last executing test programs: 4m50.255291876s ago: executing program 4 (id=11905): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x24, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x4, 0x1, 0x3}]}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 4m48.378321478s ago: executing program 4 (id=11914): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a00"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4m47.360444339s ago: executing program 4 (id=11918): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x1f, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) socket(0x10, 0x803, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x80, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'geneve1\x00'}}, 0x1e) 4m46.062281672s ago: executing program 4 (id=11923): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) 4m44.473686868s ago: executing program 4 (id=11929): r0 = socket$inet(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080), 0x4) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) 4m43.966320542s ago: executing program 4 (id=11933): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) 4m28.773075381s ago: executing program 32 (id=11933): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x43c37000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b"], 0x28}}, 0x0) 4.900814271s ago: executing program 1 (id=13815): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e21, 0x3, @loopback, 0x400014}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc895d8eb00066c2", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x7) 4.535208548s ago: executing program 2 (id=13820): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="8c0000001000390400000000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01990000419a04006c0012800b000100697036746e6c00005c000280060010000200000014000300fe8000000000000000000000000000aa0500060005000000080008002e0000000800080005000000060011004e2000000500090029000000060012004e21000004001300"], 0x8c}}, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 4.366372029s ago: executing program 2 (id=13821): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3.905392641s ago: executing program 1 (id=13825): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32], 0x3c}}, 0x0) 3.662475211s ago: executing program 0 (id=13826): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}}}}}}}, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}}}}}}}, 0x0) 3.341168172s ago: executing program 0 (id=13829): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) r2 = openat$cgroup(r1, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000340), 0x9) 3.195961373s ago: executing program 1 (id=13830): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 3.178569733s ago: executing program 2 (id=13831): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x3}, {0xffff, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x8, 0xfff, 0x10000000, 0x7, 0xccb}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="000086dd0000110005000000a60c6b63851e0f9811"], 0xfce) 2.900241369s ago: executing program 0 (id=13832): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x58, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x47}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x5, 0x4, 0x0, 0x1, [@generic="f3"]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid}, @typed={0xc, 0xcd, 0x0, 0x0, @u64=0x9}, @typed={0x14, 0x127, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}}, @typed={0x8, 0x129, 0x0, 0x0, @u32=0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a00000000000061109800000000001800"/32], &(0x7f0000000000)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00'}) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000380)=@sack_info={0x0, 0x0, 0x7}, &(0x7f00000003c0)=0xc) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, @vifc_lcl_addr=@remote, @dev={0xac, 0x14, 0x14, 0x20}}, 0xfffffffffffffdf8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x11, 0x1, "9e44d22dfdef96fecf7082f0cb"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) syz_emit_ethernet(0x4a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60e0ffac00162c01fe80000000000064a327109d96c1e397721f062ed757aa0000000000000000bbfe80000099a64138499a7e9a5b1b7dc1e302f21a4ee076d869e814a773d968eab2a6f3c8ed58f904faf5f80cb3a83ffde9630d6e1f1e80f33f", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, &(0x7f0000000300)={@empty, @multicast2, 0x0, "000100"}, 0x3c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)=ANY=[@ANYBLOB="68000000100001040000000000000000000000000000000001000000000000000f00030073797a6b616c6c6572300000340012800a00010076786c616e00000024000280080001000100000008000200e001010108000300010000000500220001000000"], 0x68}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) bind$packet(r4, &(0x7f0000000640)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) 2.875927213s ago: executing program 3 (id=13833): pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22008041, &(0x7f0000000200)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x20) shutdown(r1, 0x1) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 2.867815297s ago: executing program 1 (id=13834): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r0, 0x0, r4, 0x0, 0x80, 0x8) vmsplice(r0, &(0x7f0000008ac0)=[{&(0x7f0000007a80)='u', 0x1}], 0x1, 0x0) write(r2, 0x0, 0x0) 2.669068005s ago: executing program 3 (id=13835): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed282889fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 2.537972807s ago: executing program 5 (id=13836): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e02, 0xffffffff, @empty, 0x5}}, 0x0, 0x0, 0x23f, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) accept4(r0, 0x0, 0x0, 0x80000) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 2.312650561s ago: executing program 0 (id=13837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000300)="1100", 0x2}, {&(0x7f0000000480)="bff86c0c12df76", 0x7}, {&(0x7f0000000540)="09d6c6bb9e1e6386dd", 0x9}], 0x3) 2.312342495s ago: executing program 2 (id=13838): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 2.208529021s ago: executing program 3 (id=13839): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdc00, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4088d}, 0x8004) write$nci(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="414601", @ANYRES32=r0], 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.986402579s ago: executing program 2 (id=13840): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r5, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB=' \x00\x00\x00 \x00\x00\x00\b\x00\n\x00', @ANYRES32=r10], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32], 0x3c}}, 0x0) 1.959578168s ago: executing program 5 (id=13841): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) 1.906290993s ago: executing program 3 (id=13842): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0) 1.846185533s ago: executing program 1 (id=13843): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$OSF_MSG_ADD(r0, 0x0, 0x240000c0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x11, 0x10, 0x1, 0x0, 0x0, 0xffffffffffffffff, 0x5}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r2, 0x11}, 0x14) sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000540)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xc, 0xf}, {}, {0xfff1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x78, 0x30, 0x1, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 1.77573827s ago: executing program 5 (id=13844): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r7, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x400}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r12 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r12, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc) bind$netlink(r1, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x80020000}, 0x48) r13 = socket$netlink(0x10, 0x3, 0x4) writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1.709698902s ago: executing program 0 (id=13845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0x6}, {0x2, 0x1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x85c}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x3c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x8}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0x421e}]}}]}, 0x3c}}, 0x0) 1.672934699s ago: executing program 5 (id=13846): syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x67, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @address_reply={0x12, 0x0, 0x0, 0x400}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4890) socket$unix(0x1, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$kcm(0x11, 0x5, 0x0) 1.224481312s ago: executing program 3 (id=13847): socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x8, 0x4, 0x3) accept4$packet(r0, 0x0, 0x0, 0x80800) 1.215722204s ago: executing program 5 (id=13848): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40004) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 1.05075805s ago: executing program 1 (id=13849): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x63148, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 794.0008ms ago: executing program 5 (id=13850): socket$inet6(0xa, 0x1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, 0x0, 0x40000) 792.97885ms ago: executing program 2 (id=13851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 576.234484ms ago: executing program 0 (id=13852): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x11883}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2404c0c5}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) 0s ago: executing program 3 (id=13853): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0xf, @remote, 0xfffffff9}, 0x1c) kernel console output (not intermixed with test programs): 1048576 [ 725.426829][T27496] ip_tables: iptables: counters copy to user failed while replacing table [ 727.015607][T27521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10381'. [ 728.663791][T27535] block nbd0: Unsupported socket: should be TCP or UNIX. [ 728.941352][T27536] netlink: 'syz.1.10389': attribute type 4 has an invalid length. [ 729.854887][T27542] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10392'. [ 731.447424][T27559] netlink: 'syz.3.10400': attribute type 30 has an invalid length. [ 733.673264][T27590] netlink: 76 bytes leftover after parsing attributes in process `syz.2.10413'. [ 734.505724][T27608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10419'. [ 737.356853][T27658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10445'. [ 737.480960][T27663] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10446'. [ 744.175081][T27756] team0: No ports can be present during mode change [ 744.631528][T27762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10490'. [ 745.355749][T27781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10499'. [ 745.845266][T27781] 8021q: adding VLAN 0 to HW filter on device bond7 [ 745.905549][T27781] bond7: entered allmulticast mode [ 745.939471][T27781] bond0: (slave bond7): Enslaving as an active interface with an up link [ 746.423914][T27794] netlink: 'syz.1.10504': attribute type 83 has an invalid length. [ 747.379977][T27815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10513'. [ 747.644689][T27817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10514'. [ 747.745226][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.945065][T27842] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10526'. [ 749.042807][T27840] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10526'. [ 751.245604][T27880] tipc: Started in network mode [ 751.245640][T27880] tipc: Node identity ac14142f, cluster identity 4711 [ 751.276376][T27880] tipc: Enabled bearer , priority 10 [ 751.290167][T27880] netlink: 56 bytes leftover after parsing attributes in process `syz.0.10543'. [ 752.281836][ T192] tipc: Node number set to 2886997039 [ 754.867887][T27935] netlink: 'syz.0.10567': attribute type 12 has an invalid length. [ 754.867912][T27935] netlink: 'syz.0.10567': attribute type 29 has an invalid length. [ 754.867925][T27935] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10567'. [ 754.867953][T27935] netlink: 'syz.0.10567': attribute type 1 has an invalid length. [ 754.867965][T27935] netlink: 'syz.0.10567': attribute type 2 has an invalid length. [ 754.868208][T27935] netlink: 11 bytes leftover after parsing attributes in process `syz.0.10567'. [ 755.057382][T27941] netlink: 'syz.3.10571': attribute type 10 has an invalid length. [ 755.058937][T27941] veth0_vlan: entered allmulticast mode [ 755.244446][T27941] team0: Device veth0_vlan failed to register rx_handler [ 757.034879][T27970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10583'. [ 757.941488][T27970] macvtap1: entered promiscuous mode [ 757.941515][T27970] vlan0: entered promiscuous mode [ 758.061515][T27970] macvtap1: entered allmulticast mode [ 758.061541][T27970] vlan0: entered allmulticast mode [ 758.061555][T27970] veth0_vlan: entered allmulticast mode [ 759.031634][T27985] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10588'. [ 761.251872][T28012] veth0: entered promiscuous mode [ 761.293842][T28010] veth0: left promiscuous mode [ 762.357257][T28029] netlink: 'syz.4.10607': attribute type 83 has an invalid length. [ 762.445377][T28033] sctp: [Deprecated]: syz.3.10608 (pid 28033) Use of int in max_burst socket option deprecated. [ 762.445377][T28033] Use struct sctp_assoc_value instead [ 762.499206][T28034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10609'. [ 762.499249][T28034] netlink: 'syz.1.10609': attribute type 8 has an invalid length. [ 762.499264][T28034] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10609'. [ 763.544147][T28055] netlink: 'syz.4.10617': attribute type 3 has an invalid length. [ 764.607287][T28072] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 765.576332][T28089] bond0: (slave team0): Releasing backup interface [ 765.826858][T28089] team0: Cannot enslave team device to itself [ 767.374837][T28126] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 767.993565][T28136] TCP: TCP_TX_DELAY enabled [ 770.304408][T28186] sch_fq: defrate 0 ignored. [ 773.515436][T28237] netlink: 196 bytes leftover after parsing attributes in process `syz.0.10696'. [ 774.300214][T28244] netlink: Unknown NAT attribute (type=2049, max=9) [ 774.300260][T28244] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 774.582779][T28249] netlink: 232 bytes leftover after parsing attributes in process `syz.3.10702'. [ 776.593394][T28279] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10715'. [ 776.965124][T28284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10717'. [ 776.965155][T28284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10717'. [ 778.087263][T28308] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 779.831712][T28337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10742'. [ 781.128490][T28365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10757'. [ 782.373697][T28388] IPv6: Can't replace route, no match found [ 782.375063][T28388] IPv6: Can't replace route, no match found [ 782.821955][ T31] audit: type=1804 audit(1790945008.718:6): pid=28395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.10769" name="/newroot/2179/cgroup.controllers" dev="tmpfs" ino=10937 res=1 errno=0 [ 782.830685][ T31] audit: type=1800 audit(1790945008.728:7): pid=28395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.10769" name="cgroup.controllers" dev="tmpfs" ino=10937 res=0 errno=0 [ 784.280312][T28418] netlink: 64 bytes leftover after parsing attributes in process `syz.1.10777'. [ 785.971050][T28447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10794'. [ 785.971089][T28447] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10794'. [ 788.126492][T28485] netlink: 'syz.4.10810': attribute type 1 has an invalid length. [ 788.126515][T28485] netlink: 'syz.4.10810': attribute type 2 has an invalid length. [ 788.378016][ T12] wlan1: Trigger new scan to find an IBSS to join [ 789.157523][T28501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10816'. [ 789.450057][T28507] netlink: 'syz.3.10818': attribute type 3 has an invalid length. [ 789.892179][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.892427][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.892636][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 789.892830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.032849][T28517] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 791.101140][T28532] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64 [ 792.906052][T28566] bridge_slave_1: entered promiscuous mode [ 792.920440][T28566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10841'. [ 793.251035][T28571] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10842'. [ 793.353598][ T271] wlan1: Trigger new scan to find an IBSS to join [ 794.254821][T28561] syzkaller1: entered promiscuous mode [ 794.255053][T28561] syzkaller1: entered allmulticast mode [ 795.091909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.092139][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.092344][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.092546][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.890968][T24570] wlan1: Creating new IBSS network, BSSID 3a:b7:ae:f6:8e:4f [ 796.934739][T28617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10857'. [ 797.633151][T28628] veth0: entered promiscuous mode [ 797.652094][T28627] veth0: left promiscuous mode [ 797.860406][T28630] netlink: 'syz.4.10864': attribute type 4 has an invalid length. [ 798.616943][T28644] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10869'. [ 799.394160][T28655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10873'. [ 799.556755][T28658] netlink: 'syz.1.10876': attribute type 2 has an invalid length. [ 799.982250][T28666] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10880'. [ 800.771900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.772121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.772315][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 800.772505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 801.593376][T28698] bond0: invalid NS target ff00:: specified for addition [ 801.593408][T28698] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 804.671525][T28750] ip6erspan0: entered allmulticast mode [ 805.153456][T28756] ip_tables: iptables: counters copy to user failed while replacing table [ 806.531913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.532194][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 806.532445][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 807.452678][T28782] ip_tables: iptables: counters copy to user failed while replacing table [ 807.569230][T28780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10926'. [ 809.185244][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 812.291981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.292206][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 812.292388][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 813.571946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.572102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 815.572366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.691914][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.693657][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 818.693852][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.195243][T28966] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 820.443317][T28962] wg0 speed is unknown, defaulting to 1000 [ 820.633188][T28974] netlink: 11 bytes leftover after parsing attributes in process `syz.1.11001'. [ 821.486644][T28984] vcan0: tx address claim with dest, not broadcast [ 822.046434][T28993] ieee802154 phy1 wpan1: encryption failed: -22 [ 823.308713][T29011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11016'. [ 823.811893][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.812121][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 823.812321][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 824.474915][T29011] bond0: ARP target 8.4.0.0 is already present [ 824.474948][T29011] bond0: option arp_ip_target: invalid value (1032) [ 824.966472][T29028] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11023'. [ 827.012096][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.012319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.012529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 827.240594][T29054] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11033'. [ 829.895426][T29096] netlink: 'syz.1.11050': attribute type 17 has an invalid length. [ 829.895454][T29096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11050'. [ 829.895482][T29096] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11050'. [ 830.111827][T29096] 0猉功D龌: entered promiscuous mode [ 830.138749][T29096] 0猉功D龌: left promiscuous mode [ 831.572769][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.573549][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 831.972052][T29124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11060'. [ 832.051197][T29125] ip_tables: iptables: counters copy to user failed while replacing table [ 834.458525][T29159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11072'. [ 835.207584][T29168] netlink: 4384 bytes leftover after parsing attributes in process `syz.3.11076'. [ 837.081203][T29199] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11090'. [ 838.800869][T29227] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11101'. [ 840.947833][T29255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11115'. [ 842.409616][T29277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11126'. [ 842.428489][T29277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11126'. [ 842.429690][T29277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11126'. [ 843.567213][T29311] netlink: 'syz.2.11138': attribute type 2 has an invalid length. [ 843.620645][T29311] netlink: 'syz.2.11138': attribute type 2 has an invalid length. [ 843.620671][T29311] netlink: 67 bytes leftover after parsing attributes in process `syz.2.11138'. [ 843.865244][T29304] IPVS: Scheduler module ip_vs_sip not found [ 844.363743][T29317] sctp: [Deprecated]: syz.4.11142 (pid 29317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 844.363743][T29317] Use struct sctp_sack_info instead [ 846.629204][T29353] netlink: 'syz.4.11156': attribute type 4 has an invalid length. [ 847.660635][T29370] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11164'. [ 847.774000][T29373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11164'. [ 847.921115][T29377] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11166'. [ 848.491921][T29376] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 848.491964][T29376] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 848.492002][T29376] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 848.647058][T29376] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 848.659572][T29386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11168'. [ 848.751038][T29388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11168'. [ 849.910854][T29400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11172'. [ 849.910894][T29400] netlink: 'syz.0.11172': attribute type 10 has an invalid length. [ 849.910912][T29400] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11172'. [ 849.965958][T27973] smbdirect: ib_dev[syz2] removed [ 850.073306][T29376] siw: device registration error -19 [ 850.723687][T29407] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 851.367442][T29417] lo: left promiscuous mode [ 851.368878][T29417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 852.121779][T29433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11184'. [ 852.121809][T29433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11184'. [ 852.130984][T29433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11184'. [ 852.731152][ T158] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 854.075374][T29462] __nla_validate_parse: 1 callbacks suppressed [ 854.077950][T29462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11198'. [ 854.238168][T29462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11198'. [ 855.958859][T29489] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11211'. [ 859.786465][T29544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11235'. [ 860.812456][T29554] xt_hashlimit: size too large, truncated to 1048576 [ 860.950499][T29544] team0: Port device team_slave_0 removed [ 862.257173][T29572] netlink: 'syz.1.11246': attribute type 1 has an invalid length. [ 862.257199][T29572] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11246'. [ 862.257223][T29572] bond0: option mode: unable to set because the bond device has slaves [ 862.658599][T29576] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11248'. [ 866.599665][T29635] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.650668][T29635] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.422145][T29635] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.578816][T29635] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.638419][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.784109][ T366] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.784158][ T366] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 871.945571][ T4093] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.151829][ T366] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.346705][T29735] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 874.497916][T29735] bond0: (slave lo): Enslaving as an active interface with an up link [ 874.564609][T29735] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 877.982746][T29790] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 878.101265][T29790] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 879.016720][T29811] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 880.913968][T29835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11352'. [ 881.407413][T29835] 8021q: VLANs not supported on bond0 [ 882.532492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 882.895517][T29867] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11360'. [ 883.185539][T29873] netlink: 27 bytes leftover after parsing attributes in process `syz.0.11361'. [ 883.709701][T29879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11364'. [ 884.953114][T29894] netlink: 'syz.2.11372': attribute type 7 has an invalid length. [ 885.274054][T29894] netlink: 'syz.2.11372': attribute type 7 has an invalid length. [ 885.312742][ T158] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.321139][ T366] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.321187][ T366] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.321222][ T366] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 886.314802][T29922] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11380'. [ 886.359278][T29915] syzkaller1: entered promiscuous mode [ 886.359509][T29915] syzkaller1: entered allmulticast mode [ 888.063061][T29951] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11390'. [ 890.911002][T29994] netlink: 'syz.4.11408': attribute type 1 has an invalid length. [ 892.433479][T30017] netlink: 'syz.2.11416': attribute type 4 has an invalid length. [ 892.586143][T30018] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 895.493060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 896.263296][T30081] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11442'. [ 896.263544][T30081] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11442'. [ 896.571402][T30092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11446'. [ 896.571440][T30092] netlink: 'syz.3.11446': attribute type 1 has an invalid length. [ 896.571454][T30092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11446'. [ 896.572406][T30092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11446'. [ 896.572429][T30092] netlink: 'syz.3.11446': attribute type 1 has an invalid length. [ 896.572442][T30092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11446'. [ 897.335170][T30102] netlink: 'syz.1.11449': attribute type 1 has an invalid length. [ 897.335196][T30102] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.11449'. [ 897.656483][T30110] netlink: 'syz.3.11453': attribute type 1 has an invalid length. [ 897.750436][T30110] 8021q: adding VLAN 0 to HW filter on device bond6 [ 897.954953][T30116] bond6: (slave gretap1): making interface the new active one [ 897.997630][T30116] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 898.836089][T30132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11463'. [ 898.836138][T30132] netlink: 'syz.2.11463': attribute type 7 has an invalid length. [ 898.836152][T30132] netlink: 'syz.2.11463': attribute type 8 has an invalid length. [ 898.836164][T30132] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11463'. [ 899.048266][T30132] erspan0: entered promiscuous mode [ 899.144977][T30132] gretap0: entered promiscuous mode [ 899.165293][T30132] gretap0: left promiscuous mode [ 899.234391][T30132] erspan0: left promiscuous mode [ 903.570369][T30206] netlink: 'syz.2.11487': attribute type 15 has an invalid length. [ 903.570398][T30206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11487'. [ 903.613086][T30206] netlink: 'syz.2.11487': attribute type 15 has an invalid length. [ 903.613710][T30206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11487'. [ 904.980109][T30230] netlink: 'syz.4.11497': attribute type 15 has an invalid length. [ 905.158201][T30230] netlink: 'syz.4.11497': attribute type 15 has an invalid length. [ 905.162023][ T366] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 905.162076][ T366] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 905.162109][ T366] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 905.162141][ T366] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 905.662424][T30241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11501'. [ 905.662464][T30241] netlink: 'syz.2.11501': attribute type 10 has an invalid length. [ 905.662482][T30241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11501'. [ 905.785556][T30241] geneve4: entered promiscuous mode [ 905.785796][T30241] geneve4: entered allmulticast mode [ 906.387244][T30245] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11503'. [ 907.164238][T30251] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11505'. [ 909.595548][T30300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11527'. [ 909.699346][T30304] netlink: 512 bytes leftover after parsing attributes in process `syz.3.11529'. [ 910.158516][T30311] netlink: 'syz.0.11533': attribute type 12 has an invalid length. [ 910.707179][T30318] netlink: 'syz.4.11536': attribute type 18 has an invalid length. [ 910.707455][T30318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11536'. [ 910.708494][T30318] netlink: 'syz.4.11536': attribute type 18 has an invalid length. [ 910.708510][T30318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11536'. [ 911.026708][T30323] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11538'. [ 911.930775][T30333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11542'. [ 912.092378][T30336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11542'. [ 912.092412][T30336] block nbd0: not configured, cannot reconfigure [ 913.026357][T30353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11549'. [ 913.132690][T30354] netlink: 'syz.4.11549': attribute type 16 has an invalid length. [ 913.382929][T30358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.11551'. [ 913.558185][T30358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 913.558418][T30358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.895923][T30358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 913.896157][T30358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.057037][T30358] batman_adv: batadv0: Removing interface: macvtap1 [ 916.312030][T30386] ip_tables: iptables: counters copy to user failed while replacing table [ 916.681480][T30395] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11567'. [ 916.724581][T30395] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11567'. [ 916.770965][T30398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11568'. [ 916.770994][T30398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11568'. [ 917.352006][T24570] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 919.159112][T30437] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11585'. [ 919.367685][T30441] netlink: 'syz.3.11588': attribute type 1 has an invalid length. [ 919.827209][T30437] hsr_slave_1 (unregistering): left promiscuous mode [ 920.056314][ T31] audit: type=1800 audit(1790945145.958:8): pid=30451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.11591" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=11519 res=0 errno=0 [ 920.111417][T30441] bond7: entered promiscuous mode [ 920.150945][T30441] 8021q: adding VLAN 0 to HW filter on device bond7 [ 920.185938][T30446] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 920.713298][T30455] gretap1: entered promiscuous mode [ 920.742058][T30455] batman_adv: batadv0: Adding interface: gretap1 [ 920.742080][T30455] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.742110][T30455] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 921.225598][T30463] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 921.332081][T30466] netlink: 'syz.0.11596': attribute type 1 has an invalid length. [ 921.332107][T30466] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11596'. [ 922.920786][T30491] ip_tables: iptables: counters copy to user failed while replacing table [ 923.845242][T30499] netlink: 'syz.0.11607': attribute type 1 has an invalid length. [ 924.347184][T30499] bond6: entered promiscuous mode [ 924.359090][T30499] 8021q: adding VLAN 0 to HW filter on device bond6 [ 924.486517][T30500] bond6: (slave bridge6): making interface the new active one [ 924.486547][T30500] bridge6: entered promiscuous mode [ 924.516568][T30500] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 925.459850][T30524] xt_CT: No such helper "netbios-ns" [ 926.228340][T30541] netlink: 27 bytes leftover after parsing attributes in process `syz.2.11622'. [ 926.545140][T30542] netlink: 'syz.3.11623': attribute type 16 has an invalid length. [ 926.545167][T30542] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11623'. [ 928.047724][T30575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11635'. [ 928.047762][T30575] netlink: 'syz.1.11635': attribute type 10 has an invalid length. [ 928.047781][T30575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11635'. [ 928.297244][T30576] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11634'. [ 929.155983][T30583] 8021q: adding VLAN 0 to HW filter on device bond4 [ 929.160671][T30583] bridge0: port 3(bond4) entered blocking state [ 929.194261][T30583] bridge0: port 3(bond4) entered disabled state [ 929.194682][T30583] bond4: entered allmulticast mode [ 929.253024][T30583] bond4: entered promiscuous mode [ 929.276662][T30583] bridge0: port 3(bond4) entered blocking state [ 929.276831][T30583] bridge0: port 3(bond4) entered forwarding state [ 929.904768][ T346] bridge0: port 3(bond4) entered disabled state [ 930.775588][ T31] audit: type=1800 audit(1790945156.678:9): pid=30624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.11655" name=680B20 dev="tmpfs" ino=11902 res=0 errno=0 [ 931.487658][T30633] netlink: 32 bytes leftover after parsing attributes in process `syz.0.11658'. [ 932.055716][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.598605][T30652] block nbd0: not configured, cannot reconfigure [ 933.491619][T30661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11668'. [ 933.581404][T30661] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11668'. [ 934.114597][T30674] netlink: 'syz.0.11672': attribute type 7 has an invalid length. [ 934.542966][T30680] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11676'. [ 934.692253][T30684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11677'. [ 934.692282][T30684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11677'. [ 934.697479][T30684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11677'. [ 934.697501][T30684] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11677'. [ 936.789807][T30717] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 937.423880][T24570] IPVS: starting estimator thread 0... [ 937.514760][T30729] IPVS: using max 26 ests per chain, 62400 per kthread [ 938.745983][T30749] lo: entered allmulticast mode [ 938.746652][T30749] veth1_to_bond: entered promiscuous mode [ 938.749647][T30747] veth1_to_bond: left promiscuous mode [ 938.751491][T30747] lo: left allmulticast mode [ 939.172307][T30755] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 939.568699][T30756] netlink: 'syz.0.11709': attribute type 14 has an invalid length. [ 939.568736][T30756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11709'. [ 939.662265][T30756] netlink: 'syz.0.11709': attribute type 14 has an invalid length. [ 939.662293][T30756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11709'. [ 939.689564][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.689633][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.689664][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 939.689772][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.515510][T30768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11715'. [ 942.367336][T30825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11726'. [ 942.999979][T30837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11731'. [ 943.026444][T30837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11731'. [ 944.638545][T30801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 945.661642][T30876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11745'. [ 946.100582][T30880] ip_tables: iptables: counters copy to user failed while replacing table [ 946.453782][ T5626] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 946.816804][T30892] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11752'. [ 947.090327][T30895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11754'. [ 948.052919][T30909] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11758'. [ 948.595168][T30915] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11760'. [ 950.617105][T27973] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 951.099338][T30957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11777'. [ 951.099591][T30957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11777'. [ 951.099618][T30957] netlink: 'syz.2.11777': attribute type 15 has an invalid length. [ 951.493138][T30813] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 951.493190][T30813] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 951.493226][T30813] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 951.493261][T30813] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 951.494466][T30957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11777'. [ 951.494488][T30957] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11777'. [ 951.494513][T30957] netlink: 'syz.2.11777': attribute type 15 has an invalid length. [ 951.947479][T30970] bridge_slave_0: left allmulticast mode [ 951.947923][T30970] bridge_slave_0: left promiscuous mode [ 951.949240][T30970] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.032195][T31014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11799'. [ 954.032238][T31014] netlink: 'syz.2.11799': attribute type 7 has an invalid length. [ 954.032251][T31014] netlink: 'syz.2.11799': attribute type 8 has an invalid length. [ 954.032262][T31014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11799'. [ 954.780342][T31025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11806'. [ 954.780376][T31025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11806'. [ 955.083097][T31028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11807'. [ 955.427226][T31032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11809'. [ 955.900881][ T346] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 957.651878][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 958.109061][T31077] __nla_validate_parse: 1 callbacks suppressed [ 958.109086][T31077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11824'. [ 959.106028][T31091] netlink: 5 bytes leftover after parsing attributes in process `syz.3.11828'. [ 959.811987][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 961.547141][T31131] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 962.013781][T31145] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11852'. [ 962.643241][T31152] ip_tables: iptables: counters copy to user failed while replacing table [ 962.702084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 963.750962][T31179] batman_adv: batadv0: Adding interface: syzkaller0 [ 963.750986][T31179] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 963.757498][T31179] batman_adv: batadv0: Interface activated: syzkaller0 [ 963.759674][T30813] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 963.785932][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 963.795816][ T158] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 963.795858][ T158] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 963.890319][T31174] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 964.051393][T31183] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11864'. [ 964.571086][T31174] batman_adv: batadv0: Removing interface: syzkaller0 [ 965.474525][T31193] syzkaller0: entered promiscuous mode [ 965.474762][T31193] syzkaller0: entered allmulticast mode [ 967.892046][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 968.749914][T31239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11885'. [ 968.749953][T31239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11885'. [ 971.581911][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 971.582185][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 973.405012][T31254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 978.051897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.052232][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 978.115260][T31239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11885'. [ 978.115299][T31239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11885'. [ 978.190228][T31242] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 979.233588][T31274] netlink: 'syz.2.11895': attribute type 1 has an invalid length. [ 980.480820][T31294] netlink: 'syz.1.11903': attribute type 1 has an invalid length. [ 980.480847][T31294] netlink: 1 bytes leftover after parsing attributes in process `syz.1.11903'. [ 980.501163][T31311] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11907'. [ 981.652235][T31326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11910'. [ 981.665919][T31327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11911'. [ 981.717021][T31326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11910'. [ 983.117711][T31340] batman_adv: batadv0: Adding interface: syzkaller0 [ 983.117730][T31340] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.117762][T31340] batman_adv: batadv0: Interface activated: syzkaller0 [ 983.251815][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 983.728638][T31338] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 983.908721][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 984.068804][T31338] batman_adv: batadv0: Removing interface: syzkaller0 [ 984.483930][T31365] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 985.528081][T31375] netlink: 'syz.2.11927': attribute type 1 has an invalid length. [ 985.654328][T31375] bond2: entered promiscuous mode [ 985.657674][T31375] bond2: entered allmulticast mode [ 985.660091][T31375] 8021q: adding VLAN 0 to HW filter on device bond2 [ 985.925356][T31378] erspan2: entered allmulticast mode [ 986.003294][T31378] bond2: (slave erspan2): making interface the new active one [ 986.003322][T31378] erspan2: entered promiscuous mode [ 986.039822][T31378] bond2: (slave erspan2): Enslaving as an active interface with an up link [ 986.641502][T31404] block nbd0: not configured, cannot reconfigure [ 989.877690][T31394] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.211895][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.212176][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 990.642715][T31441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11944'. [ 993.503154][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1001.455143][T31414] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11938'. [ 1002.049330][ T158] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.049370][ T158] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1002.049396][ T158] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.049466][ T158] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.049510][ T158] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1002.049535][ T158] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.049573][ T158] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.049597][ T158] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1002.049621][ T158] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.049658][ T158] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1002.049682][ T158] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1002.049706][ T158] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1002.548215][T30863] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1002.657229][T30863] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1002.658920][T30863] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1002.683431][T30863] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1002.702782][T30863] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1004.037445][T31488] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11955'. [ 1004.781683][ T5626] Bluetooth: hci5: command tx timeout [ 1005.106050][T31492] netlink: 'syz.0.11956': attribute type 5 has an invalid length. [ 1006.851735][ T5626] Bluetooth: hci5: command tx timeout [ 1007.014133][T31454] wg0 speed is unknown, defaulting to 1000 [ 1008.646117][T31554] netlink: 'syz.2.11975': attribute type 15 has an invalid length. [ 1008.843731][ T366] bridge_slave_1: left allmulticast mode [ 1008.844189][ T366] bridge_slave_1: left promiscuous mode [ 1008.845898][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1008.933459][ T5626] Bluetooth: hci5: command tx timeout [ 1009.068317][ T366] pim6reg527: left allmulticast mode [ 1009.086547][ T366] pimreg: left allmulticast mode [ 1011.014924][ T5626] Bluetooth: hci5: command tx timeout [ 1012.480471][T31599] netlink: 240 bytes leftover after parsing attributes in process `syz.3.11988'. [ 1012.691876][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1014.531898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.532221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1014.883362][ T366] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.884106][ T366] bond_slave_0: left allmulticast mode [ 1014.907572][ T366] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.981882][ T366] bond_slave_1: left allmulticast mode [ 1014.985898][ T366] bond0 (unregistering): (slave bond7): Releasing backup interface [ 1015.002386][ T366] bond7 (unregistering): left allmulticast mode [ 1015.003865][ T366] bond0 (unregistering): Released all slaves [ 1015.141928][ T366] bond1 (unregistering): Released all slaves [ 1015.260039][ T366] bond2 (unregistering): Released all slaves [ 1015.369676][ T366] bond3 (unregistering): Released all slaves [ 1015.602050][ T366] bond4 (unregistering): Released all slaves [ 1015.694620][ T366] bond5 (unregistering): Released all slaves [ 1015.825300][ T366] bond6 (unregistering): Released all slaves [ 1015.992384][ T366] bond7 (unregistering): Released all slaves [ 1016.112821][ T366] bond8 (unregistering): Released all slaves [ 1016.520855][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1016.562900][T27973] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1016.750770][T31614] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1016.923802][ T366] tipc: Left network mode [ 1019.951293][T31454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.952351][T31454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.952749][T31454] bridge_slave_0: entered allmulticast mode [ 1019.990497][T31454] bridge_slave_0: entered promiscuous mode [ 1020.130201][T31454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.130745][T31454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.131130][T31454] bridge_slave_1: entered allmulticast mode [ 1020.160644][T31454] bridge_slave_1: entered promiscuous mode [ 1020.577458][ T366] hsr_slave_0: left promiscuous mode [ 1020.611640][ T366] hsr_slave_1: left promiscuous mode [ 1020.919389][T31681] Bluetooth: ISO socket layer initialized [ 1024.826032][ T366] team_slave_1 (unregistering): left promiscuous mode [ 1024.828577][ T366] team0 (unregistering): Port device team_slave_1 removed [ 1025.027783][ T366] team_slave_0 (unregistering): left promiscuous mode [ 1025.031338][ T366] team0 (unregistering): Port device team_slave_0 removed [ 1027.463060][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1028.036452][T31454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.190129][T31454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.656555][T31740] netlink: 'syz.0.12022': attribute type 21 has an invalid length. [ 1028.656581][T31740] netlink: 'syz.0.12022': attribute type 22 has an invalid length. [ 1028.656594][T31740] netlink: 'syz.0.12022': attribute type 23 has an invalid length. [ 1028.656608][T31740] netlink: 'syz.0.12022': attribute type 25 has an invalid length. [ 1028.656620][T31740] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12022'. [ 1029.043246][T31454] team0: Port device team_slave_0 added [ 1029.087020][T31454] team0: Port device team_slave_1 added [ 1029.383771][T31750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12024'. [ 1030.168141][T31454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1030.168163][T31454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.168189][T31454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1030.256311][T31454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1030.256332][T31454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1030.256360][T31454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.544455][ T366] IPVS: stop unused estimator thread 0... [ 1031.789339][T31454] hsr_slave_0: entered promiscuous mode [ 1031.812743][T31454] hsr_slave_1: entered promiscuous mode [ 1031.819379][T31454] debugfs: 'hsr0' already exists in 'hsr' [ 1031.819406][T31454] Cannot create hsr debugfs directory [ 1032.502307][T31804] ip_tables: iptables: counters copy to user failed while replacing table [ 1033.327353][T31817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12044'. [ 1036.324607][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1036.366477][T31813] bridge0: port 4(vlan2) entered blocking state [ 1036.366861][T31813] bridge0: port 4(vlan2) entered disabled state [ 1036.367152][T31813] vlan2: entered allmulticast mode [ 1036.367170][T31813] geneve0: entered allmulticast mode [ 1036.370949][T31813] vlan2: entered promiscuous mode [ 1036.370974][T31813] geneve0: entered promiscuous mode [ 1036.420069][T31806] syzkaller1: entered promiscuous mode [ 1036.420095][T31806] syzkaller1: entered allmulticast mode [ 1036.481509][T31817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12044'. [ 1036.735090][T31824] syzkaller0: entered promiscuous mode [ 1036.735117][T31824] syzkaller0: entered allmulticast mode [ 1037.384755][T31846] netlink: 'syz.0.12052': attribute type 1 has an invalid length. [ 1037.836825][T31847] bond7: (slave geneve3): making interface the new active one [ 1037.871491][T31847] bond7: (slave geneve3): Enslaving as an active interface with an up link [ 1037.901335][T31454] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1037.959741][T31454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1037.971271][T31870] netlink: 76 bytes leftover after parsing attributes in process `syz.3.12056'. [ 1038.099893][T31454] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1038.129408][T31454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1038.130905][T31454] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1038.202220][T31454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1038.231517][T31454] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1038.253711][T31454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1038.261767][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1038.262096][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1038.452959][T30823] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1038.453155][T30823] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1039.038927][T30813] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 1039.475429][ T5279] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1039.591482][T31921] netlink: 'syz.3.12065': attribute type 1 has an invalid length. [ 1039.932334][T31926] bond8: (slave gretap2): making interface the new active one [ 1039.955002][T31926] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 1040.016240][T31454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1040.051423][T31928] bridge_slave_0: left allmulticast mode [ 1040.051452][T31928] bridge_slave_0: left promiscuous mode [ 1040.076920][T31928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.380901][T31928] bridge_slave_1: left allmulticast mode [ 1040.381249][T31928] bridge_slave_1: left promiscuous mode [ 1040.383850][T31928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.438612][T31928] bond0: (slave bond_slave_0): Releasing backup interface [ 1040.612651][T31928] bond0: (slave bond_slave_1): Releasing backup interface [ 1040.838119][T31928] team0: Port device team_slave_1 removed [ 1040.857923][T31928] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1041.168580][T31454] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.238159][ T4093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.238289][ T4093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.333042][ T4093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.333180][ T4093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.539958][T31975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12081'. [ 1042.970976][T32016] netlink: 'syz.1.12092': attribute type 2 has an invalid length. [ 1043.304437][T31454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.395748][T31454] veth0_vlan: entered promiscuous mode [ 1044.485143][T31454] veth1_vlan: entered promiscuous mode [ 1044.762740][T31454] veth0_macvtap: entered promiscuous mode [ 1044.834209][T31454] veth1_macvtap: entered promiscuous mode [ 1044.977935][T31454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.082078][T31454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.222350][T30813] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.229274][T30813] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.229321][T30813] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.229356][T30813] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.743189][ T158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.743215][ T158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.938270][ T158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.938297][ T158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.374117][T32133] batadv_slave_0: entered promiscuous mode [ 1047.394234][T32133] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12133'. [ 1047.394368][T32133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1048.463901][T32133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.898353][T32161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12141'. [ 1048.898383][T32161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12141'. [ 1049.134724][T32168] batman_adv: batadv0: Adding interface: syzkaller0 [ 1049.134744][T32168] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.134776][T32168] batman_adv: batadv0: Interface activated: syzkaller0 [ 1049.226184][T32162] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1049.444805][T32162] batman_adv: batadv0: Removing interface: syzkaller0 [ 1049.547372][T32171] syzkaller1: entered promiscuous mode [ 1049.547400][T32171] syzkaller1: entered allmulticast mode [ 1049.792876][T32175] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1049.813960][ T271] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1051.126278][T32200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12155'. [ 1052.137473][T32237] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12165'. [ 1052.432573][T32245] tipc: Enabling of bearer rejected, failed to enable media [ 1052.536072][T32252] tipc: Failed to remove unknown binding: 66,1,1/0:2854260117/2854260119 [ 1053.076619][T32265] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12175'. [ 1053.694992][T32284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12182'. [ 1053.794109][T32284] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12182'. [ 1053.818041][ T4093] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1053.818239][ T4093] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1053.818284][ T4093] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1053.818316][ T4093] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1054.292782][T32258] netlink: 'syz.1.12172': attribute type 4 has an invalid length. [ 1054.658988][T32304] lo: left promiscuous mode [ 1054.744647][T32308] netlink: 'syz.5.12188': attribute type 4 has an invalid length. [ 1054.744674][T32308] netlink: 17 bytes leftover after parsing attributes in process `syz.5.12188'. [ 1054.947086][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.252269][T32322] syz_tun: entered allmulticast mode [ 1055.312928][T32319] syz_tun: left allmulticast mode [ 1055.828286][T32328] erspan0: entered promiscuous mode [ 1055.845347][T32328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12193'. [ 1056.670752][T32355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12200'. [ 1057.573193][T32374] dvmrp8: entered allmulticast mode [ 1058.880258][T32335] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1059.076350][T32410] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12211'. [ 1060.887997][T32451] netlink: 'syz.5.12227': attribute type 1 has an invalid length. [ 1060.888026][T32451] netlink: 'syz.5.12227': attribute type 4 has an invalid length. [ 1060.888039][T32451] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.12227'. [ 1061.533978][T32455] veth0_vlan: left promiscuous mode [ 1061.543936][T32455] veth0_vlan: entered promiscuous mode [ 1061.608828][T32455] veth1_macvtap: entered promiscuous mode [ 1061.665214][T32455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1061.843294][T32455] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1061.895596][T32455] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1061.915736][T32455] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1061.943429][T31428] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1061.995846][T31428] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1062.082998][T32455] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1062.086425][T27973] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 1062.250799][T30196] wg0 speed is unknown, defaulting to 1000 [ 1062.935817][T32475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12235'. [ 1063.184142][T32486] netlink: 'syz.0.12239': attribute type 1 has an invalid length. [ 1063.184169][T32486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12239'. [ 1063.293452][T32489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12238'. [ 1063.686449][T32491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12240'. [ 1064.068667][T32496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1064.395359][T32510] netlink: 'syz.5.12248': attribute type 1 has an invalid length. [ 1064.488195][T32510] netlink: 'syz.5.12248': attribute type 10 has an invalid length. [ 1064.488226][T32510] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12248'. [ 1064.488586][T32510] dummy0: entered promiscuous mode [ 1064.921929][T32529] syzkaller0: left promiscuous mode [ 1064.921953][T32529] syzkaller0: left allmulticast mode [ 1065.726233][T32547] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1066.458887][T32557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12265'. [ 1068.584971][T32608] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12281'. [ 1069.959482][T32643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12292'. [ 1069.961338][T32643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12292'. [ 1070.191309][T32650] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1070.443816][T32654] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12300'. [ 1070.468697][T32657] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12301'. [ 1071.249595][T32679] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12309'. [ 1075.078539][T32744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12331'. [ 1075.195009][T32746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12332'. [ 1075.218127][T32746] netlink: 92 bytes leftover after parsing attributes in process `syz.1.12332'. [ 1075.318750][T32694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1075.346298][T32701] netlink: 'syz.5.12313': attribute type 1 has an invalid length. [ 1075.346342][T32701] netlink: 'syz.5.12313': attribute type 1 has an invalid length. [ 1075.346356][T32701] netlink: 196 bytes leftover after parsing attributes in process `syz.5.12313'. [ 1075.346373][T32701] netlink: 'syz.5.12313': attribute type 1 has an invalid length. [ 1075.411907][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1076.435820][T32748] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 1076.898041][ T312] netlink: 'syz.0.12344': attribute type 1 has an invalid length. [ 1076.954168][ T312] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1077.559851][ T331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12350'. [ 1078.336988][ T350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12355'. [ 1082.999955][ T442] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12387'. [ 1082.999986][ T442] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12387'. [ 1083.000002][ T442] netlink: 31 bytes leftover after parsing attributes in process `syz.0.12387'. [ 1084.022276][ T455] netlink: 64 bytes leftover after parsing attributes in process `syz.0.12392'. [ 1084.159738][ T454] syzkaller1: entered promiscuous mode [ 1084.159762][ T454] syzkaller1: entered allmulticast mode [ 1084.565343][ T461] netlink: 'syz.5.12394': attribute type 1 has an invalid length. [ 1084.866622][ T461] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1085.072813][ T464] bond1: (slave erspan1): making interface the new active one [ 1085.084103][ T474] block nbd0: not configured, cannot reconfigure [ 1085.085113][ T464] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 1085.490167][ T477] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12400'. [ 1085.940810][ T489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12403'. [ 1085.978937][ T489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12403'. [ 1086.061482][ T469] ip_tables: iptables: counters copy to user failed while replacing table [ 1086.714873][ T505] syz_tun: entered allmulticast mode [ 1086.946239][ T511] netlink: 'syz.0.12412': attribute type 1 has an invalid length. [ 1087.399564][ T511] bond9: entered promiscuous mode [ 1087.400051][ T511] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1087.571234][ T513] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1087.572025][ T513] bond9: (slave xfrm1): The slave device specified does not support setting the MAC address [ 1087.572050][ T513] bond9: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 1087.651894][ T513] bond9: (slave xfrm1): making interface the new active one [ 1087.651922][ T513] xfrm1: entered promiscuous mode [ 1087.659835][ T513] bond9: (slave xfrm1): Enslaving as an active interface with an up link [ 1088.652444][ T543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12423'. [ 1088.702415][ T543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12423'. [ 1088.716182][ T543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12423'. [ 1088.815995][ T545] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12425'. [ 1090.430826][ T582] ip_tables: iptables: counters copy to user failed while replacing table [ 1090.524495][ T582] xt_CT: No such helper "syz1" [ 1090.748131][ T589] netlink: 'syz.5.12439': attribute type 1 has an invalid length. [ 1091.024703][ T589] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1091.223928][ T594] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 1092.213411][ T625] netlink: 64 bytes leftover after parsing attributes in process `syz.5.12449'. [ 1092.329751][ T625] syzkaller1: entered promiscuous mode [ 1092.329984][ T625] syzkaller1: entered allmulticast mode [ 1092.965644][ T639] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.12454'. [ 1092.965674][ T639] openvswitch: netlink: Message has 512 unknown bytes. [ 1093.241073][ T647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12458'. [ 1093.241100][ T647] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12458'. [ 1094.950231][ T691] tls_set_device_offload_rx: netdev not found [ 1095.465201][ T712] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1096.704738][ T5626] Bluetooth: hci5: command tx timeout [ 1098.089266][ T696] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1098.922383][ T770] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 1099.018284][ T776] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 1099.108922][T30813] nci: nci_rx_work: unknown MT 0x1 [ 1099.264541][ T785] netlink: 'syz.3.12504': attribute type 2 has an invalid length. [ 1099.503715][ T789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12506'. [ 1099.563459][ T789] vcan0 (unregistering): left allmulticast mode [ 1099.896145][ T799] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12510'. [ 1100.116914][ T806] sctp: [Deprecated]: syz.5.12513 (pid 806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1100.116914][ T806] Use struct sctp_sack_info instead [ 1100.118142][ T806] netlink: 'syz.5.12513': attribute type 10 has an invalid length. [ 1100.118396][ T806] dummy0: left promiscuous mode [ 1100.129601][ T806] team0: Port device dummy0 added [ 1100.140322][ T806] netlink: 14 bytes leftover after parsing attributes in process `syz.5.12513'. [ 1100.157053][ T806] team0: Port device dummy0 removed [ 1100.391413][ T808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12514'. [ 1100.391451][ T808] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12514'. [ 1100.449199][ T808] bridge0: entered promiscuous mode [ 1100.464201][ T808] bridge0: entered allmulticast mode [ 1101.118207][ T821] netlink: 'syz.1.12519': attribute type 1 has an invalid length. [ 1101.199868][ T821] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1101.605164][ T843] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12525'. [ 1101.608770][ T843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12525'. [ 1101.608797][ T843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12525'. [ 1101.944638][ T774] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1102.264242][ T856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12529'. [ 1102.264276][ T856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12529'. [ 1102.886382][ T876] Failed to decode metaid 3 dlen 0 err -22 [ 1102.951911][ T883] netlink: 'syz.3.12537': attribute type 10 has an invalid length. [ 1103.145393][ T883] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.156917][ T883] bond0: (slave team0): Enslaving as an active interface with an up link [ 1103.626243][ T896] syzkaller1: entered promiscuous mode [ 1103.626267][ T896] syzkaller1: entered allmulticast mode [ 1104.689690][ T924] __nla_validate_parse: 6 callbacks suppressed [ 1104.689712][ T924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12552'. [ 1104.689732][ T924] netlink: 'syz.0.12552': attribute type 3 has an invalid length. [ 1104.689747][ T924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12552'. [ 1104.690021][ T924] netlink: 'syz.0.12552': attribute type 3 has an invalid length. [ 1106.380945][ T979] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12563'. [ 1106.511161][ T980] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12562'. [ 1106.669422][ T982] syzkaller1: entered promiscuous mode [ 1106.669450][ T982] syzkaller1: entered allmulticast mode [ 1107.036002][ T998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12566'. [ 1107.988844][ T1038] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12580'. [ 1108.661657][ T1060] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12587'. [ 1108.727830][ T1060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12587'. [ 1109.672791][ T1083] syzkaller1: entered promiscuous mode [ 1109.672819][ T1083] syzkaller1: entered allmulticast mode [ 1110.500053][ T346] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x41 [ 1110.863674][ T1127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12603'. [ 1111.401908][ T1146] batadv_slave_1: entered allmulticast mode [ 1111.448249][ T1146] dvmrp8: entered allmulticast mode [ 1111.487874][ T1139] batadv_slave_1: left allmulticast mode [ 1112.658127][ T1180] netlink: 'syz.0.12622': attribute type 1 has an invalid length. [ 1112.686533][ T1181] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1112.803085][ T1180] block nbd296: server does not support multiple connections per device. [ 1112.803769][ T1180] block nbd296: shutting down sockets [ 1114.113749][ T1224] tipc: Enabled bearer , priority 0 [ 1114.115198][ T1224] syzkaller0: entered promiscuous mode [ 1114.115428][ T1224] syzkaller0: entered allmulticast mode [ 1115.063313][ T1267] xt_hashlimit: size too large, truncated to 1048576 [ 1116.381411][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.494792][ T1299] tunl0: left promiscuous mode [ 1116.576690][ T1299] sit0: left promiscuous mode [ 1116.722147][ T1305] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12660'. [ 1116.757430][ T1299] 8021q: adding VLAN 0 to HW filter on device team0 [ 1117.116859][ T1299] macvlan0: left promiscuous mode [ 1117.218769][ T1299] macsec0: left promiscuous mode [ 1117.307959][ T1299] gretap1: left promiscuous mode [ 1117.360406][ T1299] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1117.420728][ T1299] syzkaller0: left promiscuous mode [ 1117.431347][ T1299] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1117.488068][ T1299] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1117.524338][ T1299] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1117.539764][ T1299] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1117.553983][ T1299] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1117.558240][ T1299] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1117.628346][ T1299] bridge0: port 4(vlan2) entered blocking state [ 1117.628488][ T1299] bridge0: port 4(vlan2) entered forwarding state [ 1118.333127][ T1333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12668'. [ 1118.538602][ T1342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1118.641439][ T1345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1118.766675][ T1347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1118.984263][ T1357] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1118.986140][ T1356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1119.243275][ T1362] syzkaller0: left allmulticast mode [ 1119.496264][ T1371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12680'. [ 1119.901882][ T1384] netlink: 'syz.5.12686': attribute type 1 has an invalid length. [ 1120.018912][ T1384] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1120.101859][ T1386] bond3: (slave veth0_to_bond): making interface the new active one [ 1120.121199][ T1386] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1120.254340][ T1384] macvlan2: entered promiscuous mode [ 1120.254580][ T1384] macvlan2: entered allmulticast mode [ 1120.260656][ T1384] bond3: entered promiscuous mode [ 1120.260684][ T1384] veth0_to_bond: entered promiscuous mode [ 1120.265244][ T1384] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1120.270449][ T1384] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1120.271870][ T1384] bond3: left promiscuous mode [ 1120.271886][ T1384] veth0_to_bond: left promiscuous mode [ 1121.498739][ T1433] tipc: Failed to remove unknown binding: 66,0,0/0:4190267406/4190267407 [ 1121.634027][ T1433] tipc: Failed to remove unknown binding: 66,0,0/0:4190267406/4190267407 [ 1123.784764][ T1462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12703'. [ 1124.636769][ T1496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12714'. [ 1125.927418][ T1529] netlink: 'syz.3.12726': attribute type 4 has an invalid length. [ 1126.898972][ T1541] netlink: 'syz.1.12731': attribute type 1 has an invalid length. [ 1127.555703][ T1541] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1127.636222][ T1544] macvlan3: entered promiscuous mode [ 1127.636248][ T1544] macvlan3: entered allmulticast mode [ 1127.636517][ T1544] bond6: entered allmulticast mode [ 1127.636558][ T1544] bond6: entered promiscuous mode [ 1127.637544][ T1544] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1127.640263][ T1544] team0: Port device macvlan3 added [ 1128.694059][ T1584] tipc: Failed to remove unknown binding: 66,0,0/2886997039:3620688444/3620688445 [ 1128.697316][ T1584] tipc: Failed to remove unknown binding: 66,0,0/2886997039:3620688444/3620688445 [ 1129.035487][ T1573] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12741'. [ 1129.035534][ T1573] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12741'. [ 1129.112360][ T1573] geneve0: entered promiscuous mode [ 1129.112613][ T1573] geneve0: entered allmulticast mode [ 1129.200991][T30824] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.232477][ T346] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.244704][T30824] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.251870][T30823] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.251919][T30823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.585177][ T1608] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12750'. [ 1129.682049][ T1605] syzkaller1: entered promiscuous mode [ 1129.682074][ T1605] syzkaller1: entered allmulticast mode [ 1131.081275][ T1642] syzkaller0: entered promiscuous mode [ 1131.081301][ T1642] syzkaller0: entered allmulticast mode [ 1131.534264][ T1661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12767'. [ 1131.858192][ T1654] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1132.046870][ T1671] batman_adv: batadv0: Adding interface: syzkaller0 [ 1132.046893][ T1671] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1132.046962][ T1671] batman_adv: batadv0: Interface activated: syzkaller0 [ 1132.100941][ T1669] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1132.332911][ T1669] batman_adv: batadv0: Removing interface: syzkaller0 [ 1133.214043][ T1705] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12777'. [ 1133.331894][ T1712] nbd0: detected capacity change from 0 to 63 [ 1133.344218][ T5626] block nbd0: Receive control failed (result -104) [ 1134.140565][ T1736] netlink: 52 bytes leftover after parsing attributes in process `syz.1.12788'. [ 1134.162827][ T1736] bridge0: port 4(vlan2) entered disabled state [ 1134.270861][ T1740] syzkaller1: entered promiscuous mode [ 1134.271099][ T1740] syzkaller1: entered allmulticast mode [ 1134.614792][ T1746] netlink: 'syz.2.12791': attribute type 1 has an invalid length. [ 1134.896335][ T1755] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12795'. [ 1135.492051][ T1774] netlink: 'syz.0.12799': attribute type 1 has an invalid length. [ 1135.596544][ T1774] bond10: entered promiscuous mode [ 1135.597044][ T1774] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1135.639578][ T1780] netlink: 'syz.5.12804': attribute type 1 has an invalid length. [ 1135.660733][ T1780] netlink: 'syz.5.12804': attribute type 2 has an invalid length. [ 1135.782624][ T1774] macvtap2: entered allmulticast mode [ 1135.861992][ T1774] bond10: (slave bridge8): making interface the new active one [ 1135.862022][ T1774] bridge8: entered promiscuous mode [ 1135.869849][ T1774] bond10: (slave bridge8): Enslaving as an active interface with an up link [ 1137.235887][ T1822] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1138.480053][ T1862] netlink: 'syz.3.12832': attribute type 1 has an invalid length. [ 1138.969379][ T1872] syzkaller1: entered promiscuous mode [ 1138.969407][ T1872] syzkaller1: entered allmulticast mode [ 1139.421805][T27973] wlan1: Trigger new scan to find an IBSS to join [ 1139.566796][ T1893] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1139.566826][ T1893] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1140.130787][ T1907] tipc: Enabled bearer , priority 0 [ 1140.252904][ T1907] syzkaller0: entered promiscuous mode [ 1140.252932][ T1907] syzkaller0: entered allmulticast mode [ 1140.253717][ T1907] tipc: Resetting bearer [ 1140.367084][ T1915] netlink: 'syz.5.12851': attribute type 2 has an invalid length. [ 1140.446799][ T1904] tipc: Resetting bearer [ 1144.389103][ T346] wlan1: Trigger new scan to find an IBSS to join [ 1145.055055][ T1904] tipc: Disabling bearer [ 1145.124163][T31306] tipc: Node number set to 1 [ 1145.192388][ T1946] syzkaller0: entered promiscuous mode [ 1145.192416][ T1946] syzkaller0: entered allmulticast mode [ 1145.445405][ T1951] syzkaller0: entered promiscuous mode [ 1145.445432][ T1951] syzkaller0: entered allmulticast mode [ 1145.939056][ T1975] syzkaller0: left promiscuous mode [ 1145.939303][ T1975] syzkaller0: left allmulticast mode [ 1146.129877][ T1978] syzkaller0: entered promiscuous mode [ 1146.129902][ T1978] syzkaller0: entered allmulticast mode [ 1146.254278][ T1987] netlink: 'syz.1.12870': attribute type 1 has an invalid length. [ 1146.789302][T30813] wlan1: Creating new IBSS network, BSSID ce:d8:49:2a:52:31 [ 1146.863080][ T1991] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1146.885522][ T1991] bond7: (slave bond8): making interface the new active one [ 1146.905192][ T1991] bond7: (slave bond8): Enslaving as an active interface with an up link [ 1147.065618][ T1993] bond7: (slave gretap0): Enslaving as a backup interface with an up link [ 1147.092999][ T1995] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1147.384521][ T2022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12873'. [ 1147.491262][ T2022] bond0: (slave bond_slave_0): Releasing backup interface [ 1147.647634][ T2022] bond_slave_0: entered promiscuous mode [ 1147.647836][ T2022] bond_slave_0: entered allmulticast mode [ 1147.861123][ T2036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12878'. [ 1147.861232][ T2036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12878'. [ 1147.977162][ T2035] tipc: Enabled bearer , priority 0 [ 1148.094951][ T2041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12879'. [ 1148.255172][ T2035] syzkaller0: entered promiscuous mode [ 1148.255203][ T2035] syzkaller0: entered allmulticast mode [ 1148.257338][ T2035] tipc: Resetting bearer [ 1149.286055][ T12] tipc: Resetting bearer [ 1149.422033][ T2034] tipc: Resetting bearer [ 1150.030885][ T2077] netlink: 'syz.5.12885': attribute type 1 has an invalid length. [ 1153.496904][ T2034] tipc: Disabling bearer [ 1153.643012][ T2074] syzkaller0: entered promiscuous mode [ 1153.643039][ T2074] syzkaller0: entered allmulticast mode [ 1153.666193][ T2077] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1153.667930][ T2078] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1153.669647][ T2079] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1153.881395][ T2091] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1153.881426][ T2091] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1154.003309][ T2088] syzkaller0: entered promiscuous mode [ 1154.003557][ T2088] syzkaller0: entered allmulticast mode [ 1154.605269][ T2110] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12894'. [ 1154.656889][ T2110] ip6gre1: entered promiscuous mode [ 1154.656924][ T2110] ip6gre1: entered allmulticast mode [ 1154.771064][ T2113] netlink: 'syz.0.12894': attribute type 6 has an invalid length. [ 1154.771092][ T2113] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12894'. [ 1155.195697][ T2118] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1155.195958][ T2118] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1155.526343][ T2144] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1155.526392][ T2144] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1155.884222][ T2151] syzkaller0: entered promiscuous mode [ 1155.884455][ T2151] syzkaller0: entered allmulticast mode [ 1156.068842][ T2161] netlink: 'syz.2.12904': attribute type 4 has an invalid length. [ 1156.125314][ T2162] netlink: 'syz.2.12904': attribute type 4 has an invalid length. [ 1156.688147][ T2171] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1156.709047][ T2171] netlink: 'syz.0.12906': attribute type 21 has an invalid length. [ 1156.709147][ T2171] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1156.709157][ T2171] IPv6: NLM_F_CREATE should be set when creating new route [ 1156.709273][ T2171] IPv6: NLM_F_CREATE should be set when creating new route [ 1156.709298][ T2171] IPv6: NLM_F_CREATE should be set when creating new route [ 1157.821547][ T2197] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12916'. [ 1158.205595][ T2207] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12919'. [ 1158.228055][ T2207] netlink: 'syz.1.12919': attribute type 4 has an invalid length. [ 1158.228083][ T2207] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.12919'. [ 1158.493683][ T2210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12918'. [ 1158.702065][ T2219] tipc: Enabling of bearer rejected, already enabled [ 1158.722972][ T2220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1158.744597][ T2219] tipc: Resetting bearer [ 1159.072371][ T2229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12924'. [ 1159.953571][ T2258] netlink: 'syz.2.12937': attribute type 1 has an invalid length. [ 1160.126196][ T2263] veth11: entered allmulticast mode [ 1160.130944][ T2263] bond3: (slave veth11): Enslaving as an active interface with a down link [ 1160.161056][ T2259] syzkaller0: entered promiscuous mode [ 1160.166797][ T2259] syzkaller0: entered allmulticast mode [ 1160.245534][ T2258] bond3: (slave veth0_to_bond): making interface the new active one [ 1160.291225][ T2258] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1160.544352][ T2266] syzkaller0: entered promiscuous mode [ 1160.544378][ T2266] syzkaller0: entered allmulticast mode [ 1161.304004][ T2295] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1161.304037][ T2295] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1161.782713][ T2307] syzkaller0: entered promiscuous mode [ 1161.782739][ T2307] syzkaller0: entered allmulticast mode [ 1162.005152][ T2314] tipc: Cannot configure node identity twice [ 1162.046994][ T2314] tipc: Enabled bearer , priority 0 [ 1162.635928][ T2330] syzkaller0: entered promiscuous mode [ 1162.636173][ T2330] syzkaller0: entered allmulticast mode [ 1162.818742][ T2337] bond0: (slave team0): Releasing backup interface [ 1162.974472][ T2337] bond0: (slave bond_slave_0): Releasing backup interface [ 1163.085063][ T2337] bond0: (slave bond_slave_1): Releasing backup interface [ 1163.089775][ T2347] netlink: 'syz.2.12969': attribute type 1 has an invalid length. [ 1163.118102][ T2337] team0: Port device team_slave_0 removed [ 1163.147717][ T2337] team0: Port device team_slave_1 removed [ 1163.150529][ T2337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.150556][ T2337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1163.155891][ T2337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.155916][ T2337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1163.162845][ T2337] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1163.216393][ T2341] team0: Port device xfrm0 added [ 1163.238927][ T2342] tipc: Enabled bearer , priority 0 [ 1163.736746][ T2269] block nbd0: Possible stuck request ffff888027407000: control (read@0,1024B). Runtime 30 seconds [ 1163.737338][ T2269] block nbd0: Possible stuck request ffff8880274071c0: control (read@1024,1024B). Runtime 30 seconds [ 1163.737372][ T2269] block nbd0: Possible stuck request ffff888027407380: control (read@2048,1024B). Runtime 30 seconds [ 1163.737400][ T2269] block nbd0: Possible stuck request ffff888027407540: control (read@3072,1024B). Runtime 30 seconds [ 1163.836628][ T2350] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1163.866328][ T2332] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12966'. [ 1163.886735][ T2350] bond5 (unregistering): Released all slaves [ 1164.161591][T31306] tipc: Node number set to 4269801488 [ 1164.211101][ T2354] bridge7: entered promiscuous mode [ 1164.348209][ T2354] bond4: (slave bridge7): making interface the new active one [ 1164.395655][ T2354] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 1165.263295][ T2406] netlink: 'syz.1.12979': attribute type 1 has an invalid length. [ 1165.720317][ T2406] bond9: entered promiscuous mode [ 1165.734024][ T2406] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1165.822916][ T2411] ipvlan2: entered allmulticast mode [ 1165.822942][ T2411] bond9: entered allmulticast mode [ 1165.944664][ T2417] ipvlan3: entered allmulticast mode [ 1166.059777][ T2420] bond9: (slave bridge10): making interface the new active one [ 1166.060415][ T2420] bridge10: entered promiscuous mode [ 1166.060745][ T2420] bridge10: entered allmulticast mode [ 1166.107098][ T2420] bond9: (slave bridge10): Enslaving as an active interface with an up link [ 1166.176362][ T2422] syzkaller0: entered promiscuous mode [ 1166.176392][ T2422] syzkaller0: entered allmulticast mode [ 1166.495110][ T2452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12983'. [ 1170.553413][ T2449] syzkaller0: left promiscuous mode [ 1170.553637][ T2449] syzkaller0: left allmulticast mode [ 1170.621714][ T2452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1170.767132][ T2452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.127350][ T2461] tipc: Enabling of bearer rejected, already enabled [ 1171.288348][ T2465] tipc: Enabling of bearer rejected, failed to enable media [ 1171.887791][ T2504] syzkaller1: entered promiscuous mode [ 1171.888023][ T2504] syzkaller1: entered allmulticast mode [ 1172.277176][ T2523] syzkaller0: entered promiscuous mode [ 1172.277203][ T2523] syzkaller0: entered allmulticast mode [ 1173.559016][ T2538] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13000'. [ 1177.745128][ T2566] tipc: Enabled bearer , priority 0 [ 1177.745701][ T2538] lo: entered promiscuous mode [ 1177.749973][ T2538] bond0: entered promiscuous mode [ 1177.750506][ T2538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.751345][ T2538] dummy0: entered promiscuous mode [ 1177.793977][ T2538] eql: entered promiscuous mode [ 1177.807872][ T2538] ifb0: entered promiscuous mode [ 1177.808383][ T2538] ifb1: entered promiscuous mode [ 1177.809008][ T2538] virtio_net virtio1 eth0: entered promiscuous mode [ 1177.830855][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.854932][ T2538] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 1177.857734][ T2538] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 1177.859019][ T2538] hwsim0: entered promiscuous mode [ 1177.861328][ T2538] ieee802154 phy1 wpan1: entered promiscuous mode [ 1177.893861][ T2538] teql0: entered promiscuous mode [ 1177.893887][ T2538] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1178.354590][ T2598] Set syz1 is full, maxelem 2 reached [ 1178.593690][ T2605] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13012'. [ 1178.593731][ T2605] netlink: 'syz.5.13012': attribute type 7 has an invalid length. [ 1178.593744][ T2605] netlink: 'syz.5.13012': attribute type 8 has an invalid length. [ 1178.593757][ T2605] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13012'. [ 1178.719555][ T2605] ip6gretap0: entered promiscuous mode [ 1178.735110][ T2605] syz_tun: entered promiscuous mode [ 1178.752959][ T2605] gretap0: entered promiscuous mode [ 1179.986892][ T2675] openvswitch: netlink: Invalid VLAN frame [ 1180.121772][ T2669] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1180.267195][ T2689] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13036'. [ 1180.936712][ T2715] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 1181.488143][ T2745] ip_tables: iptables: counters copy to user failed while replacing table [ 1181.618776][ T2753] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 1181.618776][ T2753] Please contact the netfilter-devel mailing list or update your nftables rules. [ 1182.205575][ T2785] ip_tables: iptables: counters copy to user failed while replacing table [ 1182.409212][ T2791] netlink: 'syz.5.13074': attribute type 1 has an invalid length. [ 1182.711138][ T2791] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1182.739807][ T2791] bond5 (unregistering): Released all slaves [ 1183.011385][ T2806] bridge2: entered promiscuous mode [ 1183.111226][ T2818] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1183.155401][ T2819] netlink: 'syz.1.13085': attribute type 33 has an invalid length. [ 1184.285009][ T2869] netlink: 'syz.5.13097': attribute type 1 has an invalid length. [ 1185.015313][ T2906] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1185.694240][ T2925] netlink: 256 bytes leftover after parsing attributes in process `syz.0.13122'. [ 1186.303339][ T2946] netlink: 'syz.2.13131': attribute type 1 has an invalid length. [ 1186.366287][ T2946] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1186.368069][ T2946] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13131'. [ 1186.369344][T30827] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1186.370770][ T2946] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1186.537699][T30820] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1186.646613][ T2962] netlink: 'syz.2.13139': attribute type 16 has an invalid length. [ 1186.646641][ T2962] netlink: 'syz.2.13139': attribute type 17 has an invalid length. [ 1186.726084][ T2962] tunl0: left promiscuous mode [ 1186.730125][ T2962] erspan0: left promiscuous mode [ 1186.838919][ T2962] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1186.840314][ T2962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1186.866690][ T2962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1186.884859][ T2962] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1187.320647][ T2975] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13144'. [ 1187.320676][ T2975] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1187.469402][ T2979] netlink: 'syz.3.13147': attribute type 1 has an invalid length. [ 1187.703518][ T2979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13147'. [ 1187.707465][ T2983] bond9: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1187.796130][ T2991] ip_tables: iptables: counters copy to user failed while replacing table [ 1187.817705][ T2986] veth3: entered promiscuous mode [ 1187.854036][ T2979] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1187.909860][ T61] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1188.064391][T27973] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1188.477990][ T3005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.497013][ T3003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.752754][ T3012] tipc: Started in network mode [ 1188.752790][ T3012] tipc: Node identity ac14140f, cluster identity 4711 [ 1188.757916][ T3012] tipc: New replicast peer: 255.255.255.255 [ 1188.759571][ T3012] tipc: Enabled bearer , priority 10 [ 1188.967359][ T3017] netlink: 'syz.0.13161': attribute type 4 has an invalid length. [ 1189.049700][ T3019] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13162'. [ 1189.475561][ T3033] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13168'. [ 1189.855839][T31306] tipc: Node number set to 2886997007 [ 1190.093579][ T3046] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1190.274010][T31434] hid-generic 0005:04F3:0002.0001: unknown main item tag 0x0 [ 1190.452284][T31434] hid-generic 0005:04F3:0002.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 1190.486814][ T3053] netlink: 'syz.1.13175': attribute type 4 has an invalid length. [ 1190.865895][ T3063] No such timeout policy "s" [ 1190.865916][ T3063] netlink: Failed to associated timeout policy 's' [ 1191.071330][ T3067] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1191.607902][ T3079] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13187'. [ 1191.869497][ T3086] netlink: 'syz.3.13190': attribute type 4 has an invalid length. [ 1192.277397][ T3101] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 1192.584078][ T3110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13200'. [ 1192.828831][ T3110] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13200'. [ 1193.047741][ T3128] netlink: 'syz.5.13204': attribute type 4 has an invalid length. [ 1193.819057][ T2269] block nbd0: Possible stuck request ffff888027407000: control (read@0,1024B). Runtime 60 seconds [ 1193.819106][ T2269] block nbd0: Possible stuck request ffff8880274071c0: control (read@1024,1024B). Runtime 60 seconds [ 1193.819133][ T2269] block nbd0: Possible stuck request ffff888027407380: control (read@2048,1024B). Runtime 60 seconds [ 1193.819159][ T2269] block nbd0: Possible stuck request ffff888027407540: control (read@3072,1024B). Runtime 60 seconds [ 1194.786555][ T3167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13219'. [ 1195.038334][ T3174] netlink: 'syz.0.13220': attribute type 12 has an invalid length. [ 1195.038361][ T3174] netlink: 'syz.0.13220': attribute type 29 has an invalid length. [ 1195.038375][ T3174] netlink: 148 bytes leftover after parsing attributes in process `syz.0.13220'. [ 1195.038396][ T3174] netlink: 'syz.0.13220': attribute type 1 has an invalid length. [ 1195.038409][ T3174] netlink: 47 bytes leftover after parsing attributes in process `syz.0.13220'. [ 1196.683380][ T4984] udevd[4984]: worker [1597] /devices/virtual/block/nbd0 is taking a long time [ 1198.292706][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1198.648150][ T3311] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13272'. [ 1198.659362][ T3309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13271'. [ 1198.716677][ T3310] syzkaller1: entered promiscuous mode [ 1198.716903][ T3310] syzkaller1: entered allmulticast mode [ 1198.818852][ T3315] openvswitch: netlink: IP tunnel dst address not specified [ 1198.837461][ T3315] pimreg: entered allmulticast mode [ 1198.850309][ T3315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13276'. [ 1199.936564][ T3349] openvswitch: netlink: IP tunnel dst address not specified [ 1200.085161][ T3351] pimreg: entered allmulticast mode [ 1200.092835][ T3349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13288'. [ 1200.127259][ T3347] pimreg: left allmulticast mode [ 1200.385513][ T3361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13291'. [ 1200.550596][ T9] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 1200.550640][ T9] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 1200.550665][ T9] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 1200.550689][ T9] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 1200.550713][ T9] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 1200.550737][ T9] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 1200.550759][ T9] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 1200.550783][ T9] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 1200.550807][ T9] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 1200.550831][ T9] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 1201.161582][ T3384] openvswitch: netlink: IP tunnel dst address not specified [ 1202.111275][ T3418] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13317'. [ 1202.111302][ T3418] bridge: RTM_NEWNEIGH with invalid ether address [ 1202.231971][ T3418] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13317'. [ 1202.232001][ T3418] bridge: RTM_NEWNEIGH with invalid ether address [ 1202.398256][ T3422] openvswitch: netlink: IP tunnel dst address not specified [ 1202.458759][ T3428] nbd1: detected capacity change from 0 to 63 [ 1202.469982][ T3428] block nbd1: NBD_DISCONNECT [ 1202.483175][ T3428] block nbd1: Disconnected due to user request. [ 1202.484756][ T3428] block nbd1: shutting down sockets [ 1202.492740][ T1947] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1202.493007][ T1947] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1202.493105][ T1947] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1202.493129][ T1947] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1202.504949][ T1947] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 2 prio class 2 [ 1202.504982][ T1947] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1202.504997][ T1947] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1202.511985][ T1947] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1202.512019][ T1947] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1202.512035][ T1947] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1202.512048][ T1947] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1202.512062][ T1947] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1202.515699][ T1947] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1202.515725][ T1947] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1202.515739][ T1947] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1202.515986][ T1947] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1202.516181][ T1947] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1202.522300][ T1947] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1202.522498][ T1947] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1202.522658][ T1947] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1202.522715][ T1595] ldm_validate_partition_table(): Disk read failed. [ 1202.529713][ T1595] Dev nbd1: unable to read RDB block 0 [ 1202.550494][ T1595] nbd1: unable to read partition table [ 1202.903961][ T1595] ldm_validate_partition_table(): Disk read failed. [ 1202.924818][ T1595] Dev nbd1: unable to read RDB block 0 [ 1202.926025][ T1595] nbd1: unable to read partition table [ 1203.708239][ T3460] openvswitch: netlink: IP tunnel dst address not specified [ 1203.980053][ T3469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13338'. [ 1204.026419][ T9] hid-generic 0005:4C4A:4155.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1204.127009][ T3472] fido_id[3472]: Failed to open report descriptor at '/sys/devices/virtual/bluetooth/hci5/hci5:200/report_descriptor': No such file or directory [ 1204.451950][ T3477] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1204.796068][ T3487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13347'. [ 1204.965156][ T3492] Set syz1 is full, maxelem 2 reached [ 1205.111433][ T3499] openvswitch: netlink: IP tunnel dst address not specified [ 1205.206844][ T3501] batman_adv: batadv0: Adding interface: syzkaller0 [ 1205.206866][ T3501] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1205.226089][ T3501] batman_adv: batadv0: Interface activated: syzkaller0 [ 1205.383249][ T3493] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1205.549692][ T3493] batman_adv: batadv0: Removing interface: syzkaller0 [ 1206.500765][ T3544] bridge11: entered promiscuous mode [ 1206.500811][ T3544] bridge11: entered allmulticast mode [ 1206.625397][ T3553] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13368'. [ 1206.739429][ T3557] netlink: 548 bytes leftover after parsing attributes in process `syz.0.13368'. [ 1206.969180][ T3554] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13368'. [ 1207.207902][ T3564] openvswitch: netlink: IP tunnel dst address not specified [ 1208.054732][ T3587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13381'. [ 1208.178306][ T3587] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13381'. [ 1209.536764][ T3629] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.13397'. [ 1209.784389][ T3611] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1209.941843][ T3635] syzkaller0: left promiscuous mode [ 1209.941868][ T3635] syzkaller0: left allmulticast mode [ 1210.434072][ T3650] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1210.586851][ T3658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13411'. [ 1210.671798][ T3659] netlink: 'syz.0.13410': attribute type 4 has an invalid length. [ 1211.803443][ T3695] netlink: 'syz.1.13425': attribute type 4 has an invalid length. [ 1211.868504][ T3699] netlink: 'syz.2.13426': attribute type 1 has an invalid length. [ 1211.995438][ T3710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13428'. [ 1212.028699][ T3699] bond6: entered promiscuous mode [ 1212.029134][ T3699] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1212.107424][ T3714] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13428'. [ 1212.280552][ T3711] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1212.300414][ T3711] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1212.300443][ T3711] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1212.365145][ T3711] bond6: (slave ip6gre2): making interface the new active one [ 1212.371292][ T3711] ip6gre2: entered promiscuous mode [ 1212.408193][ T3711] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 1212.408942][ T3708] syzkaller0: entered promiscuous mode [ 1212.408969][ T3708] syzkaller0: entered allmulticast mode [ 1213.133322][ T3725] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 1213.140388][ T3733] netlink: 'syz.0.13434': attribute type 1 has an invalid length. [ 1213.412939][ T3733] bond11: entered promiscuous mode [ 1213.416592][ T3733] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1213.836017][ T3742] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1213.836451][ T3742] bond11: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 1213.836472][ T3742] bond11: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 1213.900154][ T3742] bond11: (slave ip6gre2): making interface the new active one [ 1213.900184][ T3742] ip6gre2: entered promiscuous mode [ 1213.936209][ T3742] bond11: (slave ip6gre2): Enslaving as an active interface with an up link [ 1214.828133][ T3767] netlink: 'syz.3.13444': attribute type 1 has an invalid length. [ 1216.327151][ T3813] syzkaller1: entered promiscuous mode [ 1216.327179][ T3813] syzkaller1: entered allmulticast mode [ 1217.179380][ T3823] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1217.296099][ T3841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13469'. [ 1218.409356][ T3865] openvswitch: netlink: IP tunnel dst address not specified [ 1218.561069][ T3870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13479'. [ 1218.946503][ T3876] netlink: 9 bytes leftover after parsing attributes in process `syz.0.13483'. [ 1218.962292][ T3876] netlink: 5 bytes leftover after parsing attributes in process `syz.0.13483'. [ 1218.962491][ T3876] 0{X功: renamed from gretap0 [ 1219.052714][ T3876] 0{X功: entered allmulticast mode [ 1219.069687][ T3876] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 1221.431242][ T3930] xfrm2: entered promiscuous mode [ 1222.545956][ T3938] mac80211_hwsim hwsim0 wlan0: left promiscuous mode [ 1222.662077][ T3956] netlink: 'syz.1.13508': attribute type 1 has an invalid length. [ 1222.724078][ T3956] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1222.889427][ T3956] bond10: (slave geneve3): making interface the new active one [ 1222.916761][ T3956] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 1223.893971][ T2269] block nbd0: Possible stuck request ffff888027407000: control (read@0,1024B). Runtime 90 seconds [ 1223.894018][ T2269] block nbd0: Possible stuck request ffff8880274071c0: control (read@1024,1024B). Runtime 90 seconds [ 1223.894045][ T2269] block nbd0: Possible stuck request ffff888027407380: control (read@2048,1024B). Runtime 90 seconds [ 1223.894070][ T2269] block nbd0: Possible stuck request ffff888027407540: control (read@3072,1024B). Runtime 90 seconds [ 1223.987627][ T3990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13516'. [ 1224.005284][ T3989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13517'. [ 1224.430620][ T3999] syzkaller1: entered promiscuous mode [ 1224.430855][ T3999] syzkaller1: entered allmulticast mode [ 1225.649326][ T4005] scsi_nl_rcv_msg: discarding partial skb [ 1226.433311][ T4036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13524'. [ 1226.433345][ T4036] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13524'. [ 1226.433361][ T4036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13524'. [ 1226.679004][ T4040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1226.743707][ T4046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13529'. [ 1226.773773][ T4040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1226.837694][ T4041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1227.617841][ T4064] ip_tables: iptables: counters copy to user failed while replacing table [ 1227.959967][ T4075] netlink: 'syz.3.13538': attribute type 1 has an invalid length. [ 1228.245062][ T4078] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1228.275899][ T4078] bond12 (unregistering): Released all slaves [ 1228.378096][ T4075] bridge3: entered promiscuous mode [ 1228.423108][ T4075] bond11: (slave bridge3): making interface the new active one [ 1228.424082][ T4075] bond11: (slave bridge3): Enslaving as an active interface with an up link [ 1229.278212][ T4103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13546'. [ 1229.328969][ T4103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13546'. [ 1229.499419][ T4110] syzkaller0: entered promiscuous mode [ 1229.499443][ T4110] syzkaller0: entered allmulticast mode [ 1229.986012][ T4121] ip_tables: iptables: counters copy to user failed while replacing table [ 1230.391882][ T4122] syzkaller1: entered promiscuous mode [ 1230.391914][ T4122] syzkaller1: entered allmulticast mode [ 1230.974945][ T4136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13555'. [ 1230.974991][ T4136] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13555'. [ 1230.975007][ T4136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13555'. [ 1232.329821][ T4164] netlink: 'syz.1.13561': attribute type 83 has an invalid length. [ 1232.409617][ T4169] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1232.409884][ T4169] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1232.413058][ T4169] tipc: Resetting bearer [ 1232.535722][ T4175] syzkaller1: entered promiscuous mode [ 1232.535747][ T4175] syzkaller1: entered allmulticast mode [ 1233.125746][ T4189] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1235.454726][ T4253] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1235.454772][ T4253] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1235.455212][ T4253] tipc: Resetting bearer [ 1235.954366][ T4260] wg0 speed is unknown, defaulting to 1000 [ 1236.913768][ T4278] bridge0: port 1(dummy0) entered blocking state [ 1236.914238][ T4278] bridge0: port 1(dummy0) entered disabled state [ 1236.922537][ T4278] dummy0: entered allmulticast mode [ 1236.946573][ T4278] dummy0: entered promiscuous mode [ 1237.181028][ T4292] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1237.181314][ T4292] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1237.183610][ T4292] tipc: Resetting bearer [ 1237.489236][ T4310] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13595'. [ 1237.660035][ T4314] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13596'. [ 1238.069979][ T4321] netlink: 84 bytes leftover after parsing attributes in process `syz.0.13598'. [ 1238.088542][ T4321] netlink: 'syz.0.13598': attribute type 1 has an invalid length. [ 1238.138784][ T4328] netlink: 'syz.2.13603': attribute type 1 has an invalid length. [ 1238.412598][ T4328] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1238.436684][ T4335] macvtap2: entered allmulticast mode [ 1238.630274][ T4328] bond7: (slave geneve4): making interface the new active one [ 1238.695699][ T4328] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 1238.934030][ T4346] syzkaller0: entered promiscuous mode [ 1238.934056][ T4346] syzkaller0: entered allmulticast mode [ 1239.273500][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.872518][ T4374] netlink: 'syz.5.13613': attribute type 1 has an invalid length. [ 1240.157769][ T4381] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1240.202679][ T4374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13613'. [ 1240.234552][ T4374] bond5: (slave bridge3): making interface the new active one [ 1240.235042][ T4374] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 1240.391670][ T4390] syzkaller0: entered promiscuous mode [ 1240.391891][ T4390] syzkaller0: entered allmulticast mode [ 1240.840372][ T4410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13623'. [ 1240.933528][ T4401] tipc: Enabled bearer , priority 0 [ 1241.209936][ T4402] syzkaller0: entered promiscuous mode [ 1241.209965][ T4402] syzkaller0: entered allmulticast mode [ 1241.210848][ T4402] tipc: Resetting bearer [ 1241.303351][ T4396] tipc: Resetting bearer [ 1241.935553][ T4438] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 1242.541912][T30863] Bluetooth: hci5: command 0x0405 tx timeout [ 1244.960188][ T4470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13636'. [ 1247.454346][ T4396] tipc: Disabling bearer [ 1247.461030][ T4426] syzkaller0: entered promiscuous mode [ 1247.461057][ T4426] syzkaller0: entered allmulticast mode [ 1247.816262][ T4466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1247.859636][ T4476] xt_hashlimit: size too large, truncated to 1048576 [ 1247.960472][ T4476] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13637'. [ 1248.003999][ T4476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13637'. [ 1248.078609][ T4487] netlink: 'syz.5.13641': attribute type 1 has an invalid length. [ 1248.156651][ T4491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13641'. [ 1248.267299][ T4487] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1248.416033][ T4494] bond7: (slave bridge4): making interface the new active one [ 1248.419547][ T4494] bond7: (slave bridge4): Enslaving as an active interface with an up link [ 1250.026739][ T4538] syzkaller0: left promiscuous mode [ 1250.026763][ T4538] syzkaller0: left allmulticast mode [ 1250.588178][ T4553] openvswitch: netlink: IP tunnel dst address not specified [ 1250.797309][ T4553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13662'. [ 1251.188235][ T4565] ip_tables: iptables: counters copy to user failed while replacing table [ 1251.271939][ T4567] netlink: 'syz.5.13667': attribute type 1 has an invalid length. [ 1251.417659][ T4576] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1251.428118][ T4567] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1251.514075][ T4567] bond8 (unregistering): Released all slaves [ 1251.545641][ T4581] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13668'. [ 1251.639038][ T4577] bridge5: entered promiscuous mode [ 1252.018318][ T4594] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1252.020146][ T4594] team0: Device ipvlan2 is already an upper device of the team interface [ 1252.273462][ T4601] openvswitch: netlink: IP tunnel dst address not specified [ 1252.333932][ T4603] netlink: 71 bytes leftover after parsing attributes in process `syz.3.13681'. [ 1252.343160][ T4601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13679'. [ 1252.680579][ T4610] ieee802154 phy1 wpan1: encryption failed: -22 [ 1252.755530][ T4617] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1252.755604][ T4617] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1252.756242][ T4617] tipc: Resetting bearer [ 1253.060088][ T4625] tc action pedit offset must be on 32 bit boundaries [ 1253.360986][ T4638] Dropped outbound packet type=1a [ 1253.585823][ T4648] openvswitch: netlink: IP tunnel dst address not specified [ 1253.666188][ T4648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13694'. [ 1253.975477][ T2269] block nbd0: Possible stuck request ffff888027407000: control (read@0,1024B). Runtime 120 seconds [ 1253.975523][ T2269] block nbd0: Possible stuck request ffff8880274071c0: control (read@1024,1024B). Runtime 120 seconds [ 1253.975550][ T2269] block nbd0: Possible stuck request ffff888027407380: control (read@2048,1024B). Runtime 120 seconds [ 1253.975575][ T2269] block nbd0: Possible stuck request ffff888027407540: control (read@3072,1024B). Runtime 120 seconds [ 1254.890755][ T4692] openvswitch: netlink: IP tunnel dst address not specified [ 1254.983355][ T4692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13715'. [ 1255.045053][ T4696] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13716'. [ 1255.045352][ T4696] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13716'. [ 1255.524061][ T4714] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13725'. [ 1255.800863][ T4726] openvswitch: netlink: IP tunnel dst address not specified [ 1255.836071][ T4726] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13730'. [ 1256.147441][ T4732] netlink: 'syz.1.13732': attribute type 1 has an invalid length. [ 1256.168467][ T4733] netlink: 'syz.3.13733': attribute type 16 has an invalid length. [ 1256.168494][ T4733] netlink: 'syz.3.13733': attribute type 17 has an invalid length. [ 1256.448774][ T4733] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.519989][ T4733] veth0_to_bond: left allmulticast mode [ 1256.583391][ T4733] veth0_vlan: left allmulticast mode [ 1256.607722][ T4733] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1256.611218][ T4733] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 1256.636833][ T4733] ip6gre1: left allmulticast mode [ 1256.654927][ T4733] geneve2: left promiscuous mode [ 1256.672555][ T4733] ip6erspan0: left allmulticast mode [ 1256.675577][ T4733] bridge0: port 1(dummy0) entered blocking state [ 1256.675723][ T4733] bridge0: port 1(dummy0) entered forwarding state [ 1256.677160][ T4733] bond7: left promiscuous mode [ 1256.681962][T31428] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1256.894317][ T4093] bond9: (slave ip6gretap1): link status up again after 0 ms [ 1256.900664][ T4733] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1256.921614][ T4093] bond9: (slave ip6gretap1): link status up again after 0 ms [ 1256.924150][ T4733] xfrm2: left promiscuous mode [ 1256.940928][ T4093] bond9: (slave ip6gretap1): link status up again after 0 ms [ 1256.962953][ T158] bond9: (slave ip6gretap1): link status up again after 0 ms [ 1256.983018][ T4093] bond9: (slave ip6gretap1): link status up again after 0 ms [ 1257.002033][T24570] bond9: (slave ip6gretap1): link status up again after 0 ms [ 1257.032011][ T4093] bond9: (slave ip6gretap1): link status up again after 0 ms [ 1257.035838][ T4733] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1257.062788][ T4733] bridge3: left promiscuous mode [ 1257.145725][ T4738] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1257.147031][ T4739] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1257.179787][ T4732] bridge12: entered promiscuous mode [ 1257.604552][T31434] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1258.602139][ T43] net_ratelimit: 36 callbacks suppressed [ 1258.602166][ T43] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1258.697580][ T4786] netlink: 'syz.3.13752': attribute type 1 has an invalid length. [ 1258.784796][ T4786] bond12: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1258.806129][ T4786] bond12 (unregistering): Released all slaves [ 1259.044338][ T4792] bridge4: entered promiscuous mode [ 1259.213035][T30823] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1259.321866][T30823] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1259.417466][ T4806] pimreg: entered allmulticast mode [ 1259.434950][T30827] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1259.436685][ T4805] pimreg: left allmulticast mode [ 1259.541788][ T158] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1259.630503][ T4812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13761'. [ 1259.656305][ T4093] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1259.822196][ T4093] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1259.850352][ T4816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1259.877082][ T4816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1259.967590][ T43] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1260.072500][ T43] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1260.188585][ T158] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1263.000573][ T4893] syzkaller1: entered promiscuous mode [ 1263.000600][ T4893] syzkaller1: entered allmulticast mode [ 1263.464229][ T4910] netlink: 'syz.1.13795': attribute type 1 has an invalid length. [ 1263.624889][ T4910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13795'. [ 1263.649318][ T4915] bond12: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1263.649468][ T4916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13794'. [ 1263.686633][ T4910] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1263.688409][T30823] net_ratelimit: 29 callbacks suppressed [ 1263.688431][T30823] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1263.733126][ T158] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1263.882890][ T158] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1263.984478][ T158] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1264.009816][ T4930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13798'. [ 1264.115566][T30827] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1264.411778][ T158] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1264.521878][T30827] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1264.631702][T30827] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1264.743204][T30827] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1264.849380][ T4967] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 1264.849411][ T4967] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 1264.849873][ T4967] tipc: Resetting bearer [ 1264.875907][T30823] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1264.878587][ T4967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13806'. [ 1264.878615][ T4967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13806'. [ 1264.878631][ T4967] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13806'. [ 1264.989903][ T4964] netlink: 'syz.1.13808': attribute type 1 has an invalid length. [ 1265.186892][ T4977] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13808'. [ 1265.227617][ T4964] veth21: entered promiscuous mode [ 1265.252805][ T4964] bond13: (slave veth21): Enslaving as a backup interface with a down link [ 1265.280136][ T4982] batman_adv: batadv0: Adding interface: syzkaller0 [ 1265.280158][ T4982] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.294509][ T4982] batman_adv: batadv0: Interface activated: syzkaller0 [ 1265.449107][ T4993] tipc: Resetting bearer [ 1265.471492][ T4986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13814'. [ 1265.825597][ T5007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13820'. [ 1266.600080][ T5023] netlink: 'syz.1.13825': attribute type 1 has an invalid length. [ 1266.823206][ T5025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13825'. [ 1266.831021][ T5023] veth23: entered promiscuous mode [ 1266.868132][ T5023] bond14: (slave veth23): Enslaving as a backup interface with a down link [ 1268.466147][ T5074] netlink: 'syz.2.13840': attribute type 1 has an invalid length. [ 1268.641168][ T5079] netlink: 'syz.1.13843': attribute type 83 has an invalid length. [ 1268.679913][ T5076] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1268.705019][ T5081] __nla_validate_parse: 2 callbacks suppressed [ 1268.705042][ T5081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13840'. [ 1268.710483][ T5083] macvlan2: entered promiscuous mode [ 1268.710507][ T5083] macvlan2: entered allmulticast mode [ 1268.710966][ T5083] bond12: entered allmulticast mode [ 1268.711007][ T5083] bond12: entered promiscuous mode [ 1268.756792][ T5083] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1268.757989][ T5083] team0: Device macvlan2 is of different type [ 1268.777294][ T5083] bond12: left allmulticast mode [ 1268.777353][ T5083] bond12: left promiscuous mode [ 1269.043668][ T5074] veth13: entered promiscuous mode [ 1269.089806][ T5074] bond9: (slave veth13): Enslaving as a backup interface with a down link [ 1269.096444][T24570] net_ratelimit: 22 callbacks suppressed [ 1269.096466][T24570] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1269.201967][ T4093] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1269.240997][ T5103] netlink: 'syz.1.13849': attribute type 1 has an invalid length. [ 1269.322213][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13848'. [ 1269.322242][ T5101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13848'. [ 1269.422358][T30823] bond9: (slave ip6gretap1): failed to get link speed/duplex [ 1269.759092][ T5104] bond16: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1269.776869][ T5104] bond16 (unregistering): Released all slaves [ 1269.954069][ T5105] bond16: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1270.090657][ T5105] bond16 (unregistering): Released all slaves [ 1270.265843][ T5107] bridge12: entered promiscuous mode [ 1270.375030][ C1] [ 1270.377521][ C1] ============================================ [ 1270.383966][ C1] WARNING: possible recursive locking detected [ 1270.390458][ C1] syzkaller #0 Not tainted [ 1270.394880][ C1] -------------------------------------------- [ 1270.401181][ C1] syz.2.13851/5109 is trying to acquire lock: [ 1270.407322][ C1] ffff88807a8e5070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1270.416651][ C1] [ 1270.416651][ C1] but task is already holding lock: [ 1270.424117][ C1] ffff88807a8e5070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_prp_supervision_frame+0x1fb/0x8b0 [ 1270.434805][ C1] [ 1270.434805][ C1] other info that might help us debug this: [ 1270.442884][ C1] Possible unsafe locking scenario: [ 1270.442884][ C1] [ 1270.450663][ C1] CPU0 [ 1270.453955][ C1] ---- [ 1270.457332][ C1] lock(&hsr->seqnr_lock); [ 1270.462048][ C1] lock(&hsr->seqnr_lock); [ 1270.466579][ C1] [ 1270.466579][ C1] *** DEADLOCK *** [ 1270.466579][ C1] [ 1270.474961][ C1] May be due to missing lock nesting notation [ 1270.474961][ C1] [ 1270.483325][ C1] locks held by syz.2.13851/5109: 11, last CPU#1: [ 1270.489896][ C1] #0: ffffc90000a18cc0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd5/0x5f0 [ 1270.500177][ C1] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 1270.509508][ C1] #2: ffff88807a8e5070 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_prp_supervision_frame+0x1fb/0x8b0 [ 1270.520652][ C1] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb9/0x2b70 [ 1270.530322][ C1] #4: ffffffff8ed5c900 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920 [ 1270.540505][ C1] #5: ffff88807f54c228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#4){+...}-{3:3}, at: __dev_queue_xmit+0x114e/0x3920 [ 1270.553438][ C1] #6: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 1270.562716][ C1] #7: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x203/0x1650 [ 1270.572479][ C1] #8: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x11e/0x540 [ 1270.581735][ C1] #9: ffffffff8ed5c900 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x3920 [ 1270.591988][ C1] #10: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1270.601498][ C1] [ 1270.601498][ C1] stack backtrace: [ 1270.607392][ C1] CPU: 1 UID: 0 PID: 5109 Comm: syz.2.13851 Not tainted syzkaller #0 PREEMPT(full) [ 1270.616852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1270.626942][ C1] Call Trace: [ 1270.630332][ C1] [ 1270.633207][ C1] dump_stack_lvl+0xe8/0x150 [ 1270.637905][ C1] print_deadlock_bug+0x27a/0x290 [ 1270.643221][ C1] __lock_acquire+0x25db/0x2de0 [ 1270.648363][ C1] ? ndisc_send_skb+0xcb2/0x1650 [ 1270.654219][ C1] ? neigh_resolve_output+0x1a1/0x720 [ 1270.659681][ C1] ? ip6_output+0x337/0x540 [ 1270.664196][ C1] ? ip6tunnel_xmit+0x200/0x620 [ 1270.669147][ C1] ? ip6_tnl_xmit+0x2034/0x27e0 [ 1270.674128][ C1] ? __gre6_xmit+0xa5c/0xd80 [ 1270.678746][ C1] ? ip6gre_tunnel_xmit+0xa0d/0xf70 [ 1270.684046][ C1] ? dev_hard_start_xmit+0x2cd/0x830 [ 1270.689584][ C1] ? sch_direct_xmit+0x257/0x4c0 [ 1270.694574][ C1] ? __dev_queue_xmit+0x179a/0x3920 [ 1270.699777][ C1] ? hsr_forward_skb+0x1701/0x2b70 [ 1270.705354][ C1] ? send_prp_supervision_frame+0x49a/0x8b0 [ 1270.711428][ C1] ? hsr_announce+0x1db/0x370 [ 1270.716203][ C1] ? call_timer_fn+0x18d/0x5f0 [ 1270.720974][ C1] ? __run_timer_base+0x652/0x8b0 [ 1270.726113][ C1] ? run_timer_softirq+0xb7/0x170 [ 1270.731167][ C1] ? handle_softirqs+0x226/0x860 [ 1270.736145][ C1] lock_acquire+0x115/0x350 [ 1270.740919][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1270.745632][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1270.750417][ C1] _raw_spin_lock_bh+0x36/0x50 [ 1270.755481][ C1] ? hsr_dev_xmit+0x237/0x360 [ 1270.760373][ C1] hsr_dev_xmit+0x237/0x360 [ 1270.765080][ C1] ? hsr_dev_xmit+0x2d/0x360 [ 1270.769884][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 1270.775486][ C1] __dev_queue_xmit+0x14d1/0x3920 [ 1270.780561][ C1] ? __dev_queue_xmit+0x29b/0x3920 [ 1270.785820][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1270.791459][ C1] ? neigh_connected_output+0x1e7/0x470 [ 1270.797087][ C1] ? eth_header+0x11b/0x200 [ 1270.801618][ C1] ? __asan_memcpy+0x40/0x70 [ 1270.806368][ C1] ? ip6_output+0x11e/0x540 [ 1270.810973][ C1] ip6_output+0x337/0x540 [ 1270.815487][ C1] ? __pfx_ip6_output+0x10/0x10 [ 1270.820358][ C1] ndisc_send_skb+0xcb2/0x1650 [ 1270.825134][ C1] ? ndisc_send_skb+0x203/0x1650 [ 1270.830167][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 1270.835553][ C1] ? __pfx_dst_output+0x10/0x10 [ 1270.840500][ C1] ? ipv6_get_lladdr+0x2b/0x3f0 [ 1270.845380][ C1] ? ipv6_get_lladdr+0x2b/0x3f0 [ 1270.850329][ C1] ? ipv6_get_lladdr+0x2b/0x3f0 [ 1270.856222][ C1] ? ipv6_get_lladdr+0x378/0x3f0 [ 1270.861338][ C1] ? ipv6_get_lladdr+0x2b/0x3f0 [ 1270.866449][ C1] ndisc_solicit+0x374/0x670 [ 1270.871049][ C1] ? __pfx_ndisc_solicit+0x10/0x10 [ 1270.876277][ C1] ? __neigh_event_send+0xea4/0x1510 [ 1270.881927][ C1] ? __pfx_ndisc_solicit+0x10/0x10 [ 1270.887052][ C1] __neigh_event_send+0xf0c/0x1510 [ 1270.892183][ C1] neigh_resolve_output+0x1a1/0x720 [ 1270.897405][ C1] ? ip6_finish_output2+0xc4e/0x1460 [ 1270.902819][ C1] ? ip6_finish_output+0x268/0x480 [ 1270.907937][ C1] ? ip6_output+0x11e/0x540 [ 1270.912535][ C1] ip6_output+0x337/0x540 [ 1270.916875][ C1] ip6tunnel_xmit+0x200/0x620 [ 1270.921693][ C1] ip6_tnl_xmit+0x2034/0x27e0 [ 1270.926496][ C1] ? __pfx_ip6_tnl_xmit+0x10/0x10 [ 1270.931638][ C1] __gre6_xmit+0xa5c/0xd80 [ 1270.936064][ C1] ? __pfx___gre6_xmit+0x10/0x10 [ 1270.941106][ C1] ? iptunnel_handle_offloads+0x2fd/0x630 [ 1270.947192][ C1] ip6gre_tunnel_xmit+0xa0d/0xf70 [ 1270.952242][ C1] ? __pfx_ip6gre_tunnel_xmit+0x10/0x10 [ 1270.957893][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 1270.963206][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 1270.968423][ C1] ? skb_network_protocol+0x23d/0x400 [ 1270.973911][ C1] ? netif_skb_features+0x8ba/0xf20 [ 1270.979123][ C1] ? arch_stack_walk+0xfb/0x150 [ 1270.984204][ C1] ? __pfx_netif_skb_features+0x10/0x10 [ 1270.989952][ C1] ? __lock_acquire+0x747/0x2de0 [ 1270.995076][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 1271.000216][ C1] sch_direct_xmit+0x257/0x4c0 [ 1271.004994][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 1271.010923][ C1] __dev_queue_xmit+0x179a/0x3920 [ 1271.016197][ C1] ? __dev_queue_xmit+0x29b/0x3920 [ 1271.021402][ C1] ? rcu_is_watching+0x16/0xb0 [ 1271.026788][ C1] ? trace_kmalloc+0x2a/0xf0 [ 1271.031477][ C1] ? skb_copy_bits+0x100/0x8e0 [ 1271.036502][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1271.041883][ C1] ? __copy_skb_header+0xa3/0x4a0 [ 1271.046932][ C1] ? __asan_memcpy+0x40/0x70 [ 1271.051698][ C1] ? skb_copy_expand+0x3af/0xbf0 [ 1271.056656][ C1] ? __asan_memcpy+0x40/0x70 [ 1271.061364][ C1] ? skb_put+0x112/0x210 [ 1271.065787][ C1] ? hsr_addr_subst_dest+0x30a/0xaa0 [ 1271.071181][ C1] hsr_forward_skb+0x1701/0x2b70 [ 1271.076387][ C1] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 1271.082549][ C1] ? hsr_forward_skb+0xb9/0x2b70 [ 1271.087517][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1271.092813][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1271.098349][ C1] ? __skb_pad+0x3f8/0x600 [ 1271.102881][ C1] send_prp_supervision_frame+0x49a/0x8b0 [ 1271.108717][ C1] ? __pfx_send_prp_supervision_frame+0x10/0x10 [ 1271.115273][ C1] hsr_announce+0x1db/0x370 [ 1271.119876][ C1] ? hsr_announce+0x89/0x370 [ 1271.124570][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1271.129707][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1271.135213][ C1] call_timer_fn+0x18d/0x5f0 [ 1271.139940][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1271.145061][ C1] ? call_timer_fn+0xd5/0x5f0 [ 1271.150020][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 1271.155366][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1271.160960][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 1271.166552][ C1] __run_timer_base+0x652/0x8b0 [ 1271.171701][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 1271.177261][ C1] ? ktime_get+0x1f5/0x220 [ 1271.181925][ C1] ? lapic_next_event+0x11/0x20 [ 1271.186876][ C1] run_timer_softirq+0xb7/0x170 [ 1271.191738][ C1] handle_softirqs+0x226/0x860 [ 1271.196606][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1271.201558][ C1] __irq_exit_rcu+0xcb/0x220 [ 1271.206157][ C1] irq_exit_rcu+0x9/0x30 [ 1271.210407][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1271.216539][ C1] [ 1271.219734][ C1] [ 1271.222670][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1271.228695][ C1] RIP: 0010:finish_task_switch+0x413/0xc60 [ 1271.234639][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 c7 8f 53 0a e8 b2 2d 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 1271.254488][ C1] RSP: 0018:ffffc90004bef980 EFLAGS: 00000202 [ 1271.260708][ C1] RAX: 0000000000001c91 RBX: ffff8880b873c8e0 RCX: 8000000000000001 [ 1271.268711][ C1] RDX: 0000000000000000 RSI: ffffffff8e41642a RDI: ffffffff8c6dad80 [ 1271.277046][ C1] RBP: ffffc90004bef9d0 R08: ffffffff907a647f R09: 1ffffffff20f4c8f [ 1271.285042][ C1] R10: dffffc0000000000 R11: fffffbfff20f4c90 R12: ffff888028a73e80 [ 1271.293193][ C1] R13: ffff8880b873c8a8 R14: dffffc0000000000 R15: 1ffff110170e791c [ 1271.301278][ C1] __schedule+0x17e3/0x58f0 [ 1271.305802][ C1] ? __lock_acquire+0x747/0x2de0 [ 1271.310850][ C1] ? ktime_get+0x45/0x220 [ 1271.315191][ C1] ? ktime_get+0x1f5/0x220 [ 1271.319689][ C1] ? __pfx___schedule+0x10/0x10 [ 1271.324549][ C1] ? lock_acquire+0x115/0x350 [ 1271.329321][ C1] ? schedule+0x90/0x2b0 [ 1271.333570][ C1] schedule+0x164/0x2b0 [ 1271.337734][ C1] do_nanosleep+0x21e/0x6a0 [ 1271.342423][ C1] ? do_nanosleep+0x7e/0x6a0 [ 1271.347025][ C1] ? __pfx_do_nanosleep+0x10/0x10 [ 1271.352083][ C1] ? __asan_memset+0x22/0x50 [ 1271.356864][ C1] ? __hrtimer_setup+0x1b7/0x260 [ 1271.361810][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1271.367298][ C1] hrtimer_nanosleep+0x18f/0x3a0 [ 1271.372339][ C1] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1271.377992][ C1] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1271.383667][ C1] __se_sys_clock_nanosleep+0x35b/0x3b0 [ 1271.390066][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1271.396850][ C1] do_syscall_64+0x166/0x520 [ 1271.401651][ C1] ? trace_irq_disable+0x3b/0x140 [ 1271.406689][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.412783][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1271.417466][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.423449][ C1] RIP: 0033:0x7fa59a55e98e [ 1271.427868][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1271.447743][ C1] RSP: 002b:00007ffefc36c778 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1271.456536][ C1] RAX: ffffffffffffffda RBX: 0000555565315500 RCX: 00007fa59a55e98e [ 1271.464623][ C1] RDX: 00007ffefc36c7d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1271.472787][ C1] RBP: 00007fa59a827da0 R08: 0000000000000000 R09: 0000000000000000 [ 1271.480849][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000136282 [ 1271.489099][ C1] R13: 00007fa59a82636c R14: 00000000001360b4 R15: 00007fa59a826360 [ 1271.497346][ C1]