last executing test programs: 8.693747392s ago: executing program 2 (id=5387): r0 = socket(0x1d, 0x2, 0x6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000002c0)) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000040)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r3, 0x40047438, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="ce91bda883e815ca8263224318d2", 0xe, 0x4, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x4, 0x6, @multicast}, 0x14) ioctl$PPPIOCCONNECT(r3, 0x4004743a, &(0x7f00000000c0)) pselect6(0x40, &(0x7f0000000100)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x502}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x6a, 0x3, 0x0, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000cf000000b70000000200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.360625433s ago: executing program 2 (id=5393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r1, 0x40086e81, &(0x7f0000000300)=0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvlan0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000400000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=0x0, @ANYBLOB="4805bb84079b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x20008090) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x140}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000500)=[0x0, 0x6], 0x0, 0x0, 0x2, 0x0, r4}}, 0x40) syz_open_procfs$namespace(r4, &(0x7f0000000540)='ns/mnt\x00') 5.184641395s ago: executing program 4 (id=5395): bpf$PROG_BIND_MAP(0xa, &(0x7f0000001940), 0x4a) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x44) r2 = socket(0x8, 0x4, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000002680)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r2, @ANYBLOB], 0x32600) write$cgroup_devices(r0, &(0x7f0000001240)=ANY=[], 0xfffffeff) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000001a00)=""/97, 0x61}, {&(0x7f0000001a80)=""/206, 0xce}, {&(0x7f0000001b80)=""/11, 0xb}, {0x0}], 0x4, &(0x7f00000022c0), 0x0, 0x40810}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) syz_genetlink_get_family_id$tipc2(&(0x7f0000001280), r0) 5.15397973s ago: executing program 3 (id=5396): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) 5.090444989s ago: executing program 0 (id=5397): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000a0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000b0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000e0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 4.995910143s ago: executing program 3 (id=5398): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0xfffffffe}], 0x1, 0x2163, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'wlan1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, 0x0, 0x0) sendmmsg$inet(r6, &(0x7f00000006c0)=[{{&(0x7f0000000700)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) sendto$inet(r6, &(0x7f0000000740)="3293", 0xffffffffffffffe2, 0x84, 0x0, 0x0) shutdown(r6, 0x1) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="08021100"}, 0x14) 4.839473584s ago: executing program 2 (id=5400): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), r5) getsockname$packet(r5, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) write$tun(0xffffffffffffffff, 0x0, 0xfdef) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42884}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 4.71176759s ago: executing program 0 (id=5401): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f00000001c0), 0xffffffffffffff94, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x14}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='veno', 0x4) recvfrom$inet(r0, &(0x7f00000002c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 4.665235934s ago: executing program 3 (id=5402): mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r2, 0xaa0f4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r4, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0xfffff000) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r0, 0x0) mmap(&(0x7f0000071000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f000081a000/0x3000)=nil, 0x3000, 0x800001, 0x10012, r1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) 4.389412378s ago: executing program 3 (id=5403): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000cf000000b70000000200000095"], &(0x7f0000000640)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket(0x11, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0x15, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x15, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 4.374959972s ago: executing program 2 (id=5404): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000000780)={'syzkaller0\x00', @random="2b0100004ec6"}) 4.224686854s ago: executing program 1 (id=5406): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000200), 0x0) close(r0) r1 = socket$inet6(0xa, 0x1, 0x100) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan3\x00'}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, 0x0, 0x4040090) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00000004c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0x0, 0x8e}, 0x28) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1ff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000}, 0xc0) 4.117613042s ago: executing program 4 (id=5407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000100), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in=@multicast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}}, [@offload={0xc, 0x1c, {r5, 0x4}}]}, 0xc4}}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000400)=0xcde, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="340000003f000501010000000000000001010000000000000c0001006f76732d64703000080002"], 0x34}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500060000001400040073"], 0x58}}, 0x0) 4.074979782s ago: executing program 3 (id=5408): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) 3.967461646s ago: executing program 3 (id=5409): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}]}, 0x34}}, 0x24000880) 3.847680232s ago: executing program 2 (id=5410): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0x17, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff000000007e9000000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x61) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.840174263s ago: executing program 4 (id=5411): mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0xa2fac000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffd, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000100)={0x2, 0x4e22, @local}, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x28, r5, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000200)={0x0, 0x20, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r3, 0x1, 0x70bd2c, 0x9000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x11, 0x13, &(0x7f0000000e80)=ANY=[@ANYBLOB="18080000000000000000000010000300851000000600000018020000", @ANYRES32, @ANYBLOB="00000000200000006600020080ffffff18000000fffffffe00000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000f40)='GPL\x00', 0x2, 0xde, &(0x7f0000000f80)=""/222}, 0x94) 3.713099652s ago: executing program 0 (id=5412): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000140), &(0x7f0000000180)=r0}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.587670876s ago: executing program 4 (id=5413): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x40002}, 0x20048040) r0 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=ANY=[@ANYBLOB='\\\x00'], 0x5c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x8, 0x8000, 0x0, 0xf, {{0x9, 0x4, 0x1, 0x1, 0x24, 0x66, 0x0, 0x96, 0x2f, 0x0, @remote, @rand_addr=0x64010100, {[@end, @cipso={0x86, 0x8, 0x3, [{0x5, 0x2}]}, @end, @ssrr={0x89, 0x3, 0x91}]}}}}}) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0xcde, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0xc, 0x80c5, "0800080001000000"}]}, 0x38}}, 0x0) 3.434879845s ago: executing program 4 (id=5414): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(r1) socket(0x10, 0x803, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x7101}) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000280)={'syzkaller0\x00'}) 3.306897234s ago: executing program 1 (id=5415): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x3, 0x3, 0xda8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x4c, 0x28, 0x4ee4e6a52ff56541, 0x5000, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x18, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x0, 0xc, 0x17, 0x19, 0x19, 0x5}}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0x5}}]}, 0x4c}}, 0x4008000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newsa={0x160, 0x10, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x44}, @in6=@mcast1, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x54, 0xffffffff}, 0x70bd2a, 0x800003, 0x2, 0x2, 0x0, 0x57}, [@replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x160}}, 0x4004004) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) writev(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r3, &(0x7f0000000e00), 0x0) 2.53929645s ago: executing program 0 (id=5416): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000001c0)={{0x6, @multicast1, 0x4e1f, 0x0, 'rr\x00'}, {@loopback, 0x4e1f, 0x1, 0x1}}, 0x44) 2.356620527s ago: executing program 0 (id=5417): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x4e, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x101000}, @TCA_FLOW_KEYS={0x8, 0x1, 0x18d0b}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0x20000844) r6 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @broadcast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000003c0)={&(0x7f0000000400)=@xdp={0x2c, 0x7, r7, 0x25}, 0x80, &(0x7f0000000480)=[{&(0x7f00000004c0)="ac", 0x1}], 0x1}, 0x8804) 2.342448065s ago: executing program 1 (id=5418): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001500), 0x0, 0x4000000) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002680), 0x0, 0x60, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @random="b0af59cbce10", @mcast1, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x15}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x16}, {0xfffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0xc}]}}, @common=@hl={{0x28}, {0x0, 0xfc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @mcast1, [0x0, 0xff000000, 0xffff00, 0xffffff00], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x3a, 0xb, 0x1, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8, 0xfdb2) connect$inet6(r0, 0x0, 0x0) 2.068077551s ago: executing program 1 (id=5419): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440)=r9, 0x4) 1.112663286s ago: executing program 1 (id=5420): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) ioctl$int_in(r0, 0x5452, &(0x7f0000000300)=0xffffffffffffffff) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000500)={0xf0000003}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000040000004804000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000000000000000000000000000000000000ead9b4c911ba7c3b32f0b15080ba18676d3e319950db31090042009873a2dc0d1dccb3dd824e22b5115bab09f4d3dde096a07b28a61d6f6432ad9ae76d07625f722a24205379315c2ddf8f502d"], 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="63812bbd7000fcdbdf25030000000800010000000000280007800c00018008000100", @ANYRES32=r6, @ANYBLOB="0c00018008000100", @ANYRES8], 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x40040) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r3, 0x0, &(0x7f00000001c0)=""/193}, 0x20) r7 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000000)=0x18, 0x4) shutdown(r0, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000180), 0x4) 747.653168ms ago: executing program 2 (id=5421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 140.053194ms ago: executing program 1 (id=5422): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x800) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x0, 0x9002}, 0x4) syz_extract_tcp_res$synack(&(0x7f0000000340)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x375, &(0x7f0000000b00)={@multicast, @remote, @void, {@ipv6={0x86dd, @tcp={0x5, 0x6, "0b82dd", 0x33f, 0x6, 0xff, @private1, @private0, {[@routing={0x89, 0x10, 0x2, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @local]}, @dstopts={0x6c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}, @dstopts={0x84, 0x0, '\x00', [@pad1]}, @dstopts={0x6, 0x4, '\x00', [@generic={0x81, 0x5, "f1b657e232"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x98}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private1}]}, @hopopts={0x32, 0xb, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x7, 0x74, [0x8, 0x8, 0x7fffffff]}}, @enc_lim={0x4, 0x1, 0x81}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0x4, [0x3]}}]}, @hopopts={0x1, 0xd, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x0, 0x8, [0x48d0, 0x1, 0x4, 0x7, 0x3, 0xc0]}}, @generic={0x5, 0x2, "f943"}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0x7, 0x6, [0x4, 0x9, 0xd756, 0x4]}}]}, @routing={0x87, 0x10, 0x0, 0x0, 0x0, [@loopback, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @remote, @mcast1, @rand_addr=' \x01\x00']}], {{0x4e21, 0x4e20, 0x41424344, r2, 0x1, 0x0, 0x12, 0x4, 0x0, 0x0, 0xc, {[@md5sig={0x13, 0x12, "b74b7c5950d4f89ef32acff5bccefbfc"}, @timestamp={0x8, 0xa, 0x80000001, 0x10}, @eol, @sack={0x5, 0xa, [0x3, 0x9]}, @sack={0x5, 0xa, [0x1, 0x9]}, @window={0x3, 0x3, 0x8}]}}, {"e208315b137049ca8fbefd7cf85592429ad50d4fd5fa56e6c25d638662f139d41461bf43013aee1128e8dcab5bb95d50127b96cd0ef6e6a952a5687011ae8905dd2a52562e424ec9726a7b3d851d330970fa1c41898e1ee12c5fa0ce51e8ca73174ce00aae84026c01ca23eeb89e65e782708f1b81e69269a59386730dee68443ab24b44251dd8cfdf065256dae4c4da92f70aaa32d1f70893a9b471ff0edaebf5082c76df6661056a0b3017950301b14b6eedafbb3ba8"}}}}}}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000ec0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb81004a0086dd6040081000140600fc020000000000000000000000000001fe8004000000000000000000000000aa4e224e24", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="5004100990780000"], 0x0) syz_extract_tcp_res(&(0x7f0000000f40)={0x41424344, 0x41424344}, 0x63b60d05, 0x6) syz_emit_ethernet(0x91, &(0x7f0000000f80)={@multicast, @multicast, @void, {@ipv4={0x800, @tcp={{0x14, 0x4, 0x1, 0xb, 0x83, 0x67, 0x0, 0x1, 0x6, 0x0, @empty, @rand_addr=0x64010100, {[@generic={0x82, 0xf, "bbcb3a99ba6727a2427a1304da"}, @cipso={0x86, 0x22, 0x1, [{0x0, 0x2}, {0x6, 0x6, "2c82cc27"}, {0x0, 0x2}, {0x7, 0x4, "ad20"}, {0x7, 0xe, "99c48c228585ac1d8f4ec9e4"}]}, @ssrr={0x89, 0xb, 0x7e, [@broadcast, @multicast1]}]}}, {{0x4e23, 0x4e22, r2, r3, 0x1, 0x0, 0x6, 0xc2, 0x7, 0x0, 0x9, {[@eol]}}, {"a29f27d751f021fc3d5a6c2925653ac0856b1c32d4e3a1d838ff1b"}}}}}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0xa4, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x1, 0x1], [0x0, 0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xf4240}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0xa4}}, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x501, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {0x1, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="a1dbe17e06c1cc0dfb4a2700fce4b471c53778feb78b87c2ed", 0x19}], 0x1, &(0x7f00000001c0)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}, 0x4000004) 117.203352ms ago: executing program 0 (id=5423): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000840)=0x2000000, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000000706010800000000000000000100000305000400010000000900020073797a30000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x2006c884}, 0x8000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400002000905000500020200000500010006"], 0x58}}, 0x4080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x1c, &(0x7f0000000700)=ANY=[@ANYBLOB="0000000000000000b702000014000000b703000000000000850000009e000000bf0900000000000035090100000000009500000000000000b70200000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d98f0ff0000000056080000000000008500000005000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000000906110200000000000000000000fffe0900020073797a310000020005000100070000001c0007800c00018008000140310000010c0002800800014064"], 0x44}, 0x1, 0x0, 0x0, 0x10000057}, 0x4000050) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f00000002c0)={0x2, 0x5, 0x20, 0x47ba, 0x59}, &(0x7f0000000300)=0x18) ioctl$sock_ifreq(r1, 0x8971, &(0x7f00000001c0)={'veth1_vlan\x00', @ifru_names='veth1_to_batadv\x00'}) 0s ago: executing program 4 (id=5424): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pipe(&(0x7f0000000040)) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) pipe(&(0x7f0000000600)) socket$unix(0x1, 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000800), 0x1, 0x0) socket(0x400000000010, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="3418000040000901feffffff00000000017c0000040042800c00018006000600800a000010180280091814800518", @ANYRES64=r0], 0x1834}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) kernel console output (not intermixed with test programs): : syz.0.3388 (pid 14617) Use of int in max_burst socket option. [ 339.178333][T14617] Use struct sctp_assoc_value instead [ 339.482569][T14627] netlink: 'syz.0.3393': attribute type 1 has an invalid length. [ 339.746922][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 340.199219][T14613] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 340.241630][T14627] 8021q: adding VLAN 0 to HW filter on device bond9 [ 341.967361][T14704] netlink: 'syz.1.3420': attribute type 4 has an invalid length. [ 341.995769][T14704] netlink: 'syz.1.3420': attribute type 4 has an invalid length. [ 342.234785][T14707] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 343.008057][T14730] 0: reclassify loop, rule prio 0, protocol 800 [ 343.351003][T14744] af_packet: packet size is too long (35070 > 2016) [ 347.229966][T14785] netlink: 'syz.1.3444': attribute type 1 has an invalid length. [ 347.298574][T14785] 8021q: adding VLAN 0 to HW filter on device bond7 [ 347.366210][T14785] netlink: 'syz.1.3444': attribute type 10 has an invalid length. [ 347.366233][T14785] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3444'. [ 347.461820][T14789] bond7: (slave dummy0): making interface the new active one [ 347.470869][T14789] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 347.471167][T14785] dummy0: entered promiscuous mode [ 347.490510][T14785] bond7: (slave dummy0): Releasing active interface [ 347.527578][T14791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3446'. [ 347.697563][T14803] netlink: 'syz.1.3450': attribute type 1 has an invalid length. [ 347.699110][T14798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3449'. [ 347.821527][T14803] 8021q: adding VLAN 0 to HW filter on device bond8 [ 347.834262][T14807] bond8: entered promiscuous mode [ 347.834510][T14809] dummy0: left promiscuous mode [ 347.860313][T14808] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 347.871226][T14809] bond8: (slave dummy0): making interface the new active one [ 347.871254][T14809] dummy0: entered promiscuous mode [ 347.884462][T14809] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 347.936621][T14802] bond8: left promiscuous mode [ 347.936640][T14802] dummy0: left promiscuous mode [ 349.048549][T14845] netlink: 'syz.0.3461': attribute type 4 has an invalid length. [ 349.086633][T14845] netlink: 'syz.0.3461': attribute type 4 has an invalid length. [ 350.502730][T14883] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 350.529351][T14883] bond8 (unregistering): Released all slaves [ 351.042757][T14913] syzkaller1: entered promiscuous mode [ 351.042781][T14913] syzkaller1: entered allmulticast mode [ 351.417516][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3492'. [ 351.417541][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3492'. [ 352.176650][T14953] ip_tables: iptables: counters copy to user failed while replacing table [ 352.195969][T14953] syzkaller1: entered promiscuous mode [ 352.196021][T14953] syzkaller1: entered allmulticast mode [ 352.952799][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3505'. [ 352.952830][T14955] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3505'. [ 353.140596][T14964] TC_ACT_REPEAT abuse ? [ 353.614922][T14979] bond6: entered allmulticast mode [ 353.617455][T14979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3516'. [ 353.622908][T14979] macvlan2: entered promiscuous mode [ 353.622959][T14979] macvlan2: entered allmulticast mode [ 353.626990][T14979] bond6: (slave macvlan2): Opening slave failed [ 353.747313][T14982] bond4: entered allmulticast mode [ 353.747337][T14982] ip6gre1: entered allmulticast mode [ 353.771438][T14982] dvmrp6: entered allmulticast mode [ 353.788321][T14981] bond4: left allmulticast mode [ 353.788352][T14981] ip6gre1: left allmulticast mode [ 353.841606][T14984] ieee802154 phy0 wpan0: encryption failed: -22 [ 353.917796][T14986] netlink: 'syz.2.3519': attribute type 1 has an invalid length. [ 353.946810][T14986] 8021q: adding VLAN 0 to HW filter on device bond7 [ 353.971252][T14914] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.990552][T14903] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 354.076883][T14986] bond7: (slave veth17): Enslaving as an active interface with a down link [ 354.207935][T14988] syzkaller0: entered promiscuous mode [ 354.207964][T14988] syzkaller0: entered allmulticast mode [ 354.232008][T14991] bond7: (slave macvlan0): making interface the new active one [ 354.253151][T14991] bond7: (slave macvlan0): Enslaving as an active interface with an up link [ 355.754512][T15030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3528'. [ 356.767787][T15005] bond8: (slave dummy0): Releasing active interface [ 356.818611][T15005] team0: Port device team_slave_0 removed [ 356.840447][T15005] team0: Port device team_slave_1 removed [ 356.841508][T15005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.841531][T15005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.864549][T15005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.864569][T15005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.896933][T15005] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 356.904686][T15011] team0: Failed to change to mode "loadbalance" [ 357.566995][T15068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3542'. [ 358.726637][T15092] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3552'. [ 359.060631][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3556'. [ 359.418816][T15110] tipc: Enabled bearer , priority 0 [ 359.422088][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3557'. [ 359.487266][T15110] syzkaller0: entered promiscuous mode [ 359.487298][T15110] syzkaller0: entered allmulticast mode [ 359.487787][T15110] tipc: Resetting bearer [ 359.664303][T15108] tipc: Resetting bearer [ 360.508633][T15159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3571'. [ 360.942426][ T4953] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 361.945024][T15108] tipc: Disabling bearer [ 364.323221][T15196] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3584'. [ 365.190319][T15217] syzkaller1: entered promiscuous mode [ 365.190347][T15217] syzkaller1: entered allmulticast mode [ 365.220871][T15217] ip_tables: iptables: counters copy to user failed while replacing table [ 365.847635][T15234] tipc: New replicast peer: 255.255.255.255 [ 365.848382][T15234] tipc: Enabled bearer , priority 10 [ 365.915885][T15235] ip_tables: iptables: counters copy to user failed while replacing table [ 367.105694][ T5766] tipc: Node number set to 3896777439 [ 367.718280][T15287] tipc: Failed to remove unknown binding: 66,0,2/3896777439:1845998007/1845998008 [ 367.722039][T15287] tipc: Failed to remove unknown binding: 66,0,2/3896777439:1845998007/1845998008 [ 368.004987][T15300] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.3623'. [ 368.278158][T15309] syzkaller0: entered promiscuous mode [ 368.278187][T15309] syzkaller0: entered allmulticast mode [ 370.400662][T15279] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.533536][T15333] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3637'. [ 370.611022][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3636'. [ 370.801420][T15335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3636'. [ 371.491196][T15372] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 372.690751][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3661'. [ 372.690778][T15417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3661'. [ 372.790003][T15418] bond8: entered allmulticast mode [ 372.828887][T15421] macvlan2: entered promiscuous mode [ 372.828908][T15421] macvlan2: entered allmulticast mode [ 372.831111][T15421] bond8: entered promiscuous mode [ 372.856743][T15421] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 372.873443][T15421] bond8: left promiscuous mode [ 373.043452][ T4953] Bluetooth: hci1: connection err: -111 [ 373.426238][T15433] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3667'. [ 373.461395][T15440] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3668'. [ 373.654322][T15449] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 374.405555][T15469] batman_adv: batadv0: Adding interface: syzkaller0 [ 374.405573][T15469] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.405605][T15469] batman_adv: batadv0: Interface activated: syzkaller0 [ 374.487204][T15463] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 374.561476][T15463] batman_adv: batadv0: Removing interface: syzkaller0 [ 374.620099][T15474] netlink: 'syz.2.3684': attribute type 10 has an invalid length. [ 374.620428][T15474] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.620729][T15474] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.661737][T15474] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.661863][T15474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.662411][T15474] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.662837][T15474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.704702][T15474] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 375.010514][T15490] syzkaller1: entered promiscuous mode [ 375.010539][T15490] syzkaller1: entered allmulticast mode [ 375.256440][T15500] netlink: 75 bytes leftover after parsing attributes in process `syz.2.3695'. [ 375.295921][T15500] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 375.490937][T15504] netlink: 'syz.4.3697': attribute type 3 has an invalid length. [ 375.490959][T15504] netlink: 'syz.4.3697': attribute type 2 has an invalid length. [ 375.710075][T15510] ip_tables: iptables: counters copy to user failed while replacing table [ 375.962028][T15525] TC_ACT_REPEAT abuse ? [ 376.133707][T15526] macvtap1: entered allmulticast mode [ 376.133742][T15526] veth0_to_bridge: entered allmulticast mode [ 376.272884][T15532] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 377.470678][T15578] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3723'. [ 377.662162][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3724'. [ 378.406887][T15605] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3733'. [ 378.610285][T15613] syzkaller1: entered promiscuous mode [ 378.610309][T15613] syzkaller1: entered allmulticast mode [ 378.787178][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.787240][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.273066][T15635] ip_tables: iptables: counters copy to user failed while replacing table [ 379.919197][T15654] syzkaller1: entered promiscuous mode [ 379.919221][T15654] syzkaller1: entered allmulticast mode [ 380.175095][T15665] tipc: Enabled bearer , priority 0 [ 380.231341][T15665] syzkaller0: entered promiscuous mode [ 380.231369][T15665] syzkaller0: entered allmulticast mode [ 380.231879][T15665] tipc: Resetting bearer [ 380.294182][T15664] tipc: Resetting bearer [ 380.767898][T15678] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3760'. [ 381.236483][T15694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3763'. [ 382.603139][T15664] tipc: Disabling bearer [ 382.949822][T15708] TC_ACT_REPEAT abuse ? [ 383.158887][T15724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3772'. [ 386.759368][T15814] netlink: 'syz.0.3788': attribute type 19 has an invalid length. [ 386.781101][T15818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3791'. [ 386.967872][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3791'. [ 387.266654][T15835] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3797'. [ 387.460373][T15845] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3797'. [ 388.540297][T15878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3812'. [ 390.869940][T15911] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 391.186722][T15924] TC_ACT_REPEAT abuse ? [ 391.872171][T15936] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3833'. [ 392.299378][T15952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3838'. [ 392.489024][T15960] Unknown metaid 8705 dlen 4 [ 392.551473][T15964] xt_ecn: cannot match TCP bits for non-tcp packets [ 393.499002][T15990] virt_wifi0 speed is unknown, defaulting to 1000 [ 393.499081][T15990] virt_wifi0 speed is unknown, defaulting to 1000 [ 393.499925][T15990] virt_wifi0 speed is unknown, defaulting to 1000 [ 393.501371][T15990] smbdirect: ib_dev[]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 393.501432][T15990] smbdirect: ib_dev[]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 393.501478][T15990] smbdirect: ib_dev[]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 393.676243][T15990] virt_wifi0 speed is unknown, defaulting to 1000 [ 393.695355][T15990] virt_wifi0 speed is unknown, defaulting to 1000 [ 393.707003][T15990] virt_wifi0 speed is unknown, defaulting to 1000 [ 393.716430][T15990] virt_wifi0 speed is unknown, defaulting to 1000 [ 393.720746][T15990] virt_wifi0 speed is unknown, defaulting to 1000 [ 393.825523][T15995] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3854'. [ 393.837194][T15995] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3854'. [ 393.915908][T15999] netlink: 'syz.0.3856': attribute type 12 has an invalid length. [ 393.915931][T15999] netlink: 'syz.0.3856': attribute type 29 has an invalid length. [ 393.916016][T15999] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3856'. [ 393.916050][T15999] netlink: 'syz.0.3856': attribute type 1 has an invalid length. [ 393.916063][T15999] netlink: 'syz.0.3856': attribute type 2 has an invalid length. [ 393.916076][T15999] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3856'. [ 394.906716][T16036] ip_tables: iptables: counters copy to user failed while replacing table [ 394.926292][T16036] syzkaller1: entered promiscuous mode [ 394.926313][T16036] syzkaller1: entered allmulticast mode [ 395.163488][T16051] netlink: 'syz.2.3874': attribute type 1 has an invalid length. [ 395.275079][T16051] 8021q: adding VLAN 0 to HW filter on device bond9 [ 395.338772][T16054] bond9: (slave veth19): Enslaving as an active interface with a down link [ 395.351349][T16051] netlink: 'syz.2.3874': attribute type 10 has an invalid length. [ 395.351369][T16051] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3874'. [ 395.591423][T16070] netlink: 'syz.2.3879': attribute type 1 has an invalid length. [ 395.591445][T16070] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3879'. [ 396.112807][T16071] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 396.112845][T16071] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.243902][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.130954][ T5297] netdevsim netdevsim2 netdevsim3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 398.131361][ T5297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.296641][T16129] tls_set_device_offload: netdev not found [ 398.345445][T16135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3897'. [ 398.617504][T16148] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3899'. [ 398.644623][T16148] xt_IDLETIMER: label is empty or not nul-terminated [ 399.264822][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 400.022050][T16125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.029288][T16125] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.128245][T16138] tipc: Enabling of bearer rejected, failed to enable media [ 400.129150][T16147] veth1_to_bond: Caught tx_queue_len zero misconfig [ 400.173800][ T64] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 400.174046][ T64] bond0: (slave bond_slave_1): link status definitely down, disabling slave [ 400.216107][ T64] bond0: now running without any active interface! [ 400.376166][T16159] netlink: 'syz.3.3904': attribute type 2 has an invalid length. [ 400.376190][T16159] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.3904'. [ 400.376212][T16159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3904'. [ 400.719235][T16174] netlink: 'syz.3.3911': attribute type 1 has an invalid length. [ 404.259273][T16209] nci: nci_start_poll: failed to set local general bytes [ 404.305992][T16220] syzkaller1: entered promiscuous mode [ 404.306016][T16220] syzkaller1: entered allmulticast mode [ 404.538894][T16230] netlink: 'syz.1.3928': attribute type 2 has an invalid length. [ 404.573255][T16230] !: entered promiscuous mode [ 404.578064][T16230] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3928'. [ 404.578144][T16230] !: left promiscuous mode [ 404.629407][T16234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.703062][T16237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.777922][T16234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.928785][T16245] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 405.265420][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3938'. [ 405.270239][T16253] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 405.635343][T16263] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 405.641498][T16272] netlink: 75 bytes leftover after parsing attributes in process `syz.0.3946'. [ 405.670536][T16274] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 406.098007][T16272] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 406.120393][T16278] syzkaller1: entered promiscuous mode [ 406.120418][T16278] syzkaller1: entered allmulticast mode [ 406.254155][T16297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3953'. [ 406.254188][T16297] bond0: option arp_all_targets: invalid value (673200689) [ 406.833382][T16318] ip6gretap0: entered promiscuous mode [ 406.835434][T16318] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3961'. [ 407.086362][T16208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 407.884902][T16355] bond9: option ad_user_port_key: invalid value (65535) [ 407.884926][T16355] bond9: option ad_user_port_key: allowed values 0 - 1023 [ 410.613209][T16355] bond9 (unregistering): Released all slaves [ 411.233160][T16384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3981'. [ 411.376318][T16391] TC_ACT_REPEAT abuse ? [ 411.814673][T16403] tipc: Enabled bearer , priority 0 [ 411.947252][T16403] syzkaller0: entered promiscuous mode [ 411.947277][T16403] syzkaller0: entered allmulticast mode [ 411.949266][T16403] tipc: Resetting bearer [ 412.175254][ T288] tipc: Resetting bearer [ 412.219625][T16401] tipc: Resetting bearer [ 414.690102][T16401] tipc: Disabling bearer [ 414.699875][T16413] syzkaller0: entered promiscuous mode [ 414.699899][T16413] syzkaller0: entered allmulticast mode [ 415.202128][T16446] batman_adv: batadv0: Adding interface: syzkaller0 [ 415.202148][T16446] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.202180][T16446] batman_adv: batadv0: Interface activated: syzkaller0 [ 415.744980][T16445] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 415.789207][T16445] batman_adv: batadv0: Removing interface: syzkaller0 [ 416.039650][T16466] netlink: 332 bytes leftover after parsing attributes in process `syz.0.4007'. [ 416.039732][T16466] netlink: 'syz.0.4007': attribute type 9 has an invalid length. [ 416.039747][T16466] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4007'. [ 416.039761][T16466] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4007'. [ 416.369844][T16475] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 416.399954][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4011'. [ 416.399993][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4011'. [ 416.493520][T16477] tipc: Enabled bearer , priority 0 [ 416.568573][T16477] syzkaller0: entered promiscuous mode [ 416.568599][T16477] syzkaller0: entered allmulticast mode [ 416.569315][T16477] tipc: Resetting bearer [ 416.601867][T16476] tipc: Resetting bearer [ 418.830376][T16476] tipc: Disabling bearer [ 418.853811][T16494] syz_tun: entered allmulticast mode [ 418.854063][T16494] syz_tun: left allmulticast mode [ 418.856330][T16487] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4015'. [ 418.985740][T16502] syzkaller0: entered promiscuous mode [ 418.986798][T16502] syzkaller0: entered allmulticast mode [ 421.817068][T16568] TC_ACT_REPEAT abuse ? [ 421.929243][T16570] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 422.128076][T16575] syzkaller1: entered promiscuous mode [ 422.128093][T16575] syzkaller1: entered allmulticast mode [ 422.678077][T16588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4045'. [ 422.738107][T16590] syzkaller1: entered promiscuous mode [ 422.738130][T16590] syzkaller1: entered allmulticast mode [ 423.005773][T16594] lo: entered allmulticast mode [ 423.025533][T16592] lo: left allmulticast mode [ 423.825630][T16618] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4056'. [ 424.070660][T16627] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4061'. [ 424.310820][T16634] netlink: 'syz.3.4063': attribute type 2 has an invalid length. [ 424.310844][T16634] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4063'. [ 424.364199][T16639] netlink: 'syz.3.4063': attribute type 2 has an invalid length. [ 424.364221][T16639] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4063'. [ 424.444604][T16643] netlink: 'syz.2.4067': attribute type 1 has an invalid length. [ 424.646159][T16651] ip_tables: iptables: counters copy to user failed while replacing table [ 424.676960][T16654] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4067'. [ 424.772432][T16646] 8021q: adding VLAN 0 to HW filter on device bond11 [ 424.778483][T16646] bond10: (slave bond11): making interface the new active one [ 424.781679][T16646] bond10: (slave bond11): Enslaving as an active interface with an up link [ 424.859991][T16648] bond10: (slave gretap2): Enslaving as a backup interface with an up link [ 424.879382][T16654] 8021q: adding VLAN 0 to HW filter on device bond10 [ 425.035547][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4074'. [ 425.812353][T16664] syzkaller0: entered promiscuous mode [ 425.812380][T16664] syzkaller0: entered allmulticast mode [ 425.881353][T16679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4078'. [ 426.203518][T16694] ip_tables: iptables: counters copy to user failed while replacing table [ 426.210610][T16694] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4082'. [ 427.806622][T16679] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 427.901090][T16706] ip_tables: iptables: counters copy to user failed while replacing table [ 428.102521][T16716] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4091'. [ 428.141008][T16718] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4090'. [ 428.169966][T16719] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4091'. [ 428.738551][T16719] vlan0: entered allmulticast mode [ 428.738577][T16719] dummy0: entered allmulticast mode [ 428.740855][T16722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4090'. [ 429.073771][T16732] TC_ACT_REPEAT abuse ? [ 429.294221][T16745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4101'. [ 429.370018][T16745] bridge10: entered allmulticast mode [ 429.387638][T16745] bond10: (slave bridge10): Enslaving as an active interface with an up link [ 429.397860][T16748] geneve2: entered promiscuous mode [ 430.671012][T16799] syzkaller0: entered promiscuous mode [ 430.671034][T16799] syzkaller0: entered allmulticast mode [ 430.826218][T16801] TC_ACT_REPEAT abuse ? [ 431.179811][T16806] syzkaller1: entered promiscuous mode [ 431.179834][T16806] syzkaller1: entered allmulticast mode [ 431.204615][T16807] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 431.786899][T16815] syzkaller0: entered promiscuous mode [ 431.786925][T16815] syzkaller0: entered allmulticast mode [ 434.270927][T16848] batman_adv: batadv0: Adding interface: syz_tun [ 434.270945][T16848] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.270975][T16848] batman_adv: batadv0: Interface activated: syz_tun [ 434.786501][T16880] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4143'. [ 434.958143][T16890] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 435.054365][T16893] xt_nfacct: accounting object `' does not exist [ 435.084620][T16893] netlink: 'syz.0.4149': attribute type 2 has an invalid length. [ 435.152023][T16897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4151'. [ 436.215657][T16929] xt_ipcomp: unknown flags 1D [ 436.350932][T16932] netlink: 'syz.3.4163': attribute type 39 has an invalid length. [ 436.370369][T16927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4160'. [ 436.419495][ T1221] IPVS: starting estimator thread 0... [ 436.460644][T16927] bond3: (slave syz_tun): Removing an active aggregator [ 436.499184][T16927] bond3: (slave syz_tun): Releasing backup interface [ 436.519766][T16938] IPVS: using max 27 ests per chain, 64800 per kthread [ 436.978574][T16960] netlink: 'syz.4.4172': attribute type 1 has an invalid length. [ 437.008269][T16960] 8021q: adding VLAN 0 to HW filter on device bond8 [ 437.037984][T16960] veth0_to_bond: left promiscuous mode [ 437.038007][T16960] veth0_to_bond: left allmulticast mode [ 437.087747][T16960] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 437.457376][T16980] tipc: Enabled bearer , priority 1 [ 437.460489][T16979] tipc: Resetting bearer [ 437.540024][T16979] tipc: Disabling bearer [ 437.932966][T16998] netlink: 'syz.1.4184': attribute type 1 has an invalid length. [ 437.978950][T16998] ip6tnl3: entered promiscuous mode [ 437.978973][T16998] ip6tnl3: entered allmulticast mode [ 438.110848][T17005] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 440.235521][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.386102][T17025] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 442.123784][T17027] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 442.372089][T17037] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.372484][T17037] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.636473][T17037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.658626][T17037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.928383][T17063] tipc: Failed to remove unknown binding: 66,0,0/0:1785072180/1785072182 [ 442.928417][T17063] tipc: Failed to remove unknown binding: 66,0,0/0:1785072180/1785072181 [ 442.929019][T17063] tipc: Failed to remove unknown binding: 66,0,0/0:1785072180/1785072182 [ 442.929048][T17063] tipc: Failed to remove unknown binding: 66,0,0/0:1785072180/1785072181 [ 443.028415][T17037] bond2: left promiscuous mode [ 443.028440][T17037] erspan2: left promiscuous mode [ 443.028600][T17037] bond2: left allmulticast mode [ 443.057976][T17069] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 443.069729][T17037] erspan2: left allmulticast mode [ 443.117820][T17037] bond4: left promiscuous mode [ 443.117924][T17037] ip6gre1: left promiscuous mode [ 443.252602][T17037] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 443.256550][T17037] ip6gretap1: left allmulticast mode [ 443.259883][T17037] bond6: left allmulticast mode [ 443.293021][T17037] bond8: left allmulticast mode [ 443.356504][T17037] geneve2: left promiscuous mode [ 443.372911][ T265] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.372949][ T265] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.373031][ T265] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.373060][ T265] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.373104][ T265] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.373132][ T265] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.611174][T17087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4209'. [ 443.830766][T17095] netlink: 'syz.3.4211': attribute type 1 has an invalid length. [ 443.920895][T17095] bond11: entered promiscuous mode [ 443.921381][T17095] 8021q: adding VLAN 0 to HW filter on device bond11 [ 443.975677][T17098] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 443.975721][T17098] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 443.975738][T17098] bond11: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 444.329595][T17095] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 444.329630][T17095] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 444.548717][T17116] syzkaller1: entered promiscuous mode [ 444.548741][T17116] syzkaller1: entered allmulticast mode [ 444.681220][T17122] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4217'. [ 444.787506][T17122] veth28: entered allmulticast mode [ 445.188630][T17145] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 445.560480][T17157] TC_ACT_REPEAT abuse ? [ 445.725729][T17167] lo: entered allmulticast mode [ 445.749101][T17167] lo: left allmulticast mode [ 445.806464][T17169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4234'. [ 445.852109][T17169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4234'. [ 446.675092][T17189] xt_CT: No such helper "netbios-ns" [ 446.962544][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4244'. [ 446.963345][T17203] ip_tables: iptables: counters copy to user failed while replacing table [ 446.964775][ T4953] block nbd0: Receive control failed (result -1) [ 447.317561][T17214] syzkaller1: entered promiscuous mode [ 447.317586][T17214] syzkaller1: entered allmulticast mode [ 447.998613][T17235] batman_adv: batadv0: Adding interface: syzkaller0 [ 447.998635][T17235] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.998671][T17235] batman_adv: batadv0: Interface activated: syzkaller0 [ 448.165444][T17234] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 448.257397][T17234] batman_adv: batadv0: Removing interface: syzkaller0 [ 448.461609][T17242] tipc: Failed to remove unknown binding: 66,1,1/0:1980056819/1980056821 [ 448.532610][T17246] syzkaller0: entered promiscuous mode [ 448.532634][T17246] syzkaller0: entered allmulticast mode [ 448.706212][T17256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4264'. [ 448.805536][T17256] 8021q: adding VLAN 0 to HW filter on device bond12 [ 448.836992][T17256] bond12 (unregistering): Released all slaves [ 449.381065][T17282] ip_tables: iptables: counters copy to user failed while replacing table [ 450.439200][ T30] audit: type=1804 audit(1793629937.606:7): pid=17304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4278" name="/newroot/851/cgroup.controllers" dev="tmpfs" ino=4352 res=1 errno=0 [ 451.221078][T17336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4285'. [ 451.231658][T17336] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 451.625446][T17356] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4290'. [ 452.233382][T17378] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 452.412670][T17385] netlink: 'syz.2.4297': attribute type 10 has an invalid length. [ 452.412695][T17385] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4297'. [ 452.446097][T17384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4296'. [ 452.479812][T17385] bond7: (slave macvlan0): Releasing active interface [ 452.682398][T17392] syzkaller0: entered promiscuous mode [ 452.682537][T17392] syzkaller0: entered allmulticast mode [ 452.827703][T17399] netlink: 'syz.4.4303': attribute type 1 has an invalid length. [ 452.900732][T17399] 8021q: adding VLAN 0 to HW filter on device bond10 [ 452.902916][T17399] bond9: (slave bond10): making interface the new active one [ 452.903537][T17399] bond9: (slave bond10): Enslaving as an active interface with an up link [ 452.953938][T17399] bond9: (slave gretap1): Enslaving as a backup interface with an up link [ 453.304442][T17412] syzkaller0: entered promiscuous mode [ 453.304464][T17412] syzkaller0: entered allmulticast mode [ 453.549824][T17416] syzkaller1: entered promiscuous mode [ 453.549856][T17416] syzkaller1: entered allmulticast mode [ 453.567617][T17416] 0: reclassify loop, rule prio 0, protocol 03 [ 453.915639][T17426] syzkaller0: entered promiscuous mode [ 453.915678][T17426] syzkaller0: entered allmulticast mode [ 454.122132][T17436] netlink: 964 bytes leftover after parsing attributes in process `syz.2.4319'. [ 454.122156][T17436] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 454.157951][T17438] syzkaller0: entered promiscuous mode [ 454.157974][T17438] syzkaller0: entered allmulticast mode [ 454.389903][T17446] batman_adv: batadv0: Adding interface: syzkaller0 [ 454.389921][T17446] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.389949][T17446] batman_adv: batadv0: Interface activated: syzkaller0 [ 454.436824][T17446] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4322'. [ 454.438348][T17445] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 454.489084][T17445] batman_adv: batadv0: Removing interface: syzkaller0 [ 454.782695][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 454.782792][ T4953] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 454.948179][T17465] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1500) ! [ 454.948997][T17465] syzkaller0: entered promiscuous mode [ 454.949010][T17465] syzkaller0: entered allmulticast mode [ 455.062681][T17372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 455.121582][T17458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.377466][T17483] netlink: 'syz.3.4332': attribute type 1 has an invalid length. [ 455.461368][T17483] 8021q: adding VLAN 0 to HW filter on device bond12 [ 455.487036][T17486] bond6: (slave syz_tun): Removing an active aggregator [ 455.487722][T17486] bond6: (slave syz_tun): Releasing backup interface [ 455.525516][T17486] bond12: (slave syz_tun): Enslaving as a backup interface with an up link [ 456.387882][T17510] x_tables: duplicate underflow at hook 1 [ 456.486006][T17514] syzkaller0: entered promiscuous mode [ 456.486030][T17514] syzkaller0: entered allmulticast mode [ 456.554430][T17516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4348'. [ 456.557328][T17516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 456.666329][T17518] 0: reclassify loop, rule prio 0, protocol 03 [ 456.852756][T17526] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 456.854898][T17526] bond10: (slave macvlan0): Enslaving as a backup interface with a down link [ 456.879360][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055c54000: rx timeout, send abort [ 456.879612][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055c54000: 0x2ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 456.886777][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804e743c00: rx timeout, send abort [ 456.887382][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804e743c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 457.417434][T17551] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 457.771819][T17564] netlink: 'syz.2.4364': attribute type 1 has an invalid length. [ 457.805010][T17570] ip_tables: iptables: counters copy to user failed while replacing table [ 457.820302][T17564] 8021q: adding VLAN 0 to HW filter on device bond12 [ 457.822973][T17567] syzkaller0: entered promiscuous mode [ 457.822994][T17567] syzkaller0: entered allmulticast mode [ 457.889144][T17564] bond12: (slave geneve3): making interface the new active one [ 457.891888][T17564] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 458.079679][T17579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4370'. [ 458.093979][ T1221] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.094033][ T1221] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.094075][ T1221] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.259297][T17579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4370'. [ 458.352024][T17587] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4374'. [ 458.368851][T17587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4374'. [ 458.931976][T17606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4382'. [ 459.045794][T17613] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4383'. [ 461.561339][T17657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4395'. [ 462.479740][T17666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4397'. [ 462.480466][T17665] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4396'. [ 462.969854][T17688] syzkaller0: entered promiscuous mode [ 462.969878][T17688] syzkaller0: entered allmulticast mode [ 463.096033][T17687] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.096073][T17687] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.603708][T17687] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.603750][T17687] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.618584][T17702] tipc: Failed to remove unknown binding: 66,0,0/0:2308245717/2308245719 [ 463.618649][T17702] tipc: Failed to remove unknown binding: 66,0,0/0:2308245717/2308245718 [ 463.622862][T17702] tipc: Failed to remove unknown binding: 66,0,0/0:2308245717/2308245718 [ 463.622888][T17702] tipc: Failed to remove unknown binding: 66,0,0/0:2308245717/2308245719 [ 463.622909][T17702] tipc: Failed to remove unknown binding: 66,0,0/0:2308245717/2308245718 [ 463.802492][T17687] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.802532][T17687] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.993888][T17687] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.993928][T17687] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.046633][T14775] nci: nci_rx_work: unknown MT 0x6 [ 464.078777][T17723] syzkaller0: entered promiscuous mode [ 464.078802][T17723] syzkaller0: entered allmulticast mode [ 464.172603][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4411'. [ 464.172632][T17725] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4411'. [ 464.452411][ T51] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.452449][ T51] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.573111][ T63] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.573146][ T63] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.573193][ T63] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.573219][ T63] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.573251][ T63] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 464.573273][ T63] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.669532][T17736] netlink: 'syz.4.4417': attribute type 1 has an invalid length. [ 464.718405][T17736] 8021q: adding VLAN 0 to HW filter on device bond11 [ 464.939123][T17745] syzkaller0: entered promiscuous mode [ 464.939146][T17745] syzkaller0: entered allmulticast mode [ 465.182538][T17752] netlink: 'syz.4.4421': attribute type 4 has an invalid length. [ 465.213964][T17752] netlink: 'syz.4.4421': attribute type 4 has an invalid length. [ 465.596758][T17761] syzkaller1: entered promiscuous mode [ 465.596782][T17761] syzkaller1: entered allmulticast mode [ 466.805188][T17712] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.228727][T17792] Failed to decode metaid 5 dlen 4 err -22 [ 467.751140][T17790] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 468.350618][T17808] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 468.850094][T17844] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4441'. [ 468.878619][T17816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.893038][T17816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.993490][T17816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.013753][T17816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.050535][T17816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.050560][T17816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.097057][T17816] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 469.097662][T17817] netlink: 'syz.2.4439': attribute type 3 has an invalid length. [ 469.097909][T17817] netlink: 'syz.2.4439': attribute type 3 has an invalid length. [ 469.211775][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.211886][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.240880][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.241001][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.421773][T17830] syzkaller0: entered promiscuous mode [ 469.421800][T17830] syzkaller0: entered allmulticast mode [ 469.609722][T17863] TC_ACT_REPEAT abuse ? [ 469.783848][T17873] Bluetooth: MGMT ver 1.23 [ 470.740267][T17910] syzkaller0: entered promiscuous mode [ 470.740291][T17910] syzkaller0: entered allmulticast mode [ 471.121706][T17924] ip_tables: iptables: counters copy to user failed while replacing table [ 471.438281][T17932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4458'. [ 471.438315][T17932] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 471.822445][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 472.384491][T17955] syzkaller0: entered promiscuous mode [ 472.384513][T17955] syzkaller0: entered allmulticast mode [ 472.661753][T17965] netlink: 'syz.0.4466': attribute type 1 has an invalid length. [ 472.675081][T17965] netlink: 'syz.0.4466': attribute type 2 has an invalid length. [ 472.939422][T17971] Bluetooth: ISO socket layer initialized [ 472.948557][ T4953] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 472.959649][ T4953] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 472.959760][ T4953] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 472.959963][ T4953] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 472.974288][ T4953] Bluetooth: hci2: unexpected event for opcode 0x0c6d [ 473.030618][T17978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4467'. [ 473.169015][T17976] netlink: 'syz.4.4471': attribute type 4 has an invalid length. [ 473.234444][T17984] syz_tun: entered allmulticast mode [ 473.236283][T17984] syz_tun: left allmulticast mode [ 473.819576][T18004] 8021q: adding VLAN 0 to HW filter on device bond13 [ 473.836187][T18010] vlan3: entered promiscuous mode [ 473.836209][T18010] hsr0: entered promiscuous mode [ 473.863763][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4482'. [ 473.864266][T18010] hsr_slave_0: left promiscuous mode [ 473.865006][T18010] hsr_slave_1: left promiscuous mode [ 473.896623][ T12] nci: nci_ntf_packet: unknown ntf opcode 0xe26 [ 473.925590][ T51] smbdirect: ib_dev[syz2] removed [ 474.106129][T18015] netlink: ct family unspecified [ 474.106160][T18015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 474.497574][T18028] ip_tables: iptables: counters copy to user failed while replacing table [ 474.564885][T18029] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4488'. [ 474.740611][T18040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4493'. [ 474.789717][T18040] macvlan1: entered promiscuous mode [ 474.789741][T18040] macvlan1: entered allmulticast mode [ 474.790552][T18040] bond11: entered promiscuous mode [ 474.799530][T18040] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 474.817964][T18040] bond11: left promiscuous mode [ 475.570743][T18049] netlink: 'syz.4.4496': attribute type 1 has an invalid length. [ 475.604513][T18049] 8021q: adding VLAN 0 to HW filter on device bond12 [ 475.633503][T18049] bond12: (slave veth29): Enslaving as an active interface with a down link [ 475.640414][T18049] dummy0: left promiscuous mode [ 475.640428][T18049] dummy0: left allmulticast mode [ 475.686669][T18049] bond12: (slave dummy0): making interface the new active one [ 475.689374][T18049] dummy0: entered promiscuous mode [ 475.689700][T18049] bond12: (slave dummy0): Enslaving as an active interface with an up link [ 475.716773][T18049] netlink: 'syz.4.4496': attribute type 10 has an invalid length. [ 475.716797][T18049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4496'. [ 475.718253][T18049] bond12: (slave dummy0): Releasing active interface [ 475.833917][T18052] netlink: 'syz.4.4497': attribute type 1 has an invalid length. [ 475.880958][T18052] bond13: (slave bridge7): Enslaving as a backup interface with an up link [ 475.950063][T18052] macvlan2: entered promiscuous mode [ 475.950087][T18052] macvlan2: entered allmulticast mode [ 475.950800][T18052] bond13: entered promiscuous mode [ 475.950819][T18052] bridge7: entered promiscuous mode [ 475.952000][T18052] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 475.964754][T18052] bond13: left promiscuous mode [ 475.964799][T18052] bridge7: left promiscuous mode [ 476.778015][T18004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 478.279295][T18074] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.279588][T18074] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.307586][T18086] tipc: Enabling of bearer rejected, failed to enable media [ 478.539786][T18098] netlink: 'syz.2.4506': attribute type 1 has an invalid length. [ 478.597543][T18098] 8021q: adding VLAN 0 to HW filter on device bond14 [ 478.629615][T18098] bond14: (slave veth0_to_bond): making interface the new active one [ 478.640959][T18098] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 478.679407][T18098] bond14: entered promiscuous mode [ 478.679430][T18098] veth0_to_bond: entered promiscuous mode [ 478.679633][T18098] bond14: entered allmulticast mode [ 478.679647][T18098] veth0_to_bond: entered allmulticast mode [ 478.754921][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4509'. [ 478.761792][T18098] macvlan0: entered promiscuous mode [ 478.761812][T18098] macvlan0: entered allmulticast mode [ 478.777129][T18098] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 478.798647][T18098] bond14: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 478.881425][T18114] tipc: Enabling of bearer rejected, failed to enable media [ 478.891548][T18107] bond12: entered promiscuous mode [ 478.891628][T18107] bond12: entered allmulticast mode [ 479.089384][T18118] syzkaller0: entered promiscuous mode [ 479.089407][T18118] syzkaller0: entered allmulticast mode [ 479.098530][T18120] syzkaller0: entered promiscuous mode [ 479.098588][T18120] syzkaller0: entered allmulticast mode [ 479.381110][T18127] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4517'. [ 479.465519][T18128] netlink: 'syz.2.4516': attribute type 1 has an invalid length. [ 479.587524][T18128] 8021q: adding VLAN 0 to HW filter on device bond15 [ 479.600197][T18134] bond14: (slave veth0_to_bond): Releasing active interface [ 479.600229][T18134] veth0_to_bond: left promiscuous mode [ 479.600402][T18134] veth0_to_bond: left allmulticast mode [ 479.638586][T18134] bond15: (slave veth0_to_bond): making interface the new active one [ 479.640334][T18134] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 479.679468][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4521'. [ 479.679494][T18143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4521'. [ 479.774294][T18128] macvlan0: entered promiscuous mode [ 479.774320][T18128] macvlan0: entered allmulticast mode [ 479.775559][T18128] bond15: entered promiscuous mode [ 479.775580][T18128] veth0_to_bond: entered promiscuous mode [ 479.776694][T18128] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 479.782050][T18128] bond15: (slave macvlan0): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 479.825892][T18128] bond15: left promiscuous mode [ 479.825926][T18128] veth0_to_bond: left promiscuous mode [ 479.874318][T18136] syzkaller0: entered promiscuous mode [ 479.874342][T18136] syzkaller0: entered allmulticast mode [ 480.469672][T18173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4533'. [ 480.535055][T18163] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 480.600240][T18179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.755848][T18181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4536'. [ 481.116151][T18196] 0: reclassify loop, rule prio 0, protocol 03 [ 481.298218][T18198] syzkaller0: entered promiscuous mode [ 481.298242][T18198] syzkaller0: entered allmulticast mode [ 482.222794][T13979] page_pool_release_retry() stalled pool shutdown: id 180, 1 inflight 60 sec [ 485.441875][T18262] rxe_eth0 speed is unknown, defaulting to 1000 [ 485.702100][ T4953] block nbd1: Receive control failed (result -32) [ 485.712623][ T53] block nbd1: Receive control failed (result -32) [ 485.864064][T18262] virt_wifi0 speed is unknown, defaulting to 1000 [ 486.200980][T18291] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4569'. [ 486.659632][ T265] nci: nci_rx_work: unknown MT 0x5 [ 486.816289][T18313] syzkaller0: entered promiscuous mode [ 486.816316][T18313] syzkaller0: entered allmulticast mode [ 487.655917][T18329] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4579'. [ 488.005125][T18332] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 489.239283][T18342] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 489.239432][T18342] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 489.544987][T18304] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.010013][T18377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4595'. [ 491.207037][T18395] netlink: 'syz.0.4599': attribute type 83 has an invalid length. [ 491.337210][T18403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4604'. [ 491.411340][T18403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4604'. [ 492.368453][T18422] syzkaller0: entered promiscuous mode [ 492.368476][T18422] syzkaller0: entered allmulticast mode [ 494.372871][T18439] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 494.374153][T18438] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 494.546656][T18439] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 494.585081][T18445] syzkaller0: entered promiscuous mode [ 494.585113][T18445] syzkaller0: entered allmulticast mode [ 494.808015][T18454] batman_adv: batadv0: Adding interface: syzkaller0 [ 494.808036][T18454] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.808068][T18454] batman_adv: batadv0: Interface activated: syzkaller0 [ 495.441017][T18461] netlink: 'syz.0.4626': attribute type 1 has an invalid length. [ 495.514959][T18463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4626'. [ 495.607206][T18461] 8021q: adding VLAN 0 to HW filter on device bond12 [ 495.654302][T18453] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 495.714146][T18453] batman_adv: batadv0: Removing interface: syzkaller0 [ 495.849465][T18465] bond12: (slave bridge12): making interface the new active one [ 495.883914][T18465] bond12: (slave bridge12): Enslaving as an active interface with an up link [ 496.221010][T18482] netlink: 'syz.1.4632': attribute type 1 has an invalid length. [ 497.249164][T18499] netlink: 'syz.0.4637': attribute type 1 has an invalid length. [ 498.487256][T18552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4648'. [ 498.781886][T18558] bridge0: port 3(syz_tun) entered disabled state [ 498.870277][T18558] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.890987][T18558] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.999689][T18573] syzkaller0: entered promiscuous mode [ 498.999714][T18573] syzkaller0: entered allmulticast mode [ 499.162472][T18577] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4656'. [ 499.162496][T18577] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4656'. [ 499.256379][T18584] xt_ipcomp: unknown flags 1D [ 499.278257][T18575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.281907][T18575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.355388][T18575] bond14: left promiscuous mode [ 499.355427][T18575] bond14: left allmulticast mode [ 499.422501][ T51] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.424156][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.424196][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.583545][T18590] ip_tables: iptables: counters copy to user failed while replacing table [ 499.736414][T18594] syzkaller0: entered promiscuous mode [ 499.736506][T18594] syzkaller0: entered allmulticast mode [ 499.948326][T18601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4665'. [ 499.949750][T18599] netlink: 'syz.3.4663': attribute type 1 has an invalid length. [ 499.977556][T18603] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4664'. [ 499.981713][T18603] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.4664'. [ 500.025656][T18599] bond14: entered promiscuous mode [ 500.026107][T18599] 8021q: adding VLAN 0 to HW filter on device bond14 [ 500.039767][T18601] bond14: entered promiscuous mode [ 500.039825][T18601] bond14: entered allmulticast mode [ 500.099961][T18599] bond14: (slave bridge4): making interface the new active one [ 500.099985][T18599] bridge4: entered promiscuous mode [ 500.119031][T18599] bond14: (slave bridge4): Enslaving as an active interface with an up link [ 500.284921][T18619] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4668'. [ 500.551046][T18627] netlink: 'syz.3.4672': attribute type 1 has an invalid length. [ 500.617670][T18627] bond15: entered promiscuous mode [ 500.619905][T18627] 8021q: adding VLAN 0 to HW filter on device bond15 [ 500.681500][T18627] macvtap2: entered allmulticast mode [ 500.721023][T18627] macvtap3: entered allmulticast mode [ 500.781747][T18627] bond15: (slave bridge5): making interface the new active one [ 500.781771][T18627] bridge5: entered promiscuous mode [ 500.800370][T18627] bond15: (slave bridge5): Enslaving as an active interface with an up link [ 501.031485][T18645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4677'. [ 501.133957][T18652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4678'. [ 501.618225][T18679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4684'. [ 501.682156][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.813160][T18679] 8021q: adding VLAN 0 to HW filter on device bond15 [ 501.817547][T18680] lo: left allmulticast mode [ 501.849206][T18680] bond15: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 501.888878][T18680] 8021q: adding VLAN 0 to HW filter on device bond15 [ 501.950108][T18680] bond15: (slave lo): Enslaving as an active interface with an up link [ 501.982348][T18678] syzkaller0: entered promiscuous mode [ 501.982370][T18678] syzkaller0: entered allmulticast mode [ 502.074412][T18690] syzkaller0: entered promiscuous mode [ 502.074436][T18690] syzkaller0: entered allmulticast mode [ 502.214049][T18704] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 502.239449][T18706] netlink: 'syz.2.4689': attribute type 4 has an invalid length. [ 502.798113][T18730] sctp: [Deprecated]: syz.0.4697 (pid 18730) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.798113][T18730] Use struct sctp_sack_info instead [ 502.843562][T18735] ip_tables: iptables: counters copy to user failed while replacing table [ 503.026631][T18739] gretap0: entered promiscuous mode [ 503.060994][T18741] syzkaller0: entered promiscuous mode [ 503.061017][T18741] syzkaller0: entered allmulticast mode [ 503.348589][T18758] : renamed from bond_slave_0 [ 503.488287][ T30] audit: type=1804 audit(1793629990.656:8): pid=18760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4709" name="/newroot/985/cgroup.controllers" dev="tmpfs" ino=5042 res=1 errno=0 [ 503.488364][ T30] audit: type=1800 audit(1793629990.656:9): pid=18760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4709" name="cgroup.controllers" dev="tmpfs" ino=5042 res=0 errno=-22 [ 503.995613][T18785] __nla_validate_parse: 2 callbacks suppressed [ 503.995633][T18785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4721'. [ 503.995744][T18785] batman_adv: batadv0: Interface deactivated: syz_tun [ 504.055208][T18785] batman_adv: batadv0: Removing interface: syz_tun [ 504.072667][T18789] xfrm0: entered promiscuous mode [ 504.072689][T18789] xfrm0: entered allmulticast mode [ 504.346060][T18800] netlink: 'syz.1.4727': attribute type 1 has an invalid length. [ 504.399841][T18800] 8021q: adding VLAN 0 to HW filter on device bond13 [ 504.468107][T18803] bond13: (slave veth21): Enslaving as an active interface with a down link [ 504.552726][T18800] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 504.555615][T18800] bond13: (slave batadv1): making interface the new active one [ 504.557327][T18800] batadv1: entered promiscuous mode [ 504.557841][T18800] bond13: (slave batadv1): Enslaving as an active interface with an up link [ 504.627359][T18800] bond13 (unregistering): (slave veth21): Releasing active interface [ 504.631682][T18800] bond13 (unregistering): (slave batadv1): Releasing active interface [ 504.631735][T18800] batadv1: left promiscuous mode [ 504.644070][T18800] bond13 (unregistering): Released all slaves [ 504.669822][T18794] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 505.108598][T18819] netlink: 'syz.2.4732': attribute type 8 has an invalid length. [ 505.149860][T18822] bond0: entered promiscuous mode [ 505.149883][T18822] bond_slave_0: entered promiscuous mode [ 505.150102][T18822] bond_slave_1: entered promiscuous mode [ 505.167142][T18822] batadv0: entered promiscuous mode [ 505.176172][T18822] debugfs: 'hsr0' already exists in 'hsr' [ 505.178560][T18822] Cannot create hsr debugfs directory [ 505.178782][T18822] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 505.178802][T18822] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 505.217288][T18822] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 505.226863][T18822] bond0: left promiscuous mode [ 505.226887][T18822] bond_slave_0: left promiscuous mode [ 505.227110][T18822] bond_slave_1: left promiscuous mode [ 505.231660][T18822] batadv0: left promiscuous mode [ 505.493151][T18830] workqueue: name exceeds WQ_NAME_LEN. Truncating to: (乭\E3悀懅樌媳鴒堳!Fo?％< [ 505.769149][T18842] syzkaller0: entered promiscuous mode [ 505.769173][T18842] syzkaller0: entered allmulticast mode [ 506.318431][T18849] syzkaller0: entered promiscuous mode [ 506.318454][T18849] syzkaller0: entered allmulticast mode [ 506.483645][T18867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4746'. [ 506.610115][T18871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4746'. [ 506.610140][T18871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4746'. [ 507.547641][T18871] veth23: entered allmulticast mode [ 507.565607][T18871] bond13: (slave veth23): Enslaving as an active interface with an up link [ 507.598513][T18873] bond13 (unregistering): (slave veth23): Releasing backup interface [ 507.611140][T18873] bond13 (unregistering): Released all slaves [ 507.999910][T18879] syzkaller0: entered promiscuous mode [ 507.999937][T18879] syzkaller0: entered allmulticast mode [ 508.104127][T18900] netlink: 'syz.2.4753': attribute type 1 has an invalid length. [ 508.166125][T18906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4753'. [ 510.036161][T18900] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 510.195522][T18932] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 510.318740][T18938] syzkaller0: entered promiscuous mode [ 510.318763][T18938] syzkaller0: entered allmulticast mode [ 510.359191][T18936] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4760'. [ 510.487099][T18943] vlan6: entered allmulticast mode [ 510.487119][T18943] bridge13: entered allmulticast mode [ 510.530867][T18936] bridge13: port 1(erspan0) entered blocking state [ 510.530981][T18936] bridge13: port 1(erspan0) entered disabled state [ 510.531183][T18936] erspan0: entered allmulticast mode [ 510.555486][T18936] erspan0: entered promiscuous mode [ 510.929653][T18961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.966030][T18961] veth0_to_bridge: entered promiscuous mode [ 511.004286][ T31] bond0: (slave bond_slave_0): link status up, enabling it in 4 ms [ 511.004311][ T31] bond0: (slave bond_slave_1): link status up, enabling it in 4 ms [ 511.032665][ T13] bond0: (slave bond_slave_0): link status up, enabling it in 4 ms [ 511.032690][ T13] bond0: (slave bond_slave_1): link status up, enabling it in 4 ms [ 511.052995][ T63] bond0: (slave bond_slave_0): link status up, enabling it in 4 ms [ 511.053021][ T63] bond0: (slave bond_slave_1): link status up, enabling it in 4 ms [ 511.073670][ T51] bond0: (slave bond_slave_0): link status up, enabling it in 4 ms [ 511.073692][ T51] bond0: (slave bond_slave_1): link status up, enabling it in 4 ms [ 511.103208][ T51] bond0: (slave bond_slave_0): link status up, enabling it in 4 ms [ 511.103232][ T51] bond0: (slave bond_slave_1): link status up, enabling it in 4 ms [ 511.110487][T18961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.222871][ T265] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.222968][ T265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.226829][ T265] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.226950][ T265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.352944][ T265] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 511.353132][ T265] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 511.353240][ T265] bond0: active interface up! [ 511.454964][T18977] tc_dump_action: action bad kind [ 511.470213][T18979] vlan7: entered promiscuous mode [ 512.313394][ T288] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.313428][ T288] netdevsim netdevsim0 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 512.313454][ T288] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 512.313479][ T288] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 512.348456][ T31] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.348487][ T31] netdevsim netdevsim0 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 512.348512][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 512.348535][ T31] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 512.456758][T18994] syzkaller0: entered promiscuous mode [ 512.456782][T18994] syzkaller0: entered allmulticast mode [ 512.740157][T19003] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4786'. [ 512.740182][T19003] netlink: 192 bytes leftover after parsing attributes in process `syz.4.4786'. [ 512.740230][T19003] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4786'. [ 513.092815][ T288] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.092845][ T288] netdevsim netdevsim0 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 513.092864][ T288] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 513.092882][ T288] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 513.142768][ T31] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 513.142800][ T31] netdevsim netdevsim0 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 513.142824][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 513.142847][ T31] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 513.367906][T19005] syzkaller0: entered promiscuous mode [ 513.367931][T19005] syzkaller0: entered allmulticast mode [ 513.817913][T19029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4793'. [ 513.863603][T19033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4795'. [ 514.007337][T19037] syzkaller0: entered promiscuous mode [ 514.007373][T19037] syzkaller0: entered allmulticast mode [ 514.019910][T19035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4796'. [ 514.130077][T19043] bond16: entered promiscuous mode [ 514.130100][T19043] bond16: entered allmulticast mode [ 514.158622][T19040] syzkaller0: entered promiscuous mode [ 514.158655][T19040] syzkaller0: entered allmulticast mode [ 514.351280][T19047] syzkaller0: entered promiscuous mode [ 514.351303][T19047] syzkaller0: entered allmulticast mode [ 514.445553][T19051] netlink: 'syz.1.4803': attribute type 1 has an invalid length. [ 514.470231][T19051] batman_adv: batadv0: Adding interface: dummy0 [ 514.470246][T19051] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 514.470343][T19051] batman_adv: batadv0: Interface activated: dummy0 [ 514.683702][T19060] syzkaller0: entered promiscuous mode [ 514.683727][T19060] syzkaller0: entered allmulticast mode [ 514.739801][T19063] netlink: 'syz.1.4805': attribute type 1 has an invalid length. [ 514.842902][T19063] bond13: (slave veth25): Enslaving as an active interface with a down link [ 514.904390][T19063] bond13: (slave veth0_to_bond): making interface the new active one [ 514.905445][T19063] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 514.909821][T19063] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4805'. [ 514.942772][T19063] 8021q: adding VLAN 0 to HW filter on device bond13 [ 515.045010][T19068] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.4810'. [ 515.045367][T19068] 0猉功D龌: renamed from gretap0 (while UP) [ 515.212931][T19082] netlink: 'syz.2.4813': attribute type 1 has an invalid length. [ 515.310685][T19082] veth21: entered allmulticast mode [ 515.321531][T19082] bond17: (slave veth21): Enslaving as an active interface with a down link [ 515.346156][T19082] bond15: (slave veth0_to_bond): Releasing active interface [ 515.363946][T19082] bond17: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 515.384655][T19087] syzkaller0: entered promiscuous mode [ 515.384675][T19087] syzkaller0: entered allmulticast mode [ 515.488325][T19089] syzkaller0: entered promiscuous mode [ 515.488347][T19089] syzkaller0: entered allmulticast mode [ 515.612102][T19092] syzkaller0: entered promiscuous mode [ 515.612122][T19092] syzkaller0: entered allmulticast mode [ 515.707617][T19098] syzkaller0: entered promiscuous mode [ 515.707639][T19098] syzkaller0: entered allmulticast mode [ 515.774162][T19102] netlink: 'syz.4.4823': attribute type 1 has an invalid length. [ 515.910370][T19102] 8021q: adding VLAN 0 to HW filter on device bond16 [ 516.131441][T19113] syzkaller0: entered promiscuous mode [ 516.131465][T19113] syzkaller0: entered allmulticast mode [ 516.470501][T19123] syzkaller0: entered promiscuous mode [ 516.470525][T19123] syzkaller0: entered allmulticast mode [ 517.158896][T19141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4836'. [ 517.981194][T19160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4842'. [ 518.020385][T19160] bond17: entered promiscuous mode [ 518.020974][T19160] 8021q: adding VLAN 0 to HW filter on device bond17 [ 518.116446][T19160] 8021q: adding VLAN 0 to HW filter on device bond17 [ 518.121186][T19160] bond17: (slave sit3): The slave device specified does not support setting the MAC address [ 518.121886][T19160] bond17: (slave sit3): Error -95 calling set_mac_address [ 518.276887][T19168] syzkaller0: entered promiscuous mode [ 518.276911][T19168] syzkaller0: entered allmulticast mode [ 518.329959][T19169] syzkaller0: entered promiscuous mode [ 518.329981][T19169] syzkaller0: entered allmulticast mode [ 518.335106][T19171] syzkaller0: entered promiscuous mode [ 518.335160][T19171] syzkaller0: entered allmulticast mode [ 518.515237][T19173] syzkaller0: entered promiscuous mode [ 518.515260][T19173] syzkaller0: entered allmulticast mode [ 518.561021][T19175] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.648870][T19182] v: renamed from vlan1 (while UP) [ 518.781023][T19188] syzkaller0: entered promiscuous mode [ 518.781062][T19188] syzkaller0: entered allmulticast mode [ 518.806246][T19188] net_ratelimit: 32 callbacks suppressed [ 518.806266][T19188] TC_ACT_REPEAT abuse ? [ 518.925339][T19192] tipc: Enabled bearer , priority 0 [ 518.928240][T19185] tipc: Resetting bearer [ 519.000086][T19185] tipc: Disabling bearer [ 519.215859][T19196] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 519.296604][T19212] syzkaller0: entered promiscuous mode [ 519.296627][T19212] syzkaller0: entered allmulticast mode [ 519.583315][T19221] syzkaller0: entered promiscuous mode [ 519.583337][T19221] syzkaller0: entered allmulticast mode [ 519.584349][T19223] syzkaller0: entered promiscuous mode [ 519.584367][T19223] syzkaller0: entered allmulticast mode [ 520.144137][T19236] netlink: 'syz.2.4871': attribute type 1 has an invalid length. [ 520.146310][T19237] netlink: 632 bytes leftover after parsing attributes in process `syz.3.4870'. [ 520.290031][T19236] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4871'. [ 520.401698][T19236] bond18: (slave bridge11): making interface the new active one [ 520.421050][T19236] bond18: (slave bridge11): Enslaving as an active interface with an up link [ 521.827627][T19283] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4881'. [ 521.830318][T19283] syzkaller0: entered promiscuous mode [ 521.830336][T19283] syzkaller0: entered allmulticast mode [ 521.988129][T19289] syzkaller0: entered promiscuous mode [ 521.988152][T19289] syzkaller0: entered allmulticast mode [ 522.144342][T19293] syzkaller0: entered promiscuous mode [ 522.144365][T19293] syzkaller0: entered allmulticast mode [ 522.153032][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 522.375676][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4889'. [ 522.375718][T19304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4889'. [ 524.045243][T19343] ip_tables: iptables: counters copy to user failed while replacing table [ 524.048199][T19343] netlink: 'syz.2.4900': attribute type 1 has an invalid length. [ 525.394780][T19350] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4902'. [ 525.845719][T19343] workqueue: Failed to create a rescuer kthread for wq "bond20": -EINTR [ 526.018920][T19363] syzkaller0: entered promiscuous mode [ 526.018943][T19363] syzkaller0: entered allmulticast mode [ 526.048962][T19363] tipc: Enabled bearer , priority 0 [ 526.050316][T19361] tipc: Resetting bearer [ 526.111370][T19361] tipc: Disabling bearer [ 526.264081][T19377] netlink: 'syz.1.4910': attribute type 12 has an invalid length. [ 526.276297][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4910'. [ 526.403522][T19372] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 526.688394][T19393] ip_tables: iptables: counters copy to user failed while replacing table [ 526.812901][T19397] syzkaller0: entered promiscuous mode [ 526.812925][T19397] syzkaller0: entered allmulticast mode [ 527.323706][T19404] syzkaller0: entered promiscuous mode [ 527.323728][T19404] syzkaller0: entered allmulticast mode [ 527.918332][T19424] syzkaller0: entered promiscuous mode [ 527.918354][T19424] syzkaller0: entered allmulticast mode [ 527.924916][T19424] TC_ACT_REPEAT abuse ? [ 528.136890][T19432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.151293][T19428] batman_adv: batadv0: Adding interface: veth0 [ 528.151307][T19428] batman_adv: batadv0: The MTU of interface veth0 is too small (1282) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.151405][T19428] batman_adv: batadv0: Interface activated: veth0 [ 528.217644][T19428] batman_adv: batadv0: Interface deactivated: veth0 [ 528.217668][T19428] batman_adv: batadv0: Removing interface: veth0 [ 529.264563][T19462] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4932'. [ 529.551587][T19454] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 529.859465][ T5297] veth0_macvtap: left promiscuous mode [ 530.179938][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 530.180545][T19489] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 530.440334][T19517] netlink: 'syz.1.4941': attribute type 12 has an invalid length. [ 530.440356][T19517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4941'. [ 532.089780][T19486] bond0: (slave bridge0): Releasing backup interface [ 532.090985][T19486] bridge_slave_0: left allmulticast mode [ 532.091000][T19486] bridge_slave_0: left promiscuous mode [ 532.092748][T19486] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.120848][T19486] bridge_slave_1: left allmulticast mode [ 532.120864][T19486] bridge_slave_1: left promiscuous mode [ 532.121005][T19486] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.154792][T19486] bond17: (slave veth0_to_bond): Releasing active interface [ 532.174964][T19486] bond0: (slave 17): Releasing backup interface [ 532.179059][T19486] bond0: (slave bond_slave_1): Releasing backup interface [ 532.180968][T19486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.206625][T19486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.209940][T19486] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 532.210049][T19488] syzkaller0: entered promiscuous mode [ 532.210066][T19488] syzkaller0: entered allmulticast mode [ 532.263831][T19517] bond0: option primary_reselect: invalid value (39) [ 532.393771][T19525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4943'. [ 532.466635][T19528] syzkaller0: entered promiscuous mode [ 532.466658][T19528] syzkaller0: entered allmulticast mode [ 532.600412][T19531] syzkaller0: entered promiscuous mode [ 532.600436][T19531] syzkaller0: entered allmulticast mode [ 532.700312][T19529] syzkaller0: entered promiscuous mode [ 532.700335][T19529] syzkaller0: entered allmulticast mode [ 532.703478][T19533] tipc: Started in network mode [ 532.703505][T19533] tipc: Node identity e6eeac622c31, cluster identity 4711 [ 532.720302][T19533] tipc: Enabled bearer , priority 0 [ 532.740906][T19527] tipc: Resetting bearer [ 532.807800][T19541] netlink: 'syz.3.4949': attribute type 39 has an invalid length. [ 532.854162][T19527] tipc: Disabling bearer [ 533.254095][T19559] syzkaller0: entered promiscuous mode [ 533.254119][T19559] syzkaller0: entered allmulticast mode [ 533.421971][ T288] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 533.498434][T19566] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 534.025541][ T51] bond0: (slave bond_slave_0): interface is now down [ 534.025578][ T51] bond0: (slave bond_slave_1): interface is now down [ 534.029406][ T51] bond0: now running without any active interface! [ 534.136846][ T288] nci: nci_rx_work: unknown MT 0x1 [ 535.081863][T19624] syzkaller0: entered promiscuous mode [ 535.081886][T19624] syzkaller0: entered allmulticast mode [ 535.346145][T19628] netlink: 'syz.1.4971': attribute type 3 has an invalid length. [ 535.346168][T19628] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4971'. [ 535.483310][T19633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4973'. [ 536.218544][T19646] syzkaller0: entered promiscuous mode [ 536.218568][T19646] syzkaller0: entered allmulticast mode [ 536.462360][ T4953] Bluetooth: hci4: command 0x0405 tx timeout [ 536.928197][T19589] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 537.214138][T19669] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4984'. [ 537.385707][T19672] netlink: 208 bytes leftover after parsing attributes in process `syz.0.4985'. [ 538.953780][T19680] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 538.955001][T19676] syzkaller0: entered promiscuous mode [ 538.955020][T19676] syzkaller0: entered allmulticast mode [ 539.290947][T19700] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4992'. [ 539.380861][T19699] syzkaller0: entered promiscuous mode [ 539.380886][T19699] syzkaller0: entered allmulticast mode [ 539.515231][T19709] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4994'. [ 540.348693][T19724] syzkaller0: entered promiscuous mode [ 540.348716][T19724] syzkaller0: entered allmulticast mode [ 540.734419][T19744] tipc: Enabled bearer , priority 0 [ 540.738683][T19744] syzkaller0: entered promiscuous mode [ 540.738703][T19744] syzkaller0: entered allmulticast mode [ 540.780108][T19744] tipc: Resetting bearer [ 540.802907][T19743] tipc: Resetting bearer [ 540.857017][T19743] tipc: Disabling bearer [ 540.899115][ T30] audit: type=1804 audit(1793630028.066:10): pid=19750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5004" name="/newroot/1030/cgroup.controllers" dev="tmpfs" ino=5278 res=1 errno=0 [ 540.899330][ T30] audit: type=1800 audit(1793630028.066:11): pid=19750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.5004" name="cgroup.controllers" dev="tmpfs" ino=5278 res=0 errno=-22 [ 540.967706][T19747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.971132][T19747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.027992][T19747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 541.028019][T19747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 541.031753][T19747] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 541.177540][T19757] syzkaller0: entered promiscuous mode [ 541.177562][T19757] syzkaller0: entered allmulticast mode [ 541.225373][T19758] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5006'. [ 541.330724][T19759] netlink: 'syz.1.5005': attribute type 21 has an invalid length. [ 541.330751][T19759] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5005'. [ 541.388011][T19759] netlink: 'syz.1.5005': attribute type 4 has an invalid length. [ 541.388033][T19759] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5005'. [ 541.611737][T19764] syzkaller0: entered promiscuous mode [ 541.611761][T19764] syzkaller0: entered allmulticast mode [ 541.643035][T19768] ip_tables: iptables: counters copy to user failed while replacing table [ 541.988297][T19770] batman_adv: batadv0: Interface deactivated: dummy0 [ 542.339050][T19770] xfrm0: left promiscuous mode [ 542.508865][T19770] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 542.539939][T19770] bridge1: left promiscuous mode [ 542.573067][T19770] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 542.574030][T19775] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 542.667334][ T12] bond13: (slave veth0_to_bond): link status definitely down, disabling slave [ 542.668547][ T12] bond13: now running without any active interface! [ 542.675067][T19798] wlan1 speed is unknown, defaulting to 1000 [ 542.715182][T19798] wlan1 speed is unknown, defaulting to 1000 [ 542.716033][T19798] wlan1 speed is unknown, defaulting to 1000 [ 542.750838][T19798] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 542.750877][T19798] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 542.750921][T19798] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 542.868664][T19803] ip_tables: iptables: counters copy to user failed while replacing table [ 543.171520][T19802] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 543.309899][T19798] wlan1 speed is unknown, defaulting to 1000 [ 543.313510][ T160] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.313578][ T160] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.314524][ T160] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.314611][ T160] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.314754][ T160] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.314814][ T160] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.314914][ T160] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 543.314996][ T160] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.397822][T19811] syzkaller0: entered promiscuous mode [ 543.397844][T19811] syzkaller0: entered allmulticast mode [ 543.470112][T19798] wlan1 speed is unknown, defaulting to 1000 [ 543.791731][T19798] wlan1 speed is unknown, defaulting to 1000 [ 543.798566][T19798] wlan1 speed is unknown, defaulting to 1000 [ 543.801853][T19798] wlan1 speed is unknown, defaulting to 1000 [ 544.170265][T19837] netlink: 168 bytes leftover after parsing attributes in process `syz.4.5030'. [ 544.505588][T19853] sch_tbf: burst 7 is lower than device syzkaller0 mtu (1500) ! [ 544.521023][T19853] syzkaller0: entered promiscuous mode [ 544.521046][T19853] syzkaller0: entered allmulticast mode [ 545.275215][T19880] batman_adv: batadv0: Removing interface: dummy0 [ 545.306487][T19880] bond13: (slave veth0_to_bond): Releasing active interface [ 545.311644][T19880] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 545.360777][T19880] team0: Mode changed to "broadcast" [ 545.378261][T19882] netlink: 'syz.2.5037': attribute type 16 has an invalid length. [ 545.381735][T19885] syzkaller0: entered promiscuous mode [ 545.381754][T19885] syzkaller0: entered allmulticast mode [ 545.594487][T19880] vlan0: entered promiscuous mode [ 545.594513][T19880] dummy0: entered promiscuous mode [ 545.594780][T19880] vlan0: left allmulticast mode [ 545.594797][T19880] dummy0: left allmulticast mode [ 545.597616][T19886] tipc: Enabled bearer , priority 0 [ 545.635928][T19894] netlink: 236 bytes leftover after parsing attributes in process `syz.0.5039'. [ 545.635983][T19894] openvswitch: netlink: IP tunnel dst address not specified [ 545.781344][T19899] syzkaller0: entered promiscuous mode [ 545.781366][T19899] syzkaller0: entered allmulticast mode [ 545.817649][T19901] netlink: 'syz.2.5043': attribute type 1 has an invalid length. [ 546.140177][T19912] syzkaller0: entered promiscuous mode [ 546.140198][T19912] syzkaller0: entered allmulticast mode [ 546.162814][T19912] tc mirred: target device is gone [ 546.448323][T19928] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5049'. [ 546.693566][T19933] syzkaller0: entered promiscuous mode [ 546.693599][T19933] syzkaller0: entered allmulticast mode [ 547.046755][T19944] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 547.232574][T19951] sch_tbf: burst 4398 is lower than device lo mtu (32783) ! [ 547.488134][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5057'. [ 548.284237][T19987] tipc: Enabled bearer , priority 0 [ 548.286137][T19987] syzkaller0: entered promiscuous mode [ 548.286157][T19987] syzkaller0: entered allmulticast mode [ 548.322731][T19987] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 548.347738][T19987] tipc: Resetting bearer [ 548.358424][T19986] tipc: Resetting bearer [ 548.414700][T19986] tipc: Disabling bearer [ 548.583176][T19984] ip_tables: iptables: counters copy to user failed while replacing table [ 548.804530][T19996] syzkaller0: entered promiscuous mode [ 548.804553][T19996] syzkaller0: entered allmulticast mode [ 550.161102][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055bcbc00: rx timeout, send abort [ 550.161307][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888055bcbc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 551.099984][T20009] syzkaller0: entered promiscuous mode [ 551.100009][T20009] syzkaller0: entered allmulticast mode [ 551.858683][T20013] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 551.954403][T20015] netlink: 'syz.2.5076': attribute type 1 has an invalid length. [ 552.058651][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5076'. [ 552.191550][T20015] bond20: entered promiscuous mode [ 552.195011][T20015] 8021q: adding VLAN 0 to HW filter on device bond20 [ 552.253195][T20025] 8021q: adding VLAN 0 to HW filter on device bond20 [ 552.253619][T20025] bond20: (slave wireguard0): The slave device specified does not support setting the MAC address [ 552.253640][T20025] bond20: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 552.326357][T20025] bond20: (slave wireguard0): making interface the new active one [ 552.326383][T20025] wireguard0: entered promiscuous mode [ 552.327881][T20025] bond20: (slave wireguard0): Enslaving as an active interface with an up link [ 552.449069][T20031] syzkaller0: entered promiscuous mode [ 552.449094][T20031] syzkaller0: entered allmulticast mode [ 555.495238][T20062] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 555.686620][T20066] IPVS: Scheduler module ip_vs_sip not found [ 557.589814][T20052] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5084'. [ 557.800054][T20092] syzkaller0: entered promiscuous mode [ 557.800076][T20092] syzkaller0: entered allmulticast mode [ 558.082852][T20110] syzkaller0: entered promiscuous mode [ 558.082877][T20110] syzkaller0: entered allmulticast mode [ 558.239735][T20115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 558.258333][T20115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5109'. [ 558.846491][T20133] netlink: 'syz.4.5103': attribute type 1 has an invalid length. [ 558.903875][T20133] bond17: entered promiscuous mode [ 558.904336][T20133] 8021q: adding VLAN 0 to HW filter on device bond17 [ 558.921955][T20138] netlink: 'syz.1.5104': attribute type 1 has an invalid length. [ 558.922008][T20138] netlink: 244 bytes leftover after parsing attributes in process `syz.1.5104'. [ 558.979057][T20140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5102'. [ 559.002066][T20133] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5103'. [ 559.004385][T20133] bond17: entered allmulticast mode [ 559.105342][T20133] bond17: (slave bridge8): making interface the new active one [ 559.105363][T20133] bridge8: entered promiscuous mode [ 559.105507][T20133] bridge8: entered allmulticast mode [ 559.143668][T20133] bond17: (slave bridge8): Enslaving as an active interface with an up link [ 559.361549][T20156] syzkaller0: entered promiscuous mode [ 559.361570][T20156] syzkaller0: entered allmulticast mode [ 559.393105][T20156] netlink: 2724 bytes leftover after parsing attributes in process `syz.0.5110'. [ 559.393257][T20156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5110'. [ 559.393276][T20156] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5110'. [ 559.397087][T20156] TC_ACT_REPEAT abuse ? [ 559.860765][T20163] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 559.937148][T20173] syzkaller1: entered promiscuous mode [ 559.937172][T20173] syzkaller1: entered allmulticast mode [ 560.437907][T20181] syzkaller0: entered promiscuous mode [ 560.437924][T20181] syzkaller0: entered allmulticast mode [ 560.452700][T20181] tc mirred: Loop (syzkaller0:egress --> syzkaller0:egress) [ 560.642647][T20185] syzkaller0: entered promiscuous mode [ 560.642663][T20185] syzkaller0: entered allmulticast mode [ 560.754891][T20187] syzkaller0: entered promiscuous mode [ 560.754908][T20187] syzkaller0: entered allmulticast mode [ 562.092922][T20145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 562.279642][T20197] lo: entered allmulticast mode [ 562.459334][T20207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5129'. [ 562.669847][T20206] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.072702][T20206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 563.105787][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.136778][T20206] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 563.553752][T20197] lo: left allmulticast mode [ 564.032364][T19639] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.032399][T19639] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.032434][T19639] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.032457][T19639] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.032488][T19639] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 564.032513][T19639] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.367574][T20233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5135'. [ 564.444643][T20238] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5135'. [ 564.459417][T20233] 8021q: adding VLAN 0 to HW filter on device bond18 [ 564.460439][T20238] bond18: entered promiscuous mode [ 564.460460][T20238] bond18: entered allmulticast mode [ 564.461064][T20237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5136'. [ 564.524291][T20233] bond7: (slave dummy0): Removing an active aggregator [ 564.525176][T20233] bond7: (slave dummy0): Releasing backup interface [ 564.559294][T20233] dummy0: entered promiscuous mode [ 564.559887][T20233] dummy0: entered allmulticast mode [ 564.560853][T20233] bond18: (slave dummy0): Enslaving as an active interface with an up link [ 564.598300][T20241] syzkaller0: entered promiscuous mode [ 564.598321][T20241] syzkaller0: entered allmulticast mode [ 564.615074][T20233] netlink: 'syz.3.5135': attribute type 10 has an invalid length. [ 564.615093][T20233] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5135'. [ 564.617290][T20233] bond18: (slave dummy0): Releasing backup interface [ 564.618756][T20233] dummy0: left allmulticast mode [ 564.682731][T20244] syzkaller0: entered promiscuous mode [ 564.682751][T20244] syzkaller0: entered allmulticast mode [ 564.685960][T20244] 0: reclassify loop, rule prio 0, protocol 700 [ 564.761036][T20246] xt_hashlimit: size too large, truncated to 1048576 [ 564.850487][T20250] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 564.995447][T20254] syzkaller0: entered promiscuous mode [ 564.995468][T20254] syzkaller0: entered allmulticast mode [ 565.270234][T20263] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5144'. [ 565.437822][T20272] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5147'. [ 565.543544][ T4953] Bluetooth: hci2: unexpected cc 0x0403 length: 44 > 1 [ 565.543576][ T4953] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 565.868123][T20281] syzkaller0: entered promiscuous mode [ 565.868145][T20281] syzkaller0: entered allmulticast mode [ 566.031679][T20283] netlink: 'syz.1.5152': attribute type 1 has an invalid length. [ 566.101263][T20286] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5153'. [ 566.114446][T20286] gretap0: entered promiscuous mode [ 566.124868][T20286] netlink: 5 bytes leftover after parsing attributes in process `syz.2.5153'. [ 566.124989][T20286] 0{X功: renamed from gretap0 [ 566.127179][T20286] 0{X功: left promiscuous mode [ 566.127198][T20286] 0{X功: entered allmulticast mode [ 566.129451][T20286] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 566.316707][T20292] erspan0: left allmulticast mode [ 566.316734][T20292] erspan0: left promiscuous mode [ 566.316955][T20292] bridge13: port 1(erspan0) entered disabled state [ 566.346513][T20292] syz_tun: left allmulticast mode [ 566.346743][T20292] bridge0: port 3(syz_tun) entered disabled state [ 566.367870][T20292] bridge_slave_0: left allmulticast mode [ 566.367907][T20292] bridge_slave_0: left promiscuous mode [ 566.368095][T20292] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.394458][T20292] bridge_slave_1: left allmulticast mode [ 566.394482][T20292] bridge_slave_1: left promiscuous mode [ 566.394675][T20292] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.424432][T20292] bond0: (slave bond_slave_0): Releasing backup interface [ 566.441092][T20292] bond0: (slave bond_slave_1): Releasing backup interface [ 566.476417][T20292] team0: Port device team_slave_0 removed [ 566.501538][T20292] team0: Port device team_slave_1 removed [ 566.511687][T20292] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 566.549118][T20293] team0: Port device xfrm0 added [ 566.643698][T20296] veth0: entered promiscuous mode [ 566.741128][T20296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5158'. [ 566.757045][T20301] netlink: 'syz.3.5161': attribute type 1 has an invalid length. [ 566.796002][T20305] netlink: 'syz.1.5160': attribute type 1 has an invalid length. [ 566.838284][T20301] bond19: entered promiscuous mode [ 566.838667][T20301] 8021q: adding VLAN 0 to HW filter on device bond19 [ 566.916164][T20301] veth25: entered allmulticast mode [ 566.928013][T20301] bond19: (slave veth25): making interface the new active one [ 566.928038][T20301] veth25: entered promiscuous mode [ 566.931651][T20301] bond19: (slave veth25): Enslaving as an active interface with an up link [ 566.972049][T20309] macvtap1: entered allmulticast mode [ 566.991370][T20305] bond14: (slave bridge5): making interface the new active one [ 567.000068][T20305] bond14: (slave bridge5): Enslaving as an active interface with an up link [ 567.000248][T20308] syzkaller0: entered promiscuous mode [ 567.000296][T20308] syzkaller0: entered allmulticast mode [ 567.151836][T20316] syzkaller0: entered promiscuous mode [ 567.151860][T20316] syzkaller0: entered allmulticast mode [ 567.295435][T20319] syzkaller0: entered promiscuous mode [ 567.295458][T20319] syzkaller0: entered allmulticast mode [ 567.425407][T20326] syzkaller0: entered promiscuous mode [ 567.425429][T20326] syzkaller0: entered allmulticast mode [ 567.501217][T20329] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 567.660998][T20336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5169'. [ 567.979973][T20345] syzkaller0: entered promiscuous mode [ 567.980006][T20345] syzkaller0: entered allmulticast mode [ 567.987906][T20345] 0: reclassify loop, rule prio 0, protocol 700 [ 568.216209][T20348] syzkaller0: entered promiscuous mode [ 568.216235][T20348] syzkaller0: entered allmulticast mode [ 568.254040][T18704] IPVS: ip_vs_send_async error -101 [ 568.467339][T20359] syzkaller0: entered promiscuous mode [ 568.467361][T20359] syzkaller0: entered allmulticast mode [ 569.407030][T20373] syzkaller0: entered promiscuous mode [ 569.407051][T20373] syzkaller0: entered allmulticast mode [ 569.408677][ T265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.426428][T20373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.921064][T20389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.303316][T18704] IPVS: ip_vs_send_async error -101 [ 570.701803][T20418] batman_adv: batadv0: Adding interface: syzkaller0 [ 570.701822][T20418] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 570.701853][T20418] batman_adv: batadv0: Interface activated: syzkaller0 [ 570.763700][T20410] IPVS: Scheduler module ip_vs_sip not found [ 570.818573][T20413] gretap0: left promiscuous mode [ 570.868576][T20413] 8021q: adding VLAN 0 to HW filter on device team0 [ 570.870851][T20413] tipc: Resetting bearer [ 570.884931][T20413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 571.000777][T20413] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 571.000796][T20413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 571.021010][T20413] veth1_macvtap: left promiscuous mode [ 571.037842][T20413] veth0_macvtap: left promiscuous mode [ 571.039194][T20413] veth0_macvtap: entered promiscuous mode [ 571.041006][T20413] veth1_macvtap: entered promiscuous mode [ 571.077229][T20413] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 571.082446][ T265] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.082853][ T265] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.082951][ T265] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.083047][ T265] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.101036][T20421] syzkaller0: entered promiscuous mode [ 571.101095][T20421] syzkaller0: entered allmulticast mode [ 571.158431][T20423] syzkaller0: entered promiscuous mode [ 571.158455][T20423] syzkaller0: entered allmulticast mode [ 571.258096][T20429] lo: entered allmulticast mode [ 571.331976][T20412] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 571.378081][T20434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5197'. [ 571.417655][T20412] batman_adv: batadv0: Removing interface: syzkaller0 [ 571.435551][T20437] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5197'. [ 571.535931][T20430] lo: left allmulticast mode [ 571.784423][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 571.878187][T20447] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.122780][T20462] syzkaller0: entered promiscuous mode [ 572.122803][T20462] syzkaller0: entered allmulticast mode [ 572.255534][T20467] netlink: 'syz.1.5205': attribute type 1 has an invalid length. [ 572.391103][T20469] syzkaller0: entered promiscuous mode [ 572.391124][T20469] syzkaller0: entered allmulticast mode [ 572.414301][T20471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5207'. [ 572.459429][T20473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 572.496144][T20474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5207'. [ 572.613801][T20479] netlink: 'syz.2.5207': attribute type 10 has an invalid length. [ 572.613826][T20479] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5207'. [ 572.661252][T20471] 8021q: adding VLAN 0 to HW filter on device bond21 [ 572.671091][T20474] bond21: entered promiscuous mode [ 572.671125][T20474] bond21: entered allmulticast mode [ 572.684203][T20478] lo: entered allmulticast mode [ 572.754356][T20481] lo: left allmulticast mode [ 572.856232][T20485] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 572.858906][T20485] netlink: 'syz.1.5212': attribute type 1 has an invalid length. [ 572.894511][T20483] ip_tables: iptables: counters copy to user failed while replacing table [ 572.901713][T20485] bond15: entered promiscuous mode [ 572.902108][T20485] 8021q: adding VLAN 0 to HW filter on device bond15 [ 572.927963][T20485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5212'. [ 572.931903][T20485] bond15: entered allmulticast mode [ 573.002977][T20490] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5211'. [ 573.024244][T20485] bond15: (slave bridge6): making interface the new active one [ 573.024267][T20485] bridge6: entered promiscuous mode [ 573.024565][T20485] bridge6: entered allmulticast mode [ 573.025608][T20485] bond15: (slave bridge6): Enslaving as an active interface with an up link [ 573.041480][T20490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5211'. [ 573.251660][T20500] syzkaller0: entered promiscuous mode [ 573.251682][T20500] syzkaller0: entered allmulticast mode [ 573.266240][T20504] veth0: entered promiscuous mode [ 573.269553][ T265] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 573.307747][T20495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 573.410680][T20502] veth0: left promiscuous mode [ 573.472993][T20511] tipc: Enabled bearer , priority 0 [ 573.473776][T20511] syzkaller0: entered promiscuous mode [ 573.473794][T20511] syzkaller0: entered allmulticast mode [ 573.504128][T20511] tipc: Resetting bearer [ 573.518424][T20510] tipc: Resetting bearer [ 573.555760][T20510] tipc: Disabling bearer [ 573.659373][T20517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5222'. [ 573.840127][T20517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5222'. [ 573.890898][T20526] nbd: device at index 64 is going down [ 574.688247][T20535] tipc: Resetting bearer [ 574.709189][T20535] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 576.551436][T20535] team0: Mode changed to "activebackup" [ 576.714289][T20550] __nla_validate_parse: 4 callbacks suppressed [ 576.714309][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5231'. [ 576.714821][T20552] ip_tables: iptables: counters copy to user failed while replacing table [ 576.829809][T20552] netlink: 'syz.3.5233': attribute type 16 has an invalid length. [ 576.829832][T20552] netlink: 'syz.3.5233': attribute type 17 has an invalid length. [ 576.851208][T20555] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.861022][T20555] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.948928][T20552] dummy0: left promiscuous mode [ 576.969931][T20552] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.970056][T20552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.994557][T20552] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.994678][T20552] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.033025][T20565] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 577.036373][T20552] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 577.070099][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 577.128457][T20559] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 577.399120][T20572] syzkaller0: entered promiscuous mode [ 577.399144][T20572] syzkaller0: entered allmulticast mode [ 577.783706][T20591] syzkaller0: entered promiscuous mode [ 577.783728][T20591] syzkaller0: entered allmulticast mode [ 577.786046][T20591] 0: reclassify loop, rule prio 0, protocol 800 [ 577.924819][T20594] syzkaller0: entered promiscuous mode [ 577.924842][T20594] syzkaller0: entered allmulticast mode [ 578.084600][ T4953] Bluetooth: hci3: ISO packet for unknown connection handle 3684 [ 578.221249][T20602] netlink: 'syz.1.5247': attribute type 1 has an invalid length. [ 578.747551][T20632] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 578.768171][T20624] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5249'. [ 579.197835][T20648] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 579.224233][T20649] syzkaller0: entered promiscuous mode [ 579.224257][T20649] syzkaller0: entered allmulticast mode [ 579.487784][T20644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 579.600043][T20657] syzkaller0: entered promiscuous mode [ 579.600065][T20657] syzkaller0: entered allmulticast mode [ 579.629900][T20650] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 580.041553][T20664] netlink: 'syz.1.5262': attribute type 3 has an invalid length. [ 580.324202][T20669] syzkaller0: entered promiscuous mode [ 580.324226][T20669] syzkaller0: entered allmulticast mode [ 581.034636][T20686] syzkaller0: entered promiscuous mode [ 581.034659][T20686] syzkaller0: entered allmulticast mode [ 581.071322][T20688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.137222][T20690] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5272'. [ 581.145515][T20690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5272'. [ 581.424966][T20697] bond12: (slave syz_tun): Removing an active aggregator [ 581.425550][T20697] bond12: (slave syz_tun): Releasing backup interface [ 581.460010][T20614] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 581.496068][T20697] bridge_slave_0: left allmulticast mode [ 581.496093][T20697] bridge_slave_0: left promiscuous mode [ 581.496297][T20697] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.530694][T20697] bridge_slave_1: left allmulticast mode [ 581.530718][T20697] bridge_slave_1: left promiscuous mode [ 581.530919][T20697] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.577378][T20697] bond10: (slave veth0_to_bond): Releasing backup interface [ 581.615420][T20697] bond0: (slave bond_slave_0): Releasing backup interface [ 581.648953][T20697] bond0: (slave bond_slave_1): Releasing backup interface [ 581.693528][T20697] team0: Port device team_slave_0 removed [ 581.720191][T20697] team0: Port device team_slave_1 removed [ 581.721095][T20697] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 581.721116][T20697] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.789702][T20697] bond1: (slave gretap1): Releasing active interface [ 581.820031][T20697] bond3: (slave xfrm1): Releasing backup interface [ 581.847987][T20697] bond5: (slave ip6gre1): Releasing backup interface [ 581.865445][T20697] batman_adv: batadv0: Removing interface: ip6gretap2 [ 581.886313][T20697] bond7: (slave veth11): Releasing backup interface [ 581.891484][T20697] bond8: (slave bridge2): Releasing backup interface [ 581.917541][T20697] bond14: (slave bridge4): Releasing backup interface [ 581.917565][T20697] bridge4: left promiscuous mode [ 581.929699][T20713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5277'. [ 581.981049][T20697] bond15: (slave bridge5): Releasing backup interface [ 581.981076][T20697] bridge5: left promiscuous mode [ 582.026692][T20697] bond19: (slave veth25): Releasing backup interface [ 582.026719][T20697] veth25: left promiscuous mode [ 582.099175][T20700] team0: Mode changed to "activebackup" [ 582.109094][T20703] veth0: entered promiscuous mode [ 582.687114][T20727] ip_tables: iptables: counters copy to user failed while replacing table [ 582.737427][T20730] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5284'. [ 582.793273][T20730] 8021q: adding VLAN 0 to HW filter on device bond16 [ 582.806993][T20730] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5284'. [ 582.823584][T20730] bridge7: entered promiscuous mode [ 582.827475][T20730] bond16: (slave bridge7): Enslaving as an active interface with an up link [ 583.030615][T20736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5286'. [ 583.052232][T20736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5286'. [ 583.211517][T20739] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 583.351517][T20740] ip6tnl0: Caught tx_queue_len zero misconfig [ 583.351543][T20740] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5288'. [ 583.386286][T20749] veth0: entered promiscuous mode [ 583.472956][T20749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5291'. [ 583.478175][T20748] veth0: left promiscuous mode [ 583.498286][T20751] bond15: (slave lo): Releasing backup interface [ 583.511554][T20751] bond15: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 583.511880][T20751] A link change request failed with some changes committed already. Interface 00猉功D龌 may have been left with an inconsistent configuration, please check. [ 583.559482][T20751] team0: No ports can be present during mode change [ 583.851401][T20769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5293'. [ 584.019671][T20761] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 584.019980][T20767] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 584.208068][T20771] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 584.274032][T20771] syzkaller0: entered promiscuous mode [ 584.274059][T20771] syzkaller0: entered allmulticast mode [ 584.499899][T20783] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 584.607298][T20786] syzkaller0: entered promiscuous mode [ 584.607318][T20786] syzkaller0: entered allmulticast mode [ 584.852025][T20790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5301'. [ 584.867995][T20790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5301'. [ 585.656192][T20819] syzkaller0: entered promiscuous mode [ 585.656217][T20819] syzkaller0: entered allmulticast mode [ 586.323830][T20831] syzkaller0: entered promiscuous mode [ 586.323853][T20831] syzkaller0: entered allmulticast mode [ 586.888467][T20849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.016602][T20851] __nla_validate_parse: 3 callbacks suppressed [ 587.016622][T20851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5323'. [ 587.033741][T20851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5323'. [ 587.502681][ T53] Bluetooth: hci4: command 0x0405 tx timeout [ 587.669177][T20865] dummy0: entered allmulticast mode [ 587.698832][T20871] syzkaller0: entered promiscuous mode [ 587.698855][T20871] syzkaller0: entered allmulticast mode [ 587.701950][T20871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5330'. [ 587.701974][T20871] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5330'. [ 587.821705][T20879] IPVS: set_ctl: invalid protocol: 43 172.30.0.4:20001 [ 588.060924][T20889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5335'. [ 588.081999][T20889] syz_tun: entered allmulticast mode [ 588.108907][T20889] syz_tun: left allmulticast mode [ 588.189336][T20892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5333'. [ 588.399763][T20900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 588.417817][T20899] syzkaller0: entered promiscuous mode [ 588.417840][T20899] syzkaller0: entered allmulticast mode [ 588.436469][T19638] hfsc: classify hop budget exhausted, dropping packet [ 588.444068][T20899] hfsc: classify hop budget exhausted, dropping packet [ 588.480053][T20409] nci: nci_rx_work: unknown MT 0x1 [ 588.934713][T20913] netlink: 'syz.0.5342': attribute type 1 has an invalid length. [ 588.979052][T20913] bond13: entered promiscuous mode [ 588.979496][T20913] 8021q: adding VLAN 0 to HW filter on device bond13 [ 589.008672][T20913] ipvlan2: entered allmulticast mode [ 589.008692][T20913] bond13: entered allmulticast mode [ 589.028539][T20913] ipvlan3: entered allmulticast mode [ 589.067327][T20913] bond13: (slave bridge15): making interface the new active one [ 589.067350][T20913] bridge15: entered promiscuous mode [ 589.067508][T20913] bridge15: entered allmulticast mode [ 589.069619][T20913] bond13: (slave bridge15): Enslaving as an active interface with an up link [ 589.388168][T20921] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 589.516999][T20926] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5346'. [ 590.214558][T20931] syzkaller0: entered promiscuous mode [ 590.214577][T20931] syzkaller0: entered allmulticast mode [ 590.712934][T20954] syzkaller0: entered promiscuous mode [ 590.712958][T20954] syzkaller0: entered allmulticast mode [ 590.804861][T20955] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5352'. [ 590.805514][T20954] sch_tbf: burst 173 is lower than device syzkaller0 mtu (1514) ! [ 591.358307][T20900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 591.660064][T20970] tipc: Enabled bearer , priority 0 [ 591.661892][T20970] syzkaller0: entered promiscuous mode [ 591.661912][T20970] syzkaller0: entered allmulticast mode [ 591.797264][T20965] syzkaller0: entered promiscuous mode [ 591.797289][T20965] syzkaller0: entered allmulticast mode [ 591.810417][T20970] tipc: Resetting bearer [ 591.826671][T20965] tipc: Enabled bearer , priority 0 [ 591.829160][T20968] tipc: Resetting bearer [ 591.931082][T20968] tipc: Disabling bearer [ 591.987069][T20963] tipc: Resetting bearer [ 592.008274][T20991] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5360'. [ 592.079498][T20963] tipc: Disabling bearer [ 592.117643][T20985] syzkaller0: entered promiscuous mode [ 592.117667][T20985] syzkaller0: entered allmulticast mode [ 592.377201][T21000] syzkaller0: entered promiscuous mode [ 592.377225][T21000] syzkaller0: entered allmulticast mode [ 592.899040][T21025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5367'. [ 593.420150][T21038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5373'. [ 593.666448][T21049] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 593.733005][T21052] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5378'. [ 593.778071][T21052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5378'. [ 593.802514][T21051] syzkaller1: entered promiscuous mode [ 593.802541][T21051] syzkaller1: entered allmulticast mode [ 593.912734][T21058] lo: entered allmulticast mode [ 593.954030][T21058] lo: left allmulticast mode [ 594.060865][T21065] tc action pedit unable to extract header offset for header type (0x5) [ 594.060887][T21065] tc action pedit unable to extract header offset for header type (0x5) [ 594.060899][T21065] tc action pedit unable to extract header offset for header type (0x5) [ 594.060912][T21065] tc action pedit unable to extract header offset for header type (0x5) [ 594.060923][T21065] tc action pedit unable to extract header offset for header type (0x5) [ 594.060936][T21065] tc action pedit unable to extract header offset for header type (0x5) [ 594.060948][T21065] tc action pedit unable to extract header offset for header type (0x5) [ 594.060960][T21065] tc action pedit unable to extract header offset for header type (0x5) [ 594.060972][T21065] tc action pedit unable to extract header offset for header type (0x5) [ 594.060984][T21065] tc action pedit unable to extract header offset for header type (0x5) [ 594.061007][T21065] 0: reclassify loop, rule prio 0, protocol 800 [ 594.360973][T21071] tipc: Started in network mode [ 594.361006][T21071] tipc: Node identity c6d88bad575, cluster identity 4711 [ 594.361210][T21071] tipc: Enabled bearer , priority 0 [ 594.676794][T21087] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 594.676878][T21087] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 597.485038][T21077] syzkaller0: entered promiscuous mode [ 597.485082][T21077] syzkaller0: entered allmulticast mode [ 597.550400][T21086] tipc: Resetting bearer [ 597.602961][T21089] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 597.605161][ T10] tipc: Node number set to 2441644973 [ 597.723928][T21097] xt_IDLETIMER: label is empty or not nul-terminated [ 597.755618][T21097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5389'. [ 597.799849][T21100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5391'. [ 597.959342][T21116] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5393'. [ 598.013933][T21116] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5393'. [ 598.359107][T21129] syzkaller0: entered promiscuous mode [ 598.359130][T21129] syzkaller0: entered allmulticast mode [ 598.372670][T21132] netlink: 'syz.2.5400': attribute type 1 has an invalid length. [ 598.471992][T21134] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5400'. [ 598.520098][T21132] 8021q: adding VLAN 0 to HW filter on device bond22 [ 598.565369][ T30] audit: type=1804 audit(1793630085.736:12): pid=21139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5402" name="/newroot/1089/cgroup.controllers" dev="tmpfs" ino=5571 res=1 errno=0 [ 598.565566][ T30] audit: type=1800 audit(1793630085.736:13): pid=21139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5402" name="cgroup.controllers" dev="tmpfs" ino=5571 res=0 errno=-22 [ 598.638309][T21137] netlink: 'syz.2.5400': attribute type 10 has an invalid length. [ 598.638330][T21137] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5400'. [ 598.638512][T21134] bond22: entered promiscuous mode [ 598.638530][T21134] bond22: entered allmulticast mode [ 598.678817][T21141] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5401'. [ 598.831383][ T63] tipc: Subscription rejected, illegal request [ 598.918198][T21148] syzkaller0: entered promiscuous mode [ 598.918233][T21148] syzkaller0: entered allmulticast mode [ 598.951218][T21148] tipc: Enabled bearer , priority 0 [ 599.021893][T21148] tipc: Resetting bearer [ 599.022072][T21148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.022095][T21148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.068476][T21153] netlink: 'syz.4.5407': attribute type 1 has an invalid length. [ 599.068498][T21153] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5407'. [ 599.068788][T21147] tipc: Resetting bearer [ 599.069848][T21153] netlink: 'syz.4.5407': attribute type 11 has an invalid length. [ 599.195252][T21147] tipc: Disabling bearer [ 600.490453][T21175] syzkaller0: entered promiscuous mode [ 600.490495][T21175] syzkaller0: entered allmulticast mode [ 602.131560][T21204] block nbd0: reconnected socket [ 602.571283][T21208] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5421'. [ 602.881960][ T4953] block nbd0: Receive control failed (result -32) [ 603.121948][T21157] [ 603.124350][T21157] ====================================================== [ 603.131387][T21157] WARNING: possible circular locking dependency detected [ 603.138434][T21157] syzkaller #0 Not tainted [ 603.142865][T21157] ------------------------------------------------------ [ 603.149897][T21157] syz.3.5409/21157 is trying to acquire lock: [ 603.155982][T21157] ffff88801cec4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 603.165921][T21157] [ 603.165921][T21157] but task is already holding lock: [ 603.173332][T21157] ffffffff90a1a600 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 603.182196][T21157] [ 603.182196][T21157] which lock already depends on the new lock. [ 603.182196][T21157] [ 603.192622][T21157] [ 603.192622][T21157] the existing dependency chain (in reverse order) is: [ 603.201675][T21157] [ 603.201675][T21157] -> #10 (gdp_mutex){+.+.}-{4:4}: [ 603.208919][T21157] __mutex_lock+0x197/0x15a0 [ 603.214181][T21157] get_device_parent+0x16f/0x3a0 [ 603.219671][T21157] device_add+0x2d4/0xb80 [ 603.224586][T21157] device_create+0x269/0x300 [ 603.229780][T21157] msr_device_create+0x33/0x50 [ 603.235142][T21157] cpuhp_invoke_callback+0x434/0x810 [ 603.241013][T21157] cpuhp_thread_fun+0x362/0x780 [ 603.246418][T21157] smpboot_thread_fn+0x5f8/0xb30 [ 603.251900][T21157] kthread+0x38b/0x480 [ 603.256526][T21157] ret_from_fork+0x514/0xb70 [ 603.261690][T21157] ret_from_fork_asm+0x1a/0x30 [ 603.267014][T21157] [ 603.267014][T21157] -> #9 (cpuhp_state-up){+.+.}-{0:0}: [ 603.274597][T21157] cpuhp_thread_fun+0x127/0x780 [ 603.279999][T21157] smpboot_thread_fn+0x5f8/0xb30 [ 603.285483][T21157] kthread+0x38b/0x480 [ 603.290109][T21157] ret_from_fork+0x514/0xb70 [ 603.295244][T21157] ret_from_fork_asm+0x1a/0x30 [ 603.300547][T21157] [ 603.300547][T21157] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 603.308300][T21157] cpus_read_lock+0x3d/0x160 [ 603.313460][T21157] static_key_slow_inc+0x12/0x30 [ 603.318989][T21157] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 603.325425][T21157] nbd_genl_foreach_sock+0x265/0x450 [ 603.331267][T21157] nbd_genl_reconfigure+0xbbb/0x1040 [ 603.337156][T21157] genl_family_rcv_msg_doit+0x233/0x340 [ 603.343324][T21157] genl_rcv_msg+0x614/0x7a0 [ 603.348394][T21157] netlink_rcv_skb+0x226/0x4a0 [ 603.353741][T21157] genl_rcv+0x28/0x40 [ 603.358250][T21157] netlink_unicast+0x8ef/0xa80 [ 603.363551][T21157] netlink_sendmsg+0x7f0/0xb20 [ 603.368854][T21157] sock_sendmsg_nosec+0x14e/0x190 [ 603.374497][T21157] ____sys_sendmsg+0x54e/0x850 [ 603.379802][T21157] ___sys_sendmsg+0x2a5/0x360 [ 603.385012][T21157] __x64_sys_sendmsg+0x1b1/0x290 [ 603.390474][T21157] do_syscall_64+0x166/0x520 [ 603.395669][T21157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.402133][T21157] [ 603.402133][T21157] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 603.409801][T21157] __mutex_lock+0x197/0x15a0 [ 603.414938][T21157] nbd_queue_rq+0x373/0xff0 [ 603.420012][T21157] blk_mq_dispatch_rq_list+0x499/0x1990 [ 603.426199][T21157] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 603.433129][T21157] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 603.439658][T21157] blk_mq_run_work_fn+0x167/0x2f0 [ 603.445217][T21157] process_scheduled_works+0xc3d/0x1630 [ 603.451294][T21157] worker_thread+0xa47/0xfb0 [ 603.456430][T21157] kthread+0x38b/0x480 [ 603.461027][T21157] ret_from_fork+0x514/0xb70 [ 603.466147][T21157] ret_from_fork_asm+0x1a/0x30 [ 603.471441][T21157] [ 603.471441][T21157] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 603.478659][T21157] __mutex_lock+0x197/0x15a0 [ 603.483782][T21157] nbd_queue_rq+0xc1/0xff0 [ 603.488748][T21157] blk_mq_dispatch_rq_list+0x499/0x1990 [ 603.494838][T21157] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 603.501709][T21157] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 603.508214][T21157] blk_mq_run_work_fn+0x167/0x2f0 [ 603.513766][T21157] process_scheduled_works+0xc3d/0x1630 [ 603.519842][T21157] worker_thread+0xa47/0xfb0 [ 603.524971][T21157] kthread+0x38b/0x480 [ 603.529577][T21157] ret_from_fork+0x514/0xb70 [ 603.534696][T21157] ret_from_fork_asm+0x1a/0x30 [ 603.539990][T21157] [ 603.539990][T21157] -> #5 (set->srcu){.+.+}-{0:0}: [ 603.547121][T21157] __synchronize_srcu+0xca/0x2f0 [ 603.552638][T21157] elevator_switch+0x1e8/0x7b0 [ 603.558013][T21157] elevator_change+0x2fa/0x480 [ 603.563312][T21157] elevator_set_default+0x375/0x440 [ 603.569053][T21157] blk_register_queue+0x404/0x4f0 [ 603.574651][T21157] __add_disk+0x6b8/0xdb0 [ 603.579547][T21157] add_disk_fwnode+0x100/0x3a0 [ 603.585032][T21157] nbd_dev_add+0x733/0xb60 [ 603.589973][T21157] nbd_init+0x168/0x1f0 [ 603.594725][T21157] do_one_initcall+0x250/0x870 [ 603.600019][T21157] do_initcall_level+0x10a/0x1a0 [ 603.605540][T21157] do_initcalls+0x59/0xa0 [ 603.610429][T21157] kernel_init_freeable+0x29d/0x3e0 [ 603.616200][T21157] kernel_init+0x22/0x1d0 [ 603.621076][T21157] ret_from_fork+0x514/0xb70 [ 603.626240][T21157] ret_from_fork_asm+0x1a/0x30 [ 603.631546][T21157] [ 603.631546][T21157] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 603.639376][T21157] __mutex_lock+0x197/0x15a0 [ 603.644499][T21157] elevator_change+0x1af/0x480 [ 603.649799][T21157] elevator_set_none+0xb5/0x140 [ 603.655202][T21157] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 603.661536][T21157] nbd_start_device+0x189/0xb30 [ 603.666933][T21157] nbd_genl_connect+0x167d/0x1cd0 [ 603.672510][T21157] genl_family_rcv_msg_doit+0x233/0x340 [ 603.678607][T21157] genl_rcv_msg+0x614/0x7a0 [ 603.683645][T21157] netlink_rcv_skb+0x226/0x4a0 [ 603.688951][T21157] genl_rcv+0x28/0x40 [ 603.693472][T21157] netlink_unicast+0x8ef/0xa80 [ 603.698797][T21157] netlink_sendmsg+0x7f0/0xb20 [ 603.704102][T21157] sock_sendmsg_nosec+0x14e/0x190 [ 603.709658][T21157] ____sys_sendmsg+0x54e/0x850 [ 603.714969][T21157] ___sys_sendmsg+0x2a5/0x360 [ 603.720184][T21157] __x64_sys_sendmsg+0x1b1/0x290 [ 603.725648][T21157] do_syscall_64+0x166/0x520 [ 603.730767][T21157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.737192][T21157] [ 603.737192][T21157] -> #3 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 603.745813][T21157] blk_alloc_queue+0x544/0x690 [ 603.751134][T21157] __blk_mq_alloc_disk+0x194/0x390 [ 603.756781][T21157] nbd_dev_add+0x494/0xb60 [ 603.761752][T21157] nbd_init+0x168/0x1f0 [ 603.766439][T21157] do_one_initcall+0x250/0x870 [ 603.771768][T21157] do_initcall_level+0x10a/0x1a0 [ 603.777236][T21157] do_initcalls+0x59/0xa0 [ 603.782095][T21157] kernel_init_freeable+0x29d/0x3e0 [ 603.787820][T21157] kernel_init+0x22/0x1d0 [ 603.792681][T21157] ret_from_fork+0x514/0xb70 [ 603.797810][T21157] ret_from_fork_asm+0x1a/0x30 [ 603.803122][T21157] [ 603.803122][T21157] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 603.810352][T21157] fs_reclaim_acquire+0x71/0x100 [ 603.815866][T21157] kmem_cache_alloc_lru_noprof+0x65/0x5f0 [ 603.822126][T21157] alloc_inode+0xb8/0x1b0 [ 603.827057][T21157] iget_locked+0x12c/0x690 [ 603.832009][T21157] kernfs_get_inode+0x4f/0x770 [ 603.837346][T21157] kernfs_get_tree+0x5cd/0x980 [ 603.842646][T21157] vfs_get_tree+0x92/0x2a0 [ 603.847597][T21157] do_new_mount+0x325/0xb00 [ 603.852690][T21157] __se_sys_mount+0x31d/0x420 [ 603.857917][T21157] do_syscall_64+0x166/0x520 [ 603.863039][T21157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.869460][T21157] [ 603.869460][T21157] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 603.877457][T21157] down_write+0x91/0x200 [ 603.882303][T21157] kernfs_remove_by_name_ns+0x4e/0x140 [ 603.888294][T21157] device_links_driver_bound+0x4ab/0x1440 [ 603.894579][T21157] driver_bound+0xd8/0x2e0 [ 603.899608][T21157] really_probe+0x774/0xae0 [ 603.904660][T21157] __driver_probe_device+0x1e8/0x360 [ 603.910555][T21157] driver_probe_device+0x4f/0x240 [ 603.916105][T21157] __device_attach_driver+0x270/0x410 [ 603.922003][T21157] bus_for_each_drv+0x258/0x2f0 [ 603.927384][T21157] __device_attach+0x2bd/0x430 [ 603.932680][T21157] device_initial_probe+0x9c/0x100 [ 603.938325][T21157] __bus_probe_device+0x126/0x220 [ 603.943881][T21157] device_add+0x7d7/0xb80 [ 603.948768][T21157] faux_device_create_with_groups+0x1a5/0x2b0 [ 603.955420][T21157] regulator_dummy_init+0x19/0x40 [ 603.961005][T21157] regulator_init+0xca/0x110 [ 603.966130][T21157] do_one_initcall+0x250/0x870 [ 603.971423][T21157] do_initcall_level+0x10a/0x1a0 [ 603.976912][T21157] do_initcalls+0x59/0xa0 [ 603.981798][T21157] kernel_init_freeable+0x29d/0x3e0 [ 603.987527][T21157] kernel_init+0x22/0x1d0 [ 603.992389][T21157] ret_from_fork+0x514/0xb70 [ 603.997509][T21157] ret_from_fork_asm+0x1a/0x30 [ 604.002806][T21157] [ 604.002806][T21157] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 604.011429][T21157] __lock_acquire+0x164c/0x2de0 [ 604.016835][T21157] lock_acquire+0x115/0x350 [ 604.021878][T21157] down_read+0x45/0x320 [ 604.026588][T21157] kernfs_remove+0x35/0x80 [ 604.031537][T21157] __kobject_del+0xe0/0x310 [ 604.036633][T21157] kobject_del+0x45/0x60 [ 604.041413][T21157] cleanup_glue_dir+0x1a3/0x220 [ 604.046791][T21157] device_del+0x77d/0x8f0 [ 604.051684][T21157] unregister_netdevice_many_notify+0x181a/0x1d80 [ 604.058636][T21157] unregister_netdevice_queue+0x2f5/0x340 [ 604.064887][T21157] nsim_destroy+0x275/0x800 [ 604.069974][T21157] __nsim_dev_port_del+0x14e/0x200 [ 604.075627][T21157] nsim_dev_reload_destroy+0x288/0x490 [ 604.081636][T21157] nsim_dev_reload_down+0x8a/0xc0 [ 604.087185][T21157] devlink_reload+0x1ed/0x7f0 [ 604.092477][T21157] devlink_nl_reload_doit+0xa96/0xc80 [ 604.098391][T21157] genl_family_rcv_msg_doit+0x233/0x340 [ 604.104461][T21157] genl_rcv_msg+0x614/0x7a0 [ 604.109503][T21157] netlink_rcv_skb+0x226/0x4a0 [ 604.114808][T21157] genl_rcv+0x28/0x40 [ 604.119321][T21157] netlink_unicast+0x8ef/0xa80 [ 604.124641][T21157] netlink_sendmsg+0x7f0/0xb20 [ 604.129971][T21157] sock_sendmsg_nosec+0x14e/0x190 [ 604.135527][T21157] ____sys_sendmsg+0x54e/0x850 [ 604.140836][T21157] ___sys_sendmsg+0x2a5/0x360 [ 604.146039][T21157] __x64_sys_sendmsg+0x1b1/0x290 [ 604.151501][T21157] do_syscall_64+0x166/0x520 [ 604.156643][T21157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.163075][T21157] [ 604.163075][T21157] other info that might help us debug this: [ 604.163075][T21157] [ 604.173312][T21157] Chain exists of: [ 604.173312][T21157] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 604.173312][T21157] [ 604.186715][T21157] Possible unsafe locking scenario: [ 604.186715][T21157] [ 604.194166][T21157] CPU0 CPU1 [ 604.199539][T21157] ---- ---- [ 604.204944][T21157] lock(gdp_mutex); [ 604.208858][T21157] lock(cpuhp_state-up); [ 604.215712][T21157] lock(gdp_mutex); [ 604.222179][T21157] rlock(&root->kernfs_supers_rwsem); [ 604.227650][T21157] [ 604.227650][T21157] *** DEADLOCK *** [ 604.227650][T21157] [ 604.235827][T21157] locks held by syz.3.5409/21157: 5, last CPU#0: [ 604.242158][T21157] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 604.250344][T21157] #1: ffff888028be2128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x34a/0x490 [ 604.260705][T21157] #2: ffff888028be1258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x360/0x490 [ 604.271885][T21157] #3: ffffffff9148c2a0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 604.280905][T21157] #4: ffffffff90a1a600 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 604.290045][T21157] [ 604.290045][T21157] stack backtrace: [ 604.295968][T21157] CPU: 0 UID: 0 PID: 21157 Comm: syz.3.5409 Not tainted syzkaller #0 PREEMPT(full) [ 604.305341][T21157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 604.315408][T21157] Call Trace: [ 604.318689][T21157] [ 604.321621][T21157] dump_stack_lvl+0xe8/0x150 [ 604.326230][T21157] print_circular_bug+0x2e2/0x300 [ 604.331369][T21157] check_noncircular+0x12f/0x150 [ 604.336321][T21157] __lock_acquire+0x164c/0x2de0 [ 604.341297][T21157] lock_acquire+0x115/0x350 [ 604.345811][T21157] ? kernfs_remove+0x35/0x80 [ 604.350430][T21157] down_read+0x45/0x320 [ 604.354590][T21157] ? kernfs_remove+0x35/0x80 [ 604.359185][T21157] kernfs_remove+0x35/0x80 [ 604.363604][T21157] __kobject_del+0xe0/0x310 [ 604.368118][T21157] kobject_del+0x45/0x60 [ 604.372373][T21157] cleanup_glue_dir+0x1a3/0x220 [ 604.377237][T21157] device_del+0x77d/0x8f0 [ 604.381585][T21157] ? __pfx_device_del+0x10/0x10 [ 604.386439][T21157] ? pm_runtime_set_memalloc_noio+0x1e7/0x260 [ 604.392580][T21157] ? netdev_unregister_kobject+0x347/0x450 [ 604.398463][T21157] unregister_netdevice_many_notify+0x181a/0x1d80 [ 604.404889][T21157] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 604.411655][T21157] ? __mutex_lock+0x10de/0x15a0 [ 604.416513][T21157] ? __mutex_lock+0x5cd/0x15a0 [ 604.421292][T21157] unregister_netdevice_queue+0x2f5/0x340 [ 604.427030][T21157] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 604.433279][T21157] ? mutex_destroy+0x39/0xf0 [ 604.437879][T21157] nsim_destroy+0x275/0x800 [ 604.442396][T21157] __nsim_dev_port_del+0x14e/0x200 [ 604.447515][T21157] nsim_dev_reload_destroy+0x288/0x490 [ 604.452992][T21157] nsim_dev_reload_down+0x8a/0xc0 [ 604.458020][T21157] devlink_reload+0x1ed/0x7f0 [ 604.462713][T21157] ? __pfx_devlink_reload+0x10/0x10 [ 604.467923][T21157] ? devlink_resources_validate+0xa7/0xd0 [ 604.473733][T21157] ? devlink_resources_validate+0xa7/0xd0 [ 604.479465][T21157] devlink_nl_reload_doit+0xa96/0xc80 [ 604.484858][T21157] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 604.490783][T21157] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 604.497118][T21157] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 604.503471][T21157] genl_family_rcv_msg_doit+0x233/0x340 [ 604.509024][T21157] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 604.515098][T21157] ? bpf_lsm_capable+0x9/0x20 [ 604.519778][T21157] ? security_capable+0x7e/0x2c0 [ 604.524874][T21157] genl_rcv_msg+0x614/0x7a0 [ 604.529398][T21157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.534427][T21157] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 604.540866][T21157] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 604.546771][T21157] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 604.553296][T21157] netlink_rcv_skb+0x226/0x4a0 [ 604.558077][T21157] ? __pfx_genl_rcv_msg+0x10/0x10 [ 604.563114][T21157] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 604.568418][T21157] ? down_read+0x2b9/0x320 [ 604.572847][T21157] genl_rcv+0x28/0x40 [ 604.576842][T21157] netlink_unicast+0x8ef/0xa80 [ 604.581621][T21157] netlink_sendmsg+0x7f0/0xb20 [ 604.586399][T21157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.591693][T21157] ? aa_sock_msg_perm+0x144/0x210 [ 604.596787][T21157] ? apparmor_socket_sendmsg+0x98/0x360 [ 604.602371][T21157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.607662][T21157] sock_sendmsg_nosec+0x14e/0x190 [ 604.612697][T21157] ____sys_sendmsg+0x54e/0x850 [ 604.617471][T21157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.622765][T21157] ? import_iovec+0x73/0xa0 [ 604.627331][T21157] ___sys_sendmsg+0x2a5/0x360 [ 604.632011][T21157] ? __lock_acquire+0x747/0x2de0 [ 604.636971][T21157] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.642194][T21157] ? futex_wait+0x2a2/0x390 [ 604.646763][T21157] ? __fget_files+0x3a2/0x420 [ 604.651457][T21157] ? __fget_files+0x2a/0x420 [ 604.656060][T21157] __x64_sys_sendmsg+0x1b1/0x290 [ 604.661070][T21157] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 604.666551][T21157] do_syscall_64+0x166/0x520 [ 604.671152][T21157] ? trace_irq_disable+0x3b/0x140 [ 604.676209][T21157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.682289][T21157] ? clear_bhb_loop+0x70/0xc0 [ 604.686991][T21157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.692897][T21157] RIP: 0033:0x7f1bce19fb19 [ 604.697333][T21157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.716954][T21157] RSP: 002b:00007f1bcefd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.725380][T21157] RAX: ffffffffffffffda RBX: 00007f1bce425fa0 RCX: 00007f1bce19fb19 [ 604.733369][T21157] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 604.741348][T21157] RBP: 00007f1bce237b70 R08: 0000000000000000 R09: 0000000000000000 [ 604.749359][T21157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.757345][T21157] R13: 00007f1bce426038 R14: 00007f1bce425fa0 R15: 00007fff367f5f78 [ 604.765341][T21157] [ 604.938088][T21225] netlink: 6145 bytes leftover after parsing attributes in process `syz.4.5424'. [ 604.938174][T21225] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 605.090979][T21215] Set syz1 is full, maxelem 6117 reached