last executing test programs: 5m50.483797778s ago: executing program 4 (id=10696): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0xff}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x7f}, 0x1) sendto$inet6(r0, &(0x7f0000000080)="b1", 0x1, 0x400c054, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 5m50.319860315s ago: executing program 4 (id=10699): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf253400000008000300", @ANYRES32=r1, @ANYBLOB="120034000600fd0000b0676dcab0ba2e1f00000005002001370000001400fe00078c89fc4a0c33e2a826c7270aea127f1400550012d4d201f86b8c93845c"], 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) 5m50.088252116s ago: executing program 4 (id=10705): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000000d40)=""/210, 0xd2}, {&(0x7f0000002900)=""/239, 0xef}], 0x2}, 0x8910}], 0x1, 0x0, 0x0) 5m49.156057259s ago: executing program 4 (id=10724): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='U', 0x1}, {&(0x7f0000000180)="f3", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0xa6}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000800)='s', 0x1}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) 5m49.118756983s ago: executing program 4 (id=10726): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000340)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0768021fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61f48eccfcc29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a6e453a8a28cd5c4b733fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f33c0bb3c24fa67c327cde47a0e416573cfdcfb44ed9dd4ce41af4de9c471c49f12f090934c3b32f2f4777c65b15748267223cbde856fa5a33f12cb1ea51da9ce96881d1aa6d096ed6b2319344d3c2781803a2119d9efd47b1abba3c1e6c563c1ec692da80ef66b19495b8e801d07b133f1b552ee772732a90e765b92d67f7a0cc8f15a4c6143f7cd3bda78fc", 0x24a}, {&(0x7f00000006c0)="5be08105437c98b91b9455046f57b5fc090014bde2bb01000000000000001a7838d859207067c30aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff041e657c8df70e1607d589863d5f323f6d5c", 0x58}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) 5m48.667836421s ago: executing program 4 (id=10732): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}, 0x30845aa81b581fea) 5m48.268381599s ago: executing program 32 (id=10732): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) r1 = accept(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x14, 0x0, 0x300, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8010) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000001c0)=""/15, 0xf}, {&(0x7f0000000300)=""/92, 0x5c}], 0x2}, 0x30845aa81b581fea) 47.633796438s ago: executing program 2 (id=14811): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x2, 0xf0, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000004c0)="b003846833bdd790c2", 0x9}}, 0xee) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x0, {0x0, 0xff, 0x6}, 0xfd}, 0x18) sendmsg$sock(r4, &(0x7f0000000200)={&(0x7f00000005c0)=@can, 0x80, &(0x7f0000000440)=[{&(0x7f0000000640)="d70843d0d3a7d851fa", 0x9}], 0x1}, 0x4000040) 47.160240057s ago: executing program 2 (id=14815): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x80000000, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 45.34852681s ago: executing program 2 (id=14820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x400) listen(r2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xa7ba) listen(r1, 0xc78) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000", 0x42}], 0x1) 45.132055352s ago: executing program 2 (id=14824): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 43.968703527s ago: executing program 2 (id=14830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7ff, 0x100000000, 0x6eb, 0x80000000, 0x7, 0x2c0b}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 43.469584851s ago: executing program 2 (id=14836): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x2, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x470bd25, 0x21dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0xffff, 0xb}, {0xc}}}, 0x24}}, 0x40) 28.394651422s ago: executing program 33 (id=14836): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="050000"], 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x2, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x470bd25, 0x21dfdbfb, {0x0, 0x0, 0x0, r4, {0x1, 0x6}, {0xffff, 0xb}, {0xc}}}, 0x24}}, 0x40) 3.656494369s ago: executing program 6 (id=15363): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f00000001c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0xf}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x12}], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000100)={0x5, 0x9, 0x1dd, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0xd25}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000500012800e0001006970366772657461700000003c000280140007002001000000000000000000000000000014000600fe80000000000000000000000000001508000100", @ANYRES32=r2, @ANYBLOB='\b\x00\r\x00'], 0x70}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}}, 0x14) 3.479502498s ago: executing program 6 (id=15366): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) recvmmsg(r1, &(0x7f0000004180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/120, 0x78}], 0x1}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x100, 0x0) 2.927563189s ago: executing program 3 (id=15372): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x5}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x7}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x2, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000002c0)="06", 0x1}], 0x1}}], 0x1, 0x3404c8d4) readv(r0, &(0x7f0000001500)=[{&(0x7f0000001440)=""/187, 0xbb}], 0x1) 2.50518228s ago: executing program 6 (id=15379): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r8 = socket(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r8, 0x89e0, 0x0) 2.450623185s ago: executing program 0 (id=15381): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x100, 0x0, 0xf401, 0x0, 0x54}, 0x9c) 2.37249447s ago: executing program 6 (id=15384): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='vegas', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @timestamp, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000ea) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1.949758253s ago: executing program 3 (id=15388): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.763521465s ago: executing program 1 (id=15390): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80004, {0x0, 0x0, 0x0, r7, {}, {0x9, 0xb}, {0x9, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.690393069s ago: executing program 3 (id=15391): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b38ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r4 = socket(0x11, 0x3, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r4, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000100001040000000000", @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1.600266216s ago: executing program 5 (id=15392): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f190bf5274ad7ecef8d8d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac6db5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffc90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07cf66b696d83af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2", 0x3e3}, {&(0x7f00000003c0)="847839fc378469d5765bd74a8532b82037b02c9e", 0x14}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) 1.594090169s ago: executing program 1 (id=15393): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x1, {0x1, 0x0, 0x6}, 0x1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000001580)={0x1d, r3, 0x3, {}, 0x2}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'pim6reg\x00'}) close(0x4) 1.454490994s ago: executing program 5 (id=15394): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r6) r8 = socket(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r8, 0x89e0, 0x0) 1.367788721s ago: executing program 0 (id=15395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000200)=r1) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) 1.16299403s ago: executing program 5 (id=15396): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000001200)={0x60000018}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000100)={0xa000000d}) close(0x4) 1.036608921s ago: executing program 6 (id=15397): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="34000000100039042cbd70000000000000000000", @ANYRES32=r2, @ANYBLOB="059800000020000014001280080001006772650008000280040012"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x48}}, 0x0) 936.250195ms ago: executing program 1 (id=15398): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000040000000400000009"], 0x50) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x49}}}}}, 0x30}}, 0x240040c0) close(0x4) 935.173231ms ago: executing program 0 (id=15399): syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x20028000) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) 824.239581ms ago: executing program 5 (id=15400): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r0 = socket(0x8, 0x0, 0x8000) ioctl$sock_netrom_SIOCADDRT(r0, 0x6180, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x120}, 0x1, 0x0, 0x0, 0xc0d0}, 0x20044004) 822.041792ms ago: executing program 6 (id=15401): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, r0, 0x0) r1 = socket(0x14, 0x2, 0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, 0x0, &(0x7f0000000140)) 739.514095ms ago: executing program 0 (id=15402): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003000)="e1", 0x1}], 0x1}}], 0x2, 0x4000000) 598.133133ms ago: executing program 3 (id=15403): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80004, {0x0, 0x0, 0x0, r7, {}, {0x9, 0xb}, {0x9, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x9}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x9f8b8a2ee701f9b2}, 0x24008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 533.464751ms ago: executing program 1 (id=15404): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x8}, &(0x7f0000000280)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000000000008400000002000000ff7f0802ff00000008000000", @ANYRES32=r2], 0x20, 0x4c004}], 0x1, 0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1, 0x2}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={r2, 0x5}, &(0x7f0000000200)=0xc) 372.247918ms ago: executing program 3 (id=15405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) 362.404925ms ago: executing program 1 (id=15406): syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xc040ff0b, 0x110c2300fe) 246.712335ms ago: executing program 5 (id=15407): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0xc}, {0xb, 0xffde}}}, 0x24}}, 0x40051) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x4, 0xffe0}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8847}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 245.835439ms ago: executing program 1 (id=15408): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xadc0}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 200.906095ms ago: executing program 0 (id=15409): write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc0380025d2c00fe8000000000000000000000000000aaff020000000000000000000000000001020090780000d93f640000000f081120ff020000000000000000000000000001fe8000000000000000000000000000125d0200000000000007"], 0x293) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000006c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "121008", 0x8, 0x3a, 0x0, @remote, @local, {[], @echo_request}}}}}, 0x0) 58.76631ms ago: executing program 5 (id=15410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008080) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 337.555µs ago: executing program 3 (id=15411): r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0xc0010102, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 0s ago: executing program 0 (id=15412): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a80)={0x48, r1, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191f}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) kernel console output (not intermixed with test programs): +0xfa/0x3b0 [ 706.510888][ T1907] ? lockdep_hardirqs_on+0x9c/0x150 [ 706.510913][ T1907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.510935][ T1907] ? clear_bhb_loop+0x60/0xb0 [ 706.510964][ T1907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.510986][ T1907] RIP: 0033:0x7f926698eec9 [ 706.511007][ T1907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 706.511027][ T1907] RSP: 002b:00007f92677a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 706.511050][ T1907] RAX: ffffffffffffffda RBX: 00007f9266be5fa0 RCX: 00007f926698eec9 [ 706.511067][ T1907] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000005 [ 706.511080][ T1907] RBP: 00007f9266a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 706.511093][ T1907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.511105][ T1907] R13: 00007f9266be6038 R14: 00007f9266be5fa0 R15: 00007ffeaf84bea8 [ 706.511139][ T1907] [ 706.835335][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 707.059405][ T1921] netlink: 277 bytes leftover after parsing attributes in process `syz.1.12746'. [ 707.175591][ T1926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12747'. [ 707.180218][ T1924] batadv_slave_0: entered promiscuous mode [ 707.191927][ T1922] vxcan1 speed is unknown, defaulting to 1000 [ 707.244308][ T1923] batadv_slave_0: left promiscuous mode [ 707.635050][ T1948] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12753'. [ 707.900356][ T1922] C speed is unknown, defaulting to 1000 [ 708.363384][ T1972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12762'. [ 708.417624][ T1922] hsr0 speed is unknown, defaulting to 1000 [ 708.521358][ T1978] nbd: must specify a device to reconfigure [ 708.728015][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 708.816067][ T1988] A link change request failed with some changes committed already. Interface veth2 may have been left with an inconsistent configuration, please check. [ 709.017983][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 709.076304][ T1998] tipc: Enabled bearer , priority 0 [ 709.280466][ T1998] syzkaller0: entered promiscuous mode [ 709.302486][ T1998] syzkaller0: entered allmulticast mode [ 709.341863][ T1998] tipc: Resetting bearer [ 709.542380][ T1014] tipc: Resetting bearer [ 709.580770][ T1996] tipc: Resetting bearer [ 709.716432][ T2014] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12779'. [ 711.098104][ T5873] Bluetooth: hci3: command 0x0405 tx timeout [ 711.609639][ T1996] tipc: Disabling bearer [ 711.707817][ T2026] tipc: Enabling of bearer rejected, failed to enable media [ 714.603179][ T2098] tipc: Started in network mode [ 714.627962][ T2098] tipc: Node identity bad5af59b8ff, cluster identity 4711 [ 714.635344][ T2098] tipc: Enabled bearer , priority 0 [ 714.815191][ T2098] syzkaller0: entered promiscuous mode [ 714.838416][ T2098] syzkaller0: entered allmulticast mode [ 714.853123][ T2098] tipc: Resetting bearer [ 715.004557][ T2097] tipc: Resetting bearer [ 715.729535][ T10] tipc: Node number set to 36351833 [ 717.422860][ T2097] tipc: Disabling bearer [ 717.442105][ T2146] mpoa:mpoad_close: () going down [ 717.753948][ T2178] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 717.816338][ T2182] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12834'. [ 717.917771][ T2187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12837'. [ 718.179418][ T2195] tipc: Enabled bearer , priority 0 [ 718.198408][ T2195] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 718.205903][ T2195] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 718.232834][ T2195] tipc: Resetting bearer [ 720.190475][ T2212] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12846'. [ 720.216001][ T2219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12849'. [ 721.170650][ T2266] syzkaller1: entered promiscuous mode [ 721.176210][ T2266] syzkaller1: entered allmulticast mode [ 721.253419][ T2271] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12865'. [ 721.613706][ T2289] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12873'. [ 721.756123][ T2289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12873'. [ 722.172673][ T2311] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 722.747477][ T2323] syzkaller0: create flow: hash 3221627756 index 1 [ 723.105216][ T13] syzkaller0: tun_net_xmit 76 [ 723.121210][ T13] syzkaller0: tun_net_xmit 48 [ 723.128525][T27858] syzkaller0: tun_net_xmit 76 [ 723.138472][ T2317] syzkaller0: delete flow: hash 3221627756 index 1 [ 725.617310][ T2382] netlink: 'syz.5.12900': attribute type 4 has an invalid length. [ 726.535101][ T2425] syz_tun: entered allmulticast mode [ 726.550720][ T2425] pimreg: entered allmulticast mode [ 726.559030][ T2424] syz_tun: left allmulticast mode [ 726.783784][ T2434] tipc: Enabled bearer , priority 0 [ 726.956666][ T2434] syzkaller0: entered promiscuous mode [ 726.966209][ T2434] syzkaller0: entered allmulticast mode [ 726.975437][ T2434] tipc: Resetting bearer [ 726.985027][ T2443] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12922'. [ 727.058443][ T2433] tipc: Resetting bearer [ 727.129736][ T2453] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12926'. [ 727.305668][ T2468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12926'. [ 729.011617][ T2433] tipc: Disabling bearer [ 729.100373][ T2473] bridge: RTM_NEWNEIGH with invalid ether address [ 730.571967][ T2555] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12954'. [ 730.632751][ T2561] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12955'. [ 731.444482][ T2593] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12965'. [ 731.900995][ T2613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12968'. [ 731.933807][ T2613] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12968'. [ 732.535779][ T2624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12972'. [ 733.066237][ T2652] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12983'. [ 733.145412][ T2657] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12984'. [ 733.382807][ T2673] syzkaller0: entered promiscuous mode [ 733.389945][ T2673] syzkaller0: entered allmulticast mode [ 734.384388][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054838c00: rx timeout, send abort [ 734.392864][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059e87c00: rx timeout, send abort [ 734.892742][ C1] vcan0: j1939_tp_rxtimer: 0xffff888054838c00: abort rx timeout. Force session deactivation [ 734.903305][ C1] vcan0: j1939_tp_rxtimer: 0xffff888059e87c00: abort rx timeout. Force session deactivation [ 735.655878][ T2709] tipc: Enabling of bearer rejected, already enabled [ 735.848997][ T2729] syz_tun: entered allmulticast mode [ 735.888621][ T2728] syz_tun: left allmulticast mode [ 736.381821][ T2763] netlink: 'syz.0.13014': attribute type 10 has an invalid length. [ 736.396633][ T2763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.476593][ T2763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.692947][ T2775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13016'. [ 736.734751][ T2774] pim6reg1: entered promiscuous mode [ 736.742038][ T2774] pim6reg1: entered allmulticast mode [ 737.077299][ T2791] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13022'. [ 737.447790][ T2807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13029'. [ 737.598839][ T2825] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 737.670835][T27851] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 737.679074][ T2825] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 737.778558][ T2829] netlink: 'syz.0.13035': attribute type 4 has an invalid length. [ 737.818799][ T2829] netlink: 'syz.0.13035': attribute type 4 has an invalid length. [ 737.821384][T27851] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 737.846980][ T2832] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 737.856565][ T2832] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 738.187361][ T2856] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13043'. [ 738.242261][ T2858] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13044'. [ 738.534011][ T2876] netlink: 'syz.2.13048': attribute type 1 has an invalid length. [ 738.622347][ T2876] 8021q: adding VLAN 0 to HW filter on device bond11 [ 738.717319][ T2884] bond11: (slave veth13): Enslaving as an active interface with a down link [ 738.794110][ T2889] macvtap0: left allmulticast mode [ 738.826994][ T2889] bond1: left allmulticast mode [ 738.836702][ T2889] xfrm1: left allmulticast mode [ 738.846020][ T2889] geneve2: left allmulticast mode [ 738.852546][ T2889] bond2: left allmulticast mode [ 738.924876][ T2889] bond3: left promiscuous mode [ 738.930229][ T2889] bridge4: left promiscuous mode [ 738.951143][ T2889] vlan4: left allmulticast mode [ 738.956813][ T2898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.029675][ T2898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.099024][ T2898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.210129][ T2876] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 739.276998][ T2884] bond11: (slave veth15): Enslaving as an active interface with a down link [ 739.286499][ T12] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.320765][ T12] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.322803][ T2910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13057'. [ 739.332606][ T12] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.420916][ T12] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 739.908462][ T60] syzkaller0: tun_net_xmit 76 [ 739.938389][ T60] syzkaller0: tun_net_xmit 48 [ 739.946636][ T5926] syzkaller0: tun_net_xmit 76 [ 739.986050][ T2933] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 739.998615][ T5926] syzkaller0: tun_net_xmit 76 [ 740.001687][ T2933] syzkaller0: Linktype set failed because interface is up [ 740.374272][T18158] IPVS: ip_vs_send_async error -101 [ 742.109799][ T2965] tipc: Enabling of bearer rejected, already enabled [ 742.379852][ T2997] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13078'. [ 742.790612][ T3013] syzkaller0: entered allmulticast mode [ 743.299099][ T3036] vxcan1 speed is unknown, defaulting to 1000 [ 743.800794][ T3022] lec:lec_atm_close: lec0: Shut down! [ 743.936325][ T3061] netlink: 'syz.5.13095': attribute type 1 has an invalid length. [ 743.955378][ T3060] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13096'. [ 744.083511][ T3065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13096'. [ 744.097228][ T3061] 8021q: adding VLAN 0 to HW filter on device bond6 [ 744.333184][ T3063] veth17: entered promiscuous mode [ 744.345127][ T3063] bond6: (slave veth17): Enslaving as an active interface with a down link [ 744.359284][ T3036] C speed is unknown, defaulting to 1000 [ 744.374025][ T3070] bond6: entered allmulticast mode [ 744.527754][T18158] IPVS: ip_vs_send_async error -101 [ 744.753384][ T3089] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 744.804742][ T3089] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 744.856220][ T3089] tipc: Resetting bearer [ 744.906275][ T3092] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 745.095469][ T3095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13103'. [ 745.106377][ T3095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13103'. [ 745.317623][ T3036] hsr0 speed is unknown, defaulting to 1000 [ 746.312918][ T3142] netlink: 'syz.3.13112': attribute type 1 has an invalid length. [ 746.480332][ T3142] 8021q: adding VLAN 0 to HW filter on device bond5 [ 746.562609][ T3149] netlink: 'syz.5.13114': attribute type 1 has an invalid length. [ 746.577121][ T3145] veth5: entered promiscuous mode [ 746.602581][ T3145] bond5: (slave veth5): Enslaving as an active interface with a down link [ 746.720165][ T3146] bond5: entered allmulticast mode [ 746.856555][ T3154] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 746.871405][ T3154] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 746.882042][ T3154] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 747.462477][ T3169] netlink: 'syz.0.13121': attribute type 39 has an invalid length. [ 747.493036][ T3166] vxcan1 speed is unknown, defaulting to 1000 [ 747.698847][ T3175] netlink: 'syz.2.13123': attribute type 1 has an invalid length. [ 747.864398][ T3175] 8021q: adding VLAN 0 to HW filter on device bond12 [ 747.906750][ T3177] bond12: (slave gretap1): making interface the new active one [ 747.948671][ T3177] bond12: (slave gretap1): Enslaving as an active interface with an up link [ 748.184411][ T3166] C speed is unknown, defaulting to 1000 [ 748.224192][ T3182] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 748.667328][ T3166] hsr0 speed is unknown, defaulting to 1000 [ 748.670060][ T3197] bond0: Caught tx_queue_len zero misconfig [ 748.951721][ T3216] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13132'. [ 748.964700][ T3216] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13132'. [ 749.231630][ T3225] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 749.267221][ T3225] bridge0: port 3(dummy0) entered disabled state [ 749.275543][ T3225] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.285362][ T3225] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.480672][ T3230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13136'. [ 750.242735][ T3247] netlink: 'syz.1.13146': attribute type 1 has an invalid length. [ 750.336779][ T3253] 8021q: adding VLAN 0 to HW filter on device bond11 [ 750.346565][ T3253] bond10: (slave bond11): making interface the new active one [ 750.355607][ T3253] bond10: (slave bond11): Enslaving as an active interface with an up link [ 750.404778][ T3247] bond10: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 750.418133][ T3247] bond10: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 750.474483][ T3256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13148'. [ 750.708066][ T3261] tipc: Enabled bearer , priority 0 [ 750.728739][ T3261] syzkaller0: entered promiscuous mode [ 750.735432][ T3261] syzkaller0: entered allmulticast mode [ 750.843230][ T3274] tipc: Resetting bearer [ 750.893657][ T3259] tipc: Resetting bearer [ 750.945261][ T3259] tipc: Disabling bearer [ 751.067157][ T3280] vxcan1 speed is unknown, defaulting to 1000 [ 751.504846][ T3280] C speed is unknown, defaulting to 1000 [ 751.697272][ T3306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13163'. [ 751.877078][ T3316] netlink: 'syz.0.13166': attribute type 1 has an invalid length. [ 751.885554][ T3316] netlink: 208 bytes leftover after parsing attributes in process `syz.0.13166'. [ 751.919302][ T3319] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13168'. [ 752.103418][ T3325] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13169'. [ 752.131885][ T3322] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 752.189869][ T60] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 752.199377][ T3280] hsr0 speed is unknown, defaulting to 1000 [ 752.200543][ T60] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 752.226177][ T3328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13170'. [ 752.252539][ T60] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 752.261701][ T3328] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13170'. [ 752.418589][ T3334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13173'. [ 752.621909][ T1305] clip:clip_start_xmit: skb_dst(skb) == NULL [ 752.634311][ T1305] lec:lec_start_xmit: lec0:No lecd attached [ 753.030575][ T3347] netlink: 'syz.0.13177': attribute type 3 has an invalid length. [ 753.049556][ T3347] netlink: 'syz.0.13177': attribute type 3 has an invalid length. [ 753.544038][ T3353] ifb1: entered promiscuous mode [ 753.560540][ T3353] ifb0: entered promiscuous mode [ 753.573791][ T3353] debugfs: 'hsr0' already exists in 'hsr' [ 753.594798][ T3353] Cannot create hsr debugfs directory [ 754.026579][ T3379] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 754.079057][ T3383] netlink: 'syz.2.13191': attribute type 83 has an invalid length. [ 754.097861][ T3381] bridge9: entered allmulticast mode [ 754.366825][ T3394] syzkaller0: entered promiscuous mode [ 754.373008][ T3394] syzkaller0: entered allmulticast mode [ 754.821974][ T3417] __nla_validate_parse: 5 callbacks suppressed [ 754.821996][ T3417] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13200'. [ 755.186014][ T3401] veth0: entered promiscuous mode [ 755.209337][ T3400] veth0: left promiscuous mode [ 755.229487][ T3421] tipc: Enabling of bearer rejected, already enabled [ 755.279704][ T3421] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 755.297700][ T3421] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 755.306350][ T3421] tipc: Resetting bearer [ 755.324930][ T3421] tipc: Resetting bearer [ 755.368741][ T3424] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 756.720055][ T3450] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 756.741567][ T3450] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 756.776862][ T3450] tipc: Resetting bearer [ 756.805856][ T3454] tipc: Enabling of bearer rejected, already enabled [ 756.826090][ T1145] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.838551][ T1145] netdevsim netdevsim1 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 756.848522][ T1145] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 756.857088][ T1145] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 756.888571][ T1145] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.898839][ T1145] netdevsim netdevsim1 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 756.907338][ T1145] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 756.920296][ T1145] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 756.958755][ T1145] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 756.969040][ T1145] netdevsim netdevsim1 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 756.993403][ T1145] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 757.012482][ T1145] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 757.044274][ T1145] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 757.098222][ T1145] netdevsim netdevsim1 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 757.106643][ T1145] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 757.157913][ T1145] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 757.643403][ T3472] netlink: 'syz.2.13213': attribute type 1 has an invalid length. [ 757.694650][ T3477] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13215'. [ 757.724047][ T3479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13213'. [ 757.731013][ T3472] 8021q: adding VLAN 0 to HW filter on device bond13 [ 757.883117][ T3484] tipc: Enabling of bearer rejected, already enabled [ 757.896321][ T3484] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 757.908054][ T3484] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 757.920225][ T3484] tipc: Resetting bearer [ 757.966032][ T3491] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13220'. [ 758.103010][ T3498] sch_tbf: burst 88 is lower than device veth17 mtu (1514) ! [ 758.127675][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5490 ms [ 758.136339][ C0] lec:lec_tx_timeout: lec0 [ 758.352670][ T3509] smc: removing ib device syz0 [ 759.404787][ T3525] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13230'. [ 759.416828][ T3533] netlink: 156 bytes leftover after parsing attributes in process `syz.5.13233'. [ 759.747858][ T3541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13236'. [ 759.969909][ T3544] bridge14: port 1(veth19) entered blocking state [ 759.976577][ T3544] bridge14: port 1(veth19) entered disabled state [ 760.005575][ T3544] veth19: entered allmulticast mode [ 760.030522][ T3544] veth19: entered promiscuous mode [ 760.191509][ T3541] bridge14: port 2(veth21) entered blocking state [ 760.204525][ T3541] bridge14: port 2(veth21) entered disabled state [ 760.212275][ T3541] veth21: entered allmulticast mode [ 760.254442][ T3541] veth21: entered promiscuous mode [ 760.274337][ T3559] netlink: 'syz.3.13240': attribute type 9 has an invalid length. [ 760.526350][ T3566] netlink: 'syz.1.13243': attribute type 1 has an invalid length. [ 760.532793][ T3562] syzkaller0: entered promiscuous mode [ 760.552015][ T3562] syzkaller0: entered allmulticast mode [ 760.647738][ T3569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13243'. [ 763.546008][ T3599] bond10: (slave bond11): Releasing backup interface [ 763.556212][ T3599] veth19: left allmulticast mode [ 763.561596][ T3599] veth19: left promiscuous mode [ 763.566937][ T3599] bridge14: port 1(veth19) entered disabled state [ 763.594814][ T3599] veth21: left allmulticast mode [ 763.607638][ T3599] veth21: left promiscuous mode [ 763.612830][ T3599] bridge14: port 2(veth21) entered disabled state [ 763.643288][ T3600] team0: Mode changed to "broadcast" [ 763.880379][ T3622] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 764.625624][ T3643] netlink: 'syz.1.13262': attribute type 1 has an invalid length. [ 764.802405][ T3643] bond13 (unregistering): Released all slaves [ 764.860442][ T3655] netlink: 'syz.2.13266': attribute type 1 has an invalid length. [ 765.113731][ T3657] bond14: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 765.140997][ T3658] veth19: entered promiscuous mode [ 765.150303][ T3658] bond14: (slave veth19): Enslaving as a backup interface with a down link [ 765.163346][ T3660] netlink: 'syz.1.13267': attribute type 4 has an invalid length. [ 765.435002][ T3674] netlink: 'syz.1.13272': attribute type 1 has an invalid length. [ 765.586997][ T3674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13272'. [ 765.668722][ T3674] 8021q: adding VLAN 0 to HW filter on device bond13 [ 765.743640][ T3687] netlink: 'syz.5.13276': attribute type 1 has an invalid length. [ 765.777466][ T3687] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13276'. [ 766.138464][ T3699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13281'. [ 766.273227][ T3699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13281'. [ 766.767925][ T5870] Bluetooth: hci3: command 0x0405 tx timeout [ 766.970848][ T3710] ip6erspan0: entered promiscuous mode [ 767.097085][ T3717] tipc: Enabling of bearer rejected, already enabled [ 767.174957][ T3717] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13288'. [ 767.242054][ T3721] tipc: Enabled bearer , priority 0 [ 767.265119][ T3721] syzkaller0: entered promiscuous mode [ 767.277619][ T3721] syzkaller0: entered allmulticast mode [ 767.323813][ T3721] tipc: Resetting bearer [ 767.335966][ T3725] tipc: Enabled bearer , priority 0 [ 767.358497][ T3725] tipc: Resetting bearer [ 767.376627][ T3720] tipc: Resetting bearer [ 767.416615][ T3720] tipc: Disabling bearer [ 767.473242][ T3729] netlink: 'syz.3.13294': attribute type 10 has an invalid length. [ 767.510988][ T3729] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 767.691054][ T3742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13297'. [ 767.763744][ T3745] netlink: 'syz.3.13298': attribute type 1 has an invalid length. [ 767.817892][T27858] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 767.908232][T27858] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 768.057542][ T3747] bond7: (slave vxcan1): The slave device specified does not support setting the MAC address [ 768.072453][ T3747] bond7: (slave vxcan1): Error -95 calling set_mac_address [ 768.121740][ T3748] vlan2: entered allmulticast mode [ 768.127008][ T3748] bridge0: entered allmulticast mode [ 768.141972][ T3748] bridge0: entered promiscuous mode [ 768.152119][ T3748] bridge0: left promiscuous mode [ 768.163859][ T3748] bond7: (slave vlan2): making interface the new active one [ 768.171717][ T3748] bridge0: entered promiscuous mode [ 768.184744][ T3748] bond7: (slave vlan2): Enslaving as an active interface with an up link [ 768.193930][ T3753] tipc: Enabling of bearer rejected, already enabled [ 768.213056][ T3744] vxcan1 speed is unknown, defaulting to 1000 [ 768.439392][ T3761] tipc: Enabled bearer , priority 0 [ 768.479114][ T3761] syzkaller0: entered promiscuous mode [ 768.484662][ T3761] syzkaller0: entered allmulticast mode [ 768.546334][ T3761] tipc: Resetting bearer [ 768.572271][ T3758] tipc: Resetting bearer [ 768.618754][ T3758] tipc: Disabling bearer [ 768.814104][ T3744] hsr0 speed is unknown, defaulting to 1000 [ 769.085567][ T3787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13314'. [ 769.351947][ T3797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13318'. [ 769.431732][ T3802] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 770.406484][ T3799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 770.714058][ T3808] tipc: Enabled bearer , priority 0 [ 770.786724][ T3811] syzkaller0: entered promiscuous mode [ 770.826226][ T3811] syzkaller0: entered allmulticast mode [ 770.855468][ T3820] tipc: Resetting bearer [ 770.874071][ T36] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.903736][ T36] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.926595][ T36] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 770.951228][ T36] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.962313][ T3805] tipc: Resetting bearer [ 770.980730][ T3805] tipc: Disabling bearer [ 771.047898][ T3828] tipc: Enabled bearer , priority 0 [ 771.065798][ T36] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.107977][ T36] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.135094][ T3825] tipc: Resetting bearer [ 771.143493][ T3830] tipc: Enabling of bearer rejected, already enabled [ 771.155133][ T36] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.172545][ T36] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.194513][ T3832] syzkaller0: entered promiscuous mode [ 771.220007][ T3832] syzkaller0: entered allmulticast mode [ 771.252671][ T3823] tipc: Resetting bearer [ 771.259360][ T3845] netlink: 'syz.0.13327': attribute type 1 has an invalid length. [ 771.314466][ T3823] tipc: Disabling bearer [ 771.383203][ T3845] 8021q: adding VLAN 0 to HW filter on device bond4 [ 771.433197][ T3847] 8021q: adding VLAN 0 to HW filter on device bond4 [ 771.443226][ T3847] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 771.454168][ T3853] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13327'. [ 771.475255][ T3847] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 771.516543][ T3845] veth15: entered promiscuous mode [ 771.529644][ T3845] bond4: (slave veth15): Enslaving as an active interface with a down link [ 771.542105][ T3853] 8021q: adding VLAN 0 to HW filter on device bond4 [ 771.585261][ T3852] vxcan1 speed is unknown, defaulting to 1000 [ 771.617311][ T3860] syzkaller0: entered promiscuous mode [ 771.623371][ T3860] syzkaller0: entered allmulticast mode [ 771.766510][ T3863] syzkaller0: entered promiscuous mode [ 771.787493][ T3863] syzkaller0: entered allmulticast mode [ 771.842408][ T3852] hsr0 speed is unknown, defaulting to 1000 [ 772.163745][ T3868] tipc: Enabling of bearer rejected, already enabled [ 772.370366][ T3872] tipc: Enabled bearer , priority 0 [ 772.391604][ T3876] tipc: Enabling of bearer rejected, already enabled [ 772.431145][ T3872] syzkaller0: entered promiscuous mode [ 772.436702][ T3872] syzkaller0: entered allmulticast mode [ 772.518563][ T3872] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 772.570204][ T3883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13338'. [ 772.611706][ T3875] vxcan1 speed is unknown, defaulting to 1000 [ 772.622906][ T3872] tipc: Resetting bearer [ 772.642352][ T3885] tipc: Enabling of bearer rejected, already enabled [ 772.715599][ T3871] tipc: Resetting bearer [ 772.770141][ T3871] tipc: Disabling bearer [ 772.796445][ T3892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13341'. [ 772.824479][ T3895] tipc: Enabling of bearer rejected, already enabled [ 772.993057][ T3900] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 773.000439][ T3900] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 773.008905][ T3900] tipc: Resetting bearer [ 773.032507][ T3902] tipc: Enabling of bearer rejected, already enabled [ 773.061133][ T3900] tipc: Resetting bearer [ 773.145062][ T3875] hsr0 speed is unknown, defaulting to 1000 [ 773.188853][ T3877] vxcan1 speed is unknown, defaulting to 1000 [ 773.241929][ T3905] netlink: 'syz.5.13346': attribute type 39 has an invalid length. [ 773.608081][ T3923] tipc: Enabling of bearer rejected, already enabled [ 773.638262][ T3919] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 773.711111][ T3926] tipc: Enabled bearer , priority 0 [ 773.759128][ T3926] syzkaller0: entered promiscuous mode [ 773.764669][ T3926] syzkaller0: entered allmulticast mode [ 773.799616][ T3926] tipc: Resetting bearer [ 773.862675][ T3925] tipc: Resetting bearer [ 773.948231][ T3925] tipc: Disabling bearer [ 774.002095][ T3877] hsr0 speed is unknown, defaulting to 1000 [ 774.011925][ T3932] tipc: Enabling of bearer rejected, already enabled [ 774.140030][ T3932] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 774.177592][ T3932] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 774.185875][ T3932] tipc: Resetting bearer [ 774.274574][ T3932] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1806) ! [ 774.297440][ T3936] vxcan1 speed is unknown, defaulting to 1000 [ 774.303662][ T3945] tipc: Enabling of bearer rejected, already enabled [ 774.332958][ T3932] tipc: Resetting bearer [ 774.383824][ T3947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13359'. [ 774.514524][ T3951] netlink: 'syz.3.13361': attribute type 1 has an invalid length. [ 774.703522][ T3954] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 774.755918][ T1145] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 774.773974][ T3958] 8021q: adding VLAN 0 to HW filter on device bond8 [ 774.847987][ T3951] veth7: entered promiscuous mode [ 774.859302][ T3951] bond8: (slave veth7): Enslaving as a backup interface with a down link [ 774.879098][ T3957] tipc: Enabling of bearer rejected, already enabled [ 774.895362][ T3961] syzkaller0: entered promiscuous mode [ 774.903313][ T12] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 774.914493][ T3961] syzkaller0: entered allmulticast mode [ 774.922948][ T3936] hsr0 speed is unknown, defaulting to 1000 [ 774.935765][ T3957] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 775.163191][ T3968] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13366'. [ 775.311267][ T3972] tipc: Enabling of bearer rejected, already enabled [ 775.337247][ T3968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13366'. [ 775.340524][ T3970] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 775.357293][ T3975] tipc: Enabled bearer , priority 0 [ 775.365557][ T3975] syzkaller0: entered promiscuous mode [ 775.374726][ T3975] syzkaller0: entered allmulticast mode [ 775.459085][ T3975] tipc: Resetting bearer [ 775.465197][ T3975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.473873][ T3975] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.547711][ T3974] tipc: Resetting bearer [ 775.579093][ T3974] tipc: Disabling bearer [ 775.877190][ T3983] tipc: Enabled bearer , priority 0 [ 775.886177][ T3986] tipc: Enabled bearer , priority 0 [ 775.898051][ T3983] syzkaller0: entered promiscuous mode [ 775.903653][ T3983] syzkaller0: entered allmulticast mode [ 775.912694][ T3986] syzkaller0: entered promiscuous mode [ 775.919624][ T3986] syzkaller0: entered allmulticast mode [ 775.996950][ T3986] tipc: Resetting bearer [ 776.005588][ T3983] tipc: Resetting bearer [ 776.037706][ T3984] tipc: Resetting bearer [ 776.073708][ T3984] tipc: Disabling bearer [ 776.084636][ T3982] tipc: Resetting bearer [ 776.167759][ T3982] tipc: Disabling bearer [ 776.213146][ T3993] tipc: Enabling of bearer rejected, already enabled [ 776.259955][ T3993] sch_tbf: burst 127 is lower than device syzkaller0 mtu (313) ! [ 776.412635][ T4001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13379'. [ 776.416078][ T4000] tipc: Enabled bearer , priority 0 [ 776.449637][ T4000] syzkaller0: entered promiscuous mode [ 776.465844][ T4000] syzkaller0: entered allmulticast mode [ 776.582582][ T4000] tipc: Resetting bearer [ 776.641377][ T4015] tipc: Enabling of bearer rejected, already enabled [ 776.654906][ T3998] tipc: Resetting bearer [ 776.758297][ T3998] tipc: Disabling bearer [ 776.802234][ T4027] netlink: 'syz.0.13388': attribute type 10 has an invalid length. [ 776.900905][ T4027] 8021q: adding VLAN 0 to HW filter on device bond5 [ 776.924544][ T4027] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 776.950252][ T4027] bond5: (slave macvlan0): Enslaving as a backup interface with a down link [ 777.070733][ T4050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13391'. [ 777.112148][ T4052] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:20000 [ 777.306264][ T4019] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 777.646627][ T4076] netlink: 44 bytes leftover after parsing attributes in process `syz.1.13402'. [ 777.903029][ T4087] tipc: Enabling of bearer rejected, already enabled [ 777.965309][ T4092] tipc: Enabling of bearer rejected, already enabled [ 778.033927][ T4092] netlink: 76 bytes leftover after parsing attributes in process `syz.1.13408'. [ 778.218029][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 778.300157][ T4105] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 778.383378][ T4106] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13413'. [ 778.489586][ T4106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13413'. [ 778.734552][ T4106] hsr_slave_1 (unregistering): left promiscuous mode [ 778.918603][ T4126] tipc: Enabled bearer , priority 0 [ 778.934227][ T4126] syzkaller0: entered promiscuous mode [ 778.943605][ T4126] syzkaller0: entered allmulticast mode [ 779.009745][ T4126] tipc: Resetting bearer [ 779.029022][ T4128] tipc: Enabling of bearer rejected, already enabled [ 779.049122][ T4128] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 779.066425][ T4125] tipc: Resetting bearer [ 779.087746][ T4132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13421'. [ 779.124140][ T4125] tipc: Disabling bearer [ 779.365561][ T4139] tipc: Enabled bearer , priority 0 [ 779.418120][ T4139] syzkaller0: entered promiscuous mode [ 779.437659][ T4139] syzkaller0: entered allmulticast mode [ 779.553217][ T4147] tipc: Enabled bearer , priority 0 [ 779.577095][ T4139] tipc: Resetting bearer [ 779.600466][ T4147] syzkaller0: entered promiscuous mode [ 779.611920][ T4147] syzkaller0: entered allmulticast mode [ 779.637337][ T4138] tipc: Resetting bearer [ 779.708604][ T4138] tipc: Disabling bearer [ 779.744425][ T4146] tipc: Resetting bearer [ 779.846370][ T4146] tipc: Disabling bearer [ 780.029344][ T4158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 780.086982][ T4158] eql: remember to turn off Van-Jacobson compression on your slave devices [ 780.163429][ T4158] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 780.224611][ T4174] tipc: Enabling of bearer rejected, already enabled [ 780.461053][ T4183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 780.654332][ T4193] tipc: Enabling of bearer rejected, already enabled [ 780.740792][ T4197] tipc: Enabling of bearer rejected, already enabled [ 780.827148][ T4202] tipc: Enabling of bearer rejected, already enabled [ 781.103895][ T4211] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 781.186983][ T4222] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13453'. [ 781.279849][ T4224] tipc: Enabled bearer , priority 0 [ 781.311108][ T4224] syzkaller0: entered promiscuous mode [ 781.338691][ T4224] syzkaller0: entered allmulticast mode [ 781.400046][ T4221] tipc: Resetting bearer [ 781.484526][ T4221] tipc: Disabling bearer [ 781.513215][ T4232] tipc: Enabling of bearer rejected, already enabled [ 781.680805][ T4241] tipc: Enabling of bearer rejected, already enabled [ 781.891873][ T4252] tipc: Enabling of bearer rejected, already enabled [ 782.051122][ T4260] tipc: Enabled bearer , priority 0 [ 782.062848][ T4260] syzkaller0: entered promiscuous mode [ 782.082381][ T4260] syzkaller0: entered allmulticast mode [ 782.115731][ T4259] tipc: Resetting bearer [ 782.196184][ T4259] tipc: Disabling bearer [ 782.248419][ T4273] tipc: Enabling of bearer rejected, already enabled [ 782.497139][ T4285] tipc: Enabled bearer , priority 0 [ 782.535449][ T4285] syzkaller0: entered promiscuous mode [ 782.578873][ T4285] syzkaller0: entered allmulticast mode [ 782.593588][ T4285] tipc: Resetting bearer [ 782.624955][ T4282] tipc: Resetting bearer [ 782.737079][ T4282] tipc: Disabling bearer [ 782.927615][ T4308] rdma_rxe: rxe_newlink: failed to add bond0 [ 782.950076][ T4308] netlink: 'syz.3.13491': attribute type 13 has an invalid length. [ 783.081513][ T4308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.114187][ T4308] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.164696][ T4308] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 783.210633][ T4319] tipc: Enabling of bearer rejected, already enabled [ 783.220017][T27863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.655369][ T4347] tipc: Enabling of bearer rejected, already enabled [ 783.968642][T27863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.064534][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.111299][ T4371] netlink: 'syz.3.13519': attribute type 1 has an invalid length. [ 784.130126][ T4371] netlink: 236 bytes leftover after parsing attributes in process `syz.3.13519'. [ 784.229611][ T4375] tipc: Enabled bearer , priority 0 [ 784.247953][ T4375] syzkaller0: entered promiscuous mode [ 784.263790][ T4375] syzkaller0: entered allmulticast mode [ 784.294745][ T4375] tipc: Resetting bearer [ 784.329924][ T4374] tipc: Resetting bearer [ 784.380789][ T4374] tipc: Disabling bearer [ 784.440825][ T4381] tipc: Enabled bearer , priority 0 [ 784.468937][ T4381] syzkaller0: entered promiscuous mode [ 784.474503][ T4381] syzkaller0: entered allmulticast mode [ 784.554502][ T4388] tipc: Enabled bearer , priority 0 [ 784.572212][ T4385] tipc: Resetting bearer [ 784.595795][ T4388] syzkaller0: entered promiscuous mode [ 784.607759][ T4388] syzkaller0: entered allmulticast mode [ 784.636516][ T4380] tipc: Resetting bearer [ 784.705385][ T4380] tipc: Disabling bearer [ 784.724888][ T4388] tipc: Resetting bearer [ 784.739671][ T4398] bond0: (slave bridge_slave_1): Releasing backup interface [ 784.751103][ T4398] bond2: (slave veth0_to_bond): Releasing backup interface [ 784.760273][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.772624][ T4398] bond0: (slave bond_slave_0): Releasing backup interface [ 784.789132][ T4398] team0: Port device team_slave_0 removed [ 784.799713][ T4398] team0: Port device team_slave_1 removed [ 784.806460][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 784.822694][ T4398] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 784.834075][ T4398] bond0: (slave netdevsim0): Releasing backup interface [ 784.854702][ T4398] bond0: (slave wlan1): Releasing backup interface [ 784.909355][ T4398] tipc: Resetting bearer [ 784.922883][ T4398] bond3: (slave geneve2): Releasing active interface [ 784.938550][ T4398] bond4: (slave wireguard0): Releasing backup interface [ 784.950007][ T4398] bond5: (slave veth5): Releasing active interface [ 784.967722][ T4398] bond6: (slave geneve3): Releasing backup interface [ 784.995901][ T4398] bond7: (slave vlan2): Releasing active interface [ 785.013033][ T4398] bridge0: left promiscuous mode [ 785.032722][ T4398] bond8: (slave ip6gretap1): Removing an active aggregator [ 785.044151][ T4398] bond8: (slave ip6gretap1): Releasing backup interface [ 785.051973][ T4398] bond8: (slave ip6gretap1): the permanent HWaddr of slave - 16:36:3a:cf:7d:9d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 785.092914][ T4398] bond8: (slave veth7): Releasing backup interface [ 785.134921][ T4411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13537'. [ 785.168315][ T4387] tipc: Resetting bearer [ 785.247901][ T4387] tipc: Disabling bearer [ 785.330782][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 785.360467][ T4421] openvswitch: netlink: IPv6 tunnel dst address is zero [ 785.380010][ T13] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 785.421373][ T1145] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 785.432301][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.463216][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.622223][ T4427] tipc: Enabled bearer , priority 0 [ 785.663623][ T4427] syzkaller0: entered promiscuous mode [ 785.672504][ T4427] syzkaller0: entered allmulticast mode [ 785.728068][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.816147][ T4445] tipc: Resetting bearer [ 785.870448][ T4426] tipc: Resetting bearer [ 785.921847][ T4426] tipc: Disabling bearer [ 785.936007][ T4447] tipc: Enabling of bearer rejected, already enabled [ 785.992990][ T4451] tipc: Enabled bearer , priority 0 [ 786.002347][ T4451] syzkaller0: entered promiscuous mode [ 786.009924][ T4451] syzkaller0: entered allmulticast mode [ 786.055286][ T4451] tipc: Resetting bearer [ 786.082982][ T4450] tipc: Resetting bearer [ 786.160531][ T4450] tipc: Disabling bearer [ 786.214340][ T4461] tipc: Enabled bearer , priority 0 [ 786.222868][ T4461] syzkaller0: entered promiscuous mode [ 786.228611][ T4461] syzkaller0: entered allmulticast mode [ 786.245089][ T4460] tipc: Resetting bearer [ 786.270654][ T4460] tipc: Disabling bearer [ 786.368337][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 786.574273][ T4484] syzkaller0: entered promiscuous mode [ 786.580457][ T4484] syzkaller0: entered allmulticast mode [ 787.346359][ T4491] tipc: Enabled bearer , priority 0 [ 787.355100][ T4491] syzkaller0: entered promiscuous mode [ 787.377028][ T4491] syzkaller0: entered allmulticast mode [ 787.514398][ T4500] tipc: Enabled bearer , priority 0 [ 787.542937][ T4491] tipc: Resetting bearer [ 787.563319][ T4500] syzkaller0: entered promiscuous mode [ 787.574314][ T4500] syzkaller0: entered allmulticast mode [ 787.590657][ T4502] tipc: Enabling of bearer rejected, already enabled [ 787.605459][ T4490] tipc: Resetting bearer [ 787.663474][ T4490] tipc: Disabling bearer [ 787.738521][ T4506] tipc: Resetting bearer [ 787.767966][ T4499] tipc: Resetting bearer [ 787.846162][ T4499] tipc: Disabling bearer [ 787.894582][ T4523] tipc: Enabling of bearer rejected, already enabled [ 788.115696][ T4537] syzkaller0: entered promiscuous mode [ 788.121530][ T4537] syzkaller0: entered allmulticast mode [ 788.161890][ T4540] bond0: (slave rose0): Error: Device can not be enslaved while up [ 788.368745][ T4547] syzkaller0: entered promiscuous mode [ 788.374370][ T4547] syzkaller0: entered allmulticast mode [ 788.871694][ T4554] IPVS: stopping master sync thread 18158 ... [ 789.020002][ T4561] dummy0: left allmulticast mode [ 789.040012][ T4561] bridge0: port 3(dummy0) entered disabled state [ 789.073590][ T4561] bridge_slave_1: left allmulticast mode [ 789.094806][ T4561] bridge_slave_1: left promiscuous mode [ 789.105272][ T4561] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.121840][ T4561] bridge_slave_0: left allmulticast mode [ 789.138629][ T4561] bridge_slave_0: left promiscuous mode [ 789.146188][ T4561] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.246848][ T4569] vlan1: entered promiscuous mode [ 789.258435][ T4569] bridge0: entered promiscuous mode [ 789.277140][ T4570] tipc: Enabling of bearer rejected, already enabled [ 789.412838][ T4577] tipc: Enabling of bearer rejected, already enabled [ 789.590749][ T4587] tipc: Enabled bearer , priority 0 [ 789.618648][ T4587] syzkaller0: entered promiscuous mode [ 789.637919][ T4587] syzkaller0: entered allmulticast mode [ 789.654990][ T4584] tipc: Resetting bearer [ 789.673557][ T4591] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13609'. [ 789.709611][ T4584] tipc: Disabling bearer [ 789.807954][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 790.166957][ T4616] tipc: Enabled bearer , priority 0 [ 790.196821][ T4616] syzkaller0: entered promiscuous mode [ 790.210366][ T4616] syzkaller0: entered allmulticast mode [ 790.288422][ T4616] tipc: Resetting bearer [ 790.306959][ T4614] tipc: Resetting bearer [ 790.378806][ T4614] tipc: Disabling bearer [ 790.392792][ T4623] tipc: Enabled bearer , priority 0 [ 790.400608][ T4628] syzkaller0: entered promiscuous mode [ 790.406321][ T4628] syzkaller0: entered allmulticast mode [ 790.420804][ T4619] tipc: Resetting bearer [ 790.438011][ T4617] tipc: Resetting bearer [ 790.482990][ T4617] tipc: Disabling bearer [ 790.511520][ T4631] tipc: Enabled bearer , priority 0 [ 790.538779][ T4627] syzkaller0: entered promiscuous mode [ 790.544382][ T4627] syzkaller0: entered allmulticast mode [ 790.631274][ T4626] tipc: Resetting bearer [ 790.723617][ T4626] tipc: Disabling bearer [ 791.196267][ T4658] tipc: Enabling of bearer rejected, already enabled [ 791.421676][ T4671] tipc: Enabling of bearer rejected, already enabled [ 791.829451][ T4691] tipc: Enabled bearer , priority 0 [ 791.846621][ T4691] syzkaller0: entered promiscuous mode [ 791.859195][ T4691] syzkaller0: entered allmulticast mode [ 791.882853][ T4691] tipc: Resetting bearer [ 792.210553][ T4690] tipc: Resetting bearer [ 792.285133][ T4690] tipc: Disabling bearer [ 792.328907][ T4701] tipc: Enabling of bearer rejected, already enabled [ 792.789140][ T4723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13663'. [ 792.824214][ T4730] tipc: Enabling of bearer rejected, already enabled [ 792.861591][ T4732] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13667'. [ 793.138709][ T4741] tipc: Enabled bearer , priority 0 [ 793.163980][ T4741] syzkaller0: entered promiscuous mode [ 793.181462][ T4741] syzkaller0: entered allmulticast mode [ 793.233676][ T4739] tipc: Resetting bearer [ 793.312935][ T4739] tipc: Disabling bearer [ 793.359012][ T4756] tipc: Enabling of bearer rejected, already enabled [ 794.051831][ T4798] tipc: Enabling of bearer rejected, already enabled [ 794.106612][ T4799] tipc: Enabled bearer , priority 0 [ 794.121835][ T4799] syzkaller0: entered promiscuous mode [ 794.144725][ T4799] syzkaller0: entered allmulticast mode [ 794.188120][ T4796] tipc: Resetting bearer [ 794.248985][ T4796] tipc: Disabling bearer [ 794.280614][ T4814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13700'. [ 794.298200][ T4806] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 794.884893][ T4841] tipc: Enabled bearer , priority 0 [ 794.911125][ T4841] syzkaller0: entered promiscuous mode [ 794.924853][ T4841] syzkaller0: entered allmulticast mode [ 795.021912][ T4838] tipc: Resetting bearer [ 795.075106][ T4838] tipc: Disabling bearer [ 795.093227][ T4847] tipc: Enabling of bearer rejected, already enabled [ 795.317596][ T4862] tipc: Enabled bearer , priority 0 [ 795.326153][ T4862] syzkaller0: entered promiscuous mode [ 795.332965][ T4862] syzkaller0: entered allmulticast mode [ 795.353848][ T4862] tipc: Resetting bearer [ 795.370923][ T4861] tipc: Resetting bearer [ 795.425531][ T4861] tipc: Disabling bearer [ 795.455198][ T4867] tipc: Enabling of bearer rejected, already enabled [ 795.565771][ T4870] tipc: Enabled bearer , priority 0 [ 795.575842][ T4870] syzkaller0: entered promiscuous mode [ 795.585074][ T4870] syzkaller0: entered allmulticast mode [ 795.602442][ T4870] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 795.656024][ T4868] tipc: Resetting bearer [ 795.709858][ T4868] tipc: Disabling bearer [ 795.795174][ T4879] tipc: Enabling of bearer rejected, already enabled [ 795.962978][ T4886] tipc: Enabling of bearer rejected, already enabled [ 796.143488][ T4894] tipc: Enabled bearer , priority 0 [ 796.164262][ T4894] syzkaller0: entered promiscuous mode [ 796.178737][ T4894] syzkaller0: entered allmulticast mode [ 796.216666][ T4894] tipc: Resetting bearer [ 796.283021][ T4891] tipc: Resetting bearer [ 796.354741][ T4891] tipc: Disabling bearer [ 796.385382][ T4908] tipc: Enabling of bearer rejected, already enabled [ 796.432592][ T4908] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 796.519032][ T4910] tipc: Enabling of bearer rejected, already enabled [ 796.905526][ T4931] netlink: 'syz.5.13743': attribute type 39 has an invalid length. [ 797.284596][ T4947] tipc: Enabled bearer , priority 0 [ 797.311119][ T4947] syzkaller0: entered promiscuous mode [ 797.333076][ T4947] syzkaller0: entered allmulticast mode [ 797.362404][ T4948] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 797.434341][ T4945] tipc: Resetting bearer [ 797.509140][ T4945] tipc: Disabling bearer [ 797.544706][ T4956] batman_adv: batadv0: Adding interface: netdevsim0 [ 797.556610][ T4956] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.588371][ T4956] batman_adv: batadv0: Interface activated: netdevsim0 [ 797.786759][ T4966] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 798.069201][ T4988] tipc: Enabled bearer , priority 0 [ 798.091008][ T4985] tipc: Enabling of bearer rejected, already enabled [ 798.103481][ T4978] syzkaller0: entered promiscuous mode [ 798.138167][ T4978] syzkaller0: entered allmulticast mode [ 798.147047][ T4985] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 798.176436][ T4978] tipc: Resetting bearer [ 798.241577][ T4976] tipc: Resetting bearer [ 798.326255][ T4976] tipc: Disabling bearer [ 798.500558][ T5005] tipc: Enabling of bearer rejected, already enabled [ 798.687606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 798.748585][ T5024] netlink: 232 bytes leftover after parsing attributes in process `syz.3.13776'. [ 798.952426][ T5028] tipc: Enabled bearer , priority 0 [ 798.960353][ T5028] syzkaller0: entered promiscuous mode [ 798.965865][ T5028] syzkaller0: entered allmulticast mode [ 798.977222][ T5028] tipc: Resetting bearer [ 799.006554][ T5027] tipc: Resetting bearer [ 799.058034][ T5027] tipc: Disabling bearer [ 799.330413][ T5049] tipc: Enabled bearer , priority 0 [ 799.376008][ T5049] tipc: Resetting bearer [ 799.425827][ T5046] tipc: Disabling bearer [ 799.450047][ T5056] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 799.753523][ T5071] bond0: Caught tx_queue_len zero misconfig [ 799.839131][ T5079] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13797'. [ 800.029519][ T5086] tipc: Enabled bearer , priority 0 [ 800.053643][ T5086] syzkaller0: entered promiscuous mode [ 800.065538][ T5086] syzkaller0: entered allmulticast mode [ 800.096226][ T5086] tipc: Resetting bearer [ 800.120936][ T5084] tipc: Resetting bearer [ 800.156285][ T5084] tipc: Disabling bearer [ 800.232894][ T5098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 800.417041][ T5105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13807'. [ 800.756572][ T5122] tipc: Enabling of bearer rejected, already enabled [ 800.888042][ T5129] netlink: 360 bytes leftover after parsing attributes in process `syz.2.13816'. [ 801.312117][ T5149] tipc: Enabled bearer , priority 0 [ 801.339938][ T5149] syzkaller0: entered promiscuous mode [ 801.353225][ T5149] syzkaller0: entered allmulticast mode [ 801.420903][ T5146] tipc: Resetting bearer [ 801.479843][ T5146] tipc: Disabling bearer [ 801.501979][ T5157] tipc: Enabled bearer , priority 0 [ 801.522059][ T5155] syzkaller0: entered promiscuous mode [ 801.530845][ T5155] syzkaller0: entered allmulticast mode [ 801.596880][ T5154] tipc: Resetting bearer [ 801.672897][ T5154] tipc: Disabling bearer [ 801.865287][ T5173] tipc: Enabling of bearer rejected, already enabled [ 801.923757][ T5176] tipc: Enabled bearer , priority 0 [ 801.954044][ T5176] tipc: Resetting bearer [ 802.068340][ T5175] tipc: Disabling bearer [ 802.111855][ T5198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13837'. [ 802.183908][ T5194] team0 (unregistering): Port device team_slave_0 removed [ 802.211502][ T5194] team0 (unregistering): Port device team_slave_1 removed [ 802.294819][ T5201] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13841'. [ 803.156008][ T5256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13859'. [ 803.407851][ T5267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13862'. [ 803.467764][ T5269] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 803.506360][ T5276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13863'. [ 803.749093][ T5285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13868'. [ 804.102417][ T5291] tipc: Enabling of bearer rejected, already enabled [ 804.159424][ T5291] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 804.291118][ T5297] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 804.341824][ T5297] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 804.547266][ T5314] netlink: 'syz.3.13878': attribute type 39 has an invalid length. [ 804.876610][ T5329] syzkaller0: entered promiscuous mode [ 804.885908][ T5329] syzkaller0: entered allmulticast mode [ 804.931316][ T5329] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 804.955943][ T5335] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13888'. [ 805.091989][ T5338] tipc: Enabled bearer , priority 0 [ 805.104396][ T5343] syzkaller0: entered promiscuous mode [ 805.114489][ T5343] syzkaller0: entered allmulticast mode [ 805.143240][ T5342] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13891'. [ 805.166879][ T5336] tipc: Resetting bearer [ 805.201730][ T5336] tipc: Disabling bearer [ 805.597175][ T5368] tipc: Enabled bearer , priority 0 [ 805.620529][ T5368] syzkaller0: entered promiscuous mode [ 805.645779][ T5368] syzkaller0: entered allmulticast mode [ 805.743078][ T5368] tipc: Resetting bearer [ 805.797736][ T5366] tipc: Resetting bearer [ 805.885285][ T5366] tipc: Disabling bearer [ 806.025686][ T5390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 806.297931][ T5404] netlink: 'syz.1.13908': attribute type 39 has an invalid length. [ 806.993124][ T5441] netlink: 88 bytes leftover after parsing attributes in process `syz.3.13923'. [ 807.779937][ T5477] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13935'. [ 808.045509][ T5491] netlink: 'syz.0.13940': attribute type 25 has an invalid length. [ 808.256004][ T5505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13945'. [ 808.379006][ T5511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13946'. [ 808.590603][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.778796][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 808.861993][ T5531] netlink: 'syz.0.13955': attribute type 25 has an invalid length. [ 809.206700][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13958'. [ 809.259518][ T5553] rdma_rxe: rxe_newlink: failed to add bond0 [ 809.523461][ T5562] tipc: Enabled bearer , priority 0 [ 809.542903][ T5562] syzkaller0: entered promiscuous mode [ 809.569887][ T5562] syzkaller0: entered allmulticast mode [ 809.653308][ T5570] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13968'. [ 809.677016][ T5571] tipc: Resetting bearer [ 809.716184][ T5561] tipc: Resetting bearer [ 809.794184][ T5561] tipc: Disabling bearer [ 810.211466][ T5596] rdma_rxe: rxe_newlink: failed to add bond0 [ 810.513542][ T5612] tipc: Enabled bearer , priority 0 [ 810.555282][ T5612] syzkaller0: entered promiscuous mode [ 810.579467][ T5612] syzkaller0: entered allmulticast mode [ 810.696099][ T5612] tipc: Resetting bearer [ 810.761744][ T5611] tipc: Resetting bearer [ 810.812698][ T5611] tipc: Disabling bearer [ 811.242747][ T5651] rdma_rxe: rxe_newlink: failed to add bond0 [ 811.574574][ T5663] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 811.691208][ T5671] netlink: 96 bytes leftover after parsing attributes in process `syz.1.14002'. [ 812.342933][ T5708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14015'. [ 812.944667][ T5740] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14026'. [ 813.442445][ T5765] tipc: Enabled bearer , priority 0 [ 813.461664][ T5765] tipc: Resetting bearer [ 813.475731][ T5763] tipc: Disabling bearer [ 813.743061][ T5780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14040'. [ 813.755524][ T5780] netlink: 'syz.2.14040': attribute type 1 has an invalid length. [ 813.765701][ T5781] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14041'. [ 813.768006][ T5780] netlink: 'syz.2.14040': attribute type 2 has an invalid length. [ 814.056740][ T1305] clip:clip_start_xmit: skb_dst(skb) == NULL [ 814.062982][ T1305] lec:lec_start_xmit: lec0:No lecd attached [ 814.202562][ T5803] rdma_rxe: rxe_newlink: failed to add bond0 [ 814.241675][ T5809] netlink: 56 bytes leftover after parsing attributes in process `syz.3.14045'. [ 814.242785][ T5803] netlink: 'syz.0.14046': attribute type 13 has an invalid length. [ 814.332268][ T5803] erspan0: left promiscuous mode [ 814.514432][ T5803] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 814.656053][ T5819] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 814.916948][ T5834] tipc: Enabling of bearer rejected, already enabled [ 814.941338][ T5834] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 815.224505][ T5854] tipc: Enabling of bearer rejected, already enabled [ 815.611867][ T5894] tipc: Enabling of bearer rejected, already enabled [ 815.723810][ T5903] syzkaller1: entered promiscuous mode [ 815.739857][ T5903] syzkaller1: entered allmulticast mode [ 815.977628][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 816.187607][ T5964] tipc: Enabling of bearer rejected, already enabled [ 816.306126][ T5970] tipc: Enabled bearer , priority 0 [ 816.315461][ T5970] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 816.355164][ T5970] tipc: Resetting bearer [ 816.389003][ T5969] tipc: Disabling bearer [ 816.464516][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14092'. [ 816.916486][ T6002] rdma_rxe: rxe_newlink: failed to add bond0 [ 816.955802][ T6002] netlink: 'syz.5.14100': attribute type 13 has an invalid length. [ 817.154557][ T6002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 817.162278][ T5947] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 817.227712][ T6002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 817.311175][ T1014] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 817.348578][ T1014] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 817.441734][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14107'. [ 817.967930][T27863] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 818.051924][ T6051] tipc: Enabled bearer , priority 0 [ 818.102909][ T6051] tipc: Resetting bearer [ 818.219968][ T6050] tipc: Disabling bearer [ 818.301252][ T6064] tipc: Enabling of bearer rejected, already enabled [ 818.369109][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14120'. [ 818.379033][ T5947] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 818.481023][ T6072] tipc: Enabled bearer , priority 0 [ 818.507309][ T6072] syzkaller0: entered promiscuous mode [ 818.532253][ T6072] syzkaller0: entered allmulticast mode [ 818.656683][ T6083] tipc: Enabling of bearer rejected, failed to enable media [ 818.690964][ T6072] tipc: Resetting bearer [ 818.715154][ T6068] tipc: Resetting bearer [ 818.889315][ T6068] tipc: Disabling bearer [ 818.908074][ T6101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14128'. [ 819.167935][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5100 ms [ 819.176045][ C0] lec:lec_tx_timeout: lec0 [ 819.669550][ T6124] tipc: Enabled bearer , priority 0 [ 819.676331][ T6127] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14136'. [ 819.835055][ T6132] rdma_rxe: rxe_newlink: failed to add bond0 [ 819.842992][ T6129] tipc: Resetting bearer [ 819.949121][ T6132] netlink: 'syz.1.14138': attribute type 13 has an invalid length. [ 819.962484][ T6123] tipc: Disabling bearer [ 820.174315][ T6132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 820.199695][ T6132] 8021q: adding VLAN 0 to HW filter on device team0 [ 820.224177][ T6132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 820.245141][ T6144] tipc: Enabling of bearer rejected, already enabled [ 820.265659][ T6148] tipc: Enabling of bearer rejected, failed to enable media [ 820.532945][ T6161] rdma_rxe: rxe_newlink: failed to add bond0 [ 820.593038][ T6161] netlink: 'syz.3.14145': attribute type 13 has an invalid length. [ 820.644228][ T6161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 820.660694][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.737825][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 820.749992][ T6169] syzkaller1: entered promiscuous mode [ 820.755624][ T6169] syzkaller1: entered allmulticast mode [ 821.115388][ T6191] tipc: Enabling of bearer rejected, already enabled [ 821.203583][ T6198] rdma_rxe: rxe_newlink: failed to add bond0 [ 821.242572][ T6198] netlink: 'syz.0.14157': attribute type 13 has an invalid length. [ 821.309247][ T6198] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 821.339925][ T6203] tipc: Enabling of bearer rejected, already enabled [ 821.467075][ T6210] tipc: Enabling of bearer rejected, failed to enable media [ 821.647706][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 821.979352][ T6237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14168'. [ 822.165495][ T6242] rdma_rxe: rxe_newlink: failed to add bond0 [ 822.178387][ T6242] netlink: 'syz.0.14171': attribute type 13 has an invalid length. [ 822.192647][ T6242] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 822.322401][ T6245] vlan3: entered promiscuous mode [ 822.328407][ T6245] bond0: entered promiscuous mode [ 822.383503][ T6246] tipc: Enabled bearer , priority 0 [ 822.392325][ T6248] tipc: Enabled bearer , priority 0 [ 822.400397][ T6248] syzkaller0: entered promiscuous mode [ 822.406856][ T6248] syzkaller0: entered allmulticast mode [ 822.430413][ T6246] tipc: Resetting bearer [ 822.476288][ T6243] tipc: Disabling bearer [ 822.524432][ T6247] tipc: Resetting bearer [ 822.583536][ T6247] tipc: Disabling bearer [ 822.784711][ T6264] tipc: Enabling of bearer rejected, already enabled [ 822.863273][ T6267] tipc: Enabling of bearer rejected, failed to enable media [ 822.902064][ T6271] rdma_rxe: rxe_newlink: failed to add bond0 [ 822.930688][ T6271] netlink: 'syz.1.14183': attribute type 13 has an invalid length. [ 822.968628][ T6271] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 823.131721][ T6280] netlink: 360 bytes leftover after parsing attributes in process `syz.2.14186'. [ 823.242709][ T6288] syzkaller1: entered promiscuous mode [ 823.250964][ T6288] syzkaller1: entered allmulticast mode [ 823.392076][ T6293] tipc: Enabling of bearer rejected, already enabled [ 823.462489][ T6297] netlink: 28 bytes leftover after parsing attributes in process `syz.2.14193'. [ 823.532184][ T6299] tipc: Enabling of bearer rejected, already enabled [ 823.581280][ T6303] rdma_rxe: rxe_newlink: failed to add bond0 [ 823.593029][ T6303] netlink: 'syz.5.14196': attribute type 13 has an invalid length. [ 823.621415][ T6303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 823.637820][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 824.050053][ T6323] tipc: Enabled bearer , priority 0 [ 824.074729][ T6323] syzkaller0: entered promiscuous mode [ 824.095863][ T6323] syzkaller0: entered allmulticast mode [ 824.241534][ T6322] tipc: Resetting bearer [ 824.341471][ T6322] tipc: Disabling bearer [ 824.478142][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 824.551025][ T6352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14212'. [ 824.692349][ T6344] syzkaller0: entered promiscuous mode [ 824.698611][ T6344] syzkaller0: entered allmulticast mode [ 825.128356][ T6374] netlink: 900 bytes leftover after parsing attributes in process `syz.2.14219'. [ 825.153858][ T6377] tipc: Enabling of bearer rejected, failed to enable media [ 825.558283][ T6391] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14225'. [ 825.849386][ T6408] netlink: 'syz.3.14232': attribute type 29 has an invalid length. [ 825.890566][ T6408] netlink: 'syz.3.14232': attribute type 29 has an invalid length. [ 826.275372][ T6428] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 826.405842][ T6436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14240'. [ 827.056765][T25543] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 827.683739][ T6490] syzkaller0: entered promiscuous mode [ 827.691349][ T6490] syzkaller0: entered allmulticast mode [ 828.601195][ T6533] tipc: Enabling of bearer rejected, failed to enable media [ 828.832750][ T6546] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14279'. [ 829.204312][ T6560] rdma_rxe: rxe_newlink: failed to add bond0 [ 829.223472][ T6560] netlink: 'syz.3.14285': attribute type 13 has an invalid length. [ 829.240030][ T6560] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 829.268514][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 829.376857][ T6572] netlink: 'syz.2.14287': attribute type 13 has an invalid length. [ 829.509245][T27863] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 829.522987][ T6581] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14291'. [ 829.539827][ T6572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 829.622395][ T6586] tipc: Enabling of bearer rejected, already enabled [ 829.904273][ T6601] rdma_rxe: rxe_newlink: failed to add bond0 [ 829.912318][ T6601] netlink: 'syz.5.14300': attribute type 13 has an invalid length. [ 829.954430][ T6601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 830.000554][ T5947] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 830.120136][ T5947] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 830.156657][ T6613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14301'. [ 830.288023][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 830.508115][ T6625] netlink: 'syz.0.14307': attribute type 13 has an invalid length. [ 830.550273][ T6625] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 830.656335][ T6634] netlink: 20 bytes leftover after parsing attributes in process `syz.3.14311'. [ 830.687595][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 830.696445][ T5947] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 830.719755][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14313'. [ 830.800072][ T6641] netlink: 'syz.0.14315': attribute type 9 has an invalid length. [ 830.812511][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14315'. [ 830.824915][ T6641] netlink: 'syz.0.14315': attribute type 9 has an invalid length. [ 830.841605][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14315'. [ 831.318646][ T6664] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14323'. [ 831.369754][ T6666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14324'. [ 831.441234][ T6668] tipc: Enabling of bearer rejected, already enabled [ 831.771735][ T6686] syzkaller1: entered promiscuous mode [ 831.777620][ T6686] syzkaller1: entered allmulticast mode [ 831.968568][ T6694] tipc: Enabling of bearer rejected, failed to enable media [ 832.171386][ T6709] tipc: Enabled bearer , priority 0 [ 832.199394][ T6706] tipc: Resetting bearer [ 832.286417][ T6702] tipc: Disabling bearer [ 832.292761][ T6713] netlink: 'syz.1.14339': attribute type 39 has an invalid length. [ 834.527701][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 835.584524][ T6813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 835.919994][ T6829] syzkaller1: entered promiscuous mode [ 835.925628][ T6829] syzkaller1: entered allmulticast mode [ 836.084598][ T6835] tipc: Enabling of bearer rejected, failed to enable media [ 836.122373][ T6837] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14380'. [ 836.742387][ T6858] tipc: Enabled bearer , priority 0 [ 836.771552][ T6858] tipc: Resetting bearer [ 836.851088][ T6856] tipc: Disabling bearer [ 836.886583][ T49] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8 [ 836.900148][ T6871] syzkaller1: entered promiscuous mode [ 836.905901][ T6871] syzkaller1: entered allmulticast mode [ 837.607068][ T6882] netlink: 'syz.1.14395': attribute type 1 has an invalid length. [ 837.615468][ T6882] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14395'. [ 837.626914][ T6882] netlink: 'syz.1.14395': attribute type 2 has an invalid length. [ 837.635258][ T6882] netlink: 'syz.1.14395': attribute type 1 has an invalid length. [ 837.790141][ T6906] tipc: Enabling of bearer rejected, already enabled [ 837.815962][ T6910] tipc: Enabling of bearer rejected, already enabled [ 837.919923][ T6915] netlink: 'syz.5.14405': attribute type 39 has an invalid length. [ 838.155814][ T6926] rdma_rxe: rxe_newlink: failed to add bond0 [ 838.233488][ T6926] netlink: 'syz.5.14409': attribute type 13 has an invalid length. [ 838.334617][ T6926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 838.353750][ T5947] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 838.428554][ T6945] tipc: Enabling of bearer rejected, already enabled [ 838.709491][ T6954] tipc: Enabled bearer , priority 0 [ 838.720132][ T6954] tipc: Resetting bearer [ 838.772748][ T6949] tipc: Disabling bearer [ 839.247901][T27863] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 839.328600][ T6992] rdma_rxe: rxe_newlink: failed to add bond0 [ 839.368241][ T6992] netlink: 'syz.5.14428': attribute type 13 has an invalid length. [ 839.416871][ T6992] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 839.442116][ T5947] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 839.466192][ T6994] tipc: Enabled bearer , priority 0 [ 839.549813][ T6994] tipc: Resetting bearer [ 839.656930][ T6993] tipc: Disabling bearer [ 839.700011][ T7008] tipc: Enabling of bearer rejected, already enabled [ 839.775499][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14435'. [ 840.448821][T27863] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 840.470961][ T7044] rdma_rxe: rxe_newlink: failed to add bond0 [ 840.511134][ T7044] netlink: 'syz.0.14444': attribute type 13 has an invalid length. [ 840.533488][ T7044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 841.370093][ T7096] syzkaller1: entered promiscuous mode [ 841.375648][ T7096] syzkaller1: entered allmulticast mode [ 841.696864][ T7113] tipc: Enabled bearer , priority 0 [ 841.736872][ T7113] tipc: Resetting bearer [ 841.807041][ T7111] tipc: Disabling bearer [ 841.886079][ T7124] netlink: 'syz.1.14468': attribute type 7 has an invalid length. [ 841.896925][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14468'. [ 842.154617][ T7137] tipc: Enabling of bearer rejected, already enabled [ 842.251154][ T7142] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 842.271075][T25543] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 842.296840][ T7143] syzkaller0: entered promiscuous mode [ 842.306277][T25543] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 842.369022][ T7143] syzkaller0: entered allmulticast mode [ 842.402892][ T7143] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 842.978272][ T7180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14487'. [ 843.557125][ T7213] tipc: Enabling of bearer rejected, already enabled [ 844.165036][ T7244] tipc: Enabling of bearer rejected, failed to enable media [ 844.350400][ T7256] rdma_rxe: rxe_newlink: failed to add bond0 [ 844.391681][ T7256] netlink: 'syz.5.14518': attribute type 13 has an invalid length. [ 844.463584][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14517'. [ 844.476781][ T7256] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 844.494730][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 844.588709][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 844.997219][ T7278] rdma_rxe: rxe_newlink: failed to add bond0 [ 845.026815][ T7278] netlink: 'syz.5.14523': attribute type 13 has an invalid length. [ 845.045090][ T7280] netlink: 68 bytes leftover after parsing attributes in process `syz.0.14524'. [ 845.077168][ T7278] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 845.101405][T27863] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 845.505579][ T7289] syzkaller0: entered promiscuous mode [ 845.515373][ T7289] syzkaller0: entered allmulticast mode [ 845.660932][ T7298] tipc: Enabled bearer , priority 0 [ 845.744301][ T7296] tipc: Resetting bearer [ 845.774367][ T7295] tipc: Disabling bearer [ 846.047955][T27863] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 846.602829][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14547'. [ 846.674106][ T7342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.328082][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 847.403376][ T7374] netlink: 'syz.0.14562': attribute type 1 has an invalid length. [ 847.551209][ T7374] 8021q: adding VLAN 0 to HW filter on device bond6 [ 847.571316][ T7385] bond6: (slave gretap1): making interface the new active one [ 847.581034][ T7385] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 848.005542][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14571'. [ 848.055511][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14571'. [ 848.098080][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14571'. [ 848.150919][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14571'. [ 848.170014][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14571'. [ 848.465157][ T7428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14575'. [ 848.825788][ T7442] rdma_rxe: rxe_newlink: failed to add bond0 [ 848.836890][ T7442] netlink: 'syz.5.14583': attribute type 13 has an invalid length. [ 848.865108][ T7442] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 848.888140][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 849.061122][ T7453] tipc: Enabling of bearer rejected, failed to enable media [ 849.247507][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.570038][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 849.911089][ T7490] netlink: 'syz.3.14593': attribute type 39 has an invalid length. [ 849.935831][ T7494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14594'. [ 850.014605][ T7492] syzkaller1: entered promiscuous mode [ 850.026193][ T7492] syzkaller1: entered allmulticast mode [ 850.572480][ T7527] syzkaller0: entered promiscuous mode [ 850.582266][ T7527] syzkaller0: entered allmulticast mode [ 850.639710][ T7531] netlink: 'syz.1.14608': attribute type 39 has an invalid length. [ 850.965337][ T7545] tipc: Enabling of bearer rejected, already enabled [ 851.435794][ T7569] netlink: 'syz.2.14621': attribute type 39 has an invalid length. [ 851.849999][ T7585] syzkaller1: entered promiscuous mode [ 851.855557][ T7585] syzkaller1: entered allmulticast mode [ 851.863794][ T7586] tipc: Enabling of bearer rejected, already enabled [ 851.982026][ T7594] syzkaller0: entered promiscuous mode [ 851.997574][ T7594] syzkaller0: entered allmulticast mode [ 852.823549][ T7635] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14638'. [ 852.846284][ T7637] netlink: 'syz.1.14636': attribute type 39 has an invalid length. [ 852.931644][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14638'. [ 853.118266][ T7650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14643'. [ 853.127857][ T7649] tipc: Enabling of bearer rejected, already enabled [ 853.471695][ T7657] syzkaller0: entered promiscuous mode [ 853.492686][ T7657] syzkaller0: entered allmulticast mode [ 855.577743][ T7683] vxcan1 speed is unknown, defaulting to 1000 [ 855.696020][ T7692] tipc: Enabled bearer , priority 0 [ 855.728490][ T7692] syzkaller0: entered promiscuous mode [ 855.734030][ T7692] syzkaller0: entered allmulticast mode [ 855.828718][ T7692] tipc: Resetting bearer [ 855.855056][ T7690] tipc: Resetting bearer [ 855.918857][ T7690] tipc: Disabling bearer [ 855.932834][ T7701] syzkaller1: entered promiscuous mode [ 855.947497][ T7701] syzkaller1: entered allmulticast mode [ 856.112355][ T7683] hsr0 speed is unknown, defaulting to 1000 [ 856.134717][ T7705] syzkaller0: entered promiscuous mode [ 856.145312][ T7705] syzkaller0: entered allmulticast mode [ 856.168274][ T7714] netlink: 'syz.5.14664': attribute type 39 has an invalid length. [ 856.258926][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 856.565804][ T7733] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14672'. [ 856.614721][ T7736] netlink: 'syz.1.14671': attribute type 25 has an invalid length. [ 856.878241][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 857.283970][ T7756] syzkaller0: entered promiscuous mode [ 857.297585][ T7756] syzkaller0: entered allmulticast mode [ 857.319618][ T7756] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 857.595937][ T7773] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14682'. [ 857.738552][ T7777] tipc: Enabling of bearer rejected, already enabled [ 857.913192][ T7784] netlink: 40 bytes leftover after parsing attributes in process `syz.3.14689'. [ 858.155675][ T7805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14694'. [ 858.172718][ T7804] syzkaller0: entered promiscuous mode [ 858.180642][ T7804] syzkaller0: entered allmulticast mode [ 858.385561][ T7815] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14696'. [ 858.693553][ T7830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14700'. [ 858.779620][ T7834] netlink: 40 bytes leftover after parsing attributes in process `syz.5.14702'. [ 859.150994][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14709'. [ 859.370949][ T7871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14713'. [ 859.614592][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14716'. [ 859.767016][ T7884] tipc: Enabled bearer , priority 0 [ 859.786053][ T7884] tipc: Resetting bearer [ 859.810700][ T7883] tipc: Disabling bearer [ 860.169941][ T7908] tipc: Enabling of bearer rejected, already enabled [ 860.192043][ T7906] syzkaller0: entered promiscuous mode [ 860.217212][ T7906] syzkaller0: entered allmulticast mode [ 860.376385][ T7914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14728'. [ 860.986130][ T7944] tipc: Enabled bearer , priority 0 [ 861.012918][ T7944] syzkaller0: entered promiscuous mode [ 861.061599][ T7944] syzkaller0: entered allmulticast mode [ 861.329036][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14737'. [ 861.595338][ T7957] tipc: Resetting bearer [ 861.699876][ T7942] tipc: Resetting bearer [ 861.803675][ T7942] tipc: Disabling bearer [ 861.973996][ T7969] netlink: 244 bytes leftover after parsing attributes in process `syz.1.14742'. [ 862.184595][ T7985] rdma_rxe: rxe_newlink: failed to add bond0 [ 862.209163][ T7985] netlink: 'syz.5.14748': attribute type 13 has an invalid length. [ 862.272313][ T7985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 862.290488][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 862.451843][ T7986] vxcan1 speed is unknown, defaulting to 1000 [ 862.636790][ T7996] netlink: 'syz.1.14751': attribute type 25 has an invalid length. [ 862.800875][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 862.951413][ T8014] tipc: Enabling of bearer rejected, already enabled [ 863.151160][ T8019] tipc: Enabling of bearer rejected, failed to enable media [ 863.344345][ T7986] hsr0 speed is unknown, defaulting to 1000 [ 865.574149][ T8055] __nla_validate_parse: 3 callbacks suppressed [ 865.574174][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14766'. [ 865.646341][ T8057] rdma_rxe: rxe_newlink: failed to add bond0 [ 865.658924][ T8057] netlink: 'syz.2.14767': attribute type 13 has an invalid length. [ 865.680612][ T8057] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 865.697693][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 865.821023][ T8064] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 865.828894][ T8064] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 865.836693][ T8064] tipc: Resetting bearer [ 865.847222][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14769'. [ 866.179643][ T8080] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14774'. [ 866.451398][ T8093] rdma_rxe: rxe_newlink: failed to add bond0 [ 866.464527][ T8093] netlink: 'syz.2.14780': attribute type 13 has an invalid length. [ 866.487081][ T8093] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 866.519838][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 866.633473][ T8102] syzkaller0: entered promiscuous mode [ 866.639856][ T8102] syzkaller0: entered allmulticast mode [ 866.703842][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 866.901842][ T8109] tipc: Enabling of bearer rejected, already enabled [ 866.921181][ T8109] syzkaller0: mtu less than device minimum [ 866.983098][ T8112] tipc: Enabling of bearer rejected, failed to enable media [ 867.079939][ T8118] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14791'. [ 867.540761][ T8136] rdma_rxe: rxe_newlink: failed to add bond0 [ 867.555922][ T8139] tipc: Enabling of bearer rejected, failed to enable media [ 867.569883][ T8136] netlink: 'syz.1.14794': attribute type 13 has an invalid length. [ 867.580996][ T8139] syzkaller0: entered promiscuous mode [ 867.586525][ T8139] syzkaller0: entered allmulticast mode [ 867.633367][ T8136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 867.671154][ T8143] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 867.748827][ T8151] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 867.759460][ T8151] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 867.795343][ T8151] tipc: Resetting bearer [ 868.094805][ T8167] rdma_rxe: rxe_newlink: failed to add bond0 [ 868.150980][ T8167] netlink: 'syz.3.14804': attribute type 13 has an invalid length. [ 868.244334][ T8170] syzkaller0: entered promiscuous mode [ 868.255129][ T8170] syzkaller0: entered allmulticast mode [ 868.274588][ T8167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 868.292806][ T5926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.310119][ T8179] tipc: Enabling of bearer rejected, already enabled [ 868.485784][ T13] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 868.627821][ T979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.775673][ T8205] netlink: 76 bytes leftover after parsing attributes in process `syz.5.14814'. [ 870.678328][ T8225] tipc: Enabling of bearer rejected, failed to enable media [ 870.711666][ T8228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14818'. [ 870.882036][ T8239] macvlan1: entered promiscuous mode [ 870.887958][ T8239] macvlan1: entered allmulticast mode [ 870.894838][ T8239] bond7: (slave macvlan1): Opening slave failed [ 871.008483][ T8246] netlink: 'syz.2.14824': attribute type 4 has an invalid length. [ 871.069283][ T8249] netlink: 'syz.2.14824': attribute type 4 has an invalid length. [ 871.709229][ T8234] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 871.753127][ T8234] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 872.140043][ T8274] tipc: Enabling of bearer rejected, failed to enable media [ 872.153624][ T8276] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 872.165134][ T8277] syzkaller0: entered promiscuous mode [ 872.188682][ T8277] syzkaller0: entered allmulticast mode [ 872.198587][ T8276] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 872.443068][ T8287] tipc: Resetting bearer [ 872.637286][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14836'. [ 872.666491][ T8300] syzkaller0: entered promiscuous mode [ 872.686319][ T8300] syzkaller0: entered allmulticast mode [ 872.706416][ T8302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14838'. [ 872.770514][ T7472] smc: removing ib device syz2 [ 872.847700][T27863] vxcan1 speed is unknown, defaulting to 1000 [ 872.861318][T27863] syz2: Port: 1 Link DOWN [ 872.923032][ T8307] syzkaller0: entered promiscuous mode [ 872.930273][ T8307] syzkaller0: entered allmulticast mode [ 873.011980][ T8309] tipc: Enabling of bearer rejected, already enabled [ 873.027101][ T8309] tipc: Resetting bearer [ 873.043746][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 873.057873][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 873.083204][ T8312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 873.124211][ T8314] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 873.132748][ T8314] tipc: Resetting bearer [ 873.250646][ T8320] tipc: Enabling of bearer rejected, failed to enable media [ 873.276245][ T8320] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 873.298897][ T8320] tipc: Resetting bearer [ 873.522512][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14846'. [ 873.869343][ T8345] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14848'. [ 875.498939][ T1305] clip:clip_start_xmit: skb_dst(skb) == NULL [ 875.505050][ T1305] lec:lec_start_xmit: lec0:No lecd attached [ 875.562480][ T8355] bond5: option mode: unable to set because the bond device has slaves [ 875.633809][ T8355] bond5: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 875.688951][ T13] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 875.818651][ T60] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 875.850475][ T8374] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 875.865913][ T8374] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 875.939449][ T5234] udevd[5234]: worker [8304] terminated by signal 33 (Unknown signal 33) [ 875.962979][ T5234] udevd[5234]: worker [8305] terminated by signal 33 (Unknown signal 33) [ 876.033213][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14860'. [ 876.058386][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14860'. [ 876.212077][ T8392] netlink: 'syz.3.14862': attribute type 4 has an invalid length. [ 876.304753][ T8396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 876.683520][ T8408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14868'. [ 876.879543][ T8412] tipc: Enabling of bearer rejected, failed to enable media [ 877.215905][ T8414] ifb0 (unregistering): left promiscuous mode [ 877.566131][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14878'. [ 877.677508][ T8446] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14880'. [ 877.990790][ T8457] tipc: Enabling of bearer rejected, failed to enable media [ 878.821610][ T8492] rdma_rxe: rxe_newlink: failed to add bond0 [ 878.832984][ T8492] netlink: 'syz.3.14891': attribute type 13 has an invalid length. [ 878.876822][ T8492] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 878.901865][T27863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 878.928436][ T8496] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 879.066470][ T8501] syzkaller0: entered promiscuous mode [ 879.074770][ T8501] syzkaller0: entered allmulticast mode [ 879.131304][ T8501] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 879.387700][ T5947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 879.545731][ T8523] tipc: Enabling of bearer rejected, already enabled [ 879.616023][ T8526] bond0: (slave bond_slave_0): Releasing backup interface [ 879.638300][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 879.671560][ T8526] bond0: (slave bond_slave_1): Releasing backup interface [ 879.726192][ T8526] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.742298][ T8526] bond1: (slave geneve2): Releasing active interface [ 879.761465][ T8526] bond2: (slave geneve3): Releasing active interface [ 879.785937][ T8526] bond3: (slave bridge1): Releasing active interface [ 879.799843][ T8526] bond5: (slave veth13): Releasing backup interface [ 879.815934][ T8526] bond6: (slave veth17): Releasing active interface [ 879.837777][ T979] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 879.951494][ T8544] tipc: Enabling of bearer rejected, already enabled [ 880.112347][ T8553] tipc: Enabling of bearer rejected, already enabled [ 880.272789][ T8560] netlink: 'syz.5.14912': attribute type 39 has an invalid length. [ 880.499324][ T8565] hsr0 speed is unknown, defaulting to 1000 [ 881.169059][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 881.177272][ C0] lec:lec_tx_timeout: lec0 [ 881.395271][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14922'. [ 881.619894][ T8604] tipc: Enabling of bearer rejected, already enabled [ 881.640575][ T8602] netlink: 'syz.0.14926': attribute type 13 has an invalid length. [ 881.656651][ T8602] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 881.887596][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 881.908535][ T8613] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 882.184780][ T8630] syzkaller0: entered promiscuous mode [ 882.195032][ T8630] syzkaller0: entered allmulticast mode [ 882.247149][ T8631] tipc: Enabling of bearer rejected, already enabled [ 882.321961][ T8638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.517879][ T8640] tipc: Enabling of bearer rejected, failed to enable media [ 882.534825][ T8643] syzkaller0: entered promiscuous mode [ 882.540495][ T8643] syzkaller0: entered allmulticast mode [ 882.686858][ T8647] tipc: Enabling of bearer rejected, already enabled [ 882.715153][ T8649] syzkaller0: entered promiscuous mode [ 882.725407][ T8649] syzkaller0: entered allmulticast mode [ 882.740190][ T8649] tipc: Enabled bearer , priority 0 [ 882.757674][ T8649] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 882.798086][ T8649] tipc: Resetting bearer [ 882.805777][ T8648] tipc: Resetting bearer [ 882.824646][ T8648] tipc: Disabling bearer [ 882.834857][ T8651] syzkaller0: entered promiscuous mode [ 882.840856][ T8651] syzkaller0: entered allmulticast mode [ 882.854755][ T8651] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1514) ! [ 883.049649][ T8660] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 883.190243][ T8664] tipc: Enabled bearer , priority 0 [ 883.208678][ T8667] syzkaller0: entered promiscuous mode [ 883.215332][ T8667] syzkaller0: entered allmulticast mode [ 883.226852][ T8664] syzkaller0: entered promiscuous mode [ 883.234593][ T8664] syzkaller0: entered allmulticast mode [ 883.264342][ T8669] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 883.348363][ T8673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14952'. [ 883.369428][ T8664] tipc: Resetting bearer [ 883.395821][ T8663] tipc: Resetting bearer [ 883.494934][ T8663] tipc: Disabling bearer [ 883.514810][ T8676] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 883.584845][ T8679] tipc: Enabled bearer , priority 0 [ 883.721736][ T8679] syzkaller0: entered promiscuous mode [ 883.732842][ T8679] syzkaller0: entered allmulticast mode [ 883.779308][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14958'. [ 883.794379][ T8679] tipc: Resetting bearer [ 883.816673][ T8678] tipc: Resetting bearer [ 883.911492][ T8678] tipc: Disabling bearer [ 883.959706][ T8696] mac80211_hwsim hwsim7 syzkaller0: left promiscuous mode [ 883.970348][ T8696] mac80211_hwsim hwsim7 syzkaller0: left allmulticast mode [ 884.112065][ T8699] tipc: Enabled bearer , priority 0 [ 884.179669][ T8694] syzkaller0: entered promiscuous mode [ 884.185253][ T8694] syzkaller0: entered allmulticast mode [ 884.220132][ T8701] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 884.231472][ T8701] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 884.246639][ T8701] sch_tbf: burst 4 is lower than device syzkaller0 mtu (313) ! [ 884.274149][ T8694] tipc: Resetting bearer [ 884.283138][ T8703] tipc: Enabling of bearer rejected, failed to enable media [ 884.294645][ T8692] tipc: Resetting bearer [ 884.327814][ T8692] tipc: Disabling bearer [ 884.480709][ T8709] tipc: Enabling of bearer rejected, already enabled [ 884.558482][ T8719] netlink: 'syz.1.14969': attribute type 1 has an invalid length. [ 884.602201][ T8719] 8021q: adding VLAN 0 to HW filter on device bond14 [ 884.729088][ T8719] bond14: (slave veth25): Enslaving as an active interface with a down link [ 884.812118][ T8727] veth27: entered promiscuous mode [ 884.834488][ T8727] bond14: (slave veth27): Enslaving as an active interface with a down link [ 884.864226][ T8719] vlan2: entered allmulticast mode [ 884.873877][ T8719] bond14: entered allmulticast mode [ 884.885821][ T8719] bond14: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 884.958593][ T8733] tipc: Enabled bearer , priority 0 [ 884.967267][ T8733] syzkaller0: entered promiscuous mode [ 884.973659][ T8733] syzkaller0: entered allmulticast mode [ 884.997766][ T8733] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 885.060603][ T8733] tipc: Resetting bearer [ 885.081785][ T8732] tipc: Resetting bearer [ 885.125836][ T8732] tipc: Disabling bearer [ 885.145689][ T8744] tipc: Enabling of bearer rejected, already enabled [ 885.156263][ T8746] tipc: Enabling of bearer rejected, already enabled [ 885.270316][ T8750] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14977'. [ 885.325907][ T8753] hsr0 speed is unknown, defaulting to 1000 [ 885.457292][ T8754] hsr0 speed is unknown, defaulting to 1000 [ 885.595490][ T8767] netlink: 'syz.3.14981': attribute type 13 has an invalid length. [ 885.615509][ T8767] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 885.638662][T27863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 885.854008][ T8773] hsr0 speed is unknown, defaulting to 1000 [ 886.299219][ T8781] tipc: Enabled bearer , priority 0 [ 886.321843][ T8781] syzkaller0: entered promiscuous mode [ 886.347509][ T8781] syzkaller0: entered allmulticast mode [ 886.396622][ T8781] tipc: Resetting bearer [ 886.465009][ T8780] tipc: Resetting bearer [ 886.549821][ T8780] tipc: Disabling bearer [ 886.687782][T27863] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 886.702921][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14994'. [ 886.712807][ T8801] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 886.834840][ T8805] tipc: Enabled bearer , priority 0 [ 886.844827][ T8805] syzkaller0: entered promiscuous mode [ 886.853890][ T8805] syzkaller0: entered allmulticast mode [ 886.886162][ T8805] tipc: Resetting bearer [ 886.905813][ T8804] tipc: Resetting bearer [ 886.947614][ T8804] tipc: Disabling bearer [ 887.329093][ T5873] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 887.399096][ T8831] syzkaller0: entered promiscuous mode [ 887.431465][ T8831] syzkaller0: entered allmulticast mode [ 888.070511][ T8865] tipc: Enabling of bearer rejected, already enabled [ 888.326552][ T8752] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 888.350026][ T8752] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 888.360371][ T8752] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 888.372373][ T8752] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 888.386314][ T8752] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 888.556050][ T8888] syzkaller0: entered promiscuous mode [ 888.572488][ T8888] syzkaller0: entered allmulticast mode [ 888.610547][ T8877] hsr0 speed is unknown, defaulting to 1000 [ 888.867869][ T8900] tipc: Enabling of bearer rejected, already enabled [ 889.092388][ T8912] netlink: 'syz.0.15038': attribute type 13 has an invalid length. [ 889.118525][ T8914] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15036'. [ 889.156278][ T8912] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 889.406008][ T8877] chnl_net:caif_netlink_parms(): no params data found [ 889.465798][ T8930] netlink: 'syz.0.15040': attribute type 39 has an invalid length. [ 889.753108][ T8947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15046'. [ 889.794266][ T8877] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.824073][ T8877] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.854646][ T8877] bridge_slave_0: entered allmulticast mode [ 889.884125][ T8877] bridge_slave_0: entered promiscuous mode [ 889.913346][ T8877] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.939912][ T8877] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.954349][ T8877] bridge_slave_1: entered allmulticast mode [ 889.976097][ T8877] bridge_slave_1: entered promiscuous mode [ 890.005644][ T8955] netlink: 'syz.1.15049': attribute type 13 has an invalid length. [ 890.062464][ T8955] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 890.161216][ T8877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.189272][ T8877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 890.291588][ T8877] team0: Port device team_slave_0 added [ 890.312187][ T8966] tipc: Enabled bearer , priority 0 [ 890.326224][ T8877] team0: Port device team_slave_1 added [ 890.364204][ T8961] syzkaller0: entered promiscuous mode [ 890.370628][ T8961] syzkaller0: entered allmulticast mode [ 890.410113][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 890.420857][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.450297][ T5873] Bluetooth: hci5: command tx timeout [ 890.454294][ T8877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 890.494704][ T8966] tipc: Resetting bearer [ 890.510818][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 890.524205][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 890.551027][ T8877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 890.565799][ T8960] tipc: Resetting bearer [ 890.586272][ T8960] tipc: Disabling bearer [ 890.603417][ T8977] tipc: Enabling of bearer rejected, failed to enable media [ 890.695541][ T8877] hsr_slave_0: entered promiscuous mode [ 890.704783][ T8877] hsr_slave_1: entered promiscuous mode [ 890.712349][ T8877] debugfs: 'hsr0' already exists in 'hsr' [ 890.719497][ T8877] Cannot create hsr debugfs directory [ 890.794740][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15060'. [ 891.273593][ T8877] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 891.291208][ T8877] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 891.309107][ T9001] netlink: 'syz.1.15064': attribute type 39 has an invalid length. [ 891.356206][ T8877] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 891.393433][ T8877] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 891.415457][ T9007] netlink: ct family unspecified [ 891.432345][ T9007] openvswitch: netlink: Actions may not be safe on all matching packets [ 891.662827][ T8877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 891.681900][ T9021] tipc: Enabled bearer , priority 0 [ 891.708050][ T9021] syzkaller0: entered promiscuous mode [ 891.727295][ T9021] syzkaller0: entered allmulticast mode [ 891.769238][ T9030] IPv4: Oversized IP packet from 127.202.26.0 [ 891.846281][ T9021] tipc: Resetting bearer [ 891.871422][ T8877] 8021q: adding VLAN 0 to HW filter on device team0 [ 891.908490][ T1014] bridge0: port 1(bridge_slave_0) entered blocking state [ 891.915840][ T1014] bridge0: port 1(bridge_slave_0) entered forwarding state [ 891.956705][ T9019] tipc: Resetting bearer [ 892.025599][ T9019] tipc: Disabling bearer [ 892.065043][ T1014] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.072295][ T1014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 892.530106][ T5873] Bluetooth: hci5: command tx timeout [ 892.552666][ T8877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.746492][ T9063] netlink: 104 bytes leftover after parsing attributes in process `syz.1.15078'. [ 892.784598][ T9062] syzkaller0: entered promiscuous mode [ 892.795131][ T9062] syzkaller0: entered allmulticast mode [ 893.190715][ T8877] veth0_vlan: entered promiscuous mode [ 893.240044][ T8877] veth1_vlan: entered promiscuous mode [ 893.389510][ T8877] veth0_macvtap: entered promiscuous mode [ 893.444243][ T8877] veth1_macvtap: entered promiscuous mode [ 893.538788][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 893.590081][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 893.644092][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15090'. [ 893.656406][ T1145] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.702640][ T1145] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.743489][ T1145] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 893.792495][ T1145] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.120990][ T9113] syzkaller0: entered promiscuous mode [ 894.126534][ T9113] syzkaller0: entered allmulticast mode [ 894.162603][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.197101][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.264776][ T9118] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 894.343785][ T7474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.387631][ T7474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.609193][ T5873] Bluetooth: hci5: command tx timeout [ 894.836855][ T9142] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 895.132299][ T9155] syzkaller0: entered promiscuous mode [ 895.146343][ T9155] syzkaller0: entered allmulticast mode [ 895.377170][ T9166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 895.596508][ T9175] tipc: Enabling of bearer rejected, failed to enable media [ 895.614758][ T9175] syzkaller0: entered promiscuous mode [ 895.620922][ T9175] syzkaller0: entered allmulticast mode [ 895.961361][ T1145] tipc: Subscription rejected, illegal request [ 896.185682][ T9205] netlink: 'syz.3.15125': attribute type 39 has an invalid length. [ 896.534515][ T9211] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15128'. [ 896.691005][ T5873] Bluetooth: hci5: command tx timeout [ 897.193723][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15134'. [ 897.204808][ T9240] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15135'. [ 897.534205][ T9250] netlink: 'syz.0.15139': attribute type 2 has an invalid length. [ 898.135429][ T9276] hsr0 speed is unknown, defaulting to 1000 [ 898.540453][ T9298] syzkaller0: entered promiscuous mode [ 898.550561][ T9298] syzkaller0: entered allmulticast mode [ 898.763610][ T9308] tipc: Enabling of bearer rejected, already enabled [ 899.105475][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15161'. [ 899.438480][ T9336] syzkaller0: entered promiscuous mode [ 899.447222][ T9336] syzkaller0: entered allmulticast mode [ 899.580206][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15170'. [ 899.737188][ T9347] syzkaller0: entered promiscuous mode [ 899.767147][ T9347] syzkaller0: entered allmulticast mode [ 899.894679][ T9355] netlink: 28 bytes leftover after parsing attributes in process `syz.6.15176'. [ 900.181475][ T9371] netlink: 24 bytes leftover after parsing attributes in process `syz.6.15181'. [ 900.843923][ T9406] syzkaller0: entered promiscuous mode [ 900.871821][ T9406] syzkaller0: entered allmulticast mode [ 901.021651][ T9414] tipc: Started in network mode [ 901.035193][ T9414] tipc: Node identity 6ad285fd28ac, cluster identity 4711 [ 901.052885][ T9414] tipc: Enabled bearer , priority 0 [ 901.096523][ T9419] syzkaller0: entered promiscuous mode [ 901.119581][ T9419] syzkaller0: entered allmulticast mode [ 901.157877][ T9414] tipc: Resetting bearer [ 901.176354][ T9413] tipc: Resetting bearer [ 901.201825][ T9413] tipc: Disabling bearer [ 901.241873][ T9425] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15199'. [ 901.525396][ T9444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15204'. [ 901.829342][ T9457] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15205'. [ 902.055581][ T9468] syzkaller0: entered promiscuous mode [ 902.061944][ T9468] syzkaller0: entered allmulticast mode [ 902.184992][ T9470] rdma_rxe: rxe_newlink: failed to add bond0 [ 902.195395][ T9470] netlink: 'syz.1.15212': attribute type 13 has an invalid length. [ 902.209335][ T9470] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 902.251310][ T9476] netlink: 'syz.0.15214': attribute type 39 has an invalid length. [ 902.749156][ T9496] tipc: Enabling of bearer rejected, already enabled [ 902.851079][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15222'. [ 903.164852][ T9508] rdma_rxe: rxe_newlink: failed to add bond0 [ 903.202346][ T9508] netlink: 'syz.1.15226': attribute type 13 has an invalid length. [ 903.235061][ T9508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 903.540517][ T9533] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15234'. [ 904.013032][ T9548] netlink: 'syz.1.15238': attribute type 39 has an invalid length. [ 904.359477][ T9562] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 904.504309][ T9568] rdma_rxe: rxe_newlink: failed to add bond0 [ 904.591791][ T9568] netlink: 'syz.5.15244': attribute type 13 has an invalid length. [ 904.650805][ T9568] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 904.690099][ T5947] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 904.886081][ T9581] netlink: 16 bytes leftover after parsing attributes in process `syz.1.15249'. [ 904.895745][ T9582] netlink: 200 bytes leftover after parsing attributes in process `syz.3.15248'. [ 905.124547][ T9591] netlink: 48 bytes leftover after parsing attributes in process `syz.5.15253'. [ 905.368833][ T9606] tipc: Enabled bearer , priority 0 [ 905.389207][ T9606] syzkaller0: entered promiscuous mode [ 905.403948][ T9606] syzkaller0: entered allmulticast mode [ 905.420941][ T9613] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.15259'. [ 905.458147][ T9606] tipc: Resetting bearer [ 905.505783][ T9604] tipc: Resetting bearer [ 905.612566][ T9604] tipc: Disabling bearer [ 905.647703][ T5947] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 905.718738][ T9623] netlink: 900 bytes leftover after parsing attributes in process `syz.3.15262'. [ 906.357146][ T9655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15271'. [ 906.410007][ T9658] rdma_rxe: rxe_newlink: failed to add bond0 [ 906.442392][ T9658] netlink: 'syz.5.15272': attribute type 13 has an invalid length. [ 906.559558][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 906.599891][ T9658] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 906.827573][ T5926] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 906.877836][ T9670] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15276'. [ 906.901542][ T9673] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.15275'. [ 907.278306][ T9691] syzkaller1: entered promiscuous mode [ 907.307173][ T9691] syzkaller1: entered allmulticast mode [ 907.809941][ T9720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15290'. [ 907.913912][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.15294'. [ 908.744690][ T5926] IPVS: starting estimator thread 0... [ 908.744914][ T9767] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 908.850697][ T9769] IPVS: using max 23 ests per chain, 55200 per kthread [ 908.956874][ T9780] tipc: Enabled bearer , priority 0 [ 908.966015][ T9780] syzkaller0: entered promiscuous mode [ 908.972330][ T9780] syzkaller0: entered allmulticast mode [ 908.994879][ T9780] tipc: Resetting bearer [ 909.013914][ T9779] tipc: Resetting bearer [ 909.074384][ T9779] tipc: Disabling bearer [ 909.338782][ T9796] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 910.123216][ T9836] __nla_validate_parse: 4 callbacks suppressed [ 910.123236][ T9836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15326'. [ 910.349591][ T9842] siw: device registration error -23 [ 910.686164][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15336'. [ 911.130227][ T9872] hsr0 speed is unknown, defaulting to 1000 [ 911.268584][ T9878] hsr0 speed is unknown, defaulting to 1000 [ 911.603433][ T9904] netlink: 'syz.0.15352': attribute type 12 has an invalid length. [ 912.384553][ T9937] tipc: Enabling of bearer rejected, failed to enable media [ 912.409856][ T9937] syzkaller0: entered promiscuous mode [ 912.429784][ T9937] syzkaller0: entered allmulticast mode [ 912.587666][ T9943] hsr0 speed is unknown, defaulting to 1000 [ 912.623491][ T9944] hsr0 speed is unknown, defaulting to 1000 [ 912.637247][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.5.15367'. [ 912.846427][ T9952] hsr0 speed is unknown, defaulting to 1000 [ 913.093204][ T9963] rdma_rxe: rxe_newlink: failed to add bond0 [ 913.310428][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15374'. [ 913.684699][ T9991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15382'. [ 914.142066][T10007] netlink: 'syz.3.15388': attribute type 4 has an invalid length. [ 914.165508][T10007] netlink: 'syz.3.15388': attribute type 4 has an invalid length. [ 914.346948][T10013] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 914.511947][T10022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15391'. [ 915.363081][T10051] hsr0 speed is unknown, defaulting to 1000 [ 915.522544][T10060] tipc: Enabling of bearer rejected, failed to enable media [ 916.038813][T10079] tipc: Enabled bearer , priority 0 [ 916.046816][T10079] syzkaller0: entered promiscuous mode [ 916.058816][T10079] syzkaller0: entered allmulticast mode [ 916.076470][T10079] tipc: Resetting bearer [ 916.093010][T10077] tipc: Resetting bearer [ 916.132715][T10077] tipc: Disabling bearer [ 916.193277][T10080] [ 916.195672][T10080] ====================================================== [ 916.203065][T10080] WARNING: possible circular locking dependency detected [ 916.210129][T10080] syzkaller #0 Not tainted [ 916.214570][T10080] ------------------------------------------------------ [ 916.221700][T10080] syz.0.15412/10080 is trying to acquire lock: [ 916.227879][T10080] ffff888024ed1988 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x19b/0x450 [ 916.237345][T10080] [ 916.237345][T10080] but task is already holding lock: [ 916.244727][T10080] ffff888024ed1448 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 916.254939][T10080] [ 916.254939][T10080] which lock already depends on the new lock. [ 916.254939][T10080] [ 916.265347][T10080] [ 916.265347][T10080] the existing dependency chain (in reverse order) is: [ 916.274376][T10080] [ 916.274376][T10080] -> #6 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 916.283001][T10080] lock_acquire+0x120/0x360 [ 916.288052][T10080] blk_alloc_queue+0x538/0x620 [ 916.293355][T10080] __blk_mq_alloc_disk+0x15c/0x340 [ 916.299086][T10080] nbd_dev_add+0x46c/0xae0 [ 916.304033][T10080] nbd_init+0x168/0x1f0 [ 916.308727][T10080] do_one_initcall+0x233/0x820 [ 916.314038][T10080] do_initcall_level+0x104/0x190 [ 916.319607][T10080] do_initcalls+0x59/0xa0 [ 916.324485][T10080] kernel_init_freeable+0x334/0x4b0 [ 916.330236][T10080] kernel_init+0x1d/0x1d0 [ 916.335106][T10080] ret_from_fork+0x439/0x7d0 [ 916.340228][T10080] ret_from_fork_asm+0x1a/0x30 [ 916.345544][T10080] [ 916.345544][T10080] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 916.352774][T10080] lock_acquire+0x120/0x360 [ 916.357820][T10080] fs_reclaim_acquire+0x72/0x100 [ 916.363370][T10080] __kmalloc_cache_node_noprof+0x44/0x3d0 [ 916.369634][T10080] create_worker+0x112/0x720 [ 916.374770][T10080] workqueue_prepare_cpu+0xe4/0x170 [ 916.380507][T10080] cpuhp_invoke_callback+0x442/0x860 [ 916.386332][T10080] _cpu_up+0x2c9/0x580 [ 916.390933][T10080] cpu_up+0x1d2/0x220 [ 916.395450][T10080] cpuhp_bringup_mask+0xb2/0x1a0 [ 916.400920][T10080] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 916.407263][T10080] bringup_nonboot_cpus+0x17/0x30 [ 916.412822][T10080] smp_init+0x32/0x110 [ 916.417428][T10080] kernel_init_freeable+0x316/0x4b0 [ 916.423156][T10080] kernel_init+0x1d/0x1d0 [ 916.428021][T10080] ret_from_fork+0x439/0x7d0 [ 916.433149][T10080] ret_from_fork_asm+0x1a/0x30 [ 916.438457][T10080] [ 916.438457][T10080] -> #4 (cpu_hotplug_lock){++++}-{0:0}: [ 916.446291][T10080] lock_acquire+0x120/0x360 [ 916.451338][T10080] cpus_read_lock+0x42/0x160 [ 916.456485][T10080] static_key_slow_inc+0x12/0x30 [ 916.461962][T10080] nbd_genl_reconfigure+0xf24/0x1870 [ 916.467986][T10080] genl_family_rcv_msg_doit+0x212/0x300 [ 916.474073][T10080] genl_rcv_msg+0x60e/0x790 [ 916.479115][T10080] netlink_rcv_skb+0x208/0x470 [ 916.484422][T10080] genl_rcv+0x28/0x40 [ 916.488943][T10080] netlink_unicast+0x82f/0x9e0 [ 916.494240][T10080] netlink_sendmsg+0x805/0xb30 [ 916.499541][T10080] __sock_sendmsg+0x219/0x270 [ 916.504764][T10080] ____sys_sendmsg+0x505/0x830 [ 916.510076][T10080] ___sys_sendmsg+0x21f/0x2a0 [ 916.515288][T10080] __x64_sys_sendmsg+0x19b/0x260 [ 916.520774][T10080] do_syscall_64+0xfa/0x3b0 [ 916.525814][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.532247][T10080] [ 916.532247][T10080] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 916.539943][T10080] lock_acquire+0x120/0x360 [ 916.544993][T10080] __mutex_lock+0x187/0x1350 [ 916.550120][T10080] nbd_queue_rq+0x257/0xf10 [ 916.555185][T10080] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 916.561270][T10080] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 916.568126][T10080] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 916.574635][T10080] blk_mq_run_hw_queue+0x348/0x4f0 [ 916.580289][T10080] blk_mq_dispatch_list+0xd0c/0xe00 [ 916.586121][T10080] blk_mq_flush_plug_list+0x469/0x550 [ 916.592031][T10080] __blk_flush_plug+0x3d3/0x4b0 [ 916.597518][T10080] __submit_bio+0x2d3/0x5a0 [ 916.602567][T10080] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 916.608753][T10080] block_read_full_folio+0x599/0x830 [ 916.614671][T10080] filemap_read_folio+0x117/0x380 [ 916.620327][T10080] do_read_cache_folio+0x350/0x590 [ 916.626087][T10080] read_part_sector+0xb6/0x2b0 [ 916.631400][T10080] adfspart_check_ICS+0xa4/0xa50 [ 916.636876][T10080] bdev_disk_changed+0x75c/0x14b0 [ 916.642441][T10080] blkdev_get_whole+0x380/0x510 [ 916.647837][T10080] bdev_open+0x31e/0xd30 [ 916.652620][T10080] blkdev_open+0x457/0x600 [ 916.657589][T10080] do_dentry_open+0x950/0x13f0 [ 916.662895][T10080] vfs_open+0x3b/0x340 [ 916.667498][T10080] path_openat+0x2ee5/0x3830 [ 916.672618][T10080] do_filp_open+0x1fa/0x410 [ 916.677656][T10080] do_sys_openat2+0x121/0x1c0 [ 916.682863][T10080] __x64_sys_openat+0x138/0x170 [ 916.688268][T10080] do_syscall_64+0xfa/0x3b0 [ 916.693303][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.699730][T10080] [ 916.699730][T10080] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 916.706966][T10080] lock_acquire+0x120/0x360 [ 916.712038][T10080] __mutex_lock+0x187/0x1350 [ 916.717179][T10080] nbd_queue_rq+0xc8/0xf10 [ 916.722135][T10080] blk_mq_dispatch_rq_list+0x4bd/0x1900 [ 916.728221][T10080] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 916.735084][T10080] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 916.741604][T10080] blk_mq_run_hw_queue+0x348/0x4f0 [ 916.747264][T10080] blk_mq_dispatch_list+0xd0c/0xe00 [ 916.752993][T10080] blk_mq_flush_plug_list+0x469/0x550 [ 916.758900][T10080] __blk_flush_plug+0x3d3/0x4b0 [ 916.764299][T10080] __submit_bio+0x2d3/0x5a0 [ 916.769353][T10080] submit_bio_noacct_nocheck+0x4ab/0xb50 [ 916.775699][T10080] block_read_full_folio+0x599/0x830 [ 916.781527][T10080] filemap_read_folio+0x117/0x380 [ 916.787081][T10080] do_read_cache_folio+0x350/0x590 [ 916.792747][T10080] read_part_sector+0xb6/0x2b0 [ 916.798058][T10080] adfspart_check_ICS+0xa4/0xa50 [ 916.803710][T10080] bdev_disk_changed+0x75c/0x14b0 [ 916.809290][T10080] blkdev_get_whole+0x380/0x510 [ 916.814686][T10080] bdev_open+0x31e/0xd30 [ 916.819470][T10080] blkdev_open+0x457/0x600 [ 916.824426][T10080] do_dentry_open+0x950/0x13f0 [ 916.829726][T10080] vfs_open+0x3b/0x340 [ 916.834333][T10080] path_openat+0x2ee5/0x3830 [ 916.839468][T10080] do_filp_open+0x1fa/0x410 [ 916.844526][T10080] do_sys_openat2+0x121/0x1c0 [ 916.849739][T10080] __x64_sys_openat+0x138/0x170 [ 916.855149][T10080] do_syscall_64+0xfa/0x3b0 [ 916.860186][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.866611][T10080] [ 916.866611][T10080] -> #1 (set->srcu){.+.+}-{0:0}: [ 916.873761][T10080] lock_sync+0xba/0x160 [ 916.878470][T10080] __synchronize_srcu+0x96/0x3a0 [ 916.883947][T10080] elevator_switch+0x12b/0x640 [ 916.889248][T10080] elevator_change+0x2d4/0x450 [ 916.894542][T10080] elevator_set_default+0x186/0x260 [ 916.900272][T10080] blk_register_queue+0x34e/0x3f0 [ 916.905832][T10080] __add_disk+0x677/0xd50 [ 916.910694][T10080] add_disk_fwnode+0xfc/0x480 [ 916.915990][T10080] nbd_dev_add+0x717/0xae0 [ 916.920933][T10080] nbd_init+0x168/0x1f0 [ 916.925638][T10080] do_one_initcall+0x233/0x820 [ 916.931060][T10080] do_initcall_level+0x104/0x190 [ 916.936530][T10080] do_initcalls+0x59/0xa0 [ 916.941401][T10080] kernel_init_freeable+0x334/0x4b0 [ 916.947217][T10080] kernel_init+0x1d/0x1d0 [ 916.952080][T10080] ret_from_fork+0x439/0x7d0 [ 916.957200][T10080] ret_from_fork_asm+0x1a/0x30 [ 916.962527][T10080] [ 916.962527][T10080] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 916.970396][T10080] validate_chain+0xb9b/0x2140 [ 916.975694][T10080] __lock_acquire+0xab9/0xd20 [ 916.980909][T10080] lock_acquire+0x120/0x360 [ 916.985953][T10080] __mutex_lock+0x187/0x1350 [ 916.991076][T10080] elevator_change+0x19b/0x450 [ 916.996372][T10080] elevator_set_none+0x42/0xb0 [ 917.001668][T10080] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 917.008006][T10080] nbd_start_device+0x17f/0xb10 [ 917.013389][T10080] nbd_genl_connect+0x135b/0x18f0 [ 917.018937][T10080] genl_family_rcv_msg_doit+0x212/0x300 [ 917.025019][T10080] genl_rcv_msg+0x60e/0x790 [ 917.030056][T10080] netlink_rcv_skb+0x208/0x470 [ 917.035362][T10080] genl_rcv+0x28/0x40 [ 917.039882][T10080] netlink_unicast+0x82f/0x9e0 [ 917.045192][T10080] netlink_sendmsg+0x805/0xb30 [ 917.050500][T10080] __sock_sendmsg+0x219/0x270 [ 917.055721][T10080] ____sys_sendmsg+0x505/0x830 [ 917.061019][T10080] ___sys_sendmsg+0x21f/0x2a0 [ 917.066317][T10080] __x64_sys_sendmsg+0x19b/0x260 [ 917.071791][T10080] do_syscall_64+0xfa/0x3b0 [ 917.076834][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.083258][T10080] [ 917.083258][T10080] other info that might help us debug this: [ 917.083258][T10080] [ 917.093493][T10080] Chain exists of: [ 917.093493][T10080] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#49 [ 917.093493][T10080] [ 917.107341][T10080] Possible unsafe locking scenario: [ 917.107341][T10080] [ 917.114886][T10080] CPU0 CPU1 [ 917.120257][T10080] ---- ---- [ 917.125715][T10080] lock(&q->q_usage_counter(io)#49); [ 917.131107][T10080] lock(fs_reclaim); [ 917.137745][T10080] lock(&q->q_usage_counter(io)#49); [ 917.145672][T10080] lock(&q->elevator_lock); [ 917.150281][T10080] [ 917.150281][T10080] *** DEADLOCK *** [ 917.150281][T10080] [ 917.158434][T10080] 6 locks held by syz.0.15412/10080: [ 917.163721][T10080] #0: ffffffff8f59f870 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 917.171931][T10080] #1: ffffffff8f59f688 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 917.180923][T10080] #2: ffff888024ee2988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x1aa0 [ 917.192441][T10080] #3: ffff888024ee28d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x1aa0 [ 917.203446][T10080] #4: ffff888024ed1448 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: elevator_change+0x180/0x450 [ 917.214195][T10080] #5: ffff888024ed1480 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: elevator_change+0x180/0x450 [ 917.225104][T10080] [ 917.225104][T10080] stack backtrace: [ 917.231000][T10080] CPU: 0 UID: 0 PID: 10080 Comm: syz.0.15412 Not tainted syzkaller #0 PREEMPT(full) [ 917.231022][T10080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 917.231034][T10080] Call Trace: [ 917.231044][T10080] [ 917.231054][T10080] dump_stack_lvl+0x189/0x250 [ 917.231080][T10080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 917.231101][T10080] ? __pfx__printk+0x10/0x10 [ 917.231127][T10080] ? print_lock_name+0xde/0x100 [ 917.231154][T10080] print_circular_bug+0x2ee/0x310 [ 917.231177][T10080] check_noncircular+0x134/0x160 [ 917.231199][T10080] validate_chain+0xb9b/0x2140 [ 917.231229][T10080] __lock_acquire+0xab9/0xd20 [ 917.231259][T10080] ? elevator_change+0x19b/0x450 [ 917.231275][T10080] lock_acquire+0x120/0x360 [ 917.231306][T10080] ? elevator_change+0x19b/0x450 [ 917.231330][T10080] __mutex_lock+0x187/0x1350 [ 917.231349][T10080] ? elevator_change+0x19b/0x450 [ 917.231367][T10080] ? xa_find_after+0xae/0x430 [ 917.231393][T10080] ? xa_find_after+0x402/0x430 [ 917.231415][T10080] ? elevator_change+0x19b/0x450 [ 917.231430][T10080] ? xa_find_after+0xae/0x430 [ 917.231453][T10080] ? __pfx___mutex_lock+0x10/0x10 [ 917.231476][T10080] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 917.231502][T10080] elevator_change+0x19b/0x450 [ 917.231518][T10080] ? elevator_set_none+0x37/0xb0 [ 917.231536][T10080] elevator_set_none+0x42/0xb0 [ 917.231556][T10080] blk_mq_update_nr_hw_queues+0x598/0x1aa0 [ 917.231587][T10080] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 917.231617][T10080] ? sysfs_add_file_mode_ns+0x259/0x300 [ 917.231650][T10080] nbd_start_device+0x17f/0xb10 [ 917.231673][T10080] ? device_create_file+0xf4/0x1c0 [ 917.231694][T10080] nbd_genl_connect+0x135b/0x18f0 [ 917.231717][T10080] ? __pfx_nbd_genl_connect+0x10/0x10 [ 917.231740][T10080] ? __nla_parse+0x40/0x60 [ 917.231760][T10080] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 917.231791][T10080] genl_family_rcv_msg_doit+0x212/0x300 [ 917.231820][T10080] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 917.231852][T10080] ? stack_trace_save+0x9c/0xe0 [ 917.231876][T10080] genl_rcv_msg+0x60e/0x790 [ 917.231903][T10080] ? __pfx_genl_rcv_msg+0x10/0x10 [ 917.231926][T10080] ? __pfx_nbd_genl_connect+0x10/0x10 [ 917.231950][T10080] netlink_rcv_skb+0x208/0x470 [ 917.231967][T10080] ? __lock_acquire+0xab9/0xd20 [ 917.231993][T10080] ? __pfx_genl_rcv_msg+0x10/0x10 [ 917.232017][T10080] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 917.232044][T10080] ? down_read+0x1ad/0x2e0 [ 917.232066][T10080] genl_rcv+0x28/0x40 [ 917.232088][T10080] netlink_unicast+0x82f/0x9e0 [ 917.232120][T10080] ? __pfx_netlink_unicast+0x10/0x10 [ 917.232148][T10080] ? netlink_sendmsg+0x642/0xb30 [ 917.232166][T10080] ? skb_put+0x11b/0x210 [ 917.232187][T10080] netlink_sendmsg+0x805/0xb30 [ 917.232211][T10080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 917.232231][T10080] ? aa_sock_msg_perm+0xf1/0x1d0 [ 917.232250][T10080] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 917.232269][T10080] ? __pfx_netlink_sendmsg+0x10/0x10 [ 917.232288][T10080] __sock_sendmsg+0x219/0x270 [ 917.232324][T10080] ____sys_sendmsg+0x505/0x830 [ 917.232350][T10080] ? __pfx_____sys_sendmsg+0x10/0x10 [ 917.232376][T10080] ? import_iovec+0x74/0xa0 [ 917.232401][T10080] ___sys_sendmsg+0x21f/0x2a0 [ 917.232425][T10080] ? __pfx____sys_sendmsg+0x10/0x10 [ 917.232464][T10080] ? __fget_files+0x2a/0x420 [ 917.232479][T10080] ? __fget_files+0x3a0/0x420 [ 917.232499][T10080] __x64_sys_sendmsg+0x19b/0x260 [ 917.232523][T10080] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 917.232551][T10080] ? rcu_is_watching+0x15/0xb0 [ 917.232571][T10080] ? do_syscall_64+0xbe/0x3b0 [ 917.232593][T10080] do_syscall_64+0xfa/0x3b0 [ 917.232612][T10080] ? lockdep_hardirqs_on+0x9c/0x150 [ 917.232630][T10080] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.232647][T10080] ? clear_bhb_loop+0x60/0xb0 [ 917.232668][T10080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.232685][T10080] RIP: 0033:0x7f0d9b18eec9 [ 917.232703][T10080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.232718][T10080] RSP: 002b:00007f0d9bf3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 917.232736][T10080] RAX: ffffffffffffffda RBX: 00007f0d9b3e5fa0 RCX: 00007f0d9b18eec9 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 917.232750][T10080] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000004 [ 917.232762][T10080] RBP: 00007f0d9b211f91 R08: 0000000000000000 R09: 0000000000000000 [ 917.232773][T10080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.232784][T10080] R13: 00007f0d9b3e6038 R14: 00007f0d9b3e5fa0 R15: 00007ffea3972048 [ 917.232806][T10080] [ 918.011587][ T5873] block nbd0: Receive control failed (result -32) [ 918.017982][ T8752] block nbd0: Receive control failed (result -32) [ 918.047893][T10080] nbd0: detected capacity change from 0 to 127 [ 918.056225][ T9873] block nbd0: Dead connection, failed to find a fallback [ 918.063795][ T9873] block nbd0: shutting down sockets [ 918.069082][ T9873] blk_print_req_error: 138 callbacks suppressed [ 918.069101][ T9873] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 918.084701][ T9873] buffer_io_error: 138 callbacks suppressed [ 918.084719][ T9873] Buffer I/O error on dev nbd0, logical block 0, async page read [ 918.098874][ T9873] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 918.107983][ T9873] Buffer I/O error on dev nbd0, logical block 1, async page read [ 918.115882][ T9873] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 918.125338][ T9873] Buffer I/O error on dev nbd0, logical block 2, async page read [ 918.133308][ T9873] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 918.142456][ T9873] Buffer I/O error on dev nbd0, logical block 3, async page read [ 918.150751][ T9873] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 918.159966][ T9873] Buffer I/O error on dev nbd0, logical block 0, async page read [ 918.167968][ T9873] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 918.177116][ T9873] Buffer I/O error on dev nbd0, logical block 1, async page read [ 918.185464][ T9873] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 918.194639][ T9873] Buffer I/O error on dev nbd0, logical block 2, async page read [ 918.202653][ T9873] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 918.264026][ T9873] Buffer I/O error on dev nbd0, logical block 3, async page read [ 918.307979][ T9873] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 918.317096][ T9873] Buffer I/O error on dev nbd0, logical block 0, async page read [ 918.348932][ T9873] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 918.370163][ T9873] Buffer I/O error on dev nbd0, logical block 1, async page read [ 918.390912][ T9873] ldm_validate_partition_table(): Disk read failed. [ 918.409405][ T9873] Dev nbd0: unable to read RDB block 0 [ 918.416356][ T9873] nbd0: unable to read partition table [ 918.464546][ T9873] ldm_validate_partition_table(): Disk read failed. [ 918.493657][ T9873] Dev nbd0: unable to read RDB block 0 [ 918.504883][ T9873] nbd0: unable to read partition table [ 921.567551][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog