last executing test programs: 3.859125647s ago: executing program 1 (id=2121): openat$tun(0xffffffffffffff9c, &(0x7f0000001d00), 0x100, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001f40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x2, 0x6}, 0x1, 0xfb}, [{0x10000002, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x4}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x6, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x10004, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x80008, 0x7f}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0xe5bc}, {0x6, 0xb, 0x6c5f1878, 0x57c4, 0x6, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x1009}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x78d, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x101}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0x0, 0x4, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0xe5f3, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0xfffffffc, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x82, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0x75}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0xffff8000, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0xfffffffd, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x7f, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x54}, {0x3, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x2000007, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x4, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff0, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x8007, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5f0, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x5, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x205, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xd, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x633, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x7ff, 0x9, 0xb}, {0x47, 0x6, 0x81, 0xdcb, 0x3, 0x2}, {0x5, 0x80000000, 0xb, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x6, 0xfff, 0x6, 0x800}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x5, 0x6, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x6, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 3.857953685s ago: executing program 4 (id=2123): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0xa2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x1200}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000002000000ac1414aa"], 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) 3.751271782s ago: executing program 4 (id=2125): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001840)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000018c0)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001900)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f00000019c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000023c0)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f0000002400)={&(0x7f0000002440)=@xdp={0x2c, 0x7, r8, 0x3c}, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002500)='\'', 0x1}], 0x1}, 0x804) 3.655704578s ago: executing program 1 (id=2127): socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0x215e8000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x14, 0x0, &(0x7f0000000040)="259a001471a76d1188a2010088a8fbeaade65b65", 0x0, 0x8a08, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) 3.623150748s ago: executing program 4 (id=2128): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.704802736s ago: executing program 2 (id=2137): openat$tun(0xffffffffffffff9c, &(0x7f0000001d00), 0x100, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, 0x0}, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001f40)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r2, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x2, 0x6}, 0x1, 0xfb}, [{0x10000002, 0x9c, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x4}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x10000, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x5, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x6, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x10004, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0x3, 0x2}, {0x0, 0x3, 0x2, 0x7437ec78, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0x80000e, 0x0, 0x3, 0x80008, 0x7f}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0xe5bc}, {0x6, 0xb, 0x6c5f1878, 0x57c4, 0x6, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x1009}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x1, 0x1000007, 0x5, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7f}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x78d, 0xfff, 0xffffff13, 0x6, 0x7f, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x6, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x101}, {0xffff, 0x5, 0x7, 0xac, 0xf}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0x0, 0x4, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0xe5f3, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x6, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0x8c7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0xfffffffc, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0xbb, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x82, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0x75}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0x8, 0xfffffffe, 0x8}, {0x80000001, 0x8, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0xffff8000, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0xfffffffd, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x400, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x7f, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0xffffffff, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x18, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x3, 0x100, 0x54}, {0x3, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x2000007, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x4, 0x8f, 0xb0, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0x68}, {0x7, 0x20, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff0, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0x400, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0xfff, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x1, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x8007, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x1, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x4}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5f0, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x5, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x2}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff001, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x205, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0xfed, 0x6, 0x4, 0xd, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x2, 0xfffffffb, 0xffffffff, 0x633, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x7ff, 0x9, 0xb}, {0x47, 0x6, 0x81, 0xdcb, 0x3, 0x2}, {0x5, 0x80000000, 0xb, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x6, 0xfff, 0x6, 0x800}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x5, 0x6, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x6, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x9}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80000, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x20003, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0xa, 0x1}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x2, 0x1}, {}, {0x5}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x3, 0x1}, {0x4}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.647947475s ago: executing program 1 (id=2138): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000003c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_getaddrlabel={0x30, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x30}}, 0x0) 2.466408933s ago: executing program 2 (id=2141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x2, 0x3}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xf}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2.239280259s ago: executing program 2 (id=2143): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7fffffff}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2404c081, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) getsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000f80)=""/216, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='yeah', 0x4) shutdown(r0, 0x1) 2.095887407s ago: executing program 1 (id=2144): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r1, 0x51b0b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x40}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) r2 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r2, &(0x7f0000000440), 0x0, 0x4ba346f6d29095b8, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2.045742502s ago: executing program 1 (id=2145): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40241, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000600)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) socket$unix(0x1, 0x1, 0x0) epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) pselect6(0x40, &(0x7f0000001000)={0x0, 0x0, 0x3, 0x0, 0x8a3, 0x6}, 0x0, &(0x7f0000002440)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000900)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f0000000940)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x16}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}, {[@generic={0x7, 0x3, "aa"}]}}, {0x4e24, 0x4e20, 0x4d, 0x0, @gue={{0x2, 0x0, 0x1, 0xa, 0x100, @val=0x80}, "db61c3e61e153b3cba6a2b9ccd973a55baebe0cc6c880fbf3255007bd80c3a7f2347e6154e6baa4586c2fd4d56caf6f7dda6f46e474eb90a5d2988cf92"}}}}, 0x73) 1.49966565s ago: executing program 0 (id=2154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x9, 0x0, 0xba64, 0x8, 0xd0f, 0x6, 0x7, 0xc16, 0x56, 0x1, 0x400000, 0x80000001, 0x8, 0x4, 0x1, 0x3ff, 0x4, 0x1, 0x2, 0x6, 0x0, 0x5, 0x9, 0x2, 0x8, 0x2, 0x525, 0x826e, 0x1, 0x2, 0x2108, 0x468b, 0x3, 0x7f, 0x9, 0xe36, 0x1, 0x1, 0xf, 0x0, 0x7, 0x6311, 0xb, 0x6, 0x3cd, 0x2e, 0x7, 0x4, 0x8, 0x4, 0xfffffffe, 0x4, 0x0, 0x81, 0x4, 0xf1, 0x7, 0x1000, 0x1000, 0x2, 0x8, 0x7, 0x4, 0x2, 0x8000, 0x0, 0x8, 0x39, 0x6, 0x5, 0x100, 0x9, 0xb427, 0xfffffffe, 0x3, 0x7, 0x2, 0x80000001, 0xf, 0x3, 0x0, 0xdfa9, 0x2, 0x4, 0x8, 0xfffffffe, 0x8fa, 0x4, 0x6, 0x6, 0x6, 0xffffffff, 0x7, 0x2, 0x165, 0xed, 0x400, 0x7c8, 0x5, 0x6, 0x9, 0x6, 0xd, 0xd, 0x0, 0x3, 0x1000, 0x5, 0x0, 0xc, 0x5, 0x7337, 0x2, 0xff, 0x1, 0x38000000, 0xe, 0x4, 0x1, 0x48, 0x0, 0x5, 0x1, 0x2, 0xd, 0x6795, 0xb, 0x9, 0x7, 0x495, 0x200, 0x8, 0x7, 0x1ff, 0x0, 0x8, 0x9, 0x1, 0x4, 0x3, 0x7, 0x0, 0x4, 0x80000000, 0x0, 0x5, 0x6a8, 0xc1, 0x0, 0x81, 0xc30, 0xffff01ad, 0x8, 0x401, 0x5, 0x3, 0x7f, 0x9, 0x3, 0x7, 0x0, 0x9, 0x3, 0x79c0000, 0x3, 0x5, 0x100, 0x4, 0x8, 0xb535, 0x80, 0x32200, 0x9, 0x89c, 0xb3, 0x10, 0x7, 0x1, 0x3, 0xf, 0xc4e0, 0x89, 0x7, 0x9, 0xfffffffd, 0x9, 0xfffffff8, 0x4, 0x9, 0x7, 0x8, 0xe, 0xfffffffb, 0x739, 0x1ff, 0x4, 0x1, 0x5, 0x6, 0x5, 0x1629c76a, 0x40, 0x9, 0x8, 0x100, 0x1000, 0x8, 0x44, 0xe, 0x5, 0x289, 0x0, 0x3, 0x200, 0x4a5, 0x2, 0x2, 0x3, 0x1000, 0x2, 0x10, 0xfffffffa, 0x4, 0x1, 0x9, 0x2, 0x5, 0x7fffffff, 0xfffffffe, 0x1000, 0x407, 0x80, 0x1ff, 0x60e, 0x5, 0x1, 0xffff, 0x1, 0x0, 0xfffffff7, 0x358, 0x274, 0x7, 0x8, 0x4, 0x40, 0x4, 0x8, 0x8, 0x3, 0x7, 0x8000, 0x6a4b, 0x7, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 1.433823497s ago: executing program 0 (id=2156): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) 1.279786175s ago: executing program 0 (id=2158): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000a000000000008000b"], 0x44}, 0x1, 0x2000000000000000}, 0x0) 1.279422796s ago: executing program 2 (id=2159): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000010c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003, 0x0, 0x0, 0x1e00}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000007f80)=[{{0x0, 0x0, 0x0}, 0xfffffffb}], 0x1, 0x40000023, 0x0) 779.694228ms ago: executing program 2 (id=2167): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000bc0)={0xa, 0x4e20, 0x1, @empty, 0x8}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000c00)={0xa, 0x4e20, 0x6, @mcast1}, 0x1c) sendto$inet6(r0, &(0x7f0000000c40)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) recvfrom(r0, &(0x7f00000011c0)=""/4038, 0xfc6, 0x40020100, 0x0, 0x0) writev(r0, &(0x7f00000021c0)=[{&(0x7f0000002200)='x', 0x1}], 0x1) 778.495543ms ago: executing program 1 (id=2168): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x11, &(0x7f0000000100)={&(0x7f0000000140)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="48f2fffc5f00090527bd0400fd00c8", @ANYRESDEC=r2, @ANYRES16=r0], 0x48}, 0x1, 0x0, 0x0, 0x20000811}, 0x10) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 607.252185ms ago: executing program 3 (id=2169): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x48, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "000102030405060708090a0b0c0d0e0f"}]}, 0x48}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x50, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x50}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x34, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x34}}, 0x0) 547.765091ms ago: executing program 0 (id=2170): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @random=0x401, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x2000}]}, 0x5c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000a40)=ANY=[@ANYRESOCT, @ANYRESDEC=0x0], 0xfe33) 539.793822ms ago: executing program 2 (id=2171): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000700)={0x2, 0x4e21, @local}, 0x47) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000006500)=0x5f5b, 0x4) connect$inet(r0, &(0x7f0000006540)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000)="9fd8e18e45bcce079f16b15e72c2bb973672663c8b8d7f0e", 0x18, 0xc0814, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000006600), 0x4) sendto$inet(r0, &(0x7f0000006640)='<', 0x381, 0x805, 0x0, 0x0) 522.989559ms ago: executing program 4 (id=2172): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r1, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 391.842825ms ago: executing program 0 (id=2173): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffffffffffe9a, 0x734, 0x0, 0xfffffffffffffecb) 390.721513ms ago: executing program 4 (id=2174): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000026c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x60048040}, 0xc040445) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x303, 0x36}, "00000007e4008000", "8b3de2aabceef22f419e59f30000000004000000000200", "e73400", "000000d900"}, 0x38) 231.902289ms ago: executing program 3 (id=2175): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000700000024000180060005004e230000060001000200051b08000300ac1414aa"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 193.815222ms ago: executing program 3 (id=2176): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r1, 0xf507, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) syz_emit_ethernet(0x35, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c200000c020000000001002742420300"], 0x0) 143.637701ms ago: executing program 3 (id=2177): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x12, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61127900000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff3d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925f1ffed25b8b9e2a095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0xd}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 133.743796ms ago: executing program 4 (id=2178): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x200000c, 0x32, 0xffffffffffffffff, 0x41e90000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000010c0)="fa", 0x1}], 0x1}}], 0x2, 0x4000000) 69.547834ms ago: executing program 0 (id=2179): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x129642, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002980)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x9, 0x0, 0xba64, 0x8, 0xd0f, 0x6, 0x7, 0xc16, 0x56, 0x1, 0x400000, 0x80000001, 0x8, 0x4, 0x1, 0x3ff, 0x4, 0x1, 0x2, 0x6, 0x0, 0x5, 0x9, 0x2, 0x8, 0x2, 0x525, 0x826e, 0x1, 0x2, 0x2108, 0x468b, 0x3, 0x7f, 0x9, 0xe36, 0x1, 0x1, 0xf, 0x0, 0x7, 0x6311, 0xb, 0x6, 0x3cd, 0x2e, 0x7, 0x4, 0x8, 0x4, 0xfffffffe, 0x4, 0x0, 0x81, 0x4, 0xf1, 0x7, 0x1000, 0x1000, 0x2, 0x8, 0x7, 0x4, 0x2, 0x8000, 0x0, 0x8, 0x39, 0x6, 0x5, 0x100, 0x9, 0xb427, 0xfffffffe, 0x3, 0x7, 0x2, 0x80000001, 0xf, 0x3, 0x0, 0xdfa9, 0x2, 0x4, 0x8, 0xfffffffe, 0x8fa, 0x4, 0x6, 0x6, 0x6, 0xffffffff, 0x7, 0x2, 0x165, 0xed, 0x400, 0x7c8, 0x5, 0x6, 0x9, 0x6, 0xd, 0xd, 0x0, 0x3, 0x1000, 0x5, 0x0, 0xc, 0x5, 0x7337, 0x2, 0xff, 0x1, 0x38000000, 0xe, 0x4, 0x1, 0x48, 0x0, 0x5, 0x1, 0x2, 0xd, 0x6795, 0xb, 0x9, 0x7, 0x495, 0x200, 0x8, 0x7, 0x1ff, 0x0, 0x8, 0x9, 0x1, 0x4, 0x3, 0x7, 0x0, 0x4, 0x80000000, 0x0, 0x5, 0x6a8, 0xc1, 0x0, 0x81, 0xc30, 0xffff01ad, 0x8, 0x401, 0x5, 0x3, 0x7f, 0x9, 0x3, 0x7, 0x0, 0x9, 0x3, 0x79c0000, 0x3, 0x5, 0x100, 0x4, 0x8, 0xb535, 0x80, 0x32200, 0x9, 0x89c, 0xb3, 0x10, 0x7, 0x1, 0x3, 0xf, 0xc4e0, 0x89, 0x7, 0x9, 0xfffffffd, 0x9, 0xfffffff8, 0x4, 0x9, 0x7, 0x8, 0xe, 0xfffffffb, 0x739, 0x1ff, 0x4, 0x1, 0x5, 0x6, 0x5, 0x1629c76a, 0x40, 0x9, 0x8, 0x100, 0x1000, 0x8, 0x44, 0xe, 0x5, 0x289, 0x0, 0x3, 0x200, 0x4a5, 0x2, 0x2, 0x3, 0x1000, 0x2, 0x10, 0xfffffffa, 0x4, 0x1, 0x9, 0x2, 0x5, 0x7fffffff, 0xfffffffe, 0x1000, 0x407, 0x80, 0x1ff, 0x60e, 0x5, 0x1, 0xffff, 0x1, 0x0, 0xfffffff7, 0x358, 0x274, 0x7, 0x8, 0x4, 0x40, 0x4, 0x8, 0x8, 0x3, 0x7, 0x8000, 0x6a4b, 0x7, 0x5]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0xb3538085985bb3d6}, 0x0) 68.611564ms ago: executing program 3 (id=2180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x81010040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0xb, 0x0, 0x5, {[@timestamp={0x8, 0xa, 0x800, 0x7f}]}}}}}}}, 0x0) 0s ago: executing program 3 (id=2181): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000300)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000380)=0x7ff, 0x4) sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000400)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts. [ 75.489162][ T5605] cgroup: Unknown subsys name 'net' [ 75.570157][ T5605] cgroup: Unknown subsys name 'cpuset' [ 75.572908][ T5605] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.975662][ T5605] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.160167][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.163645][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.165131][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.165527][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.165988][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.166786][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.174689][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.197902][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.198207][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.198505][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.199577][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.200829][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.201263][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.202338][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.203510][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.204165][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.204332][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.212481][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.212968][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.213062][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.213574][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.221798][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.241806][ T4933] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.249879][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.267427][ T5624] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.089699][ T5617] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.094603][ T5617] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.114334][ T5617] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.155471][ T5618] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 80.264533][ T5620] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 80.314647][ T5623] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 80.350447][ T5619] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 80.476052][ T5617] infiniband rxe0: set active [ 80.478265][ T5617] infiniband rxe0: added rxe_eth0 [ 80.505086][ T5617] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 80.505121][ T5617] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 80.505159][ T5617] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 80.553921][ T25] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.582550][ T5617] RDS/IB: rxe0: added [ 80.583799][ T5617] smc: adding ib device rxe0 with port count 1 [ 80.583876][ T5617] smc: ib device rxe0 port 1 has no pnetid [ 80.619757][ T25] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.647849][ T5617] rxe_eth0 speed is unknown, defaulting to 1000 [ 80.911004][ T5617] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.279142][ T5617] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.312037][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.312743][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.313123][ T5618] bridge_slave_0: entered allmulticast mode [ 81.315130][ T5618] bridge_slave_0: entered promiscuous mode [ 81.324277][ T52] Bluetooth: hci0: command tx timeout [ 81.327849][ T52] Bluetooth: hci2: command tx timeout [ 81.328185][ T52] Bluetooth: hci1: command tx timeout [ 81.328889][ T52] Bluetooth: hci4: command tx timeout [ 81.329113][ T52] Bluetooth: hci3: command tx timeout [ 81.455591][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.455773][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.455885][ T5618] bridge_slave_1: entered allmulticast mode [ 81.461396][ T5618] bridge_slave_1: entered promiscuous mode [ 81.528741][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.528898][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.529036][ T5620] bridge_slave_0: entered allmulticast mode [ 81.530956][ T5620] bridge_slave_0: entered promiscuous mode [ 81.573966][ T5617] rxe_eth0 speed is unknown, defaulting to 1000 [ 81.608828][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.608926][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.609037][ T5620] bridge_slave_1: entered allmulticast mode [ 81.611113][ T5620] bridge_slave_1: entered promiscuous mode [ 81.687280][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.711086][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.711272][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.711374][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.711497][ T5623] bridge_slave_0: entered allmulticast mode [ 81.713909][ T5623] bridge_slave_0: entered promiscuous mode [ 81.716994][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.717275][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.717622][ T5619] bridge_slave_0: entered allmulticast mode [ 81.730920][ T5619] bridge_slave_0: entered promiscuous mode [ 81.758149][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.795010][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.817876][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.817985][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.818114][ T5623] bridge_slave_1: entered allmulticast mode [ 81.820237][ T5623] bridge_slave_1: entered promiscuous mode [ 81.860285][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.860386][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.860504][ T5619] bridge_slave_1: entered allmulticast mode [ 81.862087][ T5619] bridge_slave_1: entered promiscuous mode [ 81.930649][ T5620] team0: Port device team_slave_0 added [ 81.959250][ T5618] team0: Port device team_slave_0 added [ 81.960836][ T5620] team0: Port device team_slave_1 added [ 81.984180][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.989633][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.996161][ T5618] team0: Port device team_slave_1 added [ 82.020042][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.021765][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.049557][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.049570][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.049593][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.050934][ T5617] rxe_eth0 speed is unknown, defaulting to 1000 [ 82.052017][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.052029][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.052051][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.189461][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.189477][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.189502][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.196770][ T5623] team0: Port device team_slave_0 added [ 82.206168][ T5619] team0: Port device team_slave_0 added [ 82.210695][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.210726][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.210792][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.313684][ T5623] team0: Port device team_slave_1 added [ 82.332704][ T5619] team0: Port device team_slave_1 added [ 82.354068][ T5620] hsr_slave_0: entered promiscuous mode [ 82.355318][ T5620] hsr_slave_1: entered promiscuous mode [ 82.423258][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.423272][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.423304][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.487166][ T5618] hsr_slave_0: entered promiscuous mode [ 82.488114][ T5618] hsr_slave_1: entered promiscuous mode [ 82.488865][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 82.488929][ T5618] Cannot create hsr debugfs directory [ 82.489669][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.489680][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.489702][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.545800][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.545836][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.545902][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.623132][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.623143][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.623162][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.722335][ T5623] hsr_slave_0: entered promiscuous mode [ 82.723112][ T5623] hsr_slave_1: entered promiscuous mode [ 82.723615][ T5623] debugfs: 'hsr0' already exists in 'hsr' [ 82.723633][ T5623] Cannot create hsr debugfs directory [ 82.814663][ T5619] hsr_slave_0: entered promiscuous mode [ 82.815322][ T5619] hsr_slave_1: entered promiscuous mode [ 82.815813][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 82.815829][ T5619] Cannot create hsr debugfs directory [ 83.204530][ T5620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.215493][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.216586][ T5620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.233306][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.253970][ T5620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.267653][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.268416][ T5620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.272802][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.370773][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.385301][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.397175][ T5629] Bluetooth: hci3: command tx timeout [ 83.397213][ T5629] Bluetooth: hci4: command tx timeout [ 83.397235][ T5629] Bluetooth: hci1: command tx timeout [ 83.397256][ T5629] Bluetooth: hci2: command tx timeout [ 83.397276][ T5629] Bluetooth: hci0: command tx timeout [ 83.399077][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.402718][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.403559][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.406480][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.476007][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.485216][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.554741][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.554817][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.554906][ T5617] bridge_slave_0: entered allmulticast mode [ 83.556408][ T5617] bridge_slave_0: entered promiscuous mode [ 83.586237][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.586386][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.586495][ T5617] bridge_slave_1: entered allmulticast mode [ 83.595543][ T5617] bridge_slave_1: entered promiscuous mode [ 83.637725][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.643551][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.646142][ T5623] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.664354][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.706183][ T5617] team0: Port device team_slave_0 added [ 83.706669][ T5623] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.721262][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.726152][ T5617] team0: Port device team_slave_1 added [ 83.726219][ T5623] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.744515][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.776612][ T5623] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.786773][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.816124][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.816135][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.816163][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.848099][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.848128][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.848196][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.953558][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.956274][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.980196][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.983062][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.983606][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.986051][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.018630][ T5617] hsr_slave_0: entered promiscuous mode [ 84.019261][ T5617] hsr_slave_1: entered promiscuous mode [ 84.019680][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 84.019692][ T5617] Cannot create hsr debugfs directory [ 84.024622][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.043181][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.188402][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.249171][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.266671][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.291865][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.291946][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.337754][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.337849][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.379103][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.408135][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.411019][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.412013][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.414764][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.415443][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.420186][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.423724][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.443098][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.487661][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.487748][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.492073][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.520014][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.520103][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.605133][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.633602][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.651084][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.651175][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.690026][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.690101][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.714275][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.773850][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.773925][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.780684][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.780933][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.932162][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.001757][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.041647][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.041735][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.073511][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.073645][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.479611][ T5626] Bluetooth: hci0: command tx timeout [ 85.479643][ T5626] Bluetooth: hci1: command tx timeout [ 85.479663][ T5626] Bluetooth: hci3: command tx timeout [ 85.479683][ T5626] Bluetooth: hci2: command tx timeout [ 85.479703][ T5626] Bluetooth: hci4: command tx timeout [ 85.780224][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.804752][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.975612][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.011806][ T5620] veth0_vlan: entered promiscuous mode [ 86.065951][ T5620] veth1_vlan: entered promiscuous mode [ 86.135817][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.170645][ T5623] veth0_vlan: entered promiscuous mode [ 86.204888][ T5623] veth1_vlan: entered promiscuous mode [ 86.233670][ T5620] veth0_macvtap: entered promiscuous mode [ 86.256491][ T5620] veth1_macvtap: entered promiscuous mode [ 86.328514][ T5619] veth0_vlan: entered promiscuous mode [ 86.354522][ T5623] veth0_macvtap: entered promiscuous mode [ 86.364966][ T5623] veth1_macvtap: entered promiscuous mode [ 86.379736][ T5619] veth1_vlan: entered promiscuous mode [ 86.384353][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.404224][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.421103][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.434723][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.448842][ T194] cfg80211: failed to load regulatory.db [ 86.476145][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.563945][ T5619] veth0_macvtap: entered promiscuous mode [ 86.587786][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.587983][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.588017][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.588058][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.588090][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.588121][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.588152][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.588184][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.593948][ T5618] veth0_vlan: entered promiscuous mode [ 86.700129][ T5619] veth1_macvtap: entered promiscuous mode [ 86.762337][ T5618] veth1_vlan: entered promiscuous mode [ 86.836600][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.857615][ T189] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.857632][ T189] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.908740][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.908848][ T5617] veth0_vlan: entered promiscuous mode [ 86.950189][ T5617] veth1_vlan: entered promiscuous mode [ 86.953366][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.953381][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.031741][ T5618] veth0_macvtap: entered promiscuous mode [ 87.035597][ T5618] veth1_macvtap: entered promiscuous mode [ 87.035643][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.035657][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.068301][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.068315][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.102020][ T1267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.102116][ T1267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.102166][ T1267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.188993][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.206728][ T5617] veth0_macvtap: entered promiscuous mode [ 87.214817][ T5620] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.251369][ T5617] veth1_macvtap: entered promiscuous mode [ 87.265170][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.302846][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.302862][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.418272][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.419156][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.419191][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.419224][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.419257][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.437799][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.502241][ T5822] bridge_slave_0: left allmulticast mode [ 87.502262][ T5822] bridge_slave_0: left promiscuous mode [ 87.503305][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.529233][ T5822] bridge_slave_1: left allmulticast mode [ 87.529253][ T5822] bridge_slave_1: left promiscuous mode [ 87.529430][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.558583][ T5626] Bluetooth: hci2: command tx timeout [ 87.558610][ T5626] Bluetooth: hci3: command tx timeout [ 87.558630][ T5626] Bluetooth: hci1: command tx timeout [ 87.558649][ T5626] Bluetooth: hci0: command tx timeout [ 87.558703][ T52] Bluetooth: hci4: command tx timeout [ 87.560866][ T5822] bond0: (slave bond_slave_0): Releasing backup interface [ 87.565536][ T5822] bond0: (slave bond_slave_1): Releasing backup interface [ 87.613680][ T5822] team0: Port device team_slave_0 removed [ 87.622284][ T5822] team0: Port device team_slave_1 removed [ 87.624169][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.624214][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.633916][ T5822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.633961][ T5822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.644617][ T5822] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 87.688417][ T5824] team0: Mode changed to "random" [ 87.689008][ T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.689024][ T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.723751][ T5828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.739886][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.819735][ T5827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.826493][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.826509][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.860363][ T189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.861228][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.861409][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.909342][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.998820][ T5832] ip_tables: iptables: counters copy to user failed while replacing table [ 88.020350][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.020398][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.088730][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.088756][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.189764][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.189781][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.340412][ T5840] netlink: 'syz.4.5': attribute type 5 has an invalid length. [ 88.513932][ T5850] syz.3.14 uses obsolete (PF_INET,SOCK_PACKET) [ 88.529225][ T5851] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15'. [ 88.629452][ T5853] macvlan2: entered promiscuous mode [ 88.629472][ T5853] macvlan2: entered allmulticast mode [ 88.765167][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19'. [ 88.854442][ T5866] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 88.854462][ T5866] netlink: 'syz.3.21': attribute type 4 has an invalid length. [ 88.854475][ T5866] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.21'. [ 88.860805][ T5866] netlink: 'syz.3.21': attribute type 1 has an invalid length. [ 88.860824][ T5866] netlink: 'syz.3.21': attribute type 4 has an invalid length. [ 88.860836][ T5866] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.21'. [ 89.048298][ T5873] syzkaller1: entered promiscuous mode [ 89.048320][ T5873] syzkaller1: entered allmulticast mode [ 89.350042][ T5888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'. [ 89.350065][ T5888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.30'. [ 89.356048][ T5888] TC_ACT_REPEAT abuse ? [ 89.517496][ T5896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.34'. [ 89.708658][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 90.125112][ T5929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.293088][ T988] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.350640][ T5943] netlink: 12 bytes leftover after parsing attributes in process `syz.1.52'. [ 90.494600][ T5950] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.55'. [ 90.494632][ T5950] openvswitch: netlink: Message has 512 unknown bytes. [ 90.640529][ T5956] TC_ACT_REPEAT abuse ? [ 91.399614][ T5987] warning: `syz.3.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.172754][ T6048] ip_tables: iptables: counters copy to user failed while replacing table [ 93.189941][ T6048] syzkaller1: entered promiscuous mode [ 93.189960][ T6048] syzkaller1: entered allmulticast mode [ 93.364677][ T6055] netlink: 'syz.1.87': attribute type 10 has an invalid length. [ 93.402693][ T6055] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.432572][ T6055] bond0: (slave team0): Enslaving as an active interface with an up link [ 93.536788][ T6066] netlink: 'syz.2.91': attribute type 10 has an invalid length. [ 93.559503][ T6066] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 93.563197][ T6066] team0: Port device wlan0 added [ 93.841839][ T6080] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.96'. [ 94.012061][ T6086] Driver unsupported XDP return value 0 on prog (id 17) dev N/A, expect packet loss! [ 94.819257][ T6088] netlink: 'syz.3.99': attribute type 1 has an invalid length. [ 95.185881][ T12] IPVS: starting estimator thread 0... [ 95.298260][ T6100] IPVS: using max 31 ests per chain, 74400 per kthread [ 95.788886][ T6032] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.067646][ T6121] netlink: 64 bytes leftover after parsing attributes in process `syz.0.114'. [ 96.107969][ T6121] syzkaller1: entered promiscuous mode [ 96.107989][ T6121] syzkaller1: entered allmulticast mode [ 96.260528][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 96.774572][ T6158] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 96.962351][ T6169] ip_tunnel: non-ECT from 172.30.1.5 with TOS=0x3 [ 97.025590][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 97.025608][ T6172] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 97.280093][ T6135] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 97.404029][ T6178] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 97.653452][ T6191] netlink: 12 bytes leftover after parsing attributes in process `syz.2.140'. [ 97.654689][ T6191] netlink: 68 bytes leftover after parsing attributes in process `syz.2.140'. [ 97.936754][ T6203] syzkaller0: entered promiscuous mode [ 97.936775][ T6203] syzkaller0: entered allmulticast mode [ 97.951135][ T6203] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 98.101616][ T6210] netlink: 'syz.2.148': attribute type 19 has an invalid length. [ 98.702630][ T6239] syzkaller1: entered promiscuous mode [ 98.702651][ T6239] syzkaller1: entered allmulticast mode [ 98.942719][ T6249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 99.025666][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'. [ 99.045257][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'. [ 99.048729][ T6253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.166'. [ 99.049724][ T6253] Zero length message leads to an empty skb [ 99.069138][ T49] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.069243][ T49] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.069320][ T49] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.069399][ T49] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.224881][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 99.224902][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 99.326695][ T6259] scsi_nl_rcv_msg: discarding partial skb [ 99.518868][ T6273] netlink: 'syz.0.174': attribute type 1 has an invalid length. [ 99.531830][ T6273] netlink: 'syz.0.174': attribute type 10 has an invalid length. [ 99.531875][ T6273] netlink: 40 bytes leftover after parsing attributes in process `syz.0.174'. [ 99.532259][ T6273] dummy0: entered promiscuous mode [ 99.710739][ T6282] netlink: 'syz.2.178': attribute type 1 has an invalid length. [ 100.008983][ T6298] netlink: 284 bytes leftover after parsing attributes in process `syz.2.183'. [ 100.009004][ T6298] openvswitch: netlink: Flow key attr not present in new flow. [ 100.466035][ T6314] vlan2: entered allmulticast mode [ 100.466055][ T6314] veth1_virt_wifi: entered allmulticast mode [ 101.042199][ T6327] tipc: Started in network mode [ 101.042221][ T6327] tipc: Node identity 9e514a715624, cluster identity 4711 [ 101.042389][ T6327] tipc: Enabled bearer , priority 0 [ 101.089048][ T6327] syzkaller0: entered promiscuous mode [ 101.089070][ T6327] syzkaller0: entered allmulticast mode [ 101.089607][ T6327] tipc: Resetting bearer [ 101.182224][ T6324] tipc: Resetting bearer [ 101.829550][ T6358] netlink: 64 bytes leftover after parsing attributes in process `syz.4.204'. [ 102.720374][ T6324] tipc: Disabling bearer [ 102.750114][ T988] tipc: Node number set to 3363129969 [ 102.832328][ T6376] TC_ACT_REPEAT abuse ? [ 102.991803][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.215'. [ 103.016669][ T6380] 0: reclassify loop, rule prio 0, protocol 800 [ 103.210129][ T6399] netlink: 'syz.0.218': attribute type 1 has an invalid length. [ 104.255131][ T6341] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.255151][ T6341] nci: nci_start_poll: failed to set local general bytes [ 104.278625][ T6333] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 104.479626][ T6453] __nla_validate_parse: 6 callbacks suppressed [ 104.479647][ T6453] netlink: 60 bytes leftover after parsing attributes in process `syz.4.242'. [ 104.487327][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 104.487373][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 104.528148][ T6453] netlink: 60 bytes leftover after parsing attributes in process `syz.4.242'. [ 104.529454][ T6453] netlink: 'syz.4.242': attribute type 32 has an invalid length. [ 104.529471][ T6453] netlink: 500 bytes leftover after parsing attributes in process `syz.4.242'. [ 104.580645][ T6457] netlink: 32 bytes leftover after parsing attributes in process `syz.2.243'. [ 104.670666][ T6461] netlink: 156 bytes leftover after parsing attributes in process `syz.2.246'. [ 105.041878][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 105.041898][ T6492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.254'. [ 105.475026][ T6507] Bluetooth: MGMT ver 1.23 [ 105.482439][ T6507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 105.959486][ T6535] netlink: 'syz.4.270': attribute type 1 has an invalid length. [ 106.018496][ T6535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.073735][ T6535] bond1: (slave geneve2): making interface the new active one [ 106.076646][ T6535] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 106.140289][ T6535] syz.4.270 (6535) used greatest stack depth: 19264 bytes left [ 106.244211][ T6549] TC_ACT_REPEAT abuse ? [ 106.340783][ T6553] syzkaller0: entered promiscuous mode [ 106.340804][ T6553] syzkaller0: entered allmulticast mode [ 106.471286][ T6559] netlink: 'syz.2.279': attribute type 1 has an invalid length. [ 106.494784][ T6559] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.940847][ T6484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 108.282279][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 108.803742][ T6654] tipc: Failed to remove unknown binding: 66,0,0/0:4176439064/4176439065 [ 108.804029][ T6654] tipc: Failed to remove unknown binding: 66,0,0/0:4176439064/4176439065 [ 109.006308][ T6658] syzkaller1: entered promiscuous mode [ 109.006329][ T6658] syzkaller1: entered allmulticast mode [ 109.487284][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.488743][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.491522][ T6683] __nla_validate_parse: 1 callbacks suppressed [ 109.491537][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 109.491556][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.494299][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 109.507879][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.601492][ T6687] netlink: 32 bytes leftover after parsing attributes in process `syz.3.327'. [ 109.638239][ T10] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 109.903972][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.333'. [ 110.141571][ T6721] tipc: Started in network mode [ 110.141602][ T6721] tipc: Node identity d2b87921b994, cluster identity 4711 [ 110.141755][ T6721] tipc: Enabled bearer , priority 0 [ 110.338965][ T6721] syzkaller0: entered promiscuous mode [ 110.338988][ T6721] syzkaller0: entered allmulticast mode [ 110.340694][ T6721] tipc: Resetting bearer [ 110.412549][ T6720] tipc: Resetting bearer [ 110.572140][ T6738] netlink: 24 bytes leftover after parsing attributes in process `syz.4.337'. [ 112.118260][ T6720] tipc: Disabling bearer [ 112.195922][ T10] tipc: Node number set to 1798076705 [ 112.220516][ T6775] syzkaller0: entered promiscuous mode [ 112.220535][ T6775] syzkaller0: entered allmulticast mode [ 112.467997][ T6790] netlink: 72 bytes leftover after parsing attributes in process `syz.2.344'. [ 112.801970][ T6809] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.894184][ T6809] macvlan2: entered promiscuous mode [ 112.894206][ T6809] macvlan2: entered allmulticast mode [ 112.902616][ T6809] bond2: (slave macvlan2): Error -22 calling dev_set_mtu [ 112.977298][ T6822] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 113.231906][ T6836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.362'. [ 113.380478][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.0.362'. [ 113.867929][ T6865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.372'. [ 114.274416][ T6865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.324998][ T6867] macvlan2: entered promiscuous mode [ 114.325019][ T6867] macvlan2: entered allmulticast mode [ 114.338086][ T6867] bond1: entered promiscuous mode [ 114.345299][ T6867] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.366779][ T6867] bond1: left promiscuous mode [ 115.001590][ T6890] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 115.038099][ T6890] bond1: entered promiscuous mode [ 115.038541][ T6890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.111810][ T6890] bond1: (slave bridge1): making interface the new active one [ 115.111845][ T6890] bridge1: entered promiscuous mode [ 115.113621][ T6890] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 115.154168][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.155038][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.503559][ T6912] tipc: Enabled bearer , priority 0 [ 115.566472][ T6912] syzkaller0: entered promiscuous mode [ 115.566494][ T6912] syzkaller0: entered allmulticast mode [ 115.578626][ T6912] tipc: Resetting bearer [ 115.605702][ T6910] tipc: Resetting bearer [ 115.841322][ T6926] TCP: TCP_TX_DELAY enabled [ 116.831269][ T6910] tipc: Disabling bearer [ 116.966976][ T6944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 117.132082][ T6955] TC_ACT_REPEAT abuse ? [ 117.282184][ T6965] netlink: 'syz.0.409': attribute type 4 has an invalid length. [ 117.305293][ T6964] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 117.315329][ T6965] netlink: 'syz.0.409': attribute type 4 has an invalid length. [ 117.438690][ T6970] ip_tables: iptables: counters copy to user failed while replacing table [ 117.583637][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 118.303239][ T7000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 118.818589][ T7024] ip_tables: iptables: counters copy to user failed while replacing table [ 118.954193][ T7032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.005217][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807ae67800: rx timeout, send abort [ 119.006112][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ae67800: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 119.032193][ T7035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.099458][ T7037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.179404][ T7043] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.454027][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.444'. [ 119.454047][ T7057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.444'. [ 119.454057][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.444'. [ 119.524642][ T7059] netlink: 12 bytes leftover after parsing attributes in process `syz.3.445'. [ 119.745123][ T7069] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 119.770970][ T7071] netlink: 20 bytes leftover after parsing attributes in process `syz.3.451'. [ 119.839485][ T7076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 120.096621][ T7090] netlink: 'syz.3.458': attribute type 9 has an invalid length. [ 120.096641][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.458'. [ 120.126247][ T7090] netlink: 'syz.3.458': attribute type 9 has an invalid length. [ 120.137158][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.137196][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.137226][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.137253][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 120.534660][ T7107] netlink: 'syz.2.466': attribute type 3 has an invalid length. [ 120.534884][ T7107] netlink: 'syz.2.466': attribute type 3 has an invalid length. [ 120.627777][ T7109] syzkaller0: create flow: hash 1333636293 index 0 [ 120.757224][ T5624] Bluetooth: hci0: command 0x0c3a tx timeout [ 120.758278][ T52] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 122.204417][ T7121] bridge_slave_1: left allmulticast mode [ 122.204443][ T7121] bridge_slave_1: left promiscuous mode [ 122.204615][ T7121] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.219005][ T7121] bridge_slave_0: left allmulticast mode [ 122.219021][ T7121] bridge_slave_0: left promiscuous mode [ 122.219170][ T7121] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.239143][ T7108] syzkaller0 (unregistered): delete flow: hash 1333636293 index 0 [ 122.676070][ T7169] netlink: 'syz.4.486': attribute type 1 has an invalid length. [ 122.769171][ T7169] block nbd296: server does not support multiple connections per device. [ 122.769863][ T7169] block nbd296: shutting down sockets [ 122.937760][ T7184] __nla_validate_parse: 9 callbacks suppressed [ 122.937778][ T7184] netlink: 56 bytes leftover after parsing attributes in process `syz.3.490'. [ 123.250443][ T7199] syzkaller1: entered promiscuous mode [ 123.250466][ T7199] syzkaller1: entered allmulticast mode [ 123.257356][ T7199] 0: reclassify loop, rule prio 0, protocol 03 [ 123.296456][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.499'. [ 123.296484][ T7204] netlink: 8 bytes leftover after parsing attributes in process `syz.4.499'. [ 123.888457][ T7237] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 123.928791][ T7245] netlink: 24 bytes leftover after parsing attributes in process `syz.0.514'. [ 124.033835][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.514'. [ 124.610345][ T7279] netlink: 'syz.0.527': attribute type 1 has an invalid length. [ 124.676370][ T7283] netlink: 'syz.4.529': attribute type 4 has an invalid length. [ 124.786244][ T7289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.533'. [ 124.786962][ T7289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.533'. [ 124.786980][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.0.533'. [ 124.788873][ T7289] Unknown metaid 166 dlen 4 [ 125.071406][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'. [ 125.302395][ T7310] netlink: 32 bytes leftover after parsing attributes in process `syz.1.540'. [ 125.515161][ T7319] netlink: 'syz.3.546': attribute type 4 has an invalid length. [ 125.874627][ T7335] syzkaller0: entered promiscuous mode [ 125.874649][ T7335] syzkaller0: entered allmulticast mode [ 125.891151][ T7336] netlink: 'syz.1.549': attribute type 1 has an invalid length. [ 125.908189][ T7335] tipc: Started in network mode [ 125.908221][ T7335] tipc: Node identity 922d3cdea5eb, cluster identity 4711 [ 125.912140][ T7335] tipc: Enabled bearer , priority 0 [ 125.912212][ T7336] netlink: 'syz.1.549': attribute type 2 has an invalid length. [ 125.997057][ T7334] tipc: Resetting bearer [ 126.031380][ T7334] tipc: Disabling bearer [ 126.057616][ T7345] syzkaller0: entered promiscuous mode [ 126.057634][ T7345] syzkaller0: entered allmulticast mode [ 127.172427][ T7408] TC_ACT_REPEAT abuse ? [ 128.300219][ T7433] __nla_validate_parse: 1 callbacks suppressed [ 128.300238][ T7433] netlink: 64 bytes leftover after parsing attributes in process `syz.1.586'. [ 128.596373][ T7434] syzkaller1: entered promiscuous mode [ 128.596395][ T7434] syzkaller1: entered allmulticast mode [ 128.715231][ T7442] syzkaller0: entered promiscuous mode [ 128.715252][ T7442] syzkaller0: entered allmulticast mode [ 128.784298][ T7447] netlink: 'syz.4.590': attribute type 2 has an invalid length. [ 128.951914][ T7455] batman_adv: batadv0: Adding interface: syzkaller0 [ 128.951932][ T7455] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.951959][ T7455] batman_adv: batadv0: Interface activated: syzkaller0 [ 129.411296][ T7452] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 129.458156][ T7452] batman_adv: batadv0: Removing interface: syzkaller0 [ 129.963378][ T7484] syzkaller0: entered promiscuous mode [ 129.963400][ T7484] syzkaller0: entered allmulticast mode [ 130.194893][ T7508] netlink: 'syz.0.609': attribute type 1 has an invalid length. [ 130.255578][ T7511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.610'. [ 130.304898][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.2.611'. [ 130.316267][ T7508] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.330333][ T7512] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 130.644086][ T7531] netlink: 'syz.2.615': attribute type 1 has an invalid length. [ 130.685909][ T7530] Set syz1 is full, maxelem 2076 reached [ 130.731541][ T7526] syzkaller1: entered promiscuous mode [ 130.731561][ T7526] syzkaller1: entered allmulticast mode [ 130.748860][ T7526] 0: reclassify loop, rule prio 0, protocol 03 [ 130.800795][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.615'. [ 130.863736][ T7531] bond3: (slave bridge2): making interface the new active one [ 130.866630][ T7531] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 131.262923][ T7556] syzkaller1: entered promiscuous mode [ 131.262945][ T7556] syzkaller1: entered allmulticast mode [ 131.264063][ T7559] ip_tables: iptables: counters copy to user failed while replacing table [ 131.849675][ T7572] ip_tables: iptables: counters copy to user failed while replacing table [ 131.966094][ T7575] block nbd0: not configured, cannot reconfigure [ 132.058097][ T7581] netlink: 64 bytes leftover after parsing attributes in process `syz.0.637'. [ 132.066140][ T7581] syzkaller1: entered promiscuous mode [ 132.066157][ T7581] syzkaller1: entered allmulticast mode [ 132.488853][ T7602] syzkaller0: entered promiscuous mode [ 132.488877][ T7602] syzkaller0: entered allmulticast mode [ 132.518981][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.319521][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 133.319543][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.651'. [ 133.319554][ T7616] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Add Mapping response ret = -22) [ 134.917441][ T7662] batman_adv: batadv0: Adding interface: syzkaller0 [ 134.917459][ T7662] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 134.917485][ T7662] batman_adv: batadv0: Interface activated: syzkaller0 [ 135.461697][ T7661] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 135.517765][ T7661] batman_adv: batadv0: Removing interface: syzkaller0 [ 135.767941][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 135.767963][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 136.092203][ T7686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.669'. [ 136.092273][ T7686] bridge_slave_1: left allmulticast mode [ 136.092291][ T7686] bridge_slave_1: left promiscuous mode [ 136.092568][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.166026][ T7686] bridge_slave_0: left allmulticast mode [ 136.166050][ T7686] bridge_slave_0: left promiscuous mode [ 136.166242][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.206182][ T7691] netlink: 'syz.2.671': attribute type 1 has an invalid length. [ 136.324608][ T7695] 8021q: adding VLAN 0 to HW filter on device bond5 [ 136.335686][ T7695] bond4: (slave bond5): making interface the new active one [ 136.336222][ T7695] bond4: (slave bond5): Enslaving as an active interface with an up link [ 136.336492][ T7697] syzkaller1: entered promiscuous mode [ 136.336507][ T7697] syzkaller1: entered allmulticast mode [ 136.471172][ T7691] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 136.591766][ T7709] 0: reclassify loop, rule prio 0, protocol 03 [ 136.665194][ T7711] raw_sendmsg: syz.2.676 forgot to set AF_INET. Fix it! [ 136.892606][ T7723] syzkaller0: entered promiscuous mode [ 136.892627][ T7723] syzkaller0: entered allmulticast mode [ 137.115316][ T7733] syzkaller1: entered promiscuous mode [ 137.115337][ T7733] syzkaller1: entered allmulticast mode [ 137.141492][ T7733] netlink: 60 bytes leftover after parsing attributes in process `syz.2.686'. [ 137.349695][ T7743] bridge0: port 1(dummy0) entered blocking state [ 137.349860][ T7743] bridge0: port 1(dummy0) entered disabled state [ 137.350062][ T7743] dummy0: entered allmulticast mode [ 137.530209][ T7753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.694'. [ 137.649155][ T7757] 0: reclassify loop, rule prio 0, protocol 03 [ 137.705765][ T7761] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 137.741303][ T7761] bond2: entered promiscuous mode [ 137.741748][ T7761] 8021q: adding VLAN 0 to HW filter on device bond2 [ 137.775248][ T7761] macvtap1: entered allmulticast mode [ 137.814727][ T7761] macvtap2: entered allmulticast mode [ 138.593083][ T7761] bond2: (slave bridge1): making interface the new active one [ 138.593108][ T7761] bridge1: entered promiscuous mode [ 138.614015][ T7761] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 138.626721][ T7767] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 138.723358][ T7779] syzkaller0: entered promiscuous mode [ 138.723380][ T7779] syzkaller0: entered allmulticast mode [ 138.811414][ T7782] netlink: 'syz.0.703': attribute type 1 has an invalid length. [ 138.873334][ T7782] bond3: entered promiscuous mode [ 138.873629][ T7782] 8021q: adding VLAN 0 to HW filter on device bond3 [ 138.900598][ T7788] ipvlan2: entered allmulticast mode [ 138.900616][ T7788] bond3: entered allmulticast mode [ 138.900814][ T7788] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 138.900832][ T7788] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 138.900846][ T7788] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 138.905391][ T7788] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 138.987958][ T7795] ip_tables: iptables: counters copy to user failed while replacing table [ 139.018133][ T7784] syzkaller0: entered promiscuous mode [ 139.018154][ T7784] syzkaller0: entered allmulticast mode [ 139.332188][ T7811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.715'. [ 139.373840][ T7811] bond6: entered promiscuous mode [ 139.373862][ T7811] bond6: entered allmulticast mode [ 139.510035][ T7823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.719'. [ 139.963771][ T7849] netlink: 36 bytes leftover after parsing attributes in process `syz.4.726'. [ 140.011918][ T7842] syzkaller0: entered promiscuous mode [ 140.011939][ T7842] syzkaller0: entered allmulticast mode [ 141.389295][ T7856] syzkaller0: entered promiscuous mode [ 141.389310][ T7856] syzkaller0: entered allmulticast mode [ 141.390304][ T7859] tipc: Started in network mode [ 141.390330][ T7859] tipc: Node identity ac1414aa, cluster identity 4711 [ 141.391077][ T7859] tipc: New replicast peer: 172.20.20.187 [ 141.392463][ T7859] tipc: Enabled bearer , priority 10 [ 141.756684][ T7894] syzkaller0: entered promiscuous mode [ 141.756706][ T7894] syzkaller0: entered allmulticast mode [ 141.808893][ T7897] netlink: 'syz.2.739': attribute type 1 has an invalid length. [ 142.080474][ T7904] bridge3: entered promiscuous mode [ 142.085161][ T7904] bond7: (slave bridge3): making interface the new active one [ 142.085934][ T7904] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 142.104152][ T7907] syzkaller0: entered promiscuous mode [ 142.104192][ T7907] syzkaller0: entered allmulticast mode [ 142.225323][ T7909] 8021q: adding VLAN 0 to HW filter on device bond9 [ 142.240500][ T7909] netlink: 8 bytes leftover after parsing attributes in process `syz.2.741'. [ 142.240518][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.741'. [ 142.274002][ T7909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.299742][ T7909] bond9: (slave bond0): making interface the new active one [ 142.304263][ T7909] bond9: (slave bond0): Enslaving as an active interface with an up link [ 142.325775][ T7914] ip_tables: iptables: counters copy to user failed while replacing table [ 142.349631][ T7916] netlink: 'syz.4.743': attribute type 1 has an invalid length. [ 142.410747][ T7917] netlink: 28 bytes leftover after parsing attributes in process `syz.4.743'. [ 142.441681][ T7913] bond9 (unregistering): (slave bond0): Releasing active interface [ 142.457561][ T7913] bond9 (unregistering): Released all slaves [ 142.518961][ T7916] bond2: entered promiscuous mode [ 142.519316][ T7916] 8021q: adding VLAN 0 to HW filter on device bond2 [ 142.522147][ T7917] bond2: entered allmulticast mode [ 142.550371][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.744'. [ 142.592940][ T5625] tipc: Node number set to 2886997162 [ 142.607621][ T7922] bond2: (slave bridge1): making interface the new active one [ 142.607641][ T7922] bridge1: entered promiscuous mode [ 142.607793][ T7922] bridge1: entered allmulticast mode [ 142.609551][ T7922] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 142.788984][ T7930] syzkaller0: entered promiscuous mode [ 142.789005][ T7930] syzkaller0: entered allmulticast mode [ 142.845209][ T7931] netlink: 'syz.0.748': attribute type 1 has an invalid length. [ 143.170751][ T7946] ip_tables: iptables: counters copy to user failed while replacing table [ 143.216547][ T7948] netlink: 48 bytes leftover after parsing attributes in process `syz.4.755'. [ 143.227381][ T7948] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.755'. [ 143.320949][ T7954] netlink: 12 bytes leftover after parsing attributes in process `syz.4.758'. [ 143.351681][ T7954] vlan4: entered allmulticast mode [ 143.351699][ T7954] bridge2: entered allmulticast mode [ 143.353500][ T7954] bridge2: port 1(erspan0) entered blocking state [ 143.353694][ T7954] bridge2: port 1(erspan0) entered disabled state [ 143.353815][ T7954] erspan0: entered allmulticast mode [ 143.355329][ T7954] erspan0: entered promiscuous mode [ 143.356181][ T7954] bridge2: port 1(erspan0) entered blocking state [ 143.356281][ T7954] bridge2: port 1(erspan0) entered forwarding state [ 143.905451][ T7980] netlink: 'syz.1.766': attribute type 1 has an invalid length. [ 143.965062][ T7980] 8021q: adding VLAN 0 to HW filter on device bond3 [ 144.101326][ T7982] syzkaller0: entered promiscuous mode [ 144.101349][ T7982] syzkaller0: entered allmulticast mode [ 144.239754][ T7980] bond3: (slave bridge2): making interface the new active one [ 144.261878][ T7980] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 144.344659][ T8000] __nla_validate_parse: 2 callbacks suppressed [ 144.344679][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.769'. [ 144.752932][ T5278] veth1_vlan: left promiscuous mode [ 144.819373][ T8027] ip_tables: iptables: counters copy to user failed while replacing table [ 145.061104][ T8038] netlink: 20 bytes leftover after parsing attributes in process `syz.0.783'. [ 145.119972][ T8038] bond0: (slave bond_slave_0): Releasing backup interface [ 145.132004][ T8040] ip_tables: iptables: counters copy to user failed while replacing table [ 145.229507][ T8038] bond_slave_0: entered promiscuous mode [ 145.229528][ T8038] bond_slave_0: entered allmulticast mode [ 145.693092][ T8070] netlink: 24 bytes leftover after parsing attributes in process `syz.1.788'. [ 146.445668][ T8104] syzkaller0: entered promiscuous mode [ 146.445689][ T8104] syzkaller0: entered allmulticast mode [ 146.813092][ T8121] syzkaller0: entered promiscuous mode [ 146.813113][ T8121] syzkaller0: entered allmulticast mode [ 146.950303][ T8130] netlink: 16 bytes leftover after parsing attributes in process `syz.2.805'. [ 147.089959][ T8138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'. [ 147.178491][ T8138] bond5: entered promiscuous mode [ 147.178512][ T8138] bond5: entered allmulticast mode [ 147.216063][ T8141] syzkaller0: entered promiscuous mode [ 147.216083][ T8141] syzkaller0: entered allmulticast mode [ 147.227304][ T8146] syzkaller0: entered promiscuous mode [ 147.227350][ T8146] syzkaller0: entered allmulticast mode [ 147.423367][ T8155] netlink: 44 bytes leftover after parsing attributes in process `syz.0.810'. [ 147.844773][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 147.903816][ T8174] syzkaller0: entered promiscuous mode [ 147.903840][ T8174] syzkaller0: entered allmulticast mode [ 148.006684][ T8182] netlink: 'syz.1.816': attribute type 1 has an invalid length. [ 148.181298][ T8188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.816'. [ 149.370275][ T8182] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 149.372633][ T8185] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 149.374254][ T8186] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 149.560799][ T8202] netlink: 48 bytes leftover after parsing attributes in process `syz.0.819'. [ 149.574137][ T8200] syzkaller0: entered promiscuous mode [ 149.574172][ T8200] syzkaller0: entered allmulticast mode [ 149.613209][ T8202] netlink: 'syz.0.819': attribute type 8 has an invalid length. [ 149.613227][ T8202] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.819'. [ 149.720705][ T8209] syzkaller0: entered promiscuous mode [ 149.720724][ T8209] syzkaller0: entered allmulticast mode [ 149.948250][ T13] IPVS: starting estimator thread 0... [ 149.948383][ T8222] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 149.949205][ T8222] netlink: 'syz.2.824': attribute type 21 has an invalid length. [ 149.949225][ T8222] IPv6: NLM_F_CREATE should be specified when creating new route [ 149.949483][ T8222] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.949494][ T8222] IPv6: NLM_F_CREATE should be set when creating new route [ 149.949564][ T8222] IPv6: NLM_F_CREATE should be set when creating new route [ 149.950031][ T8222] IPv6: NLM_F_CREATE should be set when creating new route [ 150.037023][ T8223] IPVS: using max 36 ests per chain, 86400 per kthread [ 150.594467][ T8249] netlink: 'syz.4.831': attribute type 3 has an invalid length. [ 150.594492][ T8249] netlink: 11575 bytes leftover after parsing attributes in process `syz.4.831'. [ 150.781798][ T8261] netlink: 'syz.4.835': attribute type 1 has an invalid length. [ 150.851386][ T8254] netlink: 14 bytes leftover after parsing attributes in process `syz.1.832'. [ 150.879944][ T8261] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 150.934845][ T8261] veth7: entered promiscuous mode [ 150.944199][ T8261] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 151.064556][ T8268] netlink: 48 bytes leftover after parsing attributes in process `syz.2.837'. [ 151.092495][ T8268] netlink: 'syz.2.837': attribute type 4 has an invalid length. [ 151.092515][ T8268] netlink: 11575 bytes leftover after parsing attributes in process `syz.2.837'. [ 151.224225][ T8272] syzkaller0: entered promiscuous mode [ 151.224244][ T8272] syzkaller0: entered allmulticast mode [ 152.076303][ T8301] syzkaller0: entered promiscuous mode [ 152.076323][ T8301] syzkaller0: entered allmulticast mode [ 152.261086][ T8313] syzkaller0: entered promiscuous mode [ 152.261108][ T8313] syzkaller0: entered allmulticast mode [ 152.263820][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.853'. [ 152.264542][ T8314] netlink: 28 bytes leftover after parsing attributes in process `syz.3.853'. [ 152.302613][ T8318] netlink: 550 bytes leftover after parsing attributes in process `syz.4.855'. [ 152.346534][ T8316] syzkaller0: entered promiscuous mode [ 152.346553][ T8316] syzkaller0: entered allmulticast mode [ 152.409872][ T8322] netlink: 'syz.3.858': attribute type 1 has an invalid length. [ 152.503965][ T8324] bond1: (slave geneve2): making interface the new active one [ 152.514938][ T8324] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 152.534496][ T8322] netlink: 28 bytes leftover after parsing attributes in process `syz.3.858'. [ 152.551206][ T8322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.577655][ T1267] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.577713][ T1267] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.577745][ T1267] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 152.612465][ T8328] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 152.631154][ T8328] syzkaller0: entered promiscuous mode [ 152.631171][ T8328] syzkaller0: entered allmulticast mode [ 152.688967][ T8335] netlink: 'syz.3.862': attribute type 10 has an invalid length. [ 152.712042][ T8335] team0: Port device dummy0 added [ 152.729577][ T60] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 153.035464][ T8347] syzkaller0: entered promiscuous mode [ 153.035489][ T8347] syzkaller0: entered allmulticast mode [ 153.443096][ T8364] l2tp_ppp: sess 2/0: no socket in recv [ 153.445290][ T8365] syzkaller0: entered promiscuous mode [ 153.445308][ T8365] syzkaller0: entered allmulticast mode [ 153.985688][ T8382] syzkaller0: entered promiscuous mode [ 153.985711][ T8382] syzkaller0: entered allmulticast mode [ 154.213898][ T8390] syzkaller0: entered promiscuous mode [ 154.213919][ T8390] syzkaller0: entered allmulticast mode [ 154.280239][ T8393] syzkaller1: entered promiscuous mode [ 154.280257][ T8393] syzkaller1: entered allmulticast mode [ 154.753520][ T8412] syzkaller0: entered promiscuous mode [ 154.753542][ T8412] syzkaller0: entered allmulticast mode [ 154.762180][ T8412] 0: reclassify loop, rule prio 0, protocol 800 [ 154.836325][ T8414] syzkaller0: entered promiscuous mode [ 154.836344][ T8414] syzkaller0: entered allmulticast mode [ 154.851266][ T8414] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 154.925163][ T8418] netlink: 'syz.0.896': attribute type 1 has an invalid length. [ 154.980063][ T8418] 8021q: adding VLAN 0 to HW filter on device bond6 [ 155.036497][ T8418] __nla_validate_parse: 1 callbacks suppressed [ 155.036514][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.896'. [ 155.115929][ T8418] bond6: (slave bridge2): making interface the new active one [ 155.128968][ T8418] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 155.197104][ T8425] syzkaller0: entered promiscuous mode [ 155.197120][ T8425] syzkaller0: entered allmulticast mode [ 155.198709][ T8427] syzkaller0: entered promiscuous mode [ 155.198727][ T8427] syzkaller0: entered allmulticast mode [ 155.204133][ T8427] 0: reclassify loop, rule prio 0, protocol 800 [ 156.167068][ T8472] syzkaller1: entered promiscuous mode [ 156.167090][ T8472] syzkaller1: entered allmulticast mode [ 156.648681][ T8491] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.814005][ T8499] syzkaller0: entered promiscuous mode [ 156.814025][ T8499] syzkaller0: entered allmulticast mode [ 157.105848][ T8517] syzkaller0: entered promiscuous mode [ 157.105870][ T8517] syzkaller0: entered allmulticast mode [ 157.443354][ T8541] openvswitch: netlink: Unexpected mask (mask=100000090, allowed=100010058) [ 158.033817][ T5278] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 158.123583][ T8579] syzkaller0: entered promiscuous mode [ 158.123604][ T8579] syzkaller0: entered allmulticast mode [ 158.226946][ T8585] syzkaller0: entered promiscuous mode [ 158.226966][ T8585] syzkaller0: entered allmulticast mode [ 158.448810][ T8587] syzkaller0: entered promiscuous mode [ 158.448832][ T8587] syzkaller0: entered allmulticast mode [ 158.740887][ T8601] syzkaller0: entered promiscuous mode [ 158.740908][ T8601] syzkaller0: entered allmulticast mode [ 158.942254][ T8606] syzkaller0: entered promiscuous mode [ 158.942276][ T8606] syzkaller0: entered allmulticast mode [ 159.026276][ T8610] syzkaller0: entered promiscuous mode [ 159.026296][ T8610] syzkaller0: entered allmulticast mode [ 159.062286][ T8610] tc action pedit 'at' offset 5 out of bounds [ 159.132165][ T8615] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 159.779708][ T8632] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 159.804744][ T8632] dummy0: left allmulticast mode [ 159.805064][ T8632] bridge0: port 1(dummy0) entered disabled state [ 159.832530][ T8632] bond2: (slave veth0_to_bond): Releasing backup interface [ 159.848580][ T8632] bond0: (slave bond_slave_1): Releasing backup interface [ 159.865301][ T8632] team0: Port device team_slave_0 removed [ 159.874434][ T8632] team0: Port device team_slave_1 removed [ 159.875116][ T8632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.875130][ T8632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.876489][ T8632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.876503][ T8632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.893740][ T8632] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 159.952633][ T8638] team0: Port device xfrm0 added [ 159.980720][ T8637] syzkaller0: entered promiscuous mode [ 159.980733][ T8637] syzkaller0: entered allmulticast mode [ 160.027257][ T8637] tipc: Enabled bearer , priority 0 [ 160.033573][ T8636] tipc: Resetting bearer [ 160.100411][ T8636] tipc: Disabling bearer [ 160.121357][ T8632] tipc: Enabled bearer , priority 0 [ 160.552426][ T8667] syzkaller0: entered promiscuous mode [ 160.552448][ T8667] syzkaller0: entered allmulticast mode [ 160.645494][ T8671] syzkaller0: entered promiscuous mode [ 160.645515][ T8671] syzkaller0: entered allmulticast mode [ 160.665042][ T8671] 0: reclassify loop, rule prio 0, protocol 800 [ 160.892699][ T31] audit: type=1804 audit(1792260231.213:2): pid=8680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.972" name="/newroot/162/cgroup.controllers" dev="tmpfs" ino=844 res=1 errno=0 [ 160.895636][ T31] audit: type=1800 audit(1792260231.213:3): pid=8680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.972" name="cgroup.controllers" dev="tmpfs" ino=844 res=0 errno=0 [ 161.134491][ T8685] tipc: Enabling of bearer rejected, failed to enable media [ 161.195545][ T8662] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 161.195565][ T8662] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 161.237149][ T10] tipc: Node number set to 935738590 [ 161.288501][ T8662] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 161.288524][ T8662] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 161.384890][ T8662] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 161.384910][ T8662] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 161.476276][ T8662] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 161.476297][ T8662] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 161.859544][ T8720] netlink: 'syz.1.978': attribute type 1 has an invalid length. [ 161.869515][ T8722] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.002039][ T8720] 8021q: adding VLAN 0 to HW filter on device bond4 [ 162.038172][ T8723] netlink: 52 bytes leftover after parsing attributes in process `syz.0.979'. [ 162.042701][ T8726] veth5: entered allmulticast mode [ 162.070128][ T8726] bond4: (slave veth5): Enslaving as an active interface with a down link [ 162.100612][ T8736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 162.140686][ T8718] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 162.177212][ T8720] macvlan2: entered promiscuous mode [ 162.177241][ T8720] macvlan2: entered allmulticast mode [ 162.180815][ T8720] bond4: entered promiscuous mode [ 162.217386][ T8720] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 162.218039][ T8720] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 162.220181][ T8720] bond4: left promiscuous mode [ 162.452889][ T8755] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 162.498314][ T8743] tipc: Enabled bearer , priority 0 [ 162.500365][ T8748] syzkaller0: entered promiscuous mode [ 162.500385][ T8748] syzkaller0: entered allmulticast mode [ 162.504831][ T8741] tipc: Resetting bearer [ 162.578381][ T8737] tipc: Resetting bearer [ 162.625851][ T8737] tipc: Disabling bearer [ 162.650487][ T8757] syzkaller0: entered promiscuous mode [ 162.650503][ T8757] syzkaller0: entered allmulticast mode [ 162.772364][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 162.791166][ T8764] netlink: 'syz.2.987': attribute type 1 has an invalid length. [ 162.791190][ T8764] netlink: 224 bytes leftover after parsing attributes in process `syz.2.987'. [ 163.094991][ T8778] netlink: 'syz.3.989': attribute type 10 has an invalid length. [ 163.143071][ T8778] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 163.224308][ T8791] syz_tun: entered allmulticast mode [ 163.236037][ T8791] syz_tun: left allmulticast mode [ 163.243250][ T8785] syzkaller0: entered promiscuous mode [ 163.243268][ T8785] syzkaller0: entered allmulticast mode [ 163.568456][ T8801] syzkaller0: entered promiscuous mode [ 163.568476][ T8801] syzkaller0: entered allmulticast mode [ 164.883886][ T8811] syzkaller0: entered promiscuous mode [ 164.883909][ T8811] syzkaller0: entered allmulticast mode [ 164.885342][ T8815] syzkaller0: entered promiscuous mode [ 164.885359][ T8815] syzkaller0: entered allmulticast mode [ 165.251982][ T8845] syzkaller0: entered promiscuous mode [ 165.252004][ T8845] syzkaller0: entered allmulticast mode [ 165.268896][ T8848] netlink: 'syz.1.1004': attribute type 1 has an invalid length. [ 165.272304][ T8845] simple: /dev/video#_3 [ 165.272319][ T8845] simple: /dev/video#_6 [ 165.272330][ T8845] simple: /dev/video#_9 [ 165.272339][ T8845] simple: /dev/video#_12 [ 165.272349][ T8845] simple: /dev/video#_15 [ 165.272358][ T8845] simple: /dev/video#_18 [ 165.272367][ T8845] simple: /dev/video#_21 [ 165.272376][ T8845] simple: /dev/video#_24 [ 165.272386][ T8845] simple: /dev/video#_27 [ 165.272395][ T8845] simple: /dev/video#_30 [ 165.272405][ T8845] simple: /dev/video#_33 [ 165.272414][ T8845] simple: /dev/video#_36 [ 165.272424][ T8845] simple: /dev/video#_39 [ 165.272433][ T8845] simple: /dev/video#_42 [ 165.272441][ T8845] simple: /dev/video#_45 [ 165.272451][ T8845] simple: /dev/video#_48 [ 165.272460][ T8845] simple: /dev/video#_51 [ 165.272470][ T8845] simple: /dev/video#_54 [ 165.272479][ T8845] simple: /dev/video#_57 [ 165.272488][ T8845] simple: /dev/video#_60 [ 165.272498][ T8845] simple: /dev/video#_63 [ 165.272507][ T8845] simple: /dev/video#_66 [ 165.272517][ T8845] simple: /dev/video#_69 [ 165.272526][ T8845] simple: /dev/video#_72 [ 165.272535][ T8845] simple: /dev/video#_75 [ 165.272545][ T8845] simple: /dev/video#_78 [ 165.272554][ T8845] simple: /dev/video#_81 [ 165.272564][ T8845] simple: /dev/video#_84 [ 165.272573][ T8845] simple: /dev/video#_87 [ 165.272582][ T8845] simple: /dev/video#_90 [ 165.272591][ T8845] simple: /dev/video#_93 [ 165.272601][ T8845] simple: /dev/video#_96 [ 165.272611][ T8845] TC_ACT_REPEAT abuse ? [ 165.474632][ T8848] bond5: entered promiscuous mode [ 165.476538][ T8848] 8021q: adding VLAN 0 to HW filter on device bond5 [ 165.582141][ T8851] bond5: (slave bridge3): making interface the new active one [ 165.582162][ T8851] bridge3: entered promiscuous mode [ 165.585820][ T8851] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 165.623338][ T8848] ipvlan2: entered allmulticast mode [ 165.623355][ T8848] bond5: entered allmulticast mode [ 165.623368][ T8848] bridge3: entered allmulticast mode [ 165.623816][ T8848] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 165.623834][ T8848] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 165.852005][ T31] audit: type=1804 audit(1792260236.173:4): pid=8866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1007" name="/newroot/171/cgroup.controllers" dev="tmpfs" ino=892 res=1 errno=0 [ 165.860439][ T31] audit: type=1800 audit(1792260236.173:5): pid=8866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1007" name="cgroup.controllers" dev="tmpfs" ino=892 res=0 errno=0 [ 165.922465][ T8869] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1008'. [ 166.214917][ T8880] syzkaller0: entered promiscuous mode [ 166.214939][ T8880] syzkaller0: entered allmulticast mode [ 166.813555][ T8914] syzkaller0: entered promiscuous mode [ 166.813576][ T8914] syzkaller0: entered allmulticast mode [ 166.848466][ T8914] tipc: Enabled bearer , priority 0 [ 166.851862][ T8911] tipc: Resetting bearer [ 166.889991][ T8919] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 166.963726][ T8911] tipc: Disabling bearer [ 167.609658][ T8920] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1024'. [ 167.609677][ T8920] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1024'. [ 167.609691][ T8920] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1024'. [ 168.585899][ T8993] syzkaller0: entered promiscuous mode [ 168.585923][ T8993] syzkaller0: entered allmulticast mode [ 168.753094][ T9021] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.031727][ T9029] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 172.119241][ T8554] bond4: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 172.119468][ T8554] bond4: (slave veth0_to_bond): making interface the new active one [ 172.158891][ T8554] veth0_to_bond: entered promiscuous mode [ 172.159764][ T8554] bond4: active interface up! [ 172.606061][ T9102] syzkaller0: entered promiscuous mode [ 172.606083][ T9102] syzkaller0: entered allmulticast mode [ 173.120658][ T9119] vlan3: entered promiscuous mode [ 173.120680][ T9119] hsr0: entered promiscuous mode [ 173.120954][ T9119] vlan3: entered allmulticast mode [ 173.120968][ T9119] hsr0: entered allmulticast mode [ 173.120979][ T9119] hsr_slave_0: entered allmulticast mode [ 173.120993][ T9119] hsr_slave_1: entered allmulticast mode [ 173.339536][ T9119] syz.1.1069 (9119) used greatest stack depth: 18688 bytes left [ 173.423121][ T9130] syzkaller0: entered promiscuous mode [ 173.423141][ T9130] syzkaller0: entered allmulticast mode [ 173.476120][ T9130] tipc: Enabled bearer , priority 0 [ 173.490621][ T9138] tipc: Enabling of bearer rejected, failed to enable media [ 173.520557][ T9136] syzkaller0: entered promiscuous mode [ 173.520574][ T9136] syzkaller0: entered allmulticast mode [ 173.544004][ T9130] tipc: Resetting bearer [ 173.544175][ T9130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.544197][ T9130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.544213][ T9130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.544227][ T9130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.544241][ T9130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.544255][ T9130] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.597545][ T9129] tipc: Resetting bearer [ 173.652644][ T9129] tipc: Disabling bearer [ 174.304431][ T9176] tipc: Enabling of bearer rejected, failed to enable media [ 174.635135][ T9196] syzkaller0: entered promiscuous mode [ 174.635155][ T9196] syzkaller0: entered allmulticast mode [ 174.737714][ T9200] openvswitch: netlink: Message has 8 unknown bytes. [ 174.737782][ T9200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 175.029606][ T9218] tipc: Enabling of bearer rejected, failed to enable media [ 175.100238][ T9222] IPVS: nq: FWM 3 0x00000003 - no destination available [ 175.557836][ T9248] syzkaller0: entered promiscuous mode [ 175.557858][ T9248] syzkaller0: entered allmulticast mode [ 175.623652][ T9254] syz_tun: entered allmulticast mode [ 175.636224][ T9254] syz_tun: left allmulticast mode [ 175.788513][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 175.788547][ T9260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1117'. [ 175.963617][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.982090][ T9259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.127986][ T9158] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.128016][ T9158] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.128037][ T9158] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 176.128067][ T9158] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.128086][ T9158] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.128105][ T9158] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 176.128131][ T9158] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.128150][ T9158] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.128169][ T9158] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 176.128194][ T9158] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 176.128213][ T9158] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.128231][ T9158] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 176.328797][ T9288] syz_tun: entered allmulticast mode [ 176.329355][ T9288] syz_tun: left allmulticast mode [ 176.466565][ T9294] syzkaller0: entered promiscuous mode [ 176.466586][ T9294] syzkaller0: entered allmulticast mode [ 176.718415][ T9311] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 176.718415][ T9311] Please contact the netfilter-devel mailing list or update your nftables rules. [ 176.784652][ T9316] syz_tun: entered allmulticast mode [ 176.799001][ T9316] syz_tun: left allmulticast mode [ 177.162604][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1151'. [ 177.163662][ T9342] netlink: 'syz.2.1151': attribute type 1 has an invalid length. [ 177.163679][ T9342] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1151'. [ 177.656481][ T9378] net_ratelimit: 3 callbacks suppressed [ 177.656512][ T9378] openvswitch: netlink: Key type 52 is out of range max 32 [ 177.682158][ T9377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1164'. [ 177.682640][ T9377] netlink: 'syz.4.1164': attribute type 1 has an invalid length. [ 177.682655][ T9377] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1164'. [ 178.087679][ T1176] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.202887][ T9406] netlink: 'syz.2.1177': attribute type 1 has an invalid length. [ 178.202906][ T9406] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1177'. [ 178.424376][ T9424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1184'. [ 178.732131][ T9433] bridge2: port 1(erspan0) entered disabled state [ 178.848468][ T9433] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.849562][ T9433] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.974051][ T9433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.987671][ T9433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.403336][ T1176] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.403864][ T3278] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.403947][ T3278] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.404025][ T3278] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.463493][ T9452] tipc: Started in network mode [ 179.463518][ T9452] tipc: Node identity aec1eaae1a2e, cluster identity 4711 [ 179.464718][ T9452] tipc: Enabled bearer , priority 0 [ 179.527448][ T9457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.544453][ T9451] tipc: Disabling bearer [ 179.860446][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1204'. [ 180.113336][ T9490] bond9: entered allmulticast mode [ 180.113712][ T9490] 8021q: adding VLAN 0 to HW filter on device bond9 [ 180.150566][ T9490] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 180.156295][ T9490] macvlan2: entered allmulticast mode [ 180.156313][ T9490] bond0: entered allmulticast mode [ 180.156325][ T9490] bond_slave_0: entered allmulticast mode [ 180.156341][ T9490] bond_slave_1: entered allmulticast mode [ 180.161260][ T9490] bond9: (slave macvlan2): Enslaving as a backup interface with an up link [ 180.229292][ T9490] ip6gretap1: entered allmulticast mode [ 180.231825][ T9490] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 180.265960][ T9490] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1208'. [ 180.282872][ T9499] openvswitch: netlink: Flow key attribute not present in set flow. [ 180.369446][ T9490] bond0 (unregistering): left allmulticast mode [ 180.369468][ T9490] bond_slave_0: left allmulticast mode [ 180.369484][ T9490] bond_slave_1: left allmulticast mode [ 180.407627][ T9490] bond9: (slave macvlan2): Removing an active aggregator [ 180.407657][ T9490] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 180.408109][ T9490] bond9: (slave macvlan2): Releasing backup interface [ 180.408126][ T9490] bond9: (slave macvlan2): the permanent HWaddr of slave - 1e:66:5d:ef:54:c3 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 180.411672][ T9490] macvlan2 (unregistering): left allmulticast mode [ 180.438722][ T12] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 180.534701][ T9490] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.571693][ T9490] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.574671][ T9490] bond0 (unregistering): Released all slaves [ 180.709551][ T9500] tipc: Enabled bearer , priority 0 [ 180.868766][ T9498] tipc: Disabling bearer [ 181.022408][ T9530] bond4: entered allmulticast mode [ 181.022787][ T9530] 8021q: adding VLAN 0 to HW filter on device bond4 [ 181.135160][ T9530] ip6gretap2: entered allmulticast mode [ 181.135740][ T9530] bond4: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 181.139675][ T8288] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 181.179665][ T9548] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1218'. [ 181.223459][ T9548] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 181.236696][ T9544] xt_connbytes: Forcing CT accounting to be enabled [ 181.252956][ T9548] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.256658][ T9548] bond0 (unregistering): Released all slaves [ 181.278170][ T1176] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 181.300034][ T9552] tipc: Enabling of bearer rejected, failed to enable media [ 181.303474][ T9553] netlink: 'syz.1.1225': attribute type 1 has an invalid length. [ 181.303491][ T9553] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1225'. [ 181.491015][ T9562] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 181.535707][ T9563] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1229'. [ 181.538992][ T9563] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1229'. [ 181.840358][ T9580] syzkaller0: entered promiscuous mode [ 181.840379][ T9580] syzkaller0: entered allmulticast mode [ 181.944459][ T9590] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1236'. [ 181.945969][ T9590] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1236'. [ 182.151859][ T9597] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 182.194332][ T9596] netlink: 'syz.3.1238': attribute type 1 has an invalid length. [ 182.194353][ T9596] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1238'. [ 182.342912][ T9606] xt_hashlimit: size too large, truncated to 1048576 [ 182.481616][ T9611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1244'. [ 182.481649][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 182.834614][ T9632] batadv0: entered promiscuous mode [ 182.835882][ T9629] netlink: 'syz.0.1252': attribute type 1 has an invalid length. [ 182.835902][ T9629] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1252'. [ 182.853193][ T9635] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 182.869314][ T9632] macsec1: entered promiscuous mode [ 182.871951][ T9632] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 182.875012][ T9632] batadv0: left promiscuous mode [ 183.012590][ T9643] ip_tables: iptables: counters copy to user failed while replacing table [ 183.138461][ T9650] ip_tables: iptables: counters copy to user failed while replacing table [ 183.199570][ T8288] veth0_to_bond: left promiscuous mode [ 183.244396][ T9661] bridge_slave_0: default FDB implementation only supports local addresses [ 183.462793][ T9672] syzkaller0: entered promiscuous mode [ 183.462815][ T9672] syzkaller0: entered allmulticast mode [ 183.632934][ T9681] syzkaller0: entered promiscuous mode [ 183.632955][ T9681] syzkaller0: entered allmulticast mode [ 183.649354][ T9681] tipc: Enabled bearer , priority 0 [ 183.654304][ T9679] tipc: Resetting bearer [ 183.689854][ T9679] tipc: Disabling bearer [ 183.765952][ T9691] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 183.869330][ T9696] ip_tables: iptables: counters copy to user failed while replacing table [ 184.206976][ T9721] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 184.331965][ T9728] netlink: 'syz.1.1297': attribute type 1 has an invalid length. [ 184.843530][ T9761] ip_tables: iptables: counters copy to user failed while replacing table [ 184.940127][ T9767] syzkaller0: entered promiscuous mode [ 184.940147][ T9767] syzkaller0: entered allmulticast mode [ 185.108361][ T8797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.108722][ T8797] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.137084][ T988] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.177193][ T988] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 185.321947][ T9790] ip_tables: iptables: counters copy to user failed while replacing table [ 185.622078][ T9814] team0: Master is either lo or non-ether device [ 185.658645][ T9816] bridge_slave_0: default FDB implementation only supports local addresses [ 185.749900][ T9822] syzkaller0: entered promiscuous mode [ 185.749920][ T9822] syzkaller0: entered allmulticast mode [ 185.755000][ T9822] tipc: Enabled bearer , priority 0 [ 185.765097][ T9820] tipc: Resetting bearer [ 185.810957][ T9820] tipc: Disabling bearer [ 185.975931][ T9833] syzkaller0: entered promiscuous mode [ 185.975950][ T9833] syzkaller0: entered allmulticast mode [ 186.102887][ T9838] tipc: Enabled bearer , priority 10 [ 186.117065][ T988] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 186.544716][ T9868] netlink: 'syz.0.1366': attribute type 1 has an invalid length. [ 186.603339][ T9868] 8021q: adding VLAN 0 to HW filter on device bond7 [ 186.668561][ T9868] veth3: entered allmulticast mode [ 186.674430][ T9868] bond7: (slave veth3): Enslaving as an active interface with a down link [ 186.701776][ T9868] bond7: (slave veth0_to_bond): making interface the new active one [ 186.708412][ T9868] veth0_to_bond: entered promiscuous mode [ 186.728522][ T9868] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 186.828377][ T9884] ip_tables: iptables: counters copy to user failed while replacing table [ 187.070576][ T9900] syzkaller0: entered promiscuous mode [ 187.070596][ T9900] syzkaller0: entered allmulticast mode [ 187.090457][ T9900] tipc: Enabled bearer , priority 0 [ 187.106626][ T9898] tipc: Resetting bearer [ 187.132624][ T9898] tipc: Disabling bearer [ 187.180570][ T9908] netlink: 'syz.4.1384': attribute type 1 has an invalid length. [ 187.209063][ T9908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.235341][ T9908] veth9: entered allmulticast mode [ 187.247694][ T9908] bond0: (slave veth9): Enslaving as an active interface with a down link [ 187.269096][ T9908] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 187.431991][ T9918] syzkaller0: entered promiscuous mode [ 187.432011][ T9918] syzkaller0: entered allmulticast mode [ 187.504940][ T9925] Dead loop on virtual device ip6_vti0 (net 39), fix it urgently! [ 187.570806][ T9930] team0: Port device macvlan0 added [ 187.950211][ T9959] syzkaller0: entered promiscuous mode [ 187.950232][ T9959] syzkaller0: entered allmulticast mode [ 188.241831][ T9976] net_ratelimit: 1 callbacks suppressed [ 188.241849][ T9976] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 188.343704][ T9984] __nla_validate_parse: 7 callbacks suppressed [ 188.343722][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'. [ 188.418673][ T9988] syzkaller0: entered promiscuous mode [ 188.418691][ T9988] syzkaller0: entered allmulticast mode [ 188.528938][ T9992] syzkaller0: entered promiscuous mode [ 188.528968][ T9992] syzkaller0: entered allmulticast mode [ 188.973613][T10018] syzkaller0: entered promiscuous mode [ 188.973633][T10018] syzkaller0: entered allmulticast mode [ 189.157191][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 189.182782][T10033] netlink: 'syz.1.1440': attribute type 1 has an invalid length. [ 189.215997][T10033] 8021q: adding VLAN 0 to HW filter on device bond6 [ 189.235926][T10033] bond4: (slave veth0_to_bond): Releasing active interface [ 189.258844][T10033] bond6: (slave veth0_to_bond): making interface the new active one [ 189.261149][T10033] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 189.475476][T10048] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1447'. [ 189.574703][T10055] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 189.623459][T10059] syzkaller0: entered promiscuous mode [ 189.623477][T10059] syzkaller0: entered allmulticast mode [ 189.626609][T10059] tipc: Enabled bearer , priority 0 [ 189.646656][T10058] tipc: Resetting bearer [ 189.663423][T10058] tipc: Disabling bearer [ 189.709021][T10064] netlink: 'syz.1.1454': attribute type 1 has an invalid length. [ 189.739183][T10064] 8021q: adding VLAN 0 to HW filter on device bond7 [ 189.746033][T10064] bond6: (slave veth0_to_bond): Releasing active interface [ 189.769285][T10064] bond7: (slave veth0_to_bond): making interface the new active one [ 189.770824][T10064] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 190.039568][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1460'. [ 190.111853][T10088] syzkaller0: entered promiscuous mode [ 190.111872][T10088] syzkaller0: entered allmulticast mode [ 190.482579][T10113] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1475'. [ 190.707897][T10130] netlink: 'syz.4.1483': attribute type 1 has an invalid length. [ 190.748758][T10130] 8021q: adding VLAN 0 to HW filter on device bond5 [ 190.812136][T10130] veth11: entered allmulticast mode [ 190.829125][T10130] bond5: (slave veth11): Enslaving as an active interface with a down link [ 190.849575][T10136] bond0: (slave veth0_to_bond): Releasing active interface [ 190.870175][T10136] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 191.559778][T10185] ip_tables: iptables: counters copy to user failed while replacing table [ 191.724268][T10197] syzkaller0: entered promiscuous mode [ 191.724291][T10197] syzkaller0: entered allmulticast mode [ 192.086451][T10224] netlink: 'syz.1.1521': attribute type 1 has an invalid length. [ 192.148907][T10224] 8021q: adding VLAN 0 to HW filter on device bond8 [ 192.231046][T10224] veth7: entered allmulticast mode [ 192.249794][T10224] bond7: (slave veth0_to_bond): Releasing active interface [ 192.271635][T10224] bond8: (slave veth0_to_bond): making interface the new active one [ 192.274704][T10224] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 192.465347][T10248] Bluetooth: hci0: Invalid link address type 18 for 00:40:00:00:00:00 [ 192.647035][T10262] netlink: 'syz.3.1537': attribute type 2 has an invalid length. [ 193.092174][T10287] syzkaller0: entered promiscuous mode [ 193.092196][T10287] syzkaller0: entered allmulticast mode [ 193.127084][T10294] netlink: 'syz.1.1552': attribute type 2 has an invalid length. [ 193.689375][T10331] netlink: 'syz.2.1567': attribute type 8 has an invalid length. [ 193.987589][T10352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1581'. [ 194.838370][T10414] ip_tables: iptables: counters copy to user failed while replacing table [ 194.933228][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1604'. [ 195.405523][T10453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 195.527084][T10459] netlink: 'syz.2.1620': attribute type 1 has an invalid length. [ 195.564794][T10459] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.636493][T10459] veth7: entered allmulticast mode [ 195.678846][T10467] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 195.710022][T10471] tc action pedit offset must be on 32 bit boundaries [ 195.908906][T10480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 196.056055][T10492] ip_tables: iptables: counters copy to user failed while replacing table [ 196.139209][T10498] syzkaller0: entered promiscuous mode [ 196.139229][T10498] syzkaller0: entered allmulticast mode [ 196.554066][T10527] netlink: 'syz.2.1650': attribute type 10 has an invalid length. [ 196.590002][T10527] team0: Port device dummy0 added [ 196.665029][T10535] syzkaller0: entered promiscuous mode [ 196.665048][T10535] syzkaller0: entered allmulticast mode [ 196.833261][T10543] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 197.107321][T10557] syzkaller0: entered promiscuous mode [ 197.107342][T10557] syzkaller0: entered allmulticast mode [ 197.112521][T10559] tipc: Enabled bearer , priority 0 [ 197.116029][T10555] tipc: Disabling bearer [ 197.190595][T10564] netlink: 'syz.1.1667': attribute type 1 has an invalid length. [ 197.238173][T10564] 8021q: adding VLAN 0 to HW filter on device bond9 [ 197.327488][T10564] veth9: entered allmulticast mode [ 197.354926][T10573] bond8: (slave veth0_to_bond): Releasing active interface [ 197.377815][T10573] bond9: (slave veth0_to_bond): making interface the new active one [ 197.379464][T10573] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 197.451648][T10567] syzkaller0: entered promiscuous mode [ 197.451668][T10567] syzkaller0: entered allmulticast mode [ 197.617422][T10588] tipc: Enabled bearer , priority 0 [ 197.622067][T10587] tipc: Disabling bearer [ 197.704397][T10592] syzkaller0: entered promiscuous mode [ 197.704416][T10592] syzkaller0: entered allmulticast mode [ 197.796953][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 197.880440][ T8288] veth0_to_bond: left promiscuous mode [ 197.983740][T10611] syzkaller0: entered promiscuous mode [ 197.983762][T10611] syzkaller0: entered allmulticast mode [ 198.095065][T10614] netlink: 'syz.4.1690': attribute type 25 has an invalid length. [ 199.014758][T10675] ip_tables: iptables: counters copy to user failed while replacing table [ 199.090981][T10683] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 199.234182][T10686] syzkaller0: entered promiscuous mode [ 199.234202][T10686] syzkaller0: entered allmulticast mode [ 199.757714][T10723] netlink: 'syz.0.1734': attribute type 25 has an invalid length. [ 200.103469][T10749] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1744'. [ 200.103656][T10749] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1744'. [ 200.210126][T10754] netlink: 'syz.0.1747': attribute type 25 has an invalid length. [ 200.277694][T10761] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1750'. [ 200.278370][T10761] netlink: 'syz.0.1750': attribute type 1 has an invalid length. [ 200.278385][T10761] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1750'. [ 200.823181][T10798] xt_hashlimit: size too large, truncated to 1048576 [ 200.869635][T10800] netlink: 'syz.4.1769': attribute type 1 has an invalid length. [ 200.933782][T10800] 8021q: adding VLAN 0 to HW filter on device bond6 [ 200.949208][T10806] bond5: (slave veth0_to_bond): Releasing active interface [ 200.955309][T10806] bond6: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 200.964746][T10805] tipc: Enabled bearer , priority 0 [ 200.981466][T10804] tipc: Disabling bearer [ 201.003433][T10800] macvlan3: entered promiscuous mode [ 201.003450][T10800] macvlan3: entered allmulticast mode [ 201.004121][T10800] bond6: entered promiscuous mode [ 201.004813][T10800] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 201.005612][T10800] bond6: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 201.005816][T10800] bond6: left promiscuous mode [ 201.443139][T10828] tipc: Enabled bearer , priority 0 [ 201.563037][T10836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.737207][T10846] ip_tables: iptables: counters copy to user failed while replacing table [ 201.891694][T10848] syzkaller0: entered promiscuous mode [ 201.891718][T10848] syzkaller0: entered allmulticast mode [ 202.061670][T10865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1799'. [ 202.066360][T10865] ip_tables: iptables: counters copy to user failed while replacing table [ 204.038260][ T8288] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.045430][ T8797] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.568682][T10954] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 204.569897][ T8288] IPVS: starting estimator thread 0... [ 204.648766][T10960] syzkaller0: entered promiscuous mode [ 204.648788][T10960] syzkaller0: entered allmulticast mode [ 204.657571][T10958] IPVS: using max 30 ests per chain, 72000 per kthread [ 206.110305][T10981] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1840'. [ 206.264017][T10985] syzkaller0: entered promiscuous mode [ 206.264038][T10985] syzkaller0: entered allmulticast mode [ 207.616944][T11003] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1846'. [ 207.787242][T11012] ip_tables: iptables: counters copy to user failed while replacing table [ 207.808445][T11013] syzkaller0: entered promiscuous mode [ 207.808464][T11013] syzkaller0: entered allmulticast mode [ 207.839643][T11013] tipc: Enabled bearer , priority 0 [ 207.861869][T11013] tipc: Resetting bearer [ 207.872251][T11011] tipc: Resetting bearer [ 207.928083][T11011] tipc: Disabling bearer [ 207.936015][T11015] ip_tables: iptables: counters copy to user failed while replacing table [ 207.983303][T11020] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 208.387318][T11042] syzkaller0: entered promiscuous mode [ 208.387341][T11042] syzkaller0: entered allmulticast mode [ 208.394957][T11044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 208.463995][T11053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1871'. [ 208.516730][T11055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1871'. [ 209.853867][T11058] tipc: Enabling of bearer rejected, already enabled [ 210.021339][T11082] bridge0: port 1(veth0) entered blocking state [ 210.021501][T11082] bridge0: port 1(veth0) entered disabled state [ 210.021619][T11082] veth0: entered allmulticast mode [ 210.025783][T11082] veth0: entered promiscuous mode [ 210.026669][T11082] bridge0: port 1(veth0) entered blocking state [ 210.027557][T11082] bridge0: port 1(veth0) entered forwarding state [ 210.283550][T11099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.389678][T11107] syzkaller0: left promiscuous mode [ 210.389698][T11107] syzkaller0: left allmulticast mode [ 210.457655][T11111] syzkaller0: entered promiscuous mode [ 210.457674][T11111] syzkaller0: entered allmulticast mode [ 210.511890][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'. [ 210.512721][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'. [ 210.627119][T11121] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 210.696665][T11126] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.718686][T11127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1897'. [ 210.719439][T11127] netlink: 'syz.2.1897': attribute type 1 has an invalid length. [ 210.719455][T11127] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1897'. [ 211.087577][T11144] syzkaller0: entered promiscuous mode [ 211.087610][T11144] syzkaller0: entered allmulticast mode [ 211.257573][T11158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.513736][T11167] veth13: entered allmulticast mode [ 211.536110][T11174] netlink: 'syz.2.1916': attribute type 1 has an invalid length. [ 211.562363][T11172] bond6: (slave veth0_to_bond): Releasing active interface [ 211.592148][T11174] 8021q: adding VLAN 0 to HW filter on device bond10 [ 211.644879][T11179] bond10: (slave gretap2): making interface the new active one [ 211.645602][T11179] bond10: (slave gretap2): Enslaving as an active interface with an up link [ 211.867993][T11194] syzkaller0: entered promiscuous mode [ 211.868014][T11194] syzkaller0: entered allmulticast mode [ 211.982859][T11203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.072016][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1928'. [ 212.072758][T11209] netlink: 'syz.2.1928': attribute type 1 has an invalid length. [ 212.072774][T11209] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1928'. [ 212.439226][T11230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1938'. [ 212.439251][T11230] openvswitch: netlink: Flow actions attr not present in new flow. [ 212.446464][T11231] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.483953][T11230] tipc: Enabled bearer , priority 10 [ 212.594786][T11234] erspan0: entered promiscuous mode [ 212.607023][T11234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1940'. [ 212.663862][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1945'. [ 212.933051][T11262] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 213.030858][T11266] syzkaller0: entered promiscuous mode [ 213.031334][T11266] syzkaller0: entered allmulticast mode [ 213.797215][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 214.741512][T11312] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.962116][T11328] netlink: 'syz.1.1973': attribute type 1 has an invalid length. [ 215.041492][T11328] 8021q: adding VLAN 0 to HW filter on device bond10 [ 215.041926][T11329] syzkaller0: entered promiscuous mode [ 215.041944][T11329] syzkaller0: entered allmulticast mode [ 215.068686][T11333] veth11: entered allmulticast mode [ 215.106693][T11328] bond9: (slave veth0_to_bond): Releasing active interface [ 215.121767][T11328] bond10: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 215.124415][T11337] syzkaller0: entered promiscuous mode [ 215.124432][T11337] syzkaller0: entered allmulticast mode [ 215.192848][T11336] syzkaller0: entered promiscuous mode [ 215.192869][T11336] syzkaller0: entered allmulticast mode [ 215.215119][T11328] macvlan2: entered promiscuous mode [ 215.215140][T11328] macvlan2: entered allmulticast mode [ 215.215628][T11328] bond10: entered promiscuous mode [ 215.216503][T11328] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 215.220429][T11328] bond10: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 215.222941][T11328] bond10: left promiscuous mode [ 215.271904][T11337] tipc: Enabled bearer , priority 0 [ 216.633350][T11341] tipc: Resetting bearer [ 216.649659][T11335] tipc: Resetting bearer [ 216.667893][T11335] tipc: Disabling bearer [ 216.881131][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1990'. [ 216.998499][T11389] netlink: 'syz.0.1997': attribute type 1 has an invalid length. [ 216.998517][T11389] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1997'. [ 217.181573][T11398] syzkaller1: entered promiscuous mode [ 217.181593][T11398] syzkaller1: entered allmulticast mode [ 217.194676][T11398] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 217.268078][T11408] netlink: 'syz.1.2004': attribute type 1 has an invalid length. [ 217.355105][T11408] 8021q: adding VLAN 0 to HW filter on device bond11 [ 217.355768][T11409] tipc: Enabling of bearer rejected, failed to enable media [ 217.373773][T11413] netlink: 'syz.3.2003': attribute type 25 has an invalid length. [ 217.390534][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2005'. [ 217.423674][T11414] veth13: entered allmulticast mode [ 217.477560][T11408] bond10: (slave veth0_to_bond): Releasing active interface [ 217.776095][T11438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2016'. [ 217.945388][T11446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2018'. [ 218.054300][T11458] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 218.078285][T11449] syzkaller0: entered promiscuous mode [ 218.078304][T11449] syzkaller0: entered allmulticast mode [ 218.082971][T11449] tipc: Enabled bearer , priority 0 [ 218.105121][T11447] tipc: Resetting bearer [ 218.144023][T11447] tipc: Disabling bearer [ 218.298239][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2028'. [ 218.755229][T11504] syzkaller0: entered promiscuous mode [ 218.755261][T11504] syzkaller0: entered allmulticast mode [ 218.787780][T11507] ip6erspan0: entered allmulticast mode [ 218.788496][T11504] tipc: Enabled bearer , priority 0 [ 218.825343][T11504] tipc: Resetting bearer [ 218.843343][T11503] tipc: Resetting bearer [ 218.889514][T11503] tipc: Disabling bearer [ 219.963414][T11535] syzkaller1: entered promiscuous mode [ 219.963435][T11535] syzkaller1: entered allmulticast mode [ 220.328372][T11556] pimreg: entered allmulticast mode [ 220.331618][T11555] pimreg: left allmulticast mode [ 220.427228][T11559] syzkaller1: entered promiscuous mode [ 220.427248][T11559] syzkaller1: entered allmulticast mode [ 220.564210][T11563] syzkaller0: entered promiscuous mode [ 220.564223][T11563] syzkaller0: entered allmulticast mode [ 220.579445][T11563] tipc: Enabled bearer , priority 0 [ 220.583345][T11563] tipc: Resetting bearer [ 220.584560][T11562] tipc: Resetting bearer [ 220.610113][T11562] tipc: Disabling bearer [ 220.874886][T11574] team0: No ports can be present during mode change [ 220.983282][T11578] syzkaller0: entered promiscuous mode [ 220.983303][T11578] syzkaller0: entered allmulticast mode [ 221.032073][T11585] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2069'. [ 221.221068][T11596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 221.532318][T11620] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2084'. [ 221.621183][T11626] syzkaller0: entered promiscuous mode [ 221.621203][T11626] syzkaller0: entered allmulticast mode [ 221.774961][T11633] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 221.863942][T11637] netlink: 'syz.0.2090': attribute type 1 has an invalid length. [ 221.963203][T11646] bridge0: port 3(syz_tun) entered blocking state [ 221.963311][T11646] bridge0: port 3(syz_tun) entered disabled state [ 221.964061][T11646] syz_tun: entered allmulticast mode [ 221.965798][T11646] syz_tun: entered promiscuous mode [ 222.102985][T11652] netlink: 'syz.3.2095': attribute type 1 has an invalid length. [ 222.184361][T11652] 8021q: adding VLAN 0 to HW filter on device bond2 [ 222.221256][T11656] bond2: (slave geneve3): making interface the new active one [ 222.222375][T11656] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 222.253172][T11658] syzkaller0: entered promiscuous mode [ 222.253191][T11658] syzkaller0: entered allmulticast mode [ 222.277473][ T8797] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.277652][ T8797] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.417428][ T3278] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.417850][ T1176] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.531686][T11673] veth9: entered allmulticast mode [ 222.583764][T11676] bond0: (slave veth0_to_bond): Releasing active interface [ 222.809131][T11695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2113'. [ 222.809161][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2113'. [ 222.809294][T11695] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2113'. [ 222.809312][T11695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2113'. [ 222.900624][T11700] netlink: 'syz.2.2116': attribute type 1 has an invalid length. [ 222.955193][T11700] 8021q: adding VLAN 0 to HW filter on device bond11 [ 222.959422][T11698] syzkaller0: entered promiscuous mode [ 222.959470][T11698] syzkaller0: entered allmulticast mode [ 223.462513][T11739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2129'. [ 223.556463][T11742] netlink: 'syz.0.2130': attribute type 1 has an invalid length. [ 224.532363][T11762] netlink: 'syz.1.2138': attribute type 1 has an invalid length. [ 224.950600][T11781] bridge4: entered promiscuous mode [ 224.950654][T11781] bridge4: entered allmulticast mode [ 225.567944][T11808] netlink: 'syz.0.2154': attribute type 1 has an invalid length. [ 225.775773][T11816] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 225.792108][T11816] bond8 (unregistering): Released all slaves [ 226.657824][T11836] infiniband syz0: set down [ 226.657844][T11836] infiniband syz0: added bond_slave_1 [ 226.688670][T11836] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 226.688701][T11836] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 226.688738][T11836] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 226.787991][T11836] RDS/IB: syz0: added [ 226.796893][T11836] smc: adding ib device syz0 with port count 1 [ 226.796914][T11836] smc: ib device syz0 port 1 has no pnetid [ 226.930674][T11868] netlink: 'syz.3.2177': attribute type 25 has an invalid length. [ 227.013148][ T5759] [ 227.015523][ T5759] ====================================================== [ 227.022554][ T5759] WARNING: possible circular locking dependency detected [ 227.029585][ T5759] syzkaller #0 Not tainted [ 227.034005][ T5759] ------------------------------------------------------ [ 227.041030][ T5759] kworker/1:5/5759 is trying to acquire lock: [ 227.047129][ T5759] ffffffff914a22a8 (rds_trans_sem){++++}-{4:4}, at: rds_trans_get_preferred+0x133/0x3c0 [ 227.056916][ T5759] [ 227.056916][ T5759] but task is already holding lock: [ 227.064290][ T5759] ffff88807b369420 (&id_priv->handler_mutex/1){+.+.}-{4:4}, at: cma_ib_req_handler+0x2dd8/0x50d0 [ 227.074863][ T5759] [ 227.074863][ T5759] which lock already depends on the new lock. [ 227.074863][ T5759] [ 227.085273][ T5759] [ 227.085273][ T5759] the existing dependency chain (in reverse order) is: [ 227.094295][ T5759] [ 227.094295][ T5759] -> #2 (&id_priv->handler_mutex/1){+.+.}-{4:4}: [ 227.102843][ T5759] __mutex_lock+0x19d/0x1550 [ 227.107984][ T5759] cma_ib_req_handler+0x2dd8/0x50d0 [ 227.113722][ T5759] cm_process_work+0x51/0x420 [ 227.118948][ T5759] cm_work_handler+0x96c3/0xdff0 [ 227.124428][ T5759] process_scheduled_works+0xc3d/0x1630 [ 227.130507][ T5759] worker_thread+0xa47/0xfb0 [ 227.135679][ T5759] kthread+0x38b/0x480 [ 227.140301][ T5759] ret_from_fork+0x514/0xb70 [ 227.145424][ T5759] ret_from_fork_asm+0x1a/0x30 [ 227.150724][ T5759] [ 227.150724][ T5759] -> #1 (&id_priv->handler_mutex){+.+.}-{4:4}: [ 227.159083][ T5759] __mutex_lock+0x19d/0x1550 [ 227.164230][ T5759] rdma_destroy_id+0x1b/0x30 [ 227.169353][ T5759] rds_ib_laddr_check+0x373/0x630 [ 227.174910][ T5759] rds_trans_get_preferred+0x179/0x3c0 [ 227.180903][ T5759] rds_bind+0x687/0x870 [ 227.185594][ T5759] __sys_bind+0x2e3/0x410 [ 227.190470][ T5759] __x64_sys_bind+0x7a/0x90 [ 227.195511][ T5759] do_syscall_64+0x166/0x520 [ 227.200666][ T5759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.207100][ T5759] [ 227.207100][ T5759] -> #0 (rds_trans_sem){++++}-{4:4}: [ 227.214600][ T5759] __lock_acquire+0x164c/0x2de0 [ 227.219985][ T5759] lock_acquire+0x115/0x350 [ 227.225024][ T5759] down_read+0x4a/0x330 [ 227.229708][ T5759] rds_trans_get_preferred+0x133/0x3c0 [ 227.235719][ T5759] __rds_conn_create+0xa2c/0x2290 [ 227.241274][ T5759] rds_conn_create+0x43/0x60 [ 227.246393][ T5759] rds_ib_cm_handle_connect+0x446/0x1120 [ 227.252558][ T5759] rds_rdma_cm_event_handler_cmn+0x691/0xa30 [ 227.259070][ T5759] cma_cm_event_handler+0xac/0x2c0 [ 227.264707][ T5759] cma_ib_req_handler+0x3440/0x50d0 [ 227.270443][ T5759] cm_process_work+0x51/0x420 [ 227.275661][ T5759] cm_work_handler+0x96c3/0xdff0 [ 227.281139][ T5759] process_scheduled_works+0xc3d/0x1630 [ 227.287231][ T5759] worker_thread+0xa47/0xfb0 [ 227.292364][ T5759] kthread+0x38b/0x480 [ 227.296964][ T5759] ret_from_fork+0x514/0xb70 [ 227.302088][ T5759] ret_from_fork_asm+0x1a/0x30 [ 227.307376][ T5759] [ 227.307376][ T5759] other info that might help us debug this: [ 227.307376][ T5759] [ 227.317600][ T5759] Chain exists of: [ 227.317600][ T5759] rds_trans_sem --> &id_priv->handler_mutex --> &id_priv->handler_mutex/1 [ 227.317600][ T5759] [ 227.332030][ T5759] Possible unsafe locking scenario: [ 227.332030][ T5759] [ 227.339482][ T5759] CPU0 CPU1 [ 227.344850][ T5759] ---- ---- [ 227.350222][ T5759] lock(&id_priv->handler_mutex/1); [ 227.355529][ T5759] lock(&id_priv->handler_mutex); [ 227.363168][ T5759] lock(&id_priv->handler_mutex/1); [ 227.370992][ T5759] rlock(rds_trans_sem); [ 227.375324][ T5759] [ 227.375324][ T5759] *** DEADLOCK *** [ 227.375324][ T5759] [ 227.383471][ T5759] locks held by kworker/1:5/5759: 4, last CPU#1: [ 227.389795][ T5759] #0: ffff88803237a140 ((wq_completion)ib_cm){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 227.400672][ T5759] #1: ffffc90004e07c40 ((work_completion)(&(&work->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 227.413204][ T5759] #2: ffff88807f789420 (&id_priv->handler_mutex){+.+.}-{4:4}, at: cma_ib_req_handler+0x2188/0x50d0 [ 227.424000][ T5759] #3: ffff88807b369420 (&id_priv->handler_mutex/1){+.+.}-{4:4}, at: cma_ib_req_handler+0x2dd8/0x50d0 [ 227.435003][ T5759] [ 227.435003][ T5759] stack backtrace: [ 227.440908][ T5759] CPU: 1 UID: 0 PID: 5759 Comm: kworker/1:5 Not tainted syzkaller #0 PREEMPT(full) [ 227.450271][ T5759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 227.460325][ T5759] Workqueue: ib_cm cm_work_handler [ 227.465453][ T5759] Call Trace: [ 227.468741][ T5759] [ 227.471676][ T5759] dump_stack_lvl+0xe8/0x150 [ 227.476271][ T5759] print_circular_bug+0x2e2/0x300 [ 227.481303][ T5759] check_noncircular+0x12f/0x150 [ 227.486250][ T5759] __lock_acquire+0x164c/0x2de0 [ 227.491114][ T5759] lock_acquire+0x115/0x350 [ 227.495618][ T5759] ? rds_trans_get_preferred+0x133/0x3c0 [ 227.501258][ T5759] down_read+0x4a/0x330 [ 227.505420][ T5759] ? rds_trans_get_preferred+0x133/0x3c0 [ 227.511057][ T5759] rds_trans_get_preferred+0x133/0x3c0 [ 227.516514][ T5759] __rds_conn_create+0xa2c/0x2290 [ 227.521563][ T5759] ? __rds_conn_create+0x2d5/0x2290 [ 227.526896][ T5759] ? __pfx___rds_conn_create+0x10/0x10 [ 227.532355][ T5759] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 227.538509][ T5759] ? arch_stack_walk+0x11b/0x150 [ 227.543447][ T5759] ? ret_from_fork_asm+0x1a/0x30 [ 227.548384][ T5759] rds_conn_create+0x43/0x60 [ 227.552983][ T5759] rds_ib_cm_handle_connect+0x446/0x1120 [ 227.558618][ T5759] ? xas_create+0x1941/0x1bd0 [ 227.563305][ T5759] ? __pfx_rds_ib_cm_handle_connect+0x10/0x10 [ 227.569378][ T5759] ? lockdep_unlock+0x5c/0xd0 [ 227.574058][ T5759] ? __lock_acquire+0x1511/0x2de0 [ 227.579095][ T5759] ? xas_clear_mark+0x2e0/0x530 [ 227.583950][ T5759] ? __xas_nomem+0xa4/0x420 [ 227.588474][ T5759] ? __xa_alloc+0x199/0x220 [ 227.592984][ T5759] rds_rdma_cm_event_handler_cmn+0x691/0xa30 [ 227.598976][ T5759] ? __pfx_rds_rdma_cm_event_handler_cmn+0x10/0x10 [ 227.605487][ T5759] ? trace_cm_event_handler+0x81/0x1f0 [ 227.610957][ T5759] ? __pfx_rds_rdma_cm_event_handler+0x10/0x10 [ 227.617119][ T5759] ? cma_listen_handler+0x100/0x160 [ 227.622332][ T5759] cma_cm_event_handler+0xac/0x2c0 [ 227.627447][ T5759] cma_ib_req_handler+0x3440/0x50d0 [ 227.632659][ T5759] ? __pfx_cma_ib_req_handler+0x10/0x10 [ 227.638214][ T5759] ? arch_stack_walk+0x11b/0x150 [ 227.643156][ T5759] ? ret_from_fork_asm+0x1a/0x30 [ 227.648103][ T5759] ? __pfx_stack_trace_save+0x10/0x10 [ 227.653500][ T5759] ? xas_clear_mark+0x2d6/0x530 [ 227.658373][ T5759] cm_process_work+0x51/0x420 [ 227.663056][ T5759] ? _raw_spin_unlock_irq+0x2e/0x50 [ 227.668258][ T5759] cm_work_handler+0x96c3/0xdff0 [ 227.673211][ T5759] ? __pfx_cm_work_handler+0x10/0x10 [ 227.678507][ T5759] ? lock_acquire+0x115/0x350 [ 227.683207][ T5759] ? rcu_is_watching+0x16/0xb0 [ 227.687974][ T5759] ? process_scheduled_works+0x97a/0x1630 [ 227.693702][ T5759] process_scheduled_works+0xc3d/0x1630 [ 227.699276][ T5759] ? __pfx_process_scheduled_works+0x10/0x10 [ 227.705263][ T5759] ? assign_work+0x3cf/0x5d0 [ 227.709857][ T5759] worker_thread+0xa47/0xfb0 [ 227.714464][ T5759] kthread+0x38b/0x480 [ 227.718545][ T5759] ? __pfx_worker_thread+0x10/0x10 [ 227.723663][ T5759] ? __pfx_kthread+0x10/0x10 [ 227.728252][ T5759] ret_from_fork+0x514/0xb70 [ 227.732848][ T5759] ? __pfx_ret_from_fork+0x10/0x10 [ 227.737960][ T5759] ? __switch_to+0xc89/0x1420 [ 227.742650][ T5759] ? __pfx_kthread+0x10/0x10 [ 227.747244][ T5759] ret_from_fork_asm+0x1a/0x30 [ 227.752010][ T5759] [ 227.798116][ T5759] RDS/IB: Active conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1 [ 227.811114][T11876] netlink: 'syz.0.2179': attribute type 1 has an invalid length. [ 227.845830][ T5759] RDS/IB: Passive conn connected <::ffff:172.20.20.170,::ffff:172.20.20.170,0> version 3.1