last executing test programs: 5.3441411s ago: executing program 2 (id=2713): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp=r3}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) accept4(r4, 0x0, 0x0, 0x80000) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xfffffff7}, 0x1c) (async) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000040)={@mcast2}, 0x14) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff028}, {0x6, 0x0, 0x0, 0x3}]}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000180)=ANY=[], 0x1ac45) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x1, 0x1}, @fwd={0xf}]}}, 0x0, 0x32}, 0xffffffffffffff54) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000290000000400000006"], 0x50) (async) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r8, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r10}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r8, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r9, 0x1}, 0x20) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r12, 0x84, 0x80, &(0x7f0000000000)="45f4a6d6a4ba09be", 0x8) (async) setsockopt$inet6_int(r11, 0x29, 0x3, &(0x7f0000000000)=0x4, 0x4) (async) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r13, 0x0) (async) recvmmsg(r13, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x1}], 0x2, 0x40018022, 0x0) (async) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) 5.064898907s ago: executing program 2 (id=2718): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) unshare(0x6a040000) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x0, 0x66, 0x9, 0x2, 0x2, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x7800, 0x71f, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'erspan0\x00', r1, 0x80, 0x7, 0x1, 0x8000, {{0xe, 0x4, 0x3, 0x2, 0x38, 0x66, 0x0, 0x4, 0x2f, 0x0, @private=0xa010100, @empty, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x20, 0xee, 0x0, 0x2, [0x10, 0x3, 0x3, 0x0, 0x9, 0x15, 0x7]}]}}}}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5000000010000104004000000101000000000000", @ANYRES32=0x0, @ANYBLOB="0900020001000000300012800b00010067656e65766500002000020000000000020800"], 0x50}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="4be88fa3027baaaaaaaaaabb86dd6012100000003a"], 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.440325049s ago: executing program 4 (id=2731): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000050000000c00000040"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000086b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r2, r0}, 0x4) 3.394789235s ago: executing program 4 (id=2732): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {0x3, 0xfffffffd}, {0xfffffffe}]}, @fwd, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x6}]}}, 0x0, 0x96}, 0x28) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018000000", @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x94) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x4}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x101, 0xd, 0x8, 0x4024, r2, 0x0, '\x00', 0x0, r0, 0x3, 0x2, 0x1}, 0x50) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@rand_addr, @broadcast, 0x0}, &(0x7f0000000040)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x7, 0x5, 0x5, 0x40010, 0x1, 0xcbba, '\x00', r3, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) 3.30272181s ago: executing program 4 (id=2733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r2, 0x202, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x6c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x28, 0x12, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x7, 0x84}}}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x20040084) 3.127558438s ago: executing program 4 (id=2734): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0xbe, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8, 0x8, 0x0, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, &(0x7f0000000440)) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000300), 0x4) 3.090075544s ago: executing program 4 (id=2735): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000002900000e0000000000000000000000001400000000000000290000000800"], 0x30}}], 0x1, 0x8000) 2.900200238s ago: executing program 4 (id=2738): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="580000000206fa00000000000900020073797a3200000000050005000a000000050001000600000014000300686173683a69702c706f72742c6970000c00078008001200"/88], 0x58}}, 0x0) pwrite64(r0, &(0x7f0000000240)="0ee3d83a22b252bd6ed3908556d35d65ca70925b64fb6c9839e54f7c7aadbc72598cd5a646bd27a847f0f6cd67a11cc18e0937df2cf23306f76e8dacaaeed340048b392928cc3e36c3eb645d67abd481af9aa0e87687e3c9038d726670ac78a09c5f7b1e351f1d801399e41ad107c62a4ceeb81f4894c16d65f8e4127f75d316a5565ab4d324fc11cc2c52fc5da27e56aef94fdc2ed7224cfaab070e02fb9950236fc81d27409ac9a0746ede58992f1ff51a204b1e7fb6fbc88676", 0xbb, 0x8000000000000001) unshare(0x6a040000) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710419000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket(0x8, 0x3, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00}, 0x40) connect$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @broadcast}}, 0x24) socket$inet(0x2, 0x5, 0x1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, &(0x7f00000000c0)=0x5b) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xe54a}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x5c}}, 0x80) socket$can_j1939(0x1d, 0x2, 0x7) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0xb24, 0xf11d, 0x8000000000000000, 0x6, 0xffffffffffffffff, 0x9, 0x9f8d, 0x1}, &(0x7f0000000140)={0x4, 0x7ff, 0x6, 0xfff, 0x9, 0x2, 0x3, 0x3}, &(0x7f00000001c0)={0x9, 0x4, 0x6, 0x3, 0x4, 0x9, 0xc0000, 0xf8a}, &(0x7f0000000340)={r5, r6+10000000}, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, 0x0}}], 0x1, 0x4000000) r8 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r7, 0x84, 0x72, &(0x7f0000000340)={r9, 0xfffffffe, 0x20}, 0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000400)={r9, 0x675}, &(0x7f00000004c0)=0x8) 2.234326044s ago: executing program 1 (id=2741): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x12041, 0x0, 0x0) 1.999635487s ago: executing program 1 (id=2743): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="9feb01001800000000000000500000005000000004000000020000000000000e05000000010000000000000000000001050000000800000000000000000000830000000001000000020000000180000000000000000000030000000002000000020000000b000000006161"], 0x0, 0x6c}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1.660039721s ago: executing program 2 (id=2746): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) sendfile(r0, r1, 0x0, 0xffffffff000) connect$llc(r0, &(0x7f0000000100)={0x1a, 0xf, 0x89, 0x6, 0x6, 0xf, @random="000000001df4"}, 0x10) 1.589931604s ago: executing program 1 (id=2748): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000002900000e0000000000000000000000001400000000000000290000000800"], 0x30}}], 0x1, 0x8000) 1.433342278s ago: executing program 1 (id=2750): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000002c0)='/dev/ppp\x00', 0x600002, &(0x7f0000000300)={@align=0x3, {0x8, 0x1, 0xff, 0x5}}, 0x400, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x8}) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000400), 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000440)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r2], 0xe0}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'bridge_slave_1\x00', &(0x7f0000000240)=@ethtool_wolinfo={0x5, 0x2, 0x0, "11b5dd20f42d"}}) connect$qrtr(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x2, 0x7ffe}, 0xc) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r1, 0x4004743c, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000002c0)='/dev/ppp\x00', 0x600002, &(0x7f0000000300)={@align=0x3, {0x8, 0x1, 0xff, 0x5}}, 0x400, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x8}) (async) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000400), 0x4) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r2, &(0x7f0000000440)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r2], 0xe0}}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'bridge_slave_1\x00', &(0x7f0000000240)=@ethtool_wolinfo={0x5, 0x2, 0x0, "11b5dd20f42d"}}) (async) connect$qrtr(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x2, 0x7ffe}, 0xc) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) (async) ioctl$PPPIOCSACTIVE(r1, 0x4004743c, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) 1.363110248s ago: executing program 3 (id=2751): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) unshare(0x22020600) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) r6 = socket(0x28, 0x5, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000040)={0x0, 0x2710}, 0x10) recvmsg(r6, 0x0, 0x104) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x8931, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x40, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 1.317175634s ago: executing program 0 (id=2752): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r8) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r11, 0x6, 0x1, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r10, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000580)={0x5, 0x201, 0x4, 0x5, r12}, 0x10) 1.15625431s ago: executing program 0 (id=2753): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x12041, 0x0, 0x0) 1.154363522s ago: executing program 1 (id=2754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000050000000c00000040"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000086b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r2, r0}, 0x4) 1.068839486s ago: executing program 0 (id=2755): sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000000d0a01030000000000000000050000000900020073797a320000000008000000000900010073797a3000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvmsg(r0, &(0x7f00000016c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000340)=""/226, 0xe2}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/108, 0x6c}, {&(0x7f0000001580)=""/39, 0x27}], 0x7, &(0x7f0000001640)=""/80, 0x50}, 0x3) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) recvmmsg$unix(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12002, 0x0) recvmmsg$unix(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80002101, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000180)=0x9, 0x4) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000000d0a01030000000000000000050000000900020073797a320000000008000000000900010073797a3000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) (async) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) (async) recvmsg(r0, &(0x7f00000016c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000300)=""/5, 0x5}, {&(0x7f0000000340)=""/226, 0xe2}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/108, 0x6c}, {&(0x7f0000001580)=""/39, 0x27}], 0x7, &(0x7f0000001640)=""/80, 0x50}, 0x3) (async) socket$unix(0x1, 0x2, 0x0) (async) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) socket$unix(0x1, 0x2, 0x0) (async) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) (async) recvmmsg$unix(r2, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12002, 0x0) (async) recvmmsg$unix(r1, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x80002101, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000180)=0x9, 0x4) (async) 1.00604592s ago: executing program 1 (id=2756): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e20, 0x200081, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7fffffff}, {0xa, 0x4e21, 0x2, @mcast1, 0x1}, 0xffffffffffffffff, {[0x5, 0x8, 0xfffffffd, 0x6, 0x800007, 0x7, 0x7d6, 0x1ef51ae5]}}, 0x5c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r4, {}, {0xfff8, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x40d}, @TCA_CAKE_MPU={0x8, 0xe, 0x37}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40400d0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x62f, 0x7ffffd, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x10000, 0x10000000, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000440)="800000800000210ee7decd7a", 0xc, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 948.193252ms ago: executing program 3 (id=2757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xd}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}]}]}, 0xc0}}, 0x0) 853.217392ms ago: executing program 3 (id=2758): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="480000001000"/20, @ANYRES32=r3, @ANYBLOB="0b1b050000000000280012800b00010069703667726500001800028014000700fe8000000000000000000000000000bb"], 0x48}, 0x1, 0x0, 0x0, 0x20048800}, 0x4000010) sendto$packet(r0, &(0x7f0000000580)='o', 0x1, 0x4, &(0x7f0000000180)={0x11, 0x8100, r3, 0x1, 0xe9, 0x6, @local}, 0x14) 810.186446ms ago: executing program 0 (id=2759): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000440)={0x2, 0xfffffffc, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000240)) r1 = socket$inet(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000200)=[{&(0x7f0000000000)="aa2137bd545c8fe97fb4fec8998d1ca061c8d9cd81f420e35aad423df94d7478346cb833b358718c9a398f26ebb965ee74fb988bfdcb8347661624a5da825350842a643a53e26359827d06550af94b4c5503365cae1a06ee0cd780bf1290efee76ec1f1c7338505ea8fda1cbf58e33b912b27795", 0x74}, {&(0x7f0000000080)="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", 0xff}, {&(0x7f0000000180)="8a088938af649f99ae1c4ad398980d5c7e96fa1aaba3b4c103b204dbd48cd0d83abd150529b7f5a84da619878452eaf7432b7c4adedc347d58a3b1b74088904ac82798d899ec4e795afe1273f03b7adb3074394305c0cefc5325", 0x5a}], 0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000140)={0x2, 0x3, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000080)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r3, 0x0, 0x83, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) syz_open_procfs$namespace(0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001140)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0}}) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000700)={0x2, 0x2, @start={r6, 0x1, "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", "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"}, [0x0, 0x3, 0x3, 0x2, 0x2, 0xb859, 0x8, 0x5, 0x4, 0x5, 0x6, 0x3, 0x86, 0x0, 0x8, 0x37, 0x0, 0x5, 0x8, 0x3, 0x80000000, 0x0, 0x8, 0x9, 0xccfb, 0x6, 0xa8f3, 0x0, 0x100000001, 0x6, 0x0, 0xff, 0x3, 0x0, 0x9081, 0x400, 0x6, 0x7e, 0x3, 0x5, 0x40, 0xfffffffffffffffc, 0x100000001, 0x10000000, 0x5, 0x3, 0xd, 0x6375, 0x9, 0x4, 0x6f39, 0xfffffffffffffc00, 0x6, 0x7, 0x3, 0x7, 0x4, 0x3, 0x5, 0x6, 0x7, 0xe93, 0x100000000, 0xffffffffffffff9b]}) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000d80)={{}, r5, 0x8, @unused=[0x5ec4f821, 0x1, 0x7, 0x100000001], @devid=r6}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000a40)={r6, 0x7, 0x4}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000380)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0x6}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0xff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80], 0x0, [0x8, 0x8, 0x2, 0x80, 0x8, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3], [0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 628.406853ms ago: executing program 3 (id=2760): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000002900000e0000000000000000000000001400000000000000290000000800"], 0x30}}], 0x1, 0x8000) 582.456021ms ago: executing program 2 (id=2761): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES8=0x0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x8091) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x10}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) close(0x3) 484.312194ms ago: executing program 3 (id=2762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r4, 0x25, 0x2, @void}, 0x10) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r4, 0x25, 0x2, @void}, 0x10) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0x11}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2130c, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000200)=[{0x5, 0x2, 0xe}, {0x2, 0x4, 0xc, 0x8}], 0x10, 0xaac}, 0x94) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_fd={0x18, 0x5, 0x1, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0xff, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2130c, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000200)=[{0x5, 0x2, 0xe}, {0x2, 0x4, 0xc, 0x8}], 0x10, 0xaac}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x8}, [@ldst={0x6, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x0, 0xac, 0xed, &(0x7f0000000440)="4c500ec3b706f4cccac22389dca04c4ae342ef305664c53488f570a83b4d5a0e600c1aa41fa34c004ba7d1beb03aa5d2c27687dd514b4c2afba71b702824ff2e4d0cba370f79a9e74bbe889f18c4cc9601272552574b79c55676f7a80eb03a567c44882482e283509eff25e785cae75eaabca6b5d3468716cf3c769e249986eb604264cd908ce06c1288a0170d0222683662920fcb14e1208d2e05376dcfbeb85afcb389c821c9a5461f816a", &(0x7f0000000500)=""/237, 0x1, 0x0, 0x11, 0x33, &(0x7f0000000600)="103cc55a0f18cdb7ad486a362f3ebb32c5", &(0x7f0000000640)="baa8e9b9d53fd804b7aae4927b18e1f915dff0b234ff766804c1b2c261e6ec5e22223245def0fdc06f391e4c3549a82653d22e", 0x0, 0x0, 0x9}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r5, 0x0, 0xac, 0xed, &(0x7f0000000440)="4c500ec3b706f4cccac22389dca04c4ae342ef305664c53488f570a83b4d5a0e600c1aa41fa34c004ba7d1beb03aa5d2c27687dd514b4c2afba71b702824ff2e4d0cba370f79a9e74bbe889f18c4cc9601272552574b79c55676f7a80eb03a567c44882482e283509eff25e785cae75eaabca6b5d3468716cf3c769e249986eb604264cd908ce06c1288a0170d0222683662920fcb14e1208d2e05376dcfbeb85afcb389c821c9a5461f816a", &(0x7f0000000500)=""/237, 0x1, 0x0, 0x11, 0x33, &(0x7f0000000600)="103cc55a0f18cdb7ad486a362f3ebb32c5", &(0x7f0000000640)="baa8e9b9d53fd804b7aae4927b18e1f915dff0b234ff766804c1b2c261e6ec5e22223245def0fdc06f391e4c3549a82653d22e", 0x0, 0x0, 0x9}, 0x50) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007", @ANYRESDEC=r6], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) 276.020725ms ago: executing program 0 (id=2763): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, 0x10, 0x200, 0x70bd2a, 0x0, {0xf}}, 0x14}, 0x1, 0x0, 0x0, 0x24008004}, 0x20000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r4) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="76757bf3c36cdf3aea9a91926905827142a62e664e4612f978c9d36b544447d12b167282928595b99fef70c07479beaca4eec92a575729a847513c8b82c56fdabec8d74cf3f14173c5d962e8cb0d480052d1f13d0a", @ANYRES16=r5, @ANYBLOB="010025bd7000fddbdf25210000000c0005008301ffffffffffff09001f0070687931000000000500200000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40054) ioctl$OCFS2_IOC_GROUP_ADD64(r2, 0x40186f03, &(0x7f0000000140)={0x1, 0x2, 0x7, 0xa}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1403, 0x100, 0x70bd25, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4000011) 239.72871ms ago: executing program 2 (id=2764): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$XFS_IOC_AG_GEOMETRY(r0, 0xc080583d, &(0x7f0000000000)={0x6, 0x8, 0x2, 0x9, 0x0, 0x6980, 0x1, 0x7}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r2, 0x0, 0xce, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000140), &(0x7f0000000180)=0x4) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000001c0)={0x84, 0xd, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0xe9, 0x171, [0x1, 0x7]}}, @calipso={0x7, 0x38, {0x0, 0xc, 0x2, 0xff, [0x5b4a, 0x10, 0x1, 0x4, 0x1, 0xfffffffffffffff8]}}]}, 0x78) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x4, 0x7, 0xb72e, 0x400, 0xfffffffffffffff8, 0x8, r1}) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x54, r5, 0x8, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_IE={0x2e, 0x2a, [@erp={0x2a, 0x1}, @perr={0x84, 0x22, {0x7, 0x2, [{{0x0, 0x1}, @device_b, 0x4, @value=@broadcast, 0x22}, {{}, @device_b, 0x5, @void, 0xc}]}}, @erp={0x2a, 0x1, {0x1, 0x1, 0x1}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xeafa}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x7d7023782d8eb2d9) getsockopt$sock_buf(r4, 0x1, 0x1a, &(0x7f0000000440)=""/142, &(0x7f0000000500)=0x8e) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000540)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x38}, 0xa) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20b00008}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)=@newqdisc={0x1f0, 0x24, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xf, 0xd}, {0x5, 0xd}, {0x0, 0x9}}, [@q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3d}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x81}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9f4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x48, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x23}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x11}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x24040020}, 0x8040) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000840), &(0x7f0000000880)=0x4) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f00000008c0)={{0x343c1e9c0719ea6a, @rand_addr=0x64010100, 0x4e22, 0x2, 'ovf\x00', 0x7, 0x0, 0x6d}, {@remote, 0x4e21, 0x2000, 0xfffffffc, 0x322be48b, 0x5}}, 0x44) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000940)={0x0, 0x93, "604070cf7fe04e7eb12eabae15a816fb4228533c43351655f49929c5325de1db74562349ec95df9ab379c71419f2316ffa676c8d3921ee023a35b0e11cea7bb5ad31a46f50c79ca8f9e404bdbe5c58f58313eaf16c6699b7e77b99668c06065469fd2eae7a261c5f61770067ceb76c196516285a57277d4d3f89e5524d449d00847501f15d6e66809224294c65e44b132d6d73"}, &(0x7f0000000a00)=0x9b) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_STATS(r8, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r9, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r10 = accept$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000bc0)=0x14) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000c00)=@req={0x400, 0x80000001, 0x8b, 0x2}, 0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000003fc0)={{r4, &(0x7f0000000c40)='\x00', 0x101001, &(0x7f0000000c80)={@_ha_fsid={[0x2, 0x6]}, {0x4, 0x5, 0x6, 0x9}}, 0x800, &(0x7f0000000cc0), &(0x7f0000000d00)=0x6}, 0x4, &(0x7f0000003f40)=[{0x1, 0x853, &(0x7f0000000d40)='-/,)]@\x00', &(0x7f0000000d80)="096be2ad3059a075428abe06a005862e03a4eeaaa8f72dc28c3fc40cb1e66915953478359bbd3516e3124e787adb115fa314f180f319026d3b5d0d0df8388faf975734e2d34599415bf0d496b646bbe8d803d91644b2c8978f1c59171c89f97ed2f79d2ea4943cafc1935bf7c5dfb39ba1e32b74b7a111f82573b7900b6ab3d73e7c4d2e9b66b09fb4724bc45805eb11821d0a9b1549a7665d156b465942669080a1578d5462894e5d3c5b22493e71b39d69445b1fb5c814a28b0226758cf5eedc5e", 0xc2}, {0x2, 0x4, &(0x7f0000000e80)='\x00', &(0x7f0000000ec0)="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", 0x1000, 0x38}, {0x2, 0x7, &(0x7f0000001ec0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000001f00)="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", 0x1000, 0x2}, {0x2, 0xfffffffb, &(0x7f0000002f00)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000002f40)="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", 0x1000, 0x22}]}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000004080)={{{@in=@broadcast, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000004180)=0xe8) sendmsg$nl_xfrm(r11, &(0x7f0000004480)={&(0x7f0000004040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000004440)={&(0x7f0000004300)=@delpolicy={0x108, 0x14, 0x200, 0x70bd2d, 0x25dfdbfb, {{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x7, 0x4e21, 0x9, 0x2, 0xa0, 0x0, 0x2, 0x0, r12}, 0x6e6bb5, 0x2}, [@policy_type={0xa, 0x10, {0x1}}, @policy={0xac, 0x7, {{@in=@multicast2, @in6=@empty, 0x4e22, 0x3ff, 0x4e20, 0x8000, 0xa, 0x180, 0x0, 0x67, r1}, {0x3ff, 0x5, 0xfffffffffffff6f2, 0x3, 0x8, 0xd9cd, 0x0, 0x400}, {0x6, 0x7, 0x5, 0x2b888e60}, 0x1, 0x6e6bbd, 0x0, 0x0, 0x2}}]}, 0x108}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000000) 67.496229ms ago: executing program 2 (id=2765): r0 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x12041, 0x0, 0x0) 435.454µs ago: executing program 3 (id=2766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000000050000000c000000400000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000086b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r2, r0}, 0x4) 0s ago: executing program 0 (id=2767): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4028800) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r2) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) kernel console output (not intermixed with test programs): tlink: 24 bytes leftover after parsing attributes in process `syz.3.1014'. [ 180.395020][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'. [ 180.413164][ T9903] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1025'. [ 180.416224][ T9904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1024'. [ 180.450123][ T9904] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1024'. [ 180.819729][ T9918] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1030'. [ 180.851019][ T9918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1030'. [ 180.863435][ T9918] netlink: 1335 bytes leftover after parsing attributes in process `syz.1.1030'. [ 181.097524][ T9921] bridge2: left promiscuous mode [ 181.109459][ T9921] bridge2: left allmulticast mode [ 181.121919][ T9921] ipip0: left promiscuous mode [ 181.132572][ T9921] ipip0: left allmulticast mode [ 181.176255][ T9921] veth3: left allmulticast mode [ 181.188294][ T9921] gretap1: left allmulticast mode [ 181.196859][ T9921] veth7: left allmulticast mode [ 181.231274][ T9923] geneve3: entered promiscuous mode [ 181.244276][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1031'. [ 181.283589][ T6154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 58663 - 0 [ 181.312106][ T6154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 58663 - 0 [ 181.398828][ T6154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 58663 - 0 [ 181.430854][ T6154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 58663 - 0 [ 181.529308][ T9940] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 181.552144][ T9940] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 182.163981][ T9958] netlink: 'syz.3.1041': attribute type 2 has an invalid length. [ 183.335567][ T9958] : entered promiscuous mode [ 184.271138][T10017] netlink: 'syz.4.1055': attribute type 1 has an invalid length. [ 184.401428][T10017] bond10: entered promiscuous mode [ 184.407683][T10017] 8021q: adding VLAN 0 to HW filter on device bond10 [ 184.462132][T10017] __nla_validate_parse: 5 callbacks suppressed [ 184.462152][T10017] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1055'. [ 184.530753][T10026] 8021q: adding VLAN 0 to HW filter on device bond10 [ 184.546534][T10026] bond10: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 184.559938][T10026] bond10: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 184.579633][T10026] bond10: (slave ip6gre2): making interface the new active one [ 184.587460][T10026] ip6gre2: entered promiscuous mode [ 184.596849][T10026] bond10: (slave ip6gre2): Enslaving as an active interface with an up link [ 184.686191][T10034] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1060'. [ 185.076738][T10057] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1067'. [ 185.209720][T10073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1071'. [ 185.261963][T10078] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1073'. [ 185.267666][T10072] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1072'. [ 185.315719][T10072] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1072'. [ 185.349412][T10072] netlink: 'syz.0.1072': attribute type 5 has an invalid length. [ 185.391437][T10072] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1072'. [ 185.431890][T10068] tipc: Enabling of bearer rejected, failed to enable media [ 185.717227][T10095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1077'. [ 185.867898][T10103] vlan0: entered allmulticast mode [ 185.873164][T10103] bond0: entered allmulticast mode [ 185.879794][T10103] bond_slave_0: entered allmulticast mode [ 185.888891][T10103] bond_slave_1: entered allmulticast mode [ 185.931948][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1082'. [ 186.037154][T10111] netlink: 'syz.3.1084': attribute type 32 has an invalid length. [ 186.188281][T10118] xt_recent: Unsupported userspace flags (000000c5) [ 186.432779][T10124] pim6reg: entered allmulticast mode [ 186.776633][T10138] syzkaller1: entered promiscuous mode [ 186.803265][T10138] syzkaller1: entered allmulticast mode [ 187.331670][T10161] netlink: 'syz.4.1096': attribute type 25 has an invalid length. [ 187.376832][T10161] macvtap0: entered promiscuous mode [ 187.393902][T10161] batadv0: entered promiscuous mode [ 187.407621][T10161] macvtap0: entered allmulticast mode [ 187.424136][T10161] batadv0: entered allmulticast mode [ 187.447647][T10161] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 187.469798][T10161] batadv0: left allmulticast mode [ 187.493542][T10161] batadv0: left promiscuous mode [ 187.620299][T10173] netlink: 'syz.3.1101': attribute type 1 has an invalid length. [ 188.269840][T10209] netlink: 'syz.0.1113': attribute type 1 has an invalid length. [ 188.404095][T10209] 8021q: adding VLAN 0 to HW filter on device bond6 [ 188.505307][T10217] bond6: (slave gretap1): making interface the new active one [ 188.515767][T10217] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 188.779366][T10230] netlink: 'syz.2.1121': attribute type 32 has an invalid length. [ 188.957076][T10240] netlink: 'syz.2.1126': attribute type 1 has an invalid length. [ 188.983208][T10240] netlink: 'syz.2.1126': attribute type 6 has an invalid length. [ 189.018031][T10240] netlink: 'syz.2.1126': attribute type 3 has an invalid length. [ 189.210782][T10237] xt_CT: No such helper "syz0" [ 189.558256][T10262] tipc: Enabling of bearer rejected, failed to enable media [ 189.655107][T10262] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 189.783250][T10273] __nla_validate_parse: 6 callbacks suppressed [ 189.783269][T10273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1133'. [ 189.883749][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1134'. [ 190.150774][T10277] netlink: 'syz.2.1135': attribute type 1 has an invalid length. [ 190.526030][T10277] 8021q: adding VLAN 0 to HW filter on device bond8 [ 190.820753][T10294] bond8: (slave geneve3): making interface the new active one [ 190.843621][T10294] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 191.073234][T10304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1141'. [ 191.177297][T10316] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1142'. [ 191.218738][T10315] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 191.731032][T10337] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1146'. [ 191.880755][T10340] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1149'. [ 192.544199][T10370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1158'. [ 192.605642][T10369] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 192.763298][T10373] pim6reg1: entered allmulticast mode [ 193.184854][T10383] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1160'. [ 193.196173][T10383] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 193.633580][T10412] netlink: 'syz.0.1170': attribute type 9 has an invalid length. [ 193.770297][T10415] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1171'. [ 193.929683][T10420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1173'. [ 194.301703][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.314453][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.360069][T10446] IPVS: set_ctl: invalid protocol: 60 172.20.20.11:20000 [ 194.660814][T10456] tipc: Enabling of bearer rejected, already enabled [ 194.804696][T10463] x_tables: duplicate underflow at hook 2 [ 194.822581][T10465] __nla_validate_parse: 1 callbacks suppressed [ 194.822598][T10465] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1187'. [ 194.841133][T10466] IPv6: Can't replace route, no match found [ 194.966256][T10468] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1190'. [ 195.103642][T10468] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1190'. [ 195.394261][T10490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1194'. [ 195.730030][T10504] netlink: 199816 bytes leftover after parsing attributes in process `syz.2.1198'. [ 195.770287][T10507] netlink: 'syz.3.1199': attribute type 1 has an invalid length. [ 195.778414][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'. [ 196.020777][T10507] bond3: entered promiscuous mode [ 196.035349][T10507] 8021q: adding VLAN 0 to HW filter on device bond3 [ 196.137587][T10511] vlan2: entered allmulticast mode [ 196.159728][T10511] bond3: entered allmulticast mode [ 196.296354][T10515] bond3: (slave bridge9): making interface the new active one [ 196.333751][T10515] bridge9: entered promiscuous mode [ 196.361984][T10515] bridge9: entered allmulticast mode [ 196.368009][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 196.396996][T10515] bond3: (slave bridge9): Enslaving as an active interface with an up link [ 196.455203][T10509] syzkaller1: entered promiscuous mode [ 196.473823][T10509] syzkaller1: entered allmulticast mode [ 196.820275][ T6161] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.851580][ T6161] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.896724][ T6161] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.923290][ T6161] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.114780][T10551] veth0: entered promiscuous mode [ 197.146639][T10551] veth0: left promiscuous mode [ 197.162013][T10552] netlink: 'syz.3.1208': attribute type 1 has an invalid length. [ 197.494737][T10559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1212'. [ 197.766277][T10566] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1213'. [ 197.993002][T10576] tipc: Enabling of bearer rejected, already enabled [ 198.278970][T10588] netlink: 'syz.3.1217': attribute type 9 has an invalid length. [ 198.861953][T10605] bond0: entered promiscuous mode [ 198.865531][T10606] netlink: 'syz.1.1220': attribute type 21 has an invalid length. [ 198.880160][T10605] bond_slave_0: entered promiscuous mode [ 198.900738][T10605] bond_slave_1: entered promiscuous mode [ 198.925055][T10608] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1221'. [ 198.942148][T10605] bond0: left promiscuous mode [ 198.950471][T10605] bond_slave_0: left promiscuous mode [ 198.959149][T10605] bond_slave_1: left promiscuous mode [ 198.984904][T10606] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1220'. [ 199.037575][T10609] bond0: entered promiscuous mode [ 199.070658][T10609] bond_slave_0: entered promiscuous mode [ 199.082351][T10609] bond_slave_1: entered promiscuous mode [ 199.100912][T10609] bond0: left promiscuous mode [ 199.110956][T10609] bond_slave_0: left promiscuous mode [ 199.118229][T10609] bond_slave_1: left promiscuous mode [ 199.282975][T10621] netlink: 'syz.3.1225': attribute type 62 has an invalid length. [ 200.432149][T10682] __nla_validate_parse: 4 callbacks suppressed [ 200.432182][T10682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1238'. [ 200.933751][T10697] syzkaller0: entered promiscuous mode [ 200.961601][T10697] syzkaller0: entered allmulticast mode [ 201.474822][T10716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.484699][ T5629] Bluetooth: hci2: command 0x0401 tx timeout [ 201.493827][ T5627] Bluetooth: hci0: command 0x0401 tx timeout [ 201.500987][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 203.221297][T10665] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 203.439794][T10723] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 203.443485][T10724] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1243'. [ 203.860451][ T5631] Bluetooth: hci4: link tx timeout [ 203.869329][ T5631] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 203.883659][ T5631] Bluetooth: hci4: link tx timeout [ 203.890068][ T5631] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 203.899270][ T5631] Bluetooth: hci4: link tx timeout [ 203.904679][ T5631] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 203.913695][ T5631] Bluetooth: hci4: link tx timeout [ 203.922017][ T5631] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 204.272955][T10734] netlink: 'syz.4.1246': attribute type 1 has an invalid length. [ 204.325415][ T5631] Bluetooth: hci4: link tx timeout [ 204.333196][ T5631] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 204.341014][ T5631] Bluetooth: hci4: link tx timeout [ 204.346478][ T5631] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 204.353057][T10734] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1246'. [ 204.365927][ T5631] Bluetooth: hci4: link tx timeout [ 204.371201][ T5631] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 204.378351][T10740] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1250'. [ 204.379191][ T5631] Bluetooth: hci4: link tx timeout [ 204.393496][ T5631] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 204.463600][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1246'. [ 204.477061][T10748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1249'. [ 204.551405][ T5631] Bluetooth: hci4: link tx timeout [ 204.558254][ T5631] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 204.562979][T10743] openvswitch: netlink: IP tunnel TTL not specified. [ 204.567487][ T5631] Bluetooth: hci4: link tx timeout [ 204.580540][ T5631] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 204.656775][ T5631] Bluetooth: hci4: link tx timeout [ 204.661997][ T5631] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 204.670071][ T5631] Bluetooth: hci4: link tx timeout [ 204.675280][ T5631] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.373019][T10776] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1256'. [ 205.630826][T10787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.728043][ T5631] Bluetooth: hci4: link tx timeout [ 205.733256][ T5631] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 205.741574][ T5631] Bluetooth: hci4: link tx timeout [ 205.746792][ T5631] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 205.965482][ T5631] Bluetooth: hci4: command 0x0405 tx timeout [ 206.263583][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1263'. [ 206.343080][T10804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 206.417175][T10775] infiniband syz0: set active [ 206.432262][T10775] infiniband syz0: added bond_slave_0 [ 206.462203][T10775] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 206.475774][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1266'. [ 206.493260][T10775] infiniband syz0: Couldn't open port 1 [ 206.522298][T10775] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 206.569062][T10775] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 206.569673][T10810] xt_hashlimit: size too large, truncated to 1048576 [ 206.613664][T10775] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 206.693104][T10818] netlink: 'syz.2.1266': attribute type 1 has an invalid length. [ 206.733088][T10818] netlink: 'syz.2.1266': attribute type 2 has an invalid length. [ 206.815395][T10775] RDS/IB: syz0: added [ 206.823879][T10775] smc: adding ib device syz0 with port count 1 [ 206.831600][T10775] smc: ib device syz0 port 1 has no pnetid [ 207.198851][T10834] netlink: 'syz.3.1269': attribute type 8 has an invalid length. [ 207.237319][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1269'. [ 207.808065][T10860] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1274'. [ 208.044940][ T5620] Bluetooth: hci4: command 0x0405 tx timeout [ 208.544022][T10876] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 209.257039][T10901] xt_hashlimit: size too large, truncated to 1048576 [ 209.398017][T10910] netlink: 'syz.4.1282': attribute type 11 has an invalid length. [ 209.451837][T10910] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1282'. [ 209.499000][T10911] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1282'. [ 210.119593][T10922] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1286'. [ 210.391527][T10930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1287'. [ 210.487752][T10933] netlink: 'syz.3.1288': attribute type 1 has an invalid length. [ 210.649772][T10933] 8021q: adding VLAN 0 to HW filter on device bond4 [ 211.042594][T10948] netlink: 'syz.2.1292': attribute type 12 has an invalid length. [ 211.100992][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1293'. [ 211.944101][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 211.985823][ T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.022722][ T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.061195][ T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 212.246344][T10944] dvmrp0: entered allmulticast mode [ 213.757328][T10999] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.767622][T10999] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.810886][T10999] team_slave_0: left promiscuous mode [ 213.945303][T10999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.960233][T10999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.104208][T10999] gretap0: left allmulticast mode [ 214.205687][ T5636] syz1: Port: 1 Link DOWN [ 214.232552][ T7144] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.263914][ T7144] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.290693][ T7144] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.300356][ T7144] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.318114][ T7144] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.350064][ T7144] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.386959][ T7144] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 214.414616][ T7144] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.479523][T11021] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1309'. [ 214.493847][T11021] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1309'. [ 214.512772][T11023] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1310'. [ 214.533106][ T5620] Bluetooth: hci0: command 0x0401 tx timeout [ 215.605717][T11056] netlink: 'syz.3.1319': attribute type 1 has an invalid length. [ 215.672885][T11061] netlink: 'syz.0.1320': attribute type 5 has an invalid length. [ 215.709693][T11056] 8021q: adding VLAN 0 to HW filter on device bond5 [ 215.728772][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1320'. [ 215.847120][T11060] bond5: (slave veth11): Enslaving as an active interface with a down link [ 215.909926][T11056] vlan3: entered allmulticast mode [ 215.916489][T11056] veth0_to_bond: entered allmulticast mode [ 215.926661][T11056] bond5: (slave vlan3): Opening slave failed [ 216.484861][T11094] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 216.872141][T11113] syzkaller0: entered promiscuous mode [ 216.906362][T11113] syzkaller0: entered allmulticast mode [ 217.280762][T11133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.541569][T11115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.734042][T11148] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1339'. [ 217.829549][T11152] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 217.850717][T11152] bridge0: port 3(macvlan2) entered blocking state [ 217.884005][T11152] bridge0: port 3(macvlan2) entered disabled state [ 217.901792][T11152] macvlan2: entered allmulticast mode [ 217.919180][T11152] batadv0: entered allmulticast mode [ 217.946294][T11152] macvlan2: entered promiscuous mode [ 217.968202][T11152] batadv0: entered promiscuous mode [ 217.998859][T11158] netlink: 'syz.4.1337': attribute type 2 has an invalid length. [ 218.000380][T11156] netlink: 'syz.4.1337': attribute type 2 has an invalid length. [ 218.425421][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1345'. [ 218.780984][T11189] netlink: 'syz.4.1346': attribute type 1 has an invalid length. [ 218.824072][T11189] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 218.845304][ T5631] Bluetooth: hci4: command 0x0405 tx timeout [ 219.112617][T11201] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1351'. [ 219.357848][T11210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1353'. [ 219.717488][T11218] syzkaller0: entered promiscuous mode [ 219.744492][T11218] syzkaller0: entered allmulticast mode [ 219.898784][T11230] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.913942][T11224] bond6 (unregistering): Released all slaves [ 220.015219][T11234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1362'. [ 220.149759][T11214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.474476][T11249] netlink: 'syz.4.1366': attribute type 1 has an invalid length. [ 220.506089][T11249] netlink: 'syz.4.1366': attribute type 1 has an invalid length. [ 220.558899][T11254] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1365'. [ 220.585445][T11254] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1365'. [ 220.754165][T11263] IPv6: A: Disabled Multicast RS [ 220.836034][T11268] bridge0: entered promiscuous mode [ 220.857032][T11268] bridge0: entered allmulticast mode [ 220.868690][T11269] openvswitch: netlink: Key type 309 is out of range max 32 [ 221.031851][T11274] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1373'. [ 221.097032][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1374'. [ 221.451161][T11291] syzkaller0: entered promiscuous mode [ 221.478071][T11291] syzkaller0: entered allmulticast mode [ 221.662028][T11297] block nbd9: Unsupported socket: should be TCP or UNIX. [ 221.998777][T11312] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1386'. [ 222.550797][T11328] netlink: 'syz.3.1390': attribute type 1 has an invalid length. [ 222.580683][T11328] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1390'. [ 222.796690][T11337] mac80211_hwsim hwsim9 syzkaller0: left promiscuous mode [ 222.848353][T11337] mac80211_hwsim hwsim9 syzkaller0: left allmulticast mode [ 222.937346][T11345] x_tables: unsorted underflow at hook 4 [ 222.946931][T11346] x_tables: unsorted underflow at hook 4 [ 223.224033][T11355] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1397'. [ 223.971974][T11339] bridge0: port 3(macvlan2) entered blocking state [ 223.978896][T11339] bridge0: port 3(macvlan2) entered forwarding state [ 224.065992][T11339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.111157][T11339] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.172637][T11339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.281204][T11339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.310960][T11339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.362644][T11339] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 224.399383][T11339] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 224.432479][T11386] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1403'. [ 224.457029][T11339] veth1_vlan: left promiscuous mode [ 224.471181][T11339] veth0_vlan: left promiscuous mode [ 224.486202][T11339] veth0_vlan: entered promiscuous mode [ 224.494776][T11339] veth1_vlan: entered promiscuous mode [ 224.508997][T11339] veth0_macvtap: left promiscuous mode [ 224.519459][T11339] veth0_macvtap: entered promiscuous mode [ 224.529506][T11339] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 224.558119][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.565317][ T6156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.573554][T11386] netlink: 'syz.4.1403': attribute type 1 has an invalid length. [ 224.595436][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.602621][ T6156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.899513][T11395] netlink: 'syz.4.1403': attribute type 3 has an invalid length. [ 224.945484][T11395] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1403'. [ 225.196575][T11424] netlink: 'syz.0.1406': attribute type 5 has an invalid length. [ 225.261591][T11395] 8021q: adding VLAN 0 to HW filter on device bond12 [ 225.301683][T11395] bond11: (slave bond12): making interface the new active one [ 225.311308][T11395] bond11: (slave bond12): Enslaving as an active interface with an up link [ 225.481626][T11434] netlink: 'syz.4.1409': attribute type 2 has an invalid length. [ 225.602147][T11434] : entered promiscuous mode [ 225.613441][T11435] tipc: Enabling of bearer rejected, already enabled [ 225.759502][T11434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1409'. [ 225.806486][T11434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.900920][T11452] netlink: 'syz.0.1413': attribute type 1 has an invalid length. [ 225.932396][T11450] syzkaller0: entered promiscuous mode [ 226.010777][T11452] 8021q: adding VLAN 0 to HW filter on device bond9 [ 226.096797][T11456] bond9: (slave veth9): Enslaving as an active interface with a down link [ 226.228626][T11452] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 226.261147][T11452] bond9: (slave batadv1): making interface the new active one [ 226.287668][T11452] batadv1: entered promiscuous mode [ 226.303100][T11452] bond9: (slave batadv1): Enslaving as an active interface with an up link [ 226.534488][T11471] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1417'. [ 226.568777][T11471] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1417'. [ 226.604670][T11471] netlink: 'syz.1.1417': attribute type 6 has an invalid length. [ 226.707926][T11471] netlink: 'syz.1.1417': attribute type 5 has an invalid length. [ 226.754740][T11471] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1417'. [ 226.861810][T11480] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1420'. [ 226.904862][T11481] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1420'. [ 226.981167][T11490] veth0: entered promiscuous mode [ 227.052819][T11490] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1422'. [ 227.160286][T11490] bond0: (slave bond_slave_1): Releasing backup interface [ 227.307861][T11500] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1426'. [ 227.318475][T11489] veth0: left promiscuous mode [ 228.250973][T11524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 228.440334][T11528] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 228.730301][T11548] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1438'. [ 229.043033][T11556] macvtap1: entered promiscuous mode [ 229.065937][T11556] dummy0: entered promiscuous mode [ 229.100132][T11556] macvtap1: entered allmulticast mode [ 229.123058][T11556] dummy0: entered allmulticast mode [ 229.388448][T11557] dummy0: left allmulticast mode [ 229.762653][T11557] macvtap1: left promiscuous mode [ 229.768470][T11557] macvtap1: left allmulticast mode [ 229.787805][ T8369] dummy0: left promiscuous mode [ 230.376894][T11576] xt_cgroup: invalid path, errno=-2 [ 230.617918][T11585] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 230.630245][T11585] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 230.667119][T11585] netlink: 'syz.0.1450': attribute type 1 has an invalid length. [ 230.724127][T11589] sctp: [Deprecated]: syz.0.1450 (pid 11589) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.724127][T11589] Use struct sctp_sack_info instead [ 230.770310][T11589] __nla_validate_parse: 2 callbacks suppressed [ 230.770342][T11589] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1450'. [ 230.781399][T11585] bond10: entered promiscuous mode [ 230.793706][T11585] 8021q: adding VLAN 0 to HW filter on device bond10 [ 231.172611][T11594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.192075][T11594] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.237325][T11594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.381406][T11594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.395477][T11594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.408515][T11614] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1454'. [ 231.422024][T11594] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 231.441119][T11594] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.458994][T11594] veth1_vlan: left promiscuous mode [ 231.466340][T11594] veth0_vlan: left promiscuous mode [ 231.475947][T11594] veth0_vlan: entered promiscuous mode [ 231.488364][T11594] veth1_vlan: entered promiscuous mode [ 231.513131][T11594] veth1_macvtap: left promiscuous mode [ 231.521532][T11594] veth0_macvtap: left promiscuous mode [ 231.529234][T11594] veth0_macvtap: entered promiscuous mode [ 231.538036][T11594] veth1_macvtap: entered promiscuous mode [ 231.551325][T11594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 231.561023][T11594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 231.573326][T11594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 231.582563][T11594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 231.602980][T11594] 8021q: adding VLAN 0 to HW filter on device bond1 [ 231.620719][T11594] 8021q: adding VLAN 0 to HW filter on device bond2 [ 231.632649][T11594] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.653267][T11594] geneve3: left promiscuous mode [ 231.672667][T11589] bond10: entered allmulticast mode [ 231.689440][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.696632][ T7144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.709781][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.716996][ T7144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.808981][ T6165] bond3: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 231.826391][ T6165] bond3: (slave veth0_to_bond): making interface the new active one [ 231.865364][ T6165] bond3: active interface up! [ 231.880347][ T6154] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 231.914235][ T6154] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 231.999233][ T6154] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 232.017881][ T6154] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 232.405006][T11628] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 232.549698][T11630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1459'. [ 233.470930][ T1124] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 233.517881][ T1124] bond1: (slave veth3): making interface the new active one [ 233.603615][ T1124] bond1: active interface up! [ 233.680479][T11650] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1464'. [ 233.784031][T11651] netlink: 'syz.1.1464': attribute type 1 has an invalid length. [ 234.321312][T11667] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1470'. [ 234.360867][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1470'. [ 234.397550][T11671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1471'. [ 234.759631][T11691] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1477'. [ 235.428575][T11718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1485'. [ 235.792708][T11731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1490'. [ 235.806806][T11731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1490'. [ 237.405013][ T6154] batadv1: left promiscuous mode [ 238.127768][T11822] netlink: 'syz.3.1512': attribute type 13 has an invalid length. [ 238.183721][T11822] netlink: 'syz.3.1512': attribute type 17 has an invalid length. [ 238.671415][T11850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1517'. [ 238.750700][T11822] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 238.884080][T11847] tipc: Enabled bearer , priority 0 [ 238.906418][T11858] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1518'. [ 238.940658][T11830] tipc: Resetting bearer [ 238.978020][T11853] syzkaller0: entered promiscuous mode [ 238.990013][T11853] syzkaller0: entered allmulticast mode [ 239.166989][T11829] tipc: Resetting bearer [ 239.245450][T11829] tipc: Disabling bearer [ 239.272842][T11871] netlink: 'syz.4.1519': attribute type 21 has an invalid length. [ 239.283120][T11871] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1519'. [ 239.634943][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1525'. [ 239.739944][T11887] bridge3: entered allmulticast mode [ 239.950629][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1529'. [ 239.977917][T11895] mac80211_hwsim hwsim9 +: renamed from syzkaller0 [ 239.979277][T11893] xt_TCPMSS: Only works on TCP SYN packets [ 240.162669][T11893] bridge_slave_1: left allmulticast mode [ 240.196490][T11893] bridge_slave_1: left promiscuous mode [ 240.215845][T11893] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.250142][T11893] bridge_slave_0: left allmulticast mode [ 240.281441][T11893] bridge_slave_0: left promiscuous mode [ 240.312965][T11893] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.369946][T11893] bond0: (slave bridge0): Releasing backup interface [ 240.403729][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 240.416873][T11904] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 240.557061][T11903] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1532'. [ 240.775652][T11916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 240.868361][T11916] __nla_validate_parse: 2 callbacks suppressed [ 240.868395][T11916] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1537'. [ 240.902545][T11922] netlink: 'syz.3.1538': attribute type 4 has an invalid length. [ 240.918956][T11919] team0: Mode changed to "activebackup" [ 241.368230][T11931] syzkaller0: entered promiscuous mode [ 241.391883][T11931] syzkaller0: entered allmulticast mode [ 241.435367][T11931] tipc: Started in network mode [ 241.454855][T11931] tipc: Node identity ced01ad7b7ce, cluster identity 4711 [ 241.488028][T11946] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1544'. [ 241.510631][T11931] tipc: Enabled bearer , priority 0 [ 241.570924][T11931] tipc: Resetting bearer [ 241.607054][T11930] tipc: Resetting bearer [ 241.726812][T11930] tipc: Disabling bearer [ 242.241377][T11968] lo: entered promiscuous mode [ 242.266494][T11968] tunl0: entered promiscuous mode [ 242.300642][T11968] gre0: entered promiscuous mode [ 242.317657][T11968] gretap0: entered promiscuous mode [ 242.355798][T11968] erspan0: entered promiscuous mode [ 242.389553][T11968] ip_vti0: entered promiscuous mode [ 242.407807][T11968] ip6_vti0: entered promiscuous mode [ 242.589613][T11968] sit0: entered promiscuous mode [ 242.597122][T11968] ip6tnl0: entered promiscuous mode [ 242.614697][T11968] ip6gre0: entered promiscuous mode [ 242.641249][T11968] syz_tun: entered promiscuous mode [ 242.663176][T11968] ip6gretap0: entered promiscuous mode [ 242.680841][T11968] bond0: entered promiscuous mode [ 242.700053][T11968] team0: entered promiscuous mode [ 242.709612][T11968] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.738226][T11968] nlmon0: entered promiscuous mode [ 242.751041][T11968] batadv0: entered promiscuous mode [ 242.766947][T11968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.785073][T11968] vxcan0: entered promiscuous mode [ 242.802904][T11968] vxcan1: entered promiscuous mode [ 242.820444][T11968] veth0: entered promiscuous mode [ 242.838577][T11968] veth1: entered promiscuous mode [ 242.856498][T11968] wg0: entered promiscuous mode [ 242.875295][T11968] wg1: entered promiscuous mode [ 242.892402][T11968] wg2: entered promiscuous mode [ 242.908517][T11968] veth1_to_bridge: entered promiscuous mode [ 242.929249][T11968] bridge_slave_1: entered promiscuous mode [ 242.955005][T11968] veth0_to_bond: entered promiscuous mode [ 242.980587][T11968] bond_slave_0: entered promiscuous mode [ 243.014867][T11968] veth1_to_bond: entered promiscuous mode [ 243.037639][T11968] bond_slave_1: entered promiscuous mode [ 243.058674][T11968] veth0_to_team: entered promiscuous mode [ 243.086973][T11968] team_slave_0: entered promiscuous mode [ 243.094170][T11968] C: entered promiscuous mode [ 243.110438][T11968] team_slave_1: entered promiscuous mode [ 243.128278][T11968] veth0_to_batadv: entered promiscuous mode [ 243.141347][T11968] batadv_slave_0: entered promiscuous mode [ 243.150304][T11968] veth1_to_batadv: entered promiscuous mode [ 243.162327][T11968] batadv_slave_1: entered promiscuous mode [ 243.181456][T11968] xfrm0: entered promiscuous mode [ 243.190111][T11968] veth0_to_hsr: entered promiscuous mode [ 243.202657][T11968] veth1_to_hsr: entered promiscuous mode [ 243.212460][T11968] hsr0: entered promiscuous mode [ 243.222526][T11968] veth1_virt_wifi: entered promiscuous mode [ 243.230299][T11968] veth0_virt_wifi: entered promiscuous mode [ 243.240349][T11968] virt_wifi0: entered promiscuous mode [ 243.250493][T11968] vlan0: entered promiscuous mode [ 243.257440][T11968] vlan1: entered promiscuous mode [ 243.264139][T11968] macvlan0: entered promiscuous mode [ 243.271561][T11968] macvlan1: entered promiscuous mode [ 243.281858][T11968] ipvlan0: entered promiscuous mode [ 243.296155][T11968] ipvlan1: entered promiscuous mode [ 243.303715][T11968] geneve0: entered promiscuous mode [ 243.312631][T11968] geneve1: entered promiscuous mode [ 243.322396][T11968] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 243.335148][T11968] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 243.368406][T11968] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 243.401405][T11968] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 243.417892][T11968] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 243.429579][T11968] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 243.442688][T11968] sit1: entered promiscuous mode [ 243.451805][T11968] bond1: entered promiscuous mode [ 243.460679][T11968] bond2: entered promiscuous mode [ 243.467489][T11968] ip6gre1: entered promiscuous mode [ 243.473995][T11968] bond3: entered promiscuous mode [ 243.481190][T11968] bond4: entered promiscuous mode [ 243.488760][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1555'. [ 243.502238][T11968] gtp0: entered promiscuous mode [ 243.510061][T11968] bond5: entered promiscuous mode [ 243.520387][T11968] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 243.593720][T11977] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 243.597062][T11991] netlink: 121 bytes leftover after parsing attributes in process `syz.2.1555'. [ 243.752103][T11995] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.902414][T12003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1558'. [ 243.922490][T11995] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.035414][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1557'. [ 244.069622][T11998] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1556'. [ 244.529182][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1564'. [ 244.725443][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1567'. [ 245.016910][T12033] 8021q: adding VLAN 0 to HW filter on device bond4 [ 245.382617][T12060] xt_hashlimit: size too large, truncated to 1048576 [ 245.996280][T12074] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1576'. [ 246.269250][T12085] netdevsim netdevsim1 €Â: renamed from netdevsim0 (while UP) [ 246.447947][T12089] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.717781][T12075] netlink: 'syz.1.1578': attribute type 2 has an invalid length. [ 246.736923][T12075] : entered promiscuous mode [ 246.748093][T12075] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1578'. [ 246.823266][T12105] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1585'. [ 246.857801][T12105] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 246.897175][T12107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1586'. [ 246.931012][T12107] lo speed is unknown, defaulting to 1000 [ 246.943142][T12107] lo speed is unknown, defaulting to 1000 [ 246.965763][T12107] lo speed is unknown, defaulting to 1000 [ 246.977469][T12107] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 246.992296][T12107] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 247.025611][T12107] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 247.039537][T12113] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1588'. [ 247.044607][T12107] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 247.061317][T12110] x_tables: ip_tables: SYNPROXY target: used from hooks POSTROUTING, but only usable from INPUT/FORWARD [ 247.105097][T12110] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1587'. [ 247.129828][T12107] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 247.207826][T12107] lo speed is unknown, defaulting to 1000 [ 247.217996][T12107] lo speed is unknown, defaulting to 1000 [ 247.231524][T12107] lo speed is unknown, defaulting to 1000 [ 247.258275][T12107] lo speed is unknown, defaulting to 1000 [ 247.281428][T12107] lo speed is unknown, defaulting to 1000 [ 247.306794][T12108] smc: removing ib device syz1 [ 247.606684][T12108] smbdirect: ib_dev[syz1] removed [ 249.100144][T12127] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 249.107439][T12127] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 249.152421][T12127] vlan2: left promiscuous mode [ 249.167070][T12127] bond1: left promiscuous mode [ 249.174148][T12127] batadv1: left promiscuous mode [ 249.183413][T12127] vlan2: left allmulticast mode [ 249.191990][T12127] bond1: left allmulticast mode [ 249.197832][T12127] batadv1: left allmulticast mode [ 249.231568][T12127] veth5: left allmulticast mode [ 249.245229][T12127] tipc: Resetting bearer [ 249.258255][T12127] syzkaller0: left promiscuous mode [ 249.263732][T12127] syzkaller0: left allmulticast mode [ 249.272502][T12127] bond5: left promiscuous mode [ 249.346515][T12132] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 249.377012][T12132] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 249.416223][T12132] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 249.601782][T12145] tipc: Enabling of bearer rejected, already enabled [ 250.231532][T12140] syzkaller1: entered promiscuous mode [ 250.241075][T12168] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 250.255333][T12168] SET target dimension over the limit! [ 250.258643][T12140] syzkaller1: entered allmulticast mode [ 250.414205][T12172] netlink: 288 bytes leftover after parsing attributes in process `syz.1.1602'. [ 250.540332][T12174] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1603'. [ 250.609329][T12177] netlink: 1347 bytes leftover after parsing attributes in process `syz.2.1604'. [ 250.611696][T12178] netlink: 'syz.1.1605': attribute type 1 has an invalid length. [ 250.857142][T12178] bond5: entered promiscuous mode [ 250.863200][T12178] bond5: entered allmulticast mode [ 250.869697][T12178] 8021q: adding VLAN 0 to HW filter on device bond5 [ 250.931589][T12183] erspan1: entered allmulticast mode [ 251.007911][T12183] bond5: (slave erspan1): making interface the new active one [ 251.034656][T12183] erspan1: entered promiscuous mode [ 251.110253][T12178] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1605'. [ 251.140459][T12183] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 251.203239][T12183] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1605'. [ 251.230054][T12188] syz.1.1605 (12188) used obsolete PPPIOCDETACH ioctl [ 251.302130][T12199] vxcan2: entered promiscuous mode [ 251.324174][T12199] vxcan2: entered allmulticast mode [ 251.337726][T12205] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 251.547875][T12205] bond12: (slave dummy0): making interface the new active one [ 251.563895][T12205] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 251.646569][T12208] bond12: (slave dummy0): Releasing active interface [ 251.670485][T12208] bridge_slave_0: left allmulticast mode [ 251.680884][T12208] bridge_slave_0: left promiscuous mode [ 251.687366][T12208] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.707002][T12208] bridge_slave_1: left allmulticast mode [ 251.733488][T12208] bridge_slave_1: left promiscuous mode [ 251.761477][T12208] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.807225][T12208] bond0: (slave bond_slave_0): Releasing backup interface [ 251.826772][T12223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1614'. [ 251.863740][T12208] bond0: (slave bond_slave_1): Releasing backup interface [ 251.892658][T12208] team0: Port device team_slave_0 removed [ 251.902027][T12208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.911477][T12208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.923788][T12226] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1616'. [ 251.934103][T12208] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 251.964956][T12229] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1615'. [ 252.007988][T12215] ip6erspan0: entered allmulticast mode [ 252.192861][T12230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1614'. [ 252.317562][T12217] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.360513][T12238] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 252.375145][T12238] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 252.425826][T12238] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 252.471366][T12245] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1619'. [ 252.654934][T12250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 252.800473][T12261] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1622'. [ 252.911456][T12266] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1622'. [ 252.980970][T12267] x_tables: duplicate underflow at hook 1 [ 253.182554][T12280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 253.577706][T12294] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 254.316269][ T1124] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 255.727730][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.734177][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.131549][T12327] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 257.408163][T12364] __nla_validate_parse: 4 callbacks suppressed [ 257.408182][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1650'. [ 257.492323][T12364] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1650'. [ 257.522215][T12372] netlink: 'syz.3.1654': attribute type 1 has an invalid length. [ 257.641796][T12376] gretap1: entered allmulticast mode [ 257.678879][T12376] bond6: (slave gretap1): making interface the new active one [ 257.711695][T12376] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 257.726765][T12377] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1655'. [ 257.762644][T12382] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1657'. [ 258.063617][T12398] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1661'. [ 258.188741][T12405] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1663'. [ 258.329703][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1664'. [ 258.350586][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1664'. [ 258.405472][ T6165] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.416129][T12407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1664'. [ 258.426742][ T6165] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.436809][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1664'. [ 258.451540][ T6165] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.480309][ T6165] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 258.985886][T12441] openvswitch: netlink: Message has 512 unknown bytes. [ 259.081184][T12444] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 259.659427][T12476] netlink: 'syz.0.1684': attribute type 2 has an invalid length. [ 259.675289][T12476] ´: entered promiscuous mode [ 260.057545][T12469] vxcan1: entered allmulticast mode [ 262.382953][T12462] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.415229][T12488] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 262.999751][T12510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 263.143025][T12520] __nla_validate_parse: 7 callbacks suppressed [ 263.143071][T12520] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1694'. [ 263.242363][T12510] 8021q: adding VLAN 0 to HW filter on device bond13 [ 263.492505][T12540] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 263.806995][T12549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1700'. [ 263.899014][T12531] xfrm0: entered promiscuous mode [ 263.953538][T12531] team0: Port device xfrm0 added [ 264.225604][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1703'. [ 264.312567][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1706'. [ 264.396506][T12582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1707'. [ 264.947093][T12592] bond0: entered promiscuous mode [ 265.060917][T12592] bond0: left promiscuous mode [ 265.087801][T12610] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1710'. [ 265.151372][T12599] bond0: entered promiscuous mode [ 265.180837][T12599] bond0: left promiscuous mode [ 265.297429][T12610] bridge0: port 3(macvlan2) entered disabled state [ 265.307337][T12610] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.314763][T12610] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.614774][T12628] netlink: 'syz.3.1716': attribute type 2 has an invalid length. [ 265.677302][T12627] netlink: 'syz.3.1716': attribute type 2 has an invalid length. [ 265.867133][T12624] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 265.931424][T12639] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1718'. [ 265.945399][T12634] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 265.948496][T12639] Bluetooth: MGMT ver 1.23 [ 265.972872][T12637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1717'. [ 266.008895][ T29] audit: type=1800 audit(1784148309.601:14): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1717" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1741 res=0 errno=0 [ 266.029226][T12642] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.1719'. [ 266.286284][T12652] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20018 [ 266.292244][T12650] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 266.520372][ T29] audit: type=1800 audit(1784148310.111:15): pid=12643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1718" name="memory.events" dev="tmpfs" ino=1746 res=0 errno=0 [ 266.917881][T12666] sctp: [Deprecated]: syz.4.1723 (pid 12666) Use of int in max_burst socket option. [ 266.917881][T12666] Use struct sctp_assoc_value instead [ 267.193086][T12677] netlink: 'syz.4.1727': attribute type 9 has an invalid length. [ 267.236339][T12681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1725'. [ 267.585623][T12674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.862399][T12703] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 268.387994][T12731] __nla_validate_parse: 5 callbacks suppressed [ 268.388013][T12731] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1743'. [ 268.427498][T12729] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1743'. [ 268.805260][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1747'. [ 268.848919][T12742] bond0: entered promiscuous mode [ 268.870664][T12742] bond_slave_0: entered promiscuous mode [ 268.887526][T12742] bond_slave_1: entered promiscuous mode [ 268.913539][T12742] bond0: left promiscuous mode [ 268.919965][T12742] bond_slave_0: left promiscuous mode [ 268.927469][T12742] bond_slave_1: left promiscuous mode [ 268.983103][T12746] bond0: entered promiscuous mode [ 268.991721][T12746] bond_slave_0: entered promiscuous mode [ 269.000050][T12746] bond_slave_1: entered promiscuous mode [ 269.010876][T12746] bond0: left promiscuous mode [ 269.014986][T12754] netlink: 'syz.4.1748': attribute type 1 has an invalid length. [ 269.018300][T12746] bond_slave_0: left promiscuous mode [ 269.031769][T12746] bond_slave_1: left promiscuous mode [ 269.064470][T12745] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 269.328681][T12765] xt_hashlimit: size too large, truncated to 1048576 [ 269.530903][T12776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 269.768317][T12788] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1758'. [ 270.058204][T12799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1761'. [ 270.225158][T12807] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1764'. [ 270.385228][T12809] ip6erspan0: entered allmulticast mode [ 270.872177][T12840] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1770'. [ 270.925852][T12840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1770'. [ 271.322446][T12855] netlink: 'syz.1.1774': attribute type 1 has an invalid length. [ 271.699236][T12858] ip6erspan0: left allmulticast mode [ 272.034684][T12876] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1780'. [ 272.295421][T12886] netlink: 'syz.4.1783': attribute type 9 has an invalid length. [ 272.696012][T12885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.728299][T12898] netlink: 'syz.0.1787': attribute type 1 has an invalid length. [ 272.921604][T12907] batadv0: left promiscuous mode [ 272.939589][T12907] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 273.069636][T12912] nbd: must specify a size in bytes for the device [ 273.162619][T12917] netlink: 'syz.4.1793': attribute type 11 has an invalid length. [ 273.309027][T12913] syzkaller0: entered promiscuous mode [ 273.325582][T12913] syzkaller0: entered allmulticast mode [ 273.339985][T12916] tipc: Enabled bearer , priority 10 [ 273.476461][T12913] tipc: Enabled bearer , priority 0 [ 273.548716][T12913] tipc: Resetting bearer [ 273.649348][T12911] tipc: Resetting bearer [ 273.720353][T12911] tipc: Disabling bearer [ 273.744776][T12944] netlink: 'syz.4.1796': attribute type 1 has an invalid length. [ 273.881682][T12950] netlink: 'syz.3.1798': attribute type 9 has an invalid length. [ 273.891757][T12949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.057412][T12964] __nla_validate_parse: 6 callbacks suppressed [ 274.057445][T12964] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1796'. [ 274.087043][T12947] veth9: entered allmulticast mode [ 274.136250][T12947] bond13: (slave veth9): Enslaving as an active interface with a down link [ 274.220359][T12974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1803'. [ 274.441406][T12980] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1804'. [ 274.542395][T12944] veth0_to_bond: left promiscuous mode [ 274.560162][T12944] bond13: (slave veth0_to_bond): making interface the new active one [ 274.573412][T12944] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 274.776763][T12987] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1806'. [ 274.977710][T12980] nbd9: detected capacity change from 0 to 7 [ 275.012074][ T5629] block nbd9: Wrong magic (0x25609513) [ 275.019933][ T5627] block nbd9: Wrong magic (0x0) [ 275.023183][ T5620] block nbd9: Receive control failed (result -32) [ 275.025252][ T5631] block nbd9: Receive control failed (result -32) [ 275.040600][ T5633] block nbd9: Receive control failed (result -32) [ 275.054012][ T5642] Buffer I/O error on dev nbd9, logical block 3, async page read [ 275.063935][ T11] block nbd9: Dead connection, failed to find a fallback [ 275.072962][ T11] block nbd9: shutting down sockets [ 275.079282][ T11] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 275.092963][ T11] Buffer I/O error on dev nbd9, logical block 2, async page read [ 275.386886][T13009] macvlan3: entered allmulticast mode [ 275.398876][T13015] netlink: 'syz.0.1811': attribute type 4 has an invalid length. [ 275.422994][T13009] batadv_slave_1: entered allmulticast mode [ 275.448151][T13024] netlink: 'syz.0.1811': attribute type 4 has an invalid length. [ 275.470772][T13009] batadv_slave_1: left allmulticast mode [ 275.862618][T13038] syzkaller0: left promiscuous mode [ 275.878709][T13038] syzkaller0: left allmulticast mode [ 275.896383][T13038] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1820'. [ 275.941757][T13041] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.990682][T13046] netlink: 'syz.0.1822': attribute type 11 has an invalid length. [ 276.037774][T13046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1822'. [ 276.050096][T13049] netlink: 'syz.0.1822': attribute type 11 has an invalid length. [ 276.064092][T13049] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1822'. [ 276.590417][T13029] lo speed is unknown, defaulting to 1000 [ 276.590906][T13063] netlink: 280 bytes leftover after parsing attributes in process `syz.4.1826'. [ 277.053608][T13078] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1831'. [ 277.080812][T13078] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 277.091104][T13078] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 277.139426][T13078] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1831'. [ 277.573789][T13089] syzkaller0: entered promiscuous mode [ 277.618444][T13089] syzkaller0: entered allmulticast mode [ 277.670965][T13099] tipc: Enabled bearer , priority 0 [ 277.725621][T13089] syzkaller0: mtu greater than device maximum [ 277.873810][T13086] tipc: Resetting bearer [ 277.921852][T13086] tipc: Disabling bearer [ 277.991990][T13112] bridge_slave_1: entered allmulticast mode [ 278.210554][T13125] netlink: 'syz.0.1840': attribute type 32 has an invalid length. [ 279.061448][T13175] netlink: 'syz.2.1848': attribute type 10 has an invalid length. [ 279.192605][T13183] __nla_validate_parse: 4 callbacks suppressed [ 279.192623][T13183] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1848'. [ 279.607663][T13189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1853'. [ 280.410927][T13154] lo speed is unknown, defaulting to 1000 [ 280.458927][T13219] xt_bpf: check failed: parse error [ 280.491908][T13219] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1862'. [ 280.857928][T13236] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1867'. [ 281.830508][T13259] No such timeout policy "syz1" [ 281.841057][T13260] No such timeout policy "syz1" [ 281.848996][T13260] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.871937][T13259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 281.896372][T13259] netlink: zone id is out of range [ 281.928299][T13259] netlink: zone id is out of range [ 281.933379][T13247] gretap0: left promiscuous mode [ 281.942358][T13259] netlink: zone id is out of range [ 281.959578][T13259] netlink: zone id is out of range [ 281.978222][T13259] netlink: zone id is out of range [ 281.983590][T13259] netlink: zone id is out of range [ 281.988961][T13259] netlink: zone id is out of range [ 281.996162][T13259] netlink: zone id is out of range [ 282.001425][T13259] netlink: zone id is out of range [ 282.007802][T13259] netlink: zone id is out of range [ 282.125341][T13262] syzkaller0: entered promiscuous mode [ 282.133529][T13262] syzkaller0: entered allmulticast mode [ 282.149351][T13262] tipc: Enabling of bearer rejected, already enabled [ 282.582689][T13288] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1881'. [ 282.637434][T13295] netlink: 36764 bytes leftover after parsing attributes in process `syz.2.1882'. [ 282.941621][T13305] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1885'. [ 283.006086][T13304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1883'. [ 283.132957][T13313] netlink: 'syz.0.1887': attribute type 4 has an invalid length. [ 283.559219][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1889'. [ 283.718406][T13327] netlink: 'syz.4.1890': attribute type 9 has an invalid length. [ 283.727569][T13327] netlink: 'syz.4.1890': attribute type 5 has an invalid length. [ 283.762373][T13301] lo speed is unknown, defaulting to 1000 [ 284.068187][T13326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1891'. [ 284.253677][T13332] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1892'. [ 284.641456][T13341] bridge_slave_1: left allmulticast mode [ 284.696267][T13341] siw: device registration error -23 [ 285.315679][T13362] pimreg: entered allmulticast mode [ 285.679989][T13373] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1903'. [ 285.720996][T13375] netdevsim netdevsim4 €Â: renamed from netdevsim0 (while UP) [ 285.757264][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1903'. [ 285.798799][T13373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1903'. [ 285.809585][T13375] netlink: 'syz.4.1904': attribute type 2 has an invalid length. [ 286.293313][T13394] netlink: 'syz.1.1909': attribute type 10 has an invalid length. [ 286.373191][T13394] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 286.403667][T13394] team0: Port device netdevsim1 added [ 286.462281][T13402] tipc: Enabling of bearer rejected, already enabled [ 286.502658][T13401] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1911'. [ 286.627194][T13401] hsr_slave_0: left promiscuous mode [ 286.639861][T13401] hsr_slave_1: left promiscuous mode [ 286.727474][T13407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.805709][T13373] pim6reg: left allmulticast mode [ 287.229305][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1920'. [ 287.397941][T13432] bond9: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 287.436470][T13432] bond9 (unregistering): Released all slaves [ 287.574002][T13446] netlink: 'syz.3.1923': attribute type 9 has an invalid length. [ 287.618556][T13444] syzkaller0: entered promiscuous mode [ 287.643074][T13444] syzkaller0: entered allmulticast mode [ 287.681521][T13449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1922'. [ 287.700586][T13445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.711059][T13449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1922'. [ 287.854531][T13456] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1926'. [ 287.880617][T13456] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1926'. [ 288.556324][T13489] bond0 (unregistering): Released all slaves [ 288.858231][T13502] netlink: 'syz.2.1937': attribute type 9 has an invalid length. [ 288.976744][T13500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.550665][T13547] netlink: 'syz.4.1948': attribute type 7 has an invalid length. [ 290.578356][T13547] __nla_validate_parse: 4 callbacks suppressed [ 290.578374][T13547] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1948'. [ 290.608758][T13550] netlink: 'syz.2.1949': attribute type 9 has an invalid length. [ 290.628814][T13547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1948'. [ 290.671940][T13547] hsr1: entered promiscuous mode [ 290.681786][T13549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.741127][T13555] vlan2: entered promiscuous mode [ 290.793120][T13555] bond0: entered promiscuous mode [ 290.809615][T13555] bond_slave_0: entered promiscuous mode [ 290.958225][T13564] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1954'. [ 290.982790][T13561] syzkaller0: entered promiscuous mode [ 290.991207][T13561] syzkaller0: entered allmulticast mode [ 291.017561][T13564] netlink: 'syz.4.1954': attribute type 21 has an invalid length. [ 291.053934][T13564] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1954'. [ 291.089638][T13564] netlink: 'syz.4.1954': attribute type 5 has an invalid length. [ 291.114550][T13564] netlink: 'syz.4.1954': attribute type 6 has an invalid length. [ 291.144166][T13564] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1954'. [ 291.169677][T13522] lo speed is unknown, defaulting to 1000 [ 291.171447][T13570] bridge_slave_0: default FDB implementation only supports local addresses [ 291.212499][T13570] netlink: 'syz.0.1956': attribute type 2 has an invalid length. [ 291.232272][T13570] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1956'. [ 291.298032][T13576] 8021q: VLANs not supported on ip6_vti0 [ 291.330888][T13570] netlink: 'syz.0.1956': attribute type 1 has an invalid length. [ 291.349037][T13570] netlink: 'syz.0.1956': attribute type 2 has an invalid length. [ 291.618142][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1960'. [ 291.709411][T13592] netlink: 'syz.2.1963': attribute type 9 has an invalid length. [ 291.930444][T13591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 291.998402][T13590] 8021q: adding VLAN 0 to HW filter on device bond15 [ 292.046119][T13598] bond15: entered promiscuous mode [ 292.068730][T13598] bond15: entered allmulticast mode [ 292.552594][T13626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'. [ 292.729079][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1971'. [ 292.861782][T13645] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1972'. [ 293.323415][T13653] veth0: entered promiscuous mode [ 293.357052][T13653] veth0: left promiscuous mode [ 295.534046][T13634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 295.612472][T13659] netlink: 'syz.0.1976': attribute type 9 has an invalid length. [ 295.636464][T13659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.897505][T13673] __nla_validate_parse: 1 callbacks suppressed [ 295.897523][T13673] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1980'. [ 296.090798][T13687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1981'. [ 296.116300][T13691] netlink: 'syz.3.1983': attribute type 1 has an invalid length. [ 296.161532][T13687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1981'. [ 296.334796][T13705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1981'. [ 296.419829][T13691] bond7: entered promiscuous mode [ 296.439161][T13691] 8021q: adding VLAN 0 to HW filter on device bond7 [ 296.470923][T13714] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1986'. [ 297.409776][T13748] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1993'. [ 297.551343][T13754] netlink: 'syz.0.1994': attribute type 2 has an invalid length. [ 297.801400][T13760] 8021q: VLANs not supported on vcan0 [ 298.031827][T13760] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 298.058506][T13760] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 298.094192][T13760] veth0_virt_wifi: entered allmulticast mode [ 298.151535][T13760] veth0_virt_wifi: entered promiscuous mode [ 298.229493][T13760] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 298.237573][T13760] bridge0: port 1(veth0_virt_wifi) entered forwarding state [ 298.249170][T13778] netlink: 'syz.3.2001': attribute type 9 has an invalid length. [ 298.410952][T13786] x_tables: duplicate entry at hook 3 [ 298.502769][T13777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.795359][T13795] x_tables: duplicate underflow at hook 2 [ 298.811464][T13799] syzkaller0: left promiscuous mode [ 298.837739][T13799] syzkaller0: left allmulticast mode [ 299.012501][T13814] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2008'. [ 299.025579][T13814] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2008'. [ 299.062648][T13799] syzkaller0: entered promiscuous mode [ 299.080720][T13799] syzkaller0: entered allmulticast mode [ 299.524524][T13832] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2012'. [ 299.649102][T13836] netlink: 'syz.2.2014': attribute type 9 has an invalid length. [ 299.845353][T13835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.137896][T13822] lo speed is unknown, defaulting to 1000 [ 300.465255][T13867] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2022'. [ 300.506606][T13853] bond16: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 300.630178][T13853] bond16 (unregistering): Released all slaves [ 300.703278][T13860] netlink: 'syz.2.2021': attribute type 4 has an invalid length. [ 300.890205][T13885] netlink: 'syz.2.2027': attribute type 9 has an invalid length. [ 300.967624][T13888] x_tables: duplicate entry at hook 1 [ 301.000292][T13884] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.107363][T13889] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2028'. [ 301.216220][T13892] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2029'. [ 301.220191][T13888] netlink: 'syz.0.2028': attribute type 1 has an invalid length. [ 301.468524][T13912] netlink: 'syz.3.2034': attribute type 5 has an invalid length. [ 302.020323][T13933] netlink: 'syz.1.2039': attribute type 9 has an invalid length. [ 302.130136][T13932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.370373][T13945] xt_hashlimit: max too large, truncated to 1048576 [ 302.381498][T13945] xt_hashlimit: overflow, try lower: 2/0 [ 302.388436][T13944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2042'. [ 302.659363][T13960] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2048'. [ 302.744532][T13963] netlink: 'syz.4.2047': attribute type 1 has an invalid length. [ 302.780718][T13963] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2047'. [ 302.816173][T13963] NCSI netlink: No device for ifindex 0 [ 303.213430][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2052'. [ 303.340834][T13987] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2051'. [ 303.367406][T13987] netlink: 232 bytes leftover after parsing attributes in process `syz.0.2051'. [ 303.382156][T13987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2051'. [ 303.393739][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2051'. [ 303.467291][T13985] tipc: Enabling of bearer rejected, already enabled [ 303.799113][T13999] netlink: 'syz.3.2056': attribute type 7 has an invalid length. [ 305.073471][T14036] tipc: Enabling of bearer rejected, failed to enable media [ 305.190386][T14043] netlink: 'syz.1.2068': attribute type 1 has an invalid length. [ 305.650806][ T11] block nbd9: Connection timed out, retrying (0/5 alive) [ 305.662560][ T11] block nbd9: Connection timed out, retrying (0/5 alive) [ 305.670575][ T11] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.682978][ T11] Buffer I/O error on dev nbd9, logical block 1, async page read [ 305.695037][ T11] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.704205][ T11] Buffer I/O error on dev nbd9, logical block 0, async page read [ 305.715763][ T4948] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.726494][ T4948] Buffer I/O error on dev nbd9, logical block 0, async page read [ 305.737707][ T4948] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.748439][ T4948] Buffer I/O error on dev nbd9, logical block 1, async page read [ 305.758593][ T4948] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.770585][ T4948] Buffer I/O error on dev nbd9, logical block 2, async page read [ 305.777317][ T5642] Buffer I/O error on dev nbd9, logical block 3, async page read [ 305.815063][ T11] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.838802][ T11] Buffer I/O error on dev nbd9, logical block 0, async page read [ 305.862417][ T11] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.872131][ T11] Buffer I/O error on dev nbd9, logical block 1, async page read [ 305.881858][ T11] I/O error, dev nbd9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.891329][ T11] Buffer I/O error on dev nbd9, logical block 2, async page read [ 305.900968][ T5642] Buffer I/O error on dev nbd9, logical block 3, async page read [ 305.915110][ T11] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.924855][ T11] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 305.949132][ T5642] ldm_validate_partition_table(): Disk read failed. [ 305.978520][ T5642] Dev nbd9: unable to read RDB block 0 [ 305.993079][ T5642] nbd9: unable to read partition table [ 306.007939][ T5642] nbd9: partition table beyond EOD, truncated [ 306.060424][T14053] syzkaller1: entered promiscuous mode [ 306.070413][T14053] syzkaller1: entered allmulticast mode [ 306.079351][ T5642] ldm_validate_partition_table(): Disk read failed. [ 306.110888][ T5642] Dev nbd9: unable to read RDB block 0 [ 306.136056][ T5642] nbd9: unable to read partition table [ 306.145916][ T5642] nbd9: partition table beyond EOD, truncated [ 306.746997][T14116] __nla_validate_parse: 9 callbacks suppressed [ 306.747017][T14116] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2078'. [ 306.753280][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057d8cc00: rx timeout, send abort [ 306.819645][T14123] netlink: 'syz.0.2083': attribute type 5 has an invalid length. [ 307.252483][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057d8c400: rx timeout, send abort [ 307.263193][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057d8cc00: abort rx timeout. Force session deactivation [ 307.291788][T14140] netlink: 83 bytes leftover after parsing attributes in process `syz.3.2089'. [ 307.518332][T14151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2092'. [ 307.762777][ C0] vcan0: j1939_tp_rxtimer: 0xffff888057d8c400: abort rx timeout. Force session deactivation [ 308.018275][T14178] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2096'. [ 308.803962][T14195] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 308.830320][T14195] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 308.855964][T14195] net_ratelimit: 39 callbacks suppressed [ 308.855991][T14195] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 308.878857][T14197] openvswitch: netlink: Flow key attr not present in new flow. [ 308.913002][T14198] openvswitch: netlink: Flow key attr not present in new flow. [ 309.104819][T14201] block nbd10: server does not support multiple connections per device. [ 309.118064][T14201] block nbd10: shutting down sockets [ 309.496768][T14219] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2107'. [ 309.786596][T14237] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2108'. [ 309.829259][T14241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2109'. [ 309.859832][T14243] tipc: Can't bind to reserved service type 2 [ 310.464619][T14253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2111'. [ 310.492131][T14253] netlink: 'syz.2.2111': attribute type 1 has an invalid length. [ 310.514624][T14253] netlink: 'syz.2.2111': attribute type 2 has an invalid length. [ 310.602244][T14253] bond0: entered promiscuous mode [ 310.624968][T14253] bond0: left promiscuous mode [ 310.743494][T14255] bond0: entered promiscuous mode [ 310.781968][T14255] bond0: left promiscuous mode [ 310.858032][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2113'. [ 311.038691][T14232] lo speed is unknown, defaulting to 1000 [ 311.525537][T14282] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.613786][T14300] netlink: 'syz.1.2122': attribute type 9 has an invalid length. [ 311.800313][T14298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.960932][T14296] syzkaller0: entered promiscuous mode [ 312.002039][T14296] syzkaller0: entered allmulticast mode [ 312.251444][T14316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2124'. [ 312.270244][T14316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2124'. [ 315.616148][T14339] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2131'. [ 315.668877][T14341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2132'. [ 315.801775][T14344] netlink: 'syz.0.2134': attribute type 9 has an invalid length. [ 315.878083][T14343] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.882571][T14345] lo: left promiscuous mode [ 315.942603][T14351] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2136'. [ 315.961275][T14345] tunl0: left promiscuous mode [ 315.985232][T14345] gre0: left promiscuous mode [ 316.019373][T14345] erspan0: left promiscuous mode [ 316.032977][T14345] erspan0: left allmulticast mode [ 316.041864][T14345] ip_vti0: left promiscuous mode [ 316.057163][T14345] ip6_vti0: left promiscuous mode [ 316.070146][T14345] sit0: left promiscuous mode [ 316.084194][T14345] ip6tnl0: left promiscuous mode [ 316.099345][T14345] ip6gre0: left promiscuous mode [ 316.103401][T14360] netlink: 'syz.3.2137': attribute type 11 has an invalid length. [ 316.114439][T14360] netlink: 140 bytes leftover after parsing attributes in process `syz.3.2137'. [ 316.124798][T14345] syz_tun: left promiscuous mode [ 316.133374][T14345] ip6gretap0: left promiscuous mode [ 316.149993][T14345] bridge0: left promiscuous mode [ 316.158320][T14345] bridge0: left allmulticast mode [ 316.174500][T14345] team0: left promiscuous mode [ 316.192889][T14345] nlmon0: left promiscuous mode [ 316.202725][T14345] vxcan0: left promiscuous mode [ 316.219358][T14345] vxcan1: left promiscuous mode [ 316.233701][T14345] veth0: left promiscuous mode [ 316.244744][T14345] veth1: left promiscuous mode [ 316.270564][T14345] wg0: left promiscuous mode [ 316.283701][T14345] wg1: left promiscuous mode [ 316.299684][T14345] wg2: left promiscuous mode [ 316.316067][T14345] veth1_to_bridge: left promiscuous mode [ 316.332606][T14345] bridge_slave_1: left promiscuous mode [ 316.362962][T14345] bond_slave_0: left promiscuous mode [ 316.380329][T14345] veth0_to_team: left promiscuous mode [ 316.395123][T14345] team_slave_0: left promiscuous mode [ 316.410439][T14345] C: left promiscuous mode [ 316.427064][T14345] team_slave_1: left promiscuous mode [ 316.440123][T14345] veth0_to_batadv: left promiscuous mode [ 316.470808][T14345] batadv_slave_0: left promiscuous mode [ 316.489994][T14345] veth1_to_batadv: left promiscuous mode [ 316.512490][T14345] batadv_slave_1: left promiscuous mode [ 316.534428][T14345] xfrm0: left promiscuous mode [ 316.547490][T14345] veth0_to_hsr: left promiscuous mode [ 316.579719][T14345] veth1_to_hsr: left promiscuous mode [ 316.629929][T14345] hsr0: left promiscuous mode [ 316.658180][T14345] veth1_virt_wifi: left promiscuous mode [ 316.682038][T14345] veth0_virt_wifi: left promiscuous mode [ 316.708721][T14345] virt_wifi0: left promiscuous mode [ 316.733118][T14345] vlan0: left promiscuous mode [ 316.751310][T14345] vlan1: left promiscuous mode [ 316.768567][T14345] macvlan0: left promiscuous mode [ 316.805966][T14345] macvlan1: left promiscuous mode [ 316.822705][T14345] ipvlan0: left promiscuous mode [ 316.875036][T14345] ipvlan1: left promiscuous mode [ 316.897090][T14345] geneve0: left promiscuous mode [ 316.922391][T14345] geneve1: left promiscuous mode [ 316.941818][T14345] netdevsim netdevsim4 €Â: left allmulticast mode [ 316.954812][T14345] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 316.969006][T14345] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 316.988353][T14345] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 317.027366][T14345] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 317.055492][T14345] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 317.070975][T14345] sit1: left promiscuous mode [ 317.126964][T14345] bond1: left promiscuous mode [ 317.142073][T14345] bond2: left promiscuous mode [ 317.151766][T14345] ip6gre1: left promiscuous mode [ 317.167271][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.173726][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.183329][T14345] bond3: left promiscuous mode [ 317.189134][T14345] bond3: left allmulticast mode [ 317.197746][T14345] bond4: left promiscuous mode [ 317.205145][T14345] gtp0: left promiscuous mode [ 317.213835][T14345] bond5: left promiscuous mode [ 317.221117][T14345] bond6: left promiscuous mode [ 317.229195][T14345] geneve2: left promiscuous mode [ 317.236051][T14345] bond7: left promiscuous mode [ 317.240886][T14345] bond7: left allmulticast mode [ 317.247186][T14345] bond10: left promiscuous mode [ 317.252100][T14345] ip6gre2: left promiscuous mode [ 317.379783][T14345] bridge3: left allmulticast mode [ 317.404842][T14345] veth9: left allmulticast mode [ 317.416961][T14345] hsr1: left promiscuous mode [ 317.501766][ T1124] netdevsim netdevsim4 €Â: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.530708][ T1124] netdevsim netdevsim4 €Â: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.641350][ T6160] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.673649][ T6160] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.703377][ T6160] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.721358][ T6160] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.732410][ T6160] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 317.749944][ T6160] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.834667][T14371] syzkaller0: left promiscuous mode [ 317.880525][T14371] syzkaller0: left allmulticast mode [ 317.925492][T14379] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2143'. [ 318.233948][T14387] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2145'. [ 318.357510][T14388] syzkaller0: entered promiscuous mode [ 318.374897][T14388] syzkaller0: entered allmulticast mode [ 318.477653][T14370] lo speed is unknown, defaulting to 1000 [ 318.546518][T14372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.696568][T14392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2146'. [ 318.885724][T14396] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2148'. [ 319.225530][T14377] lo speed is unknown, defaulting to 1000 [ 319.536427][T11410] IPVS: starting estimator thread 0... [ 319.541418][T14416] netlink: 'syz.2.2153': attribute type 1 has an invalid length. [ 319.645392][T14417] IPVS: using max 40 ests per chain, 96000 per kthread [ 319.890212][T14413] veth11: entered allmulticast mode [ 319.937330][T14416] 8021q: adding VLAN 0 to HW filter on device bond9 [ 320.231343][T14427] netlink: 'syz.2.2154': attribute type 4 has an invalid length. [ 320.272826][T14427] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2154'. [ 320.482747][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 320.995544][T14432] tipc: Resetting bearer [ 321.220406][T14432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.503461][T14432] tipc: Resetting bearer [ 321.596339][T14432] batadv0: left allmulticast mode [ 321.652378][ T6160] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.697706][ T6160] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.732939][ T6160] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.767871][ T6160] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.172505][T14485] netlink: 'syz.1.2168': attribute type 21 has an invalid length. [ 322.199006][T14485] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2168'. [ 322.217892][T14485] netlink: 'syz.1.2168': attribute type 4 has an invalid length. [ 322.226486][T14485] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2168'. [ 322.268945][T14485] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2168'. [ 322.674112][T14515] batman_adv: batadv0: Adding interface: ip6gretap1 [ 322.705306][T14515] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.734847][T14515] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 322.749876][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2177'. [ 322.901690][T14524] netlink: 'syz.3.2178': attribute type 1 has an invalid length. [ 322.942178][T14524] netlink: 228 bytes leftover after parsing attributes in process `syz.3.2178'. [ 323.199138][T14537] netlink: 'syz.1.2182': attribute type 1 has an invalid length. [ 323.243628][T14541] "syz.3.2184" (14541) uses obsolete ecb(arc4) skcipher [ 323.379205][T14551] netlink: 'syz.0.2186': attribute type 1 has an invalid length. [ 323.406766][T14537] 8021q: adding VLAN 0 to HW filter on device bond7 [ 323.489835][T14548] veth25: entered allmulticast mode [ 323.542429][T14548] bond7: (slave veth25): Enslaving as an active interface with a down link [ 323.575382][T14551] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 323.598811][T14553] bond3: (slave veth0_to_bond): Releasing active interface [ 323.633723][T14567] xt_connbytes: Forcing CT accounting to be enabled [ 323.658946][T14567] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2188'. [ 323.726425][T14553] bond7: (slave veth0_to_bond): making interface the new active one [ 323.759295][T14553] veth0_to_bond: entered promiscuous mode [ 323.768565][T14553] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 323.808010][T14537] macvlan2: entered promiscuous mode [ 323.821119][T14537] macvlan2: entered allmulticast mode [ 323.837930][T14537] bond7: entered promiscuous mode [ 323.859624][T14537] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 323.872951][T14537] bond7: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 323.919086][T14537] bond7: left promiscuous mode [ 324.175539][T14598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2194'. [ 324.280934][T14602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2196'. [ 324.290789][T14603] netlink: 324 bytes leftover after parsing attributes in process `syz.1.2194'. [ 324.460569][T14608] bridge4: entered promiscuous mode [ 324.500322][T14608] bridge4: entered allmulticast mode [ 324.542752][T14608] team0: Port device bridge4 added [ 324.552324][T14613] bridge0: port 1(team0) entered blocking state [ 324.565143][T14613] bridge0: port 1(team0) entered disabled state [ 324.573182][T14613] team0: entered allmulticast mode [ 324.585669][T14613] team0: left allmulticast mode [ 324.614205][T14620] tipc: Enabled bearer , priority 0 [ 324.644592][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2200'. [ 324.668197][T14614] syzkaller0: entered promiscuous mode [ 324.682899][T14614] syzkaller0: entered allmulticast mode [ 324.703659][T14616] netlink: 'syz.1.2200': attribute type 5 has an invalid length. [ 324.790127][T14618] tipc: Resetting bearer [ 324.838826][T14612] tipc: Resetting bearer [ 324.941053][T14612] tipc: Disabling bearer [ 324.981292][T14570] lo speed is unknown, defaulting to 1000 [ 324.998186][T14634] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2203'. [ 325.031265][T14634] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2203'. [ 325.040690][T14638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2204'. [ 325.076614][T14641] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 325.165054][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.335969][T14653] xt_TPROXY: Can be used only with -p tcp or -p udp [ 325.493670][T14658] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2207'. [ 326.125638][ T8358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.134900][T14657] lo speed is unknown, defaulting to 1000 [ 326.148894][T14683] netlink: 'syz.0.2218': attribute type 11 has an invalid length. [ 326.182539][T14685] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.193098][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.204509][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.213059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.221595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.729958][T14713] netlink: 'syz.2.2227': attribute type 9 has an invalid length. [ 326.849612][T14712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.986069][T14722] ksmbd: Unknown IPC event: 4, ignore. [ 327.228368][T14739] openvswitch: netlink: Missing key (keys=40, expected=80) [ 327.336974][ T7144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.886431][T14765] tipc: Enabling of bearer rejected, already enabled [ 328.219849][T14785] veth1_to_hsr: entered promiscuous mode [ 328.248014][T14785] __nla_validate_parse: 12 callbacks suppressed [ 328.248032][T14785] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2248'. [ 328.995602][T14817] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 329.020225][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2260'. [ 329.057882][T14822] netlink: 'syz.0.2260': attribute type 11 has an invalid length. [ 329.104065][T14822] netlink: 'syz.0.2260': attribute type 4 has an invalid length. [ 329.131912][T14822] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2260'. [ 330.204579][ C1] net_ratelimit: 10 callbacks suppressed [ 330.204599][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.518860][T14899] sctp: [Deprecated]: syz.0.2270 (pid 14899) Use of int in max_burst socket option. [ 330.518860][T14899] Use struct sctp_assoc_value instead [ 330.545689][T14859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.632234][T14859] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.658490][T14859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.773700][T14859] veth1_vlan: left promiscuous mode [ 330.791126][T14859] veth0_vlan: left promiscuous mode [ 330.798982][T14859] veth0_vlan: entered promiscuous mode [ 330.808603][T14859] veth1_vlan: entered promiscuous mode [ 330.819609][T14859] veth1_macvtap: left promiscuous mode [ 330.826788][T14859] veth0_macvtap: left promiscuous mode [ 330.833750][T14859] veth0_macvtap: entered promiscuous mode [ 330.841902][T14859] veth1_macvtap: entered promiscuous mode [ 330.862211][T14859] 8021q: adding VLAN 0 to HW filter on device eth0 [ 330.870725][T14859] 8021q: adding VLAN 0 to HW filter on device eth1 [ 330.879317][T14859] 8021q: adding VLAN 0 to HW filter on device eth2 [ 330.887720][T14859] 8021q: adding VLAN 0 to HW filter on device eth3 [ 330.896697][T14859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 330.905267][T14859] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 330.912968][T14859] A link change request failed with some changes committed already. Interface + may have been left with an inconsistent configuration, please check. [ 330.943248][T14921] tap0: tun_chr_ioctl cmd 2147767511 [ 330.985500][T14925] tap0: tun_chr_ioctl cmd 2147767511 [ 330.997125][ T7144] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.004475][T14867] lo speed is unknown, defaulting to 1000 [ 331.011160][ T7144] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.053217][ T7144] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.061623][ T7144] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.073487][ T7144] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.088699][ T7144] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.141765][ T7144] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 331.182248][ T7144] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.249565][T14940] xt_connbytes: Forcing CT accounting to be enabled [ 331.508601][T14954] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2309'. [ 331.542086][T14954] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2309'. [ 331.718052][T14962] xt_connbytes: Forcing CT accounting to be enabled [ 332.103712][T14983] pim6reg1: entered promiscuous mode [ 332.109527][T14983] pim6reg1: entered allmulticast mode [ 332.205072][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.444595][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.884640][T15025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2341'. [ 333.004485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.013078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.021503][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.164844][ T1124] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.278385][T15045] ip6t_REJECT: ECHOREPLY is not supported [ 333.416006][T15051] sctp: [Deprecated]: syz.4.2356 (pid 15051) Use of int in max_burst socket option. [ 333.416006][T15051] Use struct sctp_assoc_value instead [ 333.532760][T15050] bond8: entered allmulticast mode [ 333.577343][T15057] bond8: (slave macvlan2): Opening slave failed [ 333.772955][T15072] xt_hashlimit: size too large, truncated to 1048576 [ 334.787381][T15125] netlink: 'syz.2.2383': attribute type 8 has an invalid length. [ 334.824143][T15127] syzkaller1: tun_chr_ioctl cmd 3489698833 [ 334.830608][T15127] syzkaller1: tun_chr_ioctl cmd 21731 [ 334.957418][T15135] vlan0: entered promiscuous mode [ 335.076974][ T12] veth0_to_bond: left promiscuous mode [ 335.085324][ T8358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.141272][T15145] veth1_to_bond: entered allmulticast mode [ 335.201360][T15144] veth1_to_bond: left allmulticast mode [ 335.417392][T15161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.446055][T15161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.469816][T15161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.493254][T15161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.514721][T15161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.532160][T15161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.542237][T15161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.551088][T15161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.567261][T15160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.656682][T15177] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.992854][T15200] netlink: 'syz.0.2416': attribute type 19 has an invalid length. [ 336.002126][T15200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2416'. [ 336.106524][T15207] gre1: entered promiscuous mode [ 336.125585][T15210] netlink: 'syz.3.2422': attribute type 9 has an invalid length. [ 336.200546][T15209] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.428512][T15218] tipc: Enabling of bearer rejected, already enabled [ 336.533976][T15228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2430'. [ 336.637607][T15226] netlink: 284 bytes leftover after parsing attributes in process `syz.3.2430'. [ 336.811242][T15242] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2435'. [ 336.811685][T15239] syzkaller0: entered promiscuous mode [ 336.827117][T15246] netlink: 'syz.0.2436': attribute type 9 has an invalid length. [ 336.829980][T15239] syzkaller0: entered allmulticast mode [ 336.868995][T15242] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 336.874721][T15241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.890107][T15245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2437'. [ 337.148791][T15266] xt_hashlimit: size too large, truncated to 1048576 [ 337.817449][T15282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2447'. [ 337.830765][T15280] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2446'. [ 337.998642][T15286] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2448'. [ 338.052471][T15291] netlink: 'syz.3.2450': attribute type 9 has an invalid length. [ 338.140584][T15290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.178602][T15293] netlink: 'syz.0.2451': attribute type 1 has an invalid length. [ 338.366578][T15306] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2451'. [ 340.747771][T15293] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 341.017297][T15325] tipc: Enabled bearer , priority 0 [ 341.068637][T15334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2458'. [ 341.108523][T15322] tipc: Disabling bearer [ 341.126399][T15341] netlink: 'syz.2.2463': attribute type 9 has an invalid length. [ 341.177978][T15340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.268633][T15348] netlink: 'syz.1.2465': attribute type 4 has an invalid length. [ 341.279034][T15348] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2465'. [ 341.331144][T15348] .`: renamed from bond0 (while UP) [ 341.373343][T15345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2462'. [ 341.500678][T15365] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2468'. [ 341.530995][T15368] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2468'. [ 341.562790][T15368] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2468'. [ 341.585056][T15368] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2468'. [ 341.604858][T15368] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2468'. [ 341.624875][T15368] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2468'. [ 341.637692][T15368] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2468'. [ 341.872620][ T29] audit: type=1800 audit(1784148385.461:16): pid=15383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2474" name=20 dev="tmpfs" ino=2584 res=0 errno=0 [ 341.872716][T15386] netlink: 'syz.4.2477': attribute type 9 has an invalid length. [ 341.981116][T15385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.218420][T15392] vlan3: entered allmulticast mode [ 342.227601][T15392] bridge7: entered allmulticast mode [ 342.237752][T15403] dummy0: entered allmulticast mode [ 342.609544][T11418] net_ratelimit: 13 callbacks suppressed [ 342.609562][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.915705][T15433] netlink: 'syz.0.2492': attribute type 33 has an invalid length. [ 343.014549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.023151][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.298082][T15463] xt_hashlimit: size too large, truncated to 1048576 [ 343.316018][T15463] xt_hashlimit: invalid interval [ 343.339834][T15468] xt_hashlimit: size too large, truncated to 1048576 [ 343.354377][T15468] xt_hashlimit: invalid interval [ 343.643409][T15483] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 343.668411][T15483] bond8 (unregistering): Released all slaves [ 343.936832][T15506] team0: Device vlan3 is already an upper device of the team interface [ 344.058414][T15506] team0: Device vlan3 is already an upper device of the team interface [ 344.162305][T15518] netlink: 'syz.2.2520': attribute type 1 has an invalid length. [ 344.173291][T15506] team0: Device vlan3 is already an upper device of the team interface [ 344.226354][T15522] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 344.281187][T15518] bond10: entered promiscuous mode [ 344.310658][T15518] 8021q: adding VLAN 0 to HW filter on device bond10 [ 344.336450][T15506] team0: Device vlan3 is already an upper device of the team interface [ 344.359958][T15530] block nbd10: Unsupported socket: should be TCP or UNIX. [ 344.372488][T15528] 8021q: adding VLAN 0 to HW filter on device bond10 [ 344.386437][T15528] bond10: (slave ipip0): The slave device specified does not support setting the MAC address [ 344.402664][T15528] bond10: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 344.421917][T15528] bond10: (slave ipip0): making interface the new active one [ 344.438756][T15528] ipip0: entered promiscuous mode [ 344.447788][T15528] bond10: (slave ipip0): Enslaving as an active interface with an up link [ 344.474872][T15506] team0: Device vlan3 is already an upper device of the team interface [ 344.577276][T15506] team0: Device vlan3 is already an upper device of the team interface [ 344.630469][T15545] netlink: 'syz.2.2526': attribute type 3 has an invalid length. [ 344.685408][ T6165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 344.687535][T15506] team0: Device vlan3 is already an upper device of the team interface [ 344.801406][T15554] xt_hashlimit: size too large, truncated to 1048576 [ 344.951516][T15534] lo speed is unknown, defaulting to 1000 [ 345.244583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.253860][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.262323][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.270834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.654708][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.986290][T15598] tipc: Enabled bearer , priority 0 [ 345.993627][T15560] lo speed is unknown, defaulting to 1000 [ 346.043739][T15598] tipc: Disabling bearer [ 346.416695][T15622] __nla_validate_parse: 74 callbacks suppressed [ 346.416707][T15622] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2539'. [ 346.534027][T15617] syzkaller1: entered promiscuous mode [ 346.542851][T15617] syzkaller1: entered allmulticast mode [ 347.389981][T15668] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2558'. [ 347.536471][T15680] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2561'. [ 347.595387][T15673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2559'. [ 348.371780][T15709] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 348.386719][T15710] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2570'. [ 348.416539][T15710] netlink: 200 bytes leftover after parsing attributes in process `syz.1.2570'. [ 348.439045][T15713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2571'. [ 348.604552][ C0] net_ratelimit: 1 callbacks suppressed [ 348.604568][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.618671][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.626955][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.656274][T15716] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2572'. [ 348.688220][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.928028][T15743] x_tables: duplicate underflow at hook 1 [ 348.940065][T15744] x_tables: duplicate underflow at hook 1 [ 348.952563][T15745] xt_ecn: cannot match TCP bits for non-tcp packets [ 349.045621][T15747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2578'. [ 349.122066][T15752] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2579'. [ 349.161730][T15752] team0 (unregistering): Port device team_slave_0 removed [ 349.172553][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.199989][T15755] nbd: must specify a device to reconfigure [ 349.215718][T15752] team0 (unregistering): Port device team_slave_1 removed [ 349.227553][T15752] team0 (unregistering): Port device bridge2 removed [ 349.241519][T15752] team0 (unregistering): Port device netdevsim1 removed [ 349.638464][T15773] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.711977][T15792] tipc: Resetting bearer [ 349.726455][T15792] syzkaller0: left promiscuous mode [ 349.727914][T15781] ipt_REJECT: ECHOREPLY no longer supported. [ 349.732686][T15792] syzkaller0: left allmulticast mode [ 349.749774][T15792] vlan0: left allmulticast mode [ 349.754968][T15792] bond0: left allmulticast mode [ 349.759870][T15792] bond_slave_0: left allmulticast mode [ 349.765942][T15792] bond_slave_1: left allmulticast mode [ 349.771832][T15792] bond3: left promiscuous mode [ 349.777087][T15792] bridge9: left promiscuous mode [ 349.782347][T15792] vlan2: left allmulticast mode [ 349.787571][T15792] bond3: left allmulticast mode [ 349.792466][T15792] bridge9: left allmulticast mode [ 349.799855][T15792] vxcan2: left promiscuous mode [ 349.805334][T15792] vxcan2: left allmulticast mode [ 349.805465][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.811082][T15792] gretap1: left allmulticast mode [ 349.824814][T15792] bond7: left promiscuous mode [ 349.947061][T15800] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 349.955421][T15800] bridge0: port 1(macvlan2) entered blocking state [ 349.962283][T15800] bridge0: port 1(macvlan2) entered disabled state [ 349.969885][T15800] macvlan2: entered allmulticast mode [ 349.975368][T15800] batadv0: entered allmulticast mode [ 349.981831][T15800] macvlan2: entered promiscuous mode [ 349.987463][T15800] batadv0: entered promiscuous mode [ 350.177495][T15812] netlink: 'syz.3.2593': attribute type 10 has an invalid length. [ 350.200124][T15812] team0: Port device bridge0 added [ 350.764856][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.085634][T15835] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.096257][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.130423][T15836] tc action pedit 'at' offset 5 out of bounds [ 351.138287][T15836] tc action pedit 'at' offset 5 out of bounds [ 351.144416][T15836] tc action pedit 'at' offset 5 out of bounds [ 351.150543][T15836] tc action pedit 'at' offset 5 out of bounds [ 351.156691][T15836] tc action pedit 'at' offset 5 out of bounds [ 351.162772][T15836] tc action pedit 'at' offset 5 out of bounds [ 351.168924][T15836] tc action pedit 'at' offset 5 out of bounds [ 351.175048][T15836] tc action pedit 'at' offset 5 out of bounds [ 351.181160][T15836] tc action pedit 'at' offset 5 out of bounds [ 351.187701][T15836] tc action pedit 'at' offset 5 out of bounds [ 351.417481][T15845] netlink: 'syz.2.2603': attribute type 19 has an invalid length. [ 351.538581][T15857] Unsupported ieee802154 address type: 0 [ 351.556342][T15856] Unsupported ieee802154 address type: 0 [ 351.604048][T15863] netlink: 'syz.3.2608': attribute type 1 has an invalid length. [ 351.649702][T15863] 8021q: adding VLAN 0 to HW filter on device bond8 [ 351.674774][T15863] vlan3: entered allmulticast mode [ 351.680073][T15863] bond8: entered allmulticast mode [ 351.690655][T15863] __nla_validate_parse: 4 callbacks suppressed [ 351.690671][T15863] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2608'. [ 351.762209][T15863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.828261][T15869] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2611'. [ 351.853967][T15863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 351.933111][T15874] netlink: 'syz.4.2613': attribute type 1 has an invalid length. [ 351.956486][T15877] netlink: 'syz.1.2614': attribute type 1 has an invalid length. [ 351.965140][T15874] bond14: entered promiscuous mode [ 351.965576][T15874] 8021q: adding VLAN 0 to HW filter on device bond14 [ 351.993586][T15877] netlink: 'syz.1.2614': attribute type 2 has an invalid length. [ 352.008983][T15878] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2614'. [ 352.088739][T15881] bond14: (slave bridge4): making interface the new active one [ 352.099970][T15881] bridge4: entered promiscuous mode [ 352.109174][T15881] bond14: (slave bridge4): Enslaving as an active interface with an up link [ 352.121467][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2615'. [ 352.236271][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2617'. [ 352.276013][T15892] netlink: 'syz.2.2619': attribute type 14 has an invalid length. [ 352.283868][T15892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2619'. [ 352.308066][T15892] netlink: 'syz.2.2619': attribute type 14 has an invalid length. [ 352.317650][T15892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2619'. [ 352.358600][T15897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2620'. [ 352.511330][T15901] netlink: 'syz.3.2622': attribute type 1 has an invalid length. [ 352.552912][T15776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.575409][T15908] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2622'. [ 352.620203][T15901] 8021q: adding VLAN 0 to HW filter on device bond9 [ 352.659841][T15908] bond9: entered promiscuous mode [ 352.689797][T15916] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2625'. [ 352.759181][T15918] netlink: 'syz.1.2626': attribute type 10 has an invalid length. [ 352.844086][T15920] syzkaller0: entered promiscuous mode [ 352.853878][T15920] syzkaller0: entered allmulticast mode [ 352.887001][T15924] syzkaller0: entered promiscuous mode [ 352.895223][T15924] syzkaller0: entered allmulticast mode [ 352.933444][T15924] tipc: Enabling of bearer rejected, already enabled [ 353.367964][T15950] bond10: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 353.387847][T15950] bond10: (slave lo): Enslaving as an active interface with an up link [ 353.416430][T11410] lo speed is unknown, defaulting to 1000 [ 353.423954][T11418] lo speed is unknown, defaulting to 1000 [ 353.529426][T15957] bond15: entered promiscuous mode [ 353.535813][T15957] 8021q: adding VLAN 0 to HW filter on device bond15 [ 353.570430][T15957] ipvlan2: entered allmulticast mode [ 353.576670][T15957] bond15: entered allmulticast mode [ 353.593680][T15957] ipvlan3: entered allmulticast mode [ 353.628552][T15957] bond15: (slave bridge5): making interface the new active one [ 353.637247][T15957] bridge5: entered promiscuous mode [ 353.643321][T15957] bridge5: entered allmulticast mode [ 353.656030][T15957] bond15: (slave bridge5): Enslaving as an active interface with an up link [ 353.981079][T15980] syzkaller1: entered promiscuous mode [ 353.990175][T15980] syzkaller1: entered allmulticast mode [ 354.007414][T15985] vlan5: entered allmulticast mode [ 354.012579][T15985] bond0: entered allmulticast mode [ 354.710792][T16023] syzkaller0: entered promiscuous mode [ 354.718588][T16023] syzkaller0: entered allmulticast mode [ 354.756393][ T29] audit: type=1804 audit(1784148398.331:17): pid=16029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2662" name="/newroot/536/cgroup.controllers" dev="tmpfs" ino=2770 res=1 errno=0 [ 354.821032][ T29] audit: type=1800 audit(1784148398.381:18): pid=16029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2662" name="cgroup.controllers" dev="tmpfs" ino=2770 res=0 errno=0 [ 355.075351][T11418] net_ratelimit: 16 callbacks suppressed [ 355.075370][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.178886][ T8358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.244932][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.324784][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.333304][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.341875][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.350381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.444709][T11418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.483681][T16060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.494205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.806755][T16071] validate_nla: 1 callbacks suppressed [ 355.806786][T16071] netlink: 'syz.0.2674': attribute type 9 has an invalid length. [ 355.848258][T16073] netlink: 'syz.4.2675': attribute type 9 has an invalid length. [ 355.881724][T16070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.960811][T16072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.521948][T16125] netlink: 'syz.0.2692': attribute type 1 has an invalid length. [ 356.558265][T16125] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 356.627600][T16130] netlink: 'syz.4.2693': attribute type 9 has an invalid length. [ 356.682639][T16129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.968024][T16151] netlink: 'syz.2.2698': attribute type 11 has an invalid length. [ 357.130547][T16160] __nla_validate_parse: 19 callbacks suppressed [ 357.130569][T16160] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2703'. [ 358.257192][T16174] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.272065][T16174] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 58663 - 0 [ 358.283375][T16174] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 358.315632][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2717'. [ 358.336871][T16216] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2716'. [ 358.520752][T16174] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 358.555832][T16174] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 58663 - 0 [ 358.588038][T16174] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 358.972411][T16229] bond16: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 359.029603][T16221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2718'. [ 359.071199][T16229] bond16 (unregistering): Released all slaves [ 359.137058][T16174] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.148573][T16174] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 58663 - 0 [ 359.159844][T16174] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 359.189229][T16213] lo speed is unknown, defaulting to 1000 [ 359.299111][T16174] netdevsim netdevsim1 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 359.312701][T16174] netdevsim netdevsim1 €Â (unregistering): unset [1, 0] type 2 family 0 port 58663 - 0 [ 359.323919][T16174] netdevsim netdevsim1 €Â (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 359.438072][T16249] syzkaller0: entered promiscuous mode [ 359.443680][T16249] syzkaller0: entered allmulticast mode [ 359.624925][ T6160] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.654020][ T6160] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.688784][ T6160] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 58663 - 0 [ 359.707548][T16218] lo speed is unknown, defaulting to 1000 [ 359.813691][ T6160] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.839062][ T6160] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.864634][ T6160] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 58663 - 0 [ 360.072902][T15689] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.097687][T15689] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.116259][T15689] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 58663 - 0 [ 360.241165][T16259] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2730'. [ 360.312299][ T6160] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 360.337853][ T6160] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.352900][ T6160] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 58663 - 0 [ 360.552079][T16283] netlink: 'syz.3.2737': attribute type 40 has an invalid length. [ 360.605147][ T144] net_ratelimit: 11 callbacks suppressed [ 360.605165][ T144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.929825][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2739'. [ 360.993417][T16308] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 361.259829][T16321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.335795][T11401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.044532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.053045][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.061488][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.137501][T16359] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2751'. [ 362.149249][T16292] lo speed is unknown, defaulting to 1000 [ 362.509489][T16378] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2756'. [ 362.660132][T16378] gretap0: entered promiscuous mode [ 362.960883][T16382] syzkaller0: entered promiscuous mode [ 362.996243][T16382] syzkaller0: entered allmulticast mode [ 363.028985][T16405] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2756'. [ 363.142957][T16405] 0ªî{X¹¦: renamed from gretap0 [ 363.171552][T16405] 0ªî{X¹¦: left promiscuous mode [ 363.191308][T16405] 0ªî{X¹¦: entered allmulticast mode [ 363.220207][T16405] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 363.245006][ T8358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.253174][ T8358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.265804][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.267410][T16417] IPVS: set_ctl: invalid protocol: 60010 100.1.1.0:20002 [ 363.385710][ T12] [ 363.388091][ T12] ============================================ [ 363.394248][ T12] WARNING: possible recursive locking detected [ 363.400424][ T12] syzkaller #0 Not tainted [ 363.404931][ T12] -------------------------------------------- [ 363.411092][ T12] kworker/u8:0/12 is trying to acquire lock: [ 363.417076][ T12] ffff88807bfd1958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 363.427215][ T12] [ 363.427215][ T12] but task is already holding lock: [ 363.434682][ T12] ffff88807a17cd58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 363.444581][ T12] [ 363.444581][ T12] other info that might help us debug this: [ 363.452678][ T12] Possible unsafe locking scenario: [ 363.452678][ T12] [ 363.460136][ T12] CPU0 [ 363.463423][ T12] ---- [ 363.466704][ T12] lock(&qdisc_xmit_lock_key#4); [ 363.471749][ T12] lock(&qdisc_xmit_lock_key#4); [ 363.476800][ T12] [ 363.476800][ T12] *** DEADLOCK *** [ 363.476800][ T12] [ 363.485121][ T12] May be due to missing lock nesting notation [ 363.485121][ T12] [ 363.493445][ T12] 11 locks held by kworker/u8:0/12: [ 363.498737][ T12] #0: ffff8880563b8140 ((wq_completion)bond5#2){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 363.509956][ T12] #1: ffffc90000117c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 363.522877][ T12] #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf3/0x17c0 [ 363.533058][ T12] #3: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 363.543106][ T12] #4: ffff88807bde7228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 363.555748][ T12] #5: ffff88807a17cd58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 363.566055][ T12] #6: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 363.575131][ T12] #7: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 363.584993][ T12] #8: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 363.593893][ T12] #9: ffffffff8eb59cc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x29b/0x37f0 [ 363.603938][ T12] #10: ffff888028d7c228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x112b/0x37f0 [ 363.616677][ T12] [ 363.616677][ T12] stack backtrace: [ 363.622593][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 363.622628][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 363.622645][ T12] Workqueue: bond5 bond_alb_monitor [ 363.622683][ T12] Call Trace: [ 363.622690][ T12] [ 363.622695][ T12] dump_stack_lvl+0xe8/0x150 [ 363.622751][ T12] print_deadlock_bug+0x279/0x290 [ 363.622796][ T12] __lock_acquire+0x24df/0x2cf0 [ 363.622822][ T12] ? __pfx_netif_skb_features+0x10/0x10 [ 363.622840][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 363.622858][ T12] ? __lock_acquire+0x683/0x2cf0 [ 363.622879][ T12] ? sch_direct_xmit+0x15f/0x4c0 [ 363.622901][ T12] lock_acquire+0x106/0x350 [ 363.622921][ T12] ? sch_direct_xmit+0x15f/0x4c0 [ 363.622950][ T12] _raw_spin_lock+0x2e/0x40 [ 363.623087][ T12] ? sch_direct_xmit+0x15f/0x4c0 [ 363.623109][ T12] sch_direct_xmit+0x15f/0x4c0 [ 363.623134][ T12] ? __pfx_sch_direct_xmit+0x10/0x10 [ 363.623157][ T12] ? arp_solicit+0xb90/0xe40 [ 363.623183][ T12] __dev_queue_xmit+0x1754/0x37f0 [ 363.623206][ T12] ? __dev_queue_xmit+0x29b/0x37f0 [ 363.623226][ T12] ? __lock_acquire+0x683/0x2cf0 [ 363.623247][ T12] ? arpt_do_table+0x25b/0x1f90 [ 363.623321][ T12] ? __pfx___dev_queue_xmit+0x10/0x10 [ 363.623340][ T12] ? __pfx_arpt_do_table+0x10/0x10 [ 363.623365][ T12] ? NF_HOOK+0xa2/0x3c0 [ 363.623387][ T12] NF_HOOK+0x33a/0x3c0 [ 363.623409][ T12] ? __pfx_arp_xmit_finish+0x10/0x10 [ 363.623431][ T12] ? NF_HOOK+0xa2/0x3c0 [ 363.623450][ T12] ? __pfx_NF_HOOK+0x10/0x10 [ 363.623470][ T12] ? lock_acquire+0x106/0x350 [ 363.623493][ T12] ? __pfx_arp_xmit_finish+0x10/0x10 [ 363.623514][ T12] ? inet_addr_type_dev_table+0x25/0x190 [ 363.623591][ T12] arp_xmit+0x16c/0x270 [ 363.623611][ T12] ? arp_xmit+0x23/0x270 [ 363.623631][ T12] arp_solicit+0xbdc/0xe40 [ 363.623658][ T12] ? __pfx_arp_solicit+0x10/0x10 [ 363.623681][ T12] ? __neigh_event_send+0xea4/0x1510 [ 363.623750][ T12] ? __pfx_arp_solicit+0x10/0x10 [ 363.623770][ T12] __neigh_event_send+0xf0c/0x1510 [ 363.623803][ T12] neigh_resolve_output+0x1a1/0x720 [ 363.623825][ T12] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 363.623853][ T12] ? ip_finish_output2+0x3de/0x10b0 [ 363.623876][ T12] ip_finish_output2+0xc4b/0x10b0 [ 363.623898][ T12] ? ip_skb_dst_mtu+0x811/0xa50 [ 363.623919][ T12] ? ip_finish_output2+0x3de/0x10b0 [ 363.623943][ T12] ? ip_finish_output+0x40b/0x530 [ 363.623964][ T12] ip_output+0x29f/0x450 [ 363.623985][ T12] ? ip_output+0x5a/0x450 [ 363.624006][ T12] iptunnel_xmit+0x626/0xd10 [ 363.624064][ T12] ip_tunnel_xmit+0x195b/0x2040 [ 363.624093][ T12] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 363.624116][ T12] ? __pfx_gre_build_header+0x10/0x10 [ 363.624187][ T12] ? kfree+0x1c5/0x640 [ 363.624228][ T12] ? pskb_expand_head+0x469/0x13a0 [ 363.624272][ T12] __gre_xmit+0x19e/0x240 [ 363.624290][ T12] ? __pfx___gre_xmit+0x10/0x10 [ 363.624312][ T12] erspan_xmit+0xad5/0x1590 [ 363.624336][ T12] ? __pfx_erspan_xmit+0x10/0x10 [ 363.624355][ T12] ? __lock_acquire+0x683/0x2cf0 [ 363.624379][ T12] dev_hard_start_xmit+0x2cd/0x830 [ 363.624403][ T12] sch_direct_xmit+0x257/0x4c0 [ 363.624426][ T12] ? __pfx_sch_direct_xmit+0x10/0x10 [ 363.624445][ T12] ? __switch_to_asm+0x70/0x70 [ 363.624462][ T12] __dev_queue_xmit+0x1754/0x37f0 [ 363.624483][ T12] ? __dev_queue_xmit+0x29b/0x37f0 [ 363.624505][ T12] ? __pfx___dev_queue_xmit+0x10/0x10 [ 363.624521][ T12] ? rcu_is_watching+0x15/0xb0 [ 363.624556][ T12] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 363.624575][ T12] ? trace_kmem_cache_alloc+0x29/0xe0 [ 363.624591][ T12] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 363.624610][ T12] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 363.624627][ T12] ? local_lock_release+0x9c/0x160 [ 363.624677][ T12] ? kmem_cache_alloc_node_noprof+0x1f5/0x610 [ 363.624699][ T12] ? __alloc_skb+0x4cc/0x7a0 [ 363.624721][ T12] ? alb_send_lp_vid+0x14e/0x550 [ 363.624744][ T12] alb_send_lp_vid+0x348/0x550 [ 363.624767][ T12] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 363.624805][ T12] alb_send_learning_packets+0x12c/0x300 [ 363.624826][ T12] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 363.624844][ T12] ? bond_alb_monitor+0xf3/0x17c0 [ 363.624865][ T12] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 363.624918][ T12] bond_alb_monitor+0x3d0/0x17c0 [ 363.624941][ T12] ? bond_alb_monitor+0xf3/0x17c0 [ 363.624963][ T12] ? __pfx_bond_alb_monitor+0x10/0x10 [ 363.624985][ T12] ? rcu_is_watching+0x15/0xb0 [ 363.625011][ T12] ? process_scheduled_works+0xa20/0x14e0 [ 363.625032][ T12] process_scheduled_works+0xa8e/0x14e0 [ 363.625060][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 363.625081][ T12] ? assign_work+0x3cf/0x5d0 [ 363.625100][ T12] worker_thread+0xa47/0xfb0 [ 363.625130][ T12] kthread+0x388/0x470 [ 363.625153][ T12] ? __pfx_worker_thread+0x10/0x10 [ 363.625181][ T12] ? __pfx_kthread+0x10/0x10 [ 363.625202][ T12] ret_from_fork+0x514/0xb70 [ 363.625243][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 363.625265][ T12] ? __switch_to+0xc89/0x1420 [ 363.625284][ T12] ? __pfx_kthread+0x10/0x10 [ 363.625305][ T12] ret_from_fork_asm+0x1a/0x30 [ 363.625329][ T12] [ 366.374488][T11402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.444599][T15689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.524458][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.532762][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.541058][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.415127][T11410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.285171][ T808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.604479][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.612730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.621005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.215029][ T6160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.324667][T11410] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog