last executing test programs: 2.496122616s ago: executing program 0 (id=2216): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) close(r2) 2.403571161s ago: executing program 1 (id=2218): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x0, 0x2, 0x3, 0x8}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x241) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001ec0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x0, 0x0, 0x200}, 0x20) 2.295435573s ago: executing program 0 (id=2221): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2.144589853s ago: executing program 2 (id=2223): socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtclass={0x4c, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff2}, {0xa, 0x1}, {0x10, 0xe}}, [@tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0x70}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x40, 0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.112124446s ago: executing program 3 (id=2224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "ffd7"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.995949898s ago: executing program 3 (id=2225): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000840)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 1.952759152s ago: executing program 1 (id=2226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r3], 0x3c}}, 0x0) write(r0, &(0x7f0000000200)="ffffbeffefff0011223344554305000f3200180000eeff112233445500002233445500ff9000", 0x26) 1.928504598s ago: executing program 0 (id=2227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000b80)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000bc0)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000c00), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000180)=@ccm_128={{0x303}, "de03f7d7c75a4714", "8b77262bf61696e7b9b660c11412fcf8", "ca7f9593", "7b73b936b4830fc4"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000001140), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) 1.465700396s ago: executing program 1 (id=2229): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab", @ANYRESOCT], 0xfdef) 1.300236092s ago: executing program 0 (id=2231): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x40, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x40}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, &(0x7f00000000c0)) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) 1.287661106s ago: executing program 4 (id=2232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000002c0)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r2, &(0x7f00000003c0)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) listen(r2, 0x5) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c11223344000800000005000500000005800800080000c1"], 0x4a) 1.215741557s ago: executing program 2 (id=2233): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 1.072271275s ago: executing program 1 (id=2234): r0 = socket$inet6(0xa, 0x5, 0x0) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x1, 0x10000, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x6}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000004c0)=[@in6={0xa, 0x0, 0x0, @local, 0x1}], 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0xfffffffc, @local}], 0x1c) 1.071888585s ago: executing program 3 (id=2235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x913c, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x8, 0x4, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0xd33c, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x800, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) write$tun(r0, &(0x7f0000001200)={@void, @void, @ipv4=@dccp={{0x5, 0x4, 0x2, 0x3d, 0x24, 0x65, 0x0, 0x7f, 0x21, 0x0, @rand_addr=0x64010102, @multicast2}, {{0x4e20, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x3, 0x2, "d22dbf", 0xe, "3638a6"}}}}, 0x24) 1.038703266s ago: executing program 4 (id=2236): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000010000100000000f7ff0000000000000a20000000000a01030000000000000000010000020900010073797a310000000034000000030a01020000000000000000010000000900030073797a310000000008000a40000000040900010073797a3100"], 0xa8}}, 0x8000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 1.002272381s ago: executing program 2 (id=2237): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'team_slave_0\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r3, 0x25, 0x0, @void}, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'veth0_to_team\x00', &(0x7f00000002c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2}}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) 978.903326ms ago: executing program 1 (id=2238): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3c, 0x0, "bb02a3d364ca4c0b42a21d7294bf92594925208a0e2f964e654dc534a6324d4993fcf19b39f3ee818a118a7c211521899f6d8b6d2ccd00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 793.007195ms ago: executing program 4 (id=2239): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r0) sendmsg$NLBL_MGMT_C_ADD(r0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r2) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)={0x24, r3, 0x1, 0x1070bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004004}, 0x80) 728.444558ms ago: executing program 3 (id=2240): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x3, @mcast1, 0x2}, 0x1c) 728.197127ms ago: executing program 2 (id=2241): r0 = epoll_create1(0x80000) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000140)={0x60000008}) bpf$MAP_CREATE(0x0, 0x0, 0x50) 662.002798ms ago: executing program 4 (id=2242): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3d364ca41ffff45244746bd4c0b42a21d7294bf92594925208a0e2f964e654dc534a6324d4993fcf19b39f3ee818a118a7c211521899f6d8b6d2ccd00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 593.323305ms ago: executing program 1 (id=2243): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000900)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000a00)={0x0, 0xffffffffffffff14, &(0x7f0000000a40)={&(0x7f0000000a80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000ac0)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000bc0)=[{&(0x7f0000000780)="89e7ee2c67062f080700000088ca546fbcacebbc59975584f26b701c58ae2810d4e9e69a43a618", 0x27}], 0x1) 519.867723ms ago: executing program 2 (id=2244): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1, 0xa}, {0x0, 0x2}, {0x0, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40c0}, 0xc4) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x0, 0x4}, &(0x7f0000000180)=0x8) 488.078136ms ago: executing program 0 (id=2245): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) ioctl$PPPIOCSFLAGS(r4, 0x40047459, 0x0) 464.018824ms ago: executing program 2 (id=2246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000c80)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000cc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e80)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0xe, 0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@gettfilter={0x24, 0x2e, 0xf3761d7ce266fc7b, 0x70bd2c, 0x65dfdb01, {0x0, 0x0, 0x0, r3, {0x5, 0xc}, {0x0, 0xfff1}, {0xfff1, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x2c000000}, 0x4041080) 348.268956ms ago: executing program 4 (id=2247): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="0000000000303e97380e90231bdbdaf6a4bd77eabcd3866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9d00000c0a498396b28c7d1784d04aa38922721cb781608144284d90a72d7d2e3152d201ed78ffb6e711b889cda0346ce9bca2e6e9e46b15980456c43a659f427e3e6e9e16e0de93100734d409ca57c27d3bde66b2791c1b2f7032f3cc02c85c43e8652f13258bd412174ea931f1d39a9830e593761d91c56f637f0e1568ea66a15d9f0eba504ab3eb205fda13d1068e7692f8d00a2d92d2fb48887b6f71c6de43a923bbcaa9e3ac5bd82ac0ec00000000000000000000000000000000e48251271d0ed111d9ed7f4d18ee4aa30240843ed560aeebee209d8c557e60e69e634b37c43235e062634e8f0932582eb91d27c5c81911c5a4d57ea2813573aec3a6909f30f29c535a", 0x142}, {&(0x7f0000000d00)="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", 0x33f}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 312.919683ms ago: executing program 0 (id=2248): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec779000) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x220080c1, &(0x7f0000000040)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 256.091497ms ago: executing program 4 (id=2249): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @broadcast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 37.150643ms ago: executing program 3 (id=2250): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x1}, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0xfffe) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x34000, 0xe0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 3 (id=2251): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) write$ppp(r2, &(0x7f0000000180)='\x00\x00', 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. [ 66.016387][ T5622] cgroup: Unknown subsys name 'net' [ 66.130541][ T5622] cgroup: Unknown subsys name 'cpuset' [ 66.139803][ T5622] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.535393][ T5622] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.698622][ T4956] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.699905][ T4956] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.700427][ T4956] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.701055][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.701771][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.703019][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.730726][ T4956] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.739323][ T5638] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.740089][ T5647] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.753973][ T5635] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.762015][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.763521][ T5647] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.764528][ T5647] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.765071][ T5647] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.776050][ T5642] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.786845][ T5647] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.789790][ T5647] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.792374][ T5647] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.795226][ T5647] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.796071][ T5647] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.848556][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.851502][ T5642] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.852123][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.852992][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.855207][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.634562][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.651533][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.664834][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.752153][ T5633] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.799240][ T5648] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.871618][ T5641] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.961934][ T5643] infiniband rxe0: set active [ 70.962649][ T5643] infiniband rxe0: added rxe_eth0 [ 70.992285][ T5643] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 70.992323][ T5643] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 70.992359][ T5643] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 70.993220][ T5636] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.050885][ T5643] RDS/IB: rxe0: added [ 71.051253][ T5643] smc: adding ib device rxe0 with port count 1 [ 71.051349][ T5643] smc: ib device rxe0 port 1 has no pnetid [ 71.057072][ T5648] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.082135][ T5634] rxe0: rxe_newlink: already configured on rxe_eth0 [ 71.085759][ T192] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.282171][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.420928][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.420999][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.483552][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.483673][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.483819][ T5633] bridge_slave_0: entered allmulticast mode [ 71.487540][ T5633] bridge_slave_0: entered promiscuous mode [ 71.494668][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.494767][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.494891][ T5633] bridge_slave_1: entered allmulticast mode [ 71.500390][ T5633] bridge_slave_1: entered promiscuous mode [ 71.560034][ T5641] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.583523][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.604702][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.656636][ T5633] team0: Port device team_slave_0 added [ 71.673602][ T5633] team0: Port device team_slave_1 added [ 71.746807][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.746825][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.746856][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.797676][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.797693][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.797718][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.840353][ T5642] Bluetooth: hci0: command tx timeout [ 71.840423][ T5634] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.840542][ T5642] Bluetooth: hci3: command tx timeout [ 71.840622][ T5642] Bluetooth: hci2: command tx timeout [ 71.840694][ T5642] Bluetooth: hci1: command tx timeout [ 71.897920][ T53] Bluetooth: hci4: command tx timeout [ 71.980988][ T5633] hsr_slave_0: entered promiscuous mode [ 71.982222][ T5633] hsr_slave_1: entered promiscuous mode [ 72.115328][ T5648] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.115464][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.115866][ T5648] bridge_slave_0: entered allmulticast mode [ 72.119736][ T5648] bridge_slave_0: entered promiscuous mode [ 72.122830][ T5648] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.122929][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.123047][ T5648] bridge_slave_1: entered allmulticast mode [ 72.124713][ T5648] bridge_slave_1: entered promiscuous mode [ 72.195475][ T5648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.216432][ T5648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.260214][ T5643] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.336924][ T5648] team0: Port device team_slave_0 added [ 72.361227][ T5648] team0: Port device team_slave_1 added [ 72.436008][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.436026][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.436050][ T5648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.483903][ T5648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.483919][ T5648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.483943][ T5648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.620737][ T5648] hsr_slave_0: entered promiscuous mode [ 72.621374][ T5648] hsr_slave_1: entered promiscuous mode [ 72.621798][ T5648] debugfs: 'hsr0' already exists in 'hsr' [ 72.621881][ T5648] Cannot create hsr debugfs directory [ 72.893891][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.899443][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.900354][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.908380][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.929438][ T5641] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.929575][ T5641] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.929655][ T5641] bridge_slave_0: entered allmulticast mode [ 72.930549][ T5641] bridge_slave_0: entered promiscuous mode [ 72.951439][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.961322][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.962159][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.968893][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.985594][ T5641] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.985703][ T5641] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.985821][ T5641] bridge_slave_1: entered allmulticast mode [ 72.989063][ T5641] bridge_slave_1: entered promiscuous mode [ 73.076379][ T5641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.116187][ T5634] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.116322][ T5634] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.116706][ T5634] bridge_slave_0: entered allmulticast mode [ 73.119352][ T5634] bridge_slave_0: entered promiscuous mode [ 73.122105][ T5634] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.122215][ T5634] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.122434][ T5634] bridge_slave_1: entered allmulticast mode [ 73.124050][ T5634] bridge_slave_1: entered promiscuous mode [ 73.129786][ T5641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.185917][ T5641] team0: Port device team_slave_0 added [ 73.223916][ T5641] team0: Port device team_slave_1 added [ 73.243037][ T5634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.266326][ T5634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.337964][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.337982][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.338001][ T5641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.340085][ T5641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.340100][ T5641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.340124][ T5641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.351155][ T5634] team0: Port device team_slave_0 added [ 73.384861][ T5634] team0: Port device team_slave_1 added [ 73.391112][ T5648] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.395535][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.396705][ T5648] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.404578][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.492896][ T5648] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.496629][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.501268][ T5648] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.507958][ T5648] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.515773][ T5641] hsr_slave_0: entered promiscuous mode [ 73.516795][ T5641] hsr_slave_1: entered promiscuous mode [ 73.519561][ T5641] debugfs: 'hsr0' already exists in 'hsr' [ 73.519581][ T5641] Cannot create hsr debugfs directory [ 73.555285][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.555301][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.555323][ T5634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.606734][ T5634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.606751][ T5634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.606773][ T5634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.725765][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.725945][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.726074][ T5643] bridge_slave_0: entered allmulticast mode [ 73.727780][ T5643] bridge_slave_0: entered promiscuous mode [ 73.762576][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.762711][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.762804][ T5643] bridge_slave_1: entered allmulticast mode [ 73.763764][ T5643] bridge_slave_1: entered promiscuous mode [ 73.814159][ T5643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.835258][ T5634] hsr_slave_0: entered promiscuous mode [ 73.835899][ T5634] hsr_slave_1: entered promiscuous mode [ 73.836324][ T5634] debugfs: 'hsr0' already exists in 'hsr' [ 73.836342][ T5634] Cannot create hsr debugfs directory [ 73.839680][ T5643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.886719][ T5643] team0: Port device team_slave_0 added [ 73.907295][ T53] Bluetooth: hci1: command tx timeout [ 73.907328][ T53] Bluetooth: hci2: command tx timeout [ 73.907348][ T53] Bluetooth: hci3: command tx timeout [ 73.907385][ T53] Bluetooth: hci0: command tx timeout [ 73.910529][ T5643] team0: Port device team_slave_1 added [ 73.977326][ T5642] Bluetooth: hci4: command tx timeout [ 73.991991][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.992007][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.992031][ T5643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.998719][ T5643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.998734][ T5643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.998758][ T5643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.125932][ T5643] hsr_slave_0: entered promiscuous mode [ 74.126569][ T5643] hsr_slave_1: entered promiscuous mode [ 74.128442][ T5643] debugfs: 'hsr0' already exists in 'hsr' [ 74.128463][ T5643] Cannot create hsr debugfs directory [ 74.236422][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.250646][ T5641] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.254738][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.256021][ T5641] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.260298][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.288364][ T5641] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.291565][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.292379][ T5641] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.295251][ T5641] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.396810][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.451280][ T207] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.451376][ T207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.471207][ T5648] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.492316][ T5634] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.495467][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.496276][ T5634] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.508360][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.510745][ T5634] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.519723][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.521574][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.521770][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.549502][ T5634] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.564250][ T5634] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.624610][ T5648] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.654032][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.654099][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.684131][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.684226][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.722450][ T5643] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.736755][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.745177][ T5643] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.757938][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.760469][ T5643] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.765068][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.765971][ T5643] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.800039][ T5643] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.868490][ T5641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.955071][ T5641] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.008987][ T1370] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.009095][ T1370] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.054671][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.054776][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.170060][ T5634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.253042][ T5634] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.284406][ T207] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.284466][ T207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.296912][ T5643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.312731][ T5643] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.329082][ T207] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.329143][ T207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.363243][ T207] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.363346][ T207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.371244][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.371374][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.617554][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.835289][ T5633] veth0_vlan: entered promiscuous mode [ 75.888492][ T5633] veth1_vlan: entered promiscuous mode [ 75.988170][ T5642] Bluetooth: hci0: command tx timeout [ 75.988203][ T5642] Bluetooth: hci3: command tx timeout [ 75.988224][ T5642] Bluetooth: hci2: command tx timeout [ 75.989184][ T5642] Bluetooth: hci1: command tx timeout [ 76.057206][ T53] Bluetooth: hci4: command tx timeout [ 76.082163][ T5648] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.083527][ T5633] veth0_macvtap: entered promiscuous mode [ 76.121277][ T5633] veth1_macvtap: entered promiscuous mode [ 76.196851][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.225450][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.378780][ T5648] veth0_vlan: entered promiscuous mode [ 76.379742][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.380171][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.380481][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.380725][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.470426][ T5641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.513045][ T5648] veth1_vlan: entered promiscuous mode [ 76.659971][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.659995][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.701483][ T5648] veth0_macvtap: entered promiscuous mode [ 76.740659][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.740679][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.753616][ T5648] veth1_macvtap: entered promiscuous mode [ 76.853381][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.882452][ T5648] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.936016][ T5643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.970929][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.971065][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.971102][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.971163][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.980534][ T5634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.135221][ T5633] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.263127][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.263149][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.358495][ T5634] veth0_vlan: entered promiscuous mode [ 77.368274][ T5643] veth0_vlan: entered promiscuous mode [ 77.380772][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.380791][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.406913][ T5643] veth1_vlan: entered promiscuous mode [ 77.419130][ T5634] veth1_vlan: entered promiscuous mode [ 77.493945][ T5641] veth0_vlan: entered promiscuous mode [ 77.549251][ T5641] veth1_vlan: entered promiscuous mode [ 77.591678][ T5634] veth0_macvtap: entered promiscuous mode [ 77.632214][ T5643] veth0_macvtap: entered promiscuous mode [ 77.634316][ T5634] veth1_macvtap: entered promiscuous mode [ 77.652351][ T5643] veth1_macvtap: entered promiscuous mode [ 77.720427][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.775764][ T5641] veth0_macvtap: entered promiscuous mode [ 77.791454][ T5634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.796039][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.811437][ T5641] veth1_macvtap: entered promiscuous mode [ 77.822703][ T5643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.990739][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.068946][ T53] Bluetooth: hci1: command tx timeout [ 78.068981][ T53] Bluetooth: hci2: command tx timeout [ 78.069004][ T53] Bluetooth: hci3: command tx timeout [ 78.069025][ T53] Bluetooth: hci0: command tx timeout [ 78.071673][ T5641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.076797][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.077140][ T700] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.077969][ T700] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.078006][ T700] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.078040][ T700] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.078081][ T700] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.078114][ T700] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.096072][ T12] IPVS: starting estimator thread 0... [ 78.148517][ T5642] Bluetooth: hci4: command tx timeout [ 78.187966][ T5860] IPVS: using max 28 ests per chain, 67200 per kthread [ 78.191057][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.192763][ T1370] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.192801][ T1370] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.192835][ T1370] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.192868][ T1370] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.273654][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.273673][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.452590][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.452612][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.500310][ T5873] ip_tables: iptables: counters copy to user failed while replacing table [ 78.543692][ T5875] tls_set_device_offload: netdev not found [ 78.583944][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.583965][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.765646][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.765668][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.925769][ T700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.925789][ T700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.963627][ T5891] netlink: 32 bytes leftover after parsing attributes in process `syz.1.22'. [ 79.166651][ T1370] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.166672][ T1370] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.344043][ T5903] syzkaller1: entered promiscuous mode [ 79.344066][ T5903] syzkaller1: entered allmulticast mode [ 79.675721][ T5913] netlink: 'syz.3.27': attribute type 15 has an invalid length. [ 79.675744][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 79.779323][ T5913] netlink: 'syz.3.27': attribute type 15 has an invalid length. [ 79.779347][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 79.779555][ T5913] Zero length message leads to an empty skb [ 79.920355][ T1370] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 79.920753][ T1370] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 79.969520][ T1370] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 79.970426][ T1370] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 80.099337][ T5929] syzkaller1: entered promiscuous mode [ 80.099360][ T5929] syzkaller1: entered allmulticast mode [ 80.439122][ T5947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.35'. [ 80.880880][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 80.880903][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 81.335897][ T5998] vcan0: tx address claim with broadcast sa [ 81.526738][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.57'. [ 81.567054][ T6012] warning: `syz.3.60' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.567769][ T5996] netdevsim netdevsim2 netdevsim2: IPsec offload requires 128 bit authentication [ 81.761032][ T6021] syz.4.64 uses obsolete (PF_INET,SOCK_PACKET) [ 82.031099][ T6027] syzkaller1: entered promiscuous mode [ 82.031121][ T6027] syzkaller1: entered allmulticast mode [ 82.180665][ T6038] syzkaller1: entered promiscuous mode [ 82.180686][ T6038] syzkaller1: entered allmulticast mode [ 82.307866][ T6046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.74'. [ 82.310749][ T6034] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 82.596322][ T6058] netlink: 16 bytes leftover after parsing attributes in process `syz.1.81'. [ 82.971688][ T6081] netlink: 'syz.3.92': attribute type 11 has an invalid length. [ 82.971712][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.92'. [ 83.028903][ T6081] netlink: 'syz.3.92': attribute type 11 has an invalid length. [ 83.048371][ T192] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.113118][ T6089] ip_tables: iptables: counters copy to user failed while replacing table [ 83.280469][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.280493][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.040003][ T6095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.040028][ T6095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.461396][ T30] audit: type=1800 audit(1793384761.814:2): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.101" name=0A dev="tmpfs" ino=87 res=0 errno=-22 [ 84.597438][ T6143] __nla_validate_parse: 2 callbacks suppressed [ 84.597458][ T6143] netlink: 24 bytes leftover after parsing attributes in process `syz.2.105'. [ 84.922691][ T6162] netlink: 28 bytes leftover after parsing attributes in process `syz.4.112'. [ 85.102969][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'. [ 85.925385][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 85.925407][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.131'. [ 86.461009][ T6253] netlink: 'syz.4.142': attribute type 1 has an invalid length. [ 86.813244][ T993] cfg80211: failed to load regulatory.db [ 87.342950][ T6299] netlink: 'syz.1.150': attribute type 21 has an invalid length. [ 87.342972][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 87.369156][ T6299] netlink: 'syz.1.150': attribute type 21 has an invalid length. [ 87.369175][ T6299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 88.011635][ T6337] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 88.193977][ T6343] netlink: 'syz.1.166': attribute type 1 has an invalid length. [ 88.261618][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 88.263800][ T6343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.294187][ T6349] bond1: (slave gretap1): making interface the new active one [ 88.295932][ T6349] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 88.449493][ T6359] ip_tables: iptables: counters copy to user failed while replacing table [ 88.554170][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.177'. [ 89.684462][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 89.691862][ T5642] block nbd0: Receive control failed (result -107) [ 89.828791][ T6443] netlink: 36 bytes leftover after parsing attributes in process `syz.1.204'. [ 90.161778][ T6466] netlink: 32 bytes leftover after parsing attributes in process `syz.3.211'. [ 90.178177][ T6466] netlink: 32 bytes leftover after parsing attributes in process `syz.3.211'. [ 91.200257][ T6523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'. [ 91.463468][ T6492] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 91.463606][ T6492] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 91.613104][ T6534] ip_tables: iptables: counters copy to user failed while replacing table [ 91.678529][ T207] IPVS: starting estimator thread 0... [ 91.767051][ T6539] IPVS: using max 31 ests per chain, 74400 per kthread [ 91.776741][ T6544] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 94.220300][ T6519] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 94.500982][ T6575] tls_set_device_offload_rx: netdev not found [ 94.619088][ T6579] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 95.326624][ T6596] netlink: 12 bytes leftover after parsing attributes in process `syz.4.254'. [ 95.983810][ T6630] netlink: 'syz.4.269': attribute type 1 has an invalid length. [ 96.041100][ T6630] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.146065][ T6635] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.444084][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.282'. [ 96.631128][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.287'. [ 96.883625][ T6689] Bluetooth: MGMT ver 1.23 [ 96.932131][ T6691] raw_sendmsg: syz.4.296 forgot to set AF_INET. Fix it! [ 97.515135][ T6720] netlink: 'syz.3.310': attribute type 15 has an invalid length. [ 97.515365][ T6720] netlink: 'syz.3.310': attribute type 15 has an invalid length. [ 97.693003][ T6736] sch_tbf: burst 0 is lower than device gre0 mtu (1500) ! [ 97.784014][ T6741] netlink: 28 bytes leftover after parsing attributes in process `syz.0.316'. [ 97.784050][ T6741] netlink: 'syz.0.316': attribute type 7 has an invalid length. [ 97.784063][ T6741] netlink: 'syz.0.316': attribute type 8 has an invalid length. [ 97.784074][ T6741] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 98.088339][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 98.529666][ T6767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 98.872433][ T6778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.333'. [ 98.937927][ T5642] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 98.938611][ T5642] Bluetooth: hci0: command 0x0c3a tx timeout [ 99.172264][ T6790] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 99.192175][ T6793] netlink: 33 bytes leftover after parsing attributes in process `syz.0.339'. [ 99.192267][ T6793] netlink: 140 bytes leftover after parsing attributes in process `syz.0.339'. [ 99.204416][ T6790] 8021q: adding VLAN 0 to HW filter on device bond2 [ 99.225284][ T6790] bond2: (slave erspan1): making interface the new active one [ 99.226833][ T6790] bond2: (slave erspan1): Enslaving as an active interface with an up link [ 99.699438][ T6823] netlink: 'syz.0.355': attribute type 7 has an invalid length. [ 99.864535][ T6831] vlan2: entered promiscuous mode [ 99.864559][ T6831] bond0: entered promiscuous mode [ 99.864572][ T6831] bond_slave_0: entered promiscuous mode [ 99.864793][ T6831] bond_slave_1: entered promiscuous mode [ 100.139912][ T1393] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.141457][ T1370] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.141631][ T1370] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.141666][ T1370] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.166744][ T12] nci: nci_ntf_packet: unsupported ntf opcode 0xf00 [ 100.395808][ T6859] __nla_validate_parse: 6 callbacks suppressed [ 100.395829][ T6859] netlink: 20 bytes leftover after parsing attributes in process `syz.3.369'. [ 101.312871][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807cb12c00: rx timeout, send abort [ 101.314273][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807cb12c00: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 101.400031][ T6887] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 103.088751][ T6846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.236744][ T6909] netlink: 9 bytes leftover after parsing attributes in process `syz.4.393'. [ 103.236869][ T6907] netlink: 'syz.0.389': attribute type 20 has an invalid length. [ 103.236884][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.389'. [ 103.273336][ T6909] gretap0: entered promiscuous mode [ 103.313707][ T6909] netlink: 5 bytes leftover after parsing attributes in process `syz.4.393'. [ 103.335092][ T6909] 0ªî{X¹¦: renamed from gretap0 [ 103.343563][ T6909] 0ªî{X¹¦: left promiscuous mode [ 103.343570][ T6907] netlink: 'syz.0.389': attribute type 20 has an invalid length. [ 103.343583][ T6909] 0ªî{X¹¦: entered allmulticast mode [ 103.343585][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.389'. [ 103.347575][ T6909] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 103.620475][ T6934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 103.628031][ T6935] IPv4: Oversized IP packet from 127.202.26.0 [ 103.948478][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.408'. [ 103.949579][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.408'. [ 105.006399][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 105.006416][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.412'. [ 106.295935][ T6915] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 106.520602][ T6978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.416'. [ 106.625963][ T6979] 0ªî{X¹¦: left allmulticast mode [ 106.627135][ C1] Illegal XDP return value 16128 on prog (id 41) dev lo, expect packet loss! [ 106.655895][ T6979] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 106.659220][ T6979] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 107.271623][ T7026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.439'. [ 107.552100][ T7046] netlink: 'syz.1.445': attribute type 1 has an invalid length. [ 107.599868][ T7046] 8021q: adding VLAN 0 to HW filter on device bond3 [ 108.213183][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 108.244318][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.462'. [ 108.259578][ T1430] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.259623][ T1430] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.259658][ T1430] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.259690][ T1430] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 108.776869][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.475'. [ 108.776898][ T7122] netlink: 14 bytes leftover after parsing attributes in process `syz.4.475'. [ 109.010333][ T7136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.482'. [ 109.232387][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.487'. [ 109.282619][ T7153] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 109.360233][ T7158] netlink: 'syz.0.491': attribute type 21 has an invalid length. [ 109.360266][ T7158] netlink: 128 bytes leftover after parsing attributes in process `syz.0.491'. [ 109.361771][ T7158] netlink: 'syz.0.491': attribute type 5 has an invalid length. [ 109.361789][ T7158] netlink: 'syz.0.491': attribute type 6 has an invalid length. [ 109.361801][ T7158] netlink: 3 bytes leftover after parsing attributes in process `syz.0.491'. [ 109.548032][ T7168] ip_tables: iptables: counters copy to user failed while replacing table [ 110.177991][ T7205] block nbd0: Unsupported socket: should be TCP or UNIX. [ 110.249905][ T7209] netlink: 'syz.0.516': attribute type 22 has an invalid length. [ 110.463386][ T7209] netlink: 'syz.0.516': attribute type 22 has an invalid length. [ 110.611938][ T7224] tipc: Started in network mode [ 110.611972][ T7224] tipc: Node identity ac1414aa, cluster identity 4711 [ 110.614082][ T7224] tipc: New replicast peer: 172.20.20.187 [ 110.623731][ T7224] tipc: Enabled bearer , priority 10 [ 110.711741][ T7231] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 111.003220][ T7243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 111.106270][ T53] block nbd1: Receive control failed (result -107) [ 111.533223][ T7276] ip_tables: iptables: counters copy to user failed while replacing table [ 111.710534][ T1164] IPVS: starting estimator thread 0... [ 111.729862][ T5760] tipc: Node number set to 2886997162 [ 111.771766][ T12] IPVS: starting estimator thread 0... [ 111.797092][ T7292] IPVS: using max 33 ests per chain, 79200 per kthread [ 111.863842][ T7294] IPVS: using max 26 ests per chain, 62400 per kthread [ 112.235540][ T7321] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 112.259738][ T7321] bond2: (slave lo): Enslaving as an active interface with an up link [ 112.265029][ T7321] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 112.366258][ T7328] bond0: entered promiscuous mode [ 112.366283][ T7328] bond_slave_0: entered promiscuous mode [ 112.366729][ T7328] bond_slave_1: entered promiscuous mode [ 112.561861][ T7340] __nla_validate_parse: 10 callbacks suppressed [ 112.561882][ T7340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.571'. [ 113.001420][ T7366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.582'. [ 113.004819][ T7366] netlink: 28 bytes leftover after parsing attributes in process `syz.1.582'. [ 113.142543][ T7375] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 113.271939][ T7381] pim6reg1: entered promiscuous mode [ 113.271961][ T7381] pim6reg1: entered allmulticast mode [ 113.398587][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 113.398611][ T7389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.593'. [ 113.398636][ T7389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'. [ 113.494739][ T7395] netlink: 156 bytes leftover after parsing attributes in process `syz.2.597'. [ 113.510939][ T13] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 113.511540][ T13] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 113.511574][ T13] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 113.511604][ T13] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 113.733684][ T7405] netlink: 'syz.0.601': attribute type 2 has an invalid length. [ 113.847872][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.603'. [ 114.122681][ T7419] netlink: 'syz.4.606': attribute type 13 has an invalid length. [ 114.122720][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 114.264352][ T7419] netlink: 'syz.4.606': attribute type 13 has an invalid length. [ 114.264374][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.606'. [ 114.426541][ T30] audit: type=1800 audit(1793384791.774:3): pid=7434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.610" name=680B20 dev="tmpfs" ino=654 res=0 errno=-22 [ 114.527219][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.527264][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.527296][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.527328][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.712660][ T7449] ip_tables: iptables: counters copy to user failed while replacing table [ 114.958223][ T7461] netlink: 'syz.3.623': attribute type 5 has an invalid length. [ 114.958246][ T7461] netlink: 'syz.3.623': attribute type 9 has an invalid length. [ 115.851026][ T7515] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.851777][ T7515] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.045817][ T7583] netlink: 'syz.1.666': attribute type 1 has an invalid length. [ 117.245448][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c44b400: rx timeout, send abort [ 117.245713][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807c44b400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 117.773142][ T7626] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 118.053837][ T7642] __nla_validate_parse: 8 callbacks suppressed [ 118.053866][ T7642] netlink: 6 bytes leftover after parsing attributes in process `syz.2.686'. [ 118.964800][ T7693] netlink: 52 bytes leftover after parsing attributes in process `syz.2.703'. [ 118.998589][ T7694] netlink: 'syz.4.702': attribute type 21 has an invalid length. [ 118.998610][ T7694] netlink: 'syz.4.702': attribute type 22 has an invalid length. [ 118.998621][ T7694] netlink: 'syz.4.702': attribute type 23 has an invalid length. [ 118.998633][ T7694] netlink: 'syz.4.702': attribute type 25 has an invalid length. [ 118.998645][ T7694] netlink: 96 bytes leftover after parsing attributes in process `syz.4.702'. [ 119.064722][ T7693] ip6gre1: entered promiscuous mode [ 119.064746][ T7693] ip6gre1: entered allmulticast mode [ 119.096004][ T7701] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 119.413680][ T7721] ip_tables: iptables: counters copy to user failed while replacing table [ 120.506113][ T7786] GUP no longer grows the stack in syz.1.733 (7786): 200000003000-20000000a000 (200000001000) [ 120.506177][ T7786] CPU: 0 UID: 0 PID: 7786 Comm: syz.1.733 Not tainted syzkaller #0 PREEMPT(full) [ 120.506201][ T7786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 120.506222][ T7786] Call Trace: [ 120.506231][ T7786] [ 120.506240][ T7786] dump_stack_lvl+0xe8/0x150 [ 120.506289][ T7786] __get_user_pages+0x23b1/0x2750 [ 120.506324][ T7786] ? lock_acquire+0x115/0x350 [ 120.506369][ T7786] ? __gup_longterm_locked+0xcb2/0x16f0 [ 120.506400][ T7786] ? rcu_is_watching+0x16/0xb0 [ 120.506435][ T7786] __gup_longterm_locked+0xe24/0x16f0 [ 120.506489][ T7786] gup_fast_fallback+0x360/0x27a0 [ 120.506575][ T7786] ? __pfx_gup_fast_fallback+0x10/0x10 [ 120.506609][ T7786] ? is_valid_gup_args+0x11f/0x200 [ 120.506649][ T7786] ? get_user_pages_fast+0x4d/0xb0 [ 120.506682][ T7786] __iov_iter_get_pages_alloc+0x378/0xa40 [ 120.506715][ T7786] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 120.506742][ T7786] ? __fget_files+0x2a/0x420 [ 120.506769][ T7786] iov_iter_get_pages2+0x5e/0xa0 [ 120.506798][ T7786] __se_sys_vmsplice+0x844/0x16f0 [ 120.506846][ T7786] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 120.506874][ T7786] ? __pfx_futex_wait+0x10/0x10 [ 120.506973][ T7786] do_syscall_64+0x166/0x520 [ 120.506996][ T7786] ? trace_irq_disable+0x3b/0x140 [ 120.507022][ T7786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.507044][ T7786] ? clear_bhb_loop+0x70/0xc0 [ 120.507070][ T7786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.507090][ T7786] RIP: 0033:0x7f4c5399f559 [ 120.507116][ T7786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.507134][ T7786] RSP: 002b:00007f4c5489c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 120.507159][ T7786] RAX: ffffffffffffffda RBX: 00007f4c53c25fa0 RCX: 00007f4c5399f559 [ 120.507175][ T7786] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000005 [ 120.507187][ T7786] RBP: 00007f4c53a36b20 R08: 0000000000000000 R09: 0000000000000000 [ 120.507199][ T7786] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 120.507211][ T7786] R13: 00007f4c53c26038 R14: 00007f4c53c25fa0 R15: 00007ffc47d2c338 [ 120.507246][ T7786] [ 121.155272][ T5300] veth0_vlan: left promiscuous mode [ 121.204802][ T5761] veth0_vlan: entered promiscuous mode [ 121.842825][ T7849] netlink: 240 bytes leftover after parsing attributes in process `syz.3.752'. [ 122.291639][ T7873] syzkaller1: entered promiscuous mode [ 122.291661][ T7873] syzkaller1: entered allmulticast mode [ 123.070372][ T7903] Bluetooth: ISO socket layer initialized [ 123.448845][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.782'. [ 123.933951][ T7936] netlink: 'syz.2.788': attribute type 4 has an invalid length. [ 123.998205][ T7807] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.247505][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'. [ 124.282573][ T7949] ipvlan2: entered allmulticast mode [ 124.282596][ T7949] virt_wifi0: entered allmulticast mode [ 124.300958][ T7949] batman_adv: batadv0: Adding interface: ipvlan2 [ 124.300975][ T7949] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.301007][ T7949] batman_adv: batadv0: Interface activated: ipvlan2 [ 124.327416][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz.0.790'. [ 124.404342][ T7955] ipvlan3: entered allmulticast mode [ 124.405953][ T7955] batman_adv: batadv0: Adding interface: ipvlan3 [ 124.405969][ T7955] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.405996][ T7955] batman_adv: The newly added mac address (1a:c9:e6:c9:f3:e7) already exists on: ipvlan2 [ 124.406012][ T7955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 124.406025][ T7955] batman_adv: batadv0: Interface activated: ipvlan3 [ 124.563410][ T7963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.795'. [ 124.563677][ T7963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.795'. [ 124.733719][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.799'. [ 125.183899][ T8004] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.806'. [ 127.468761][ T8050] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 127.549191][ T8054] pimreg: entered allmulticast mode [ 127.551115][ T8053] pimreg: left allmulticast mode [ 127.873862][ T7985] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.183716][ T8079] netlink: 52 bytes leftover after parsing attributes in process `syz.1.835'. [ 128.185054][ T8079] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.185222][ T8079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.186704][ T8079] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.186815][ T8079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.196232][ T8079] netlink: 52 bytes leftover after parsing attributes in process `syz.1.835'. [ 128.343333][ T8087] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.343351][ T8087] IPv6: NLM_F_CREATE should be set when creating new route [ 129.743652][ T8168] __nla_validate_parse: 2 callbacks suppressed [ 129.743671][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.869'. [ 132.415160][ T8243] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 132.591082][ T8249] batman_adv: batadv0: Adding interface: syzkaller0 [ 132.591100][ T8249] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.591129][ T8249] batman_adv: batadv0: Interface activated: syzkaller0 [ 132.592415][ T8248] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 132.612815][ T8248] batman_adv: batadv0: Removing interface: syzkaller0 [ 132.678194][ T8161] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 132.870072][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.870128][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.151005][ T1370] nci: nci_rx_work: unknown MT 0x1 [ 133.453489][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 133.512283][ T8289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.916'. [ 134.089440][ T8314] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 134.131430][ T8314] 8021q: adding VLAN 0 to HW filter on device bond3 [ 134.139964][ T8314] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.142672][ T8314] bond3: (slave team0): Enslaving as a backup interface with an up link [ 134.238570][ T12] bond3: (slave team0): link status definitely down, disabling slave [ 134.278096][ T8322] netlink: 'syz.0.929': attribute type 1 has an invalid length. [ 134.607630][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.933'. [ 134.830894][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 134.830918][ T8346] netlink: 24 bytes leftover after parsing attributes in process `syz.0.938'. [ 136.034939][ T8265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 136.381618][ T53] Bluetooth: hci4: link tx timeout [ 136.381651][ T53] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 136.473301][ T8409] xt_hashlimit: size too large, truncated to 1048576 [ 136.630249][ T8419] netlink: 'syz.3.961': attribute type 1 has an invalid length. [ 136.864775][ T8429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.965'. [ 138.458586][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 138.754665][ T8531] netlink: 'syz.3.995': attribute type 4 has an invalid length. [ 138.778588][ T8531] netlink: 'syz.3.995': attribute type 4 has an invalid length. [ 138.933136][ T8541] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 139.175914][ T8551] netlink: 'syz.3.1003': attribute type 5 has an invalid length. [ 139.518768][ T8575] netlink: 'syz.3.1012': attribute type 1 has an invalid length. [ 139.562045][ T8575] bond1: (slave geneve2): making interface the new active one [ 139.562900][ T8575] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 139.585218][ T1370] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.585264][ T1370] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.585297][ T1370] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.585329][ T1370] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 139.615512][ T8579] batman_adv: batadv0: Adding interface: syzkaller0 [ 139.615529][ T8579] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 139.615574][ T8579] batman_adv: batadv0: Interface activated: syzkaller0 [ 139.623741][ T8578] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 139.680937][ T8578] batman_adv: batadv0: Removing interface: syzkaller0 [ 139.750602][ T5642] Bluetooth: hci1: unexpected event 0x1d length: 3 < 5 [ 139.977607][ T5760] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 141.209831][ T8507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 141.408618][ T8606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1025'. [ 141.496681][ T8607] ip_tables: iptables: counters copy to user failed while replacing table [ 141.673585][ T8621] sock: sock_set_timeout: `syz.3.1032' (pid 8621) tries to set negative timeout [ 142.061513][ T8643] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1041'. [ 142.063511][ T8643] ip_tables: iptables: counters copy to user failed while replacing table [ 142.064374][ T8643] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 142.536247][ T8666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1050'. [ 142.714096][ T8684] netlink: 'syz.2.1055': attribute type 15 has an invalid length. [ 142.805353][ T8690] veth1_to_bond: entered allmulticast mode [ 142.818824][ T8690] veth1_to_bond: left allmulticast mode [ 142.861225][ T8692] netlink: 'syz.2.1057': attribute type 8 has an invalid length. [ 142.861246][ T8692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 142.861663][ T8692] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.862903][ T8692] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.343433][ T8706] lo speed is unknown, defaulting to 1000 [ 143.343514][ T8706] lo speed is unknown, defaulting to 1000 [ 143.358820][ T8706] lo speed is unknown, defaulting to 1000 [ 143.359995][ T8706] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 143.360029][ T8706] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 143.366452][ T8706] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 143.581654][ T8706] lo speed is unknown, defaulting to 1000 [ 143.583467][ T8706] lo speed is unknown, defaulting to 1000 [ 143.585198][ T8706] lo speed is unknown, defaulting to 1000 [ 143.609762][ T8706] lo speed is unknown, defaulting to 1000 [ 143.612303][ T8706] lo speed is unknown, defaulting to 1000 [ 143.652275][ T8715] ip_tables: iptables: counters copy to user failed while replacing table [ 143.869991][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1072'. [ 143.870014][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1072'. [ 144.197378][ T8745] netlink: 'syz.1.1083': attribute type 1 has an invalid length. [ 144.262650][ T8751] bond4: (slave gretap2): making interface the new active one [ 144.263522][ T8751] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 144.295302][ T8755] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.1084'. [ 144.479148][ T8762] ip_tables: iptables: counters copy to user failed while replacing table [ 144.508978][ T8767] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 144.511576][ T8765] netlink: 'syz.0.1092': attribute type 1 has an invalid length. [ 144.564841][ T8765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 144.618844][ T8772] bond1: (slave gretap1): making interface the new active one [ 144.621010][ T8772] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 145.068197][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1106'. [ 145.148810][ T8805] syz_tun: entered allmulticast mode [ 145.153890][ T8803] syz_tun: left allmulticast mode [ 145.180992][ T8808] netlink: 'syz.1.1109': attribute type 1 has an invalid length. [ 145.284328][ T8813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1112'. [ 145.338840][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1113'. [ 145.402291][ T8817] batman_adv: batadv0: Adding interface: syzkaller0 [ 145.402310][ T8817] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.402342][ T8817] batman_adv: batadv0: Interface activated: syzkaller0 [ 145.411541][ T8816] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 145.467620][ T8816] batman_adv: batadv0: Removing interface: syzkaller0 [ 145.622269][ T8828] ip_tables: iptables: counters copy to user failed while replacing table [ 145.639397][ T8828] syzkaller1: entered promiscuous mode [ 145.639421][ T8828] syzkaller1: entered allmulticast mode [ 145.672059][ T8830] PKCS7: Unknown OID: [4] (bad) [ 145.672080][ T8830] PKCS7: Only support pkcs7_signedData type [ 145.858844][ T8836] only policy match revision 0 supported [ 145.858858][ T8836] unable to load match [ 146.222461][ T8863] tipc: Failed to remove unknown binding: 66,1,1/0:834776986/834776988 [ 146.222493][ T8863] tipc: Failed to remove unknown binding: 66,1,1/0:834776986/834776988 [ 146.322172][ T8866] ip_tables: iptables: counters copy to user failed while replacing table [ 146.402084][ T8872] syzkaller1: entered promiscuous mode [ 146.402105][ T8872] syzkaller1: entered allmulticast mode [ 146.789768][ T8890] __nla_validate_parse: 1 callbacks suppressed [ 146.789786][ T8890] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1146'. [ 146.820476][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 146.820499][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 146.820524][ T8892] netlink: 'syz.4.1148': attribute type 6 has an invalid length. [ 146.823536][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1148'. [ 146.823556][ T8892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1148'. [ 146.823579][ T8892] netlink: 'syz.4.1148': attribute type 6 has an invalid length. [ 146.975650][ T8901] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 147.094918][ T8907] ip_tables: iptables: counters copy to user failed while replacing table [ 147.112376][ T8907] syzkaller1: entered promiscuous mode [ 147.112399][ T8907] syzkaller1: entered allmulticast mode [ 147.213698][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 147.213733][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'. [ 147.223158][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1157'. [ 147.223191][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1157'. [ 147.238558][ T1393] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.258730][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.259214][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.259779][ T1393] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 147.296590][ T8917] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 147.345721][ T8919] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1158'. [ 147.370604][ T8921] netlink: 'syz.1.1160': attribute type 25 has an invalid length. [ 147.370818][ T8921] netlink: 'syz.1.1160': attribute type 25 has an invalid length. [ 147.601949][ T8935] syzkaller1: entered promiscuous mode [ 147.601971][ T8935] syzkaller1: entered allmulticast mode [ 148.143852][ T8962] syzkaller1: entered promiscuous mode [ 148.143874][ T8962] syzkaller1: entered allmulticast mode [ 148.277380][ T8967] batman_adv: batadv0: Adding interface: syzkaller0 [ 148.277398][ T8967] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 148.277428][ T8967] batman_adv: batadv0: Interface activated: syzkaller0 [ 148.818867][ T8964] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 148.839644][ T8964] batman_adv: batadv0: Removing interface: syzkaller0 [ 149.255290][ T9013] bridge0: port 3(dummy0) entered blocking state [ 149.255436][ T9013] bridge0: port 3(dummy0) entered disabled state [ 149.255801][ T9013] dummy0: entered allmulticast mode [ 149.260756][ T9013] dummy0: entered promiscuous mode [ 149.261744][ T9013] bridge0: port 3(dummy0) entered blocking state [ 149.261976][ T9013] bridge0: port 3(dummy0) entered forwarding state [ 149.266224][ T9013] dummy0: left allmulticast mode [ 149.266312][ T9013] dummy0: left promiscuous mode [ 149.266708][ T9013] bridge0: port 3(dummy0) entered disabled state [ 149.490466][ T9029] netlink: 'syz.4.1203': attribute type 1 has an invalid length. [ 149.490481][ T9029] netlink: 'syz.4.1203': attribute type 4 has an invalid length. [ 149.491092][ T9029] netlink: 'syz.4.1203': attribute type 1 has an invalid length. [ 149.491104][ T9029] netlink: 'syz.4.1203': attribute type 4 has an invalid length. [ 149.543225][ T9024] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 149.661409][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 150.193428][ T9068] policy can only be matched on NF_INET_PRE_ROUTING [ 150.193442][ T9068] unable to load match [ 150.289771][ T1370] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 150.768386][ T9109] netlink: 'syz.3.1234': attribute type 1 has an invalid length. [ 150.879291][ T9115] bond2: (slave bridge3): making interface the new active one [ 150.879880][ T9115] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 150.990119][ T9124] netlink: 'syz.2.1239': attribute type 7 has an invalid length. [ 150.990143][ T9124] netlink: 'syz.2.1239': attribute type 8 has an invalid length. [ 151.022892][ T9124] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 151.035767][ T9124] geneve1: entered promiscuous mode [ 151.044905][ T9124] erspan0: entered promiscuous mode [ 151.340612][ T9137] ip_tables: iptables: counters copy to user failed while replacing table [ 151.740135][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 151.846052][ T9160] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 151.890303][ T9160] syzkaller1: entered promiscuous mode [ 151.890329][ T9160] syzkaller1: entered allmulticast mode [ 151.923210][ T9166] ip_tables: iptables: counters copy to user failed while replacing table [ 151.925092][ T9166] ip_tables: iptables: counters copy to user failed while replacing table [ 152.071578][ T9172] __nla_validate_parse: 10 callbacks suppressed [ 152.071599][ T9172] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1262'. [ 152.718716][ T9211] netlink: 'syz.3.1280': attribute type 1 has an invalid length. [ 152.718752][ T9211] netlink: 'syz.3.1280': attribute type 4 has an invalid length. [ 152.718765][ T9211] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1280'. [ 152.972641][ T9226] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 153.014661][ T9230] veth0: entered promiscuous mode [ 153.066259][ T9230] veth0: left promiscuous mode [ 153.794094][ T9275] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1307'. [ 154.336354][ T9301] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1319'. [ 154.499084][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 154.505548][ T9310] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 154.763840][ T9323] trusted_key: syz.2.1329 sent an empty control message without MSG_MORE. [ 154.950608][ T9330] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1331'. [ 155.358753][ T1370] nci: nci_rx_work: unknown MT 0x1 [ 156.046733][ T9388] ip_tables: iptables: counters copy to user failed while replacing table [ 156.728837][ T9413] syzkaller1: entered promiscuous mode [ 156.728859][ T9413] syzkaller1: entered allmulticast mode [ 158.241330][ T9346] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 158.530994][ T9443] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1372'. [ 158.649199][ T9452] netlink: 'syz.2.1377': attribute type 1 has an invalid length. [ 158.782232][ T1164] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 158.886851][ T9469] netlink: 'syz.4.1385': attribute type 1 has an invalid length. [ 158.948639][ T9469] bond4: entered promiscuous mode [ 158.951658][ T9469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.000880][ T9469] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.001363][ T9469] bond4: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 159.001383][ T9469] bond4: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 159.025544][ T9469] bond4: (slave ip6gre2): making interface the new active one [ 159.025567][ T9469] ip6gre2: entered promiscuous mode [ 159.043472][ T9469] bond4: (slave ip6gre2): Enslaving as an active interface with an up link [ 160.150794][ T9501] netlink: 'syz.4.1394': attribute type 4 has an invalid length. [ 160.179297][ T9501] netlink: 'syz.4.1394': attribute type 4 has an invalid length. [ 160.699886][ T9529] netlink: 'syz.4.1405': attribute type 5 has an invalid length. [ 160.749155][ T9532] netlink: 'syz.4.1406': attribute type 1 has an invalid length. [ 160.782771][ T9532] bond5: (slave geneve2): making interface the new active one [ 160.783527][ T9532] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 160.817200][ T1370] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 160.817404][ T1370] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 160.818012][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 160.818049][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 161.515925][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1417'. [ 161.700366][ T9455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 161.802508][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1419'. [ 162.263158][ T9583] syzkaller1: entered promiscuous mode [ 162.263181][ T9583] syzkaller1: entered allmulticast mode [ 162.405952][ T1370] nci: nci_rx_work: unknown MT 0x1 [ 163.223391][ T9624] batman_adv: batadv0: Adding interface: syzkaller0 [ 163.223410][ T9624] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.223437][ T9624] batman_adv: batadv0: Interface activated: syzkaller0 [ 163.270509][ T9623] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 163.295671][ T9623] batman_adv: batadv0: Removing interface: syzkaller0 [ 163.818754][ T9647] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1455'. [ 164.040149][ T9661] netlink: 'syz.0.1462': attribute type 26 has an invalid length. [ 164.040171][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'. [ 164.047532][ T9661] netlink: 'syz.0.1462': attribute type 26 has an invalid length. [ 164.047554][ T9661] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1462'. [ 165.300920][ T9585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.301233][ T9588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1430'. [ 165.524218][ T9676] netlink: 'syz.1.1467': attribute type 1 has an invalid length. [ 165.693565][ T9683] 8021q: adding VLAN 0 to HW filter on device bond7 [ 165.696453][ T9683] bond6: (slave bond7): making interface the new active one [ 165.712047][ T9683] bond6: (slave bond7): Enslaving as an active interface with an up link [ 165.715535][ T9694] veth1_to_bond: entered allmulticast mode [ 165.756776][ T9694] veth1_to_bond: left allmulticast mode [ 166.436354][ T9717] ip_tables: iptables: counters copy to user failed while replacing table [ 166.469072][ T9722] netlink: 'syz.4.1482': attribute type 8 has an invalid length. [ 166.469093][ T9722] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1482'. [ 166.469697][ T9719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1479'. [ 166.473047][ T9722] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.473651][ T9722] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.483241][ T9719] ip_tables: iptables: counters copy to user failed while replacing table [ 166.485685][ T9719] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 166.492599][ T9723] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 166.675149][ T9729] bond3: (slave gretap1): making interface the new active one [ 166.675682][ T9729] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 167.012365][ T9759] ip_tables: iptables: counters copy to user failed while replacing table [ 169.739776][ T9739] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 169.938328][ T9784] sit0: entered promiscuous mode [ 169.945776][ T9784] netlink: 'syz.4.1501': attribute type 1 has an invalid length. [ 169.945799][ T9784] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1501'. [ 170.114235][ T9793] sctp: [Deprecated]: syz.1.1505 (pid 9793) Use of int in maxseg socket option. [ 170.114235][ T9793] Use struct sctp_assoc_value instead [ 170.535304][ T9820] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1520'. [ 171.080456][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1534'. [ 171.221604][ T9858] lo: entered allmulticast mode [ 171.225538][ T9857] lo: left allmulticast mode [ 171.366628][ T9866] netlink: 'syz.2.1540': attribute type 1 has an invalid length. [ 171.427665][ T9866] bond3: entered promiscuous mode [ 171.428089][ T9866] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.525901][ T9866] 8021q: adding VLAN 0 to HW filter on device bond3 [ 171.526310][ T9866] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 171.526330][ T9866] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 171.562025][ T9866] bond3: (slave ip6gre2): making interface the new active one [ 171.562050][ T9866] ip6gre2: entered promiscuous mode [ 171.563357][ T9866] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 171.770725][ T9885] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1547'. [ 171.992086][ T9899] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 172.353561][ T9918] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 172.443256][ T9920] bond8: entered promiscuous mode [ 172.443280][ T9920] bond8: entered allmulticast mode [ 172.447072][ T9920] bond8: left allmulticast mode [ 172.451429][ T9920] 8021q: adding VLAN 0 to HW filter on device bond8 [ 172.501926][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1566'. [ 172.525215][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1566'. [ 172.576430][ T9931] syzkaller1: entered promiscuous mode [ 172.576451][ T9931] syzkaller1: entered allmulticast mode [ 172.633030][ T9934] sctp: [Deprecated]: syz.4.1570 (pid 9934) Use of int in max_burst socket option deprecated. [ 172.633030][ T9934] Use struct sctp_assoc_value instead [ 173.090706][ T9957] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1580'. [ 173.090730][ T9957] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1580'. [ 173.194778][ T9962] batman_adv: batadv0: Adding interface: syzkaller0 [ 173.194795][ T9962] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.194822][ T9962] batman_adv: batadv0: Interface activated: syzkaller0 [ 174.010831][ T9961] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 174.045270][ T9961] batman_adv: batadv0: Removing interface: syzkaller0 [ 174.065081][ T9983] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1587'. [ 174.599632][T10015] IPv6: sit2: Disabled Multicast RS [ 174.673363][T10016] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.869708][T10065] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1621'. [ 175.872308][T10065] gretap0: entered promiscuous mode [ 175.911723][T10065] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1621'. [ 175.911978][T10065] 0ªî{X¹¦: renamed from gretap0 [ 175.935868][T10065] 0ªî{X¹¦: left promiscuous mode [ 175.935890][T10065] 0ªî{X¹¦: entered allmulticast mode [ 175.945142][T10065] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 176.726896][T10100] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1633'. [ 176.745371][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1633'. [ 176.953871][T10112] netlink: 'syz.2.1637': attribute type 4 has an invalid length. [ 177.376129][T10130] netlink: 'syz.0.1645': attribute type 1 has an invalid length. [ 177.479547][T10130] bond2: entered promiscuous mode [ 177.479964][T10130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.549858][T10130] 8021q: adding VLAN 0 to HW filter on device bond2 [ 177.550275][T10130] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 177.550298][T10130] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 177.583752][T10130] bond2: (slave xfrm1): making interface the new active one [ 177.583777][T10130] xfrm1: entered promiscuous mode [ 177.602932][T10130] xfrm1: left promiscuous mode [ 177.715976][T10140] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1648'. [ 177.773692][T10143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1648'. [ 177.793062][T10140] 8021q: adding VLAN 0 to HW filter on device bond9 [ 177.839775][T10143] macvlan2: entered promiscuous mode [ 177.839798][T10143] macvlan2: entered allmulticast mode [ 178.521830][T10166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1659'. [ 179.813025][T10206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1672'. [ 180.097267][T10226] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1679'. [ 180.353738][T10235] netlink: 'syz.2.1682': attribute type 1 has an invalid length. [ 180.448422][T10235] 8021q: adding VLAN 0 to HW filter on device bond4 [ 180.986202][T10256] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1688'. [ 181.146150][T10262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1690'. [ 181.728820][T10280] netlink: 'syz.0.1695': attribute type 1 has an invalid length. [ 183.325061][T10280] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 184.032597][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'. [ 184.042222][T10328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1712'. [ 184.438774][T10336] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.1716'. [ 184.645292][T10338] scsi_nl_rcv_msg: discarding partial skb [ 186.292302][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1738'. [ 186.338609][T10392] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 186.895841][T10412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1742'. [ 187.531625][T10428] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 187.623283][T10433] tipc: Started in network mode [ 187.623315][T10433] tipc: Node identity 7e28241370c2, cluster identity 4711 [ 187.623569][T10433] tipc: Enabled bearer , priority 0 [ 187.631351][T10433] syzkaller0: MTU not usable for tipc bearer [ 187.631372][T10433] tipc: Disabling bearer [ 188.894325][T10495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1770'. [ 188.911047][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1770'. [ 189.092595][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1774'. [ 189.092736][T10504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.155589][T10504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.784737][T10533] netlink: 'syz.0.1782': attribute type 4 has an invalid length. [ 189.784758][T10533] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1782'. [ 189.972120][T10525] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 190.144783][T10538] netlink: 'syz.2.1794': attribute type 4 has an invalid length. [ 190.145306][T10538] netlink: 'syz.2.1794': attribute type 4 has an invalid length. [ 190.184581][T10538] bond2: (slave lo): Releasing backup interface [ 190.185452][T10538] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 190.188316][T10538] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 190.221412][ T5761] lo speed is unknown, defaulting to 1000 [ 190.221448][ T5761] syz_device_name_32_chars_1234567: Port: 1 Link DOWN [ 190.312124][T10549] tipc: Failed to remove unknown binding: 66,1,1/0:711897727/711897729 [ 191.070262][T10574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1797'. [ 191.104140][T10574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1797'. [ 191.133723][T10576] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 191.145583][T10548] tipc: Failed to remove unknown binding: 66,1,1/0:711897727/711897729 [ 191.145611][T10548] tipc: Failed to remove unknown binding: 66,1,1/0:711897727/711897729 [ 191.153688][T10576] xt_hashlimit: size too large, truncated to 1048576 [ 191.321425][T10584] sctp: [Deprecated]: syz.1.1801 (pid 10584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.321425][T10584] Use struct sctp_sack_info instead [ 191.526276][T10593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1804'. [ 191.544066][T10596] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1806'. [ 191.589361][T10593] netlink: 'syz.4.1804': attribute type 1 has an invalid length. [ 191.906416][T10604] syzkaller1: entered promiscuous mode [ 191.906439][T10604] syzkaller1: entered allmulticast mode [ 192.233327][T10622] batman_adv: batadv0: Adding interface: veth0 [ 192.233346][T10622] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.233374][T10622] batman_adv: batadv0: Interface activated: veth0 [ 192.236891][T10622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.236914][T10622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.286537][T10622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.286560][T10622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.291279][T10622] batman_adv: batadv0: Interface deactivated: veth0 [ 192.291300][T10622] batman_adv: batadv0: Removing interface: veth0 [ 192.468075][T10515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 192.535401][T10629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1819'. [ 192.720181][T10640] xt_hashlimit: size too large, truncated to 1048576 [ 192.970116][T10650] ip_tables: iptables: counters copy to user failed while replacing table [ 192.995042][T10650] syzkaller1: entered promiscuous mode [ 192.995077][T10650] syzkaller1: entered allmulticast mode [ 193.456101][T10666] netlink: 'syz.3.1832': attribute type 1 has an invalid length. [ 193.736045][ T12] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x82 [ 194.315328][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.315386][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.496571][T10707] bridge1: entered promiscuous mode [ 194.496608][T10707] bridge1: entered allmulticast mode [ 194.624915][T10717] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1847'. [ 194.635561][T10717] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1847'. [ 194.665467][T10719] syzkaller1: entered promiscuous mode [ 194.665490][T10719] syzkaller1: entered allmulticast mode [ 194.766431][T10723] syz_tun: entered allmulticast mode [ 194.770980][T10723] syz_tun: left allmulticast mode [ 196.381868][ T5638] Bluetooth: hci2: command 0x0406 tx timeout [ 196.382134][ T5638] Bluetooth: hci1: command 0x0406 tx timeout [ 196.382162][ T5638] Bluetooth: hci3: command 0x0406 tx timeout [ 196.382185][ T5638] Bluetooth: hci0: command 0x0c3a tx timeout [ 196.590515][T10764] syzkaller1: entered promiscuous mode [ 196.590530][T10764] syzkaller1: entered allmulticast mode [ 196.650692][T10672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 196.682776][T10766] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1514) ! [ 197.508165][T10803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1882'. [ 197.525818][T10803] l2tp_ppp: sess 2/0: no socket in recv [ 197.690235][T10810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1885'. [ 197.877449][T10814] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 197.877484][T10814] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.878541][T10814] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 197.980683][T10823] syzkaller1: entered promiscuous mode [ 197.980704][T10823] syzkaller1: entered allmulticast mode [ 198.468294][ T5642] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 198.469081][ T5642] Bluetooth: hci0: command 0x0c3a tx timeout [ 198.509309][T10821] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 198.937868][T10867] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1901'. [ 199.177678][ T5300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.208080][T10879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1905'. [ 199.230665][T10879] 8021q: adding VLAN 0 to HW filter on device bond6 [ 199.253981][T10879] bond6: (slave veth7): Enslaving as an active interface with an up link [ 199.265833][T10879] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 199.266273][T10879] bond6: (slave wlan1): Opening slave failed [ 199.312943][T10882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1906'. [ 199.656907][T10887] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1908'. [ 200.381016][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1919'. [ 201.420457][T10839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 202.060669][T10949] netlink: 'syz.4.1929': attribute type 1 has an invalid length. [ 202.060693][T10949] netlink: 'syz.4.1929': attribute type 4 has an invalid length. [ 202.060705][T10949] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1929'. [ 202.063098][T10949] netlink: 'syz.4.1929': attribute type 1 has an invalid length. [ 202.063115][T10949] netlink: 'syz.4.1929': attribute type 4 has an invalid length. [ 202.063125][T10949] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1929'. [ 203.430266][T10978] batman_adv: batadv0: Adding interface: syzkaller0 [ 203.430309][T10978] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 203.430339][T10978] batman_adv: batadv0: Interface activated: syzkaller0 [ 203.577248][T10987] syzkaller1: entered promiscuous mode [ 203.577273][T10987] syzkaller1: entered allmulticast mode [ 203.583957][T10982] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1942'. [ 204.246059][T10977] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 204.301102][T10992] ip_tables: iptables: counters copy to user failed while replacing table [ 204.304406][T10977] batman_adv: batadv0: Removing interface: syzkaller0 [ 204.789398][T11012] netlink: 'syz.1.1952': attribute type 1 has an invalid length. [ 204.860373][T11012] 8021q: adding VLAN 0 to HW filter on device bond10 [ 204.918341][T11012] netlink: 'syz.1.1952': attribute type 10 has an invalid length. [ 204.918365][T11012] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1952'. [ 204.923290][T11017] bond10: (slave dummy0): Enslaving as a backup interface with an up link [ 204.925691][T11012] dummy0: entered promiscuous mode [ 204.967177][ T1370] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 204.972619][ T1370] bond10: (slave dummy0): link status up again after 0 ms [ 204.998511][ T1370] bond10: (slave dummy0): link status up again after 0 ms [ 205.023050][ T12] bond10: (slave dummy0): link status up again after 0 ms [ 205.038753][ T1370] bond10: (slave dummy0): link status up again after 0 ms [ 205.057338][ T1370] bond10: (slave dummy0): link status up again after 0 ms [ 205.077672][ T1370] bond10: (slave dummy0): link status up again after 0 ms [ 205.077713][ T1370] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 205.097647][ T1370] bond10: (slave dummy0): link status up again after 0 ms [ 205.266727][T11012] bond10: (slave dummy0): Removing an active aggregator [ 205.271698][T11012] bond10: (slave dummy0): Releasing backup interface [ 205.536332][T11030] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.1958'. [ 205.549438][T11032] netlink: 'syz.4.1959': attribute type 4 has an invalid length. [ 206.526437][T11060] netlink: 193 bytes leftover after parsing attributes in process `syz.1.1967'. [ 207.471980][T11071] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1971'. [ 207.764784][T11087] sctp: [Deprecated]: syz.3.1977 (pid 11087) Use of int in maxseg socket option. [ 207.764784][T11087] Use struct sctp_assoc_value instead [ 207.993358][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1979'. [ 208.318252][T11117] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 209.532827][ T53] Bluetooth: hci2: connection err: -111 [ 209.594870][T11173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2008'. [ 209.617385][T11173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2008'. [ 210.101037][T11190] net_ratelimit: 9 callbacks suppressed [ 210.101056][T11190] ip_tables: iptables: counters copy to user failed while replacing table [ 210.599296][ T53] Bluetooth: hci4: unexpected event for opcode 0x0005 [ 211.163175][T11225] netlink: 'syz.2.2026': attribute type 2 has an invalid length. [ 211.163197][T11225] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2026'. [ 211.306402][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2029'. [ 211.363577][T11235] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2029'. [ 211.486713][T11216] syzkaller1: entered promiscuous mode [ 211.486728][T11216] syzkaller1: entered allmulticast mode [ 212.343407][T11283] syzkaller1: entered promiscuous mode [ 212.343431][T11283] syzkaller1: entered allmulticast mode [ 212.453787][T11286] gretap0: entered promiscuous mode [ 212.453811][T11286] gretap0: entered allmulticast mode [ 212.596219][T11290] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2050'. [ 212.738312][T11293] batman_adv: batadv0: Adding interface: syzkaller0 [ 212.738330][T11293] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.738360][T11293] batman_adv: batadv0: Interface activated: syzkaller0 [ 212.923506][T11302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2052'. [ 213.214469][T11292] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 213.291827][T11292] batman_adv: batadv0: Removing interface: syzkaller0 [ 214.233757][T11341] xt_hashlimit: size too large, truncated to 1048576 [ 214.308794][T11342] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 214.322093][T11344] netlink: 'syz.0.2065': attribute type 1 has an invalid length. [ 214.324711][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.324812][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.440847][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2065'. [ 214.467811][T11349] bond3: (slave veth0_to_bond): making interface the new active one [ 214.471286][T11349] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 214.485827][T11344] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.564197][T11349] syz.0.2065 (11349) used greatest stack depth: 19184 bytes left [ 214.575978][T11325] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.684737][T11359] lo: entered allmulticast mode [ 214.692635][T11358] lo: left allmulticast mode [ 215.235728][T11377] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2074'. [ 215.334608][T11379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2075'. [ 215.684318][T11383] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 215.827237][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2080'. [ 216.941346][T11433] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2095'. [ 216.946309][T11428] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 217.347215][T11457] bond4: entered allmulticast mode [ 217.347239][T11457] ip6gre2: entered allmulticast mode [ 217.350001][T11456] bond4: left allmulticast mode [ 217.350020][T11456] ip6gre2: left allmulticast mode [ 217.453412][T11464] netlink: 'syz.4.2106': attribute type 1 has an invalid length. [ 217.495791][T11464] bond7: (slave gretap0): making interface the new active one [ 217.505812][T11464] bond7: (slave gretap0): Enslaving as an active interface with an up link [ 220.224350][T11446] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.307408][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2120'. [ 220.392336][T11485] ip_tables: iptables: counters copy to user failed while replacing table [ 220.401347][T11485] ip_tables: iptables: counters copy to user failed while replacing table [ 220.424546][T11491] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.424709][T11491] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.426351][T11491] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.426509][T11491] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.464995][T11491] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 220.466392][ T29] lo speed is unknown, defaulting to 1000 [ 220.494289][ T29] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 220.630626][T11501] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2115'. [ 221.823816][ T53] Bluetooth: hci4: link tx timeout [ 221.823835][ T53] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 221.885680][T11558] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 222.762601][T11566] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2142'. [ 222.856525][T11571] syzkaller1: entered promiscuous mode [ 222.856547][T11571] syzkaller1: entered allmulticast mode [ 223.123775][T11576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2146'. [ 223.382897][T11488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.579780][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2153'. [ 223.640119][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2154'. [ 223.656891][T11593] 8021q: adding VLAN 0 to HW filter on device team1 [ 223.899209][ T5642] Bluetooth: hci4: command 0x0406 tx timeout [ 223.952887][T11605] A link change request failed with some changes committed already. Interface eth0 may have been left with an inconsistent configuration, please check. [ 224.092708][T11614] syzkaller1: entered promiscuous mode [ 224.092733][T11614] syzkaller1: entered allmulticast mode [ 224.604069][T11631] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2167'. [ 225.079529][T11653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2174'. [ 225.123984][T11653] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2174'. [ 225.373779][T11661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2177'. [ 225.659516][T11669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2180'. [ 226.173349][T11677] syz.2.2184 (11677) used greatest stack depth: 17928 bytes left [ 226.364800][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2193'. [ 226.453833][T11703] syzkaller1: entered promiscuous mode [ 226.453854][T11703] syzkaller1: entered allmulticast mode [ 227.016097][T11731] netlink: 'syz.2.2203': attribute type 1 has an invalid length. [ 227.016118][T11731] netlink: 'syz.2.2203': attribute type 4 has an invalid length. [ 227.016131][T11731] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2203'. [ 227.233227][T11743] netlink: 372 bytes leftover after parsing attributes in process `syz.0.2208'. [ 227.302042][T11746] tipc: Started in network mode [ 227.302071][T11746] tipc: Node identity b6ebe292197f, cluster identity 4711 [ 227.302266][T11746] tipc: Enabled bearer , priority 10 [ 227.329925][T11745] tipc: Resetting bearer [ 227.396308][T11752] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2213'. [ 227.460195][T11756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2215'. [ 227.482675][T11745] tipc: Disabling bearer [ 227.757768][T11773] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2222'. [ 228.426419][T11795] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2228'. [ 228.626642][T11800] ip_tables: iptables: counters copy to user failed while replacing table [ 228.894048][T11807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.911749][T11807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.484587][T11834] tipc: Started in network mode [ 229.484631][T11834] tipc: Node identity deb85dd117b7, cluster identity 4711 [ 229.484876][T11834] tipc: Enabled bearer , priority 0 [ 229.564144][T11839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2245'. [ 229.602661][T11834] syzkaller0: entered promiscuous mode [ 229.602686][T11834] syzkaller0: entered allmulticast mode [ 229.603481][T11834] tipc: Resetting bearer [ 229.639726][T11833] tipc: Resetting bearer [ 229.754336][T11849] netlink: 'syz.4.2249': attribute type 10 has an invalid length. [ 230.380330][ C1] [ 230.382681][ C1] ================================ [ 230.387791][ C1] WARNING: inconsistent lock state [ 230.392918][ C1] syzkaller #0 Not tainted [ 230.397317][ C1] -------------------------------- [ 230.402403][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 230.409230][ C1] ksoftirqd/1/23 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 230.415450][ C1] ffff888055ffe260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 230.424742][ C1] {SOFTIRQ-ON-W} state was registered at: [ 230.430438][ C1] lock_acquire+0x115/0x350 [ 230.435019][ C1] lock_sock_nested+0x41/0x100 [ 230.439880][ C1] x25_bind+0x209/0x450 [ 230.444116][ C1] __sys_bind+0x2e3/0x410 [ 230.448541][ C1] __x64_sys_bind+0x7a/0x90 [ 230.453124][ C1] do_syscall_64+0x166/0x520 [ 230.457828][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.463790][ C1] irq event stamp: 2299574 [ 230.468232][ C1] hardirqs last enabled at (2299574): [] __local_bh_enable_ip+0xd6/0x140 [ 230.478293][ C1] hardirqs last disabled at (2299573): [] __local_bh_enable_ip+0x72/0x140 [ 230.488373][ C1] softirqs last enabled at (2299518): [] run_ksoftirqd+0x36/0x60 [ 230.497785][ C1] softirqs last disabled at (2299523): [] run_ksoftirqd+0x36/0x60 [ 230.507168][ C1] [ 230.507168][ C1] other info that might help us debug this: [ 230.515216][ C1] Possible unsafe locking scenario: [ 230.515216][ C1] [ 230.522655][ C1] CPU0 [ 230.525922][ C1] ---- [ 230.529189][ C1] lock(sk_lock-AF_X25); [ 230.533516][ C1] [ 230.536958][ C1] lock(sk_lock-AF_X25); [ 230.541460][ C1] [ 230.541460][ C1] *** DEADLOCK *** [ 230.541460][ C1] [ 230.549598][ C1] locks held by ksoftirqd/1/23: 1, last CPU#1: [ 230.555744][ C1] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 230.565758][ C1] [ 230.565758][ C1] stack backtrace: [ 230.571639][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 230.580832][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 230.590883][ C1] Call Trace: [ 230.594164][ C1] [ 230.597100][ C1] dump_stack_lvl+0xe8/0x150 [ 230.601699][ C1] print_usage_bug+0x28c/0x2e0 [ 230.606458][ C1] valid_state+0xbe/0xf0 [ 230.610708][ C1] mark_lock_irq+0x36/0x380 [ 230.615210][ C1] mark_lock+0x117/0x190 [ 230.619448][ C1] __lock_acquire+0x71e/0x2de0 [ 230.624211][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 230.629511][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 230.634523][ C1] ? lock_acquire+0x115/0x350 [ 230.639204][ C1] lock_acquire+0x115/0x350 [ 230.643720][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 230.648835][ C1] ? x25_kill_by_neigh+0x103/0x250 [ 230.653944][ C1] lock_sock_nested+0x41/0x100 [ 230.658703][ C1] ? x25_kill_by_neigh+0x10d/0x250 [ 230.663813][ C1] x25_kill_by_neigh+0x10d/0x250 [ 230.668749][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 230.674133][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 230.679598][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 230.685056][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 230.690959][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 230.696337][ C1] lapbeth_napi_poll+0x42/0x90 [ 230.701109][ C1] __napi_poll+0xaa/0x330 [ 230.705454][ C1] net_rx_action+0x61d/0xf50 [ 230.710052][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 230.715161][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 230.720379][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 230.725666][ C1] handle_softirqs+0x265/0x8d0 [ 230.730439][ C1] run_ksoftirqd+0x36/0x60 [ 230.734852][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 230.739789][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 230.744810][ C1] kthread+0x38b/0x480 [ 230.748870][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 230.754319][ C1] ? __pfx_kthread+0x10/0x10 [ 230.758901][ C1] ret_from_fork+0x514/0xb70 [ 230.763485][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 230.768600][ C1] ? __switch_to+0xc78/0x1410 [ 230.773289][ C1] ? __pfx_kthread+0x10/0x10 [ 230.777887][ C1] ret_from_fork_asm+0x1a/0x30 [ 230.782663][ C1] [ 230.785803][ C1] BUG: sleeping function called from invalid context at net/core/sock.c:3910 [ 230.785820][ C1] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 23, name: ksoftirqd/1 [ 230.785838][ C1] preempt_count: 100, expected: 0 [ 230.785849][ C1] RCU nest depth: 1, expected: 0 [ 230.785859][ C1] INFO: lockdep is turned off. [ 230.785865][ C1] Preemption disabled at: [ 230.785871][ C1] [] handle_softirqs+0xed/0x8d0 [ 230.785914][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full) [ 230.785935][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 230.785946][ C1] Call Trace: [ 230.785951][ C1] [ 230.785957][ C1] dump_stack_lvl+0xe8/0x150 [ 230.785990][ C1] __might_resched+0x36a/0x4c0 [ 230.786010][ C1] ? handle_softirqs+0xed/0x8d0 [ 230.786037][ C1] lock_sock_nested+0x56/0x100 [ 230.786061][ C1] x25_kill_by_neigh+0x10d/0x250 [ 230.786091][ C1] x25_lapb_receive_frame+0x1b0/0xfb0 [ 230.786122][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 230.786147][ C1] ? netif_receive_skb_core+0x33/0x2b0 [ 230.786171][ C1] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 230.786202][ C1] netif_receive_skb_core+0x2a6/0x2b0 [ 230.786231][ C1] lapbeth_napi_poll+0x42/0x90 [ 230.786267][ C1] __napi_poll+0xaa/0x330 [ 230.786295][ C1] net_rx_action+0x61d/0xf50 [ 230.786330][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 230.786357][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 230.786383][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 230.786414][ C1] handle_softirqs+0x265/0x8d0 [ 230.786445][ C1] run_ksoftirqd+0x36/0x60 [ 230.786472][ C1] smpboot_thread_fn+0x5f8/0xb30 [ 230.786491][ C1] ? smpboot_thread_fn+0x4e/0xb30 [ 230.786514][ C1] kthread+0x38b/0x480 [ 230.786536][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 230.786551][ C1] ? __pfx_kthread+0x10/0x10 [ 230.786569][ C1] ret_from_fork+0x514/0xb70 [ 230.786588][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 230.786606][ C1] ? __switch_to+0xc78/0x1410 [ 230.786631][ C1] ? __pfx_kthread+0x10/0x10 [ 230.786649][ C1] ret_from_fork_asm+0x1a/0x30 [ 230.786673][ C1] [ 231.680037][T11833] tipc: Disabling bearer [ 231.684581][T11849] bond3: (slave team0): Releasing backup interface [ 231.693724][T11849] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.695866][T11849] team0: entered promiscuous mode [ 231.695884][T11849] team_slave_0: entered promiscuous mode [ 231.696015][T11849] team_slave_1: entered promiscuous mode [ 231.696507][T11849] bond0: (slave team0): Enslaving as an active interface with an up link [ 231.744385][ T993] tipc: Node number set to 3373227473