.326998][ T6016] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 105.341597][ T114] IPVS: starting estimator thread 0... [ 105.447007][ T6075] IPVS: using max 25 ests per chain, 60000 per kthread [ 105.716151][ T4929] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.533255][ T6016] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 106.564120][ T6016] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 106.670516][ T6016] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 106.730360][ T6016] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 106.848051][ T6016] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 106.869534][ T6016] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 106.978013][ T6016] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 107.007444][ T6016] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 107.179734][ T6124] netlink: 'syz.1.68': attribute type 1 has an invalid length. [ 107.838059][ T6132] netlink: 'syz.1.70': attribute type 12 has an invalid length. [ 109.215320][ T6159] netlink: 'syz.4.75': attribute type 2 has an invalid length. [ 109.283869][ T5612] block nbd0: Receive control failed (result -32) [ 109.283869][ T4929] block nbd0: Receive control failed (result -32) [ 111.088065][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.0.91'. [ 111.301493][ T6221] netlink: 15143 bytes leftover after parsing attributes in process `syz.1.93'. [ 113.724011][ T6282] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 114.580001][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 114.601338][ T6304] netlink: 'syz.4.120': attribute type 21 has an invalid length. [ 114.672531][ T6304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 114.685181][ T1099] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.715819][ T6304] netlink: 'syz.4.120': attribute type 21 has an invalid length. [ 114.729014][ T1099] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.759190][ T1099] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.787045][ T6304] Zero length message leads to an empty skb [ 114.806358][ T1099] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 115.825473][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.132'. [ 116.167807][ T6350] netlink: 64 bytes leftover after parsing attributes in process `syz.4.135'. [ 116.246506][ T6350] syzkaller1: entered promiscuous mode [ 116.266011][ T6350] syzkaller1: entered allmulticast mode [ 117.283895][ T6369] tipc: Started in network mode [ 117.304793][ T6369] tipc: Node identity 165137c84a53, cluster identity 4711 [ 117.330596][ T6369] tipc: Enabled bearer , priority 0 [ 117.469627][ T6371] syzkaller0: entered promiscuous mode [ 117.477459][ T6371] syzkaller0: entered allmulticast mode [ 117.484165][ T6371] tipc: Resetting bearer [ 117.602465][ T6368] tipc: Resetting bearer [ 119.805173][ T6368] tipc: Disabling bearer [ 119.859946][ T5730] tipc: Node number set to 1543649224 [ 120.387358][ T6421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.158'. [ 120.621185][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 120.693627][ T6430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.162'. [ 120.784829][ T6436] netlink: 'syz.2.164': attribute type 1 has an invalid length. [ 120.942701][ T6443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.166'. [ 120.995020][ T6436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.042512][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz.3.166'. [ 121.107544][ T6438] bond1: (slave dummy0): making interface the new active one [ 121.150688][ T6438] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 121.214718][ T6444] : renamed from dummy0 (while UP) [ 121.547154][ T6466] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.174'. [ 121.574827][ T6466] netlink: 116 bytes leftover after parsing attributes in process `syz.2.174'. [ 121.700445][ T6469] netlink: 'syz.4.176': attribute type 1 has an invalid length. [ 121.771338][ T6469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.800107][ T6469] netlink: 'syz.4.176': attribute type 10 has an invalid length. [ 121.808223][ T6469] netlink: 40 bytes leftover after parsing attributes in process `syz.4.176'. [ 121.932869][ T6483] netlink: 64 bytes leftover after parsing attributes in process `syz.4.179'. [ 121.994755][ T6486] syzkaller1: entered promiscuous mode [ 122.016127][ T6486] syzkaller1: entered allmulticast mode [ 123.253034][ T6505] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 123.361508][ T6512] syzkaller0: entered promiscuous mode [ 123.377429][ T6512] syzkaller0: entered allmulticast mode [ 123.703312][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.193'. [ 125.758617][ T6563] trusted_key: syz.4.204 sent an empty control message without MSG_MORE. [ 126.163257][ T6568] geneve2: entered promiscuous mode [ 126.357449][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 47992 - 0 [ 126.383633][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 47992 - 0 [ 126.437077][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 47992 - 0 [ 126.469133][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 47992 - 0 [ 126.653530][ T6590] ip_tables: iptables: counters copy to user failed while replacing table [ 126.671096][ T6594] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 126.688682][ T6594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.214'. [ 126.827651][ T6601] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.217'. [ 127.067170][ T6609] netlink: 256 bytes leftover after parsing attributes in process `syz.0.221'. [ 127.097074][ T6609] unsupported nlmsg_type 40 [ 127.343978][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.223'. [ 127.655418][ T6634] xt_connbytes: Forcing CT accounting to be enabled [ 127.760124][ T6623] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.768009][ T6623] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.604180][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.656758][ T6623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.006059][ T35] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.054301][ T35] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.102057][ T35] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.137236][ T35] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.414640][ T6685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.243'. [ 129.643986][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.651781][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.687113][ T6695] bridge0: entered allmulticast mode [ 129.712197][ T6698] syz_tun: entered allmulticast mode [ 129.751940][ T6695] bridge_slave_1: left allmulticast mode [ 129.764852][ T6695] bridge_slave_1: left promiscuous mode [ 129.783785][ T6695] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.831778][ T6695] bridge_slave_0: left allmulticast mode [ 129.854180][ T6695] bridge_slave_0: left promiscuous mode [ 129.872160][ T6695] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.599607][ T6732] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.675612][ T6774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.691832][ T6770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.785814][ T6779] syz.2.272 (6779) used obsolete PPPIOCDETACH ioctl [ 132.448186][ T6806] Cannot find set identified by id 0 to match [ 132.921711][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.931061][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.202176][ T6832] netlink: 'syz.1.291': attribute type 2 has an invalid length. [ 133.242889][ T6832] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.291'. [ 133.846874][ T6850] netlink: 220 bytes leftover after parsing attributes in process `syz.1.295'. [ 133.871337][ T6850] NCSI netlink: No device for ifindex 566712438 [ 134.142288][ T6855] bond2: entered promiscuous mode [ 134.148048][ T6855] bond2: entered allmulticast mode [ 134.154233][ T6855] 8021q: adding VLAN 0 to HW filter on device bond2 [ 135.080732][ T6886] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 135.147723][ T6886] batman_adv: batadv0: Adding interface: gretap1 [ 135.167145][ T6886] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 135.246099][ T6886] batman_adv: batadv0: Interface activated: gretap1 [ 135.279051][ T6896] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.371273][ T6899] netlink: 32 bytes leftover after parsing attributes in process `syz.1.311'. [ 136.083092][ T6919] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 136.124647][ T6919] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 136.451973][ T6927] netlink: 'syz.2.321': attribute type 1 has an invalid length. [ 136.610428][ T6927] 8021q: adding VLAN 0 to HW filter on device bond2 [ 136.664388][ T6940] netlink: 'syz.2.321': attribute type 10 has an invalid length. [ 136.684054][ T6940] netlink: 40 bytes leftover after parsing attributes in process `syz.2.321'. [ 136.720067][ T6939] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 136.792294][ T6932] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 136.869414][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'. [ 136.878735][ T6946] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'. [ 136.933108][ T6937] bond1: entered allmulticast mode [ 137.000051][ T6941] wireguard0: entered promiscuous mode [ 137.005818][ T6941] wireguard0: entered allmulticast mode [ 137.012893][ T6941] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 137.026512][ T6941] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 137.083189][ T6940] : entered promiscuous mode [ 137.108708][ T6940] bond1: (slave ): Releasing active interface [ 137.590439][ T6972] netlink: 'syz.2.334': attribute type 3 has an invalid length. [ 137.617645][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 138.124546][ T6981] netlink: 'syz.1.336': attribute type 1 has an invalid length. [ 138.190123][ T6981] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.367668][ T6981] bond1: (slave geneve2): making interface the new active one [ 138.384605][ T6981] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 138.522675][ T7000] netlink: 15051 bytes leftover after parsing attributes in process `syz.4.341'. [ 139.997902][ T7031] netlink: 12 bytes leftover after parsing attributes in process `syz.1.351'. [ 141.527808][ T1172] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.563820][ T1172] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.594835][ T1172] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.615376][ T1172] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.828586][ T7056] IPv6: sit1: Disabled Multicast RS [ 142.808552][ T7093] netlink: 'syz.4.369': attribute type 4 has an invalid length. [ 142.854327][ T7094] netlink: 'syz.4.369': attribute type 4 has an invalid length. [ 144.294461][ T7105] bridge_slave_0: left allmulticast mode [ 144.304434][ T7105] bridge_slave_0: left promiscuous mode [ 144.321968][ T7105] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.373836][ T7105] bridge_slave_1: left allmulticast mode [ 144.406586][ T7105] bridge_slave_1: left promiscuous mode [ 144.450867][ T7105] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.485279][ T7110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.373'. [ 144.511488][ T7105] bond0: (slave bond_slave_0): Releasing backup interface [ 144.543296][ T7105] bond0: (slave bond_slave_1): Releasing backup interface [ 144.614327][ T7105] team0: Port device team_slave_0 removed [ 144.638905][ T7105] team0: Port device team_slave_1 removed [ 144.661037][ T7105] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.683926][ T7105] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.723038][ T7105] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 144.776844][ T7106] team0: Mode changed to "random" [ 145.033587][ T7135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 145.101295][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.382'. [ 145.156235][ T57] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.195566][ T57] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.238122][ T57] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.269575][ T57] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.459761][ T7156] netlink: 'syz.4.388': attribute type 1 has an invalid length. [ 145.670248][ T7156] 8021q: adding VLAN 0 to HW filter on device bond3 [ 145.736152][ T7167] netlink: 'syz.4.388': attribute type 10 has an invalid length. [ 145.776529][ T7167] netlink: 40 bytes leftover after parsing attributes in process `syz.4.388'. [ 145.893849][ T7160] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 145.996030][ T114] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 146.127082][ T114] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 146.507650][ T7177] netlink: 12 bytes leftover after parsing attributes in process `syz.0.394'. [ 146.745266][ T7181] macvtap1: entered allmulticast mode [ 146.862139][ T7185] batadv_slave_1: entered promiscuous mode [ 146.994798][ T7182] batadv_slave_1: left promiscuous mode [ 147.419121][ T7205] bridge_slave_0: left allmulticast mode [ 147.429214][ T7205] bridge_slave_0: left promiscuous mode [ 147.443985][ T7205] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.531291][ T7205] bridge_slave_1: left allmulticast mode [ 147.539110][ T7205] bridge_slave_1: left promiscuous mode [ 147.564004][ T7205] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.848420][ T7205] bond0: (slave bond_slave_0): Releasing backup interface [ 147.885261][ T7205] bond0: (slave bond_slave_1): Releasing backup interface [ 147.908993][ T7205] team0: Port device team_slave_0 removed [ 147.929916][ T7205] team0: Port device team_slave_1 removed [ 147.947058][ T7205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.960590][ T7205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.989870][ T7205] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 148.143338][ T7204] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 148.391308][ T7206] team0: Mode changed to "loadbalance" [ 148.553521][ T114] IPVS: starting estimator thread 0... [ 148.646013][ T7217] IPVS: using max 26 ests per chain, 62400 per kthread [ 149.353277][ T7247] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 149.445772][ T7248] bond0: (slave bond_slave_0): Releasing backup interface [ 149.480448][ T7248] bond0: (slave bond_slave_1): Releasing backup interface [ 149.519013][ T7248] team0: Port device team_slave_0 removed [ 149.561247][ T7248] team0: Port device team_slave_1 removed [ 149.582538][ T7248] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.607691][ T7248] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.623409][ T7248] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.632279][ T7248] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.644973][ T7248] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 149.691653][ T7250] team0: Port device xfrm0 added [ 149.895724][ T7253] tipc: Started in network mode [ 149.904751][ T7253] tipc: Node identity aa47dfe3cf5e, cluster identity 4711 [ 149.931142][ T7253] tipc: Enabled bearer , priority 0 [ 150.278772][ T7268] nbd2: detected capacity change from 0 to 127 [ 150.318667][ T7271] block nbd2: NBD_DISCONNECT [ 150.362104][ T7271] block nbd2: Disconnected due to user request. [ 150.395533][ T7271] block nbd2: shutting down sockets [ 150.408472][ C0] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.418692][ C0] Buffer I/O error on dev nbd2, logical block 0, async page read [ 150.427857][ C0] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.439004][ C0] Buffer I/O error on dev nbd2, logical block 1, async page read [ 150.449317][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.459012][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 150.466966][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 150.476593][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 150.486997][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.499134][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 150.508130][ T11] Buffer I/O error on dev nbd2, logical block 1, async page read [ 150.516132][ T11] Buffer I/O error on dev nbd2, logical block 2, async page read [ 150.526095][ T11] Buffer I/O error on dev nbd2, logical block 3, async page read [ 150.537341][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.547458][ T11] Buffer I/O error on dev nbd2, logical block 0, async page read [ 150.555310][ T11] Buffer I/O error on dev nbd2, logical block 1, async page read [ 150.563507][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.573500][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.583690][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.593825][ T11] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 150.603701][ T6111] ldm_validate_partition_table(): Disk read failed. [ 150.616699][ T6111] Dev nbd2: unable to read RDB block 0 [ 150.625973][ T6111] nbd2: unable to read partition table [ 150.643248][ T6111] ldm_validate_partition_table(): Disk read failed. [ 150.652943][ T6111] Dev nbd2: unable to read RDB block 0 [ 150.662030][ T6111] nbd2: unable to read partition table [ 151.633846][ T9] tipc: Node number set to 1696194531 [ 151.862422][ T7321] Bluetooth: MGMT ver 1.23 [ 152.074479][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 152.127789][ T7329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.440'. [ 152.363184][ T7342] geneve2: entered promiscuous mode [ 152.578344][ T7355] ip_tables: iptables: counters copy to user failed while replacing table [ 152.703482][ T7357] netlink: 'syz.2.449': attribute type 1 has an invalid length. [ 153.124785][ T7374] netlink: 164 bytes leftover after parsing attributes in process `syz.4.454'. [ 153.698308][ T7390] TC_ACT_REPEAT abuse ? [ 153.712186][ T7384] syzkaller0: entered promiscuous mode [ 153.718500][ T7384] syzkaller0: entered allmulticast mode [ 154.265494][ T7398] netlink: 32 bytes leftover after parsing attributes in process `syz.4.462'. [ 156.187550][ T7423] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 156.323702][ T7426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.471'. [ 156.429727][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 156.560986][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'. [ 156.679188][ T7434] macvlan2: entered promiscuous mode [ 156.691637][ T7434] macvlan2: entered allmulticast mode [ 156.699014][ T7434] bond4: (slave macvlan2): Opening slave failed [ 156.924568][ T7444] netlink: 20 bytes leftover after parsing attributes in process `syz.4.476'. [ 159.065453][ T7509] tipc: Started in network mode [ 159.080711][ T7509] tipc: Node identity 1, cluster identity 4711 [ 159.099562][ T7509] tipc: Node number set to 1 [ 159.750006][ T7539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.510'. [ 159.759172][ T7539] netlink: 36 bytes leftover after parsing attributes in process `syz.2.510'. [ 159.768235][ T7539] netlink: 31 bytes leftover after parsing attributes in process `syz.2.510'. [ 160.103121][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 160.122451][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.513'. [ 160.318576][ T7553] lo: entered promiscuous mode [ 160.324294][ T7553] tunl0: entered promiscuous mode [ 160.330694][ T7553] gre0: entered promiscuous mode [ 160.337029][ T7553] gretap0: entered promiscuous mode [ 160.342920][ T7553] erspan0: entered promiscuous mode [ 160.360015][ T7553] ip_vti0: entered promiscuous mode [ 160.366235][ T7553] ip6_vti0: entered promiscuous mode [ 160.372270][ T7553] sit0: entered promiscuous mode [ 160.378494][ T7553] ip6tnl0: entered promiscuous mode [ 160.384351][ T7553] ip6gre0: entered promiscuous mode [ 160.393012][ T7553] syz_tun: entered promiscuous mode [ 160.399751][ T7553] ip6gretap0: entered promiscuous mode [ 160.406374][ T7553] bridge0: entered promiscuous mode [ 160.412253][ T7553] vcan0: entered promiscuous mode [ 160.418671][ T7553] bond0: entered promiscuous mode [ 160.424780][ T7553] team0: entered promiscuous mode [ 160.431607][ T7553] nlmon0: entered promiscuous mode [ 160.441534][ T7553] batadv0: entered promiscuous mode [ 160.448247][ T7553] vxcan0: entered promiscuous mode [ 160.454154][ T7553] vxcan1: entered promiscuous mode [ 160.460806][ T7553] veth0: entered promiscuous mode [ 160.469222][ T7553] veth1: entered promiscuous mode [ 160.475543][ T7553] wg0: entered promiscuous mode [ 160.481843][ T7553] wg1: entered promiscuous mode [ 160.487744][ T7553] wg2: entered promiscuous mode [ 160.495035][ T7553] veth0_to_bridge: entered promiscuous mode [ 160.504550][ T7553] bridge_slave_0: entered promiscuous mode [ 160.520710][ T7553] veth1_to_bridge: entered promiscuous mode [ 160.536861][ T7553] bridge_slave_1: entered promiscuous mode [ 160.554050][ T7553] veth0_to_bond: entered promiscuous mode [ 160.579297][ T7553] bond_slave_0: entered promiscuous mode [ 160.609868][ T7553] veth1_to_bond: entered promiscuous mode [ 160.626634][ T7553] bond_slave_1: entered promiscuous mode [ 160.639985][ T7553] veth0_to_team: entered promiscuous mode [ 160.654121][ T7553] team_slave_0: entered promiscuous mode [ 160.679850][ T7553] veth1_to_team: entered promiscuous mode [ 160.704511][ T7553] team_slave_1: entered promiscuous mode [ 160.727117][ T7553] veth0_to_batadv: entered promiscuous mode [ 160.750370][ T7553] batadv_slave_0: entered promiscuous mode [ 160.787200][ T7553] veth1_to_batadv: entered promiscuous mode [ 160.797239][ T7553] batadv_slave_1: entered promiscuous mode [ 160.820464][ T7553] xfrm0: entered promiscuous mode [ 160.839588][ T7553] veth0_to_hsr: entered promiscuous mode [ 160.856972][ T7553] veth1_to_hsr: entered promiscuous mode [ 160.947536][ T7565] netlink: 24 bytes leftover after parsing attributes in process `syz.3.521'. [ 161.037684][ T7567] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 161.067878][ T7570] netlink: 1371 bytes leftover after parsing attributes in process `syz.2.523'. [ 161.083087][ T7565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.521'. [ 161.626201][ T7583] netlink: 'syz.2.529': attribute type 2 has an invalid length. [ 161.647830][ T7583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.529'. [ 161.813324][ T7583] : entered promiscuous mode [ 161.985241][ T7594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.532'. [ 162.564159][ T7613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.595087][ T7613] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.610588][ T7613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.726996][ T7613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 162.745094][ T7613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 162.768916][ T7613] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 162.820143][ T7615] netlink: 'syz.1.537': attribute type 3 has an invalid length. [ 162.831534][ T7615] netlink: 'syz.1.537': attribute type 3 has an invalid length. [ 164.056345][ T7658] netlink: 'syz.4.555': attribute type 4 has an invalid length. [ 164.085396][ T7658] netlink: 'syz.4.555': attribute type 4 has an invalid length. [ 164.099187][ T7661] netlink: 'syz.0.553': attribute type 1 has an invalid length. [ 164.228850][ T7661] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.238766][ T7661] bond2: (slave bond3): making interface the new active one [ 164.247809][ T7661] bond2: (slave bond3): Enslaving as an active interface with an up link [ 164.387489][ T7667] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 164.431563][ T7661] 8021q: adding VLAN 0 to HW filter on device bond2 [ 165.060390][ T7695] tipc: Resetting bearer [ 165.069360][ T7695] : left promiscuous mode [ 165.252259][ T7695] batman_adv: batadv0: Interface deactivated: gretap1 [ 165.263904][ T7695] geneve2: left promiscuous mode [ 165.277261][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.417268][ T114] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.437562][ T114] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.460575][ T114] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.656563][ T7721] tipc: Started in network mode [ 165.672200][ T7721] tipc: Node identity 5a78b34d7bc8, cluster identity 4711 [ 165.687967][ T7721] tipc: Enabled bearer , priority 0 [ 165.885672][ T7726] syzkaller0: entered promiscuous mode [ 165.898612][ T7726] syzkaller0: entered allmulticast mode [ 165.913121][ T7726] tipc: Resetting bearer [ 166.042449][ T114] tipc: Resetting bearer [ 166.051758][ T7718] tipc: Resetting bearer [ 167.922716][ T7718] tipc: Disabling bearer [ 167.954434][ T1220] tipc: Node number set to 565228365 [ 168.252862][ T7775] syzkaller1: entered promiscuous mode [ 168.263430][ T7775] syzkaller1: entered allmulticast mode [ 169.417285][ T7820] __nla_validate_parse: 6 callbacks suppressed [ 169.417306][ T7820] netlink: 12 bytes leftover after parsing attributes in process `syz.0.598'. [ 169.867701][ T7831] netlink: 40 bytes leftover after parsing attributes in process `syz.0.601'. [ 170.452661][ T7849] netlink: 76 bytes leftover after parsing attributes in process `syz.0.609'. [ 170.585834][ T7855] netlink: 80 bytes leftover after parsing attributes in process `syz.4.612'. [ 170.594999][ T7855] netlink: 80 bytes leftover after parsing attributes in process `syz.4.612'. [ 170.792376][ T7867] netlink: 72 bytes leftover after parsing attributes in process `syz.4.616'. [ 171.190609][ T7879] block nbd0: Unsupported socket: should be TCP or UNIX. [ 171.656586][ T7889] syzkaller1: entered promiscuous mode [ 171.665767][ T7889] syzkaller1: entered allmulticast mode [ 174.166609][ T7966] xt_policy: output policy not valid in PREROUTING and INPUT [ 174.415524][ T7974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.440114][ T7976] syzkaller0: entered promiscuous mode [ 174.451357][ T7976] syzkaller0: entered allmulticast mode [ 174.524332][ T7974] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.603846][ T7985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.569240][ T8049] syzkaller0: entered promiscuous mode [ 176.591834][ T8049] syzkaller0: entered allmulticast mode [ 177.277269][ T8062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.672'. [ 177.709592][ T8070] netlink: 'syz.2.678': attribute type 13 has an invalid length. [ 177.830304][ T8070] mac80211_hwsim hwsim5 syzkaller0: Caught tx_queue_len zero misconfig [ 179.771540][ T8139] netlink: 'syz.4.698': attribute type 2 has an invalid length. [ 179.834843][ T8139] : entered promiscuous mode [ 180.055044][ T8145] netlink: 12 bytes leftover after parsing attributes in process `syz.3.701'. [ 180.082070][ T8143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.700'. [ 180.905598][ T8161] netlink: 'syz.3.706': attribute type 11 has an invalid length. [ 181.330078][ T8183] netlink: 'syz.4.715': attribute type 1 has an invalid length. [ 181.383608][ T8183] 8021q: adding VLAN 0 to HW filter on device bond5 [ 182.121863][ T8216] lo: Caught tx_queue_len zero misconfig [ 182.137960][ T8216] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 182.886116][ T8231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.732'. [ 183.340680][ T8247] tipc: Started in network mode [ 183.356168][ T8247] tipc: Node identity 0686bf41f4f1, cluster identity 4711 [ 183.366612][ T8247] tipc: Enabled bearer , priority 0 [ 183.508657][ T8247] syzkaller0: entered promiscuous mode [ 183.524609][ T8247] syzkaller0: entered allmulticast mode [ 183.537851][ T8247] tipc: Resetting bearer [ 183.591940][ T8244] tipc: Resetting bearer [ 185.500037][ T8244] tipc: Disabling bearer [ 185.513917][ T8274] syz_tun: entered allmulticast mode [ 185.520729][ T6660] tipc: Node number set to 4067934017 [ 185.754405][ T8283] netlink: 20 bytes leftover after parsing attributes in process `syz.0.756'. [ 185.832583][ T8291] syzkaller0: entered promiscuous mode [ 185.853163][ T8291] syzkaller0: entered allmulticast mode [ 186.164047][ T8302] netlink: 12 bytes leftover after parsing attributes in process `syz.4.755'. [ 186.218149][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.1.754'. [ 186.928136][ T8323] netlink: 48 bytes leftover after parsing attributes in process `syz.4.763'. [ 187.052927][ T8329] macvlan1: entered promiscuous mode [ 187.058834][ T8329] macvlan1: entered allmulticast mode [ 187.064312][ T8329] veth1_vlan: entered allmulticast mode [ 187.169989][ T8331] netlink: 4 bytes leftover after parsing attributes in process `syz.0.766'. [ 187.185108][ T8331] netlink: 14 bytes leftover after parsing attributes in process `syz.0.766'. [ 188.191011][ T8369] netlink: 48 bytes leftover after parsing attributes in process `syz.4.779'. [ 189.669638][ T8417] netlink: 72 bytes leftover after parsing attributes in process `syz.0.796'. [ 190.241846][ T8434] syzkaller1: entered promiscuous mode [ 190.261576][ T8434] syzkaller1: entered allmulticast mode [ 190.272924][ T8437] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 190.946295][ T8441] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 191.378994][ T8472] syzkaller0: entered promiscuous mode [ 191.384965][ T8472] syzkaller0: entered allmulticast mode [ 191.403814][ T8472] tipc: Enabled bearer , priority 0 [ 191.423094][ T8471] tipc: Resetting bearer [ 191.489158][ T8471] tipc: Disabling bearer [ 191.994360][ T8495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.824'. [ 192.074855][ T8498] tipc: Failed to remove unknown binding: 66,0,0/565228365:2339879348/2339879350 [ 192.105813][ T8498] tipc: Failed to remove unknown binding: 66,0,0/565228365:2339879348/2339879349 [ 192.131092][ T8502] lo speed is unknown, defaulting to 1000 [ 192.141587][ T8498] tipc: Failed to remove unknown binding: 66,0,0/565228365:2339879348/2339879350 [ 192.143559][ T8502] lo speed is unknown, defaulting to 1000 [ 192.176066][ T8498] tipc: Failed to remove unknown binding: 66,0,0/565228365:2339879348/2339879349 [ 192.198523][ T8503] lo: left promiscuous mode [ 192.239895][ T8503] tunl0: left promiscuous mode [ 192.248275][ T8503] gre0: left promiscuous mode [ 192.260389][ T8503] gretap0: left promiscuous mode [ 192.270204][ T8503] erspan0: left promiscuous mode [ 192.279636][ T8503] ip_vti0: left promiscuous mode [ 192.287465][ T8503] ip6_vti0: left promiscuous mode [ 192.294356][ T8503] sit0: left promiscuous mode [ 192.305714][ T8503] ip6tnl0: left promiscuous mode [ 192.320008][ T8503] ip6gre0: left promiscuous mode [ 192.327614][ T8503] syz_tun: left promiscuous mode [ 192.335054][ T8503] ip6gretap0: left promiscuous mode [ 192.353821][ T8503] bridge0: left promiscuous mode [ 192.362058][ T8503] vcan0: left promiscuous mode [ 192.369869][ T8503] bond0: left promiscuous mode [ 192.378658][ T8503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.387447][ T8503] team0: left promiscuous mode [ 192.393698][ T8503] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.402924][ T8503] nlmon0: left promiscuous mode [ 192.409806][ T8503] batadv0: left promiscuous mode [ 192.417567][ T8503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.425448][ T8503] vxcan0: left promiscuous mode [ 192.432565][ T8503] vxcan1: left promiscuous mode [ 192.443181][ T8503] veth0: left promiscuous mode [ 192.449893][ T8503] veth1: left promiscuous mode [ 192.461271][ T8503] wg0: left promiscuous mode [ 192.482999][ T8503] wg1: left promiscuous mode [ 192.491122][ T8503] wg2: left promiscuous mode [ 192.500450][ T8503] veth0_to_bridge: left promiscuous mode [ 192.511969][ T8503] bridge_slave_0: left promiscuous mode [ 192.519313][ T8503] veth1_to_bridge: left promiscuous mode [ 192.527351][ T8503] bridge_slave_1: left promiscuous mode [ 192.533781][ T8503] veth0_to_bond: left promiscuous mode [ 192.541548][ T8503] bond_slave_0: left promiscuous mode [ 192.548554][ T8503] veth1_to_bond: left promiscuous mode [ 192.576606][ T8503] bond_slave_1: left promiscuous mode [ 192.584072][ T8503] veth0_to_team: left promiscuous mode [ 192.591577][ T8503] team_slave_0: left promiscuous mode [ 192.598861][ T8503] veth1_to_team: left promiscuous mode [ 192.605800][ T8503] team_slave_1: left promiscuous mode [ 192.623522][ T8503] veth0_to_batadv: left promiscuous mode [ 192.641271][ T8503] batadv_slave_0: left promiscuous mode [ 192.657023][ T8503] veth1_to_batadv: left promiscuous mode [ 192.673522][ T8503] batadv_slave_1: left promiscuous mode [ 192.694763][ T8503] xfrm0: left promiscuous mode [ 192.709516][ T8503] veth0_to_hsr: left promiscuous mode [ 192.726929][ T8503] veth1_to_hsr: left promiscuous mode [ 192.738401][ T8503] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 192.749713][ T8503] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 192.766455][ T8503] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 192.797637][ T8502] lo speed is unknown, defaulting to 1000 [ 192.814707][ T8502] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 192.831041][ T8502] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 192.849283][ T8502] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 192.871714][ T8502] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 192.992771][ T8502] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 193.006876][ T8517] syzkaller0: entered promiscuous mode [ 193.019524][ T8517] syzkaller0: entered allmulticast mode [ 193.281002][ T8525] bond2: entered promiscuous mode [ 193.290832][ T8502] lo speed is unknown, defaulting to 1000 [ 193.305229][ T8502] lo speed is unknown, defaulting to 1000 [ 193.317062][ T8502] lo speed is unknown, defaulting to 1000 [ 193.342605][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'. [ 193.392323][ T8502] lo speed is unknown, defaulting to 1000 [ 193.399196][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.837'. [ 193.453201][ T8502] lo speed is unknown, defaulting to 1000 [ 194.004447][ T8552] netlink: 24 bytes leftover after parsing attributes in process `syz.2.845'. [ 194.358280][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.704101][ T8578] syzkaller0: entered promiscuous mode [ 194.716531][ T8578] syzkaller0: entered allmulticast mode [ 194.728582][ T8577] netlink: 144 bytes leftover after parsing attributes in process `syz.4.857'. [ 194.741679][ T8580] tipc: Enabled bearer , priority 0 [ 194.763979][ T8580] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 194.772778][ T8574] syzkaller0: tun_net_xmit 14 [ 194.773073][ T8580] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 194.955147][ T8582] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 194.972645][ T8582] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 195.054112][ T8584] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 195.171453][ T8588] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 195.216096][ T8588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.732330][ T8603] netlink: 'syz.0.868': attribute type 11 has an invalid length. [ 195.742528][ T8603] netlink: 224 bytes leftover after parsing attributes in process `syz.0.868'. [ 195.755554][ T8602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.273586][ T8655] tipc: Enabled bearer , priority 0 [ 197.468785][ T8655] syzkaller0: entered promiscuous mode [ 197.492930][ T8655] syzkaller0: entered allmulticast mode [ 197.516203][ T8655] tipc: Resetting bearer [ 197.589992][ T8654] tipc: Resetting bearer [ 197.763784][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'. [ 197.868286][ T8674] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'. [ 198.811173][ T8680] netlink: 60795 bytes leftover after parsing attributes in process `syz.0.895'. [ 200.034633][ T8654] tipc: Disabling bearer [ 200.044796][ T8669] syzkaller0: entered promiscuous mode [ 200.052150][ T8669] syzkaller0: entered allmulticast mode [ 200.062616][ T8672] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 200.070620][ T8674] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 200.188706][ T8692] syzkaller0: entered promiscuous mode [ 200.205321][ T8692] syzkaller0: entered allmulticast mode [ 200.250022][ T8697] syzkaller0: entered promiscuous mode [ 200.273091][ T8697] syzkaller0: entered allmulticast mode [ 200.314133][ T8700] syzkaller0: entered promiscuous mode [ 200.337644][ T8700] syzkaller0: entered allmulticast mode [ 200.525708][ T8710] syzkaller0: entered promiscuous mode [ 200.538655][ T8710] syzkaller0: entered allmulticast mode [ 200.673719][ T8717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.910'. [ 201.084334][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 201.096227][ T8738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.919'. [ 201.119256][ T8739] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 201.167546][ T8739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.198271][ T8739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.231496][ T8739] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 201.275809][ T8739] bond0 (unregistering): Released all slaves [ 201.418448][ T8749] netlink: 'syz.4.923': attribute type 1 has an invalid length. [ 201.460765][ T8749] netlink: 84 bytes leftover after parsing attributes in process `syz.4.923'. [ 201.507664][ T8749] netlink: 'syz.4.923': attribute type 2 has an invalid length. [ 201.528598][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.923'. [ 201.935606][ T8770] syzkaller0: left promiscuous mode [ 201.941323][ T8770] syzkaller0: left allmulticast mode [ 201.975015][ T8778] netlink: 'syz.2.932': attribute type 4 has an invalid length. [ 201.987567][ T1220] lo speed is unknown, defaulting to 1000 [ 202.809258][ T8819] syzkaller0: left promiscuous mode [ 202.818904][ T8819] syzkaller0: left allmulticast mode [ 202.851784][ T8820] netlink: 28 bytes leftover after parsing attributes in process `syz.2.945'. [ 202.870657][ T8820] block nbd0: NBD_DISCONNECT [ 202.881512][ T8820] block nbd0: Send disconnect failed -32 [ 202.889440][ T8820] block nbd0: Send disconnect failed -32 [ 202.899201][ T8820] block nbd0: shutting down sockets [ 203.293066][ T8840] netlink: zone id is out of range [ 206.819560][ T8867] netlink: 48 bytes leftover after parsing attributes in process `syz.0.962'. [ 207.099454][ T8906] netlink: 'syz.0.975': attribute type 1 has an invalid length. [ 207.135705][ T8906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.250570][ T8906] bond0: (slave geneve2): making interface the new active one [ 207.261490][ T8906] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 207.285551][ T8905] lo speed is unknown, defaulting to 1000 [ 207.328680][ T8911] rdma_rxe: rxe_newlink: failed to add bond0 [ 207.336191][ T8911] netlink: 44 bytes leftover after parsing attributes in process `syz.3.977'. [ 208.378062][ T8943] syz_tun: entered promiscuous mode [ 208.679226][ T8956] 0: reclassify loop, rule prio 0, protocol 03 [ 208.749270][ T8959] syzkaller0: entered promiscuous mode [ 208.759913][ T8959] syzkaller0: entered allmulticast mode [ 209.045113][ T8969] netlink: 'syz.4.999': attribute type 4 has an invalid length. [ 209.092213][ T8969] netlink: 152 bytes leftover after parsing attributes in process `syz.4.999'. [ 209.123593][ T8969] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 209.497842][ T8994] ip_tables: iptables: counters copy to user failed while replacing table [ 209.762915][ T8998] netlink: 272 bytes leftover after parsing attributes in process `syz.4.1009'. [ 210.130777][ T9007] netlink: 'syz.4.1011': attribute type 1 has an invalid length. [ 210.371395][ T9012] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1011'. [ 210.518725][ T9011] bond6: (slave geneve3): making interface the new active one [ 210.540411][ T9011] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 210.600690][ T9012] 8021q: adding VLAN 0 to HW filter on device bond6 [ 210.628532][ T9020] ip6gre0: Caught tx_queue_len zero misconfig [ 210.635428][ T9020] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 210.656007][ T969] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.672225][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1015'. [ 210.826056][ T969] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.844838][ T969] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.860949][ T9029] netlink: 'syz.4.1017': attribute type 1 has an invalid length. [ 210.875976][ T969] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 210.933077][ T9029] 8021q: adding VLAN 0 to HW filter on device bond7 [ 211.100441][ T9029] bond7: (slave veth5): Enslaving as an active interface with a down link [ 211.235336][ T9035] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 211.323725][ T9042] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 211.355801][ T9042] bond7: (slave batadv1): making interface the new active one [ 211.383399][ T9042] batadv1: entered promiscuous mode [ 211.391285][ T9042] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 211.566637][ T9039] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 211.587526][ T9039] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 211.609272][ T9059] batman_adv: batadv0: Adding interface: veth0 [ 211.620500][ T9059] batman_adv: batadv0: The MTU of interface veth0 is too small (1504) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1536 would solve the problem. [ 211.676198][ T9059] batman_adv: batadv0: Interface activated: veth0 [ 211.734969][ T9062] batman_adv: batadv0: Interface deactivated: veth0 [ 211.754493][ T9062] batman_adv: batadv0: Removing interface: veth0 [ 211.905528][ T9071] netlink: 'syz.3.1032': attribute type 1 has an invalid length. [ 211.945392][ T9071] 8021q: adding VLAN 0 to HW filter on device bond2 [ 211.968789][ T9074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1033'. [ 212.013120][ T9071] bond2: (slave veth5): Enslaving as an active interface with a down link [ 212.095723][ T9080] bridge3: port 1(veth3) entered blocking state [ 212.108483][ T9079] netlink: 'syz.3.1032': attribute type 10 has an invalid length. [ 212.143309][ T9080] bridge3: port 1(veth3) entered disabled state [ 212.151164][ T9079] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1032'. [ 212.167177][ T9080] veth3: entered allmulticast mode [ 212.180815][ T9080] veth3: entered promiscuous mode [ 212.253192][ T9071] bond2: (slave dummy0): making interface the new active one [ 212.272374][ T9071] dummy0: entered promiscuous mode [ 212.278980][ T9071] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 212.315359][ T9074] bridge3: port 2(veth5) entered blocking state [ 212.323882][ T9074] bridge3: port 2(veth5) entered disabled state [ 212.330912][ T9074] veth5: entered allmulticast mode [ 212.339152][ T9074] veth5: entered promiscuous mode [ 212.349481][ T9079] bond2: (slave dummy0): Releasing active interface [ 212.543634][ T29] audit: type=1804 audit(1787042389.822:2): pid=9097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1039" name="/newroot/189/cgroup.controllers" dev="tmpfs" ino=975 res=1 errno=0 [ 212.567834][ T29] audit: type=1800 audit(1787042389.832:3): pid=9097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1039" name="cgroup.controllers" dev="tmpfs" ino=975 res=0 errno=0 [ 212.887653][ T9106] syz_tun: left allmulticast mode [ 213.900487][ T9133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1054'. [ 214.103412][ T9125] syz.0.1050 (9125) used greatest stack depth: 15648 bytes left [ 214.255573][ T9143] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 214.263121][ T9143] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 214.592434][ T9129] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 214.616571][ T9129] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 214.674292][ T9165] syzkaller0: entered promiscuous mode [ 214.680774][ T9165] syzkaller0: entered allmulticast mode [ 214.790035][ T9171] netlink: 'syz.4.1066': attribute type 1 has an invalid length. [ 214.801727][ T9169] netlink: 1200 bytes leftover after parsing attributes in process `syz.1.1067'. [ 214.809149][ T9171] netlink: 756 bytes leftover after parsing attributes in process `syz.4.1066'. [ 214.817581][ T9169] netlink: 1200 bytes leftover after parsing attributes in process `syz.1.1067'. [ 215.058852][ T9178] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1070'. [ 215.234358][ T9183] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.242223][ T9183] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.260150][ T9183] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.267519][ T9183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.276146][ T9183] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.283425][ T9183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.319664][ T9183] team0: Port device bridge0 added [ 215.439776][ T9186] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.447310][ T9186] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.539836][ T9196] xt_TCPMSS: Only works on TCP SYN packets [ 215.568045][ T9195] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1076'. [ 215.906599][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1075'. [ 216.099174][ T9186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.115477][ T9186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.172397][ T9186] veth1_vlan: left allmulticast mode [ 216.183980][ T9186] macvlan1: left promiscuous mode [ 216.323414][ T9195] 8021q: adding VLAN 0 to HW filter on device bond3 [ 216.375544][ T9199] macvlan2: entered promiscuous mode [ 216.381861][ T9199] macvlan2: entered allmulticast mode [ 216.389630][ T9199] bond3: entered promiscuous mode [ 216.399278][ T9199] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 216.410313][ T9199] bond3: left promiscuous mode [ 216.436648][ T9196] bridge_slave_1: left allmulticast mode [ 216.442486][ T9196] bridge_slave_1: left promiscuous mode [ 216.449129][ T9196] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.461245][ T9196] bridge_slave_0: left allmulticast mode [ 216.468513][ T9196] bridge_slave_0: left promiscuous mode [ 216.474426][ T9196] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.630356][ T9220] syzkaller0: entered promiscuous mode [ 216.647123][ T9220] syzkaller0: entered allmulticast mode [ 216.666459][ T114] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.711324][ T114] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.751513][ T114] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.790851][ T114] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.842124][ T9224] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 216.876703][ T9224] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 216.901442][ T9231] tipc: Enabling of bearer rejected, already enabled [ 216.956130][ T57] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 216.989537][ T57] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.022736][ T57] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 217.052968][ T57] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.125210][ T9241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1090'. [ 217.156803][ T9237] syzkaller0: left promiscuous mode [ 217.164854][ T9237] syzkaller0: left allmulticast mode [ 217.233512][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1089'. [ 217.349489][ T9243] syzkaller0: left promiscuous mode [ 217.371213][ T9243] syzkaller0: left allmulticast mode [ 217.432501][ T9245] syzkaller0: entered promiscuous mode [ 217.453686][ T9245] syzkaller0: entered allmulticast mode [ 217.479019][ T9252] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 217.498002][ T9252] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1095'. [ 217.523362][ T9252] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1095'. [ 217.664316][ T9259] syzkaller0: entered promiscuous mode [ 217.671217][ T9259] syzkaller0: entered allmulticast mode [ 217.969872][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 218.000729][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 218.093240][ T9268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1101'. [ 218.364933][ T9283] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 218.373829][ T9281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.425455][ T9281] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.477220][ T9281] tipc: Resetting bearer [ 218.508115][ T9281] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.673130][ T9281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.710843][ T9281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.753616][ T9281] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 219.282947][ T9332] hsr0: entered promiscuous mode [ 219.606400][ T9331] hsr0: left promiscuous mode [ 219.769214][ T9349] tipc: Enabling of bearer rejected, already enabled [ 219.825162][ T9353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1121'. [ 219.942701][ T9355] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1122'. [ 219.969558][ T9353] netlink: 'syz.3.1121': attribute type 5 has an invalid length. [ 219.999434][ T9353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1121'. [ 220.069826][ T9360] netlink: 'syz.1.1124': attribute type 1 has an invalid length. [ 220.265484][ T9364] bond3: (slave bridge5): Enslaving as a backup interface with an up link [ 220.339824][ T9360] macvlan2: entered promiscuous mode [ 220.345259][ T9360] macvlan2: entered allmulticast mode [ 220.352242][ T9360] bond3: entered promiscuous mode [ 220.358399][ T9360] bridge5: entered promiscuous mode [ 220.378385][ T9360] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 220.425016][ T9360] bond3: left promiscuous mode [ 220.433237][ T9360] bridge5: left promiscuous mode [ 220.599676][ T9378] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 220.765680][ T9381] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 220.821207][ T9384] syzkaller0: entered promiscuous mode [ 220.832505][ T9384] syzkaller0: entered allmulticast mode [ 220.925094][ T9374] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 220.937660][ T114] IPVS: starting estimator thread 0... [ 221.046942][ T9388] IPVS: using max 36 ests per chain, 86400 per kthread [ 221.223844][ T9393] netlink: 'syz.4.1134': attribute type 83 has an invalid length. [ 221.396873][ T9398] bridge0: port 1(macvlan2) entered blocking state [ 221.404933][ T9398] bridge0: port 1(macvlan2) entered disabled state [ 221.412300][ T9398] macvlan2: entered allmulticast mode [ 221.418413][ T9398] gretap0: entered allmulticast mode [ 221.431979][ T9398] macvlan2: entered promiscuous mode [ 221.451413][ T9398] bridge0: port 1(macvlan2) entered blocking state [ 221.460201][ T9398] bridge0: port 1(macvlan2) entered forwarding state [ 221.504921][ T9399] netlink: 'syz.4.1136': attribute type 1 has an invalid length. [ 221.657310][ T9399] 8021q: adding VLAN 0 to HW filter on device bond8 [ 221.709027][ T9399] macvlan4: entered promiscuous mode [ 221.714428][ T9399] macvlan4: entered allmulticast mode [ 221.737434][ T9399] bond8: entered promiscuous mode [ 221.754214][ T9399] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 221.843123][ T9399] bond8: left promiscuous mode [ 221.941907][ T9403] bond8: (slave veth0_to_bond): making interface the new active one [ 221.958068][ T9403] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 221.991754][ T9409] bond8: entered promiscuous mode [ 221.997596][ T9409] veth0_to_bond: entered promiscuous mode [ 222.004043][ T9409] bond8: entered allmulticast mode [ 222.010637][ T9409] veth0_to_bond: entered allmulticast mode [ 222.098302][ T9414] syzkaller0: entered promiscuous mode [ 222.106402][ T9414] syzkaller0: entered allmulticast mode [ 222.517262][ T13] batadv1: left promiscuous mode [ 222.689785][ T9453] syzkaller1: entered allmulticast mode [ 222.995478][ T9457] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.047838][ T9457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.133241][ T9457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.143985][ T9457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.176483][ T9457] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 223.202478][ T9457] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 223.242324][ T9457] veth1_vlan: left promiscuous mode [ 223.269513][ T9457] veth0_vlan: left promiscuous mode [ 223.293296][ T9457] veth0_vlan: entered promiscuous mode [ 223.301810][ T9457] veth1_vlan: entered promiscuous mode [ 223.308992][ T9457] veth1_vlan: entered allmulticast mode [ 223.319873][ T9457] veth1_macvtap: left promiscuous mode [ 223.327100][ T9457] veth0_macvtap: left promiscuous mode [ 223.333844][ T9457] veth0_macvtap: entered promiscuous mode [ 223.343637][ T9457] veth1_macvtap: entered promiscuous mode [ 223.360133][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 223.369637][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 223.380295][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 223.389741][ T9457] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 223.407194][ T9457] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 223.472083][ T114] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.479687][ T114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.544301][ T114] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.551715][ T114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.826184][ T114] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.981350][ T9493] __nla_validate_parse: 1 callbacks suppressed [ 223.981381][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 224.016696][ T1113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.021999][ T9493] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1158'. [ 224.049309][ T1113] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.089011][ T114] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.302452][ T9505] syzkaller1: entered promiscuous mode [ 224.313591][ T9505] syzkaller1: entered allmulticast mode [ 224.912596][ T9521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1169'. [ 225.033994][ T9521] bond4: entered promiscuous mode [ 225.057267][ T9521] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.178502][ T9521] 8021q: adding VLAN 0 to HW filter on device bond4 [ 225.206679][ T9521] bond4: (slave sit1): The slave device specified does not support setting the MAC address [ 225.234812][ T9521] bond4: (slave sit1): Error -95 calling set_mac_address [ 225.334472][ T9530] dummy0: left promiscuous mode [ 225.424310][ T9530] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 225.622012][ T9544] tipc: Enabling of bearer rejected, already enabled [ 225.794053][ T9548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1176'. [ 225.857626][ T9555] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 225.901966][ T9548] bond5: entered promiscuous mode [ 225.907977][ T9548] bond5: entered allmulticast mode [ 226.303386][ T9574] netlink: 'syz.1.1187': attribute type 1 has an invalid length. [ 226.312426][ T9572] batadv_slave_1: entered promiscuous mode [ 226.415415][ T9574] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.507280][ T9581] bond4: (slave gretap1): making interface the new active one [ 226.523989][ T9581] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 226.535305][ T9571] batadv_slave_1: left promiscuous mode [ 226.543983][ T9586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 227.408171][ T9632] syzkaller0: Caught tx_queue_len zero misconfig [ 227.697135][ T9639] batman_adv: batadv0: Adding interface: veth0 [ 227.703574][ T9639] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.739371][ T9639] batman_adv: batadv0: Interface activated: veth0 [ 227.789229][ T9640] batman_adv: batadv0: Interface deactivated: veth0 [ 227.816190][ T9640] batman_adv: batadv0: Removing interface: veth0 [ 227.832993][ T9643] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1213'. [ 227.901692][ T9645] syzkaller1: entered promiscuous mode [ 227.910725][ T9645] syzkaller1: entered allmulticast mode [ 227.943945][ T9647] bridge0: port 3(vlan3) entered blocking state [ 227.951071][ T9647] bridge0: port 3(vlan3) entered disabled state [ 227.959818][ T9647] vlan3: entered allmulticast mode [ 227.965050][ T9647] geneve0: entered allmulticast mode [ 227.982970][ T9647] vlan3: entered promiscuous mode [ 227.988409][ T9647] geneve0: entered promiscuous mode [ 228.110661][ T9653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1217'. [ 228.429477][ T9667] syzkaller0: entered promiscuous mode [ 228.435363][ T9667] syzkaller0: entered allmulticast mode [ 228.624238][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022be2800: rx timeout, send abort [ 228.636801][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888022be2800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 229.404109][ T9687] netlink: 'syz.1.1227': attribute type 10 has an invalid length. [ 230.175041][ T9722] netlink: 'syz.0.1241': attribute type 13 has an invalid length. [ 230.247757][ T9723] syzkaller0: Caught tx_queue_len zero misconfig [ 230.332401][ T9725] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1243'. [ 230.531649][ T9737] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.565126][ T9735] syzkaller0: entered promiscuous mode [ 230.571682][ T9735] syzkaller0: entered allmulticast mode [ 230.759891][ T9747] netlink: 'syz.4.1251': attribute type 3 has an invalid length. [ 230.768540][ T9747] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.1251'. [ 230.933963][ T9753] xt_hashlimit: size too large, truncated to 1048576 [ 231.973274][ T9763] virt_wifi0 speed is unknown, defaulting to 1000 [ 231.999891][ T9763] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.059755][ T9763] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.090317][ T9763] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 232.131170][ T9763] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 232.185334][ T9763] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 232.251195][ T9763] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 232.319409][ T9770] lo speed is unknown, defaulting to 1000 [ 232.364566][ T9763] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.397385][ T9770] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.429454][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 232.478270][ T9763] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.511549][ T9763] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.544424][ T9782] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 232.553837][ T9763] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.619213][ T9763] virt_wifi0 speed is unknown, defaulting to 1000 [ 232.767319][ T9787] netlink: 'syz.2.1265': attribute type 83 has an invalid length. [ 232.883678][ T9789] syzkaller0: entered allmulticast mode [ 232.898923][ T9794] xt_ipcomp: unknown flags 1D [ 233.024243][ T9793] tipc: Enabled bearer , priority 10 [ 233.420606][ T9812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1274'. [ 233.458740][ T9812] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 233.489072][ T9812] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 233.509631][ T9812] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 233.517977][ T9812] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 233.528745][ T9812] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 233.541998][ T9812] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 233.562551][ T9812] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 233.579836][ T9812] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 233.589956][ T9812] netlink: 'syz.0.1274': attribute type 1 has an invalid length. [ 233.827092][ T9816] syzkaller0: entered promiscuous mode [ 233.832840][ T9816] syzkaller0: entered allmulticast mode [ 233.852976][ T9838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1279'. [ 233.922833][ T9838] bridge3: entered promiscuous mode [ 233.941010][ T9838] bond4: (slave bridge3): making interface the new active one [ 233.949455][ T9838] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 235.857983][ T9841] tipc: Resetting bearer [ 235.969000][ T9841] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 235.979354][ T9841] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 235.991052][ T9841] bond5: left promiscuous mode [ 235.998001][ T9841] bond5: left allmulticast mode [ 236.003504][ T9837] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 236.073613][ T9847] tipc: Enabled bearer , priority 0 [ 236.279862][ T9871] syzkaller0: entered promiscuous mode [ 236.292434][ T9871] syzkaller0: entered allmulticast mode [ 238.294123][ T9885] tipc: Bearer : already 2 bearers with priority 0 [ 238.302049][ T9885] tipc: Enabling of bearer rejected, cannot adjust to lower [ 238.358261][ T9896] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 238.372145][ T9900] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 238.415783][ T9898] bridge4: entered promiscuous mode [ 238.436656][ T9898] bond4: (slave bridge4): making interface the new active one [ 238.444869][ T9898] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 238.677823][ T9918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1297'. [ 238.767717][ T9918] syz_tun (unregistering): left allmulticast mode [ 239.040707][ T9934] syzkaller0: entered promiscuous mode [ 239.046825][ T9934] syzkaller0: entered allmulticast mode [ 239.562692][ T9941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1306'. [ 239.574527][ T9941] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1306'. [ 239.817806][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1308'. [ 240.396077][ T9962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1316'. [ 240.469197][ T9962] bond6: entered promiscuous mode [ 240.484085][ T9962] bond6: entered allmulticast mode [ 240.931831][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1318'. [ 241.104612][ T9978] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 241.146196][ T9979] veth9: entered allmulticast mode [ 241.179887][ T9979] bond7: (slave veth9): Enslaving as an active interface with an up link [ 241.368223][ T9992] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 241.390593][ T9992] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 241.710150][T10007] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1331'. [ 241.736269][T10007] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.1331'. [ 241.946771][T10020] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 241.994419][T10022] syzkaller0: entered promiscuous mode [ 242.000441][T10022] syzkaller0: entered allmulticast mode [ 242.363071][T10036] syzkaller0: left promiscuous mode [ 242.396370][T10036] syzkaller0: left allmulticast mode [ 242.412662][T10036] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 242.548150][T10040] validate_nla: 48 callbacks suppressed [ 242.548174][T10040] netlink: 'syz.3.1346': attribute type 1 has an invalid length. [ 242.645581][T10044] bond6: entered promiscuous mode [ 242.661309][T10044] bond6: entered allmulticast mode [ 242.669925][T10044] 8021q: adding VLAN 0 to HW filter on device bond6 [ 242.780538][T10040] bridge4: entered promiscuous mode [ 242.791077][T10040] bridge4: entered allmulticast mode [ 242.804882][T10040] bond6: (slave bridge4): Enslaving as a backup interface with an up link [ 242.868864][ T12] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 242.897754][T10044] bridge5: entered promiscuous mode [ 242.919379][T10044] bridge5: entered allmulticast mode [ 242.946008][T10044] bond6: (slave bridge5): Enslaving as a backup interface with a down link [ 242.957044][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1350'. [ 243.002845][T10044] bridge6: entered promiscuous mode [ 243.017168][T10044] bridge6: entered allmulticast mode [ 243.023829][T10044] bond6: (slave bridge6): Enslaving as a backup interface with a down link [ 243.035271][ T1172] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 243.381950][T10070] lo speed is unknown, defaulting to 1000 [ 243.428364][T10070] virt_wifi0 speed is unknown, defaulting to 1000 [ 243.595358][T10085] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1363'. [ 243.626052][T10085] netlink: 'syz.2.1363': attribute type 7 has an invalid length. [ 243.634055][T10085] netlink: 'syz.2.1363': attribute type 8 has an invalid length. [ 243.647923][T10085] netlink: 'syz.2.1363': attribute type 1 has an invalid length. [ 243.865713][T10094] tun0: tun_chr_ioctl cmd 1074025680 [ 243.889939][T10094] Bluetooth: MGMT ver 1.23 [ 244.153238][T10105] __nla_validate_parse: 3 callbacks suppressed [ 244.153257][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1370'. [ 244.272356][T10105] hsr_slave_1 (unregistering): left promiscuous mode [ 244.316991][T10114] netlink: 'syz.1.1373': attribute type 11 has an invalid length. [ 244.351362][T10103] lo speed is unknown, defaulting to 1000 [ 244.380153][T10114] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 244.419898][T10103] virt_wifi0 speed is unknown, defaulting to 1000 [ 244.559280][T10125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1376'. [ 244.589468][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1376'. [ 244.660085][T10121] netlink: 'syz.0.1376': attribute type 4 has an invalid length. [ 244.690218][T10121] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1376'. [ 245.104897][T10146] netlink: 'syz.0.1381': attribute type 1 has an invalid length. [ 245.390251][T10146] 8021q: adding VLAN 0 to HW filter on device bond7 [ 245.527589][T10162] netlink: ct family unspecified [ 245.544935][T10162] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.609123][T10149] bond7: (slave veth7): Enslaving as an active interface with a down link [ 245.651373][T10152] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.661589][T10152] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.717471][T10152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.731321][T10152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.769561][T10152] veth1_vlan: left allmulticast mode [ 245.775036][T10152] macvlan1: left allmulticast mode [ 245.812417][T10152] macvtap1: left allmulticast mode [ 245.824151][T10152] bridge4: left promiscuous mode [ 245.845304][T10155] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 245.856287][T10155] bond7: (slave batadv1): making interface the new active one [ 245.865740][T10155] batadv1: entered promiscuous mode [ 245.871946][T10155] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 245.936101][ T1172] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.954161][ T1172] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.977255][ T1172] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.009572][ T1172] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.009762][T10167] netlink: 'syz.3.1386': attribute type 1 has an invalid length. [ 246.108773][T10172] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1388'. [ 246.204057][T10178] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1386'. [ 246.256687][T10167] bond7: (slave veth9): Enslaving as an active interface with a down link [ 246.363423][T10174] bond7: (slave veth11): Enslaving as an active interface with a down link [ 246.384065][T10186] netlink: 'syz.2.1392': attribute type 1 has an invalid length. [ 246.393471][T10178] 8021q: adding VLAN 0 to HW filter on device bond7 [ 246.587950][T10193] ip_tables: iptables: counters copy to user failed while replacing table [ 246.637386][T10185] veth11: entered allmulticast mode [ 246.654053][T10185] bond8: (slave veth11): Enslaving as an active interface with a down link [ 246.654573][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1395'. [ 246.675317][T10191] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 246.961333][T10208] netlink: 'syz.3.1399': attribute type 1 has an invalid length. [ 247.000033][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1400'. [ 247.011576][T10208] bond8: entered promiscuous mode [ 247.017988][T10208] 8021q: adding VLAN 0 to HW filter on device bond8 [ 247.160459][T10208] bond8: (slave bridge7): making interface the new active one [ 247.178803][T10208] bridge7: entered promiscuous mode [ 247.196715][T10208] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 247.704461][T10231] syzkaller0: entered promiscuous mode [ 247.862875][T10231] syzkaller0: entered allmulticast mode [ 248.044002][T10249] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1413'. [ 248.260336][T10260] syzkaller0: entered promiscuous mode [ 248.266193][T10260] syzkaller0: entered allmulticast mode [ 248.308780][T10264] netlink: 'syz.1.1420': attribute type 1 has an invalid length. [ 248.358892][T10264] 8021q: adding VLAN 0 to HW filter on device bond5 [ 248.380308][T10262] netlink: 'syz.4.1418': attribute type 1 has an invalid length. [ 248.388628][T10262] netlink: 'syz.4.1418': attribute type 7 has an invalid length. [ 248.396928][T10262] netlink: 'syz.4.1418': attribute type 8 has an invalid length. [ 248.407073][T10262] syzkaller0: entered promiscuous mode [ 248.421168][T10262] syzkaller0: entered allmulticast mode [ 248.427302][T10264] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1420'. [ 248.443033][T10267] netlink: 'syz.3.1421': attribute type 1 has an invalid length. [ 248.475210][T10264] bond5: entered promiscuous mode [ 248.480918][T10264] bond5: entered allmulticast mode [ 248.589551][T10264] bond5: (slave dummy0): making interface the new active one [ 248.607650][T10264] dummy0: entered promiscuous mode [ 248.620665][T10264] dummy0: entered allmulticast mode [ 248.627720][T10264] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 249.181723][T10300] syzkaller0: left promiscuous mode [ 249.196503][T10300] syzkaller0: left allmulticast mode [ 249.314210][T10305] __nla_validate_parse: 2 callbacks suppressed [ 249.314231][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1435'. [ 249.484085][T10310] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 249.607328][ T4929] block nbd0: Receive control failed (result -1) [ 249.618713][ T4929] [ 249.621119][ T4929] ====================================================== [ 249.628180][ T4929] WARNING: possible circular locking dependency detected [ 249.635251][ T4929] syzkaller #0 Not tainted [ 249.639701][ T4929] ------------------------------------------------------ [ 249.646756][ T4929] kworker/u9:1/4929 is trying to acquire lock: [ 249.652987][ T4929] ffff88802d785360 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}, at: inet_shutdown+0x6a/0x390 [ 249.662498][ T4929] [ 249.662498][ T4929] but task is already holding lock: [ 249.669895][ T4929] ffff88807b23e068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 249.678870][ T4929] [ 249.678870][ T4929] which lock already depends on the new lock. [ 249.678870][ T4929] [ 249.689312][ T4929] [ 249.689312][ T4929] the existing dependency chain (in reverse order) is: [ 249.698354][ T4929] [ 249.698354][ T4929] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 249.706033][ T4929] __mutex_lock+0x19d/0x1550 [ 249.711181][ T4929] nbd_queue_rq+0x373/0x1150 [ 249.716317][ T4929] blk_mq_dispatch_rq_list+0x499/0x1990 [ 249.722409][ T4929] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 249.729280][ T4929] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 249.735803][ T4929] blk_mq_run_work_fn+0x16c/0x300 [ 249.741383][ T4929] process_scheduled_works+0xa8e/0x14e0 [ 249.747466][ T4929] worker_thread+0xa47/0xfb0 [ 249.752609][ T4929] kthread+0x388/0x470 [ 249.757221][ T4929] ret_from_fork+0x514/0xb70 [ 249.762348][ T4929] ret_from_fork_asm+0x1a/0x30 [ 249.767667][ T4929] [ 249.767667][ T4929] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 249.774898][ T4929] __mutex_lock+0x19d/0x1550 [ 249.780030][ T4929] nbd_queue_rq+0xc1/0x1150 [ 249.785063][ T4929] blk_mq_dispatch_rq_list+0x499/0x1990 [ 249.791152][ T4929] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 249.798029][ T4929] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 249.804559][ T4929] blk_mq_run_work_fn+0x16c/0x300 [ 249.810121][ T4929] process_scheduled_works+0xa8e/0x14e0 [ 249.816203][ T4929] worker_thread+0xa47/0xfb0 [ 249.821359][ T4929] kthread+0x388/0x470 [ 249.825977][ T4929] ret_from_fork+0x514/0xb70 [ 249.831108][ T4929] ret_from_fork_asm+0x1a/0x30 [ 249.836421][ T4929] [ 249.836421][ T4929] -> #4 (set->srcu){.+.+}-{0:0}: [ 249.843561][ T4929] __synchronize_srcu+0xc9/0x2f0 [ 249.849038][ T4929] elevator_switch+0x1e8/0x7b0 [ 249.854340][ T4929] elevator_change+0x2fa/0x480 [ 249.859651][ T4929] elevator_set_default+0x375/0x440 [ 249.865390][ T4929] blk_register_queue+0x3f3/0x4e0 [ 249.870958][ T4929] __add_disk+0x6cb/0xe30 [ 249.875823][ T4929] add_disk_fwnode+0x100/0x3a0 [ 249.881129][ T4929] nbd_dev_add+0x733/0xb60 [ 249.886083][ T4929] nbd_init+0x15f/0x1e0 [ 249.890784][ T4929] do_one_initcall+0x250/0x870 [ 249.896091][ T4929] do_initcall_level+0x10a/0x1a0 [ 249.901564][ T4929] do_initcalls+0x59/0xa0 [ 249.906445][ T4929] kernel_init_freeable+0x29d/0x3e0 [ 249.912181][ T4929] kernel_init+0x1d/0x1d0 [ 249.917046][ T4929] ret_from_fork+0x514/0xb70 [ 249.922177][ T4929] ret_from_fork_asm+0x1a/0x30 [ 249.927493][ T4929] [ 249.927493][ T4929] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 249.935331][ T4929] __mutex_lock+0x19d/0x1550 [ 249.940476][ T4929] elevator_change+0x1af/0x480 [ 249.945807][ T4929] elevator_set_none+0xb5/0x140 [ 249.951215][ T4929] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 249.957558][ T4929] nbd_start_device+0x189/0xb30 [ 249.962941][ T4929] nbd_genl_connect+0x1597/0x1c10 [ 249.968496][ T4929] genl_family_rcv_msg_doit+0x233/0x340 [ 249.974578][ T4929] genl_rcv_msg+0x614/0x7a0 [ 249.979618][ T4929] netlink_rcv_skb+0x226/0x4a0 [ 249.984926][ T4929] genl_rcv+0x28/0x40 [ 249.989441][ T4929] netlink_unicast+0x7bb/0x940 [ 249.994741][ T4929] netlink_sendmsg+0x813/0xb40 [ 250.000046][ T4929] sock_sendmsg_nosec+0x13a/0x180 [ 250.005618][ T4929] ____sys_sendmsg+0x54e/0x850 [ 250.010923][ T4929] ___sys_sendmsg+0x2a5/0x360 [ 250.016234][ T4929] __x64_sys_sendmsg+0x1b1/0x290 [ 250.021730][ T4929] do_syscall_64+0x174/0x580 [ 250.026878][ T4929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.033318][ T4929] [ 250.033318][ T4929] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 250.041954][ T4929] blk_alloc_queue+0x544/0x690 [ 250.047270][ T4929] __blk_mq_alloc_disk+0x194/0x390 [ 250.052922][ T4929] nbd_dev_add+0x494/0xb60 [ 250.057895][ T4929] nbd_init+0x15f/0x1e0 [ 250.062592][ T4929] do_one_initcall+0x250/0x870 [ 250.067900][ T4929] do_initcall_level+0x10a/0x1a0 [ 250.073373][ T4929] do_initcalls+0x59/0xa0 [ 250.078235][ T4929] kernel_init_freeable+0x29d/0x3e0 [ 250.083991][ T4929] kernel_init+0x1d/0x1d0 [ 250.088859][ T4929] ret_from_fork+0x514/0xb70 [ 250.094002][ T4929] ret_from_fork_asm+0x1a/0x30 [ 250.099332][ T4929] [ 250.099332][ T4929] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 250.106574][ T4929] fs_reclaim_acquire+0x71/0x100 [ 250.112244][ T4929] __kmalloc_noprof+0xbc/0x720 [ 250.117547][ T4929] tls_sw_sendmsg+0x59b/0x2b50 [ 250.122859][ T4929] sock_sendmsg_nosec+0x90/0x180 [ 250.128344][ T4929] sock_sendmsg+0x1ca/0x2d0 [ 250.133395][ T4929] splice_to_socket+0xb5e/0x12a0 [ 250.138873][ T4929] direct_splice_actor+0x101/0x160 [ 250.144525][ T4929] splice_direct_to_actor+0x57b/0xcb0 [ 250.150449][ T4929] do_splice_direct+0x195/0x290 [ 250.155862][ T4929] do_sendfile+0x52e/0x7c0 [ 250.160834][ T4929] __se_sys_sendfile64+0x144/0x1a0 [ 250.166502][ T4929] do_syscall_64+0x174/0x580 [ 250.171653][ T4929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.178260][ T4929] [ 250.178260][ T4929] -> #0 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}: [ 250.186358][ T4929] __lock_acquire+0x1520/0x2cf0 [ 250.191752][ T4929] lock_acquire+0x106/0x350 [ 250.196808][ T4929] lock_sock_nested+0x41/0x100 [ 250.202132][ T4929] inet_shutdown+0x6a/0x390 [ 250.207185][ T4929] nbd_mark_nsock_dead+0x2cb/0x550 [ 250.212834][ T4929] recv_work+0x1cee/0x1e10 [ 250.217790][ T4929] process_scheduled_works+0xa8e/0x14e0 [ 250.224251][ T4929] worker_thread+0xa47/0xfb0 [ 250.229799][ T4929] kthread+0x388/0x470 [ 250.234434][ T4929] ret_from_fork+0x514/0xb70 [ 250.239569][ T4929] ret_from_fork_asm+0x1a/0x30 [ 250.244903][ T4929] [ 250.244903][ T4929] other info that might help us debug this: [ 250.244903][ T4929] [ 250.255166][ T4929] Chain exists of: [ 250.255166][ T4929] sk_lock-AF_INET6-NBD --> &cmd->lock --> &nsock->tx_lock [ 250.255166][ T4929] [ 250.268224][ T4929] Possible unsafe locking scenario: [ 250.268224][ T4929] [ 250.275694][ T4929] CPU0 CPU1 [ 250.281146][ T4929] ---- ---- [ 250.286526][ T4929] lock(&nsock->tx_lock); [ 250.290984][ T4929] lock(&cmd->lock); [ 250.297524][ T4929] lock(&nsock->tx_lock); [ 250.304481][ T4929] lock(sk_lock-AF_INET6-NBD); [ 250.309352][ T4929] [ 250.309352][ T4929] *** DEADLOCK *** [ 250.309352][ T4929] [ 250.317513][ T4929] 3 locks held by kworker/u9:1/4929: [ 250.322809][ T4929] #0: ffff888027863940 ((wq_completion)nbd0-recv){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 250.334149][ T4929] #1: ffffc9001019fc40 ((work_completion)(&args->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 250.345941][ T4929] #2: ffff88807b23e068 (&nsock->tx_lock){+.+.}-{4:4}, at: recv_work+0x1cd9/0x1e10 [ 250.355295][ T4929] [ 250.355295][ T4929] stack backtrace: [ 250.361248][ T4929] CPU: 0 UID: 0 PID: 4929 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 250.361278][ T4929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 250.361290][ T4929] Workqueue: nbd0-recv recv_work [ 250.361321][ T4929] Call Trace: [ 250.361330][ T4929] [ 250.361339][ T4929] dump_stack_lvl+0xe8/0x150 [ 250.361363][ T4929] print_circular_bug+0x2e1/0x300 [ 250.361390][ T4929] check_noncircular+0x12e/0x150 [ 250.361418][ T4929] __lock_acquire+0x1520/0x2cf0 [ 250.361446][ T4929] ? irqentry_exit+0x218/0x8f0 [ 250.361470][ T4929] ? lockdep_hardirqs_on+0x7a/0x110 [ 250.361493][ T4929] ? inet_shutdown+0x6a/0x390 [ 250.361515][ T4929] lock_acquire+0x106/0x350 [ 250.361534][ T4929] ? inet_shutdown+0x6a/0x390 [ 250.361561][ T4929] lock_sock_nested+0x41/0x100 [ 250.361576][ T4929] ? inet_shutdown+0x6a/0x390 [ 250.361598][ T4929] inet_shutdown+0x6a/0x390 [ 250.361621][ T4929] nbd_mark_nsock_dead+0x2cb/0x550 [ 250.361639][ T4929] recv_work+0x1cee/0x1e10 [ 250.361656][ T4929] ? __lock_acquire+0x683/0x2cf0 [ 250.361678][ T4929] ? register_lock_class+0x31/0x2e0 [ 250.361699][ T4929] ? __lock_acquire+0x683/0x2cf0 [ 250.361723][ T4929] ? __pfx_recv_work+0x10/0x10 [ 250.361740][ T4929] ? do_raw_spin_lock+0x12b/0x2f0 [ 250.361758][ T4929] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 250.361775][ T4929] ? process_scheduled_works+0xa20/0x14e0 [ 250.361796][ T4929] ? rcu_is_watching+0x15/0xb0 [ 250.361821][ T4929] ? process_scheduled_works+0xa20/0x14e0 [ 250.361837][ T4929] process_scheduled_works+0xa8e/0x14e0 [ 250.361865][ T4929] ? __pfx_process_scheduled_works+0x10/0x10 [ 250.361884][ T4929] ? assign_work+0x3cf/0x5d0 [ 250.361901][ T4929] worker_thread+0xa47/0xfb0 [ 250.361930][ T4929] kthread+0x388/0x470 [ 250.361951][ T4929] ? __pfx_worker_thread+0x10/0x10 [ 250.361966][ T4929] ? __pfx_kthread+0x10/0x10 [ 250.361987][ T4929] ret_from_fork+0x514/0xb70 [ 250.362010][ T4929] ? __pfx_ret_from_fork+0x10/0x10 [ 250.362031][ T4929] ? __switch_to+0xc89/0x1420 [ 250.362050][ T4929] ? __pfx_kthread+0x10/0x10 [ 250.362071][ T4929] ret_from_fork_asm+0x1a/0x30 [ 250.362100][ T4929]