0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 685.444628][T32009] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 685.461767][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.468235][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.496410][T32009] device ‘|‚ªu left promiscuous mode 22:21:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000504) 22:21:38 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 685.550575][T32009] net_ratelimit: 1 callbacks suppressed [ 685.550596][T32009] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 685.587779][T32041] xt_hashlimit: size too large, truncated to 1048576 [ 685.618417][T32041] xt_hashlimit: overflow, try lower: 0/0 [ 685.647078][T32045] xt_hashlimit: size too large, truncated to 1048576 22:21:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468dd31de350187d995e88e121385a594620c56dd272359a5c42103f0cf4537b9fd965e373d9c33888159b10b77896437bf9100ed9410e9009069cfaafb2ce1cc530fea087aab14c8f1bae7a10eada8445eb3aa3e68b62088653930cc326ac4275efaa6f30b6d771141f41ec9d79c0121d3ab8eed8c11152bdbade2905bd303185db8963c9a9956e985c883a694587789c339c167f2ff86f75b4b12d5841c953018fa37cd9ef4873e8ddc11d2eab44cb1e530ed31ca7156b063e41f0e2d8f1f85ce3633b53abbf8f45aab44a033852558"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x4c, 0x64, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5}]}]}]}}]}, 0x4c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r6, &(0x7f0000000000)=0x2, 0x12) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x7f, 0x5, 0x8, 0x6}, {0x40, 0x2, 0xca, 0x4}]}, 0x10) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r5, &(0x7f0000000000)=0x2, 0x12) sendmsg$nl_route(r5, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv4_getroute={0x1c, 0x1a, 0x200, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x14, 0x40, 0x0, 0x4, 0x0, 0x5, 0xa00}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004881}, 0xc0) [ 685.672556][T32045] xt_hashlimit: overflow, try lower: 0/0 22:21:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130011046809070000000f0f0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:21:38 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:38 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xc75], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 685.803581][ T25] audit: type=1804 audit(1634682098.658:626): pid=32046 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/510/cgroup.controllers" dev="sda1" ino=14658 res=1 errno=0 22:21:38 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x209) [ 685.997807][T32056] xt_hashlimit: size too large, truncated to 1048576 [ 686.009262][T32057] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 686.039416][T32056] xt_hashlimit: overflow, try lower: 0/0 22:21:38 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 686.089990][T32057] device ‘|‚ªu entered promiscuous mode [ 686.090162][T32063] xt_hashlimit: size too large, truncated to 1048576 [ 686.151946][T32063] xt_hashlimit: overflow, try lower: 0/0 [ 686.181005][T32059] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:21:39 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xc76], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 686.202435][T32061] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 686.228422][T32061] device ‘|‚ªu left promiscuous mode 22:21:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000508) [ 686.267312][T32061] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 686.348655][T32062] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 686.382701][T32079] xt_hashlimit: size too large, truncated to 1048576 [ 686.429084][T32079] xt_hashlimit: overflow, try lower: 0/0 [ 686.467086][T32057] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:21:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 686.503324][T32057] device ‘|‚ªu entered promiscuous mode [ 686.511571][T32095] xt_hashlimit: size too large, truncated to 1048576 [ 686.542242][T32095] xt_hashlimit: overflow, try lower: 0/0 [ 686.563760][ T25] audit: type=1804 audit(1634682099.418:627): pid=32096 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/511/cgroup.controllers" dev="sda1" ino=14660 res=1 errno=0 22:21:39 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xd00], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 686.614206][T32061] device ‘|‚ªu left promiscuous mode [ 686.624355][T32061] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000509) 22:21:39 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) connect$packet(r7, &(0x7f0000000240)={0x11, 0x15, r5, 0x1, 0x40, 0x6, @broadcast}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000340)={@remote, 0x5, r5}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf6, r5, 0x1, 0x7, 0x6, @random="c38d5e88884d"}, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r9, 0x10e, 0x8, &(0x7f0000000040)=0xff, 0x4) bind$netlink(r9, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffbf51bf}, 0xc) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="4800000010000507000000000000000200000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x6c, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x807, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_PROTO_DOWN={0x8, 0x1c, 0xffffffef}]}, 0x28}}, 0x0) 22:21:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000100f0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:21:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 686.881179][T32105] xt_hashlimit: size too large, truncated to 1048576 [ 686.898155][T32105] xt_hashlimit: overflow, try lower: 0/0 22:21:39 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x238) [ 686.959954][T32109] xt_hashlimit: size too large, truncated to 1048576 [ 686.987162][T32109] xt_hashlimit: overflow, try lower: 0/0 [ 687.020291][T32113] device ‘|‚ªu entered promiscuous mode [ 687.072643][ T25] audit: type=1804 audit(1634682099.928:628): pid=32111 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/512/cgroup.controllers" dev="sda1" ino=14654 res=1 errno=0 22:21:40 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xd02], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 687.185508][T32118] device ‘|‚ªu left promiscuous mode [ 687.197456][T32118] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 687.386659][T32113] device ‘|‚ªu entered promiscuous mode 22:21:40 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000050d) 22:21:40 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x1d01], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 687.441698][T32118] device ‘|‚ªu left promiscuous mode [ 687.453223][T32118] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000480f0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:21:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000509) [ 687.755325][ T25] audit: type=1804 audit(1634682100.608:629): pid=32185 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/513/cgroup.controllers" dev="sda1" ino=14508 res=1 errno=0 22:21:40 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x1f00], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 687.848240][T32190] device ‘|‚ªu entered promiscuous mode [ 687.946385][T32195] device ‘|‚ªu left promiscuous mode [ 687.965977][T32195] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:40 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x292) [ 688.130350][T32190] device ‘|‚ªu entered promiscuous mode 22:21:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:41 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x2000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 688.187630][T32195] device ‘|‚ªu left promiscuous mode [ 688.203778][T32195] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 688.242747][ T25] audit: type=1804 audit(1634682101.098:630): pid=32197 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir001381051/syzkaller.SlIH8Y/444/cgroup.controllers" dev="sda1" ino=14651 res=1 errno=0 22:21:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x10000050f) 22:21:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130011046809070000004c0f0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:21:41 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x2201], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:41 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r0 = socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16=r0], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 688.553866][T32229] device ‘|‚ªu entered promiscuous mode [ 688.614667][T32232] device ‘|‚ªu left promiscuous mode [ 688.639236][T32232] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 688.645459][ T25] audit: type=1804 audit(1634682101.488:631): pid=32230 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/514/cgroup.controllers" dev="sda1" ino=14647 res=1 errno=0 [ 688.731603][T32229] device ‘|‚ªu entered promiscuous mode 22:21:41 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x2400], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 688.792298][T32232] device ‘|‚ªu left promiscuous mode [ 688.816999][T32232] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:41 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r0, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x8, 0x30}, 0xc) r1 = socket(0x27, 0x4, 0x5379) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14001e00", @ANYRES16=0x0, @ANYBLOB="006d2541c00226bd7000fedbdacf43e2643fad"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4040010) r2 = socket(0xa, 0x805, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r2, &(0x7f0000000240)='\f', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) r4 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f00000004c0)={'filter\x00', 0x0, [0x5, 0x2, 0x100, 0x7, 0x3]}, &(0x7f0000000540)=0x54) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) sendto$inet6(r3, &(0x7f00000000c0)="ba9b396724bf86770f8e77bd841a642c099952b126c03fafb04e4c5b7a071c242b1836583241885e036c6b16a953e6479e54796c5eedae811648712819e7faaa4f942992fc3b2c4cc786d8ab6d5151bc1d5327f96178f53f909586acefa60e4d5b2dc2791e2d657ebd8dbc5b91ab5ce34ae84e5806c943cd60a16e57cc56f96da16e1969f383a4ee08091144c74c099590b54a89c3d5687814a6fdb851afe86f32b8873205a41f5ceb2fcc", 0xab, 0x4880, &(0x7f0000000180)={0xa, 0x4e23, 0x101, @private1={0xfc, 0x1, '\x00', 0x1}, 0x401}, 0x1c) 22:21:41 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r0 = socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16=r0], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000600f0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:21:41 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000510) 22:21:42 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x29e) 22:21:42 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x2c03], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 689.236614][T32252] device ‘|‚ªu entered promiscuous mode 22:21:42 executing program 0: bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r0 = socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16=r0], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 689.328151][T32257] device ‘|‚ªu left promiscuous mode [ 689.336964][T32257] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 689.377525][ T25] audit: type=1804 audit(1634682102.229:632): pid=32256 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/515/cgroup.controllers" dev="sda1" ino=14634 res=1 errno=0 22:21:42 executing program 3: syz_emit_ethernet(0x86, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "000000010865390403030503000000016a3000", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a13bd5b6cc629469314a1d8c69"}}}}}}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @val={0x3, 0x3, 0x3f, 0x0, 0x7f, 0xff80}, @mpls={[{0x4c91, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x100, 0x0, 0x1}, {0x80000, 0x0, 0x1}, {0x8}], @ipv6=@generic={0x7, 0x6, "097dca", 0x7a, 0xff, 0xff, @dev={0xfe, 0x80, '\x00', 0x19}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@fragment={0x3a, 0x0, 0x80, 0x0, 0x0, 0x8, 0x68}], "548c27cd593ac764ec7359786fd0ab371e67395d7371932b136e755b0de7eec9c8d1dc9d3cae6d36ed79ba9bd71f20427dcddaff5ccbd6242d07b15e31aa818a07d09f53720c5adc8dcde1518ed649330b37d7de5d69a42a8f3a4d9ae7bd41c902d0c3d4d2e8cefea8db409938e93ef19618"}}}}, 0xc0) syz_emit_ethernet(0x118, &(0x7f0000000240)={@broadcast, @remote, @val={@void, {0x8100, 0x2}}, {@mpls_uc={0x8847, {[{0x401, 0x0, 0x1}, {0x9}], @llc={@snap={0xab, 0xab, "88e8", 'O8L', 0x5, "e60eb5ccb69c27bbfd54514991c644a405afe5ee4c5fcfdc450a9fa64cf21c5bf11b9ca0b401788f37f906e824900666a3fccc4392c685944c0fb3df69ef1e6ffc465cf0862a0e62f340ea8b6048da448bb37ff5a497fdd1afa05495b74965bf8c175fd131d47c0fac987cfbf5578748d3ccffb9a52437f83d587b659d459a5f50897179b1747779a78062de449ad782489a9c867b3867218baaebff14e1e11321448e60b2f67eabf4565519db3d5714965ad2f0c3d7deca819db9b1bdab261bb2e339099dab5942b0b4805996af1c01a0f483f74c4f904e59d0e0a353d084d8fe77b4d230dc9e06ee00c8789ac270c62b1b55c304"}}}}}}, &(0x7f0000000380)={0x1, 0x3, [0xfea, 0x2e4, 0x923, 0x451]}) [ 689.531127][T32252] device ‘|‚ªu entered promiscuous mode 22:21:42 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x3201], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000680f0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:21:42 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000564) 22:21:42 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 689.793573][T32290] device ‘|‚ªu left promiscuous mode 22:21:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r3, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80, 0x7}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x80}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x440c0}, 0x8000) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xeffe}) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x0, @local}}) writev(r1, &(0x7f00000016c0)=[{&(0x7f0000000380)="ad", 0xfdef}], 0x1) openat$cgroup_ro(r0, &(0x7f0000000080)='net_prio.prioidx\x00', 0x0, 0x0) [ 689.835912][T32290] device ‘|‚ªu entered promiscuous mode 22:21:42 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x3c03], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 689.898965][T32293] device ‘|‚ªu left promiscuous mode 22:21:42 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130011046809070000006c0f0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 690.021508][ T25] audit: type=1804 audit(1634682102.879:633): pid=32296 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/516/cgroup.controllers" dev="sda1" ino=14547 res=1 errno=0 [ 690.103271][T32305] hashlimit_mt_check_common: 15 callbacks suppressed [ 690.103291][T32305] xt_hashlimit: size too large, truncated to 1048576 [ 690.143593][T32305] hashlimit_mt_check_common: 15 callbacks suppressed [ 690.143614][T32305] xt_hashlimit: overflow, try lower: 0/0 [ 690.181318][T32308] __nla_validate_parse: 27 callbacks suppressed 22:21:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 690.181338][T32308] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 690.220318][T32309] xt_hashlimit: size too large, truncated to 1048576 [ 690.265238][T32308] device ‘|‚ªu entered promiscuous mode [ 690.267737][T32309] xt_hashlimit: overflow, try lower: 0/0 22:21:43 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x2a8) 22:21:43 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000680f0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 690.348090][T32310] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 690.367982][T32310] device ‘|‚ªu left promiscuous mode 22:21:43 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x4302], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:43 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000587) [ 690.421749][T32308] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 690.455062][T32308] device ‘|‚ªu entered promiscuous mode [ 690.535201][T32316] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 690.564809][T32316] device ‘|‚ªu entered promiscuous mode [ 690.576889][T32324] xt_hashlimit: size too large, truncated to 1048576 22:21:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 690.611238][T32324] xt_hashlimit: overflow, try lower: 0/0 [ 690.633874][T32310] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 690.657832][T32310] device ‘|‚ªu left promiscuous mode [ 690.695617][T32310] net_ratelimit: 3 callbacks suppressed [ 690.695637][T32310] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:43 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x4400], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 690.743594][ T25] audit: type=1804 audit(1634682103.599:634): pid=32327 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/517/cgroup.controllers" dev="sda1" ino=14642 res=1 errno=0 [ 690.849817][T32318] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:21:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000740f0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 690.945665][T32342] xt_hashlimit: size too large, truncated to 1048576 [ 690.962063][T32319] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. 22:21:43 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 690.990587][T32342] xt_hashlimit: overflow, try lower: 0/0 [ 690.998846][T32319] device ‘|‚ªu left promiscuous mode [ 691.040687][T32319] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:44 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x4800], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:44 executing program 4: setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000180)=0x65, 0x2) clock_gettime(0x0, &(0x7f0000000640)={0x0, 0x0}) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000600)=[{{&(0x7f0000000280)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000400)=""/65, 0x41}, {&(0x7f00000000c0)=""/59, 0x3b}, {&(0x7f0000000200)=""/21, 0x15}, {&(0x7f0000000480)=""/54, 0x36}], 0x5, &(0x7f0000000540)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xa0}}], 0x1, 0x2022, &(0x7f0000000680)={r0, r1+10000000}) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c004000040601040000000100000000000000000500010006004000"], 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) write$binfmt_script(r3, &(0x7f0000000100)=ANY=[], 0x208e24b) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0xa74825934476f6ed}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, 0x0, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffffffff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40088c4}, 0x814) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000006fc0)={0x0, 0x0, &(0x7f0000006f80)={&(0x7f0000006dc0)={0x20, r5, 0x4906869e7eb2b74f, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9ffa97ea0720eec3}]}]}, 0x20}}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000000)={0x86323ca6, 0x9, 0xfffffff7, 0x5}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r7, r6, 0x0, 0x100000502) [ 691.158266][T32353] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 691.211800][T32353] device ‘|‚ªu entered promiscuous mode 22:21:44 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000440), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000580)={&(0x7f0000000400), 0xc, &(0x7f0000000540)={&(0x7f0000000000)={0x94, r2, 0x8, 0x0, 0x0, {}, [@NBD_ATTR_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x101}]}, 0x94}}, 0x0) [ 691.265682][T32354] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 691.290067][T32354] device ‘|‚ªu left promiscuous mode 22:21:44 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x2aa) [ 691.346419][T32354] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 691.351338][T32363] xt_hashlimit: size too large, truncated to 1048576 22:21:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:44 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000040601040000000000000000000000000500010007000048"], 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000340)={0x1, 0xf0a, 0x46b6}) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0x20, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4024080}, 0x4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000502) openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuacct.stat\x00', 0x0, 0x0) [ 691.424885][T32363] xt_hashlimit: overflow, try lower: 0/0 [ 691.446230][T32353] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 691.480087][T32353] device ‘|‚ªu entered promiscuous mode [ 691.487884][T32363] xt_hashlimit: size too large, truncated to 1048576 [ 691.515457][T32363] xt_hashlimit: overflow, try lower: 0/0 [ 691.558980][T32354] device ‘|‚ªu left promiscuous mode [ 691.573429][T32354] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:44 executing program 3: socketpair(0x10, 0x2, 0xd750, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000000)) 22:21:44 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x4a03], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 691.761056][ T25] audit: type=1804 audit(1634682104.619:635): pid=32376 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/519/cgroup.controllers" dev="sda1" ino=14588 res=1 errno=0 22:21:44 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130011046809070000007a0f0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 691.869774][T32395] xt_hashlimit: size too large, truncated to 1048576 [ 691.904959][T32395] xt_hashlimit: overflow, try lower: 0/0 22:21:44 executing program 3: r0 = socket(0x10, 0x803, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0xffffff00) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_atm={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@getchain={0x24, 0x2e, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) [ 691.947323][T32398] xt_hashlimit: size too large, truncated to 1048576 [ 691.985390][T32398] xt_hashlimit: overflow, try lower: 0/0 [ 692.021024][T32401] device ‘|‚ªu entered promiscuous mode 22:21:45 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x4c00], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000502) [ 692.085859][T32405] device ‘|‚ªu left promiscuous mode [ 692.097812][T32405] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 692.203634][T32401] device ‘|‚ªu entered promiscuous mode [ 692.250921][T32405] device ‘|‚ªu left promiscuous mode [ 692.257724][T32405] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 692.285150][T32420] xt_hashlimit: size too large, truncated to 1048576 [ 692.326936][T32420] xt_hashlimit: overflow, try lower: 0/0 22:21:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000fd0f0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 692.395415][T32433] xt_hashlimit: size too large, truncated to 1048576 [ 692.433233][ T25] audit: type=1804 audit(1634682105.289:636): pid=32426 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/520/cgroup.controllers" dev="sda1" ino=14651 res=1 errno=0 [ 692.465853][T32433] xt_hashlimit: overflow, try lower: 0/0 22:21:45 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x2c8) 22:21:45 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002840)={0x11, 0x6, &(0x7f0000000040)=@framed={{}, [@jmp={0x5, 0x0, 0xc}, @map={0x18, 0x9}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r0 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_elf64(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"/768], 0x2c4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001940)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast=0x4}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e24}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x3f}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x5c}}, 0x4040000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) r4 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) connect$packet(r7, &(0x7f0000000240)={0x11, 0x15, r5, 0x1, 0x40, 0x6, @broadcast}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000340)={@remote, 0x5, r5}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006e40)={&(0x7f0000006d80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000006e00)={&(0x7f0000006dc0)=@deltfilter={0x24, 0x2d, 0x400, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0x2}, {0x3, 0xb}, {0x10, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c085}, 0x8080) ppoll(&(0x7f0000000000)=[{r4, 0x6040}], 0x1, &(0x7f0000000140), &(0x7f00000004c0)={[0x3]}, 0x8) 22:21:45 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x4f00], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:45 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x8000) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) [ 692.627568][T32441] device ‘|‚ªu entered promiscuous mode 22:21:45 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 692.727956][T32444] device ‘|‚ªu left promiscuous mode [ 692.742539][T32444] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 692.812921][T32443] team0: Device ipip0 is of different type [ 692.907521][ T25] audit: type=1804 audit(1634682105.759:637): pid=32451 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/521/cgroup.controllers" dev="sda1" ino=14682 res=1 errno=0 [ 692.943788][T32441] device ‘|‚ªu entered promiscuous mode 22:21:45 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x5000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000fe0f0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:21:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000340), 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8e9}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xfd}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) 22:21:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:46 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x5401], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 693.242687][T32482] device ‘|‚ªu left promiscuous mode [ 693.260976][T32482] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:46 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) openat$cgroup_ro(r0, &(0x7f0000000140)='net_prio.prioidx\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0xe9f2, 0xe652}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000502) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)) [ 693.358018][T32482] device ‘|‚ªu entered promiscuous mode 22:21:46 executing program 3: socket$alg(0x26, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000400)) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) pipe(&(0x7f0000000000)) r0 = socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)={0x34, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x0, 0x0, 0x0, @ipv4=@loopback}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@dev}]}, 0x34}], 0x1}, 0x0) [ 693.463129][T32488] device ‘|‚ªu left promiscuous mode [ 693.479065][T32488] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:46 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x2d4) 22:21:46 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x5a01], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000110000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 693.650550][T32496] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 693.741408][ T25] audit: type=1804 audit(1634682106.599:638): pid=32497 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/522/cgroup.controllers" dev="sda1" ino=14681 res=1 errno=0 [ 693.770291][T32502] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 22:21:46 executing program 3: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0xb00000000065808, 0x0) pwrite64(r1, &(0x7f0000001940)="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", 0x1000, 0x7be) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) sendfile(r4, r1, &(0x7f0000000040), 0x100000001) 22:21:46 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x5c02], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 693.933749][T32510] device ‘|‚ªu entered promiscuous mode [ 693.982417][T32521] device ‘|‚ªu left promiscuous mode [ 693.992095][T32521] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:46 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 694.095203][T32510] device ‘|‚ªu entered promiscuous mode [ 694.164929][T32521] device ‘|‚ªu left promiscuous mode [ 694.172930][ T25] audit: type=1804 audit(1634682107.029:639): pid=32532 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir001381051/syzkaller.SlIH8Y/455/memory.events" dev="sda1" ino=14694 res=1 errno=0 22:21:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000120000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:21:47 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x6000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 694.318319][ T25] audit: type=1800 audit(1634682107.059:640): pid=32532 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=14694 res=0 errno=0 22:21:47 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000000406010400000000000000000000000005000100070000005b61d3fcb3c579a394007445a63504092d1e707e9a9f52e1790d54fb99"], 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) sendfile(r1, r3, &(0x7f0000000040), 0x9) [ 694.489996][ T25] audit: type=1804 audit(1634682107.059:641): pid=32532 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir001381051/syzkaller.SlIH8Y/455/memory.events" dev="sda1" ino=14694 res=1 errno=0 [ 694.518560][T32542] device ‘|‚ªu entered promiscuous mode 22:21:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:47 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x6103], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 694.611466][T32546] device ‘|‚ªu left promiscuous mode [ 694.633898][T32542] device ‘|‚ªu entered promiscuous mode 22:21:47 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x2fd) [ 694.702892][ T25] audit: type=1804 audit(1634682107.529:642): pid=32548 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/523/cgroup.controllers" dev="sda1" ino=14508 res=1 errno=0 [ 694.732277][T32546] device ‘|‚ªu left promiscuous mode 22:21:47 executing program 3: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0xb00000000065808, 0x0) pwrite64(r1, &(0x7f0000001940)="3031bbb4551e39bfa3424c5083c8e6744f361d6f79f1dd5c4a3288d53586c84f17be6fa15b89c0bf2d38da9ec1bc30b1256898fa9961b822a0b49246bb9e837c07b1088cf42b1d458b7b928bd184bc5d48c60d444395e7fd2856baa2fff2c86cc122f57d08db9608e5176e5b38554a8308d0a2e1de7d80e8f59a78721799e28d4632028d0653a9d462eec8ca27d8855c19118bd051851ba0856b22511ae96fd58d925e693ca828b81039e3c7774c861cc63e409068932e2d727165c974e7658923ee6bd79d563ccc90367736c31aa17e5b5f36e5257a5ba4a00e1a7bcc593691df78eb388b50ee385175dbe84249156e5eb3143297557a5ca3f6362f2be9d89c1e76c0137160b22775ed6de4a901e7f8420f2416b80dee70f8db2ae89d84f80d2279eb19b8d8e4d400a11bd66cbe2d74cfc4e6415ed2bd84a03dcedd639a5d876a783b8bb78615788f9b84f9b2da146854ddd33ffdd5c6e35eb74738d9968661adaaeb48cd454033d9513a200b553ebe1f0062f65c4909ac9f75f8875ea187c02ade8605f136c20c881465c04479fb5b7532b666634782a3de907d55b46a7ad994ccad0ac0907332610b02b69a4470709a8023883c237a9befbf4a2fce2d197c7e8b58298b86302c88f89e22d6df88d7fe108e5a23dd502e633ccc1fd13a9d584f98442219fb19491ccaad85fc543ed75017758fae5a38033c41ef119b99ab49086a82b5f90077d0421748c55087386fc031e5ede94c729a5064f8bbf0740b666ab01491010d005dda3255523aa100ac471dfccb2d77ebdd65cbf506eb820e4cf70528bdee0f8d7965fc2eb2f255f398930b7abc69b66a8f8210fbf8ea4039459a0f91295e36946a25ab07ca01c00bd698cb1a6439aaa18b6661266fa7d3a4557c8ea2bd7f1c0836e47a14ba438f53ad28c2d82066a95862c01a5a205fc7f6020c7ebfaa92818c0d1e701c4eda71c8c29fa110f0a0a88d9b891bae02a962b1319390fd2c63d32b5fb25d1a828518b1224d206d37a70c6e25c6006bb6bcb96dcf0a009e94adcdb1b31c2c06f4f85697b76ada6996a8349c9eb53e1bc86f6b29cc69ae80b138d713493c1f08675d21b5728748faea49282dea41a8e1bcacb5115b5e2b098344261902d0c89bbcd591f366c5a0963a0c5cb1a16cf4ae21ac7132e0243256871b1baf3d5340b3384f00f06d000c37c013686c31709c2b5a9bcbf1110f531fec1d1cdedf7df0f5a4f9d2397b55be254a364ca78c465093a54efacd2e5083e5d23d1d7ea22c8237932ed548731a62d001903da1a974b3587755a116bd25644d90a67c21e7fe44130cfa74304ae0dfbdbc7f5864ebc565a9f5e561d3766d8beadd35e1db66edc33cb957e721d132f5865a766d7fcbd5abe579240cd9db00d4255e6d6919f63a2cc1b02fb714e201c06601dc2f708f439a82bb5e722f2b8417e529261b67fdaab8f5b50ddfdcc44c8d37bdd5b2720208874fd795779e33fee07186717954b6e3dfcab89b358d0f6cec852d6095547c3f9de76cf773ea42fe0ac3b03625a6cd6b1a7aaa76eb4983f79ac104e2541eeb7e43524fd2fb49f8d782c231c08a38af49b8617ce2d33ab243f44108398fb62f4475ace5190438a42c6950275737aa81bf9ba3cd464fa6144b4c4e124a29fbe46d228823153c2240784320be111eb607a5a3654acd4839aac9a020b746110ba4f8f93dfd4d33b9ca5a72091bf214c38996cd2faab5f0386b4187ef2388d76d42c81432e48dfc3d9d5fd5b306767fa36445ea66280877ba019ed9f48c07c6ccd911944d207726ba2060c06bf882683d8fff60e85d2d2734cfcd940786d1b4b7f01959bb9e18be116f544ab99b90001225602309d4ef4699eb546b171992e09f1bb74e9586710904980f0b8133fa114870a94591dfc38f2b541d68a16be5d2c45c0c86e2e915a0b7b331784cfadbf69d5b0b87aab070886ed141d16d0b59ee7579572b750e32f32f98dd4d77852f529287f7e03281770c6bfd44c3a35c8409d816756dbc4f3f7930cb47a1d46a2df9664e25215bd82406aa224cb00433267d4f27a3d1fd0115bf5a48fee88d3dd325f18994ed9d36cf87af0e8980bc3f6899a009da29727ea4831e88ef26592d4106799ac400a760b9d56f58002fd64343182817179d62bbca1f35df65ec6a9a0928adca1e24a04895a7709b001d7deb51e65302f4a856cebe009da25ab7723d67ac1ba5b455121386398f4464daa42f0810cce7d1459c2de1c8229abf79c98582abd7d94879fec53e85eb0658760c5d626aa18c0b2b01f052f2baaf6b0391c8874ccf6f15013cefc9f1640440693621ac4ef9a6e35a5e3f280fbc6cb2b357de85aea5585922e31144c0039c85637ad81a83cfd125df4c2af5614f69080873d9822ad74431ef17333a88fc286508a6b7be4ce5e59177712ed36eff81a50fe2c5be5e2d99e0054edfd550719d3d3ff0c6cc8a5535ff40d3b63b072bdc78d9a71477121b60a47ef7b9cd4b986ad43e39a3563debe7bc4d24bc9ddb15e89c21eee761fa1fcebb7de82f0403cafe8086a3b1ac15cda6c35b21ed7b4e72cb0d09396fff1470eacf24530cbff66cdf294adbfa15d5efe3bae63a9f0fc3d7ef1917e11baeab7412d2376ea5a59bcac074b306d14b4e85e86d959976ebf9a64cc7c46f8fc6a0f9a0edf3882e1787c188447389627c3f3de8c8d09f54aedb61b94efa04c622be7459caec2f4e86c1fb10d8cacceabe24c95ca7efa9541a485813a8079674e963f47817b7bf0fb920b56dd1a97358ab4787e3cb13d92dd3f23b2ea0b10382ad5ca8f06c3c28e2b641404053121b3cb433d885c4551481d304e94febb5c520185f114c1531c24ac3a6056f9f1b362c1e502991cd61ce3633fd16df0ca8a8679dbc8c1008182548c347fe6299a0541465b121c3a0b87efeef5e4cc9e60dc376d69d9e61936192f1742b5dfb4bca49a2099f1e4b1342a2f88fdd7e5c0683771d018e6fb3e36147f4757e1bd81fef5a2434d7c38baf34f238c5da7b30acde4e0ff9f918a30c0edd2f1e5c94a76a44afc1761aa3ee4943c2472fb5291c40b7b1f10f97e5f23edbe3258e3d1fc593f32a0dd6eea6459f661a1117a85cba8aa24f4f9695fe12d5a5b4e7da064fb18ab465f9df8bf0ffa419a7110274d020706371fba57bb69ce50703a21f38f67b97d6d3afd0a6038b4bcb7b50f172aef2f3aaf1a0ea598b31a7a7665841d6a16eb3658de0a3e830362c625bb7ab13100e7712f5b856f6945a81e59408be30257ce8b25f67b382a11e877a46f9b7c2c9a3717b661373924a01c9ee98534e61fc8a09d7d390002bd39da26618cef99f07d6d4f3dfc1b42500c2c90afc70442847539a3f27ce5aec752b00071ee5cf8a67b7f90dd7bb1e54a67e089863f63c90d8fbb6508ffa24c79fdcff2efb597d9027a2b1a3b4aed6e60472139d4f813e9c9453661cb1c6c6fe7a9fd9787bf2e9652d39dd750fd9b94b00787d0e0cbfade169d06e91739b9d1b7e6ca76f1ca0e181521675f9442b99d92cddf32c47bf99c4fc1494fac5ee3be3647f6c845cb17e80f145769c9df56e4400cd777b1a0111ec8386bdc095b0c4b4b5322151fc81a19aea49764ad97744976047edec7214d86080e2b8eb6ba0ffddd95f6e5a1268fbfa5ec62eeb340dc45c730e5aaf5cfd3bf7021cb68cb81a474c180f57de706c5837b0e73fcff7ecef1278e8ce64b1db74ff0fa6f10a20fd11deb6cd2497412f6e5b0853fb43a6c58be6fc7e442650e12dceec01584e213c6d40174637869653558959be097ac66697c228333d92207084db8c736cfa45be4ef43217b5b696df5fbcf89ad7de39b35435b25e00206cf071053d4c29389943b07cd6b0ad6f47d299281215afbda06d95b6bf8a7a859e3bfc7628bd5b24bbba453cc77520b5747774c3e03dcb45ebd58520d5a25b50aaeaef9d468538a0a974e4158aa034928c31aa6ea70e280d0f2b46c3c68ad8d538d687f04b74fedb43b8023497046095fe7489a981f1452ae7111cb67abe6771fd32a0f175f69d029b05b4c7e7bedad6004d70e9eaf6c7a72ca373d27dc0b6be36b142f9a5644ccdaf9ad42049a54b2a1c5cee850d87b9e6c376f3a53938b3b9a0005f93d7f0065bab5a482d0484f88a2007a3f6725e7dbe6195ceb742e135d0dae4b451136395dd0bc7926a5fca9a566019108cb160674bbbfae34eb7fc22b226da07a70f93daffad94a0ca61b3661f063c7ad9bc365900f4b89756fbdf48106683627124c8653fb7c5343593beb976de1ccc2418d9600fd391a04aafda136f37b213091647597d0cb2d400bfae1bd64293501cd723fa477962bfe58d07ae40513913133e159f9ba8ad46c42f6efaf5761a57da06c16d4206dd912e118a31a855973985bd16eb0b1822f58036e743c4227cb29136ec923af7094ab4945f39f4d8113af370a7b65d58f15728059f11b23fd84b2d431cae2645f33235683791bd3ff5bd6f67c6722587c254cd05a793c5219bfabe5a06dc3a686fb6bc3b5f3454885bfea61328ea35d8a8e1e7c699c0a53c321b653953328dc9fbda0a532e2f4b32d5181f33a36b8749cdd99a1bdc9364e194350ffb0bd680c4387a9c49a6d9b601330b67da15847b3c61f9af9d3366df64bb0dbc302d432ca54f885c69d150d9e663f8589884d4a6cd2186d3626590a94f966f0ba4ee26923061e8865fc0cf88c7b4998e68005b948b2adf96953b77f613ea622529eed240083e64064fa9f398307290809761e529fc4c1a59a43240a620c95a19c3895cd7e19e42ca239137eeaf1119f9166f8c3bafdc1ed455c9f1c6268280e20199b4c5889eb41eb3de744989c7c897a142f7f2df4728ca3ac9cc8f32c89e3e60adf05936a379cf8c6d1990f8c28d70b4f708773f1c369e7b153534a2f845e99cdbd017d84b7b5fa77d57f7577f2cc1c98620e1289e1b23b09f594ca8215b26a6ed8a2efe3d7312d2cf95346441280d00016681da0d657f214131f9bea42a7dc557d3e6110b183b90d20340c3180d201fc60a4ef437bae8270427b1f3f7f0aab900d090a1b16f3ecf8517b784563d7f9f7eedd326d02c4939c6dfd5c5428d56c5c2004f4c2281db75de4cde79755c86ee8e2d8a053c74f7c4081fd2b4fc97a85af871b8bb9d97ca34b8a2775833d371611c06688ab59f02793e687a82ff2df11c10b7069d6ec1acdc040a42ff3996bff8a1345d73cf62e48dadd3ea64e0a2cf580f85fecf71763a546b7221276b4e5c544bb9097c2b24afb6d0313b0caa53c45c4632008089d1cbfdb50a0d46ddebb69053382909307481feb82f97cfa3ac6fdd78ac65d55bd4835a415c98416590c3ec191212f1530b78ba6594b7d05fff8213dc3ccef191c9a1de5596b955bd4a3ea6b08cac8ff2f2dfd550773f72df7d47745153d449cf420e1657505a870b16234d24881a5d7a4b8b1a63e9f94bb966388a75feb20ca16d75f0137de009d0a9676b4a3e3cb045d11e0edbbdb09987328cb331bbd3da8d99ddc915e20635ac54302d2f9f3eda4170f92fc562f10ec83f775f87af37ca723cffc249c72f2e1b8e96f178a442307d0456e753fa1d2d615fbfadcbe13d9bd7d5b18d8045045df4613a303e38814beaca1b6c951292eb818511e5b1239aa7bef64740edbfe14d26a36a34e982e1dc9f5e2694ef7b308fc6bfed4f4418c0c7be4e285f7302b95e973a4db2d56a8cadfd250e4c27d18f60e0a4f070dd7249b56a2298e6d3f68d795ecfb47a1c537beb272f44b7148a39b19ba6e71977", 0x1000, 0x7be) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000740)='memory.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x80000000}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) sendfile(r4, r1, &(0x7f0000000040), 0x100000001) 22:21:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000200000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:21:47 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x6800], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:47 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) sendmsg$inet6(r0, &(0x7f00000019c0)={&(0x7f0000000000)={0xa, 0x4e20, 0x7fffffff, @mcast1, 0xfffffff7}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000000140)="6fa42be9c826efd92b7abcfd560979d3b11f044d4aa682bcb36a740687b40bf553971a40d27940c6326f6afd83470285bb0394e04c208ed551b9ba263de4fd74aa9c2afee0a1b496273f0e35aad683c1a7010831d4912ce0f1d3f1a24b6d6d314dd8302ecc4d27e30dee8f6ab03797025ecd4e89974c2cfb59d817dc5dfeef40e7c81700cc3252931bf55ecd9f1cd1fa22ad1cb3ee254c7115ef84cd129446521025d3d3d81638e57a43ee626133322b0aac1b3a6ecca39f1150592c41b0da17f98fa3de6696236f0f2eaaefa0388a1bceb06d4840a74ff053072c97c8d16c1d5dcad586da7d0667346f83ce20a7fefe51c8f39fb3ee2e834e82", 0xfa}, {&(0x7f00000002c0)="166d46034a3fa1c26a861b1e469b2494559e5a43f509e2ad8a4ebdd02d0284a976a1f912a488284702da2275b8e446a0eb21f7970ac905a22e72cb8e4d593cf236d404b212107ca63d722fed197c790e73fe192a5a879099d3026c6e29244ae8e70552bc67def6461e73b3a3ae1bab36c1f40693e2785c4fdb13f48b31f1c60a1467d104ee3d0fc8d5", 0x89}, {&(0x7f0000000040)="01a55be109a5dbbd34656064757c53409d", 0x11}, {&(0x7f0000000380)="337fb2b99e81cf59d39eeac4d707094f804ef2bb5d347c92fb90091a3c301da6c1983c2ba75499c59849b6b0cf2c4d1d9c0c169cb17c2e3a842d94d79895c260ce2815013bb926f1435c5a76e343d4ef75405c83a97b63b282e41d2ab76d3d4bb70ae400d95d9992778c26e92c91f96b8bac562532883567c293c2315a4f1cf7a401be0002cd7a9abfce8fbfa39615d762c71f3bef13676a3996da148edf86c98d6ff6be4e79a78eaaac1b4d2a0947af15658a5ecbbb454097c36d5ed73194e7136e6ebe56434f", 0xc7}, {&(0x7f0000000480)="2ee72b277a5362bbb771c1b4299dc8db271e17b5a26041b7479dae234bd58fa14563f52e750d0d9923d499cf8a3057ab1c2ccc28e340df7d4f78e7334501190ca3934fd3e0c94af526b4c2cf556086b490bdb5795376bcb29bcbeb8c00cabade9ef7a9a7e1543dc3f7097930ece6f293a38fc8ab894c0ddcf3deb4b148608d184889356634df31c94ac21eeea74b3eb5714afab0556935c75082577c537aeb675e611819cf717de215901b14", 0xac}, {&(0x7f0000000540)="179d764259d2a946a3a5e5c911efcb8a31a3f0db49ef5582bfd06f6e4a0e22eab02196eb3a5ee7448024e91076eee471a1ca49975c00", 0x36}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="0abf5a7d22831729962f", 0xa}, {&(0x7f00000015c0)="f62fb5798a38f8060f0e56efcfef93a9c64594d1dc9d1aa05fdbbd07e4206e413c60879703f25bc9d2dd2144d1eeb3eeca961a0e5b7819ccec4051183ce46c4af6fae725b9895909ce419969b72337f6908f3d8cce81a9cc1e697960238f99899b4456e5c6d1ceddda8db2aa099e16a30f12f3bd1bb345f4d072a0fc0c8faf7bad98f881a9e7ec5e9f0a7cb63370e22eed611933ed411fd8549e4c97db289ac725e56224b4eea0d119ffdce3108819e2575950b221b452a95279df5bbad9156f81bde61471e1966303a22ab3aa9567d9208d6aec4e64e488cfc2f763543705d93a73b1ce47a1", 0xe6}, {&(0x7f00000016c0)="6ba60f9cac827a5fe0be34488ceda06f7dc00994623e56d809589ee392871d8fb86cb76f80f1c2b0c1b00d3e33fc359a085b3ea90c62b35d6891b251a4e49633e63bce0c48cde5e029e491140fd0062ace47e68e4836c30bb54ed344160915d4d369a86d134b5098", 0x68}], 0xa, &(0x7f0000001800)=[@rthdr={{0x48, 0x29, 0x39, {0x6, 0x6, 0x2, 0x4, 0x0, [@loopback, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @rthdr={{0xb8, 0x29, 0x39, {0x2, 0x14, 0x2, 0x0, 0x0, [@rand_addr=' \x01\x00', @rand_addr=' \x01\x00', @private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @tclass={{0x14, 0x29, 0x43, 0x5}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @hopopts_2292={{0x60, 0x29, 0x36, {0x1, 0x9, '\x00', [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @hao={0xc9, 0x10, @private2}, @generic={0x0, 0x27, "354fd7abe60ea800218e8659ff43013a1654484300a1d7c3a0f038e3d30f7da7f49d8c880fd38a"}]}}}], 0x190}, 0x8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) connect$inet6(r0, &(0x7f0000001a00)={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x8}, 0x1c) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000502) 22:21:47 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x0, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 695.074317][T32578] device ‘|‚ªu entered promiscuous mode [ 695.083523][ T25] audit: type=1804 audit(1634682107.939:643): pid=32577 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir001381051/syzkaller.SlIH8Y/456/memory.events" dev="sda1" ino=14081 res=1 errno=0 [ 695.124060][T32579] hashlimit_mt_check_common: 16 callbacks suppressed [ 695.124081][T32579] xt_hashlimit: size too large, truncated to 1048576 [ 695.168008][T32579] hashlimit_mt_check_common: 16 callbacks suppressed [ 695.168027][T32579] xt_hashlimit: overflow, try lower: 0/0 [ 695.196767][T32580] __nla_validate_parse: 28 callbacks suppressed [ 695.196787][T32580] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 695.241531][T32584] xt_hashlimit: size too large, truncated to 1048576 [ 695.248013][T32583] xt_hashlimit: size too large, truncated to 1048576 [ 695.255814][T32580] device ‘|‚ªu left promiscuous mode [ 695.264155][T32585] xt_hashlimit: size too large, truncated to 1048576 [ 695.273529][T32584] xt_hashlimit: overflow, try lower: 0/0 [ 695.290620][T32583] xt_hashlimit: overflow, try lower: 0/0 [ 695.294222][T32585] xt_hashlimit: overflow, try lower: 0/0 [ 695.304575][T32578] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 695.377467][T32578] device ‘|‚ªu entered promiscuous mode 22:21:48 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x6b01], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 695.427279][T32580] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 695.451875][T32580] device ‘|‚ªu left promiscuous mode 22:21:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000019040601040000000000000eb06d9ef5984a68246b6375101c000000000000494480c19fe07f5af0834276aa184df5432dfe934b1b8c15142d95e6413f4e9d8365ee16bf0d804df6f7a76f63d1f3896efecd033f7c2a8269c9693ad2c7425de2042d8791defefe37514c9072acf9db0b4754a3813c333b2bd865aa79e368f7ac8c5d54f5638c0f33a1a5cd764c79e1df937ce388d833779b0042ad2bad8ce6d47f54b5ea35f8c9311df45d1619c1e51b44499de38b5f349271b54600"/211], 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) 22:21:48 executing program 3: unshare(0x6c060000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0xa, 0x1, 0x0) close(r1) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x14, &(0x7f0000000100)={r3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000340)={r3, 0x6, 0x401}, &(0x7f0000000380)=0x8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f00000003c0)=0x4, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x2200c041, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$inet6_MRT6_ADD_MFC(r5, 0x29, 0xcc, &(0x7f00000001c0)={{0xa, 0x4e24, 0x9, @remote, 0x3}, {0xa, 0x4e21, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0xdec2, [0x0, 0x401, 0xc207, 0x0, 0x2, 0xfff, 0x9, 0x8000]}, 0x5c) sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r4, 0x0, r0, 0x0, 0x406f408, 0x0) 22:21:48 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x0, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:48 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000250000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 695.712675][T32601] xt_hashlimit: size too large, truncated to 1048576 [ 695.736258][T32601] xt_hashlimit: overflow, try lower: 0/0 [ 695.757024][ T25] kauditd_printk_skb: 2 callbacks suppressed 22:21:48 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x300) [ 695.757041][ T25] audit: type=1804 audit(1634682108.609:646): pid=32598 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/525/cgroup.controllers" dev="sda1" ino=14620 res=1 errno=0 [ 695.824363][T32606] xt_hashlimit: size too large, truncated to 1048576 [ 695.844783][T32605] xt_hashlimit: size too large, truncated to 1048576 [ 695.857931][T32607] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 695.872003][T32606] xt_hashlimit: overflow, try lower: 0/0 [ 695.888701][T32605] xt_hashlimit: overflow, try lower: 0/0 [ 695.892542][T32607] device ‘|‚ªu entered promiscuous mode [ 695.988760][T32617] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 696.026931][T32617] device ‘|‚ªu left promiscuous mode 22:21:48 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x6c00], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 696.058575][T32617] net_ratelimit: 5 callbacks suppressed [ 696.058594][T32617] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9aa2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000080}, 0x80) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000300)={r0}) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x24000050) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) pwrite64(r5, &(0x7f00000002c0)="1e72ff0f028c35df5125bb8c48ea0e0e6af061b3c9bd10cec7d7a7b7f6ba65c9ca6127ccf54242", 0x27, 0x1) 22:21:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x0, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 696.188028][T32629] xt_hashlimit: size too large, truncated to 1048576 [ 696.201773][T32621] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 696.224048][T32629] xt_hashlimit: overflow, try lower: 0/0 [ 696.272090][T32607] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 696.297937][T32607] device ‘|‚ªu entered promiscuous mode 22:21:49 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x6e03], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 696.365238][T32617] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 696.408005][T32617] device ‘|‚ªu left promiscuous mode [ 696.437127][T32617] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 696.477712][ T25] audit: type=1804 audit(1634682109.329:647): pid=32650 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/526/cgroup.controllers" dev="sda1" ino=14710 res=1 errno=0 [ 696.551024][T32661] xt_hashlimit: size too large, truncated to 1048576 [ 696.562544][T32652] xt_hashlimit: size too large, truncated to 1048576 [ 696.582590][T32652] xt_hashlimit: overflow, try lower: 0/0 [ 696.616382][T32661] xt_hashlimit: overflow, try lower: 0/0 22:21:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000003b0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:21:49 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:49 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x7400], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:49 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x301) [ 696.853633][T32692] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 696.898270][T32692] device ‘|‚ªu entered promiscuous mode [ 696.961516][T32695] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 696.985315][T32695] device ‘|‚ªu left promiscuous mode [ 697.023981][T32695] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 697.176742][T32692] device ‘|‚ªu entered promiscuous mode [ 697.210933][T32695] device ‘|‚ªu left promiscuous mode [ 697.220026][T32695] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_256={{0x304}, "e53886a72afa65df", "bd13c0706c2b22b6bbacfb7c4f8c7e32425e7040faee88f3ddbcc66cc54b95aa", "c38a408f", "44cc08a76ca11b99"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) sendto$inet6(r1, &(0x7f0000000200)="de3a4dd211b8b0c427ec3ac2dc1a43c601da63612130234705fa12653c127dfcd2a6c46493db56882dbdb513d17d5042d3b6db120e984098178981037937e4be125f5fc1ff7640cf9452f29423495c0ccba4a1566af7610b", 0x58, 0x81, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000040)={r0, 0x2, 0x3, 0x1ff}) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304}, "eae6782f93b30f55", "7cc80d44f86109df0856c664f177069ae33d959f2129efd146feb7adf956a920", "ffb25f09", "e09906eaf5805e63"}, 0x38) sendmmsg$inet6(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) 22:21:52 executing program 4: sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/124, 0x7c}, {&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000000180)=""/131, 0x83}], 0x3, 0x814f, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r0, 0x0, 0x100000502) 22:21:52 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x750c], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000670000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:21:52 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x309) [ 699.442429][T32749] device ‘|‚ªu entered promiscuous mode 22:21:52 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x760c], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 699.560744][T32752] device ‘|‚ªu left promiscuous mode [ 699.571274][T32752] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:52 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r0, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r2, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000502) [ 699.693454][T32749] device ‘|‚ªu entered promiscuous mode [ 699.740195][T32752] device ‘|‚ªu left promiscuous mode [ 699.757985][T32752] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:52 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x802, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x1f, 0x4, 0xffffffff) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="ff000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x43b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r6}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010102}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x1}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e26}]}}}]}, 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0ef83c000008000080000e00"/22, @ANYRES32=r7, @ANYBLOB="00000000000000001c001a8018000a8014000700fe880000000000000000000000000001"], 0x3c}}, 0x0) 22:21:52 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x7a00], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000af0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:21:52 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000000)={r0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) sendfile(r3, r4, &(0x7f0000000040)=0xffffffffffff7fff, 0x9) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000006fc0)={0x0, 0x0, &(0x7f0000006f80)={&(0x7f0000006dc0)={0x20, r5, 0x4906869e7eb2b74f, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9ffa97ea0720eec3}]}]}, 0x20}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r7, 0x605, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x34}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r7, 0x400, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x1) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r1, 0x0, 0x100000502) [ 700.092404][ T317] 8021q: adding VLAN 0 to HW filter on device bond5 22:21:53 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x7b01], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 700.192250][ T25] audit: type=1804 audit(1634682113.049:648): pid=364 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/529/cgroup.controllers" dev="sda1" ino=14729 res=1 errno=0 [ 700.194361][ T364] hashlimit_mt_check_common: 13 callbacks suppressed [ 700.194378][ T364] xt_hashlimit: size too large, truncated to 1048576 22:21:53 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x316) [ 700.367163][ T363] __nla_validate_parse: 9 callbacks suppressed [ 700.367183][ T363] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 700.400859][ T374] xt_hashlimit: size too large, truncated to 1048576 [ 700.422364][ T364] hashlimit_mt_check_common: 13 callbacks suppressed [ 700.422384][ T364] xt_hashlimit: overflow, try lower: 0/0 [ 700.449485][ T374] xt_hashlimit: overflow, try lower: 0/0 [ 700.452720][ T363] device ‘|‚ªu entered promiscuous mode [ 700.482545][ T380] xt_hashlimit: size too large, truncated to 1048576 [ 700.511436][ T380] xt_hashlimit: overflow, try lower: 0/0 22:21:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 700.551624][ T369] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 700.593995][ T369] device ‘|‚ªu left promiscuous mode 22:21:53 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x8002], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 700.637510][ T369] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 700.705708][ T317] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 700.744515][ T382] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:21:53 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680300002c00270d00"/20, @ANYRES32=r3, @ANYBLOB="f2ff0000000000000400000007000100667700003c030200080005008a07ecff070001"], 0x368}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x0, 0x8000) [ 700.818632][ T391] xt_hashlimit: size too large, truncated to 1048576 [ 700.858498][ T363] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:21:53 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 700.867875][ T391] xt_hashlimit: overflow, try lower: 0/0 [ 700.880414][ T403] xt_hashlimit: size too large, truncated to 1048576 [ 700.905975][ T403] xt_hashlimit: overflow, try lower: 0/0 [ 700.926059][ T363] device ‘|‚ªu entered promiscuous mode [ 700.945887][ T25] audit: type=1804 audit(1634682113.799:649): pid=364 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/529/cgroup.controllers" dev="sda1" ino=14729 res=1 errno=0 22:21:53 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x8d01], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 701.005181][ T369] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 701.026854][ T369] device ‘|‚ªu left promiscuous mode [ 701.067661][ T369] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000040601040000000000010000000000000500010007000000"], 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) 22:21:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 701.141487][ T407] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 22:21:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000020000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 701.207698][ T416] xt_hashlimit: size too large, truncated to 1048576 [ 701.241065][ T410] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 701.243509][ T416] xt_hashlimit: overflow, try lower: 0/0 [ 701.293843][ T428] xt_hashlimit: size too large, truncated to 1048576 [ 701.307005][ T428] xt_hashlimit: overflow, try lower: 0/0 22:21:54 executing program 3: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x8002], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:54 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x8d03], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 701.426264][ T433] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 701.437128][ T25] audit: type=1804 audit(1634682114.289:650): pid=431 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/530/cgroup.controllers" dev="sda1" ino=14734 res=1 errno=0 22:21:54 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x344) [ 701.510354][ T433] device ‘|‚ªu entered promiscuous mode [ 701.528668][ T438] xt_hashlimit: size too large, truncated to 1048576 [ 701.574744][ T436] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 701.582160][ T438] xt_hashlimit: overflow, try lower: 0/0 [ 701.592717][ T436] device ‘|‚ªu left promiscuous mode [ 701.624559][ T436] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 701.659082][ T442] xt_hashlimit: size too large, truncated to 1048576 22:21:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 701.691459][ T442] xt_hashlimit: overflow, try lower: 0/0 [ 701.713878][ T433] device ‘|‚ªu entered promiscuous mode 22:21:54 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@xdp, &(0x7f0000000080)=0x80, 0x800) getsockname$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getqdisc={0x38, 0x26, 0x0, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x9, 0xfff1}, {0xfff1, 0xf}, {0x8, 0x9}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104539300"/20, @ANYRES32=r3, @ANYBLOB="ddffffffffffffff140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c00000010000b0400008076af43ef4a9a2bcc00", @ANYRES32=r3, @ANYBLOB="000000020800001d1c00ff"], 0x3c}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000000000002bc, 0x0) 22:21:54 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) clock_gettime(0x0, &(0x7f000000a880)={0x0, 0x0}) recvmmsg$unix(r0, &(0x7f000000a700)=[{{&(0x7f0000000000), 0x6e, &(0x7f0000001580)=[{&(0x7f0000000140)=""/35, 0x23}, {&(0x7f00000002c0)=""/233, 0xe9}, {&(0x7f0000000180)=""/61, 0x3d}, {&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/183, 0xb7}, {&(0x7f0000000200)}, {&(0x7f0000001480)=""/23, 0x17}, {&(0x7f00000014c0)=""/181, 0xb5}], 0x9, &(0x7f0000001640)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xd8}}, {{&(0x7f0000001740), 0x6e, &(0x7f0000004b00)=[{&(0x7f00000017c0)=""/248, 0xf8}, {&(0x7f00000018c0)=""/128, 0x80}, {&(0x7f0000001940)=""/167, 0xa7}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/4096, 0x1000}, {&(0x7f0000004a00)}, {&(0x7f0000004a40)=""/139, 0x8b}], 0x8, &(0x7f0000004b80)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000004c40), 0x6e, &(0x7f0000006fc0)=[{&(0x7f0000004cc0)=""/128, 0x80}, {&(0x7f0000004d40)}, {&(0x7f0000004d80)=""/75, 0x4b}, {&(0x7f0000004e00)=""/183, 0xb7}, {&(0x7f0000004ec0)=""/231, 0xe7}, {&(0x7f0000004fc0)=""/4096, 0x1000}, {&(0x7f0000005fc0)=""/4096, 0x1000}], 0x7, &(0x7f0000007040)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000007140)=@abs, 0x6e, &(0x7f00000093c0)=[{&(0x7f00000071c0)=""/239, 0xef}, {&(0x7f00000072c0)=""/48, 0x30}, {&(0x7f0000007300)=""/4096, 0x1000}, {&(0x7f0000008300)=""/169, 0xa9}, {&(0x7f00000083c0)=""/4096, 0x1000}], 0x5}}, {{&(0x7f0000009440), 0x6e, &(0x7f00000095c0)=[{&(0x7f00000094c0)=""/233, 0xe9}], 0x1}}, {{&(0x7f0000009600)=@abs, 0x6e, &(0x7f000000a6c0)=[{&(0x7f0000009680)=""/52, 0x34}, {&(0x7f00000096c0)=""/4096, 0x1000}], 0x2}}], 0x6, 0x40000000, &(0x7f000000a8c0)={r1, r2+10000000}) openat$cgroup_ro(r3, &(0x7f000000a900)='freezer.self_freezing\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000502) [ 701.745733][ T436] device ‘|‚ªu left promiscuous mode [ 701.765284][ T436] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 701.767379][ T447] xt_hashlimit: size too large, truncated to 1048576 [ 701.838782][ T447] xt_hashlimit: overflow, try lower: 0/0 22:21:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000030000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 701.894320][ T459] device bridge13 entered promiscuous mode 22:21:54 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x8f00], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:54 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e0000002f000511d25a80648c63940d0424fc62100004400c0002000200000037153e370a0005", 0x27}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000002) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) 22:21:54 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, 0x0, 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 702.093600][ T25] audit: type=1804 audit(1634682114.949:651): pid=471 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/531/cgroup.controllers" dev="sda1" ino=14672 res=1 errno=0 [ 702.131719][ T478] device ‘|‚ªu entered promiscuous mode [ 702.190357][ T483] device ‘|‚ªu left promiscuous mode [ 702.226357][ T483] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:55 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x9d03], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 702.272339][ T25] audit: type=1804 audit(1634682115.129:652): pid=481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir001381051/syzkaller.SlIH8Y/463/cgroup.controllers" dev="sda1" ino=14740 res=1 errno=0 [ 702.314247][ T478] device ‘|‚ªu entered promiscuous mode 22:21:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, 0x0, 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 702.319848][ T481] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 702.369977][ T483] device ‘|‚ªu left promiscuous mode [ 702.383427][ T483] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000060000000400"], 0x20}}, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendfile(r1, r2, &(0x7f0000000740)=0x6, 0x5) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0x15, 0x4) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(r0, &(0x7f0000000080)='devices.list\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000502) 22:21:55 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000040000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:21:55 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x350) 22:21:55 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xb000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, 0x0, 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:55 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e0000002f000511d25a80648c63940d0424fc62100004400c0002000200000037153e370a0005", 0x27}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100000002) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) [ 702.760785][ T500] device ‘|‚ªu entered promiscuous mode 22:21:55 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYRES32=r2], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 702.866670][ T506] device ‘|‚ªu left promiscuous mode [ 702.882511][ T506] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:55 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xb101], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 703.000481][ T500] device ‘|‚ªu entered promiscuous mode 22:21:55 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendfile(r1, r2, 0x0, 0x100000502) [ 703.071588][ T506] device ‘|‚ªu left promiscuous mode [ 703.084181][ T506] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYRES32=r2], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:56 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xc701], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 703.211776][ T25] audit: type=1804 audit(1634682116.069:653): pid=525 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir001381051/syzkaller.SlIH8Y/464/cgroup.controllers" dev="sda1" ino=14730 res=1 errno=0 [ 703.241964][ T525] netlink: 'syz-executor.3': attribute type 4 has an invalid length. 22:21:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000050000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 703.391676][ T25] audit: type=1804 audit(1634682116.249:654): pid=537 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/533/cgroup.controllers" dev="sda1" ino=14640 res=1 errno=0 [ 703.439432][ T543] device ‘|‚ªu entered promiscuous mode 22:21:56 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xcb02], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 703.514798][ T549] device ‘|‚ªu left promiscuous mode [ 703.536863][ T549] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:56 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c080000040622270000000000000000000000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) [ 703.641855][ T543] device ‘|‚ªu entered promiscuous mode 22:21:56 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x355) 22:21:56 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYRES32=r2], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:56 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, 0x0, 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 703.692725][ T549] device ‘|‚ªu left promiscuous mode [ 703.710881][ T549] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:56 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xcd03], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000060000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 703.883361][ T25] audit: type=1804 audit(1634682116.739:655): pid=553 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/534/cgroup.controllers" dev="sda1" ino=14718 res=1 errno=0 22:21:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:57 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xd100], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 704.106922][ T582] device ‘|‚ªu entered promiscuous mode 22:21:57 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000050000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 704.189985][ T583] device ‘|‚ªu left promiscuous mode 22:21:57 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000340)={0x7, 0x8001, 0x0, 0xc, 0x4, 0x3, 0x8}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_devices(r0, &(0x7f0000000380)='devices.deny\x00', 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r4, 0x4008f510, &(0x7f00000003c0)=0x64) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000006fc0)={0x0, 0x0, &(0x7f0000006f80)={&(0x7f0000006dc0)={0x20, r5, 0x4906869e7eb2b74f, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9ffa97ea0720eec3}]}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)={0xd4, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "67863f42927f2527cdebc549d4f8923a2266ea053f62e020"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2a0936b9975eaceb2c769552b0ba8ad311c991f15c6d5fb8"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1ed8363bf85b9f17b4e4325555ec29d49837fceddce6f0ae"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0xd4}}, 0x50) [ 704.229360][ T583] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 704.282271][ T582] device ‘|‚ªu entered promiscuous mode [ 704.327739][ T583] device ‘|‚ªu left promiscuous mode 22:21:57 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xd200], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 704.370211][ T593] device ‘|‚ªu entered promiscuous mode 22:21:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000070000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 704.426753][ T594] device ‘|‚ªu left promiscuous mode 22:21:57 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, 0x0, 0x100000001) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14}}, @ip_tos_int={{0x14}}], 0x30}, 0x4000084) preadv(r5, &(0x7f0000001300), 0x1ad, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r6, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) write$cgroup_devices(r6, &(0x7f0000000180)={'c', ' *:* ', 'w\x00'}, 0x8) r7 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f00000004c0)={0x0, 0x2, 0x0, [0xd57, 0x3, 0xfc00000000000000, 0x9, 0x8000], [0x876f, 0x9, 0x13af92bc, 0x1000, 0x8000, 0x4, 0x80, 0x5, 0x200, 0x8, 0x0, 0x1, 0x9, 0x7f, 0x9, 0xfffffffffffffff8, 0x7fffffff, 0x0, 0x9, 0x6, 0x1d2a, 0x10001, 0xf3f, 0x3, 0x1, 0x81, 0x7e51, 0xfff, 0x100000000, 0x8, 0x2, 0x97, 0x3, 0x5, 0x7ef3, 0x5, 0x1, 0xc22e, 0x5, 0x2, 0x1, 0xe16d, 0x100000000, 0x8001, 0xff800000000, 0xfffffffffffffffe, 0x10000, 0x0, 0x8, 0xffffffffffffff58, 0x3, 0x6, 0x800, 0x5, 0x128f8dfc, 0x6, 0x9b0f, 0x0, 0x800, 0x8001, 0x2, 0x7, 0xfffffffffffffffa, 0x8, 0x1, 0xf34, 0x3, 0x3, 0x0, 0x4, 0x6, 0x101, 0x8000, 0xc01, 0x5, 0x100000001, 0x3, 0x8, 0x8000, 0x58e, 0x2, 0xf04, 0x1354, 0x3, 0x3, 0x80000001, 0x5, 0xf152, 0x3851, 0x93, 0x100000001, 0xfa, 0xb213, 0x3f, 0x4, 0x64e3, 0x8, 0x0, 0xffffffff, 0xac1, 0x5, 0x1, 0x1, 0x5, 0x6, 0x2, 0x8, 0x400, 0x3f, 0x7ff, 0x949a, 0x10001, 0xfffffffffffffffd, 0x8, 0x5, 0x7f75, 0x9, 0x7fff, 0x3, 0x100, 0x7fff]}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000900)={0x0, 0x9, 0x0, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(r7, 0xc4009420, &(0x7f0000000d00)={0x8, 0x4, {0x9, @usage=0x2, r8, 0x3, 0x9, 0x5, 0x2, 0x5, 0x404, @struct={0x0, 0x10000}, 0x6, 0x80, [0xffffffffffff7fff, 0x100, 0x0, 0xfff, 0x8, 0x6]}, {0x5, @usage=0x1f, r9, 0x6, 0x100000000, 0x1, 0x4, 0x5, 0x2d, @usage, 0x3f85, 0xfff, [0x4, 0x4c345574, 0x9, 0x8a92]}, {0xfff, @struct={0x1f, 0xffffffff}, 0x0, 0xfffffffffffffffc, 0x1, 0x6, 0x8, 0x6, 0x48, @struct={0x1000, 0x3}, 0x50, 0x9, [0xfffffffffffffff9, 0xff, 0x4, 0x697, 0x3, 0x100000001]}, {0x9, 0x3, 0x4}}) [ 704.542246][ T25] audit: type=1804 audit(1634682117.399:656): pid=595 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/535/cgroup.controllers" dev="sda1" ino=14640 res=1 errno=0 [ 704.640507][ T604] device ‘|‚ªu entered promiscuous mode [ 704.723884][ T606] device ‘|‚ªu left promiscuous mode [ 704.737264][ T604] device ‘|‚ªu entered promiscuous mode 22:21:57 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x373) 22:21:57 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:21:57 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xd800], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 704.776838][ T606] device ‘|‚ªu left promiscuous mode [ 704.781871][ T25] audit: type=1804 audit(1634682117.639:657): pid=605 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir001381051/syzkaller.SlIH8Y/467/cgroup.controllers" dev="sda1" ino=14733 res=1 errno=0 22:21:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000080000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 704.966508][ T25] audit: type=1804 audit(1634682117.769:658): pid=607 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir001381051/syzkaller.SlIH8Y/467/memory.events" dev="sda1" ino=14724 res=1 errno=0 [ 705.052850][ T617] device ‘|‚ªu entered promiscuous mode 22:21:58 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xe004], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 705.118298][ T622] device ‘|‚ªu left promiscuous mode 22:21:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r1, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES16], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 705.164478][ T617] device ‘|‚ªu entered promiscuous mode 22:21:58 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)=@fragment={0x87, 0x0, 0x1, 0x0, 0x0, 0x0, 0x64}, 0x8) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="021109c82600000026bd7000fedbdf25010000004e240000010014000600000005001a00fc02000000000000000000000000000100000000000000000000ffffe00000012a000420020013000200000029bd7200ff340000020018003f050700da40a9ffc49fd90002000b007c0000000600000000000000070019000000000002004e24e000000201e2ffffffffffff09004e2300000040fe8000000000000000000000000000aa06000000000000000800120004000200b36b6e000400000006003c0000e800003ab84000000000000000fc000000000000000000000000000000ac1414bb00000000000000000000000008001200030000000000000003000000060019008106000007000000000000003c4d7ea36e0659d3c5fccf97db87deabfe8000000000000d00000000000000aaac1414aa00000000000000000000000092e3b3487becd817a88826396052dcc706bd3d91489e50f799eeb10ca61ac93dc9df9255250947e3b2fe407cc65a4536ec17754784b288c2893db8aa7d7d6dee563b5fd07044bcca0f0da5c00a202d4b4a83abb1a43bf83f3118d7688e36ea3a6f819a1befcaaa228fe1dde81a625bd4590756bee7562ec890e403d7a22520b306d8be997b0d3124d48d58"], 0x130}}, 0x88015) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004a53a59201591a6721677962198ff711abcfec9cbcaedbc1766c7fd399e7096cac9ecc600cb670c3a72445f29fbeef30a02b2320102453b29174883708e15c8e6e4293f9680652ba0ea48fe8ab758c3b03b1b30a268813d97e6c5ac54fccae018418a2c9a8ef0b6c519885901df31370c1ad105bda2e72e00828e5a60b523534a7372d194fcb476029e4da85ff02457e68c4e0683c8930c44fbee660a43a45c637f3ac685aefa004d931f918d6ec0222c1e2074d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000100)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r5, 0x29, 0x24, 0x0, &(0x7f00000002c0)) mmap(&(0x7f00005f5000/0xc000)=nil, 0xc000, 0x1000004, 0x40010, r5, 0x9085c000) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000300)={0x20000000}) unshare(0x6c060000) unshare(0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000140)={0x0, &(0x7f00000001c0)}) 22:21:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000040606000000480acf45a3b30004000000491d10549c5915610fa3244ff24f01000000f41a00000000010000006237126b677df3fe6453b500001100002200fb6a2cc19c553c70b11100c5dfae23ec9ec624483f949289d765107caf614267be21f219d17e73"], 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000340), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '('}, {}, {0x20, 'ip6gre0\x00'}, {0x20, '!\xc6'}, {0x20, '\\:'}, {0x20, 'SNPT\x00'}, {0x20, '*\\'}, {0x20, 'hashlimit\x00'}], 0xa, "d735878f76"}, 0x36) openat$cgroup_ro(r0, &(0x7f0000000380)='cpuacct.stat\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e24, 0x8000, @mcast1, 0x80000000}, {0xa, 0x4e22, 0x6, @mcast2, 0xffffffff}, 0x8001, [0x4, 0x1, 0x809, 0x10000, 0x80000001, 0x101, 0xc2, 0x656]}, 0x5c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x860}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000522d0701030000000000000000050000000c000340000000000000031b0c00024000000000000000071c0007800800014000000007080002400000000508000240000000080c0003400000000000000003"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x40014) sendfile(r4, r2, 0x0, 0x100000502) [ 705.219227][ T622] device ‘|‚ªu left promiscuous mode 22:21:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000090000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 705.314100][ T636] hashlimit_mt_check_common: 17 callbacks suppressed [ 705.314196][ T636] xt_hashlimit: size too large, truncated to 1048576 [ 705.378273][ T643] xt_hashlimit: size too large, truncated to 1048576 [ 705.443452][ T647] __nla_validate_parse: 34 callbacks suppressed [ 705.443472][ T647] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 705.451505][ T649] xt_hashlimit: size too large, truncated to 1048576 22:21:58 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xe200], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 705.525930][ T649] hashlimit_mt_check_common: 19 callbacks suppressed [ 705.525951][ T649] xt_hashlimit: overflow, try lower: 0/0 [ 705.554695][ T647] device ‘|‚ªu entered promiscuous mode 22:21:58 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 705.625847][ T650] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 705.651885][ T650] device ‘|‚ªu left promiscuous mode [ 705.705298][ T647] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 705.709056][ T659] xt_hashlimit: size too large, truncated to 1048576 [ 705.734131][ T647] device ‘|‚ªu entered promiscuous mode [ 705.775973][ T659] xt_hashlimit: overflow, try lower: 0/0 [ 705.812317][ T650] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 705.823052][ T664] xt_hashlimit: size too large, truncated to 1048576 [ 705.837871][ T650] device ‘|‚ªu left promiscuous mode [ 705.845633][ T664] xt_hashlimit: overflow, try lower: 0/0 22:21:58 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000a0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:21:58 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x379) 22:21:58 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x4, 0x6, 0x401}, 0x14}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x9, 0x2, 0x4eb8, 0x400}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000502) 22:21:58 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xe501], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:21:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 706.163279][ T687] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 706.227150][ T692] xt_hashlimit: size too large, truncated to 1048576 [ 706.244240][ T687] device ‘|‚ªu entered promiscuous mode [ 706.246383][ T692] xt_hashlimit: overflow, try lower: 0/0 [ 706.274325][ T693] xt_hashlimit: size too large, truncated to 1048576 [ 706.299020][ T693] xt_hashlimit: overflow, try lower: 0/0 [ 706.330493][ T691] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 706.357970][ T691] device ‘|‚ªu left promiscuous mode 22:21:59 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xf302], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 706.387370][ T691] net_ratelimit: 8 callbacks suppressed [ 706.387389][ T691] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 706.492000][ T695] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 706.531470][ T699] xt_hashlimit: size too large, truncated to 1048576 [ 706.552066][ T705] xt_hashlimit: size too large, truncated to 1048576 [ 706.566451][ T699] xt_hashlimit: overflow, try lower: 0/0 22:21:59 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 706.608095][ T705] xt_hashlimit: overflow, try lower: 0/0 [ 706.616610][ T687] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 706.635205][ T25] kauditd_printk_skb: 5 callbacks suppressed [ 706.635222][ T25] audit: type=1804 audit(1634682119.490:664): pid=699 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/537/cgroup.controllers" dev="sda1" ino=14737 res=1 errno=0 [ 706.668516][ T687] device ‘|‚ªu entered promiscuous mode [ 706.704931][ T720] xt_hashlimit: size too large, truncated to 1048576 [ 706.727044][ T691] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 706.734020][ T720] xt_hashlimit: overflow, try lower: 0/0 [ 706.746825][ T691] device ‘|‚ªu left promiscuous mode [ 706.773392][ T691] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:21:59 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xf402], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 707.075776][ T741] xt_hashlimit: overflow, try lower: 0/0 [ 707.112900][ T746] xt_hashlimit: overflow, try lower: 0/0 22:22:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:22:00 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)=@fragment={0x87, 0x0, 0x1, 0x0, 0x0, 0x0, 0x64}, 0x8) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="021109c82600000026bd7000fedbdf25010000004e240000010014000600000005001a00fc02000000000000000000000000000100000000000000000000ffffe00000012a000420020013000200000029bd7200ff340000020018003f050700da40a9ffc49fd90002000b007c0000000600000000000000070019000000000002004e24e000000201e2ffffffffffff09004e2300000040fe8000000000000000000000000000aa06000000000000000800120004000200b36b6e000400000006003c0000e800003ab84000000000000000fc000000000000000000000000000000ac1414bb00000000000000000000000008001200030000000000000003000000060019008106000007000000000000003c4d7ea36e0659d3c5fccf97db87deabfe8000000000000d00000000000000aaac1414aa00000000000000000000000092e3b3487becd817a88826396052dcc706bd3d91489e50f799eeb10ca61ac93dc9df9255250947e3b2fe407cc65a4536ec17754784b288c2893db8aa7d7d6dee563b5fd07044bcca0f0da5c00a202d4b4a83abb1a43bf83f3118d7688e36ea3a6f819a1befcaaa228fe1dde81a625bd4590756bee7562ec890e403d7a22520b306d8be997b0d3124d48d58"], 0x130}}, 0x88015) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000004a53a59201591a6721677962198ff711abcfec9cbcaedbc1766c7fd399e7096cac9ecc600cb670c3a72445f29fbeef30a02b2320102453b29174883708e15c8e6e4293f9680652ba0ea48fe8ab758c3b03b1b30a268813d97e6c5ac54fccae018418a2c9a8ef0b6c519885901df31370c1ad105bda2e72e00828e5a60b523534a7372d194fcb476029e4da85ff02457e68c4e0683c8930c44fbee660a43a45c637f3ac685aefa004d931f918d6ec0222c1e2074d"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000100)={@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1}, 0xc) connect$llc(r4, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r5, 0x29, 0x24, 0x0, &(0x7f00000002c0)) mmap(&(0x7f00005f5000/0xc000)=nil, 0xc000, 0x1000004, 0x40010, r5, 0x9085c000) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000300)={0x20000000}) unshare(0x6c060000) unshare(0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000140)={0x0, &(0x7f00000001c0)}) 22:22:00 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000b0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000010100000000000000000000000000000005000100a742de981f580b2b1e910000000000"], 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) 22:22:00 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xf801], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:00 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x380) [ 707.513083][ T764] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 707.566975][ T764] device ‘|‚ªu entered promiscuous mode 22:22:00 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xfb01], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 707.615103][ T25] audit: type=1804 audit(1634682120.470:665): pid=763 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/538/cgroup.controllers" dev="sda1" ino=14778 res=1 errno=0 [ 707.729562][ T767] device ‘|‚ªu left promiscuous mode [ 707.749519][ T767] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:00 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 707.908982][ T764] device ‘|‚ªu entered promiscuous mode [ 707.949468][ T767] device ‘|‚ªu left promiscuous mode [ 707.956727][ T767] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:00 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xfd03], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:00 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) ioctl$PPPIOCGIDLE(r0, 0x8010743f, &(0x7f0000000000)) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x3, 0x7, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x4}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x20}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x40) 22:22:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000c0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:01 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 708.327136][ T823] device ‘|‚ªu entered promiscuous mode [ 708.405052][ T825] device ‘|‚ªu left promiscuous mode [ 708.426248][ T825] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 708.437782][ T25] audit: type=1804 audit(1634682121.290:666): pid=824 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/539/cgroup.controllers" dev="sda1" ino=14792 res=1 errno=0 [ 708.519682][ T823] device ‘|‚ªu entered promiscuous mode [ 708.554357][ T825] device ‘|‚ªu left promiscuous mode [ 708.570357][ T825] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:02 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000080000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:02 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x40000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:02 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x390) 22:22:02 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000d0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:22:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) [ 709.428698][ T843] device ‘|‚ªu entered promiscuous mode 22:22:02 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x100000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:02 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 709.567971][ T849] device ‘|‚ªu left promiscuous mode [ 709.582953][ T849] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 709.631673][ T25] audit: type=1804 audit(1634682122.490:667): pid=869 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/540/cgroup.controllers" dev="sda1" ino=14811 res=1 errno=0 [ 709.739107][ T856] device ‘|‚ªu entered promiscuous mode [ 709.818661][ T867] device ‘|‚ªu left promiscuous mode [ 709.829752][ T867] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:02 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xe0ffff], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 709.937779][ T843] device ‘|‚ªu entered promiscuous mode 22:22:02 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) getpeername$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000040)=0x10) 22:22:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0xff, 0xe5, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x2, &(0x7f0000000140)=@raw=[@map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x100}], &(0x7f0000000180)='syzkaller\x00', 0x3, 0x54, &(0x7f00000001c0)=""/84, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x3, 0x8, 0x0, 0x401}, 0x10}, 0x78) [ 709.996197][ T849] device ‘|‚ªu left promiscuous mode [ 710.009196][ T849] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:22:03 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x1000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000e0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 710.314282][ T25] audit: type=1804 audit(1634682123.170:668): pid=885 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/541/cgroup.controllers" dev="sda1" ino=14817 res=1 errno=0 [ 710.348981][ T891] hashlimit_mt_check_common: 13 callbacks suppressed [ 710.349259][ T891] xt_hashlimit: size too large, truncated to 1048576 22:22:03 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x391) 22:22:03 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000d0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 710.434286][ T896] xt_hashlimit: size too large, truncated to 1048576 [ 710.458917][ T898] __nla_validate_parse: 15 callbacks suppressed [ 710.458937][ T898] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:03 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x1020000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 710.547193][ T898] device ‘|‚ªu entered promiscuous mode 22:22:03 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:22:03 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xac8, 0xda, &(0x7f0000000140)="a0edb7b59fd7443c2ba339c07b04d1104a4c9b199aa7866c1136e5c8af82064f4be253bcce16c9f293b5e974d92033a890b65ef73feff560b360e8e974fededea76aa6a1f2c9bd2eff964f96bd3249603d11b70c22a86292d0c828f10e31c8c123122f8985124292bd6cbba8afaeec94c87f7cd8f9b8ba17c74d0f77b88abd8aababdeaef59f55a04788845434f02acc74b4c307f4001f527401568bfb9f4f711a29e8f803ca87a3755dc534904c5a123da1374b47166c7a3b0194a44a4d6ac1b8ed68c2c5748963b44df650c603ab59427fc934546291ddc3c2", 0x0, 0x1}, {0x8, 0xb9, &(0x7f00000002c0)="e658b0bca4311cab14d80995f6b337ff4405dbbfd818685920cec6941efe272eee82b4bb0435f225fbe6f46e9f2653d677c010786434e5d5d5f87d9c8c6847f560cbc5a05563a6576caf5dfae266fdcae075e3de205ac620e65f737c7d78cc3c40d6eb61f9a3babd215885aac04ac1310dca75b34259239ef21f6f6ab8a450e33431235e767168246499f974c213b7ae82db1c1c19565af90f8a83dda2b7ba6c7efd28acd425c025138c31957fb3cf476e125054a8e8bb23b1", 0x1}]}) [ 710.626664][ T901] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 710.660993][ T901] device ‘|‚ªu left promiscuous mode [ 710.687274][ T901] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 710.737108][ T903] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 710.773438][ T903] device ‘|‚ªu entered promiscuous mode [ 710.788759][ T913] xt_hashlimit: size too large, truncated to 1048576 [ 710.816906][ T913] hashlimit_mt_check_common: 13 callbacks suppressed [ 710.816925][ T913] xt_hashlimit: overflow, try lower: 0/0 [ 710.876283][ T904] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:22:03 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x1030000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 710.936920][ T25] audit: type=1804 audit(1634682123.790:669): pid=914 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/542/cgroup.controllers" dev="sda1" ino=14817 res=1 errno=0 [ 711.014216][ T905] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 711.043998][ T905] device ‘|‚ªu left promiscuous mode [ 711.086989][ T898] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 711.134008][ T898] device ‘|‚ªu entered promiscuous mode [ 711.194272][ T935] xt_hashlimit: size too large, truncated to 1048576 [ 711.234312][ T935] xt_hashlimit: overflow, try lower: 0/0 22:22:04 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b70300004c0000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7de954244cef7baf48e6d2885a09a87507ebf4e43bc0609b199b6ed90e0ebcdac5f7a869c781f6428457253e89ad528d985636a86ec0f60f5a6d1159a2c2e85d707859a919cc9548a34ff80d1ccdce27f94bc074c27f81070545cab5d5b0d974927676468582d8621c3ac94712ed9cf6b40b350fd733c43b4289c2ac3863fead5f688cf252a47c05af3a30d57cc3ed67d1867b54d24e2da18568c3b0f24b52616bf84d3b013260127473e6ba922aff649609d40b449ccba3ce8d530ffff19a6471baae2a83b2d36bff764b13831034694a6aad86cf08a2c7b2235dc99de9aa3e6b77c7a2877261e0010000000000000926c9013eec3b868363bba1acd48bc11b2a67a44554c67b1cdae50a79f670000000000000000000000008f02712c050000000000000055e846cb03d9cd483b6b1e462397db6d81239271e6301b22f178bee296d4f4e9f2013d2aef4a3b5092be4d6852b88317c5adbbdb0015f89e9939bc420200afe5725c8a4047b91da3768c1ca6a4410009f95d4ba21068285afa8d3b4a6893db626ab5becbcdb887af2c85c2d9ab09b5a308b5dd7d3c4406d273650bf7b2ff4602aec50000000000000000fad050b5b7ec051a4766cb6ca5e2042e81befa63140c0af075f0149853cbb9afbd30b2dd3981ad99ddd97053f994d055927679575ea17a73c4aa0ba1df89505d47bcbfb601444f740af3c6cb1d79d0a977ae838d5e030a66e4a6911c55bd57d8bbecc1d9174521c08cc5"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000000008f80000030000003003000098020000000000000000000000000000000000009802000098020000980200009802000098020000030080000000000000000000ffffffffe00000010000000000000000e4000000010000000000bd00000000007465616d5f736c6176655f310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001080200000000000000000000000000000000000000005001686173686c696d6974000000000000000000000000000000000000000002726f736530000000000000000000000000000000000000000000000000000000000000e4ff0800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000003000000070000000000000000000000000000004800435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000400000000000000000000000000000070009000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff1e0e0e4da9bd49aaa02ade20ec42a1982a59a1ad47cbb335181884494968caf3ed6428e4c1c0cdaa9c093e14214677c99152d16910a6576077fabd4c07033624f0f5b16fa544a0f5ee0c1971c97a838dce38c7fe5d108c048a69c013c0394761fe5cf8b874fc42c6ebf18b6e1dff1ca59b9a2f183d2c9b0c13f641c0f8a8d79c68e32b31c42e76cda805d1164a063d2f209d852a48e785a4c256694b263e680b808c495e286351d61b543614574e625becb6b13343130d3dae1c5cdfe5c2aaece54cb51f3b3d4b93b64ae59048951c34ce6a56"], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) r4 = openat$cgroup_ro(r3, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x89, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)='vlan1\x00', 0x2, 0x9, 0x1}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x2, 0x7fffffff, 0x3f, 0x9, 0x480, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x2, 0x1, 0x8000, 0x3e38000, 0x30, r5, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x40) openat$cgroup_ro(r2, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000cc0)=@security={'security\x00', 0xe, 0x4, 0x548, 0xffffffff, 0x3e0, 0x0, 0x3e0, 0xffffffff, 0xffffffff, 0x4b0, 0x4b0, 0x4b0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffffff, 0xffffffff, '\x00', 'syzkaller0\x00', {0xc3046d1b05b2fcde}, {}, 0xb3, 0x2, 0x20}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x10000, 0x2]}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x401, 0x7f, 0x1}}}, {{@ip={@remote, @private=0xa010101, 0xffffffff, 0xffffffff, 'veth1_virt_wifi\x00', 'ipvlan1\x00', {0xff}, {}, 0x0, 0x0, 0x21}, 0x0, 0x2d0, 0x318, 0x0, {}, [@common=@addrtype={{0x30}, {0x1006, 0x2}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xf, 0x0, [{0x8000, 0xbc, 0x80, 0x8}, {0x8, 0x1, 0x6, 0x2}, {0x8, 0x45, 0x1, 0x5}, {0x2, 0x9, 0x0, 0xffff}, {0xffff, 0x0, 0x36, 0x8}, {0x200, 0xcc, 0x91, 0x1}, {0x10, 0x0, 0x5, 0x1}, {0x1000, 0x1, 0x80, 0xa}, {0x57, 0x0, 0x1}, {0xf2, 0x7, 0x5, 0x2}, {0x1ed, 0xd0, 0x7f, 0x3ff}, {0x40, 0x8, 0x96, 0x100}, {0x4, 0x5, 0x6a, 0xe0}, {0x1, 0xde, 0x19, 0x8}, {0x3, 0xfb, 0x20, 0x9}, {0x9, 0x7f, 0x97, 0xfff}, {0x101, 0x3, 0x3, 0x8}, {0x20, 0x3f, 0x3f, 0x5}, {0x2, 0x5, 0x1}, {0x7, 0x4, 0x7, 0x6a87}, {0x1, 0x2, 0x2, 0x8}, {0x2, 0x3, 0x4, 0x80000000}, {0x9, 0x7, 0xfe, 0x6}, {0x4, 0x6, 0xa4, 0x2}, {0x8000, 0x0, 0x4, 0x1000}, {0x4134, 0x3, 0x40, 0x7ff}, {0xfffe, 0x3, 0x81, 0xfffffff7}, {0xfff, 0x3f, 0x0, 0x670a}, {0x7, 0xa4, 0x40, 0x1}, {0x8, 0x1, 0x3f, 0x200}, {0x8001, 0x7, 0x4, 0x1ff}, {0x9, 0x8, 0x8, 0x8}, {0x3ff, 0xfc, 0x6, 0x88}, {0xbd, 0x6, 0x5, 0x5e}, {0x8, 0xff, 0x0, 0x10000}, {0x101, 0x7f, 0x8}, {0x6, 0x11, 0x0, 0x3f}, {0x1, 0x2, 0x6, 0x400}, {0x7, 0x20, 0x7f, 0xa590}, {0x400, 0x5, 0x6, 0x40}, {0xff00, 0x1f, 0x20, 0xfff}, {0x1, 0x7, 0x2, 0x1}, {0x5, 0x2, 0x1, 0x400}, {0x2, 0x0, 0x80, 0x42c}, {0x9d6b, 0xd5, 0xff, 0x3}, {0x8, 0x81, 0x2}, {0xc2, 0x0, 0xff}, {0x40, 0x5, 0x81, 0x6}, {0x0, 0x8, 0x6, 0x3}, {0x3, 0x9, 0x1}, {0x8001, 0x7, 0xba, 0xffff}, {0x0, 0x1f, 0xa3, 0x7ff}, {0x1ff, 0x7c, 0x40, 0x1}, {0x4, 0x80, 0x1, 0x5}, {0x400, 0x1, 0x7, 0x9}, {0x55, 0x7, 0x1f}, {0x8, 0x6, 0x1, 0x1f}, {0x1, 0x60, 0x24, 0x800}, {0x2, 0x1c, 0x3, 0x6}, {0x2, 0x3, 0x6, 0xffff7329}, {0x4, 0x87, 0x6, 0x40}, {0x3, 0x1, 0xf7, 0x81}, {0x54ac, 0xaf, 0x81, 0x6}, {0x7, 0x9, 0x40, 0xffffffff}], {0xca3}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'geneve1\x00', {0x9}}}}, {{@ip={@empty, @rand_addr=0x64010102, 0xff000000, 0xffffffff, 'veth0_to_bond\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x32, 0x1, 0x18}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x1, 0x3, 0x3, 0x4, 0x4], 0x2, 0x5}, {0x1, [0x0, 0x1, 0x1, 0x6, 0x1, 0x1], 0x4, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) sendfile(r6, r0, 0x0, 0x0) [ 711.251685][ T901] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 711.277846][ T901] device ‘|‚ªu left promiscuous mode [ 711.296864][ T935] xt_hashlimit: size too large, truncated to 1048576 22:22:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0xe0, 0xa, 0x6, 0x27ee1cc53a85f9df, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1ff}, @IPSET_ATTR_ADT={0x94, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x7}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x80}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x3}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x80000001}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e24}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xe0}, 0x1, 0x0, 0x0, 0xc010}, 0x8004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) [ 711.323040][ T935] xt_hashlimit: overflow, try lower: 0/0 22:22:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000100000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:04 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x2000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:04 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x396) 22:22:04 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0x69, 0x20000000, &(0x7f00000004c0)="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", 0x0, 0xfd, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) r4 = openat$cgroup_ro(r3, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e22, @broadcast}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x31}}, 0x89, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)='vlan1\x00', 0x2, 0x9, 0x1}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0x2, 0x7fffffff, 0x3f, 0x9, 0x480, r4, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4}, 0x40) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x2, 0x1, 0x8000, 0x3e38000, 0x30, r5, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x40) openat$cgroup_ro(r2, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000cc0)=@security={'security\x00', 0xe, 0x4, 0x548, 0xffffffff, 0x3e0, 0x0, 0x3e0, 0xffffffff, 0xffffffff, 0x4b0, 0x4b0, 0x4b0, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffffff, 0xffffffff, '\x00', 'syzkaller0\x00', {0xc3046d1b05b2fcde}, {}, 0xb3, 0x2, 0x20}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x10000, 0x2]}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x401, 0x7f, 0x1}}}, {{@ip={@remote, @private=0xa010101, 0xffffffff, 0xffffffff, 'veth1_virt_wifi\x00', 'ipvlan1\x00', {0xff}, {}, 0x0, 0x0, 0x21}, 0x0, 0x2d0, 0x318, 0x0, {}, [@common=@addrtype={{0x30}, {0x1006, 0x2}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xf, 0x0, [{0x8000, 0xbc, 0x80, 0x8}, {0x8, 0x1, 0x6, 0x2}, {0x8, 0x45, 0x1, 0x5}, {0x2, 0x9, 0x0, 0xffff}, {0xffff, 0x0, 0x36, 0x8}, {0x200, 0xcc, 0x91, 0x1}, {0x10, 0x0, 0x5, 0x1}, {0x1000, 0x1, 0x80, 0xa}, {0x57, 0x0, 0x1}, {0xf2, 0x7, 0x5, 0x2}, {0x1ed, 0xd0, 0x7f, 0x3ff}, {0x40, 0x8, 0x96, 0x100}, {0x4, 0x5, 0x6a, 0xe0}, {0x1, 0xde, 0x19, 0x8}, {0x3, 0xfb, 0x20, 0x9}, {0x9, 0x7f, 0x97, 0xfff}, {0x101, 0x3, 0x3, 0x8}, {0x20, 0x3f, 0x3f, 0x5}, {0x2, 0x5, 0x1}, {0x7, 0x4, 0x7, 0x6a87}, {0x1, 0x2, 0x2, 0x8}, {0x2, 0x3, 0x4, 0x80000000}, {0x9, 0x7, 0xfe, 0x6}, {0x4, 0x6, 0xa4, 0x2}, {0x8000, 0x0, 0x4, 0x1000}, {0x4134, 0x3, 0x40, 0x7ff}, {0xfffe, 0x3, 0x81, 0xfffffff7}, {0xfff, 0x3f, 0x0, 0x670a}, {0x7, 0xa4, 0x40, 0x1}, {0x8, 0x1, 0x3f, 0x200}, {0x8001, 0x7, 0x4, 0x1ff}, {0x9, 0x8, 0x8, 0x8}, {0x3ff, 0xfc, 0x6, 0x88}, {0xbd, 0x6, 0x5, 0x5e}, {0x8, 0xff, 0x0, 0x10000}, {0x101, 0x7f, 0x8}, {0x6, 0x11, 0x0, 0x3f}, {0x1, 0x2, 0x6, 0x400}, {0x7, 0x20, 0x7f, 0xa590}, {0x400, 0x5, 0x6, 0x40}, {0xff00, 0x1f, 0x20, 0xfff}, {0x1, 0x7, 0x2, 0x1}, {0x5, 0x2, 0x1, 0x400}, {0x2, 0x0, 0x80, 0x42c}, {0x9d6b, 0xd5, 0xff, 0x3}, {0x8, 0x81, 0x2}, {0xc2, 0x0, 0xff}, {0x40, 0x5, 0x81, 0x6}, {0x0, 0x8, 0x6, 0x3}, {0x3, 0x9, 0x1}, {0x8001, 0x7, 0xba, 0xffff}, {0x0, 0x1f, 0xa3, 0x7ff}, {0x1ff, 0x7c, 0x40, 0x1}, {0x4, 0x80, 0x1, 0x5}, {0x400, 0x1, 0x7, 0x9}, {0x55, 0x7, 0x1f}, {0x8, 0x6, 0x1, 0x1f}, {0x1, 0x60, 0x24, 0x800}, {0x2, 0x1c, 0x3, 0x6}, {0x2, 0x3, 0x6, 0xffff7329}, {0x4, 0x87, 0x6, 0x40}, {0x3, 0x1, 0xf7, 0x81}, {0x54ac, 0xaf, 0x81, 0x6}, {0x7, 0x9, 0x40, 0xffffffff}], {0xca3}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@broadcast, 'geneve1\x00', {0x9}}}}, {{@ip={@empty, @rand_addr=0x64010102, 0xff000000, 0xffffffff, 'veth0_to_bond\x00', 'bond_slave_1\x00', {0xff}, {0xff}, 0x32, 0x1, 0x18}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x1, 0x3, 0x3, 0x4, 0x4], 0x2, 0x5}, {0x1, [0x0, 0x1, 0x1, 0x6, 0x1, 0x1], 0x4, 0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5a8) sendfile(r6, r0, 0x0, 0x0) [ 711.624693][ T950] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:04 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 711.655443][ T25] audit: type=1804 audit(1634682124.510:670): pid=947 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/543/cgroup.controllers" dev="sda1" ino=14816 res=1 errno=0 [ 711.702891][ T950] device ‘|‚ªu entered promiscuous mode [ 711.746246][ T954] xt_hashlimit: size too large, truncated to 1048576 [ 711.754897][ T953] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 711.778113][ T953] device ‘|‚ªu left promiscuous mode [ 711.782727][ T954] xt_hashlimit: overflow, try lower: 0/0 [ 711.810022][ T953] net_ratelimit: 2 callbacks suppressed [ 711.810040][ T953] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 711.836183][ T957] xt_hashlimit: size too large, truncated to 1048576 [ 711.871541][ T957] xt_hashlimit: overflow, try lower: 0/0 [ 711.901602][ T952] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:22:04 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x3000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)={0x7, 0xfffffffc, 0x7ff, 0x3fcf, 0x100, r0, 0x0, '\x00', 0x0, r0, 0x5, 0x5, 0x1}, 0x40) recvmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000840), 0x6e, &(0x7f0000001a00)=[{&(0x7f00000008c0)=""/64, 0x40}, {&(0x7f0000000900)=""/27, 0x1b}, {&(0x7f0000000380)=""/135, 0x87}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x4, &(0x7f0000001a40)}, 0x2) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@ipv4_getnetconf={0x2c, 0x52, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x4}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x3}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x0, 0xc, &(0x7f0000000700)=@raw=[@map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @func, @map_val={0x18, 0x6, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8}, @map={0x18, 0x5, 0x1, 0x0, r3}, @exit, @generic={0x8, 0xc, 0x2, 0x4, 0x3ff}, @exit, @generic={0x6, 0xc, 0x5, 0x3f, 0xf48c}, @ldst={0x0, 0x2, 0x2, 0x8, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f0000000780)='syzkaller\x00', 0x101, 0x5b, &(0x7f00000007c0)=""/91, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001b00)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001b40)={0x1, 0x0, 0x9, 0x7}, 0x10}, 0x78) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x7ff}, 0x8) r6 = accept(r4, &(0x7f0000000140)=@xdp, &(0x7f0000000040)=0x80) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f00000001c0)={0x0, 0x5}, 0x8) sendfile(r5, r4, 0x0, 0x100000502) [ 712.013812][ T950] device ‘|‚ªu entered promiscuous mode [ 712.081025][ T953] device ‘|‚ªu left promiscuous mode [ 712.087876][ T953] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:05 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) ioctl$INCFS_IOC_FILL_BLOCKS(r1, 0x80106720, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0xac8, 0xda, &(0x7f0000000140)="a0edb7b59fd7443c2ba339c07b04d1104a4c9b199aa7866c1136e5c8af82064f4be253bcce16c9f293b5e974d92033a890b65ef73feff560b360e8e974fededea76aa6a1f2c9bd2eff964f96bd3249603d11b70c22a86292d0c828f10e31c8c123122f8985124292bd6cbba8afaeec94c87f7cd8f9b8ba17c74d0f77b88abd8aababdeaef59f55a04788845434f02acc74b4c307f4001f527401568bfb9f4f711a29e8f803ca87a3755dc534904c5a123da1374b47166c7a3b0194a44a4d6ac1b8ed68c2c5748963b44df650c603ab59427fc934546291ddc3c2", 0x0, 0x1}, {0x8, 0xb9, &(0x7f00000002c0)="e658b0bca4311cab14d80995f6b337ff4405dbbfd818685920cec6941efe272eee82b4bb0435f225fbe6f46e9f2653d677c010786434e5d5d5f87d9c8c6847f560cbc5a05563a6576caf5dfae266fdcae075e3de205ac620e65f737c7d78cc3c40d6eb61f9a3babd215885aac04ac1310dca75b34259239ef21f6f6ab8a450e33431235e767168246499f974c213b7ae82db1c1c19565af90f8a83dda2b7ba6c7efd28acd425c025138c31957fb3cf476e125054a8e8bb23b1", 0x1}]}) 22:22:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000110000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 712.250440][ T980] xt_hashlimit: size too large, truncated to 1048576 [ 712.293290][ T980] xt_hashlimit: overflow, try lower: 0/0 [ 712.333604][ T987] xt_hashlimit: size too large, truncated to 1048576 [ 712.363066][ T25] audit: type=1804 audit(1634682125.220:671): pid=981 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/544/cgroup.controllers" dev="sda1" ino=14780 res=1 errno=0 [ 712.371112][ T987] xt_hashlimit: overflow, try lower: 0/0 [ 712.431320][ T989] device ‘|‚ªu entered promiscuous mode 22:22:05 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x3a8) [ 712.496470][ T991] device ‘|‚ªu left promiscuous mode [ 712.527447][ T991] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:05 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x4000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 712.629262][ T989] device ‘|‚ªu entered promiscuous mode [ 712.685184][ T991] device ‘|‚ªu left promiscuous mode [ 712.699523][ T991] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 712.755400][ T25] audit: type=1804 audit(1634682125.610:672): pid=990 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir001381051/syzkaller.SlIH8Y/475/cgroup.controllers" dev="sda1" ino=14837 res=1 errno=0 22:22:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x1, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2f93}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1af}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb6a2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) sendfile(r2, r1, 0x0, 0x100000502) [ 712.876240][ T1005] xt_hashlimit: size too large, truncated to 1048576 [ 712.922550][ T1005] xt_hashlimit: overflow, try lower: 0/0 22:22:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000120000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 712.965136][ T1013] xt_hashlimit: overflow, try lower: 0/0 22:22:06 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:22:06 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x5000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 713.117589][ T25] audit: type=1804 audit(1634682125.970:673): pid=1018 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/545/cgroup.controllers" dev="sda1" ino=14830 res=1 errno=0 [ 713.172496][ T1019] device ‘|‚ªu entered promiscuous mode 22:22:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) [ 713.285390][ T1021] device ‘|‚ªu left promiscuous mode [ 713.298741][ T1021] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:06 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x38, 0x1, 0x7, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2f93}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1af}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xb6a2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) sendfile(r2, r1, 0x0, 0x100000502) [ 713.368145][ T1023] xt_hashlimit: overflow, try lower: 0/0 [ 713.377121][ T1019] device ‘|‚ªu entered promiscuous mode [ 713.432880][ T1021] device ‘|‚ªu left promiscuous mode [ 713.445787][ T1021] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:06 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x6000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000250000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:06 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x3be) [ 713.738971][ T25] audit: type=1804 audit(1634682126.600:674): pid=1030 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/546/cgroup.controllers" dev="sda1" ino=14840 res=1 errno=0 [ 713.836211][ T1041] device ‘|‚ªu entered promiscuous mode 22:22:06 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x7000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 713.885594][ T1043] device ‘|‚ªu left promiscuous mode [ 713.897121][ T25] audit: type=1804 audit(1634682126.750:675): pid=1029 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir001381051/syzkaller.SlIH8Y/476/cgroup.controllers" dev="sda1" ino=14838 res=1 errno=0 [ 713.956332][ T1043] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x31b}, 0x14}}, 0x0) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x20, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000080}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r1, 0x0, 0x100000502) [ 714.144435][ T1041] device ‘|‚ªu entered promiscuous mode 22:22:07 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x7020000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 714.207111][ T1043] device ‘|‚ªu left promiscuous mode [ 714.219370][ T1043] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:07 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000003b0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 714.432426][ T25] audit: type=1804 audit(1634682127.290:676): pid=1067 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/547/cgroup.controllers" dev="sda1" ino=14820 res=1 errno=0 22:22:07 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r3, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000080)={'gre0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x8000, 0x700, 0x694, 0xffffffff, {{0x14, 0x4, 0x2, 0x3, 0x50, 0x64, 0x0, 0x1, 0x4, 0x0, @local, @broadcast, {[@lsrr={0x83, 0x17, 0x4d, [@broadcast, @local, @dev={0xac, 0x14, 0x14, 0x2e}, @rand_addr=0x64010102, @private=0xa010102]}, @timestamp_prespec={0x44, 0xc, 0x5e, 0x3, 0x6, [{@multicast2, 0x8}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x6f, 0x1, 0x0, [{@multicast2, 0x9}]}, @timestamp={0x44, 0x8, 0x4e, 0x0, 0x8, [0x101]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl0\x00', r4, 0x4, 0x2, 0x0, 0xfffffffc, 0x43, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, 0x74f, 0x8000, 0x7fff, 0x87}}) write$cgroup_int(r2, &(0x7f0000000000)=0x2, 0x12) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000140)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x2, 'veth1_macvtap\x00'}) write$cgroup_int(r1, &(0x7f0000000000)=0x2, 0x12) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002940)={'ip6tnl0\x00', &(0x7f00000028c0)={'ip6gre0\x00', 0x0, 0x29, 0x40, 0x9, 0x9, 0x4f, @remote, @remote, 0x80, 0x40, 0xffffffa8, 0x28}}) sendmsg$nl_route_sched(r1, &(0x7f0000002a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000029c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="0f00e0fff1ff05000500100008000b00010000000600050001000000"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) recvmsg$can_bcm(r3, &(0x7f0000000cc0)={&(0x7f00000008c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000940)=""/196, 0xc4}, {&(0x7f0000000a40)=""/76, 0x4c}, {&(0x7f0000000ac0)=""/62, 0x3e}, {&(0x7f0000000b00)=""/139, 0x8b}], 0x4, &(0x7f0000000c00)=""/175, 0xaf}, 0x40) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r6) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_delrule={0x2c, 0x21, 0x207, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x9}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8}]}, 0x2c}}, 0x0) 22:22:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:22:07 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x9020000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 714.683607][ T1077] device ‘|‚ªu entered promiscuous mode [ 714.740007][ T1081] device ‘|‚ªu left promiscuous mode [ 714.764061][ T1081] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) write$cgroup_int(r1, &(0x7f0000000000)=0xc215, 0x12) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x8010, 0x0, 0x0) 22:22:07 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x9030000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:07 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x3c4) [ 714.838588][ T1077] device ‘|‚ªu entered promiscuous mode [ 714.876853][ T1081] device ‘|‚ªu left promiscuous mode [ 714.886399][ T1081] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000670000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 715.083903][ T25] audit: type=1804 audit(1634682127.940:677): pid=1097 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/548/cgroup.controllers" dev="sda1" ino=14842 res=1 errno=0 22:22:08 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xa000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:08 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r0, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) r1 = getpid() syz_open_procfs$namespace(r1, &(0x7f0000000080)) sendmsg$AUDIT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfe, {0x1, 0x0, 0x0, r1, 0xffffffff, 0x8, 0x9, 0x81, 0x0, 0x9ab}, ["", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24000844) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x33}, 0xd}, 0x1c) close(r2) 22:22:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) sendfile(r2, r1, 0x0, 0x100000502) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @mcast1, 0xd88}, 0x1c) [ 715.372628][ T1127] device ‘|‚ªu entered promiscuous mode [ 715.407489][ T1129] hashlimit_mt_check_common: 13 callbacks suppressed [ 715.407512][ T1129] xt_hashlimit: size too large, truncated to 1048576 [ 715.428393][ T1130] device ‘|‚ªu left promiscuous mode [ 715.459339][ T1127] device ‘|‚ªu entered promiscuous mode [ 715.493059][ T1137] xt_hashlimit: size too large, truncated to 1048576 [ 715.527641][ T1130] __nla_validate_parse: 24 callbacks suppressed [ 715.527659][ T1130] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:08 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xd000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 715.563863][ T25] audit: type=1804 audit(1634682128.420:678): pid=1138 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/549/cgroup.controllers" dev="sda1" ino=14835 res=1 errno=0 [ 715.593590][ T1138] xt_hashlimit: size too large, truncated to 1048576 [ 715.633275][ T1130] device ‘|‚ªu left promiscuous mode [ 715.682495][ T1138] xt_hashlimit: size too large, truncated to 1048576 22:22:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="390000001300110468090700000000af0000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 715.747972][ T1144] xt_hashlimit: size too large, truncated to 1048576 22:22:08 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x3d2) 22:22:08 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:22:08 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xd020000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 715.956383][ T1151] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 715.987985][ T1151] device ‘|‚ªu entered promiscuous mode [ 716.056395][ T1153] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 716.076207][ T1153] device ‘|‚ªu left promiscuous mode [ 716.092692][ T1156] xt_hashlimit: size too large, truncated to 1048576 [ 716.104787][ T1154] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 716.121354][ T1156] hashlimit_mt_check_common: 16 callbacks suppressed [ 716.121371][ T1156] xt_hashlimit: overflow, try lower: 0/0 22:22:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000040601040000000000000000000000000500010007000000e50964ea97d98b3de8bd6715581cadabe3706e69262a0222469628a4e2ccca0c146b599977f6438e61b65c1c22cb6d3a4f1c53cd845c493b529bc74fc6ff360282e4518faf4d69360da97292dc1d78eb40c78b19c2011bc28f56ecb55f6f943470cb4eadd99c9921f70dcb07b89de9502aa37c24846d0b9ab8065de565e8919ec5e03166485067a20de000d8011c8069479714c10e0479869ccba091d0a623ea9b6c5a72aa1c00d01365fe7c21d150262a8ee4dd21"], 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10010, r0, 0x59ea8000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) [ 716.180191][ T1165] xt_hashlimit: size too large, truncated to 1048576 [ 716.231619][ T1151] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 716.235805][ T1165] xt_hashlimit: overflow, try lower: 0/0 [ 716.258520][ T1151] device ‘|‚ªu entered promiscuous mode 22:22:09 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x1d010000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:09 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000040)) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) connect$packet(r5, &(0x7f0000000240)={0x11, 0x15, r3, 0x1, 0x40, 0x6, @broadcast}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000340)={@remote, 0x5, r3}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) recvfrom(r1, &(0x7f0000000200)=""/211, 0xd3, 0x0, &(0x7f0000000300)=@can={0x1d, r3}, 0x80) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'GPL\x00'}, {0x20, '%#['}, {0x20, '-\\\xc5'}, {0x20, '\x00'}, {}, {0x20, 'GPL\x00'}, {0x20, ',^'}, {0x20, '\x00'}], 0xa, "b7168ede013640051219cc75f3ad25df77ddb806d7c62d78775ad426bec2bbe22e070d394142b83452023b3df86760b31fefff42b7147d2cb9a8fe7bb6d4dc6352f44b3d0ece9f91378729e130b7336429095fe4a121fb17165d0534faa054acf68f652cdbe24e4bdcc2288b12872a512e73ccdcdd735fb97ee465ddb6447927abd1fc1a663a12cdb64e112f0dac5bdb8b2971569726af88bf678fc819a71f13dc3c1de52de0"}, 0xcb) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) [ 716.327249][ T1153] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 716.348574][ T1153] device ‘|‚ªu left promiscuous mode 22:22:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0200ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 716.554001][ T1185] xt_hashlimit: size too large, truncated to 1048576 [ 716.588140][ T1185] xt_hashlimit: overflow, try lower: 0/0 [ 716.631818][ T1191] xt_hashlimit: size too large, truncated to 1048576 [ 716.662324][ T1191] xt_hashlimit: overflow, try lower: 0/0 [ 716.706812][ T1195] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:09 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x1f000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 716.788506][ T1195] device ‘|‚ªu entered promiscuous mode 22:22:09 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x3d4) [ 716.873761][ T1196] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 716.903495][ T1196] device ‘|‚ªu left promiscuous mode [ 716.945890][ T1196] net_ratelimit: 4 callbacks suppressed [ 716.945919][ T1196] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 717.022571][ T1202] xt_hashlimit: size too large, truncated to 1048576 [ 717.044297][ T1202] xt_hashlimit: overflow, try lower: 0/0 [ 717.099583][ T1206] xt_hashlimit: overflow, try lower: 0/0 [ 717.131113][ T1195] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 717.155085][ T1195] device ‘|‚ªu entered promiscuous mode 22:22:10 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x20000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 717.205225][ T1196] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 717.236603][ T1196] device ‘|‚ªu left promiscuous mode [ 717.277811][ T1196] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 717.294191][ T25] audit: type=1804 audit(1634682130.150:679): pid=1179 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/550/cgroup.controllers" dev="sda1" ino=14813 res=1 errno=0 22:22:10 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 717.352593][ T1216] xt_hashlimit: overflow, try lower: 0/0 [ 717.369788][ T25] audit: type=1804 audit(1634682130.150:680): pid=1183 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/550/cgroup.controllers" dev="sda1" ino=14813 res=1 errno=0 [ 717.426009][ T1224] xt_hashlimit: overflow, try lower: 0/0 22:22:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)={0x38, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x5, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r5, @ANYBLOB="0000400000000005280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000014002101000000000000000002010000", @ANYRES32=r5, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.weight\x00', 0x2, 0x0) unshare(0x40040000) r7 = socket(0xb867eea953835d45, 0x0, 0x8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="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"], 0x60}}, 0x0) setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0x0, 0x0, 0x0) 22:22:10 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x22010000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0300ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 717.701440][ T1235] xt_hashlimit: overflow, try lower: 0/0 [ 717.731402][ T1244] xt_hashlimit: overflow, try lower: 0/0 [ 717.752194][ T1240] device ‘|‚ªu entered promiscuous mode [ 717.784243][ T25] audit: type=1804 audit(1634682130.640:681): pid=1213 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/550/cgroup.controllers" dev="sda1" ino=14813 res=1 errno=0 [ 717.834980][ T1252] device ‘|‚ªu left promiscuous mode 22:22:10 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x24000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 717.852182][ T1252] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f000015b000/0x3000)=nil, 0x3000, 0x2, 0x28011, r0, 0x1000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWSET={0x8c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x11}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x58, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5fec}]}]}, @NFT_MSG_DELOBJ={0x5c, 0x14, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x38, 0x18, 0xa, 0x401, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0xa4, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xf1}]}, @NFTA_CHAIN_COUNTERS={0x28, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}]}]}], {0x14}}, 0x1ec}, 0x1, 0x0, 0x0, 0x4040085}, 0x40000) r3 = socket$can_raw(0x1d, 0x3, 0x1) accept4(r3, &(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000140)=0x80, 0x80000) sendfile(r2, r1, 0x0, 0x100000502) [ 717.944644][ T1240] device ‘|‚ªu entered promiscuous mode 22:22:10 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x3e0) [ 718.001758][ T1252] device ‘|‚ªu left promiscuous mode [ 718.014028][ T1252] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0400ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:11 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x2c030000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 718.454219][ T1311] device ‘|‚ªu entered promiscuous mode 22:22:11 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x32010000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 718.522022][ T1317] device ‘|‚ªu left promiscuous mode [ 718.534166][ T1317] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 718.634450][ T1311] device ‘|‚ªu entered promiscuous mode [ 718.721790][ T1317] device ‘|‚ªu left promiscuous mode [ 718.733642][ T1317] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:11 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:22:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0500ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:11 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x3c030000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 719.118911][ T25] audit: type=1804 audit(1634682131.980:682): pid=1284 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/551/cgroup.controllers" dev="sda1" ino=14851 res=1 errno=0 [ 719.157629][ T1346] device ‘|‚ªu entered promiscuous mode [ 719.229237][ T1347] device ‘|‚ªu left promiscuous mode [ 719.241656][ T1347] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 719.271875][ T25] audit: type=1804 audit(1634682132.000:683): pid=1300 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/551/cgroup.controllers" dev="sda1" ino=14851 res=1 errno=0 [ 719.361489][ T1346] device ‘|‚ªu entered promiscuous mode [ 719.399364][ T25] audit: type=1804 audit(1634682132.000:684): pid=1340 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/551/cgroup.controllers" dev="sda1" ino=14851 res=1 errno=0 22:22:14 executing program 3: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x2c030000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:14 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x43020000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:14 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x3e8) 22:22:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0600ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:22:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, 0x4, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0xfffffcac}, 0x1, 0x0, 0x0, 0x60055}, 0x11) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) [ 721.446682][ T1367] __nla_validate_parse: 16 callbacks suppressed [ 721.446703][ T1367] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 721.456679][ T1368] hashlimit_mt_check_common: 13 callbacks suppressed [ 721.456698][ T1368] xt_hashlimit: size too large, truncated to 1048576 [ 721.501919][ T1371] xt_hashlimit: size too large, truncated to 1048576 [ 721.509859][ T1369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 721.525641][ T1368] hashlimit_mt_check_common: 8 callbacks suppressed [ 721.525659][ T1368] xt_hashlimit: overflow, try lower: 0/0 [ 721.537576][ T1371] xt_hashlimit: overflow, try lower: 0/0 [ 721.577335][ T25] audit: type=1804 audit(1634682134.430:685): pid=1377 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/552/cgroup.controllers" dev="sda1" ino=14872 res=1 errno=0 [ 721.611888][ T1372] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 721.639927][ T1373] xt_hashlimit: size too large, truncated to 1048576 [ 721.646634][ T1373] xt_hashlimit: overflow, try lower: 0/0 [ 721.655687][ T1372] device ‘|‚ªu left promiscuous mode 22:22:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 721.685705][ T1372] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:14 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003800)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="000000000000000028001200190001007665746868c9098503dd704fdef769979a955d04d11607c25b0300d8fe893384363ae9a46a289d23b0458487058be6062ed6e1f4a182e02b92cfb5b092afc9046ed3d3d7e3900210b5a768a78c0546dfafd67f3e011675c019d9912db17f75f5a557875b71cc93e846bacc6bab92368926a185e896a9a278edcb4ccfc87277296816e635d3eba114c9b2313774af8e77"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r2, @ANYBLOB="00000000ff1a000001180000090001006866736300000000080002680209532d4c"], 0x38}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @local}, &(0x7f00000001c0)=0xc) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) connect$packet(r7, &(0x7f0000000240)={0x11, 0x15, r5, 0x1, 0x40, 0x6, @broadcast}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000340)={@remote, 0x5, r5}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x33ec, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xb}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x33bc, 0x2, [@TCA_BASIC_EMATCHES={0x13d8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x164, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xac, 0x1, 0x0, 0x0, {{0x0, 0x0, 0x3}, "281ce441a15c568ab9051359516e55c4bd1ccd4b006efb2fa38e1e32ca7d96acd923a4dd52d82566e79047d912cef5bf066305e2440d43c5cc79fd0afda4a65bd4a958f2b41e24ed1e35066b8cd95e73dd4eea41f6f3ed9f5354af159783cab142878428f42eb8508a417d9dc83f591e184a5bf4e20401de911c62464d3ff9486dc32f36efb59b1d6a2bc0e405b7a74a914c0f60a2021f66d579a064c381f5"}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x3211, 0x1, 0x91}, {0x100, 0x3, 0x3, 0x1, 0x8, 0x1, 0x2}}}, @TCF_EM_META={0x68, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x27, 0x2, [@TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="f4", @TCF_META_TYPE_VAR="406db3", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_VAR="679af632", @TCF_META_TYPE_VAR="b1909ef6da5596", @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="02993e", @TCF_META_TYPE_VAR="e469252d7791", @TCF_META_TYPE_VAR="b13127168e", @TCF_META_TYPE_VAR="f6db83"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_RVALUE={0x11, 0x3, [@TCF_META_TYPE_VAR="91", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x2]}]}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x7, 0x1, 0x902}, {0x3, 0x6, 0x2, 0x5, 0xc, 0x2, 0x1}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x9, 0x3, 0x4}, {0x9, 0x6, 0x8, 0xffff}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe2}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8001}}, @TCA_EMATCH_TREE_LIST={0x1050, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0xd2, 0x9, 0x1b}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_CONTAINER={0x100c, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x1ff}, "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"}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xfff, 0x7, 0x7}, {{0x4, 0x0, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x1, 0x2, 0xfff}, {0x8000, 0x3, 0x2, "d4d83f"}}}]}, @TCA_EMATCH_TREE_LIST={0x210, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x4, 0x7, 0xe48}, {{0x3, 0x0, 0x0, 0x1}, {0x3, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x200, 0x3, 0x1}, {0x7b, 0x20, 0x0, 0x80}}}, @TCF_EM_IPT={0xe0, 0x3, 0x0, 0x0, {{0x81, 0x9, 0x100}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xb4, 0x5, "bebc26b5b814b25cc579d744a5b522db7d9695ea698fdaccd8b90069a6b91bb150aa179a265a8e61ed4894275767f98648c7ce55c1ca037ec5c6b3be3f6cc657104dfe39d92c5e53f2fad4c349a731bfb736eb64d55b099d4358bd81a93b11ed44cf6684c45714d210ca3fd5d46681764e1dcaa2a3fdf010c64400bc588f1f849c0801f0a679af45c15f30def0b49641020e0d1231cab370219ade71f7f316ac470c015accaef73cb2dc23d9900855af"}]}}, @TCF_EM_CONTAINER={0xa4, 0x3, 0x0, 0x0, {{0x2, 0x0, 0xfff}, "ed112bed7f6e86a68f287d986a2e98630658a94bbefb88caecf6f4cd95118d88c99065bfdf7fa76a4b6df0ead9c04c850eafd09acb7f67a34496481f00ae009fe4b9d17e8eb7c42990ac989326803f5995112479d02d9aa711364c6b3d3ce5472c12ea00bb47d45d0ed7fb27b90edc2a12169b5ee4d5b56ec3a2864d825b3823f41ad8a6f1b1c449bae026b706f99be66b91ae99970a2765"}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xa3, 0x2, 0x7f}, {0x2, 0x1, 0x2, '%'}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x39f, 0x8, 0x81}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xf801, 0x3, 0xc1f}, {0x4, 0x5, 0x6, 0x1533}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xffff, 0x2, 0x2}, {0x1c80, 0x3, 0x2, "86b8ee"}}}]}]}, @TCA_BASIC_ACT={0x310, 0x3, [@m_simple={0xdc, 0x3, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x401, 0x20000000, 0x12000, 0x2b50}}]}, {0x98, 0x6, "2a5f73975a98badd0cd7d8132566690842de4d36899f9867f567a98964add87a01cf92827d7fd0df8c20b38a162d9f11ce0c8be752c8aeb761848f552e9c6123f627aa01e3d82e0a2f08985b647ef1dae105281dd39171b76128fb2cf37db450c09783e014e85f3e2e3f2a376a4f4fa689add2b6d28ca31536fb3c1e024f0ea0c85fb8ff0850d0a49017dbdb2fb272b7f047635c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}, @m_skbmod={0xa0, 0x1e, 0x0, 0x0, {{0xb}, {0x54, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4e, 0x401, 0x20000005, 0x101, 0x80000001}, 0x1}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0xfff, 0x1, 0x6, 0x8}, 0xf}}]}, {0x21, 0x6, "c88ddc71a3928d0aad9e8afd4de4893e7c21c6e5384129d769279a62b8"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}, @m_ipt={0x190, 0x15, 0x0, 0x0, {{0x8}, {0x130, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7f}, @TCA_IPT_INDEX={0x8, 0x3, 0x80000000}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0xc3, 0x6, {0x9, 'raw\x00', 0x6, 0x5, "eb297143653392feb3d2addd8f552e1ad49ccb176d692a255216b4be06ece22514fb04c89e80028d03d7e26737fcd008a4a59cd138c61f7a1c55eebfb4bf7a5a8ea5dd54a543c6c07a8cb696e79a7d149bd7f5b87181464d146b977e2acdb81a165ea308ebb6403a30cbab270ece6626e248c6c013ec382a9327bab1316f6062aea93a5a678e29f93c604aaf2d331819b375d7e84277d5a7c1"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x1ff}]}, {0x3c, 0x6, "b8e51a03083452620c78867c5b7f5e44360c98e320d8a7bf74a040b673129724cf6d8aa8fbc99e0f18f8de8ce399212f92ca9ddc491173aa"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BASIC_POLICE={0x10d4, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xffffffffffffffff, 0x0, 0x8, 0x1, {0x1f, 0x1, 0x0, 0x9, 0xa000}, {0x3, 0x2, 0x4, 0x1f, 0x9, 0x6}, 0x8, 0x9, 0x7ff}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x1f}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x10001, 0x8acb, 0xffff0000, 0x1, 0x4363, 0x9, 0x4, 0x3, 0x7, 0x6, 0x2f2b, 0x0, 0x1f, 0x6d, 0xbab, 0x9, 0x6, 0x6, 0x2, 0xfffffffd, 0x0, 0x2, 0x8, 0x1, 0x3, 0x7, 0x8, 0x16e6, 0x401, 0x4, 0xfffeffff, 0x5d6e, 0x6f17, 0x8, 0xe439, 0x4, 0x200, 0x8, 0x40, 0x1, 0x5, 0xf86e, 0x851, 0x0, 0x9, 0x0, 0x6, 0x1f, 0x10000, 0xfffffffe, 0x0, 0xc840, 0x0, 0x3, 0x40, 0x1c7, 0x81, 0x8, 0xf3, 0x3, 0x4, 0x10000, 0x81, 0x7, 0x200, 0x8955, 0x7, 0x1, 0xc25, 0x7, 0x9, 0x4, 0x10000, 0x3, 0x5, 0x81, 0x9, 0x4, 0x1f, 0xfffffffc, 0x81, 0xfffffff8, 0x7, 0xfffffffd, 0x7, 0x8, 0x33fd, 0x80000001, 0x3, 0x2, 0x7, 0x1, 0x1, 0x3, 0x3, 0x3, 0x4, 0x2cd, 0x800, 0xa8, 0x2, 0x2, 0x400, 0x4, 0x7, 0x5, 0x9, 0x5, 0x805, 0x40, 0x1, 0xc000, 0xd908, 0x8c4, 0x8, 0x101, 0x1, 0x2, 0x7ff, 0x7fff, 0x349, 0x7ff, 0x8000, 0x10001, 0x40, 0x8, 0xd21, 0x6, 0x78, 0x7, 0x7f, 0x9, 0x4, 0xffff, 0x80000000, 0x0, 0x9, 0x80000000, 0xffffffff, 0x5, 0x134, 0x0, 0x81, 0x8, 0x81, 0x40, 0x800, 0x7, 0x3, 0x40, 0x3fc, 0x7, 0xa4, 0xffffff01, 0x28bb9d84, 0xffff, 0x9, 0xe5, 0x3f, 0x8, 0x5, 0x8, 0x7095740d, 0x7, 0x1, 0x2, 0x9, 0x3, 0x2, 0x401, 0x1f, 0x0, 0xbf8, 0x1f, 0x80000001, 0x0, 0x7, 0x0, 0x8b1, 0x6, 0xd3, 0x5, 0x1ff, 0xe5, 0x400, 0x101, 0x7fffffff, 0x7fffffff, 0x7, 0x85, 0x1, 0x6, 0x7f80000, 0x4, 0x5, 0xfffffffe, 0x7fffffff, 0x4, 0x1000, 0x4, 0x6, 0x8, 0xfffffbff, 0x2, 0x1f, 0x1000, 0x8, 0x14a, 0x5edb, 0xcc7b, 0x1, 0x3, 0x1572, 0x7fff, 0x1f, 0x8001, 0x786, 0x81, 0x1f, 0x316, 0x7, 0x7, 0x1, 0x10001, 0x9, 0x2, 0x5, 0x7, 0x3d, 0x9, 0x6, 0x400, 0x8001, 0xfff, 0x2, 0x5, 0x3f, 0x20, 0x9, 0x0, 0xc036, 0x8, 0x2, 0x3308, 0x8, 0x8, 0x7, 0x2, 0x100, 0x0, 0xfff, 0x2, 0x1f, 0x100, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x10000000, 0xfb7, 0x3, 0xb9f4, 0x401, 0x5, 0x4, 0x1f, 0x9, 0x1, 0x0, 0x3, 0xffffff00, 0x4, 0x4, 0x7ff, 0x40, 0x3, 0xa96, 0x5619, 0x3, 0x6, 0x9, 0x3, 0x0, 0x8, 0x9, 0x4, 0x2, 0x1, 0x7fffffff, 0x8, 0x0, 0x40, 0x20, 0x6, 0x2, 0x1, 0xffff8000, 0x8, 0x40, 0x9, 0x200, 0x4a2, 0x7, 0x735c8085, 0x89, 0xff, 0xcde, 0x8, 0x8, 0x3, 0x18, 0x0, 0x7, 0x4, 0x3, 0x2, 0x5, 0x1, 0x7, 0xba, 0x4, 0x100, 0x2, 0x7, 0x7, 0x81, 0x4, 0x194, 0x8, 0x80000000, 0x400, 0x4, 0x1a5c, 0x0, 0x22f63823, 0x10000, 0x4, 0x6, 0x7ff, 0x43d, 0x80000001, 0x9, 0x2, 0x4, 0x2, 0x3, 0x6, 0x446e, 0x83c, 0x4, 0x200, 0xffffffff, 0xfffffffc, 0x5, 0x20, 0xffffff01, 0x7, 0x29, 0xac3, 0x40, 0x34af, 0xfffffffa, 0x2, 0x200, 0x39, 0x2, 0x1, 0x10001, 0x10001, 0x81, 0x5, 0x8001, 0x6, 0x9, 0x3, 0x10001, 0x2, 0x8001, 0x5, 0x2000400, 0x5, 0x200, 0x4, 0x0, 0x9, 0x7, 0xffffffff, 0x2, 0x6, 0x101, 0xfffffff8, 0x80000000, 0x3, 0x80000001, 0x7c0, 0x0, 0x0, 0x9, 0xffffffff, 0x7, 0x8, 0x7, 0x3, 0x4, 0x7fff, 0x3, 0x750a, 0x9, 0x39, 0xbac8, 0xffffff6b, 0x7, 0x5, 0xffffffff, 0x7, 0x4, 0x1d721476, 0x0, 0xddb, 0x0, 0xdd, 0x3ff, 0x400, 0x100, 0xffffff80, 0x1, 0x7, 0x7, 0x7f, 0x7, 0x8, 0x10000, 0x10000, 0x2, 0x4, 0x6, 0x8, 0x3, 0x7, 0x80000001, 0x1, 0x8, 0x7, 0xef, 0x3, 0xfffffffe, 0x1, 0xfffffeff, 0x3e6a, 0xffff, 0x1000, 0xb10, 0x7, 0x78c, 0x4, 0x3, 0x7f, 0x2, 0x1f, 0x0, 0x7, 0x3e, 0x8, 0x81, 0xffffffff, 0x7, 0x2, 0x80, 0x4, 0x0, 0x9, 0x9, 0x3, 0x7ff, 0x4, 0x9, 0x3, 0xfb2, 0x3, 0xfff, 0xab, 0x1, 0x5, 0x1ff, 0x7, 0x200, 0x1200, 0x2, 0x1, 0x5, 0xfffffffb, 0x9, 0x3f, 0x10000, 0xffff17da, 0x1000, 0x9, 0xffff, 0x8, 0x4, 0x7fff, 0x94, 0x7, 0x7, 0x7fff, 0x5, 0x5, 0x8, 0x8, 0x0, 0xfffff801, 0x3f, 0x1, 0x7fff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffff0000, 0x5, 0x1000, 0x5, 0x2, 0x8, 0x5, 0x5, 0xe117, 0x1000, 0x3, 0x7fffffff, 0x0, 0x3, 0x800, 0x2, 0x0, 0x3f, 0x8, 0x200, 0x2, 0xcf01, 0x2, 0x8, 0x8, 0x7fffffff, 0x401, 0x45ebe8e5, 0x8, 0xfff, 0xfffffff9, 0x7, 0x9, 0x0, 0x10000, 0xffff, 0x6b5a, 0x3, 0x1, 0x7a, 0x4bc, 0x400, 0x708, 0x5, 0x7ff, 0x6, 0x1, 0x9, 0x2, 0x10001, 0x5b, 0x7, 0x6, 0x4, 0xfffffff8, 0x5, 0x8, 0x200, 0x2f, 0x5, 0x6, 0x1000, 0x10001, 0x3, 0xfffffff8, 0x62ef, 0x7695, 0xbfbc, 0x9, 0x2c, 0x4, 0xfffffffc, 0x748, 0xffffffff, 0x3, 0x9, 0x3, 0x4, 0xffff, 0x81, 0x4, 0x8, 0x40, 0x9be, 0x4, 0x3f, 0xad, 0x20, 0xfffffc00, 0x0, 0xe72, 0x5, 0x6, 0x48e526ed, 0x800, 0x20b, 0x4, 0x7fff, 0x1f, 0x6, 0x7, 0x80000001, 0x3, 0xc2, 0x1000, 0x1, 0x0, 0x6, 0x6, 0x1f, 0x1, 0xdd, 0x7ff, 0x5, 0x5, 0xf2, 0xe0d1, 0x135, 0x9, 0x1, 0x1, 0x50, 0x826, 0x10001, 0x4000000, 0x7, 0x10001, 0x9, 0x6, 0x0, 0xfffffffd, 0x403f733f, 0x9, 0x8, 0x9, 0x294, 0x1ff, 0x80000000, 0x7, 0x9, 0x1, 0x5, 0x7, 0x10000, 0x7, 0x0, 0x5, 0x7fff, 0xffff, 0x80000001, 0x8, 0x80000000, 0x1f, 0x40, 0x7, 0xfb92, 0x1, 0x9f, 0x3, 0x40, 0x6, 0x200, 0xfffffff7, 0x4, 0x6, 0x4, 0x0, 0x3, 0x1, 0x0, 0x800, 0x6, 0x6, 0x5, 0x0, 0x9, 0x0, 0x5, 0x79, 0x9, 0x401, 0x0, 0x2, 0xff80, 0x1e8b71ee, 0x7, 0xa5, 0x704d, 0xa0000, 0x6, 0x3, 0x80000000, 0x40, 0x1000, 0x5, 0x9, 0x3, 0x3, 0xb27, 0x4, 0x9, 0x9, 0x1, 0x0, 0xff, 0xfffffff7, 0x8, 0x6, 0x0, 0x2, 0x74b, 0x4, 0xb815, 0x20, 0x0, 0xfffffff7, 0x6174, 0xaef, 0x0, 0xfffffc00, 0x1, 0x1000, 0x2, 0x7f, 0xfffffffe, 0xfffffbff, 0x3, 0xffff, 0x9, 0xfff, 0x9, 0x7fffffff, 0x74, 0x1f, 0x4, 0x200, 0x8000, 0x7, 0xf1, 0x1ff, 0xfffff801, 0x461, 0x5, 0x642, 0x0, 0x8, 0x7, 0x7, 0x1ff, 0x40, 0x5, 0x5, 0x73120447, 0x5, 0x9, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x20000000, 0x1, 0x0, 0x97, {0x1, 0x1, 0x7, 0x4, 0x6, 0x1}, {0x3, 0x2, 0x5, 0x2, 0x7fff, 0x6}, 0xfffffffe, 0x1, 0x800}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x3, 0x80000001, 0xe952, 0x7ff, 0x80000000, 0x20, 0x4, 0xff, 0x0, 0x733f, 0x8, 0x0, 0xffffffff, 0x6, 0x7, 0xbe4, 0x3, 0x6, 0x3, 0x80000001, 0x8, 0x8, 0x1f, 0x0, 0xff, 0x7, 0x808, 0x1, 0x6, 0x8, 0x8, 0xff, 0x101, 0x3f, 0x0, 0x568, 0x2, 0x93d, 0x1000000, 0xe3c1, 0x4, 0x3, 0x29, 0x3, 0x0, 0x6, 0x0, 0x7f, 0x7ff, 0x8, 0x400, 0x2, 0x7, 0x55, 0x0, 0xef, 0x0, 0x6, 0x200, 0x5, 0x8, 0xfffffffe, 0xff, 0x5, 0x240a, 0xe7da, 0x1, 0x80000001, 0x400, 0x401, 0x1, 0x4, 0x5, 0x5, 0x5, 0x7, 0x27fd9638, 0x81, 0x5, 0x4, 0xfff, 0xfff, 0xfffffffd, 0x3, 0x1, 0x10001, 0x1, 0x2, 0x7fff, 0x1, 0x1, 0x3, 0x1, 0x20, 0x2, 0x40400, 0x5, 0x9, 0xb13, 0x447, 0x7f, 0x8, 0x8b2, 0xfff, 0x3ff, 0x8, 0x8, 0x100, 0x7, 0x506, 0x9, 0x9, 0x5cb57f13, 0x3, 0x0, 0x80000000, 0x8, 0x6, 0x2, 0x6, 0xfffffffd, 0x10000, 0x5, 0x9, 0xda94, 0x8, 0x1f, 0x1, 0x8, 0x4, 0x4, 0x15b, 0x9, 0x6, 0x80000001, 0x10001, 0x0, 0x8000, 0x1, 0x5, 0x3, 0x4, 0xbe7, 0x4, 0x0, 0x645, 0x40, 0xff, 0x200, 0x8026, 0x5, 0x8001, 0x3, 0x6, 0xfffffffc, 0xfffffeff, 0x5, 0x9, 0x4, 0x40, 0x6b8ae634, 0x5, 0x6, 0x3, 0x40, 0x8, 0xdc98, 0x6, 0xb84a, 0xfff, 0x1000, 0x1, 0x8, 0x7, 0x7, 0x0, 0x5, 0x6, 0xc6, 0x3f, 0x6, 0x0, 0x7fff, 0x80, 0x7, 0x6, 0x10000, 0x4, 0xcd2, 0x100, 0x1, 0x10000, 0x7, 0x1ff, 0x6, 0x4, 0x5, 0xec8, 0x80, 0x6, 0x0, 0x101, 0x2, 0x5, 0x252, 0x1, 0x9, 0x1, 0x3, 0x80000001, 0xda, 0xdd, 0xff000000, 0xffffffff, 0x101, 0x67c, 0x0, 0x44, 0x5b, 0x7, 0x3, 0x100, 0x7f, 0xbd, 0xda, 0xf82, 0x6, 0x365, 0x6140, 0x400, 0xfffeffff, 0xa1bc, 0x0, 0xff, 0xf1, 0x4, 0x9, 0xe632, 0x10000, 0x8, 0x4, 0x5, 0x0, 0x9, 0x8, 0xffffffff, 0x2c2, 0x40, 0x8, 0x18, 0x1, 0x7, 0x2, 0x800, 0x3ec40000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x401, 0x5, 0x100, 0xc0000000, 0x0, {0x29, 0x0, 0x9, 0xb51, 0x7, 0x80b}, {0xff, 0x2, 0x20, 0xffff, 0x2, 0x2}, 0x9, 0x6, 0xf6}}]}, @TCA_BASIC_ACT={0xad4, 0x3, [@m_tunnel_key={0x13c, 0x10, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x3, 0x3, 0x1, 0x6}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}]}, {0xd2, 0x6, "b3591669955a5ddd97db2097bb11e52e2322ac6d9510d7661bf7f78ca0c7ca21a08547ef078ce3ceb72a082732af62959dc4e3754e8d3611597629ee96c40df763311cc9f9ecf0d6db620beb2632ca48ddc0cfb631403a3bb4507c4f8dc7a7d4ed50da4eb53c1b788ecfebb5b8c2261066f22e6fb8c28309566a58dde3e784ec4d051cb7e66e382fe784ef91d7ad27984f9534ce49767127675cd7b93d0013a13883a38f5ceb2625fe087a477fd3cf8861126b9419eb84045dbde267aca63b8e3613de207c0de719a81de90b50af"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0x47c, 0x15, 0x0, 0x0, {{0xb}, {0x414, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x800}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5e4, 0x7, 0x4, 0x1f, 0x3, 0x7, 0x8, 0xfff, 0x473, 0x7, 0x81, 0xffffffff, 0x80, 0x2, 0x0, 0x5, 0x0, 0x8, 0x401, 0x7, 0x1ff, 0x8000, 0x10000, 0x3, 0x2, 0x8, 0xb1, 0x0, 0x1ff, 0x9, 0x2, 0x3f, 0x7, 0x7fffffff, 0x10e, 0x3ff, 0x9, 0x40, 0x9, 0x5, 0x1, 0x9, 0x10001, 0x28, 0x3, 0x1, 0x1, 0x5, 0x6, 0x8000, 0x3, 0x4, 0x8831, 0x6, 0x7a23, 0x2, 0x101, 0x29, 0x7fffffff, 0x4000000, 0x2, 0x3, 0x200, 0x0, 0xc4, 0xc683, 0x5, 0x0, 0x7fff, 0x175, 0x1ff, 0xfffffffa, 0xcb, 0xfffffffe, 0x8001, 0x7fff, 0xf8c5, 0x6, 0x1000, 0x6, 0xfffffff8, 0x3, 0x0, 0x200, 0x6, 0x7fffffff, 0x1, 0x6, 0xf32b, 0x5d5, 0x1, 0x2, 0x1, 0xfffffffd, 0x7ff, 0x37, 0x1, 0x80000000, 0x6, 0x5, 0xf1c, 0x4, 0x3, 0x0, 0x80, 0x2, 0x2, 0x7ff, 0x96, 0x3, 0x0, 0x2, 0x2, 0x2, 0x80, 0x7ff, 0xf0c, 0x6, 0x2, 0x3, 0x1, 0x8001, 0x2, 0x5, 0x5, 0x5, 0x7, 0x2, 0xffffffff, 0xd1b5, 0x7, 0x2, 0x7fffffff, 0x7f, 0x7c58, 0x3, 0x10000, 0x9, 0x9, 0x4, 0x8f6, 0x40, 0x0, 0x4, 0x9b7, 0x0, 0x1, 0x1, 0x4, 0x1, 0x8, 0x8, 0x8001, 0x8, 0xfcd, 0x10001, 0x1, 0x8, 0x80000000, 0x1, 0x1, 0xfffffffa, 0xf7, 0x7, 0xfffffffd, 0x33, 0x89eb, 0x1000, 0x400, 0x8000, 0x249, 0x6d, 0x8000, 0x8, 0x5, 0xbc, 0xfffffffb, 0x80, 0x6, 0x7, 0x1, 0x1ff, 0xa1, 0x9, 0x200, 0x1, 0x101, 0x7f, 0x81, 0x20, 0xfff, 0x8, 0x8, 0x3ff, 0x1, 0x4e79e95f, 0x5, 0x8, 0xee03, 0x9758, 0x8, 0x9b, 0x2, 0x4, 0x7ff, 0x48, 0x5, 0x200, 0x1, 0xffffff80, 0x80000000, 0x6c3, 0x200, 0x7, 0x7, 0x1, 0x1, 0x40, 0x100, 0x5, 0x3, 0x200, 0x0, 0x40, 0x1f, 0x0, 0x1ff, 0x20, 0xffffffff, 0xffffffe0, 0xfffffffe, 0x8000, 0x2, 0x4, 0x7, 0x6, 0x9, 0x6, 0x1f, 0x8, 0x7, 0xfb, 0x10001, 0x6, 0x2, 0x1, 0x3, 0x8, 0x1, 0x1, 0x1, 0x7ff, 0x80000000, 0x6, 0x3, 0x7]}]]}, {0x3f, 0x6, "559b50a0223d969856024d6a53d7e8c17bc56b5fb5e3b1db2b8b434884f31c4044deccfa6f92b8a920e27f1c7970efa6804f2133cb4dc5225dceaa"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_csum={0x128, 0xf, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000001, 0xd9, 0x6, 0x8, 0x92f}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7, 0x4, 0xc82}, 0x29}}]}, {0xc4, 0x6, "389d5bdb9c52100d54bd0b995565d0956812b27a5fb72fe6781f6410c6b05da5004bf7bedafa405b74ce808f52a7edb792fab17e92070b465ec4d32f67170074b745280340b1a8718990aa2da349dfb77a5942396815fd466baddc71a76501ce0f6073908f74edaa7417b127684b7e99eacd94da57fb245647f5903a239fae7b64c3f12dafecc9bd440a6d15c79426e9ee7ba5563710c0d2f053ff8f7df13a6858b967ee3ccda6e88258778a03419bee4327c2bceeef2a51d464b15856dfba31"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_mirred={0x14c, 0x0, 0x0, 0x0, {{0xb}, {0x104, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x4, 0x0, 0xfffffffd, 0x4922}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x393b, 0x9, 0x7, 0x9, 0x7}, 0x2, r3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x8, 0x2, 0x100, 0x2}, 0x0, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xffff, 0x8000000000000000, 0x334b}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfa82, 0x3, 0xffffffffffffffff, 0xffffffff, 0x10000}, 0x2, r8}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xfffffffb, 0x8, 0x5, 0x1}, 0x2, r2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0xfffffff8, 0x3, 0x8, 0x8}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xffff8000, 0x2, 0x0, 0xffff, 0x2}, 0x1}}]}, {0x20, 0x6, "41942fa9a9d06bdbeec801ebcaebcd7c57a26e6fd6d882f3b4e42f92"}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}, @m_gact={0xf4, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x1, 0x1b01, 0x32a01aa2a7a19eae}}, @TCA_GACT_PARMS={0x18, 0x2, {0x4, 0x7, 0x7, 0x5, 0xa322}}]}, {0xa2, 0x6, "48a7cdb042034a00a61b3f41a702956175278d34385db1daf929a9795590c5968b4d3e3bd5bc2a6dc4394f87b05e47e2e4e22fd1cba1d4334fd2b744101928d2fedc5d6b63fc03ace21eac58eebeb3f605e394e32defeb92bb0e49b2b83e68bd5d276ca9f659628b8fe00120f925c89c71cedc79ec11cb7e0df991c23c371b8d72dd72a18f0bf660b420ee2b2477a6809d7d11e709201ebe614b0eedbea6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_csum={0x1b0, 0x15, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x81, 0x3, 0x3, 0x8, 0x3}, 0x36}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x8001, 0x4, 0x10001, 0x3f}, 0x2e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xf09, 0x1, 0x5, 0xba0}, 0x7e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x75f0, 0x5f1, 0x6, 0x2, 0x4}, 0x40}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x20, 0x400, 0x7, 0x1, 0xffff8001}, 0x32}}]}, {0xf8, 0x6, "80457e902fcfc53537c8dc3b17e18ab16948c0df0c3c3150f41599359e4abbbac3795629d0ed2e5fc4647233f5f47ba67a8a5e8436d53cb5c20f8a255f4712fe1874726a3de2fb120047ee657ccc01674fb9ab63b08bf143411c8404c220c2141bc9597f5c939dac1ce04e014d6c70c01e6505a91c4b7e121255c7fd21ba2029e17efb1cb5e4fbf02a8940cce4dd3c6f5cc7ba366d6a952756a4847decfac14fbb34094c8370e181e47ce7b87dfb6af19b95de2e9629bca46f84469e17211be09e5cda1b7406ad84d5525600b31b42b692e3b10b4dcf7bb0333f537c36531f7495aae5027a0c6de6b7006860641a5b6dccbbd673"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x7, 0xfff6}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xb}}, @TCA_BASIC_EMATCHES={0x118, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x104, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x100, 0x8, 0x7}, {0x2, 0x0, 0x2}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x7, 0x3, 0x4}, {0x0, 0x3, 0xfffffbff, 0xfffffffc}}}, @TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xd, 0x1, 0x9}, {0x5, 0x9, 0x5, 0x3, 0xb, 0x2, 0x2}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x31, 0x7, 0x8}, {{0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x1, 0x0, 0x0, {{0x80, 0x2, 0x4}, {0x7}}}, @TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0x0, 0x4, 0x9}, [@TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="08c2ab"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x2, 0x2}, {0x0, 0x7d, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8, 0x9, 0x2}, {0x2, 0x6}}}, @TCA_EM_META_RVALUE={0x16, 0x3, [@TCF_META_TYPE_VAR="ef555b23", @TCF_META_TYPE_VAR="182bb5", @TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="494917f433a7a1"]}, @TCA_EM_META_LVALUE={0xc, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x7]}]}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x0, 0x1, 0x2}, {0x5, 0x0, 0x4, 0x6, 0x1, 0x1, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x3, 0x0, 0x0, {{0x6, 0x2, 0xfffb}, {0x4, 0x4, 0x2, "0af0c21d"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1000}}]}]}}]}, 0x33ec}}, 0x0) r9 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f0000000200), 0x4924924924926d3, 0x0) 22:22:14 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x44000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 721.787049][ T1367] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 721.825172][ T1367] device ‘|‚ªu entered promiscuous mode [ 721.901882][ T1372] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 721.930713][ T1372] device ‘|‚ªu left promiscuous mode [ 721.948602][ T1372] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 721.986188][ T1402] xt_hashlimit: size too large, truncated to 1048576 22:22:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x4, 0x8}, 0xc) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r2, &(0x7f0000000180)="5b609b2c5a552addd1f9edcc64b6fbfd8bf314f3c0", &(0x7f00000001c0)=""/63, 0x4}, 0x20) sendfile(r1, r2, &(0x7f0000000140)=0x80, 0x8) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000060601040900000000000000000000000500010007000000ea057e2951d3"], 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000502) [ 721.998546][ T1398] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 722.022158][ T1402] xt_hashlimit: overflow, try lower: 0/0 22:22:14 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) [ 722.054160][ T1408] xt_hashlimit: size too large, truncated to 1048576 [ 722.086275][ T1408] xt_hashlimit: overflow, try lower: 0/0 22:22:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0700ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:15 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x48000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 722.204677][ T1398] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 22:22:15 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x3ec) [ 722.389991][ T1423] xt_hashlimit: size too large, truncated to 1048576 [ 722.406223][ T1424] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 722.415818][ T25] audit: type=1804 audit(1634682135.260:686): pid=1415 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/553/cgroup.controllers" dev="sda1" ino=14859 res=1 errno=0 [ 722.420604][ T1423] xt_hashlimit: overflow, try lower: 0/0 [ 722.463680][ T1424] device ‘|‚ªu entered promiscuous mode 22:22:15 executing program 3: unshare(0x6c060080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(0xffffffffffffffff, 0x400448c9, &(0x7f0000000000)={@none, 0x81}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x2bf, 0x0, 0x32}, 0x9c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty, 0x4000}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x15, 0x4) shutdown(r0, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540)=ANY=[@ANYRES64=r1, @ANYRESHEX, @ANYRES32=r0, @ANYRES64, @ANYBLOB="f40800e85c607e4cf1c6a52d3caae8653ab013f18e837c04ff03cc7bde8acebe2541409e9141019c45b0512280680e3ab665fcf78efc5d2e"], 0x3af4701e) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x802448a}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x200000c0) recvmsg$kcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)=""/10, 0xa}, {&(0x7f00000000c0)=""/122, 0x7a}, {&(0x7f0000000140)=""/186, 0xba}, {&(0x7f0000000200)=""/116, 0x74}, {&(0x7f0000000280)=""/113, 0x71}], 0x5, &(0x7f0000000380)=""/180, 0xb4}, 0x10000) unshare(0x10020100) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}}, 0x8001, 0xad, 0x200000, 0x8d5, 0x4, 0x1, 0x2}, 0x9c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000007c0), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000040)={0x6, 0x1, 0x0, 0x0, 0x4}, 0xc) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xc9, 0x0, 0x0) [ 722.536373][ T1424] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:15 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) [ 722.632295][ T1427] xt_hashlimit: size too large, truncated to 1048576 [ 722.642925][ T1427] xt_hashlimit: overflow, try lower: 0/0 [ 722.669886][ T1432] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:22:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0800ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:15 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x4a030000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:15 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000040601040000000000000000002100000500010007000000"], 0x1c}}, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) sendmsg$NFT_MSG_GETGEN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x812}, 0x4040) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000502) [ 722.952679][ T1463] device ‘|‚ªu left promiscuous mode [ 722.982692][ T1463] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 723.005536][ T1469] xt_hashlimit: size too large, truncated to 1048576 [ 723.033937][ T1469] xt_hashlimit: overflow, try lower: 0/0 22:22:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, 0x0, 0x0) [ 723.133712][ T1463] device ‘|‚ªu entered promiscuous mode 22:22:16 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x4c000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 723.207029][ T1478] device ‘|‚ªu left promiscuous mode [ 723.225171][ T1478] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 723.246529][ T25] audit: type=1804 audit(1634682136.100:687): pid=1480 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/554/cgroup.controllers" dev="sda1" ino=14873 res=1 errno=0 22:22:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0900ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 723.386035][ T1488] xt_hashlimit: size too large, truncated to 1048576 [ 723.433410][ T1488] xt_hashlimit: overflow, try lower: 0/0 [ 723.483685][ T1493] xt_hashlimit: size too large, truncated to 1048576 [ 723.520582][ T1493] xt_hashlimit: overflow, try lower: 0/0 22:22:16 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x3fa) 22:22:16 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000200)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000502) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7a00000000090102000000003c4f91f49a3b71fb020000000a000006040002000900010073797a31000000000805400000000371503cf95e95b4ec0097b4b70e98168828"], 0x34}}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) sendfile(r4, r0, &(0x7f0000000000)=0x80000001, 0x0) [ 723.619685][ T1497] device ‘|‚ªu entered promiscuous mode 22:22:16 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) 22:22:16 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x4f000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 723.707579][ T1498] device ‘|‚ªu left promiscuous mode [ 723.743840][ T1498] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 723.885807][ T1497] device ‘|‚ªu entered promiscuous mode [ 723.931466][ T1498] device ‘|‚ªu left promiscuous mode [ 723.939891][ T1498] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:18 executing program 3: socketpair$unix(0x1, 0x80000000001, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffb, 0x10, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f0000000380)=ANY=[], 0x8724) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[], 0x7fffffff) recvfrom(r1, &(0x7f0000000100)=""/184, 0xffffffe8, 0x40012500, 0x0, 0xffffffffffffff49) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x6, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x78) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) 22:22:18 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x500) 22:22:18 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x50000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0a00ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) 22:22:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r1, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='memory.numa_stat\x00', 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) write$binfmt_misc(r2, &(0x7f0000000140)={'syz0', "e9e4a5752a68dc9d689a5a1d99a0d0699167546cd74242ea9b72e6c5963ff3b640ea095833740a295999c4ed3d895a6441c522538820628cf8c04b8f1044d2b7c69a335328919a9e8329dce52c68731f911836a66928c4b26e3c6a0c741370b4c3ae3b039c5ae145081920f196975c7f2a77789abda4a09c274e57cf36a379f8abf30735a692db36f0828fde3452a87208d9c0f86277b2125c5e09960b63f15446c220a19e0997bbda4ea0d1f61f"}, 0xb2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000502) [ 725.235158][ T1566] device ‘|‚ªu entered promiscuous mode 22:22:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1'}, 0x4) [ 725.352080][ T1571] device ‘|‚ªu left promiscuous mode [ 725.366116][ T1571] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:18 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x54010000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 725.455453][ T1566] device ‘|‚ªu entered promiscuous mode [ 725.507417][ T1571] device ‘|‚ªu left promiscuous mode [ 725.519303][ T1571] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x4, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x2001}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="e8d18610732729c9f55847d0f768f6c870b6", 0x12}, {&(0x7f0000000140)="dc46d2c38a42571c6cdd946d323fd239edf2e4332b4ff88fff31e7d9035485d0b85f5bb96cca73bde0251eed0b655c26101e69e7270975e471438d0c761136e25f6abc8cf6f2700dc51106539e9cc8e1374efd343fb871ac210b8752cb6cbd31fcf0e99961029af3106ff69252f3eac2c246711cb956fb737b9107d41c", 0x7d}], 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) 22:22:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0c00ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:18 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x5a010000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:18 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', 'zy%'}, 0x7) [ 725.860196][ T1604] device ‘|‚ªu entered promiscuous mode [ 725.939331][ T1607] device ‘|‚ªu left promiscuous mode [ 725.950881][ T1607] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 725.990831][ T25] audit: type=1804 audit(1634682138.851:688): pid=1606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/557/cgroup.controllers" dev="sda1" ino=14897 res=1 errno=0 [ 726.024378][ T1604] device ‘|‚ªu entered promiscuous mode [ 726.075611][ T1607] device ‘|‚ªu left promiscuous mode [ 726.095559][ T1607] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:19 executing program 3: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x5a010000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:19 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x5c020000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:19 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x56d) 22:22:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', 'zy%'}, 0x7) 22:22:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0e00ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:19 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x60000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 726.464884][ T1628] hashlimit_mt_check_common: 12 callbacks suppressed [ 726.464904][ T1628] xt_hashlimit: size too large, truncated to 1048576 22:22:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000040601040000000000001000000000000500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = accept$phonet_pipe(r0, 0x0, &(0x7f0000000000)) shutdown(r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000502) bind$can_raw(r2, &(0x7f0000000040), 0x10) [ 726.585559][ T1641] __nla_validate_parse: 19 callbacks suppressed [ 726.585580][ T1641] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:19 executing program 3: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x5c020000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:19 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', 'zy%'}, 0x7) [ 726.713235][ T1641] device ‘|‚ªu entered promiscuous mode [ 726.760543][ T1647] xt_hashlimit: size too large, truncated to 1048576 [ 726.798706][ T1643] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 726.801658][ T1647] hashlimit_mt_check_common: 13 callbacks suppressed [ 726.801675][ T1647] xt_hashlimit: overflow, try lower: 0/0 [ 726.825691][ T1643] device ‘|‚ªu left promiscuous mode [ 726.849873][ T1650] xt_hashlimit: size too large, truncated to 1048576 [ 726.859425][ T25] audit: type=1804 audit(1634682139.721:689): pid=1648 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/558/cgroup.controllers" dev="sda1" ino=13870 res=1 errno=0 [ 726.904502][ T1643] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 726.927721][ T1650] xt_hashlimit: overflow, try lower: 0/0 [ 727.052059][ T1641] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:19 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x61030000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:20 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) listen(r0, 0x0) unshare(0x40000080) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffd88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) readv(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000180)=""/106, 0x6a}, {&(0x7f0000000340)=""/252, 0xfc}, {&(0x7f0000000440)=""/191, 0xbf}, {&(0x7f0000000600)=""/211, 0xd3}], 0x5) recvmmsg$unix(r1, &(0x7f0000000000)=[{{&(0x7f0000000780)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000001080)=""/184, 0xb7}, {&(0x7f00000008c0)=""/162, 0xa2}, {&(0x7f0000000980)=""/173, 0xad}, {&(0x7f0000000a40)=""/71, 0x47}, {&(0x7f0000000ac0)=""/204, 0x100}, {&(0x7f0000000bc0)=""/116, 0x7a}], 0x6, &(0x7f0000000cc0), 0x88}}], 0x1, 0x10000, &(0x7f0000000100)={0x0, 0x989680}) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r0, r3, 0x0, 0x3) sendfile(r2, r3, 0x0, 0x800000000000a) connect$netrom(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={0xffffffffffffffff, 0x0, 0xf8, 0xe6, &(0x7f0000000d80)="e23472b4624625b473dc25769910d50ab6b25eef7d42ed9c93e3dc3a4f719481dc4dd80a865dae6623faedca349e08228d5ba4580ee61e312952733ed08a7bdede304f5aad5fb41a6824fffe23e7242609b886e92ef700c2c61700ec97c1a69357f5ded4db12c9fcdb2e6f675c630d5bfd4084696ca6c7df98b3a98ee24a917340635f717e9554a16dcc62c18b7c1aadc5709b5e1d219d86a0858f298bf6e4d49cdcd910a03d36553550e12b9bac91f05dbca1aec34ff186003c5bd6e1f4923364e256cbc792f9b015d0256b45bf2b8bba5bac3acd5470519d12fe714dfaaa29026469b5c9fda54558b6c2cd35fe1f615d0d1985407afa16", &(0x7f0000000e80)=""/230, 0x8, 0x0, 0x69, 0x1e, &(0x7f0000000f80)="ae40047b81fb8be13fedaad0f725b4a78f1698d8b8bc6e4f04fab2dabdf99de8d73779906ff6d9974cd6d7d5b4f93d0f301174792ff5abea7d19f7f3b5e705826e790e44d83cabcb3056a4401a6a38e3cd16089e3c2e2b3fa922994d64896855c786eff607c64a9e12", &(0x7f0000000500)="14bbe900cb3c856b4cb254073728d2a25a61925fc2901032b0d83f4a0450", 0x0, 0xbd}, 0x48) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="7f454c46ffbd0806ffff0000c2725d71af630a12ff7f00009d"], 0x38d) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5dd, 0x40012062, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) [ 727.096095][ T1641] device ‘|‚ªu entered promiscuous mode [ 727.206960][ T1643] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 727.233515][ T1643] device ‘|‚ªu left promiscuous mode 22:22:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e6"}, 0x8) [ 727.257972][ T1659] xt_hashlimit: size too large, truncated to 1048576 [ 727.280536][ T1643] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:20 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x600) [ 727.322296][ T1659] xt_hashlimit: overflow, try lower: 0/0 22:22:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) recvmmsg(0xffffffffffffffff, &(0x7f000000b380)=[{{&(0x7f0000005980)=@in6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000005b40)=[{&(0x7f0000005a00)=""/104, 0x68}, {&(0x7f0000005a80)=""/158, 0x9e}], 0x2, &(0x7f0000005b80)=""/129, 0x81}, 0x5}, {{&(0x7f0000005c40)=@can, 0x80, &(0x7f0000005f40)=[{&(0x7f0000005cc0)=""/58, 0x3a}, {&(0x7f0000005d00)=""/169, 0xa9}, {&(0x7f0000005dc0)=""/244, 0xf4}, {&(0x7f0000005ec0)=""/103, 0x67}], 0x4, &(0x7f0000005f80)=""/176, 0xb0}, 0x7fff}, {{&(0x7f0000006040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x80, &(0x7f0000006340)=[{&(0x7f00000060c0)=""/249, 0xf9}, {&(0x7f00000061c0)=""/187, 0xbb}, {&(0x7f0000006280)=""/63, 0x3f}, {&(0x7f00000062c0)=""/103, 0x67}], 0x4, &(0x7f0000006380)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000007380)=@phonet, 0x80, &(0x7f0000008800)=[{&(0x7f0000007400)=""/62, 0x3e}, {&(0x7f0000007440)=""/4096, 0x1000}, {&(0x7f0000008440)=""/5, 0x5}, {&(0x7f0000008480)=""/167, 0xa7}, {&(0x7f0000008540)=""/240, 0xf0}, {&(0x7f0000008640)}, {&(0x7f0000008680)=""/254, 0xfe}, {&(0x7f0000008780)=""/66, 0x42}], 0x8}}, {{&(0x7f0000008880)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000008d40)=[{&(0x7f0000008900)=""/36, 0x24}, {&(0x7f0000008940)=""/149, 0x95}, {&(0x7f0000008a00)=""/57, 0x39}, {&(0x7f0000008a40)=""/236, 0xec}, {&(0x7f0000008b40)=""/125, 0x7d}, {&(0x7f0000008bc0)=""/60, 0x3c}, {&(0x7f0000008c00)=""/205, 0xcd}, {&(0x7f0000008d00)=""/7, 0x7}], 0x8, &(0x7f0000008dc0)=""/185, 0xb9}, 0x3}, {{&(0x7f0000008e80)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f000000a080)=[{&(0x7f0000008f00)=""/10, 0xa}, {&(0x7f0000008f40)=""/67, 0x43}, {&(0x7f0000008fc0)=""/4096, 0x1000}, {&(0x7f0000009fc0)=""/130, 0x82}], 0x4, &(0x7f000000a0c0)=""/203, 0xcb}, 0x8001}, {{&(0x7f000000a1c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f000000b280)=[{&(0x7f000000a240)=""/4096, 0x1000}, {&(0x7f000000b240)=""/57, 0x39}], 0x2, &(0x7f000000b2c0)=""/191, 0xbf}, 0xef49}], 0x7, 0x22, &(0x7f000000b540)) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f000000b580)=0xad, 0x4) 22:22:20 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x68000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0f00ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 727.568085][ T1671] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 727.717902][ T25] audit: type=1804 audit(1634682140.581:690): pid=1687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/559/cgroup.controllers" dev="sda1" ino=14889 res=1 errno=0 [ 727.758751][ T1700] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 727.784971][ T1700] device ‘|‚ªu entered promiscuous mode [ 727.794188][ T1711] xt_hashlimit: size too large, truncated to 1048576 22:22:20 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e6"}, 0x8) [ 727.826399][ T1710] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 727.852635][ T1711] xt_hashlimit: overflow, try lower: 0/0 [ 727.862174][ T1710] device ‘|‚ªu left promiscuous mode [ 727.899649][ T1710] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 727.920509][ T1716] xt_hashlimit: size too large, truncated to 1048576 [ 727.942136][ T1716] xt_hashlimit: overflow, try lower: 0/0 [ 727.990582][ T1700] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 728.018150][ T1700] device ‘|‚ªu entered promiscuous mode 22:22:20 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000e8ad16e2d8d9ab597b50000000000000000000050001000700"], 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x50, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) 22:22:20 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x6b010000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 728.081563][ T1710] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 728.103552][ T1710] device ‘|‚ªu left promiscuous mode [ 728.141689][ T1710] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e6"}, 0x8) [ 728.276225][ T1733] xt_hashlimit: size too large, truncated to 1048576 22:22:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f1000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 728.347650][ T1733] xt_hashlimit: overflow, try lower: 0/0 22:22:21 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x602) 22:22:21 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000200000000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00c102000000000024e2117309000100826f6e0800000000140002800600190010"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005fff010005000000000000000000", @ANYRES32, @ANYBLOB="01f8ffff00000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x8) 22:22:21 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x6c000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 728.538786][ T1757] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 728.591770][ T1757] device ‘|‚ªu entered promiscuous mode [ 728.653609][ T1759] device ‘|‚ªu left promiscuous mode [ 728.664538][ T1759] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 728.738178][ T1765] xt_hashlimit: size too large, truncated to 1048576 22:22:21 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) (fail_nth: 1) [ 728.784987][ T1765] xt_hashlimit: overflow, try lower: 0/0 [ 728.829944][ T1757] device ‘|‚ªu entered promiscuous mode [ 728.832236][ T1779] xt_hashlimit: size too large, truncated to 1048576 [ 728.870833][ T1759] device ‘|‚ªu left promiscuous mode [ 728.883423][ T1759] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 728.901953][ T1779] xt_hashlimit: overflow, try lower: 0/0 [ 728.940317][ T1778] netlink: 'syz-executor.3': attribute type 25 has an invalid length. 22:22:21 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x6e030000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f4800ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 729.081056][ T1789] FAULT_INJECTION: forcing a failure. [ 729.081056][ T1789] name failslab, interval 1, probability 0, space 0, times 0 [ 729.141808][ T25] audit: type=1804 audit(1634682142.001:691): pid=1734 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/560/cgroup.controllers" dev="sda1" ino=14915 res=1 errno=0 [ 729.146004][ T1789] CPU: 1 PID: 1789 Comm: syz-executor.0 Not tainted 5.15.0-rc5-syzkaller #0 [ 729.177003][ T1789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 729.187230][ T1789] Call Trace: [ 729.190537][ T1789] dump_stack_lvl+0xcd/0x134 [ 729.195162][ T1789] should_fail.cold+0x5/0xa [ 729.199702][ T1789] should_failslab+0x5/0x10 [ 729.204224][ T1789] kmem_cache_alloc_node+0x65/0x3d0 [ 729.209450][ T1789] ? __alloc_skb+0x214/0x360 [ 729.214069][ T1789] __alloc_skb+0x214/0x360 [ 729.218600][ T1789] alloc_skb_with_frags+0x93/0x620 [ 729.223733][ T1789] ? aa_profile_af_perm+0x2e0/0x2e0 [ 729.228952][ T1789] ? mark_lock+0xef/0x17b0 [ 729.233394][ T1789] sock_alloc_send_pskb+0x783/0x910 [ 729.236810][ T25] audit: type=1804 audit(1634682142.001:692): pid=1740 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/560/cgroup.controllers" dev="sda1" ino=14915 res=1 errno=0 [ 729.238624][ T1789] ? lock_chain_count+0x20/0x20 [ 729.238654][ T1789] ? post_alloc_hook+0x145/0x1e0 [ 729.238691][ T1789] ? sock_wmalloc+0x120/0x120 [ 729.238737][ T1789] hci_sock_sendmsg+0x1aa/0x24c0 [ 729.284105][ T1789] ? aa_af_perm+0x230/0x230 [ 729.288632][ T1789] ? hci_sock_compat_ioctl+0x80/0x80 [ 729.293944][ T1789] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 729.300212][ T1789] ? hci_sock_compat_ioctl+0x80/0x80 [ 729.305524][ T1789] sock_sendmsg+0xcf/0x120 [ 729.309979][ T1789] sock_write_iter+0x289/0x3c0 [ 729.314766][ T1789] ? sock_sendmsg+0x120/0x120 [ 729.319463][ T1789] ? rwsem_wake.isra.0+0x80/0x110 [ 729.324522][ T1789] ? aa_path_link+0x2f0/0x2f0 [ 729.329222][ T1789] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 729.335506][ T1789] new_sync_write+0x429/0x660 [ 729.340206][ T1789] ? new_sync_read+0x6e0/0x6e0 [ 729.344992][ T1789] ? lock_downgrade+0x6e0/0x6e0 [ 729.349857][ T1789] ? rwsem_wake.isra.0+0x80/0x110 [ 729.353186][ T25] audit: type=1804 audit(1634682142.001:693): pid=1790 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/560/cgroup.controllers" dev="sda1" ino=14915 res=1 errno=0 [ 729.354908][ T1789] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 729.354943][ T1789] ? security_file_permission+0xab/0xd0 22:22:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004060104000000000000000000000b340c8b6b770d12193f"], 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f00001f6000/0x2000)=nil, 0x2000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) [ 729.393086][ T1789] vfs_write+0x7cf/0xae0 [ 729.397353][ T1789] ksys_write+0x1ee/0x250 [ 729.401704][ T1789] ? __ia32_sys_read+0xb0/0xb0 [ 729.406491][ T1789] ? syscall_enter_from_user_mode+0x21/0x70 [ 729.412427][ T1789] do_syscall_64+0x35/0xb0 [ 729.416866][ T1789] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 729.422785][ T1789] RIP: 0033:0x7ff263a3da39 [ 729.427214][ T1789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 729.446840][ T1789] RSP: 002b:00007ff260f92188 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 729.455270][ T1789] RAX: ffffffffffffffda RBX: 00007ff263b41020 RCX: 00007ff263a3da39 [ 729.463258][ T1789] RDX: 0000000000000009 RSI: 0000000020000000 RDI: 0000000000000004 [ 729.471241][ T1789] RBP: 00007ff260f921d0 R08: 0000000000000000 R09: 0000000000000000 [ 729.479234][ T1789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.487221][ T1789] R13: 00007ffe5a47cc6f R14: 00007ff260f92300 R15: 0000000000022000 22:22:22 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x700) [ 729.551068][ T1793] device ‘|‚ªu entered promiscuous mode [ 729.578507][ T1797] xt_hashlimit: size too large, truncated to 1048576 [ 729.585570][ T1797] xt_hashlimit: overflow, try lower: 0/0 22:22:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f4c00ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 729.614251][ T1798] xt_hashlimit: overflow, try lower: 0/0 22:22:22 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) accept(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000140)=0x80) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000380)=0x40) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000100)=0x20) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x806000) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x200000000004e23, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0xfffc, @local}}, 0x0, 0x40, 0x31, 0x0, "00000000000000000000000000030080000000000800000000000000f1070000e7ffffff000000000000000000000000002000"}, 0xd8) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x31, 0xd5710100}, 0x100) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) write$binfmt_elf64(r2, &(0x7f0000000300)=ANY=[], 0x100000530) 22:22:22 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x74000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:22 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 729.835809][ T25] audit: type=1804 audit(1634682142.691:694): pid=1801 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/561/cgroup.controllers" dev="sda1" ino=14875 res=1 errno=0 22:22:22 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x750c0000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 729.881935][ T1821] device ‘|‚ªu left promiscuous mode [ 729.896633][ T1821] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 729.945977][ T25] audit: type=1804 audit(1634682142.801:695): pid=1804 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/561/cgroup.controllers" dev="sda1" ino=14875 res=1 errno=0 22:22:22 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000040611040000000000020000000000000500010007000000"], 0x1c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESDEC=r0, @ANYRES32=r2, @ANYRES64=r0, @ANYRESHEX=0x0, @ANYRESHEX=r3, @ANYRESDEC=r0, @ANYRES16=r4], 0xfffffffffffffef5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r6, r5, 0x0, 0x100000502) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x2400c010}, 0x24000080) [ 730.063967][ T1806] device ‘|‚ªu entered promiscuous mode 22:22:23 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x760c0000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 730.115832][ T1821] device ‘|‚ªu left promiscuous mode [ 730.128512][ T1821] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f6000ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x3) [ 730.430388][ T1847] device ‘|‚ªu entered promiscuous mode 22:22:23 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x7a000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 730.523088][ T1847] device ‘|‚ªu left promiscuous mode [ 730.538584][ T1847] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:23 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x900) [ 730.692732][ T1847] device ‘|‚ªu entered promiscuous mode 22:22:23 executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r3, &(0x7f0000000000)=0x2, 0x12) openat$cgroup_ro(r3, &(0x7f0000000100)='blkio.bfq.empty_time\x00', 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x11e) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0), 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4080) bind$alg(r4, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x400086, 0xf002}) close(r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r6, 0x8912, 0x400308) 22:22:23 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x5) [ 730.743226][ T1852] device ‘|‚ªu left promiscuous mode [ 730.754480][ T1852] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:23 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x7b010000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f6800ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:23 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000014c0), 0x8) pwrite64(r0, &(0x7f0000001500)="bd78c89c2e0fe854f8406a74bd2251b5788e3e6e38e0a557d7d87eda9d9145f38e513034d650992861ac83d5c7a41c64d8e438b55c9ea4142e599475168251df080f771b6c75575b68c7d0b81271", 0x4e, 0x13f0484) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r2, 0x0, 0x9) 22:22:24 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x80020000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 731.163376][ T1883] device ‘|‚ªu entered promiscuous mode [ 731.225712][ T1885] device ‘|‚ªu left promiscuous mode [ 731.236931][ T1885] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 731.300126][ T1883] device ‘|‚ªu entered promiscuous mode 22:22:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0xf) [ 731.370986][ T1885] device ‘|‚ªu left promiscuous mode 22:22:24 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x80ffffff], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 731.415407][ T25] audit: type=1804 audit(1634682144.271:696): pid=1890 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/563/cgroup.controllers" dev="sda1" ino=14926 res=1 errno=0 22:22:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f6c00ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:24 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f00000014c0), 0x8) pwrite64(r0, &(0x7f0000001500)="bd78c89c2e0fe854f8406a74bd2251b5788e3e6e38e0a557d7d87eda9d9145f38e513034d650992861ac83d5c7a41c64d8e438b55c9ea4142e599475168251df080f771b6c75575b68c7d0b81271", 0x4e, 0x13f0484) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r1, r2, 0x0, 0x9) 22:22:24 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x902) [ 731.674449][ T1898] hashlimit_mt_check_common: 17 callbacks suppressed [ 731.674469][ T1898] xt_hashlimit: size too large, truncated to 1048576 [ 731.755617][ T1902] xt_hashlimit: size too large, truncated to 1048576 [ 731.780255][ T1903] __nla_validate_parse: 22 callbacks suppressed [ 731.780276][ T1903] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:24 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0xb8) 22:22:24 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x8d010000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 731.890469][ T1903] device ‘|‚ªu entered promiscuous mode [ 731.963459][ T1906] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 731.992135][ T1906] device ‘|‚ªu left promiscuous mode [ 732.036539][ T1908] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 732.089948][ T1915] xt_hashlimit: size too large, truncated to 1048576 [ 732.107790][ T25] audit: type=1804 audit(1634682144.971:697): pid=1907 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir001381051/syzkaller.SlIH8Y/491/cgroup.controllers" dev="sda1" ino=14917 res=1 errno=0 [ 732.151285][ T1915] hashlimit_mt_check_common: 18 callbacks suppressed [ 732.151302][ T1915] xt_hashlimit: overflow, try lower: 0/0 [ 732.195361][ T1903] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 732.212963][ T1930] xt_hashlimit: size too large, truncated to 1048576 22:22:25 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)={0x6, 0x100, 0x9, 0x1, 0x391, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001100)={0xb, 0x4, &(0x7f0000000000)=@raw=[@map={0x18, 0x9, 0x1, 0x0, r0}, @jmp={0x5, 0x1, 0xb, 0x6, 0x0, 0x80, 0x1}, @generic={0x0, 0x0, 0x3, 0x1, 0x80}], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000000080)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r1, &(0x7f0000000000)=0x2, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000010c0)={&(0x7f0000001080)='f2fs_lookup_extent_tree_start\x00', r1}, 0x10) [ 732.238168][ T1930] xt_hashlimit: overflow, try lower: 0/0 [ 732.251381][ T1903] device ‘|‚ªu entered promiscuous mode 22:22:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0xe5) 22:22:25 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x1010, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r5, &(0x7f0000000000)=0x2, 0x12) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000002c0)=0x68, 0x4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000240)={0x0, 0x3c, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r4, 0x1, 0x70bd28, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="273d3d2f6e3a6857720e06000000a0386ca615600f52cd1d0857d2b7a9ca5c155696e9e828ebb89db1089519f66af935b43a4532a24a7858891802797d365f18026d223487f927f825f909fba736189785a3d803a9211dfa37df9ab5f17a8dcd85fbc6a28bb8e367c7c4f5f248bd54", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000000000009410000004c00180000000073797a3100"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r7, 0x2, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240080c0}, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r2, 0x0, 0x100000502) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={'veth1_vlan\x00'}) [ 732.316962][ T1906] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 732.338902][ T1906] device ‘|‚ªu left promiscuous mode 22:22:25 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x8d030000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 732.384920][ T1906] net_ratelimit: 2 callbacks suppressed [ 732.384941][ T1906] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f7400ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 732.563406][ T1941] xt_hashlimit: size too large, truncated to 1048576 [ 732.611529][ T1941] xt_hashlimit: overflow, try lower: 0/0 22:22:25 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x404) [ 732.672394][ T1947] xt_hashlimit: size too large, truncated to 1048576 [ 732.701570][ T1947] xt_hashlimit: overflow, try lower: 0/0 [ 732.772597][ T1951] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:25 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x903) 22:22:25 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x8f000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 732.868696][ T1951] device ‘|‚ªu entered promiscuous mode [ 732.879173][ T25] audit: type=1804 audit(1634682145.741:698): pid=1940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/564/cgroup.controllers" dev="sda1" ino=14913 res=1 errno=0 [ 732.988718][ T1952] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 733.009884][ T1952] device ‘|‚ªu left promiscuous mode 22:22:25 executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c000030000280050095000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32, @ANYBLOB="0800040030070d"], 0x70}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r1, &(0x7f0000000000)=0x2, 0x12) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@newtclass={0x2c, 0x28, 0x10, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0xf}, {0xffff, 0xffff}, {0x8, 0x5}}, [@TCA_RATE={0x6, 0x5, {0x7f, 0x2e}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040080}, 0x8000) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 733.031015][ T25] audit: type=1804 audit(1634682145.821:699): pid=1940 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/564/cgroup.controllers" dev="sda1" ino=14913 res=1 errno=0 [ 733.077321][ T1952] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 733.139223][ T1962] xt_hashlimit: size too large, truncated to 1048576 [ 733.145998][ T1957] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:22:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0xfdef) [ 733.199551][ T1962] xt_hashlimit: overflow, try lower: 0/0 22:22:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x11}}}}, [@NL80211_ATTR_SSID={0x13, 0x34, @random="13024e48173ca75cdd5584e395e039"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) [ 733.252713][ T1974] xt_hashlimit: size too large, truncated to 1048576 [ 733.271644][ T1951] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 733.294589][ T1974] xt_hashlimit: overflow, try lower: 0/0 [ 733.311267][ T1951] device ‘|‚ªu entered promiscuous mode [ 733.379872][ T1952] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 733.396510][ T1952] device ‘|‚ªu left promiscuous mode 22:22:26 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0x9d030000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 733.423873][ T1952] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 733.545074][ T25] audit: type=1804 audit(1634682146.401:700): pid=1985 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/565/cgroup.controllers" dev="sda1" ino=14908 res=1 errno=0 22:22:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f7a00ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:26 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x20000009) [ 733.669475][ T1998] xt_hashlimit: size too large, truncated to 1048576 [ 733.725306][ T1998] xt_hashlimit: overflow, try lower: 0/0 22:22:26 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x1010, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r5, &(0x7f0000000000)=0x2, 0x12) setsockopt$bt_l2cap_L2CAP_LM(r5, 0x6, 0x3, &(0x7f00000002c0)=0x68, 0x4) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r3, &(0x7f0000000240)={0x0, 0x3c, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r4, 0x1, 0x70bd28, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}}, 0x68}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="273d3d2f6e3a6857720e06000000a0386ca615600f52cd1d0857d2b7a9ca5c155696e9e828ebb89db1089519f66af935b43a4532a24a7858891802797d365f18026d223487f927f825f909fba736189785a3d803a9211dfa37df9ab5f17a8dcd85fbc6a28bb8e367c7c4f5f248bd54", @ANYRES16=r7, @ANYBLOB="01000000000000000000010000000000000009410000004c00180000000073797a3100"/98], 0x68}}, 0x0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r7, 0x2, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240080c0}, 0x4000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r8, r2, 0x0, 0x100000502) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000300)={'veth1_vlan\x00'}) [ 733.782459][ T2003] device ‘|‚ªu entered promiscuous mode 22:22:26 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r3, &(0x7f0000000000)=0x2, 0x12) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, 0x13, 0xa, 0x101, 0x0, 0x0, {0xc, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x1004) 22:22:26 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xb0000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:26 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xa00) [ 733.872796][ T2006] device ‘|‚ªu left promiscuous mode [ 733.884857][ T2006] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 733.971434][ T2003] device ‘|‚ªu entered promiscuous mode [ 734.018568][ T2006] device ‘|‚ªu left promiscuous mode [ 734.032237][ T2006] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0xfffffdef) [ 734.125418][ T2018] xt_hashlimit: size too large, truncated to 1048576 [ 734.162295][ T2018] xt_hashlimit: overflow, try lower: 0/0 [ 734.209697][ T2025] xt_hashlimit: overflow, try lower: 0/0 [ 734.224886][ T25] audit: type=1804 audit(1634682147.081:701): pid=2017 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/566/cgroup.controllers" dev="sda1" ino=14939 res=1 errno=0 22:22:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000ffd00ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:27 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xb1010000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 734.485337][ T25] audit: type=1804 audit(1634682147.341:702): pid=2015 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir001381051/syzkaller.SlIH8Y/494/cgroup.controllers" dev="sda1" ino=14914 res=1 errno=0 [ 734.551389][ T2047] xt_hashlimit: overflow, try lower: 0/0 [ 734.582454][ T2048] device ‘|‚ªu entered promiscuous mode [ 734.660704][ T2050] device ‘|‚ªu left promiscuous mode [ 734.690780][ T2050] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:27 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xc7010000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:27 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0xfffffffffffffdef) [ 734.836173][ T2048] device ‘|‚ªu entered promiscuous mode 22:22:27 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r3, 0x80089419, &(0x7f0000000000)) sendfile(r2, r1, 0x0, 0x100000502) [ 734.908300][ T2050] device ‘|‚ªu left promiscuous mode [ 734.916868][ T2050] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:27 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x11}}}}, [@NL80211_ATTR_SSID={0x13, 0x34, @random="13024e48173ca75cdd5584e395e039"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) 22:22:27 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xc00) 22:22:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000ffe00ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:28 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xcb020000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:28 executing program 0: recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0)=""/33, 0x21, 0x10000, &(0x7f0000000100)={0xa, 0x4e20, 0x2e, @loopback, 0x4}, 0x1c) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 735.319786][ T25] audit: type=1804 audit(1634682148.181:703): pid=2062 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/567/cgroup.controllers" dev="sda1" ino=14906 res=1 errno=0 [ 735.375950][ T2085] device ‘|‚ªu entered promiscuous mode 22:22:28 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xcd030000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 735.466540][ T2089] device ‘|‚ªu left promiscuous mode [ 735.481151][ T2089] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 735.539887][ T2085] device ‘|‚ªu entered promiscuous mode [ 735.571959][ T2089] device ‘|‚ªu left promiscuous mode [ 735.581618][ T2089] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 735.706668][ T25] audit: type=1804 audit(1634682148.561:704): pid=2088 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir001381051/syzkaller.SlIH8Y/495/cgroup.controllers" dev="sda1" ino=14952 res=1 errno=0 22:22:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000ff202ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:28 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) sendfile(r4, r5, 0x0, 0x81) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r3, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) write$bt_hci(r3, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc8, 0x3}}}, 0x7) write(0xffffffffffffffff, &(0x7f00000001c0)="a766a5280440d19f0e683767f42f0a5c93d76d4c41da0a2046c7e9708bce9f3cc6ec9fe125e73790b7d98c4cbaaa0023ed102c6959b8f3797525d56a93dcb07db601cbaf96d8b0f3fadd7ecda276f6710e6ed4ecd6f0357954c0fc31a80dc86dc9f1597ca8e96cc08a02aee8e6b59179080f0a035b4b12822f5ea0546de8ba0f2eaffc4b24a87f78b214e9dc951abdab8ca3", 0x92) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73810035037925e63a"], 0x9) 22:22:28 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xd1000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 735.972231][ T2099] device ‘|‚ªu entered promiscuous mode 22:22:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000406010400000000000000000c0000000500010007000000"], 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) [ 736.074262][ T2102] device ‘|‚ªu left promiscuous mode [ 736.081865][ T2102] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:29 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xe00) 22:22:29 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xd2000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:29 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f00000007c0)={0xa, 0x4e21, 0xffffff2a, @local, 0x4}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x100) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffc23, 0x0) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) [ 736.219882][ T2099] device ‘|‚ªu entered promiscuous mode [ 736.369213][ T25] audit: type=1804 audit(1634682149.231:705): pid=2110 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/568/cgroup.controllers" dev="sda1" ino=14935 res=1 errno=0 22:22:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000ff402ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:29 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xd8000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:29 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10010, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 736.675187][ T2142] device ‘|‚ªu left promiscuous mode [ 736.711298][ T2142] device ‘|‚ªu entered promiscuous mode 22:22:29 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000001a80)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r1, 0x8030942b, &(0x7f0000001ac0)={0x1, {0x21, 0x9, 0xf78, 0x6, 0x490b}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x492497b}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000502) [ 736.775879][ T2147] device ‘|‚ªu left promiscuous mode [ 736.853150][ T2152] hashlimit_mt_check_common: 15 callbacks suppressed [ 736.853169][ T2152] xt_hashlimit: size too large, truncated to 1048576 22:22:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0003ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:29 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xe0040000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 737.106751][ T2164] __nla_validate_parse: 23 callbacks suppressed [ 737.113660][ T2164] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 737.150077][ T2164] device ‘|‚ªu entered promiscuous mode [ 737.174963][ T25] audit: type=1804 audit(1634682150.031:706): pid=2159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/569/cgroup.controllers" dev="sda1" ino=14896 res=1 errno=0 22:22:30 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0xf01) [ 737.261406][ T2168] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 737.264849][ T2169] xt_hashlimit: size too large, truncated to 1048576 [ 737.288073][ T2168] device ‘|‚ªu left promiscuous mode [ 737.330207][ T2169] hashlimit_mt_check_common: 14 callbacks suppressed [ 737.330227][ T2169] xt_hashlimit: overflow, try lower: 0/0 [ 737.349985][ T2164] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:30 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) sendfile(r2, r1, &(0x7f0000000000)=0xfffffffffffffff9, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r4, &(0x7f0000000000)=0x2, 0x12) bind$qrtr(r4, &(0x7f0000000040)={0x2a, 0x0, 0x7ffe}, 0xc) sendfile(r3, r1, 0x0, 0x100000502) [ 737.353603][ T25] audit: type=1804 audit(1634682150.051:707): pid=2159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/569/cgroup.controllers" dev="sda1" ino=14896 res=1 errno=0 [ 737.385831][ T2164] device ‘|‚ªu entered promiscuous mode [ 737.396632][ T2170] xt_hashlimit: size too large, truncated to 1048576 [ 737.411983][ T2170] xt_hashlimit: overflow, try lower: 0/0 [ 737.495645][ T2168] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 737.523317][ T2168] device ‘|‚ªu left promiscuous mode 22:22:30 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xe2000000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 737.568536][ T2168] net_ratelimit: 3 callbacks suppressed [ 737.568557][ T2168] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 737.684891][ T2179] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:22:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f1603ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 737.804901][ T2197] xt_hashlimit: size too large, truncated to 1048576 [ 737.858908][ T2197] xt_hashlimit: overflow, try lower: 0/0 22:22:30 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xe5010000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 738.064585][ T2212] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 738.136436][ T2212] device ‘|‚ªu entered promiscuous mode [ 738.201644][ T2214] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 738.227113][ T2214] device ‘|‚ªu left promiscuous mode [ 738.260968][ T2214] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 738.277398][ T2215] xt_hashlimit: size too large, truncated to 1048576 [ 738.309288][ T2215] xt_hashlimit: overflow, try lower: 0/0 [ 738.347921][ T2218] xt_hashlimit: size too large, truncated to 1048576 [ 738.356008][ T2218] xt_hashlimit: overflow, try lower: 0/0 [ 738.362417][ T2214] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f00000007c0)={0xa, 0x4e21, 0xffffff2a, @local, 0x4}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x100) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000003a40)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x3fffffffffffc23, 0x0) poll(&(0x7f00000002c0)=[{r0}], 0x1, 0x0) 22:22:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0), 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:22:31 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000006fc0)={0x0, 0x0, &(0x7f0000006f80)={&(0x7f0000006dc0)={0x20, r4, 0x4906869e7eb2b74f, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9ffa97ea0720eec3}]}]}, 0x20}}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x204, r5, 0x400, 0x70bd25, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x204}, 0x1, 0x0, 0x0, 0xc0}, 0x44000) sendfile(r2, r1, 0x0, 0x100000502) ioctl$FIONCLEX(r1, 0x5450) [ 738.407079][ T2212] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:31 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x1200) 22:22:31 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xf3020000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 738.460601][ T2212] device ‘|‚ªu entered promiscuous mode 22:22:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f1803ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 738.656688][ T2231] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 738.696513][ T25] kauditd_printk_skb: 1 callbacks suppressed [ 738.696530][ T25] audit: type=1804 audit(1634682151.551:709): pid=2233 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/571/cgroup.controllers" dev="sda1" ino=14941 res=1 errno=0 [ 738.731294][ T2236] xt_hashlimit: size too large, truncated to 1048576 [ 738.791467][ T2236] xt_hashlimit: overflow, try lower: 0/0 [ 738.824407][ T2242] device ‘|‚ªu left promiscuous mode [ 738.845418][ T2256] xt_hashlimit: size too large, truncated to 1048576 [ 738.856103][ T2242] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:31 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 738.903802][ T2256] xt_hashlimit: overflow, try lower: 0/0 [ 738.961949][ T2242] device ‘|‚ªu entered promiscuous mode 22:22:31 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xf4020000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 739.030944][ T2259] device ‘|‚ªu left promiscuous mode [ 739.042212][ T2259] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0005ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = accept4(r0, &(0x7f0000000000)=@can, &(0x7f0000000140)=0x80, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000002c0)={&(0x7f0000000180)=""/154, 0x1025000, 0x2400, 0x20, 0x1}, 0x20) sendfile(r3, r2, 0x0, 0x100000502) 22:22:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write(r2, &(0x7f0000000100)="565ee452ecf1f052dd87bf64ae330893997ff61df8eaef654f50b6c8baaf4db97bd9853b6522e1415f14d022876a5032b07b6894416d72d2a207c7a55484c076cdaaa8", 0x43) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) vmsplice(r4, &(0x7f0000000580)=[{&(0x7f0000000200)="e8a2cd6b8d7da0d9f88d7b32e911267781f1c0af7b3a5cd529234bd84e5a2f5cebc572191cc4b79dfa0129a337e696039746d05a95d56b12f063db66508832c18c525cd51218d3abc9c9d253bb9b2ba2cd75899336a6e51284d0fd01cff7c1bf470cb1358f716193d483547ca53a12cb38586518ab8f3dce490cfdd2b8b34f1698df070438dabfb79c68fc09edd833ac08f8ff47321bd371e10e693d1a37d8ec39d701f8666e6a6d7151e0562ac1c250e7b0ad", 0xb3}, {&(0x7f00000002c0)="fc1a70a6fb1ce88e076f31e2e4a131525aa11a61e52ffc1793a6e6f223cea0ff2459fdad71b950498c507a1064521efb1cf85c941fdd5c259a47d7d46d3c6159ab0e400579776850bc2340162a7a19507a64451a6b5f4454b9bd54d27e66d9932b02eb0d551873ec6b0bf2c208e339b3860e29c9854e61521af05bb4ec283a5fe6741ce20e48a404592bed53377a4837bba1d61184333beac28a15c2b1a28e", 0x9f}, {&(0x7f0000001280)="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", 0x1000}, {&(0x7f0000000380)="8bc4e8a0d803b514ca054858efb3d293c6ec3773a1d8e8030f14d7a72d5604e4887c74b1031d84956e6d16ccac3c4a6e53d3f3dcf01eac201582e30dc41a86ceec73a786fd8e30c66e326428a3b4010e54b66cd6ad5982c707447fc9289ecfbc38f61fccd912508301cf80df638475ec29343e25", 0x74}, {&(0x7f0000000400)="e7a2ba3ef9811ba73f227ab257693f782ebe35ec1193c25e30f7519c02464ecb1eda7f911b683f9ac59dad6f8767a88a9f204ccb3d57c37e3687d4b624317bf42d5db36676c6a311f7635d1b73bb2daa38987501fcd67865a62c67d551afb3bfca09151cde503b8fcf2f08d2947cc50daf2c3cf6351db6", 0x77}, {&(0x7f0000000480)="f0b6d97115baa857861b0b78ec9ea32fbf373ab376dfd0bfa1bfea9e5bf40b8b89a86a2ffcd1805acf92dd3d79f9a1398432fc2d0384dc562842475c68f17c362e48c7d879105b535895710e479371bac826edb611f62655cd82ce6e6f7803c0363d76e0b4c2f2a2fb31d3ac8b0a451a710d6c99f174da3350102c16abb625a8c171cac2fbdf0cdb54ca37eba4fe609263139da8a1ac66ce4d9f0200c5eb997d2bb303a326906fe7352c340e03148adcda0487da21e8c8b7c4889d17bc6fde4aa4674d77", 0xc4}], 0x6, 0x8) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000000)) write$binfmt_misc(r5, &(0x7f0000000180)={'syz0', "7a7925e639dee6fbdca69683f9c315ec4543fd75b91543400115f9d91c98567e915d910d5c4b643da0c27777aa3e730539b109fff25a28973421016ff6f6b8adc5c3e63132f300"}, 0x4b) [ 739.323247][ T2270] device ‘|‚ªu entered promiscuous mode [ 739.352825][ T2271] xt_hashlimit: size too large, truncated to 1048576 [ 739.401332][ T2271] xt_hashlimit: overflow, try lower: 0/0 [ 739.410312][ T2272] device ‘|‚ªu left promiscuous mode [ 739.435744][ T2275] xt_hashlimit: size too large, truncated to 1048576 [ 739.439978][ T2272] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 739.455438][ T2275] xt_hashlimit: overflow, try lower: 0/0 22:22:32 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x1603) [ 739.546743][ T25] audit: type=1804 audit(1634682152.401:710): pid=2279 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/572/cgroup.controllers" dev="sda1" ino=14643 res=1 errno=0 [ 739.612263][ T2270] device ‘|‚ªu entered promiscuous mode [ 739.645594][ T2282] xt_hashlimit: overflow, try lower: 0/0 [ 739.661578][ T2272] device ‘|‚ªu left promiscuous mode [ 739.672498][ T2272] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:32 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) sendfile(r4, r5, 0x0, 0x81) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r3, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) write$bt_hci(r3, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc8, 0x3}}}, 0x7) write(0xffffffffffffffff, &(0x7f00000001c0)="a766a5280440d19f0e683767f42f0a5c93d76d4c41da0a2046c7e9708bce9f3cc6ec9fe125e73790b7d98c4cbaaa0023ed102c6959b8f3797525d56a93dcb07db601cbaf96d8b0f3fadd7ecda276f6710e6ed4ecd6f0357954c0fc31a80dc86dc9f1597ca8e96cc08a02aee8e6b59179080f0a035b4b12822f5ea0546de8ba0f2eaffc4b24a87f78b214e9dc951abdab8ca3", 0x92) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73810035037925e63a"], 0x9) 22:22:32 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xf8010000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0006ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:32 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x13, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:22:32 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xfb010000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:32 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) writev(r3, &(0x7f0000000480)=[{&(0x7f0000000000)="4d497733d55eae6191ee74e5a691d6f3932f0e28e97f01ff7ed978b1ec10b1db0b1adfd126d0859ba0848f41848f95e4bc20e31b578aacde1cccb3617012e0c1bf5828ae865fbd864f41e4832a3defe847b0a81a9a767ce8c7c2b271c7e545e1aa28", 0x62}, {&(0x7f0000000140)="45ad095337f32af1c5689cf024737552be9527d185a07f1b4fd7c1678b099168d1ca12515aa95e9f55f09a0124b076971e413f42df76bf173486e1803f1fa62d2efc4eb222fdcef80b464008a042a1f35a7b1aeb0d95df7e80f3df9e0fc6dc1aa7ce463937fde962521f19b1ca4a0b4f19526f60ea534a0d99469e9d59c93eaeff7d1c032e", 0x85}, {&(0x7f00000002c0)="da59d2e0af063a8023fb84d29f3fa708f405005f96a0e4dd9ad4c0ad612b9a00aefb9a49c90ca7faa77fa7cc67457243971a29f39da700a02e6c04c3022666ab1c1154590bd071d20dfccf56e341629482315a0428e1ae627df766fc3f7905b67b36d44c471a9738b770dd2c6e44a9e99185bcfda4204a09805b126d34f33a63c6f1569fa09f0accccd9d7e5b4213364ef58da6b4550ca719307f449801b9df15298ec6554e9ac1e91711559328a73aa4895856cbe81f21fa6a4", 0xba}, {&(0x7f0000000200)="677fc129b4629851a2189b7b607ffc4ebcb5f8cde4777d2bd6a7255950874f096f8e2ce81837c644619852da09d94d3b03ec56d255a550f024f40d20", 0x3c}, {&(0x7f0000000380)="18122bc58989ff7b09dceec78dd09ceb4d239bdba01e3525e8a7429322c97fc3ae0cc0d6391d6654e95810fd8acb2dfc8bea835be371ae4c8d78d309a12d0f1c910bb6ab5a5bb481d61f1b3088dc6b1228846b8890d590654ea63e218d3a38c752464ed26047c52028654e4268f7ae862c97819040dd831ec47aeff5e61801cba054ea3ac08419ec0bcd0aca0a7fdaebe6e6df4b15a2fc707e71c5db5267795c74f5a6c3fad315fb4e60a7541d7224c0fce18bb0d11458448e036f0bdb17c1573db6b5b09a30dc3614d91c", 0xcb}], 0x5) [ 740.049443][ T2315] device ‘|‚ªu entered promiscuous mode [ 740.133616][ T2321] device ‘|‚ªu left promiscuous mode [ 740.148454][ T2321] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:33 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xfd030000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 740.273882][ T2315] device ‘|‚ªu entered promiscuous mode 22:22:33 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r5, @ANYBLOB="010000000000000004003b1c210008000300", @ANYRES32=r4, @ANYBLOB="2c0433005000de00003acba512e4080211000001505050505050"], 0x448}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0xdfea0fd4b3eddc5d, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r7, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000118000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 740.321146][ T2321] device ‘|‚ªu left promiscuous mode [ 740.326879][ T25] audit: type=1804 audit(1634682153.181:711): pid=2328 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/573/cgroup.controllers" dev="sda1" ino=14947 res=1 errno=0 [ 740.383658][ T2321] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0007ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:33 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xffffe000], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:33 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x1f00) 22:22:33 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)={'syz0', "285d4984b3b7ef78ae7b6069d59bf0a02965bb80220def898add04aa7fc3d0d5ca691dec5b33f69aa341476c57ca0166bb124f5fab6e42d7295f4b6b0a3f9aaf091dc3db82bfe91b1ca721e127d667899b9c0e3db58d598e8b40ca19bc761bc673b8ccd00464fa744dd57bfd22789699c7ed5c108dfa6fdb1950f2f9f90d4b14cd1aaea4df9a47513f45e262b5406b8927611d110cd806fa4e43d761a75cc00c43e91729a410b1c798308bda274c2a6c7596758ee4681013988255e978b7930c"}, 0xc4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) 22:22:33 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) sendfile(r4, r5, 0x0, 0x81) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r3, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) write$bt_hci(r3, &(0x7f00000000c0)={0x1, @set_conn_encrypt={{0x413, 0x3}, {0xc8, 0x3}}}, 0x7) write(0xffffffffffffffff, &(0x7f00000001c0)="a766a5280440d19f0e683767f42f0a5c93d76d4c41da0a2046c7e9708bce9f3cc6ec9fe125e73790b7d98c4cbaaa0023ed102c6959b8f3797525d56a93dcb07db601cbaf96d8b0f3fadd7ecda276f6710e6ed4ecd6f0357954c0fc31a80dc86dc9f1597ca8e96cc08a02aee8e6b59179080f0a035b4b12822f5ea0546de8ba0f2eaffc4b24a87f78b214e9dc951abdab8ca3", 0x92) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r6, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73810035037925e63a"], 0x9) [ 740.708293][ T2346] device ‘|‚ªu entered promiscuous mode [ 740.764569][ T2349] device ‘|‚ªu left promiscuous mode [ 740.789773][ T2349] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:33 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xffffff80], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 740.946363][ T2346] device ‘|‚ªu entered promiscuous mode [ 740.959855][ T25] audit: type=1804 audit(1634682153.821:712): pid=2355 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/574/cgroup.controllers" dev="sda1" ino=14952 res=1 errno=0 [ 741.025676][ T2349] device ‘|‚ªu left promiscuous mode [ 741.043155][ T2349] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0009ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:34 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:34 executing program 4: recvmmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)=[{{&(0x7f00000000c0)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x88}}, {{&(0x7f00000012c0)=@abs, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001340)=""/160, 0xa0}, {&(0x7f0000001400)=""/86, 0x56}, {&(0x7f0000001480)=""/86, 0x56}, {&(0x7f0000001500)=""/156, 0x9c}, {&(0x7f00000015c0)=""/251, 0xfb}, {&(0x7f00000016c0)=""/243, 0xf3}, {&(0x7f00000017c0)=""/86, 0x56}, {&(0x7f0000001840)=""/254, 0xfe}, {&(0x7f0000001940)=""/141, 0x8d}], 0x9, &(0x7f0000001ac0)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}], 0x2, 0x140, &(0x7f0000001bc0)={0x77359400}) r1 = openat$cgroup_ro(r0, &(0x7f0000001c00)='devices.list\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) close(r2) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000502) 22:22:34 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x2], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 741.490157][ T2389] device ‘|‚ªu entered promiscuous mode [ 741.564254][ T2392] device ‘|‚ªu left promiscuous mode [ 741.579038][ T2389] device ‘|‚ªu entered promiscuous mode 22:22:34 executing program 3: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xffffff80], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 741.646249][ T2392] device ‘|‚ªu left promiscuous mode 22:22:34 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000040601040000000000000000050001005f997d58"], 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) 22:22:34 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x2000) 22:22:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f000aff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:34 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x3], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:34 executing program 3: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x2], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:34 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) connect$packet(r7, &(0x7f0000000240)={0x11, 0x15, r5, 0x1, 0x40, 0x6, @broadcast}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000340)={@remote, 0x5, r5}) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000008c40)=[{{&(0x7f00000000c0)=@rc={0x1f, @none}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000140)="499e073f35fc42d947d935aa9a8d1c32120f7966b6c8b3f70c543011800d32f24f1f46a1e75a8bf37abc80fbfe649d82cf8b8a592d860aa2a05965e67a5ee06a163b8953633438727539ffd92c6630aec20ae53c94cd1eca14b56deceb198a6a69b45d34ec6bd0353c24b7005602c9ab38fe74a1d7c3d64a98aea6b23d850174552bd64439700e386112e7bbaf3e92778082c32f24f49d31dbed3ff94b693efe7d37aec6be343c75c17975e0e71613ebe7610c07919dc44ca91430b8c9a7b6a61202ddb6f5c84106347ab16cee13093908690f6859fd3b7edf97d79bc643dea856dcae4261888133ae03", 0xea}, {&(0x7f0000000240)="8a6a5c9bdd8b84175a23976031f363314a5a8eb81582a76dbad407433bc747741ef621e179e269b710d9765143e97a61ad74e59219e264b069856d76b60b72e76a684dfdbe44d5e15e31a2f3612dcca7e7500e1111d214b5bcabb3af829f3561e9b98c5a5ddc763914f33ac56e2c45915440756f70a2c6c354ceca36a9287f96d03c1627513a8bb5cc5bdad29295a1", 0x8f}, {&(0x7f0000000300)="c172e1ea27c69b8388b29bce965133f0d70cd6da80136a7346f18da7777992a7042ce0600f63c147eadddbfb06a5df69d96f875758353ab6964fbe10e97f32ee0d769b1bb9dc75a1e9ad125d811ad6b5bc0c34ebd7f4682acd258b3bf607536118585c332867f606bb8b8db749ded7410bbae4f4cd1cc3b8bfa88bbd5e1d62dc071c837fe24f39446c6e91ca0f1a6ce9514504002c50f91ee0", 0x99}, {&(0x7f0000000440)="bd6688a82d5510833b352a00dc2d9bf4507e2c9b34c894007932ba8e091fd02da5469a2a51abbf1cd146ca5ef164adfdc46f19d7b93593b977992fc4518529f81a2e1cd4022b629d12737bed3a14fb18c7d2ae865285e8d6598e764cda1f66baa88cc8c38c366ef221e640bfd597538d9306e8e4694cfc3b18add03d24e1188249f4329d061396293eb54cdce97ff066d4dda941690e111cf4dd818b5ba04ac8e720304ad28ecdbb44c40570f2ba06be66ec48dd260cea3df27cb2c03a9754c59b071c4b0be7e379244703a18be00d46eb359acbe29a1c8b571d0528e2a9cb8702b21cd6be4368", 0xe7}, {&(0x7f00000003c0)='X8', 0x2}, {&(0x7f0000000540)="6ba475304dc369298b117f1485ed809f4994b7d113fc5422baf5f591ff52", 0x1e}, {&(0x7f0000000580)="d5d170c1b1976478dd3870a9df730437bb935cd4f11076d76102b4ee3c0c17cfbd30b0f7c62f3643342b6a62be2257102f0fc9a790ceb73a27316e37088d4d716c39253db57c0ecc54234cf13f7efd757a754793196c684d87c214e4c3912bd9a112f516c04a7a43d48017e2b337c41f347b57f6f67a1f10f0", 0x79}, {&(0x7f0000000600)="eda7814ee433adbff864ef0c6252a987a257ac36f8291e1fb0d9b1d8df49ab4cc204c8ca5eb75c467223c95871101fe043854fa809c885094f08f612038e003b73d666ea17cff7f458e1c2638c8fbb4992188784c07ddc9ff7c2fb2cee1864f005bda4d22de11bf645469bc1e1edb8ef88374a07ead7643ec35f84e3678721fd3300de21", 0x84}, {&(0x7f00000006c0)="8d1f303ff9af5e1f5f25de95d9812933881a0dca8ddfd33f2c356d2a4d1592d5688ed60544f325ba7396c7ca76ed1f0cb71449af19936d6fd6d150ed672b9cf81bec94cfe48a20504e6714740ad8f4e15293c5ff49017e23291fdb724ef3a6107b5bad6de18041501d0393bfd1", 0x6d}, {&(0x7f0000000740)="47c280674c8a9fdf09466034898f4e53102b893496aa2099ab09179f9b7d0007b0ea5b01027fde40e49c9d707308a6b071a498b00a675695866b29bf71", 0x3d}], 0xa, &(0x7f0000000840)=[{0xf8, 0x10b, 0x2, "aff1acee564c440ebfd4cb241d8b58afdf496cfe07ee0a0019d96ca4c8837f5c6269be46ae09def00970a4c09050868bf25d2ced851302df85e75daba98ff6b1f433b58a4aae9c775f1a475b9587c67a2880b6787502a96441b2ffab3f3225800e1bf41523379922aae4fc21d500f52d00316993abf782b8474c5d34adb4336eec1d6dd0213ed4c098a7f35c577199811efcaff46f0f4fc4d91c20a3a94a8e4adb48b692eaf83edc827127039c23132de2507b018cd284cfe4342f8d2a1b637c01cf340376f9c49b77f4029e2b9e71639859f5e3dfe3c35bc81857a13856880bd4a23d"}, {0x1010, 0x2785c42cdfbf4ef9, 0x727a, "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"}, {0x10, 0x88, 0x1}, {0x50, 0x10f, 0x2, "6eaac3aa6f4fef31719850b38a0ee1781108907ed5fadc4af9cb2a79814900e53ee3a4662123b094afb6c0a4745cdfa763e4fefd9101873495"}, {0x68, 0x11, 0x48dbd47e, "71e8736c3fb860eb0ecaa634b170a7856c5899023d32d98c1f3e7bcf27995898000536b109d2961774d4c9ad4413bd69126eaba9150a41b043d0ddcfcbca166d523a3c3fbf7e5c8211a41f16eedba8fa5c17c9c110"}, {0x48, 0x1, 0x1, "88cf4bd9450d966591c78384bcd540bac214e5c45840ebe3e53027db5529ed8d336b71df2ad2407f9255717bae3d03731c"}, {0x70, 0xff, 0x2, "432aa594864a7f92865cd280e8bdfd703ef73af14766b5699db512264bcb490bc9f502f184d799c47768b968468d5f471ea90b6422c4a27603cddcfd8ef6a045b55cf5a82cefae0fa94167529ce98bc82681e46b37eaf2b5077a492e4607aa"}, {0x18, 0x10b, 0xfff, "61709a47476b45"}, {0x20, 0x103, 0x2, "afbf87be832f0409ac"}], 0x12c0}}, {{&(0x7f0000001b00)=@ll={0x11, 0x3, r8, 0x1, 0x9, 0x6, @remote}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001b80)="7bfea39083abc970dd6042ffbd6f451a0d3d9ef9586e248d03bc313711fabe69d8dab9b89858e35e022f3f656384a00e2db096256d5ea821c7464955ae7eecb608d0047fb17287bfff0dd5d5e8a2a6e9f54d9c6155ea9259e92e741fe7d5a92ef0ba9e9e4576", 0x66}, {&(0x7f0000001c00)="7999fbcc15497c44ffa4dbe4d371331b0bb895c5e6ead88a57bc2e59075d570713975efcbb0997da056696e7a410bd1caacfa53499fc34f648190f9fe3d8b816ffdf9a35bb92cc23c5ea890878b9c87270362bc164a5071e53c6d9cde7cbc58108173ff16a4cac7b2647e2e0314601e5dec17f762a165d033f4cd9fcc77f5d364375892c76d2643fdffc671644f58ba03e4a017e75cdfbc5ef09d2ff91e80fa53582a504df96fcd11908c5b0db9090fac1fa351786be6e395397361be27d22804f7a5161c7a794994828e8d03da83e93dcfc6d741434d2084ddb2a486f95d634cc0ca726", 0xe4}, {&(0x7f0000001d00)="ee0bf54d47bb62d86924b62601fa41d0b8bcd779d0f9d74dd686f1a367cca454508030f0d1079d3f837222931a42b7b722b100e4da4931444655d232deb745dc5213bc0450be29217833934eb156285c5c977e62f75d5e93e1276c8abd372131170772ea822f80e13c561a5232ddeb6110f65923af1a91833339675ac208420b", 0x80}, {&(0x7f0000001d80)="d6c9aff5878c11ab6db3470e3665453409a417d308ca9bb40895d6d4b2809ba637445d5b7a5a7a8ca944351e4879f8d01bdebfda0b9e096615408a86147aaf899f5fe963e0513cc17586e98a9869ed923a58fa211e6db4f3870933983e39ad7ae67cc52ce5d902b743fc5fbaf19d38d1996ae94a96905c08d57ba9b567f0864981a2eb92673eb54d31531ff0ab7f919c79f9112b3f39ab24739547144e0d57b530e7f487db0907be029d26367d2e0a39c949b465a06fc3d88618bb50e568b8d76e42826bf98a90ab81b1ca6d4dad56936e77", 0xd2}, {&(0x7f0000001e80)="2e4d087bf1573f1daaf8f8d44d89b648c255475360666611ebb5a6b861bee6655ad551e7687c5a2f", 0x28}, {&(0x7f0000001ec0)="3df6204eac8eebce2d41ace0cc62255d2bde2707fc9a246fa829bcdfe83cccdb1badb5d5efb39a41e8a1920bcafa9aaa461a1d1672793914c164d701410e6481d99497874c7bd5352779e691a467408957862baee4e8697cb3dfd39605beb0cf736c9efb07fd2e3369b120919c7d868677aefc2262294e8be4bacfc4fad1999fe7de6074ebd5da5d874a49a57b57fa5849128bfa389cc15b5111ea1bc1c587574c548aa2250134e03bfa54b54ea2a58dd0126516072a83581fc944bbcfc657f20906f2f3f87c6b314c9a4d8e593243e31f", 0xd1}, {&(0x7f0000001fc0)="9fc59637d20ae14b5c59a3a3db29dab0e74ce5740a763228f7d98172c9ce25d68dcfb3f8ae2004bbb6921ca677bffffe69d77d696c2920347ce16198ab8727649402611eade4868932e01f2aaee907487f2f2e7221fe5119", 0x58}], 0x7, &(0x7f00000020c0)=[{0xd8, 0x108, 0x401, "c322d26d852d759bfe53c8948c479f4f381138678731f4251abb86e32ff730bbf2fad43a1753067bb23bf594d630faed0afb4bf2b9748b40a6c6a3b136c94086d2123724becad40a767cddb5f7cf19d8173df3a1b47da6b86c12f53bf09e11d15d1f2ae199b833756b4c755e36e23b9b8285ae58c2b04776a80fd9f4bbea6f9292effb1c8b0a963f4bf00ae1c7547f8436580897f15df2518983558440acf650b57edf7cc4850b703f975513c88bf1fa8dcaedf51c9ded5519ea92705909518b8136"}, {0xa8, 0x10e, 0x100, "d45682eac1cce5f02c259f6d2daf03812879059c34b8d0db2ef220ee24ade2cf7852d43688748da186672f77cd38aa63793e6fc334798f7b5c2f550b0b5e72856586d4afd87825e6eb5b0059291a7bf5c3f97f99c60aa47d5142d1a9a7551070a31188551f3265f67a0e774d5f653dffedd9d646c7260d672a602f5a60e49ad85b4b50cdace16ad8e8eb7cf0b6f1765ca61b1a25a1"}, {0x98, 0x10b, 0x1f, "a375c560b3381fe3e25a54b5f11115b6d1a141357ecb2e4e427da63e0d5e6d0a002e0f7682933a06b8a1743e95c68224437e07f1a87fcfbd673c5e5eb30c8bf59bcb0c7838c5d71005a8db58b164d9760dbc5352454271278f7a1a1e73ac535d07d923dcdb5fc5c0d45d2a63edac7fda8f264842b3d5ebe21f1e1bd95efc9ecfb6d237df17"}], 0x218}}, {{&(0x7f0000002300)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x80, &(0x7f00000023c0)=[{&(0x7f0000002380)="4845a6425da133bc24bf040d9389203d67cb7ff0e5e6eac5d7d69286a415f77560fa5eb62ca5b6d7d30ac502f5f72d43697449e14f", 0x35}], 0x1, &(0x7f0000002400)=[{0x98, 0x10f, 0xf2a, "747316477985e3bb9b1e6d233b310ee073e63e4585433916acdf2d538d29a56f6e30ea8bcb17219425779d4aff78063e9a961d4fe88c220b03c0ccec34eff3576ef509205875d69ef3dd126533344c68447d347e293664df5b3b8171a9a6262588297a319a4e511d5c53bbf6ed11f0f94d7c511e3a8e939f75f9926bac14f589e8cf9f540fda"}, {0x1010, 0x116, 0x101, "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"}, {0x100, 0x101, 0x8000, "b747812067725bec4d00486ba65509653b6d737477eb35b3ca51abda681eb6af8b8dcb73916238e3c8b710fc31be6332a2a5023db830b5c1543f8f452485a59b7d3e01aed662306047aafa611d18b8c2a5327e4b9e3fab13f7796d922e801760e4191be07faa1db705ba85e4fa094cb807bd76fcc40e573cacf327c3c6b6c83203b431edf1cd8bab5ca5a6808c903634dc8d1a8de1572453b97a65c8f7f030d8ed0eaa90270e1f0ead908c4d285d5764838473520493796d9ed74c6db2df38caf4217532d7e610d90d548d08088a5d76734d8b186124ea682519ed42238824faf92c2c19ef86612087f791defa9f76"}, {0xa8, 0x10d, 0x6, "1ee14f66e8565d41a4419291df27754ad4232957a86c5153669e796ef54d66f41e5ace32f8456c9b146b1c0683bc436dc41d4fc8f8d541b355052cb6c190a213c83337f3fcb382ff53dd49043d49cef0a7d2aa70b0a7c38dd9b0f3757557666b264efbc31294a401768e77834487a40f8e541bbaad0692ac8e414f8fda557fc364ff4228d4157d74b2506b344a7d4d3b41f5c017dd51d4"}, {0x1010, 0x103, 0x3ff, "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"}, {0x88, 0x108, 0x3, "66eba2f5a7be14e35e2250e03f105c2caa974cc701852616059b8eaf990062838de94b8f7bddaa91cd1142de25fa239ff8386e78973714196eea00683ac7c9ab65336f2bc355c03cf8ec53d7926ed4af41d40bfcbb6f08cae39e1110b57d6fa8262b3fcff4139bc76ec12e481343ca675845"}, {0x1010, 0x109, 0x9, "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"}, {0x50, 0x112, 0xb9d, "e79f4ca9b2cdccc168a4d34555ce45de3deb578cfe2537c601d01eeef636b11865ab56b72d3a6bc6de5846a84a0b07e8f2cce6bc69963d44bf86ac"}], 0x3348}}, {{0x0, 0x0, &(0x7f00000058c0)=[{&(0x7f0000005780)="b1aa491e719e8f521a7ddcfc7f8a6c430a20952e4a04729f90ab98b172d66078a1fb7a0d0284eb667a6e1ce8f0c46dca0f7589ed572be75cf644f2551d35d8f053f1ff00367b5658c06325fd08bc5178fd9ca4cb37655fe20ed9c5be05012d22e1a734076d17c66f22f682c62b16c9354844", 0x72}, {&(0x7f0000005800)="35c6b8b55f082557111f595723337e2e076cedc46badb67eae643809250f7a8fe77f1d2a42b1ad59751443823930b79485626d6ca2124a3a7b6014b1c96871325a107cf3c7cafb670b59756c8c9f5d017ce705884496cff7f25749d27454b37fb54486439636caec4260956a902ad597bfdc8bf9fbbbfcab1450e72a221fd87b6eaa0f869d1a262ac894480b6e82aae1bb4b8e15e4", 0x95}], 0x2, &(0x7f0000005900)=[{0x10, 0x0, 0x7}, {0xd0, 0x6, 0x3, "043c57cfbaa01ea37e5e94a643f2e9e825c54659001fdf8892ab52e9b1774e09c359e3a9dd30205bdc0c3a361b4c10ac018542474f249f26b42f62ca035b9e4399be93f97f8ade4cee8cbf8883d93863c65b8155864f581ed1e97fcac308291b15bfbcd0bd34031544818918fff861d306ebc57282e2757b810d0473b5428de9fe0a4a0ad1fb52867c3fb20d403b26ab2d6f64993614cc04dcdfd84c961ebd5f15ed04b295a40f78c02c9c2417715774f393e5704a0dde77c302375191"}, {0x70, 0x102, 0x0, "4386beea0ea221ed5812e50574e729d58ad23803bf8c62a8a6255b74fbfcf76043f1eab623b353fd6586a25fd18cb44ebeff3e9b2b3d6e5dbe491e6a73f475741444f6e7490fc93c584903618e95bc703d91759545bea99d40a05300b11fdf77"}, {0x38, 0x1, 0x21e, "ee9cb6cc4d688dd7408efebbf620f6e1d6a23f1c02b1aeed374766bed8c709976b"}], 0x188}}, {{&(0x7f0000005ac0)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0202}}}, 0x80, &(0x7f0000005e40)=[{&(0x7f0000005b40)="c9c73ab9d943378e179fa50316e8b7192b48089a9ebff0ef4c53d3062241c8daa3d9a07e15c1c52e40298ec941af6ab4092b4b3b44b33b631dcddf34dc7b60a636c286a20bef16cc67011d85833a784d596f80e683ad4370c97ba872c2ecdd37d249247981e6b5c9aa9933278596655685a3f433176022e6a42789ca7a8ad65595779d1d727e20a113720f968dce0b79ea280eec51c27d29c08a05e4a3dbb8913c9255cf368e828641d113fc9d20b87ab80b4a0fe229aaa434cc821f9b206b21b56cf98e20a996a5d3bf5f78cf6e5c2f65154058077fee1aaeb2b6710eac6c7cb19b98576a1595b22e6a589d", 0xec}, {&(0x7f0000005c40)="16a2df3606e13a3e37046bfa3096c43789c299e879464288d3e5a0f9232d5d2620755c728da38abb8698daf988acf318d875075442d1ba0b019c4dd8154d7265670057080349191c6371d9e821c2c0394801f8b70bc3c88d73c6e428618962cbb9c408ac056ccff740e77cc0d956406e7c639ef00afe83a6a544cf676ee544cf53b3535629ed372843b3a8a37d325792b7dc02e2a741579c4991d196ee64b09ea3597257766a099cdd00286014482373", 0xb0}, {&(0x7f0000005d00)="54aa106933d49db41dea54eee99709ff958c21c72ef6aaefc7c2e2d57a19be3fc9351d854a97fd46b28893834a40ac88a5fc4ead0b3f4cf81bd374cb65bc7356fff77bbad3eb7f355515429a60bb3ab1d93382a784f2707788c2114878242ae7d61d50f0037a8f4d6f5cbf2c80a8c7540f7ebf05eb261386f3f9d54d3c9d46a73929e7752effba5f07e9a99a90cfa5c370e21a114809bc936ecff62414a5840209b7f1816083214aa1f2b9", 0xab}, {&(0x7f0000005dc0)="d2e699b6a1adc507a7a3b88568ca4f9580ffc28649a45d0ee08d7fd6c10d5a99c56b388ec9ef73f2f817d589b0ad1e722c53d26ceab265696d4172e52c9c0b9ce3283d275b7cbaba1671067269c556d565df1462", 0x54}], 0x4, &(0x7f0000005e80)=[{0xa8, 0x112, 0x10000, "d85854d9fc504626e0d73226bbe12d791772d791d98fde174c59472bffbcb273e095406befbe86112c126ad8e0b84aa6187a6e4e1fb15c8ea9a280444fe4824351b9f8e493768519f8f1fb2c9d4e90800fc1042ec6c4847426e2cac2312f74f6b846fa953747126d0a7d2a4e3614c0e2302756aabfe673fec268327da2b287ff41a8d58fddb270d015951617416a3d1ada"}, {0xb8, 0x1, 0x8, "3ab784ba09eaf22fb864ee1c7a38b6f0b7a2eebb5fdff92980aaa7a0c7e6e38eeac4f2f38c6511042af6e9d9162ccadae6d0a11aad0a49d5f00f40d12d22fb16151fca35571b850715d743556234a566e40c949b3301efe8ef819e3fd290d5357e1add12e581315dc2be809ff70423bc3ed36b7a7c905cfff91dcbb7b40b24a685d90e3857664e9b1a4481335b49a4ebff08019e5ab4373189fdc0557475ddb00d31520fc11021"}, {0x110, 0x11, 0x81, "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"}, {0x1010, 0xff, 0x7, "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"}, {0xd8, 0x88, 0x1, "d70cc94f8cacc867b644f1059bf542f151bae7e7d8c2a7cc715ec1fe4b78f0267169c37064949a81c80a7c78ba7a8739370e8bc44f81de42e38886f4a76ef6db4c883a6aac233b0bc996914c689abde3b6e35c67980546526935a4079aac3c4117d53919dfbc3bd16b7e7785853b2841aeba18979f06baa83d81d192f6a493fdf766c5409ffc1c32a3e5977c3949da09c048b1ef99bdc173a105b27e516521dd10600f278b65c91e0692480c7dda48b89341d2beae00007f7dce49f8bdd1c516dbdece"}], 0x1358}}, {{&(0x7f0000007200)=@generic={0x29, "443ba487c70a28f89d640a92da824bb6ed5d7c5e51b91f742a66c0b41a0fecde5f97503fb021b48f8c26f96bbc0e375300cfbbc9b990ef2747de384d2f1cf9bac8f65cc75a8f7b4f2b74bdd8d186a3a57306e9be6808795d5207bacf8d51c1107767af3088443dd4a7c02efad9e66aaddb3f7be77f066f2b5d6e51211994"}, 0x80, &(0x7f00000072c0)=[{&(0x7f0000007280)="cfb2af5d6af193d8d6f689", 0xb}], 0x1}}, {{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f0000007300)="e72ed2ae8588697fc876b80612da581722e22a2e9f678ed6bb16e3147c007c78b2e95f2597e6ce3096b23be8e6d33a715b6f2b3df5cc11190d753f", 0x3b}], 0x1, &(0x7f0000007380)=[{0xf8, 0x10b, 0x6, "5678ac53eec73ec0e05f4d2d379fef94f57ceabe4f8371dfd13db814284d40951178a0937a5120863618284f34c16d14562ebb97eae93c632764c31b3691f756d4d9eb97db746882dcd667b25e9a3be7ee8b064c59ad634d6a768a4f941be750fdf083be2c2cf7a1e852e2b103606d02606d704d4e1ed7631047023e3a663a8dacbf8f7f20966fc6a2890009135f4caf3fd03839de4f195af46caa524ae44644c6b07f3685bca75a602a239468edc65bed99461798013b0a33594a1dc8fc25e230c954d54023bff07a7af6e62b7d13eea82d83441b878676c4b067720b4e75916a4eb4"}, {0x68, 0x84, 0x0, "243e2032c4325b74db07936749bf63a2667610fd324ac589bf8a2178a8fcc3d1970b23209890818c08a6fafcb1cbcca4bd252abc362ba4d6e72278997a7b39e6ba44e4280e700758baf01da368bc0ee6b0fab6ee"}, {0xe0, 0x111, 0xfff, "b4e25d77b1e94ba602ffce4bfaddf9fa6b171530a61f471e175c634deaf359988cd9b91614cc628db2246173acd48187d015b23e04f43857761674c81adadcc0851c28eb281de1383f0b992c633e1b18ff3eab468f0fe95b93dea580edd8676081374614817a39c675e3ef39997852b061a78f524a61a0a71451677ef0321ba36ba199e91988bcdeba8112f8344a8338ec8d8b56575d0c88595b2e37f3ab415876fc51d0e635331578685fda8e899503faff14903d93e50bd246f926401fb6ec90544e12198b85adb89238a601"}, {0xb8, 0x105, 0x5, "a36e32d59a643fa188bba03aa7bdb3a356c04648108048abd099f62dcbfc48e162c8e62e13707ad51b5cf0494ad08d46f6650bd98cb3c7963a449839d52305d812e5c3df2d99281599e9ff0d921b656fca90f72da106ff1ca6d822ea31b6a846b3ad395a799bfc0843f5e46be0f99bdf2194da3ed98c35106eb8dcf101d6c0f855a1c2e77093159db554e72c374cdb6996bee0491c0b3d6c8248d135379840a665be17cc421c4a"}], 0x2f8}}, {{0x0, 0x0, &(0x7f0000007780)=[{&(0x7f0000007680)="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", 0xfc}], 0x1, &(0x7f00000077c0)=[{0xe8, 0x10f, 0x3ff, "4bc8d0a30cf1faee26d6f4407c895df0f29f07e576765ad2e85de7ac87da14565d2131e25b6b78eccf3a47343e7348a6765de5d0447c88e331d3ad0c630250d3542a59a8370f77fc4038ae5a6a848d015453ab5c9e9f23cd862a7fa241fd20202b872b8e509cc6c7658a581cea30422fc1ec4f1cf1be8fe13449b705133a20f296cf224a6585e2638f0363828e9889c0ad90e07f07061a43cf97b92d85940502e07e579db3c20d4901138e7a24d09aed8873f9bb7af76116fd9d351911f0c7107ecd188847428320c9e7d3de4c3d0bc63faa"}, {0xc8, 0x10a, 0xfffffffa, "9f768f475d8aeb77a8c3354cbf359da70a6325f808dafc3339c65f8a7821c234322c0bae1b46339ef249ae7b92e39926751fe1c73034b09da8d01c820114cdccb199cba8ce9008bb376fb073aa4458409c78c9aa444e682f37d40eabb083643f7bdfcbee48921c688422eea148a0ef28ae7e03f1b932566bcebf377cb89a5edb99f10fe04da103d53848761b064e1b9c7f5b04a5c753861de2d8216918daf3fd302568ce7cae516c0d797f9f07134103352ca3"}, {0xc8, 0x10b, 0x20, "f3eb803cd22015f8e6f6d2c3b078a46dcb6dd2fea318769657f1ce3c73e60a147cfa1b8aebd47e811646b4426f2821e5a5008d981f38f609869fff418a24354cb11f5a4758ac98028b3a711a74d14800a32937a4d5b0165c511d3aa3ee2d7fc6960dd736e40cc41fb9f2751c4d9309c9de751704f66b6640d55cf34a53466ea6ced059d9207303007f9a8c89c11001ecad22b55f1cbe2133f3de9e6b06e3b827a6cdac8196145c21c0c4315502ccdeb674a451d828f0"}], 0x278}}, {{0x0, 0x0, &(0x7f0000008000)=[{&(0x7f0000007a40)="77c1d31905c780cacbc15c3f4866bce60d70f916e73989e3aee7321879300a31d402b3d5f6b0d6b825d6aaaff195cfa75bb14d196746d69cc5b34cf3cdf5f1aa534c147644530880ce1695f3e099b7f20259c6e73b80edd4907d7cb49809c359ed301ae66aeb8dfd85cea6c7321db933c6cc02f545bf29dc773bf1", 0x7b}, {&(0x7f0000007ac0)="28e88b262e3420c6f3246742825c8e68028e44eea7c3e43adf07d7382b9f09a67e40b22effcd94a92c18222d4ec91e5f663cb67da8a39630fa5fa9ddc73f171b0972ba82ad1ab9a68695d20ef4ad82597dbc322724bae3da969883a86aa75a948ed64e402bb48c23b2fdbca7aa99dbb713eb2a3b8160310af3a5897111905b8624bcce238f13e8a1affff36e23cecf6a12cd0e5b5af98f24a948faff71f9e718823fe7213dc6", 0xa6}, {&(0x7f0000007b80)="32b23fefee", 0x5}, {&(0x7f0000007bc0)="7edc195bf4726f7a81fd743fd9e6c6a47a58df158c944712c5e558d0b577f0e392f3f33b3d24c256f939016c00c1a0d033aa9db7a2812c90cd22328152ece07fde5f3b4bb766c6f033c4d955c3a90a3f224ca1c000266b27f759268c5d7eb925c8f09f68316a4c69af112413a3174032acfac2a59baf6576b128ed301196dc6a2eb9569bca3a67a8d03199c3a5bbec9bda22c191249db2bbe633285fde86cb5d789bdc68521b473fa5cec8187a4c819a08e16773d5da3e21ee441caaf6e1cbae02a89640cedec4c887add303fcb6165a0118a902176d0840d7b24e90cb83d0a371", 0xe1}, {&(0x7f0000007cc0)="6e8900a5a66b5aaff92bc2b566137c0128c9e8fdc9bcfe00f09374a2444fe90eebe87de021f1d472e3ccee54e761954001c11ff011965a95ff9e181ca64736958930e61f3ab51535f018c96c5b53c60c4004a58c21bb9641b4667e87dda3a3b49edc0b103eb4554afb82f71253e1131142673c7f15096f89475878b29bd399bb2746fc07edaba6195a526f6478140416ac8473cd38c6a618f43cce323505c1aae01b9c3a072fa5a1c81a5935585ed43d05b6c8652e9ed760f5c2742062a725b7d6e3c68f322124989f84aeb3e99fc91188180e6ba7e75025a7e34e10dff6892b5810b946f92670bcb49d5f0c", 0xec}, {&(0x7f0000007dc0)="63d5780bddeab4fb9c215b1c52107ec14d98486867eab57a8da7e68c435df3fdf2a6150f9677b55f073152a87fe78d3837e5026080817127a55b84224bf0857b9d9a0e9a7a9dc89c6d4d9adfd97e23e3f5710bb4c47983a7eaf085c2d4eac9d64a7e2ae0e513a9d9e4045a2a967ab6aebf9c65adee87212c8f29cde9be6effe1697c20e13dc27da4449ae46475ee6c3c0884b1e2be7c8a48496f0dfcf30a7ae9264f6e58c2ec45", 0xa7}, {&(0x7f0000007e80)="4a3602586c4f423b6fdb6d073a32a7da940d02dcd3bc632b0cac695d39b0f78ea99a389594aa8ba3cca6fb2a07f49a090002966c036725dd410bbee858ae821759aa76a48807fb7cd582be7dcbfbf43ce716fb0ba19c24dabe876b6ee657815290078ec5b7cc719e3d20db0e8377a0570ef7f774d210e5ea4b044f9b13155813734305df395c500ded54b46440cdda53", 0x90}, {&(0x7f0000007f40)="604f010e1123244ec59d1c1e87273324f387c64a7c5fd6222870cc982363f5e1f22826fa63794c8c77c714736dc1283324c2b645d37fd087506d58d30fc71091aaf6b7d689846376ab85221d239d702e0e580dcc52fa00032f96f0881088384cd783ac3dc9a3a1f454d72048e78829a33a41107257358e9278017b6c7459b691551e799046e0fcfc289d7be60d581beaa680875b3f361dea1eb283ac7a85bbed19a8a5ecf3e04bbc0499903bf382b29d6a", 0xb1}], 0x8, &(0x7f0000008080)=[{0xc0, 0x110, 0x35435f7c, "9eb47fefa3ba8424e3ef310b194b01cc4b7c4077f88e9b13881f9cabc560ed9af4d12766a24e7ae5e36d63cc2e599e9989e6c9b1da3670c0acb5ddc2272da4a94be5681c59fb9cb56574bda2c3cca7e97a591fcb6a1d753559d1bce73394559aeb9cc2873cc1d7230deef440b50660b375bf42cbe13642f155bc59fa05862722b55d5ae215483cb0758925b846f71ee32d9dd9e905e5e8d32b7da245e961b389f6a8dbed759dcccb03"}, {0x90, 0x11, 0xfffffffe, "681b78fcc110cea95c146d118b8e9d381ba23b51e580c79ff0304703de15f6f3cf831e552da4b4f7168ae987ea047b2174df68c2f71d90defaa95a55b02a9ed69ec7464de20048f076bd17542c0efec49c353ee5ea02530b88168fdbebd9235a5caaf5b6cbbe843e0df61fbe307789ece155c74c0a16c936e35af4972598"}, {0x18, 0x118, 0xe699342, "bf6628d46fc3"}, {0xb8, 0x6, 0xfffffffd, "c7bbebdad6c798a9a15bd49ecf6d440e5517a637d804cdb7ac61c476f94c210c89d9e2634a444fc465fcec382ad87199600a471a7d4a584a682f9dffe5c08472c34baf977a88098bc93c1269a7461ff13fc1fe38cb8205f1b3a4d66adde879d37207b20f9d0d986427a118d254df96b5dc98960bdfe28c6f2fd2f6dd81d723565f0d6ebf6c109424f547d7309b27ffda6899596a7b0941735042242525e3f7543dfe7c24"}, {0x50, 0x101, 0xc7d550d7, "caf39f6696c9887293b0fe27c783448c571437b9525f5c099cde35096b31ba1f578547709dd916a028b377a61970aea6d7ff084bf8859b8424fc0399841878"}, {0x18, 0x114, 0x3, "cda01c"}, {0x10, 0x10d, 0xffffff98}, {0x98, 0xff, 0x1000, "dbac75209f9bb9c04ecc1035d2eb8ced53572724639340f334f07c31dd3028bc28312a46d7c461576211e47d8b3ef60d272b56caa48e0b69dadfa4ab332fed7e496c00de1191c079110b2b1cae01dcd6ad9bd86abf78d41595fa4474e7c11b865868571e33085555f8a779cd4dd13848c929d87d04a38c81b14123b6fb1d851d4aad8dcf4e7e55"}], 0x330}}, {{&(0x7f00000083c0)=@pptp={0x18, 0x2, {0x0, @private=0xa010101}}, 0x80, &(0x7f0000008740)=[{&(0x7f0000008440)="08809b8da625ddf8365a42f060776473e58700c18ab664bb602e93661d391afe4d3ae4e2131e62258aa376db741451d02d2b123b62aa9591228640c2ff698864962e7f52b4c322ee17b1d0b448e7f263e6de1b22cd2b93f0dda60abf3d047b24d2e33b9f5f2e857f13089b15c6690c19ba6c3f5dcb304a3aad66fc1ef6a2b6893b8118fab8d991025249874bb0162a8d94c5a3dd84c77f3681a80daa81b91caf6421805133d224c6b97b72ccd88fda1d0acf4c559f1591b74204207bb888377111d1b6e1845eee785d8eb83685808345a082f6a4a1b5603fc2f717a51ba1786729be3d891550cc60d99d3e05a84e5a5d1635156e70955eb28a", 0xf9}, {&(0x7f0000008540)="40e963ec00096e51814ba7e33a112789d2a13885cc5c60324283bd7303153dcf60904a5b50675e2418e9c4d37bcc3f278b1381f22ee862e3bd7cb8bc9005adb74ec55776f6520e09909fa912b6c6fc980d070f518f695b86", 0x58}, {&(0x7f00000085c0)="61b90b50374a127064f797dd43e951702047f2dec4119c6085c0b118440b91e8a5d799500bb39f80ad426ee3e5773cdef111ad6e48167c3e3aae3885b27ed1527a8cb9af6ef524864c916266c073af08f1025afb0fd29903e95b2896d5b25889826c18761e53b33c4f3daa6a0516ede2a2ec15f0ad690be05e967565f7d4b84e6ba93bbee1f3adb1ae8b774657fc03c645", 0x91}, {&(0x7f0000008680)="0db342ccce32ce4d48f2f02f710c0dcc2c83f1ba5a3c27c6d6e881a08ace396b9e2eee843c56c08142671746eb5721d242102b0a8f", 0x35}, {&(0x7f00000086c0)="b5873a2b374051e7751729b923d8550aeba5ca2be78977e9c445d5c00fc17d66b78071ce58fbe354e276645b83fbce01e8a9c1ca1d2ca735762f7a0117d12bf602acc227c7bcfcfbb1aeaf8655ecf85968f94e0dd04fdb58fcfd2c9badbfa5932c636eb673", 0x65}], 0x5, &(0x7f00000087c0)=[{0xa0, 0x10c, 0x9, "0dcd017751706eb19fe0d4682d8a3976a1c0692b5c6df855e7886d2aac8433eb079fe6980d1938144dbdd5cd96c8f60338d89d8b072e3d8760cdf7bb7c07363560279008e933e7501f951ce0ae701ed166baa1b431866ff71e3b45742e55ca1f7c3948edcaf8b6c6cff230f0b31f801b17b7e9ed7ed9a5bc5e0ec529887d65ec7939e28eefb524276660960e0da106a0"}, {0x88, 0x103, 0x1, "ab129aa4066ae879ed2f57f702168f91e3e115de203b722b0485c87c91139f33d744d7ebd74cdf2458c2bc3b94cbda505c8c6920823451a4042e533008186800cd74315d39856a352bddf9cb5b41f80ad7bd4b1c7152be21889c8e02e40f7f1ec996228951a81b2a4678f506c28a777a66"}, {0x90, 0x115, 0xdc, "76c1f0703dc3b3706807027a757c93b80ac54c7f0408ef6d855b27e7d876d12bd575d37e86e6dbd487ebddaf36db13e1dc070d10659f627f721451393d76324a638e5943546560eff023e0475a639f7b937d6acca8daefc87a286d3ca2e8daca50c9b94d598688d2d9a49a2302649d2c59f9ae4b6f948d9352ce1c26f7"}, {0xd0, 0x10e, 0x7ff, "efc139de39f14a057441fc2259f2a109312d373a6465aa45e25ec3b12e5dd1116be3371151f50083cdf96fff0aadd358ed69f3922e5a6a825016a71d0eac87997a3dfc250196403322f8a5cdd9e7e573b0a1767dc46fe385fb1be22dc836c23b7da6aaff865348bad08edf46fcda0ac27773252accd87d27e6fb763502d009fcaf564b2bfdea1af877d8c29b34c660328fcfbf76712d4267901b38775d70e9bb922c77c23173cf57712392241a123e423e5f25feaba033e64db5e6650fe5f2"}, {0x58, 0x116, 0x7, "63c271df9fd790b08d0ca3c85bf4631beb94782c0edacf1a0e0549bc21ef180e9f86e4227d8b0ab142252b30a1248d26f06ac877cbc3f37a5f240f2b65ec3dc623a5a4"}, {0x78, 0x101, 0xde, "40bab52b7824121e43791a02331b2c7a37134e76d1ae79e9c854d1b6eaf7b15e919323f77c6f9a4d92cff8e2475282d1e2e724b4bf154cdd291eb70c7d5959d3a5cd0a4071df52cded9dd0ce74c7867216defcf80be8723566822b737b1866e7eda7d2b732d427e9"}, {0xf0, 0x29, 0x1c, "5585045aa1b4849f5b050382f9444df4f86d4bca68bbadb941cc6e3b7268d88394cfc2a7dc1ac805c516824e753ab9b5ad6bbb5a6c85d71b046e2bab61b3b6cec44acb2cadc4de3c762b5ba4d9b3a186244f07df932b0289378166b9af9bef9c68999336f701e77c1ae7f764eb8d256cc0f60577e76179013e127d2c9b3655092af73dd744b39d9b4275c87b9709780b056b82fabdc1ebd809e13c66d20d62901a409e3b8c7f1c03dcfd6cf533856cd5fea3881d83ec5635531750ab0cdd02b7840fc16969b8c7767f65828996d8f398ba35d43c9e62fdf0fec85ecd15a1f063"}], 0x448}}], 0xa, 0x4) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="fa0100000000000028"], 0x9) [ 741.984278][ T2408] hashlimit_mt_check_common: 20 callbacks suppressed [ 741.984299][ T2408] xt_hashlimit: size too large, truncated to 1048576 [ 742.004651][ T2409] xt_hashlimit: size too large, truncated to 1048576 [ 742.012023][ T2413] device ‘|‚ªu entered promiscuous mode [ 742.038159][ T2414] xt_hashlimit: size too large, truncated to 1048576 [ 742.082297][ T25] audit: type=1804 audit(1634682154.941:713): pid=2411 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/576/cgroup.controllers" dev="sda1" ino=14948 res=1 errno=0 [ 742.112441][ T2411] __nla_validate_parse: 24 callbacks suppressed [ 742.112459][ T2411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. 22:22:35 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x4], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 742.175214][ T2416] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:35 executing program 3: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [0x0, 0x0, 0x0, 0xffffff80], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 742.219679][ T2416] device ‘|‚ªu left promiscuous mode [ 742.258202][ T2416] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 742.317920][ T2413] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 742.340812][ T2450] xt_hashlimit: size too large, truncated to 1048576 [ 742.349747][ T2413] device ‘|‚ªu entered promiscuous mode [ 742.354363][ T2450] hashlimit_mt_check_common: 22 callbacks suppressed [ 742.354381][ T2450] xt_hashlimit: overflow, try lower: 0/0 [ 742.404184][ T2452] xt_hashlimit: size too large, truncated to 1048576 [ 742.410035][ T2453] xt_hashlimit: size too large, truncated to 1048576 [ 742.431335][ T2452] xt_hashlimit: overflow, try lower: 0/0 [ 742.451185][ T2453] xt_hashlimit: overflow, try lower: 0/0 22:22:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) 22:22:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f8b0bff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:35 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @isdn={0x22, 0x80, 0x7f, 0x0, 0x6}, @l2={0x1f, 0xfffd, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fff, 0x1}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xffff, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)='ipvlan1\x00', 0x3, 0x1ff, 0x4}) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) socket(0xb, 0x2, 0x9) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) recvmmsg$unix(r2, &(0x7f0000004240)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/13, 0xd}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000280)=""/196, 0xc4}, {&(0x7f0000000380)}], 0x4, &(0x7f0000000440)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}}, {{&(0x7f00000004c0), 0x6e, &(0x7f0000002840)=[{&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/226, 0xe2}, {&(0x7f0000001640)=""/101, 0x65}, {&(0x7f00000016c0)=""/132, 0x84}, {&(0x7f0000001780)=""/13, 0xd}, {&(0x7f00000017c0)=""/128, 0x80}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x7, &(0x7f00000028c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002900)=@abs, 0x6e, &(0x7f0000003c00)=[{&(0x7f0000002980)=""/52, 0x34}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/134, 0x86}, {&(0x7f0000003a80)=""/245, 0xf5}, {&(0x7f0000003b80)=""/74, 0x4a}], 0x5, &(0x7f0000003c80)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000003cc0), 0x6e, &(0x7f0000004140)=[{&(0x7f0000003d40)=""/138, 0x8a}, {&(0x7f0000003e00)=""/96, 0x60}, {&(0x7f0000003e80)=""/135, 0x87}, {&(0x7f0000003f40)=""/165, 0xa5}, {&(0x7f0000004000)=""/118, 0x76}, {&(0x7f0000004080)=""/130, 0x82}], 0x6, &(0x7f00000041c0)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="185f99437c1f5161000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x50}}], 0x4, 0x100, 0x0) r6 = accept(r4, &(0x7f0000005640)=@nfc_llcp, &(0x7f00000056c0)=0x80) bind$bt_hci(r6, &(0x7f0000005700)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bind$bt_hci(r5, &(0x7f0000004340)={0x1f, 0xffffffffffffffff}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:22:35 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x5], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0007ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 742.671559][ T2468] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 742.701571][ T2470] xt_hashlimit: size too large, truncated to 1048576 [ 742.721529][ T2468] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 742.729437][ T2470] xt_hashlimit: overflow, try lower: 0/0 [ 742.753862][ T2477] xt_hashlimit: size too large, truncated to 1048576 [ 742.768481][ T2468] device ‘|‚ªu left promiscuous mode [ 742.774101][ T2477] xt_hashlimit: overflow, try lower: 0/0 [ 742.803633][ T2468] net_ratelimit: 3 callbacks suppressed [ 742.803654][ T2468] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 742.865178][ T25] audit: type=1804 audit(1634682155.711:714): pid=2482 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/577/cgroup.controllers" dev="sda1" ino=14959 res=1 errno=0 22:22:35 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x2e01) 22:22:35 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000040}, 0xc, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="680088192d076c21999e7000fbdbdf25000000000f656111f7ab79c4837b979640dc384772c03c70e2442e04509ff6ad7978b41d7107001a0934960a43c3c78c322bd902ed55784945d7b6045238a8779a3845a26db16d0cdcc180c39edba2ee88f42a21e1f59d4cf751b209a96d89d4c11d6a86c7d39e3085f473de9879f5e75606938544e4767b", @ANYRES32=0x0, @ANYBLOB="ffff00000d000f000b000f00060005000404000008000d0080000000340008801c0001002040ff0709000000000000003f000000040000000800000014000200030000080300070005000a3c00080008"], 0x68}, 0x1, 0x0, 0x0, 0x11}, 0x800) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r4, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) r5 = getpid() syz_open_procfs$namespace(r5, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000140)=0x0) r7 = getpid() syz_open_procfs$namespace(r7, &(0x7f0000000080)) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) sendmsg$nl_route(r4, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@RTM_GETNSID={0x44, 0x5a, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, r5}, @NETNSA_PID={0x8, 0x2, r6}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_NSID={0x8, 0x1, 0x1}, @NETNSA_PID={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x840) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r3, 0x8008f513, &(0x7f00000000c0)) 22:22:35 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x6], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 742.914551][ T2476] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 742.947741][ T2476] device ‘|‚ªu entered promiscuous mode [ 743.015452][ T2481] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 743.045370][ T2481] device ‘|‚ªu left promiscuous mode [ 743.071953][ T2487] xt_hashlimit: size too large, truncated to 1048576 [ 743.083876][ T2481] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 743.091786][ T2487] xt_hashlimit: overflow, try lower: 0/0 [ 743.138953][ T2491] xt_hashlimit: size too large, truncated to 1048576 [ 743.154019][ T2491] xt_hashlimit: overflow, try lower: 0/0 [ 743.188321][ T2468] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:36 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x7], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 743.230105][ T2468] device ‘|‚ªu entered promiscuous mode 22:22:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r1, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x2, 0x4) bind$bt_hci(r1, &(0x7f0000000100), 0x6) r2 = socket(0x11, 0x800000003, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f00000000c0)={0x100, [0x1000, 0x100], 0x5}, 0x10) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r5, &(0x7f0000000000)=0x2, 0x12) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x7c, 0x2, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFACCT_FILTER={0x54, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x77}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xd59}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x8}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3ff}]}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x40800) 22:22:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r1, &(0x7f0000000000)=0x2, 0x12) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x1000, @mcast2, 0xffffffff}}, 0x0, 0x0, 0x28, 0x0, "d37da202741a7cc643638b46e332add41f3dddeac3e7bcd81f59810b34d68326cd2fbb6075b83de06f1468e9e808eac3bdec27bcaaffec2ae55a6a44e68a97e29779e47991b5749ecd70cfb2c6bde41c"}, 0xd8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000180)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000220000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000008f0000000000000000000000000000000000000000000000000000000000000060c9b3bf1b897229896348db09ae0000000000fcffffff000000000000000000400000000000001b000000000000000000000000000000000000000000000000000000feffffff0000000000001dafdff26eff8cb127901b653674c6a117663347935753822fda318608e8b2bbe3f188bf8848d0d5e2e60780ccd96456e5df8a9a11943e962de8e2daf1d65ab6cbc55ec97996a0c849"]}, 0x15f) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0)=0x1, 0x4) [ 743.301193][ T2483] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 743.345512][ T2483] device ‘|‚ªu left promiscuous mode [ 743.349996][ T2497] xt_hashlimit: overflow, try lower: 0/0 [ 743.373924][ T2498] xt_hashlimit: overflow, try lower: 0/0 22:22:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x400, 0x39}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x86e43e60795187b4}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000502) 22:22:36 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0xa], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 743.390517][ T2483] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 743.552689][ T2515] xt_hashlimit: overflow, try lower: 0/0 22:22:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f900bff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:36 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0xd], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 743.792908][ T25] audit: type=1804 audit(1634682156.641:715): pid=2524 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/578/cgroup.controllers" dev="sda1" ino=14880 res=1 errno=0 [ 743.883406][ T2534] device ‘|‚ªu entered promiscuous mode 22:22:36 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x24], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:36 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) sendfile(r1, 0xffffffffffffffff, 0x0, 0x5) r2 = socket(0x11, 0x800000003, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r3, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES16=r2], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) mmap(&(0x7f0000019000/0x4000)=nil, 0x4000, 0x4, 0x4010, r3, 0xd0a74000) 22:22:36 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x3000) 22:22:36 executing program 3: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r1, &(0x7f0000000000)=0x2, 0x12) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x1000, @mcast2, 0xffffffff}}, 0x0, 0x0, 0x28, 0x0, "d37da202741a7cc643638b46e332add41f3dddeac3e7bcd81f59810b34d68326cd2fbb6075b83de06f1468e9e808eac3bdec27bcaaffec2ae55a6a44e68a97e29779e47991b5749ecd70cfb2c6bde41c"}, 0xd8) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) getsockopt$IP_SET_OP_VERSION(r2, 0x1, 0x53, &(0x7f0000000000), &(0x7f0000000180)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0000220000000000000000000000000000000000000000000000000000000000000000000000feffffff000000000000008f0000000000000000000000000000000000000000000000000000000000000060c9b3bf1b897229896348db09ae0000000000fcffffff000000000000000000400000000000001b000000000000000000000000000000000000000000000000000000feffffff0000000000001dafdff26eff8cb127901b653674c6a117663347935753822fda318608e8b2bbe3f188bf8848d0d5e2e60780ccd96456e5df8a9a11943e962de8e2daf1d65ab6cbc55ec97996a0c849"]}, 0x15f) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0)=0x1, 0x4) [ 743.995228][ T2536] device ‘|‚ªu left promiscuous mode [ 744.019943][ T2536] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 744.109458][ T2534] device ‘|‚ªu entered promiscuous mode [ 744.149762][ T2536] device ‘|‚ªu left promiscuous mode [ 744.158165][ T2536] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:37 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x44], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00000004e400040000000000000000000000000500010007000000"], 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) 22:22:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f910bff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:37 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) socket(0x11, 0x800000003, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES64=r2], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="730000000000000002"], 0x9) r3 = socket$qrtr(0x2a, 0x2, 0x0) splice(r0, &(0x7f00000000c0)=0x4, r3, &(0x7f0000000100)=0x6, 0x8, 0x5) [ 744.544436][ T2573] device ‘|‚ªu entered promiscuous mode [ 744.627883][ T25] audit: type=1804 audit(1634682157.482:716): pid=2574 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/579/cgroup.controllers" dev="sda1" ino=13869 res=1 errno=0 [ 744.659869][ T2578] device ‘|‚ªu left promiscuous mode 22:22:37 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x48], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 744.678094][ T2578] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 744.746750][ T2573] device ‘|‚ªu entered promiscuous mode [ 744.793481][ T2578] device ‘|‚ªu left promiscuous mode [ 744.804919][ T2578] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c00000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e00010c0002800500010000000000240002801400018008000100e000000108000200ac1e00010c00028005000100000000000800074000000000080003400000000e"], 0x6c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r3, 0x8912, 0x400308) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r2, 0x0, 0x100000314) 22:22:37 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x4c], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f000cff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:37 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x580, 0x2f0, 0x0, 0x2f0, 0x3e0, 0x1c8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast1, @loopback, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x4, 0x4, 0x1}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [0xff000000], [], 'bond0\x00', 'veth0_to_hsr\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [0xffffffff], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) syz_emit_ethernet(0x1ab, &(0x7f0000000440)={@remote, @empty, @val={@void, {0x8100, 0x4, 0x1, 0x2}}, {@mpls_uc={0x8847, {[{0x3}], @ipv6=@dccp_packet={0x0, 0x6, "473c7f", 0x16d, 0x21, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[@routing={0x3b, 0x2, 0x0, 0x6, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3e}]}, @dstopts={0x5c, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x7}]}, @fragment={0x5e, 0x0, 0xfe, 0x0, 0x0, 0x9, 0x68}, @routing={0x67, 0x2, 0x0, 0x7f, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0x3a, 0x6, '\x00', [@jumbo={0xc2, 0x4, 0x20}, @hao={0xc9, 0x10, @remote}, @ra={0x5, 0x2, 0x8000}, @pad1, @hao={0xc9, 0x10, @empty}]}, @routing={0x2c, 0xa, 0x2, 0x8, 0x0, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @srh={0x9f, 0x4, 0x4, 0x2, 0xb0, 0x8, 0x2, [@dev={0xfe, 0x80, '\x00', 0x22}, @mcast1]}, @dstopts={0x2, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x4f}, @generic={0x59, 0x23, "1ccf237b45fcd9d7e85336bf925d43e219db024f26b1c95dc8832fc9fd2b5e3c4d8c19"}, @jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0x8}, @pad1]}], {{0x4e22, 0x4e22, 0x4, 0x1, 0xc, 0x0, 0x0, 0x3, 0x3, "628f6e", 0x81, "73fdb4"}, "8aaae4fe7c2c50dd38469216b099a5139c60cb043a"}}}}}}}, &(0x7f0000000200)={0x0, 0x2, [0x6e6, 0xb0, 0x53b, 0x26a]}) write$binfmt_script(r4, &(0x7f00000000c0)={'#! ', './file0', [{0x20, 'cpuacct.usage_percpu_sys\x00'}], 0xa, "33dd16d4ee0d5082fdd81444f0640f4816c74c63033c2ed95ae2790c395c3566e101a3c66ff0d9e3e306158c0499f20f50e16c968d55b0e108671a342388eca18a5d063ec03b0d27c0216b3e504321d12e9857cee717ba187de43fa6ff39fe58fa4173760b3c96cfc8d71bc19b16e98279e43d590587030d4b723b4bd78666ffe102927c17b3e0790a67b20ea8126419175f57b0645ac7174e8f1000de18"}, 0xc3) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000180)=ANY=[@ANYBLOB="48040000", @ANYRES16=r8, @ANYBLOB="892200000000000004003b1d210008000300", @ANYRES32=r7, @ANYBLOB="2c0433005000de295bbacba512e60802110000015050505050504dbb42b66359e22044b8219d85a45a60"], 0x448}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="73797a317a7925e629"], 0x9) socket$nl_generic(0x10, 0x3, 0x10) 22:22:37 executing program 4: setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)="096b4ed6ae3df514a2216b617ed521d1", 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) write$binfmt_misc(r1, &(0x7f0000000140)={'syz1', "70ba7500a32a3f2a1cfa0b9bfbbc92d8e569c325194f1b223f7d85e584872160cb4f42394e602aed1b9e99e2882e3f269752ce2970f097df5daf7ddf5e7ee5d772e936237a9310302f9170c784b33d4bf1ce359ed71c88d0749b8a8345731adf1bb303eeef675c20ef24421f940527a05e7238b41b0a10950932fac7492a1a745260344ff3d6756a760fa37c4987c5bf1ed8c5b0d5a21c35391ed914da0b28128c82eb4f79579df64800591e7e35faeb0ee3300fb1f4579f366d0a7948da8a4ec18ceeef28834b2b87e02a2f4970079aa21cb4d056288ad69eb9a920a3480a9e79c4b2bd4e8cebd22751"}, 0xee) 22:22:37 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x3802) [ 745.180926][ T2595] device ‘|‚ªu entered promiscuous mode 22:22:38 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x4f], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 745.247262][ T2601] device ‘|‚ªu left promiscuous mode [ 745.252810][ T25] audit: type=1804 audit(1634682158.102:717): pid=2592 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir001381051/syzkaller.SlIH8Y/506/cgroup.controllers" dev="sda1" ino=14875 res=1 errno=0 [ 745.302893][ T2601] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. [ 745.321899][ T2598] Cannot find set identified by id 4 to match [ 745.442417][ T2595] device ‘|‚ªu entered promiscuous mode 22:22:38 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x50], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 745.478474][ T25] audit: type=1804 audit(1634682158.332:718): pid=2606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/580/cgroup.controllers" dev="sda1" ino=15025 res=1 errno=0 22:22:38 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f00000000c0)={0x1, @exit_sniff_mode={{0x804, 0x2}, {0xc8}}}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) 22:22:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f000eff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 745.597362][ T25] audit: type=1804 audit(1634682158.442:719): pid=2623 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/580/cgroup.controllers" dev="sda1" ino=15025 res=1 errno=0 [ 745.669746][ T25] audit: type=1804 audit(1634682158.462:720): pid=2606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/580/cgroup.controllers" dev="sda1" ino=15025 res=1 errno=0 22:22:38 executing program 3: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x48], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:38 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x60], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:38 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) write$binfmt_misc(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x1004) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) r4 = accept4$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000280)=0xfffffffffffffe7a, 0x80000) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x2f, 0xca, 0x20, 0x80000001, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000, 0x700, 0x7, 0x1}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r6, &(0x7f0000000000)=0x2, 0x12) setsockopt$bt_hci_HCI_FILTER(r6, 0x0, 0x2, &(0x7f0000000200)={0x81, [0x6, 0xdc9b], 0x3}, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 745.863675][ T2634] device ‘|‚ªu left promiscuous mode [ 745.898754][ T2634] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x5, 0x0, 0x0, {0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xe4, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffc}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x3}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x200000b0}, 0x8) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000502) [ 745.974617][ T2634] device ‘|‚ªu entered promiscuous mode [ 746.036394][ T2638] device ‘|‚ªu left promiscuous mode [ 746.043614][ T2638] A link change request failed with some changes committed already. Interface ‘|‚ªu may have been left with an inconsistent configuration, please check. 22:22:38 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x68], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:39 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) r2 = accept$inet(r1, &(0x7f00000003c0)={0x2, 0x0, @loopback}, &(0x7f0000000400)=0x10) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000440), &(0x7f0000000540)=0x40) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r1, &(0x7f0000000000)=0x2, 0x12) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000580)={r1}, 0x8) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, 0x0, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}]}, 0x34}}, 0x40) ioctl$sock_bt_hci(r1, 0x800448d3, &(0x7f0000000080)="2ee5d540a399b907527bc2bfff11717eeb07f260062602d26209374f71c1ef708e77514a1a4723cb3e20c0c7cdb703b2d0b3af53535903fade3e507ad9b78b6dd22b882b79b1faab93dd0e6048cb42b3a3dab61c010b79ba2413f627261fc45e31f567c8a4429ea3aced04ddc26994d4b8f3a776dd7bd796201c92af701751fe83a85bfa6efe8885ada47136a9410a496b6ea3cceb4b6fed72097539df4a77a4492ddf42241ebf6302a5c75044e855ce2e03a7af123e1e68709669") ioctl$sock_bt_hci(r0, 0x800448d5, &(0x7f0000000140)="bcdec7cd783b8b4f695c74cfbf2b58c294035751e4c23319898826af3d3144d71e7763394d2624a65f53245514b4ff0b372f4db08f30c6ff00000000000000ea5db98bd2f6a3c88aba9ea3cb2fa935170c2ee48c866f4208a78ee7972c2e7f216069ba85758a63735502d083e65555ddfc55e54ec76d74e299b752c1f4e1dda1b65e2d9a8839c99e7a4a03940404f4444b7f756661efd2") getpeername(r0, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000500)=0x80) ioctl$sock_bt_hci(r4, 0x3f, &(0x7f0000000200)="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") r5 = socket(0x1, 0x803, 0x0) connect$packet(r5, &(0x7f0000000240)={0x11, 0x15, 0x0, 0x1, 0x40, 0x6, @broadcast}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000340)={@remote, 0x5}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42002}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) recvmmsg$unix(r4, &(0x7f000000c9c0)=[{{&(0x7f0000007d40)=@abs, 0x6e, &(0x7f000000a140)=[{&(0x7f0000007dc0)=""/11, 0xb}, {&(0x7f0000007e00)=""/209, 0xd1}, {&(0x7f0000007f00)=""/117, 0x75}, {&(0x7f0000007f80)=""/75, 0x4b}, {&(0x7f0000008000)=""/4096, 0x1000}, {&(0x7f0000009000)=""/120, 0x78}, {&(0x7f0000009080)=""/171, 0xab}, {&(0x7f0000009140)=""/4096, 0x1000}], 0x8, &(0x7f000000a1c0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}}, {{&(0x7f000000a280), 0x6e, &(0x7f000000c6c0)=[{&(0x7f000000a300)=""/137, 0x89}, {&(0x7f000000a3c0)=""/163, 0xa3}, {&(0x7f000000a480)=""/255, 0xff}, {&(0x7f000000a580)=""/173, 0xad}, {&(0x7f000000a640)=""/116, 0x74}, {&(0x7f000000a6c0)=""/4096, 0x1000}, {&(0x7f000000b6c0)=""/4096, 0x1000}], 0x7, &(0x7f000000c740)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}, {{&(0x7f000000c880), 0x6e, &(0x7f000000c900), 0x0, &(0x7f000000c940)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x3, 0x40010023, &(0x7f000000ca80)={0x77359400}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000000cc80)={&(0x7f0000007d00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000cc40)={&(0x7f000000cac0)=@migrate={0x180, 0x21, 0x129, 0x70bd2d, 0x25dfdbfd, {{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x693, 0x4e21, 0x3, 0x2, 0xa0, 0x20, 0x87, 0x0, r7}, 0x6e6bbc}, [@tfcpad={0x8, 0x16, 0x1}, @tmpl={0x104, 0x5, [{{@in6=@loopback, 0x4d3, 0x7980bb87c0f2bb71}, 0x2, @in=@loopback, 0x34ff, 0x1, 0x0, 0x7, 0x40, 0x6, 0x7ff}, {{@in=@private=0xa010101, 0x4d6, 0x2b}, 0xa, @in6=@loopback, 0x34ff, 0x0, 0x3, 0x6, 0xffff3c2d, 0x80000001, 0x7}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x2b}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3506, 0x5, 0x3, 0x8, 0x2, 0x6c3, 0xfffffff7}, {{@in=@empty, 0x4d4, 0x32}, 0x2, @in6=@remote, 0x3507, 0x2, 0x2, 0x6, 0x400, 0x8, 0x99}]}, @coaddr={0x14, 0xe, @in=@local}, @XFRMA_IF_ID={0x8}, @XFRMA_IF_ID={0x8}]}, 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 22:22:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f000fff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 746.167385][ T25] audit: type=1804 audit(1634682159.022:721): pid=2644 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/581/cgroup.controllers" dev="sda1" ino=14993 res=1 errno=0 22:22:39 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x3f00) [ 746.427456][ T2659] device ‘|‚ªu entered promiscuous mode 22:22:39 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x6c], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 746.499095][ T2662] device ‘|‚ªu left promiscuous mode [ 746.582357][ T2659] device ‘|‚ªu entered promiscuous mode 22:22:39 executing program 3: sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x64}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8558, 0x57}}}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x8850}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x4c, 0x66, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0xc}, {0x6, 0xd}}, [{0x8, 0xb, 0x400}, {0x8, 0xb, 0x1000}, {0x8}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xa8b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x13c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r1}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4080}, 0x2404c080) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x0, @bearer=@l2={'eth', 0x3a, 'veth1\x00'}}}}, ["", ""]}, 0x30}}, 0x24000) r5 = openat$cgroup_ro(r1, &(0x7f0000000840)='cpuset.memory_pressure\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x58, 0x1, 0x4, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFULA_CFG_MODE={0xa, 0x2, {0x927, 0x2}}, @NFULA_CFG_MODE={0xa, 0x2, {0x7f}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x5}, @NFULA_CFG_MODE={0xa, 0x2, {0x9}}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xb0b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040}, 0x4000001) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x24, r6, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x13b}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4804) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000ac0)={r1}, 0x8) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), r7) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x34, r9, 0x300, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x2}], @NL80211_ATTR_USE_RRM={0x4}]}, 0x34}}, 0x20000840) sendfile(r2, r5, &(0x7f0000000c40)=0x200, 0x5) recvmmsg(r2, &(0x7f0000002800)=[{{&(0x7f0000000c80)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000dc0)=[{&(0x7f0000000d00)=""/161, 0xa1}], 0x1, &(0x7f0000000e00)=""/73, 0x49}, 0x9}, {{&(0x7f0000000e80)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000f00)=""/105, 0x69}, {&(0x7f0000000f80)=""/255, 0xff}, {&(0x7f0000001080)=""/9, 0x9}], 0x3, &(0x7f0000001100)=""/194, 0xc2}, 0xffffffd4}, {{&(0x7f0000001200)=@can, 0x80, &(0x7f0000002680)=[{&(0x7f0000001280)=""/54, 0x36}, {&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/146, 0x92}, {&(0x7f0000002380)=""/218, 0xda}, {&(0x7f0000002480)=""/157, 0x9d}, {&(0x7f0000002540)=""/141, 0x8d}, {&(0x7f0000002600)=""/87, 0x57}], 0x7, &(0x7f0000002700)=""/251, 0xfb}, 0x7}], 0x3, 0x12100, &(0x7f00000028c0)={0x77359400}) [ 746.623942][ T2662] device ‘|‚ªu left promiscuous mode 22:22:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0316ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:39 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000502) 22:22:39 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x74], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:39 executing program 3: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="b702000002005532bfa300000000000007030000fdfdfff67a40e105ee6435de2324dbac0af0ffd8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000000000006a0a00fe00000000850000000a000000b70000000000000095000020000000009c050000002c9fbc429adad5ff4c6f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) unshare(0x40000000) unshare(0x4060040) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r2 = socket(0x10, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x4e20, 0x6, @loopback, 0x3}, 0x1c) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f000000000000f10febca0546", @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d00000010010200ca0000"], 0x140}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000040)="6c24e5c9e9ccb47e5dc6c1f30a21", 0xe, 0x20000800, &(0x7f0000000280)={0xa, 0x4e21, 0x418a, @local}, 0x1c) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e24, 0x7, @remote, 0x101}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x406f40a, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/288], 0x0) 22:22:39 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)=""/202, &(0x7f00000001c0)=0xca) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) r4 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x1eb73000) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000200)) [ 746.898166][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.910881][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.970325][ T25] audit: type=1804 audit(1634682159.822:722): pid=2687 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/582/cgroup.controllers" dev="sda1" ino=15057 res=1 errno=0 22:22:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f0318ff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) 22:22:39 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x7a], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 747.277012][ T2717] hashlimit_mt_check_common: 32 callbacks suppressed [ 747.277032][ T2717] xt_hashlimit: size too large, truncated to 1048576 [ 747.304069][ T2709] __nla_validate_parse: 25 callbacks suppressed [ 747.304087][ T2709] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. 22:22:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000280)={0x57ff, 0x0, 0x0, 0x24ba1dc0, 0x47ff}) openat$cgroup_ro(r1, &(0x7f0000000480)='memory.swap.current\x00', 0x26e1, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0x0, 0x6b9b19fd8a88d700}, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r2, &(0x7f0000000000)=0x2, 0x12) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x2, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket(0x11, 0x800000003, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r4, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES16=r3], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r4, 0x0) write$binfmt_misc(r0, &(0x7f0000000000)={'syz1', "7a7925e639"}, 0x9) [ 747.359630][ T2724] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. 22:22:40 executing program 1: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000507000009000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r5, @ANYBLOB="fffffffd0000000008001c00ef"], 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x4000) [ 747.404542][ T2717] hashlimit_mt_check_common: 29 callbacks suppressed [ 747.404560][ T2717] xt_hashlimit: overflow, try lower: 0/0 [ 747.418512][ T2724] device ‘|‚ªu entered promiscuous mode [ 747.493684][ T2732] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 747.521040][ T2732] device ‘|‚ªu left promiscuous mode 22:22:40 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0x8f], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) [ 747.586644][ T2724] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 747.596076][ T2724] device ‘|‚ªu entered promiscuous mode [ 747.637882][ T2732] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 747.655816][ T2732] device ‘|‚ªu left promiscuous mode [ 747.700235][ T2751] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 22:22:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="3900000013001104680907000000000f001fff3f04000000290a001700000000040037000a00030014917c82aa75b9a64411f6a4ee1ee438d2", 0x39}], 0x1) [ 747.805827][ T2763] xt_hashlimit: size too large, truncated to 1048576 [ 747.827114][ T2763] xt_hashlimit: overflow, try lower: 0/0 22:22:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'xfrm0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000014c0)={0x0, ""/256, 0x0, 0x0}) r3 = socket(0xa, 0x1, 0x0) close(r3) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x14, &(0x7f0000000100)={r5}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000023c0)={r5, 0x1000, "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"}, &(0x7f0000000000)=0x1008) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000021c0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000048280)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {r1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r2}], 0xaf, "3b361283dd659a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f00000002c0)={0x0, r1, "3580912b4aba0cd60c8e1e402f77ab3b7f487c591b70e5aa323d4e00f3dc9941982ad367a27f65a81ba851da8b91ac74b5c1bdaf36fc3963897f741cee576b0ddfc852d52d9db2d379cb22ada4df4cc0c971d67bdd19a6cdfa8d6811d1c01219721276bbd1db041cf31cb2c7b28c357036d4632a73528e97ed801444b2a92d2d61b0398b196f418b9d0656548ab76bcb440e4dd4abadc9486d0cd5d03734d8f12f925836e247ab2d8fab45cc7301360aadce6fd8cd564e7bcd0289b37fe2027c9a289e374b98c566086d3be56fad5d2cae0b4d2d70039f833993f0549e3696b5e7ff431261bba256992419271da20faf417ae731f985bcd5fdb04a56aaf1045b", "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"}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) write$binfmt_script(r7, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r9, r8, 0x0, 0x100000502) [ 747.868410][ T2777] xt_hashlimit: size too large, truncated to 1048576 [ 747.916859][ T2777] xt_hashlimit: overflow, try lower: 0/0 [ 747.965964][ T2697] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. 22:22:40 executing program 5: socket$inet6(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x2a, 0x800, 0x0) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040040) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x64, 0x6, 0x5b0, 0x320, 0x128, 0x1f8, 0x128, 0x320, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @remote, [], [0xb0], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bond_slave_0\x00', {0x0, 0x0, 0x0, 0x80000001, 0x0, 0x403, 0x9}}}]}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv6=@dev}}}, {{@ipv6={@loopback, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x610) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x64, 0x6, 0x558, 0x410, 0x128, 0x320, 0x320, 0x128, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private0, [], [], 'veth1_virt_wifi\x00', 'sit0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@ipv6={@dev, @local, [], [], 'bond0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @common=@mh={{0x28}, {"38b7"}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4=@private}}}, {{@ipv6={@mcast2, @remote, [], [], 'veth1_to_bridge\x00', 'ip6gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f513, 0x0) 22:22:40 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x800000003, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_cpus\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x61bd, 0x1c2dc0000}) write$cgroup_int(r4, &(0x7f0000000000)=0x2, 0x12) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x80, 0x8, 0x2, 0x80000000, {{0x17, 0x4, 0x3, 0x9, 0x5c, 0x66, 0x0, 0x5, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp_addr={0x44, 0x44, 0xf7, 0x1, 0x7, [{@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@empty, 0xce}, {@remote, 0x7}, {@multicast1, 0x7}, {@multicast2, 0xf8000000}, {@loopback, 0x2}, {@rand_addr=0x64010102, 0x7}]}]}}}}}) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a317a7925e63940a70009c68bff92282a2bcf9ac0ba0291e4c5ee338b6a22040786a77d2fff60fec8d1f4f52b1da301c0b1761b42202b13341f2310addec73f0fd52f02d80dd95adf39b3f91289924efd622acca622fc26a517e9916ce319e325ace2502766f7b86c71327e321ec48fa226b32c53e8e83f75d7768628b747d14c79d1484c80905c98970f4370ab3331669114821a"], 0x9) [ 748.016073][ T2785] xt_hashlimit: size too large, truncated to 1048576 [ 748.034001][ T2785] xt_hashlimit: overflow, try lower: 0/0 [ 748.176123][ T25] audit: type=1804 audit(1634682161.022:723): pid=2789 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir709807552/syzkaller.jx6xQ6/583/cgroup.controllers" dev="sda1" ino=13900 res=1 errno=0 [ 748.247750][ T2794] xt_hashlimit: size too large, truncated to 1048576 [ 748.284775][ T2794] xt_hashlimit: overflow, try lower: 0/0 [ 748.329959][ T2797] xt_hashlimit: size too large, truncated to 1048576 [ 748.346894][ T2797] xt_hashlimit: overflow, try lower: 0/0 22:22:41 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) r1 = socket(0x11, 0x5, 0x80005) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(r2, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES16=r1], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73797a317a7925e639a11194da1098dbbb11599d71c5acf3e767bd16084518123eb5e42f41b103eba78c42a4d2071a843e47c68d85473926f264ba479d61ba456e024e03e1e2323f448a89"], 0x9) [ 748.551709][ T2785] xt_hashlimit: size too large, truncated to 1048576 [ 748.562901][ T2785] xt_hashlimit: overflow, try lower: 0/0 [ 808.335376][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.341685][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 [ 869.772820][ T1357] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.779181][ T1357] ieee802154 phy1 wpan1: encryption failed: -22 [ 908.809130][ T26] INFO: task kworker/1:16:26850 blocked for more than 143 seconds. [ 908.817060][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 908.825404][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 908.843057][ T26] task:kworker/1:16 state:D stack:27760 pid:26850 ppid: 2 flags:0x00004000 [ 908.858340][ T26] Workqueue: ipv6_addrconf addrconf_dad_work [ 908.872431][ T26] Call Trace: [ 908.875774][ T26] __schedule+0xb44/0x5960 [ 908.891032][ T26] ? find_held_lock+0x2d/0x110 [ 908.895849][ T26] ? wq_worker_sleeping+0x18e/0x1e0 [ 908.910057][ T26] ? mark_lock+0x17a0/0x17b0 [ 908.914770][ T26] ? io_schedule_timeout+0x140/0x140 [ 908.932704][ T26] ? _raw_spin_unlock_irq+0x1f/0x40 [ 908.937973][ T26] ? lockdep_hardirqs_on+0x79/0x100 [ 908.949359][ T26] schedule+0xd3/0x270 [ 908.953479][ T26] schedule_preempt_disabled+0xf/0x20 [ 908.968665][ T26] __mutex_lock+0xa34/0x12f0 [ 908.973694][ T26] ? addrconf_dad_work+0xa3/0x1340 [ 908.982816][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 908.988400][ T26] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 908.996640][ T26] addrconf_dad_work+0xa3/0x1340 [ 909.002766][ T26] ? addrconf_dad_completed+0xd60/0xd60 [ 909.008437][ T26] process_one_work+0x9bf/0x16b0 [ 909.014114][ T26] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 909.020062][ T26] ? rwlock_bug.part.0+0x90/0x90 [ 909.025076][ T26] ? _raw_spin_lock_irq+0x41/0x50 [ 909.030638][ T26] worker_thread+0x658/0x11f0 [ 909.035338][ T26] ? process_one_work+0x16b0/0x16b0 [ 909.040962][ T26] kthread+0x3e5/0x4d0 [ 909.045160][ T26] ? set_kthread_struct+0x130/0x130 [ 909.051175][ T26] ret_from_fork+0x1f/0x30 [ 909.055700][ T26] INFO: task syz-executor.3:2699 blocked for more than 143 seconds. [ 909.064072][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 909.070402][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 909.079718][ T26] task:syz-executor.3 state:D stack:26328 pid: 2699 ppid: 6584 flags:0x00004004 [ 909.093190][ T26] Call Trace: [ 909.096552][ T26] __schedule+0xb44/0x5960 [ 909.101355][ T26] ? find_held_lock+0x2d/0x110 [ 909.106153][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 909.111559][ T26] ? io_schedule_timeout+0x140/0x140 [ 909.116877][ T26] schedule+0xd3/0x270 [ 909.121480][ T26] schedule_preempt_disabled+0xf/0x20 [ 909.126877][ T26] __mutex_lock+0xa34/0x12f0 [ 909.132043][ T26] ? register_nexthop_notifier+0x17/0x70 [ 909.137771][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 909.143795][ T26] ? lockdep_hardirqs_on+0x79/0x100 [ 909.149840][ T26] ? asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 909.156022][ T26] ? vxlan_init_net+0x1e0/0x390 [ 909.161373][ T26] register_nexthop_notifier+0x17/0x70 [ 909.166847][ T26] ? vxlan_gro_receive+0x1170/0x1170 [ 909.172617][ T26] ops_init+0xaf/0x470 [ 909.176761][ T26] setup_net+0x40f/0xa30 [ 909.181503][ T26] ? down_read_killable+0x1a9/0x480 [ 909.186723][ T26] ? ops_init+0x470/0x470 [ 909.191551][ T26] ? rcu_read_lock_sched_held+0x3a/0x70 [ 909.197180][ T26] copy_net_ns+0x319/0x760 [ 909.206292][ T26] create_new_namespaces+0x3f6/0xb20 [ 909.212129][ T26] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 909.217780][ T26] ksys_unshare+0x445/0x920 [ 909.222748][ T26] ? unshare_fd+0x1c0/0x1c0 [ 909.227276][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 909.233646][ T26] __x64_sys_unshare+0x2d/0x40 [ 909.238549][ T26] do_syscall_64+0x35/0xb0 [ 909.243390][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 909.249786][ T26] RIP: 0033:0x7f0a61168a39 [ 909.254487][ T26] RSP: 002b:00007f0a5e6bd188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 909.263434][ T26] RAX: ffffffffffffffda RBX: 00007f0a6126c020 RCX: 00007f0a61168a39 [ 909.271908][ T26] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 909.280292][ T26] RBP: 00007f0a611c2c5f R08: 0000000000000000 R09: 0000000000000000 [ 909.288282][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.297099][ T26] R13: 00007ffc6dd0dd0f R14: 00007f0a5e6bd300 R15: 0000000000022000 [ 909.305620][ T26] INFO: task syz-executor.2:2786 blocked for more than 143 seconds. [ 909.316230][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 909.323278][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 909.332483][ T26] task:syz-executor.2 state:D stack:27944 pid: 2786 ppid: 6582 flags:0x00000004 [ 909.341824][ T26] Call Trace: [ 909.345111][ T26] __schedule+0xb44/0x5960 [ 909.349887][ T26] ? find_held_lock+0x2d/0x110 [ 909.354901][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 909.360360][ T26] ? io_schedule_timeout+0x140/0x140 [ 909.366475][ T26] schedule+0xd3/0x270 [ 909.371087][ T26] schedule_preempt_disabled+0xf/0x20 [ 909.376572][ T26] __mutex_lock+0xa34/0x12f0 [ 909.381668][ T26] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 909.386856][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 909.392940][ T26] ? rtnetlink_rcv_msg+0x388/0xb80 [ 909.398080][ T26] rtnetlink_rcv_msg+0x3be/0xb80 [ 909.403677][ T26] ? rtnl_newlink+0xa0/0xa0 [ 909.408198][ T26] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 909.413883][ T26] netlink_rcv_skb+0x153/0x420 [ 909.418682][ T26] ? rtnl_newlink+0xa0/0xa0 [ 909.425805][ T26] ? netlink_ack+0xa60/0xa60 [ 909.430494][ T26] ? netlink_deliver_tap+0x1a2/0xc30 [ 909.435786][ T26] ? netlink_deliver_tap+0x1b1/0xc30 [ 909.441159][ T26] netlink_unicast+0x533/0x7d0 [ 909.445938][ T26] ? netlink_attachskb+0x880/0x880 [ 909.451886][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 909.459529][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 909.465787][ T26] ? __phys_addr_symbol+0x2c/0x70 [ 909.471090][ T26] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 909.477861][ T26] ? __check_object_size+0x16e/0x3f0 [ 909.483277][ T26] netlink_sendmsg+0x86d/0xda0 [ 909.488054][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 909.493108][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 909.499439][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 909.504397][ T26] sock_sendmsg+0xcf/0x120 [ 909.508951][ T26] sock_write_iter+0x289/0x3c0 [ 909.513741][ T26] ? sock_sendmsg+0x120/0x120 [ 909.518427][ T26] ? find_held_lock+0x2d/0x110 [ 909.523283][ T26] do_iter_readv_writev+0x472/0x750 [ 909.528496][ T26] ? new_sync_write+0x660/0x660 [ 909.534373][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 909.545407][ T26] ? security_file_permission+0xab/0xd0 [ 909.552291][ T26] do_iter_write+0x188/0x710 [ 909.556894][ T26] ? import_iovec+0x10c/0x150 [ 909.564439][ T26] vfs_writev+0x1aa/0x630 [ 909.569862][ T26] ? vfs_iter_write+0xa0/0xa0 [ 909.574556][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 909.579785][ T26] ? __fget_files+0x23d/0x3e0 [ 909.584561][ T26] ? __fget_light+0xea/0x280 [ 909.589999][ T26] do_writev+0x27f/0x300 [ 909.594266][ T26] ? vfs_writev+0x630/0x630 [ 909.599167][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 909.605088][ T26] do_syscall_64+0x35/0xb0 [ 909.609743][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 909.615657][ T26] RIP: 0033:0x7f0b7459fa39 [ 909.620179][ T26] RSP: 002b:00007f0b71b15188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 909.628604][ T26] RAX: ffffffffffffffda RBX: 00007f0b746a2f60 RCX: 00007f0b7459fa39 [ 909.636714][ T26] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000003 [ 909.645241][ T26] RBP: 00007f0b745f9c5f R08: 0000000000000000 R09: 0000000000000000 [ 909.653915][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 909.664767][ T26] R13: 00007ffd51efcc0f R14: 00007f0b71b15300 R15: 0000000000022000 [ 909.674120][ T26] INFO: task syz-executor.2:2788 blocked for more than 144 seconds. [ 909.683189][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 909.690111][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 909.701089][ T26] task:syz-executor.2 state:D stack:27944 pid: 2788 ppid: 6582 flags:0x00000004 [ 909.711023][ T26] Call Trace: [ 909.714303][ T26] __schedule+0xb44/0x5960 [ 909.720122][ T26] ? find_held_lock+0x2d/0x110 [ 909.724917][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 909.730092][ T26] ? io_schedule_timeout+0x140/0x140 [ 909.735404][ T26] schedule+0xd3/0x270 [ 909.740582][ T26] schedule_preempt_disabled+0xf/0x20 [ 909.746153][ T26] __mutex_lock+0xa34/0x12f0 [ 909.751507][ T26] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 909.756670][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 909.762798][ T26] ? rtnetlink_rcv_msg+0x388/0xb80 [ 909.768470][ T26] rtnetlink_rcv_msg+0x3be/0xb80 [ 909.774916][ T26] ? rtnl_newlink+0xa0/0xa0 [ 909.780208][ T26] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 909.785530][ T26] netlink_rcv_skb+0x153/0x420 [ 909.791394][ T26] ? rtnl_newlink+0xa0/0xa0 [ 909.795923][ T26] ? netlink_ack+0xa60/0xa60 [ 909.801039][ T26] ? netlink_deliver_tap+0x1a2/0xc30 [ 909.806357][ T26] ? netlink_deliver_tap+0x1b1/0xc30 [ 909.812234][ T26] netlink_unicast+0x533/0x7d0 [ 909.817034][ T26] ? netlink_attachskb+0x880/0x880 [ 909.822551][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 909.829324][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 909.835608][ T26] ? __phys_addr_symbol+0x2c/0x70 [ 909.840726][ T26] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 909.846478][ T26] ? __check_object_size+0x16e/0x3f0 [ 909.851912][ T26] netlink_sendmsg+0x86d/0xda0 [ 909.856707][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 909.861815][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 909.868335][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 909.877541][ T26] sock_sendmsg+0xcf/0x120 [ 909.883265][ T26] sock_write_iter+0x289/0x3c0 [ 909.888156][ T26] ? sock_sendmsg+0x120/0x120 [ 909.898150][ T26] ? find_held_lock+0x2d/0x110 [ 909.903728][ T26] do_iter_readv_writev+0x472/0x750 [ 909.910074][ T26] ? new_sync_write+0x660/0x660 [ 909.914954][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 909.922122][ T26] ? security_file_permission+0xab/0xd0 [ 909.927676][ T26] do_iter_write+0x188/0x710 [ 909.932783][ T26] ? import_iovec+0x10c/0x150 [ 909.937561][ T26] vfs_writev+0x1aa/0x630 [ 909.942188][ T26] ? vfs_iter_write+0xa0/0xa0 [ 909.946920][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 909.952001][ T26] ? __fget_files+0x23d/0x3e0 [ 909.956710][ T26] ? __fget_light+0xea/0x280 [ 909.961541][ T26] do_writev+0x27f/0x300 [ 909.965804][ T26] ? vfs_writev+0x630/0x630 [ 909.971209][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 909.977151][ T26] do_syscall_64+0x35/0xb0 [ 909.986088][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 909.992231][ T26] RIP: 0033:0x7f0b7459fa39 [ 909.996670][ T26] RSP: 002b:00007f0b71af4188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 910.005233][ T26] RAX: ffffffffffffffda RBX: 00007f0b746a3020 RCX: 00007f0b7459fa39 [ 910.013359][ T26] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 910.021589][ T26] RBP: 00007f0b745f9c5f R08: 0000000000000000 R09: 0000000000000000 [ 910.029762][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.038127][ T26] R13: 00007ffd51efcc0f R14: 00007f0b71af4300 R15: 0000000000022000 [ 910.046634][ T26] INFO: task syz-executor.2:2809 blocked for more than 144 seconds. [ 910.055181][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 910.063116][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 910.072477][ T26] task:syz-executor.2 state:D stack:27320 pid: 2809 ppid: 6582 flags:0x00000004 [ 910.081993][ T26] Call Trace: [ 910.085304][ T26] __schedule+0xb44/0x5960 [ 910.091119][ T26] ? find_held_lock+0x2d/0x110 [ 910.095935][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 910.100984][ T26] ? io_schedule_timeout+0x140/0x140 [ 910.106303][ T26] schedule+0xd3/0x270 [ 910.110658][ T26] schedule_preempt_disabled+0xf/0x20 [ 910.116107][ T26] __mutex_lock+0xa34/0x12f0 [ 910.120968][ T26] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 910.126104][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 910.131748][ T26] ? rtnetlink_rcv_msg+0x388/0xb80 [ 910.136883][ T26] rtnetlink_rcv_msg+0x3be/0xb80 [ 910.142131][ T26] ? rtnl_newlink+0xa0/0xa0 [ 910.146829][ T26] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 910.152256][ T26] netlink_rcv_skb+0x153/0x420 [ 910.157121][ T26] ? rtnl_newlink+0xa0/0xa0 [ 910.161975][ T26] ? netlink_ack+0xa60/0xa60 [ 910.166588][ T26] ? netlink_deliver_tap+0x1a2/0xc30 [ 910.172762][ T26] ? netlink_deliver_tap+0x1b1/0xc30 [ 910.178456][ T26] netlink_unicast+0x533/0x7d0 [ 910.183488][ T26] ? netlink_attachskb+0x880/0x880 [ 910.188620][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 910.195005][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 910.201469][ T26] ? __phys_addr_symbol+0x2c/0x70 [ 910.206504][ T26] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 910.212341][ T26] ? __check_object_size+0x16e/0x3f0 [ 910.217654][ T26] netlink_sendmsg+0x86d/0xda0 [ 910.222685][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 910.227663][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 910.234204][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 910.239370][ T26] sock_sendmsg+0xcf/0x120 [ 910.243810][ T26] sock_write_iter+0x289/0x3c0 [ 910.248594][ T26] ? sock_sendmsg+0x120/0x120 [ 910.253485][ T26] ? find_held_lock+0x2d/0x110 [ 910.258390][ T26] do_iter_readv_writev+0x472/0x750 [ 910.263918][ T26] ? new_sync_write+0x660/0x660 [ 910.268927][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 910.275224][ T26] ? security_file_permission+0xab/0xd0 [ 910.281798][ T26] do_iter_write+0x188/0x710 [ 910.286424][ T26] ? import_iovec+0x10c/0x150 [ 910.291200][ T26] vfs_writev+0x1aa/0x630 [ 910.295563][ T26] ? vfs_iter_write+0xa0/0xa0 [ 910.300453][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 910.305350][ T26] ? __fget_files+0x23d/0x3e0 [ 910.310223][ T26] ? __fget_light+0xea/0x280 [ 910.314854][ T26] do_writev+0x27f/0x300 [ 910.319357][ T26] ? vfs_writev+0x630/0x630 [ 910.323883][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 910.330149][ T26] do_syscall_64+0x35/0xb0 [ 910.334589][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 910.340813][ T26] RIP: 0033:0x7f0b7459fa39 [ 910.345261][ T26] RSP: 002b:00007f0b71ad3188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 910.353789][ T26] RAX: ffffffffffffffda RBX: 00007f0b746a30e0 RCX: 00007f0b7459fa39 [ 910.362020][ T26] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000003 [ 910.370131][ T26] RBP: 00007f0b745f9c5f R08: 0000000000000000 R09: 0000000000000000 [ 910.378116][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.386816][ T26] R13: 00007ffd51efcc0f R14: 00007f0b71ad3300 R15: 0000000000022000 [ 910.394964][ T26] INFO: task syz-executor.2:2810 blocked for more than 144 seconds. [ 910.403123][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 910.409234][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 910.417996][ T26] task:syz-executor.2 state:D stack:27672 pid: 2810 ppid: 6582 flags:0x00000004 [ 910.427424][ T26] Call Trace: [ 910.430824][ T26] __schedule+0xb44/0x5960 [ 910.435265][ T26] ? find_held_lock+0x2d/0x110 [ 910.440240][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 910.445026][ T26] ? io_schedule_timeout+0x140/0x140 [ 910.450441][ T26] schedule+0xd3/0x270 [ 910.454660][ T26] schedule_preempt_disabled+0xf/0x20 [ 910.460249][ T26] __mutex_lock+0xa34/0x12f0 [ 910.464857][ T26] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 910.470250][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 910.475839][ T26] ? rtnetlink_rcv_msg+0x388/0xb80 [ 910.481705][ T26] rtnetlink_rcv_msg+0x3be/0xb80 [ 910.486672][ T26] ? rtnl_newlink+0xa0/0xa0 [ 910.491430][ T26] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 910.496761][ T26] netlink_rcv_skb+0x153/0x420 [ 910.501883][ T26] ? rtnl_newlink+0xa0/0xa0 [ 910.506438][ T26] ? netlink_ack+0xa60/0xa60 [ 910.511162][ T26] ? netlink_deliver_tap+0x1a2/0xc30 [ 910.516646][ T26] ? netlink_deliver_tap+0x1b1/0xc30 [ 910.522178][ T26] netlink_unicast+0x533/0x7d0 [ 910.527079][ T26] ? netlink_attachskb+0x880/0x880 [ 910.532469][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 910.539622][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 910.546021][ T26] ? __phys_addr_symbol+0x2c/0x70 [ 910.552502][ T26] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 910.558252][ T26] ? __check_object_size+0x16e/0x3f0 [ 910.564654][ T26] netlink_sendmsg+0x86d/0xda0 [ 910.575051][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 910.581458][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 910.588173][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 910.594842][ T26] sock_sendmsg+0xcf/0x120 [ 910.600447][ T26] sock_write_iter+0x289/0x3c0 [ 910.605291][ T26] ? sock_sendmsg+0x120/0x120 [ 910.611119][ T26] ? find_held_lock+0x2d/0x110 [ 910.615928][ T26] do_iter_readv_writev+0x472/0x750 [ 910.622656][ T26] ? new_sync_write+0x660/0x660 [ 910.627540][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 910.634719][ T26] ? security_file_permission+0xab/0xd0 [ 910.641398][ T26] do_iter_write+0x188/0x710 [ 910.646116][ T26] ? import_iovec+0x10c/0x150 [ 910.652530][ T26] vfs_writev+0x1aa/0x630 [ 910.656894][ T26] ? vfs_iter_write+0xa0/0xa0 [ 910.662066][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 910.667041][ T26] ? __fget_files+0x23d/0x3e0 [ 910.675869][ T26] ? __fget_light+0xea/0x280 [ 910.680840][ T26] do_writev+0x27f/0x300 [ 910.685101][ T26] ? vfs_writev+0x630/0x630 [ 910.690400][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 910.696325][ T26] do_syscall_64+0x35/0xb0 [ 910.701186][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 910.707105][ T26] RIP: 0033:0x7f0b7459fa39 [ 910.712056][ T26] RSP: 002b:00007f0b71ab2188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 910.720685][ T26] RAX: ffffffffffffffda RBX: 00007f0b746a31a0 RCX: 00007f0b7459fa39 [ 910.730481][ T26] RDX: 0000000000000001 RSI: 0000000020000000 RDI: 0000000000000003 [ 910.740599][ T26] RBP: 00007f0b745f9c5f R08: 0000000000000000 R09: 0000000000000000 [ 910.750042][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 910.758032][ T26] R13: 00007ffd51efcc0f R14: 00007f0b71ab2300 R15: 0000000000022000 [ 910.767542][ T26] [ 910.767542][ T26] Showing all locks held in the system: [ 910.776774][ T26] 1 lock held by khungtaskd/26: [ 910.784559][ T26] #0: ffffffff8b981ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 910.795386][ T26] 2 locks held by in:imklog/6255: [ 910.800833][ T26] #0: ffff888074b33270 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 910.810286][ T26] #1: ffff8880b9d31a58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2b/0x120 [ 910.820845][ T26] 4 locks held by kworker/u4:8/10874: [ 910.826225][ T26] #0: ffff8880b9d31a58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2b/0x120 [ 910.836282][ T26] #1: ffff8880b9d1f9c8 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x16a/0x480 [ 910.847937][ T26] #2: ffff8880b9d20258 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5a/0x1f0 [ 910.857464][ T26] #3: ffffffff903f6c50 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x12e/0x3e0 [ 910.868178][ T26] 3 locks held by kworker/1:16/26850: [ 910.873766][ T26] #0: ffff888025610938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 910.885013][ T26] #1: ffffc900065d7db0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 910.898934][ T26] #2: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xa3/0x1340 [ 910.908403][ T26] 1 lock held by syz-executor.3/2697: [ 910.913978][ T26] #0: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 910.923606][ T26] 2 locks held by syz-executor.3/2699: [ 910.929449][ T26] #0: ffffffff8d0d5990 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 910.939116][ T26] #1: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x17/0x70 [ 910.949281][ T26] 1 lock held by syz-executor.2/2786: [ 910.954836][ T26] #0: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 910.964447][ T26] 1 lock held by syz-executor.2/2788: [ 910.970213][ T26] #0: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 910.979889][ T26] 1 lock held by syz-executor.2/2809: [ 910.985453][ T26] #0: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 910.995612][ T26] 1 lock held by syz-executor.2/2810: [ 911.001285][ T26] #0: ffffffff8d0e90e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 911.011000][ T26] [ 911.013330][ T26] ============================================= [ 911.013330][ T26] [ 911.022611][ T26] NMI backtrace for cpu 0 [ 911.026944][ T26] CPU: 0 PID: 26 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0 [ 911.035094][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.045138][ T26] Call Trace: [ 911.048495][ T26] dump_stack_lvl+0xcd/0x134 [ 911.053085][ T26] nmi_cpu_backtrace.cold+0x47/0x144 [ 911.058374][ T26] ? lapic_can_unplug_cpu+0x80/0x80 [ 911.063656][ T26] nmi_trigger_cpumask_backtrace+0x1ae/0x220 [ 911.069674][ T26] watchdog+0xc1d/0xf50 [ 911.073873][ T26] ? reset_hung_task_detector+0x30/0x30 [ 911.079407][ T26] kthread+0x3e5/0x4d0 [ 911.083464][ T26] ? set_kthread_struct+0x130/0x130 [ 911.088665][ T26] ret_from_fork+0x1f/0x30 [ 911.093455][ T26] Sending NMI from CPU 0 to CPUs 1: [ 911.099108][ C1] NMI backtrace for cpu 1 [ 911.099119][ C1] CPU: 1 PID: 26848 Comm: kworker/1:15 Not tainted 5.15.0-rc5-syzkaller #0 [ 911.099141][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.099154][ C1] Workqueue: events nsim_dev_trap_report_work [ 911.099260][ C1] RIP: 0010:filter_irq_stacks+0x0/0x50 [ 911.099314][ C1] Code: e8 a5 91 ca fd e9 82 fe ff ff e8 1b 92 ca fd e9 bd fe ff ff 4c 89 ef e8 8e 91 ca fd e9 8d fe ff ff cc cc cc cc cc cc cc cc cc <85> f6 89 f1 74 3f 41 89 f0 31 c0 48 8b 14 c7 89 c6 48 81 fa 00 01 [ 911.099334][ C1] RSP: 0018:ffffc900059978b8 EFLAGS: 00000283 [ 911.099349][ C1] RAX: 000000000000000d RBX: ffff88804dccc008 RCX: 0000000000000000 [ 911.099363][ C1] RDX: dffffc0000000000 RSI: 000000000000000d RDI: ffffc900059978c0 [ 911.099376][ C1] RBP: ffff88804dccc000 R08: ffffffff8de3e79c R09: ffffffff8de3e730 [ 911.099391][ C1] R10: fffff52000b32efe R11: 0000000000086089 R12: 0000000000000800 [ 911.099404][ C1] R13: ffffffff81bdbcb4 R14: ffff88804dccc000 R15: ffffc90005997b88 [ 911.099419][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 911.099439][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 911.099452][ C1] CR2: 00007f165734a000 CR3: 0000000019adb000 CR4: 00000000003506e0 [ 911.099466][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 911.099477][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 911.099490][ C1] Call Trace: [ 911.099495][ C1] kasan_save_stack+0x25/0x40 [ 911.099516][ C1] ? kasan_save_stack+0x1b/0x40 [ 911.099540][ C1] ? kasan_set_track+0x1c/0x30 [ 911.099558][ C1] ? kasan_set_free_info+0x20/0x30 [ 911.099579][ C1] ? __kasan_slab_free+0xff/0x130 [ 911.099598][ C1] ? slab_free_freelist_hook+0x81/0x190 [ 911.099621][ C1] ? kfree+0xe4/0x530 [ 911.099641][ C1] ? skb_release_data+0x65a/0x790 [ 911.099666][ C1] ? consume_skb+0xc2/0x160 [ 911.099683][ C1] ? nsim_dev_trap_report_work+0x85d/0xbc0 [ 911.099706][ C1] ? process_one_work+0x9bf/0x16b0 [ 911.099725][ C1] ? worker_thread+0x658/0x11f0 [ 911.099742][ C1] ? kthread+0x3e5/0x4d0 [ 911.099763][ C1] ? ret_from_fork+0x1f/0x30 [ 911.099787][ C1] ? find_held_lock+0x2d/0x110 [ 911.099810][ C1] ? debug_check_no_obj_freed+0x20c/0x420 [ 911.099832][ C1] ? mark_held_locks+0x9f/0xe0 [ 911.099854][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 911.099880][ C1] ? lockdep_hardirqs_on+0x79/0x100 [ 911.099904][ C1] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 911.099928][ C1] ? debug_check_no_obj_freed+0x20c/0x420 [ 911.099948][ C1] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 911.099972][ C1] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 911.099995][ C1] kasan_set_track+0x1c/0x30 [ 911.100013][ C1] kasan_set_free_info+0x20/0x30 [ 911.100033][ C1] __kasan_slab_free+0xff/0x130 [ 911.100053][ C1] slab_free_freelist_hook+0x81/0x190 [ 911.100077][ C1] kfree+0xe4/0x530 [ 911.100098][ C1] ? skb_release_data+0x65a/0x790 [ 911.100124][ C1] skb_release_data+0x65a/0x790 [ 911.100150][ C1] consume_skb+0xc2/0x160 [ 911.100168][ C1] nsim_dev_trap_report_work+0x85d/0xbc0 [ 911.100199][ C1] process_one_work+0x9bf/0x16b0 [ 911.100221][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 911.100242][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 911.100263][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 911.100294][ C1] worker_thread+0x658/0x11f0 [ 911.100317][ C1] ? process_one_work+0x16b0/0x16b0 [ 911.100336][ C1] kthread+0x3e5/0x4d0 [ 911.100356][ C1] ? set_kthread_struct+0x130/0x130 [ 911.100380][ C1] ret_from_fork+0x1f/0x30 [ 911.110378][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 911.464934][ T26] CPU: 0 PID: 26 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0 [ 911.473069][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 911.483104][ T26] Call Trace: [ 911.486368][ T26] dump_stack_lvl+0xcd/0x134 [ 911.490950][ T26] panic+0x2b0/0x6dd [ 911.494857][ T26] ? __warn_printk+0xf3/0xf3 [ 911.499439][ T26] ? lapic_can_unplug_cpu+0x80/0x80 [ 911.504628][ T26] ? preempt_schedule_thunk+0x16/0x18 [ 911.510002][ T26] ? nmi_trigger_cpumask_backtrace+0x191/0x220 [ 911.516144][ T26] ? watchdog.cold+0x130/0x158 [ 911.520894][ T26] watchdog.cold+0x141/0x158 [ 911.525467][ T26] ? reset_hung_task_detector+0x30/0x30 [ 911.531008][ T26] kthread+0x3e5/0x4d0 [ 911.535065][ T26] ? set_kthread_struct+0x130/0x130 [ 911.540247][ T26] ret_from_fork+0x1f/0x30 [ 911.544896][ T26] Kernel Offset: disabled [ 911.549227][ T26] Rebooting in 86400 seconds..