last executing test programs: 3.131099531s ago: executing program 3 (id=6008): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}, 0x4}, 0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000100005040100000000000000000000000000000000000000000000000c0003006272696467653000200012800b00010062726964676500000d0002800500070001000000"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000000000000000000000000000a0003007665746830000000340012800900010076657468000000002400028020000100000000000000000000000000000000000a0003007665746831000000"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'veth0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r5, @ANYBLOB="1400018008000100000001000500030003000000"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000000400)='X', 0x34000, 0xe0, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x84) close(0x3) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800014000000004080002400000000038000000060a010400000000000000000200000a0900010073797a30000000000900020073797a30000000120c000640"], 0xc0}}, 0x0) r7 = openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xffff0001}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @multicast1}], 0x2c) close(r8) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) write$cgroup_devices(r7, &(0x7f0000000a40)={'c', ' *:* ', 'rwm\x00'}, 0xa) 3.03840321s ago: executing program 1 (id=6009): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r3], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000001880)={@mcast2, @mcast2, @dev={0xfe, 0x80, '\x00', 0x40}, 0xa1a, 0x0, 0x4d14, 0x400, 0x8, 0x2000000, r3}) 2.753011748s ago: executing program 2 (id=6012): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)="d8000000180081064e81f782db4cb904021e0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016001500090002000000035c3b61c1d67f6f94007134cf6efbca4158858e796834b25ae5a3048000a007a290457f01a7cee4090000001fb7913fd25a21ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f", 0xa2}, {&(0x7f0000000a80)="c6e92830568379be24e7d2cfa14e3179fea6a9af4f780998ebb65a384d5eea865c38871cc1350c7e42fcf530054c203e2273e02faf8c31", 0x37}], 0x2}, 0x22040000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000c00)={'ip_vti0\x00', &(0x7f0000000b80)={'gretap0\x00', 0x0, 0x1, 0x8000, 0x4, 0x6, {{0x14, 0x4, 0x3, 0x3f, 0x50, 0x65, 0x0, 0xc, 0x2f, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0x13, 0x36, [@remote, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x17, 0x6e, [@empty, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @dev={0xac, 0x14, 0x14, 0x19}]}, @generic={0x86, 0xd, "9edf47e1075b0cab6fa52c"}]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000c80)) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000cc0)=0x0, &(0x7f0000000d00)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000dc0)={'ip6_vti0\x00', &(0x7f0000000d40)={'ip6tnl0\x00', 0x0, 0x2f, 0x3, 0x9, 0x28595932, 0x38, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x7, 0x8080, 0xb50d, 0x4}}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e00)={0x144, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x24008000}, 0x24040040) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000040)={r6, 0x1, 0x6}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000080)={r6, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000800)={0x3, 0x8, 0x7fffffff, 0x2, 0x3, 0x100000001, 0x27e2, 0xd}, &(0x7f0000000840)={0x5, 0x3, 0x101, 0xb21b, 0x0, 0x8000000000000001, 0x10001, 0x6}, 0x0, &(0x7f0000000880)={0x77359400}, &(0x7f00000008c0)={&(0x7f0000000900)={[0x6e3]}, 0x8}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002200020929580000001300"/28], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000002c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000004ad5d6f32c4751000000000000000000000000000000000000000000000000a070ec4f0b299168e0b525ef1a3ae150670253a8da", @ANYRES16=r9, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x840) write$nci(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="610501"], 0x10e6) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000700)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r11, &(0x7f0000000740)={0xa, 0x4e1d, 0x9, @local, 0x4}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000780)={@random="79ee7c2eea00", @local, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e1f, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "dc521c2587538a00004000", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000b2f0cbaa1f357331000000180001801400020073797a5f74756e000000000000000000080002000f"], 0x34}, 0x1, 0x0, 0x0, 0x400c890}, 0x4080000) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r12, &(0x7f00000006c0)={&(0x7f0000000540), 0xc, &(0x7f0000000680)={&(0x7f00000005c0)={0xc0, r14, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x74}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000000) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x100, {0x0, 0x0, 0x0, r6, {0xe, 0x1}, {}, {0x0, 0x7}}}, 0x24}}, 0x4) 2.480543452s ago: executing program 0 (id=6013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x9c}}, 0x0) 2.375809217s ago: executing program 0 (id=6014): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000680)=r2, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmmsg(r3, &(0x7f0000000740), 0x800001d, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x810, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, 0x0, 0x4800) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0xc40) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) r9 = socket(0x840000000002, 0x3, 0x100) connect$can_bcm(r9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x6}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x5c, 0x2, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x2e37}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xfffffff7, 0x5, 0x20000000, 0x7, 0x401}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x9}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x94}}, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x6e) r11 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0xff000000, 'dummy0\x00', 'ipvlan0\x00', {0xff}, {}, 0x73, 0x3, 0x40}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xedd47732473098dc}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x80000001, 0x4, 0x1, 0x0, 0x0, "b130473c3113287a14b2984e26e5ff46eb81427191a1f41c9bfcf29a4cb60b90def126cff9aa7aff33caf874d1d1fca2b4b4520019e6d9b145f05d68d0304287"}}}, {{@ip={@rand_addr=0x64010100, @multicast2, 0x0, 0xff000000, 'batadv_slave_1\x00', '\x00', {0xff}, {}, 0x62, 0x3, 0x5c}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x5, 0x3, 0x0, 0x0, 0x3, 0x4], 0x0, 0x2}, {0x0, [0x4, 0x4, 0x0, 0x1, 0x1, 0x2], 0x6, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) 1.760678033s ago: executing program 1 (id=6015): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180080000300000000000000000600007d00000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000001580)=@newlink={0x74, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x58d1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x1}, @IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x74}, 0x1, 0x0, 0x0, 0x840}, 0x0) getpeername$packet(r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b80)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x25dfdbfe, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404}], [@TCA_POLICE_RATE={0x404}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r0, 0x323, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000040}, 0x40010) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xd, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000700)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r8, 0x2000012, 0xd, 0x0, &(0x7f00000007c0)="63ec33c9e9b986000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="3c010000100001002bbc700004000004fc000000000000000000000000000001ac14143d00000000000000000000002300002008000300050a00600000000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffac1e01010000000032000000ac141432000000000000000000000000feffffffffffffff0400000000000000030000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000890000000000000003000000000000000408400000000000090000000000000092020000000000000000b01c000000000000000026bd700000000000020004006c000000000000004c00020063626328626c6f77666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020"], 0x13c}, 0x1, 0x0, 0x0, 0x8000}, 0x44050) r11 = socket$inet_sctp(0x2, 0x5, 0x84) r12 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000800)={0x0, 0x10, &(0x7f0000000840)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000880)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r12, 0x84, 0x1d, &(0x7f00000008c0)={0x1, [0x0]}, &(0x7f0000000900)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r11, 0x84, 0x71, &(0x7f0000000940)={r13, 0x8001}, 0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000001440)={r13, 0xbb, "6a92e4936c0d367d724a51a58fd1a610d5a9fdcd8e4ee745fc20b172ad036c2e42725506811241ab6dcaca3d2b6f2c860425a2444e50c00851fbe575bf987d569d4676813c90097f033f6bbf23cf9dc92348308555f5dfe8dc81faf24cf6ed0962e52f95f8f89e450ef6ea8ffdf75480a04e0eec8c98a717f62dd27e39554b6e218a506b95d397ca7676e679be900c168184609c08ab98906d51407326c69ae6485a37c94fa8d2cbbde0740235144ed0de72df49842f67ff84a20b"}, &(0x7f0000001540)=0xc3) 1.618718234s ago: executing program 2 (id=6017): r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 1.504386388s ago: executing program 2 (id=6018): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000010000104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="00800000bcb5f31a34001280110001006272696467655f736c617665000000001c0005800500010000000000050020000100000005002100a1000000140003006272696467655f736c6176655f30"], 0x68}, 0x1, 0x0, 0x0, 0x44000}, 0x0) 1.46256487s ago: executing program 3 (id=6019): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f00000001c0)={&(0x7f0000000240)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.431886691s ago: executing program 2 (id=6020): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @local}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f00000022c0)=""/4096, 0x4000}], 0x1}, 0xfff}, {{0x0, 0x0, 0x0}, 0x100}], 0x2, 0x0, 0x0) writev(r2, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0xded}], 0x5) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r1, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x6000, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x38d, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @tcp={0x5, 0x6, "0b82dd", 0x357, 0x6, 0xff, @private1, @private0, {[@routing={0x89, 0x12, 0x2, 0x6, 0x0, [@ipv4={'\x00', '\xff\xff', @local}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @mcast2, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @local]}, @dstopts={0x6c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}, @dstopts={0x84, 0x0, '\x00', [@pad1]}, @dstopts={0x6, 0x4, '\x00', [@generic={0x81, 0x5, "f1b657e232"}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x98}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private1}]}, @hopopts={0x32, 0xb, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x7, 0x74, [0x8, 0x8, 0x7fffffff]}}, @enc_lim={0x4, 0x1, 0x81}, @hao={0xc9, 0x10, @mcast2}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x10, {0x3, 0x2, 0x0, 0x4, [0x3]}}]}, @hopopts={0x1, 0xd, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x0, 0x8, [0x48d0, 0x1, 0x4, 0x7, 0x3, 0xc0]}}, @generic={0x5, 0x2, "f943"}, @pad1, @calipso={0x7, 0x28, {0x2, 0x8, 0x7, 0x6, [0x4, 0x9, 0xd756, 0x4]}}]}, @routing={0x87, 0x10, 0x0, 0x0, 0x0, [@loopback, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @remote, @mcast1, @rand_addr=' \x01\x00']}], {{0x4e21, 0x4e20, 0x41424344, r5, 0x1, 0x0, 0x14, 0x4, 0x0, 0x0, 0xc, {[@md5sig={0x13, 0x12, "b74b7c5950d4f89ef32acff5bccefbfc"}, @mptcp=@mp_join={0x1e, 0x3, 0x7}, @timestamp={0x8, 0xa, 0x80000001, 0x10}, @eol, @mss={0x2, 0x4, 0x4}, @sack={0x5, 0xa, [0x3, 0x9]}, @sack={0x5, 0xa, [0x1, 0x9]}, @window={0x3, 0x3, 0x7}]}}, {"e208315b137049ca8fbefd7cf85592429ad50d4fd5fa56e6c25d638662f139d41461bf43013aee1128e8dcab5bb95d50127b96cd0ef6e6a952a5687011ae8905dd2a52562e424ec9726a7b3d851d330970fa1c41898e1ee12c5fa0ce51e8ca73174ce00aae84026c01ca23eeb89e65e782708f1b81e69269a59386730dee68443ab24b44251dd8cfdf065256dae4c4da92f70aaa32d1f70893a9b471ff0edaebf5082c76df6661056a0b3017950301b14b6eedafbb3ba8"}}}}}}}, 0x0) sendto(r0, &(0x7f0000000180)="721169e7f71ccb5246c61eaffa69f4065851d8e8556197ef39be021b3c8950bdb1d20234b638933c5297b56c0b424b35c3a98205c573f3608a02db7b3e888a7670074c33290fe002a4e8780863e399b345397666b27a4caadd9b9aab692b7dbbe4c0b3027a8f4a5763bfb64b20286e1606b1ea4f45dfd3bb2912637c092e229da29f2e6e872a357f33990306cdb875c3c29ed522b7c148d4f8feac3899f55ff005180e2189d96af20ffec39a1933cfa70b56aab8d60f331055dc16f8cc0419a51d6bd47edc", 0xc5, 0x4000, &(0x7f0000000280)=@pppoe={0x18, 0x0, {0x0, @random="d1f78e1f291f", 'bond_slave_1\x00'}}, 0x80) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb81004a0086dd6040081000140600fc020000000000000000000000000001fe8004000000000000000000000000aa4e224e24", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="5004100990780000"], 0x0) 1.424035189s ago: executing program 0 (id=6021): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x18, 0x3f, 0x107, 0x70bd2b, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x2fc}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 1.280548012s ago: executing program 3 (id=6022): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000001aae4e4cfe11dc3d1527d49d57fa46044114e228094ce61f42617834aec84b50ddf3add00f30019e1c9d57b189af600503b9044b6c161fbaf2fa984cc9e19df898ffba424cc3e50074a1c6fca36e26b8e440e7f2f948f5071a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000180)="8907040400", 0x5) sendmmsg$inet(r4, &(0x7f00000001c0)=[{{&(0x7f0000000200)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r3, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x200000c, 0x11, r3, 0xaa0f4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000ff4000/0x3000)=nil, 0x3000, 0x2000004, 0x12, r6, 0xe6905000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r5, 0x1000) mmap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x10012, r2, 0x0) bind$bt_sco(r1, &(0x7f0000000340)={0x1f, @none}, 0x8) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000380)=0x1, 0x4) connect$inet6(r7, &(0x7f0000000440)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r7, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100004365000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="2c0000000d0a01e6ffffffffffffff000a0000010900020073797a31000000000800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000940)='./cgroup/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000980)='./cgroup.net/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f00000009c0)='syz0\x00', 0x1ff) 1.210163981s ago: executing program 0 (id=6023): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x12, 0x0, &(0x7f00000010c0)='syzkaller\x00', 0x2, 0xff2, &(0x7f0000001cc0)=""/4082, 0x41000, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x3d, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2f, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x1b, 0x0, @opaque="571818d3e222532f03de8fba932ff0e0f5d523"}}}}}, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000000680)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0xa3, @loopback, 0x8}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x804) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000040)={0x38, r4, 0x1, 0x9, 0x25dfdbfe, {{}, {}, {0x1c, 0x17, {0x7, 0x0, @l2={'eth', 0x3a, 'macvtap0\x00'}}}}}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000400000008000000"], 0x48) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f00000002c0)="2000000012005f0214f9f4070000fbe60a0000000000c5c61f33ad512e9cfc31", 0x20) recvmmsg(r5, &(0x7f00000021c0), 0x5b, 0x40, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) 1.209840563s ago: executing program 4 (id=6024): r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000001880)={&(0x7f00000018c0)={0xa, 0x1234, 0xfffffffe, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000001900)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}, 0x8dff) 1.00622781s ago: executing program 4 (id=6025): r0 = socket$unix(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000740)={'syzkaller0\x00', 0x2}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', @link_local}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) sendmsg$nl_route_sched(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x1}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004890) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000a40)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000a80), 0x56) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f0000000ac0)={0x8, '\x00', {'bond_slave_0\x00'}}) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$kcm(r7, &(0x7f0000000b00)={&(0x7f0000000b40)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000c00)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000280)={r0, 0xb97, 0xffff, 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team_slave_1\x00', 0x0}) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfb0c, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x15, 0x1a, &(0x7f00000002c0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r10}}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8001}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7f000}, @map_fd={0x18, 0x7, 0x1, 0x0, r11}], &(0x7f00000003c0)='syzkaller\x00', 0x81, 0xe, &(0x7f0000000400)=""/14, 0x0, 0x19, '\x00', r12, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x3, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)=[r13], &(0x7f00000005c0)=[{0x3, 0x4, 0x8, 0xb}, {0x1, 0x4, 0x7, 0x7}, {0x1, 0x4, 0x0, 0x8}, {0x5, 0x2, 0x8, 0x5}, {0x1, 0x1, 0x5, 0x13}, {0x1, 0x5, 0xd, 0x9}, {0x0, 0x2, 0x7, 0x2}, {0x4, 0x1, 0x9, 0x7}], 0x10, 0x1b}, 0x94) bind$unix(r0, &(0x7f0000006a00)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r14 = socket$unix(0x1, 0x2, 0x0) connect$unix(r14, &(0x7f0000006a80)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r14, &(0x7f0000006b00), 0x307017fdb7a66cb, 0x3ec0) epoll_create(0x18) 902.504876ms ago: executing program 3 (id=6026): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000030428bd780000f8ffffff000000", @ANYRES32=0x0, @ANYBLOB="4606090000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 808.245026ms ago: executing program 4 (id=6027): syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x0, 0x6, {0x15, 0x4, 0x0, 0xf, 0x5, 0x64, 0x0, 0x91, 0x6, 0x2, @private=0xa010101, @local, {[@timestamp={0x44, 0x18, 0x7, 0x0, 0x8, [0x1, 0x3, 0x6, 0x8000, 0x400]}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0xe, "4f7153f96a9670d5c9bfe545"}, @rr={0x7, 0xf, 0xc4, [@local, @remote, @empty]}, @timestamp_addr={0x44, 0x4, 0x4f, 0x1, 0x9}]}}}}}}}, 0x0) 776.714476ms ago: executing program 1 (id=6028): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="68000000000905040000000800000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001202002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 598.069154ms ago: executing program 4 (id=6029): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2, 0x17, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xad}}, {{0x6, 0x0, 0x2, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 586.287444ms ago: executing program 1 (id=6030): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x4048004) 555.552774ms ago: executing program 3 (id=6031): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000680)=r2, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmmsg(r3, &(0x7f0000000740), 0x800001d, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x810, r3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r5, 0x0, 0x4800) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, 0x0, 0xc40) r6 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) r9 = socket(0x840000000002, 0x3, 0x100) connect$can_bcm(r9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f00000000c0)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x6}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) write$tun(r6, &(0x7f0000000340)=ANY=[], 0x6e) r11 = socket(0x2b, 0x1, 0x1) setsockopt$IPT_SO_SET_REPLACE(r11, 0x0, 0x40, &(0x7f0000000940)=@filter={'filter\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0xc0, 0xc0, 0xc0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x4, 0x0, {[{{@ip={@local, @loopback, 0x0, 0xff000000, 'dummy0\x00', 'ipvlan0\x00', {0xff}, {}, 0x73, 0x3, 0x40}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xedd47732473098dc}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x80000001, 0x4, 0x1, 0x0, 0x0, "b130473c3113287a14b2984e26e5ff46eb81427191a1f41c9bfcf29a4cb60b90def126cff9aa7aff33caf874d1d1fca2b4b4520019e6d9b145f05d68d0304287"}}}, {{@ip={@rand_addr=0x64010100, @multicast2, 0x0, 0xff000000, 'batadv_slave_1\x00', '\x00', {0xff}, {}, 0x62, 0x3, 0x5c}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x5, 0x3, 0x0, 0x0, 0x3, 0x4], 0x0, 0x2}, {0x0, [0x4, 0x4, 0x0, 0x1, 0x1, 0x2], 0x6, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) 354.527971ms ago: executing program 4 (id=6032): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xdffffefc}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x2100, 0x0, &(0x7f00000003c0), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 337.169484ms ago: executing program 1 (id=6033): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2b20d, 0x11b01}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x0, 0x7fffffffffffffff}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xc1}, 0xc050) 235.77247ms ago: executing program 0 (id=6034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="68000000000905040000000000000000020000000900010073790030000000001400028006000100000a0000050002000600000008000500000000002c0004800800010005000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x4080) 219.945144ms ago: executing program 2 (id=6035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)={0x28, 0x4, 0x6, 0x5, 0x0, 0x0, {0xcc411eaf6a585b1f, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040095}, 0x40) 183.49801ms ago: executing program 4 (id=6036): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newae={0x8c, 0x1e, 0x20, 0x70bd27, 0x25dfdbff, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x2, 0x33}, @in6=@local, 0xfffffff7, 0x3505}, [@replay_val={0x10, 0xa, {0x70bd26, 0x70bd26, 0x7}}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in6=@local, 0x0, 0xa}}, @iptfs_init_delay={0x8, 0x27, 0x2}, @replay_thresh={0x8, 0xb, 0x7}]}, 0x8c}}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/mnt\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x67, 0x0, &(0x7f0000000540)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000002a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e, 0xffffffffffffffff, 0x8, 0x0, 0xee, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002a40)={r3, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000002ac0)="b9ff0307683a268cb8091a99888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x10, &(0x7f0000002d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x1, 0x1, 0x0, 0xdad1124f55525050, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000002d80)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x5c}, 0x94) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000580)=@get={0x1, &(0x7f00000005c0)=""/73, 0x7ed}) syz_emit_ethernet(0x89, &(0x7f0000002b00)=ANY=[@ANYBLOB="bbbbbbaaaaaaaaaa2886dd6075e70000533afffe80000000000000000000000000000eff020000000000000000000000000001030190780b0000006915556900076cfffc000000000000000000000000000008fc000000000000000086990000000000796ee019e45e19874ccf7b5ee9ad6140e983fd0da8165aad242a06dd108d37e5988b724ef3da5d35cbc74f2112c41683dfce11d24040945d53ecc0c9842e2d0efb7fea035b1d2dfa59640f965e0e88698cb7451e797a6d4820eff24dd8deb953bcd1871b49e0ea64534cb5cdf84ce725e1b959a7587a7acf26849c3dd3"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = getpid() sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000001640)={0x2c, 0x2d, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@generic="cbd30d11251c9a26"]}, @nested={0x4, 0x7}, @typed={0x8, 0x1, 0x0, 0x0, @pid=r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@getstats={0x1c, 0x5e, 0x20, 0x70bd2a, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000015) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='syzkaller\x00'}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001400)={r9, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000001480)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000001580)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000001640), 0x0, 0x700}, 0x2c) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001680)={'wlan1\x00'}) ioctl$FS_IOC_ENABLE_VERITY(r7, 0x40806685, &(0x7f0000001780)={0x1, 0x1, 0x1000, 0x0, &(0x7f0000001800), 0x30, 0x0, &(0x7f0000001840)="2d431b77fdf241fa78e831bf009038bdc0acfa5a6d9a20c3537de72144d773f082c89455c44507947666fffb2336adaf"}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000001880)={'wg2\x00', &(0x7f00000018c0)=@ethtool_coalesce={0xe, 0x1, 0xfffffffa, 0x800, 0xfffffff9, 0x4, 0x0, 0x3, 0xf16, 0x8, 0x6, 0x7, 0x5, 0x1, 0x8, 0xb0, 0x0, 0x1, 0x0, 0x80000000, 0xfffffffa, 0xc, 0xff}}) sendmsg$nl_xfrm(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="a0cb6a863a2e1d42000000000000000000ae2dd8fd93ff08000000ffffff000000000001fffe0000000200000a00e080000000000000000000000000000000000008effffffffffe070000001300d7bb009c37211b9e8c1ccbbc405a600db08c3310e10fce622c260e7d2e753dabe7b32e05cfaa89d117cc8ed10a04bae645373c3c09a331f50ed097fb107cadeb1eafc6650f547b5f0d87b2bd1ea8deafdb902e70c44aad43c03d6777dd260e1c09", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc020000000000000000000000000000ff010000000000000000000000000001ff020000000000000000000000000001ffffffff0000000000000000000000006c010000000000000a000a00"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r7) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f0000001c00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000002c00)={0xc8, r10, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5728}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xc}]}, @TIPC_NLA_SOCK={0x4}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4008000}, 0x4080) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) 106.544623ms ago: executing program 1 (id=6037): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0x17, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000c000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000011000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f0000000a80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 40.851631ms ago: executing program 0 (id=6038): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0x10, &(0x7f0000000600)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x2000}}, [@call={0x85, 0x0, 0x0, 0xc2}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0xfffd, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffe}, 0x94) 3.773829ms ago: executing program 3 (id=6039): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e22, 0xffffff01, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2800000000000000290000000400000029010301000000050200070401"], 0x28}, 0x4004800) 0s ago: executing program 2 (id=6040): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) kernel console output (not intermixed with test programs): tover after parsing attributes in process `syz.1.3788'. [ 571.666219][T22107] tipc: Enabling of bearer rejected, already enabled [ 571.961147][T22123] tipc: Enabling of bearer rejected, no device for the media [ 572.130936][T22135] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 573.179821][T22188] tipc: Enabling of bearer rejected, already enabled [ 574.528124][T22232] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 574.912819][T22243] __nla_validate_parse: 1 callbacks suppressed [ 574.912838][T22243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3838'. [ 575.723075][T22262] ipip0: entered allmulticast mode [ 575.907494][T22269] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3845'. [ 575.907523][T22269] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3845'. [ 575.907535][T22269] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3845'. [ 576.452358][T22302] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 577.393667][T22341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3862'. [ 577.465292][T22341] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 578.200300][T22377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3874'. [ 578.268114][T22377] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 578.272982][T22383] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.3873'. [ 578.292953][T22382] tipc: Enabling of bearer rejected, no device for the media [ 579.498646][T22430] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3886'. [ 579.966477][T22442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3890'. [ 580.127617][T22451] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3893'. [ 580.956035][T22488] netlink: 'syz.4.3906': attribute type 1 has an invalid length. [ 581.053041][T22488] bond22: option mode: invalid value (8) [ 581.071846][T22488] bond22 (unregistering): Released all slaves [ 581.147929][T22504] netlink: 'syz.4.3906': attribute type 10 has an invalid length. [ 581.147950][T22504] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3906'. [ 581.992487][T22526] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3915'. [ 582.182510][T22536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3919'. [ 583.108029][T22576] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3929'. [ 583.227801][T22581] tipc: Enabling of bearer rejected, already enabled [ 584.069755][T22619] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 584.112274][T22622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3942'. [ 584.431470][T22628] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3943'. [ 584.597448][T22633] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3946'. [ 584.638212][T22635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3945'. [ 584.736397][T22642] netlink: 'syz.1.3948': attribute type 1 has an invalid length. [ 584.784801][T22642] bond36: entered promiscuous mode [ 584.786080][T22642] 8021q: adding VLAN 0 to HW filter on device bond36 [ 584.842910][T22642] ipvlan7: entered allmulticast mode [ 584.845388][T22642] bond36: entered allmulticast mode [ 584.983173][T22650] tipc: Enabling of bearer rejected, already enabled [ 585.007086][T22642] ipvlan8: entered allmulticast mode [ 585.372286][T22678] tipc: Enabling of bearer rejected, already enabled [ 585.443235][T22679] __nla_validate_parse: 3 callbacks suppressed [ 585.443255][T22679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3953'. [ 585.885120][T22693] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3956'. [ 586.089734][T22711] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 586.119439][T22710] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3959'. [ 586.309866][T22722] netlink: 'syz.0.3963': attribute type 1 has an invalid length. [ 586.344861][T22722] bond19: entered promiscuous mode [ 586.345274][T22722] 8021q: adding VLAN 0 to HW filter on device bond19 [ 586.387186][T22722] ipvlan0: entered allmulticast mode [ 586.387209][T22722] bond19: entered allmulticast mode [ 586.422455][T22722] ipvlan1: entered allmulticast mode [ 586.425136][T22722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3963'. [ 586.425157][T22722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3963'. [ 586.559600][T22734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3967'. [ 586.716631][T22745] tipc: Enabling of bearer rejected, already enabled [ 586.871370][T22734] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3967'. [ 587.075384][T22755] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3969'. [ 587.303929][T22770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3973'. [ 587.306700][T22775] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3974'. [ 587.729756][T22794] tipc: Enabling of bearer rejected, already enabled [ 587.783774][T22796] tipc: Enabling of bearer rejected, already enabled [ 588.767334][T22852] tipc: Enabling of bearer rejected, already enabled [ 589.052118][T22843] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 589.739697][T22899] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 589.800127][T22902] tipc: Enabling of bearer rejected, already enabled [ 590.607767][T22927] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 590.669007][T22936] __nla_validate_parse: 7 callbacks suppressed [ 590.669030][T22936] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4007'. [ 591.058917][T22948] tipc: Enabling of bearer rejected, no device for the media [ 591.406027][T22964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4012'. [ 591.594661][T22971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4014'. [ 591.597652][T22971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4014'. [ 591.597972][T22971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4014'. [ 591.599606][T22971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4014'. [ 591.611105][T22971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4014'. [ 591.639715][T22971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4014'. [ 591.663222][T22971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4014'. [ 591.727576][T22971] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4014'. [ 591.984209][T22988] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 592.119366][T22993] tipc: Enabling of bearer rejected, no device for the media [ 592.254966][T22998] ip_tables: iptables: counters copy to user failed while replacing table [ 593.088091][T23037] tipc: Enabling of bearer rejected, no device for the media [ 593.556831][T23053] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 593.708192][T23063] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 594.370180][T23090] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 594.736611][T23118] tipc: Enabling of bearer rejected, no device for the media [ 595.098440][T23109] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 595.414481][T23138] x_tables: eb_tables: redirect target: used from hooks INPUT, but only usable from PREROUTING/BROUTING [ 595.682922][T23141] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 596.074422][T23171] netlink: 'syz.4.4062': attribute type 1 has an invalid length. [ 596.141862][T23171] bond22: entered promiscuous mode [ 596.142396][T23171] 8021q: adding VLAN 0 to HW filter on device bond22 [ 596.305170][T23178] __nla_validate_parse: 13 callbacks suppressed [ 596.305189][T23178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4062'. [ 596.371803][T23180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4063'. [ 596.524775][T23185] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 596.549804][T23171] ipvlan15: entered allmulticast mode [ 596.549825][T23171] bond22: entered allmulticast mode [ 596.601813][T23175] ipvlan16: entered allmulticast mode [ 596.671034][T23189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 596.687326][T23189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 596.687592][T23189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 596.688518][T23189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 596.688817][T23189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 596.718260][T23189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 596.750095][T23189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 596.750547][T23189] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4065'. [ 597.458257][T23229] netlink: 'syz.4.4074': attribute type 1 has an invalid length. [ 597.519917][T23229] bond23: entered promiscuous mode [ 597.520433][T23229] 8021q: adding VLAN 0 to HW filter on device bond23 [ 597.589481][T23229] ipvlan17: entered allmulticast mode [ 597.589501][T23229] bond23: entered allmulticast mode [ 597.637607][T23229] ipvlan18: entered allmulticast mode [ 598.865211][ T9854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.292085][T23300] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 599.937789][T23334] x_tables: duplicate entry at hook 1 [ 599.938789][T23334] sch_fq: defrate 8 ignored. [ 600.701084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.701418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.701719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.043871][T23364] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 601.834746][T23403] __nla_validate_parse: 9 callbacks suppressed [ 601.834768][T23403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4118'. [ 602.709127][T23441] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4128'. [ 602.709160][T23441] netlink: 11 bytes leftover after parsing attributes in process `syz.0.4128'. [ 602.943881][T23450] netlink: 'syz.0.4130': attribute type 1 has an invalid length. [ 603.036654][T23450] bond20: entered promiscuous mode [ 603.038683][T23450] 8021q: adding VLAN 0 to HW filter on device bond20 [ 603.046850][T23451] tipc: Enabling of bearer rejected, already enabled [ 603.457408][T23450] ipvlan6: entered allmulticast mode [ 603.457430][T23450] bond20: entered allmulticast mode [ 603.655460][T23453] ipvlan7: entered allmulticast mode [ 604.135149][T23479] netlink: 'syz.3.4138': attribute type 1 has an invalid length. [ 604.212942][T23479] bond30: option mode: invalid value (8) [ 604.230498][T23479] bond30 (unregistering): Released all slaves [ 604.361706][T23494] netlink: 'syz.3.4138': attribute type 10 has an invalid length. [ 604.361727][T23494] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4138'. [ 604.563861][T23494] dummy0: entered promiscuous mode [ 604.941078][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.941439][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.941730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.942027][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.942283][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.942532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.942793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.145664][T23520] netlink: 'syz.4.4145': attribute type 1 has an invalid length. [ 605.334655][T23516] tipc: Enabling of bearer rejected, already enabled [ 605.386273][T23520] bond24: entered promiscuous mode [ 605.386900][T23520] 8021q: adding VLAN 0 to HW filter on device bond24 [ 605.404714][T23524] ipvlan19: entered allmulticast mode [ 605.404734][T23524] bond24: entered allmulticast mode [ 605.413682][T23529] ipvlan20: entered allmulticast mode [ 605.413898][T23533] tipc: Enabling of bearer rejected, already enabled [ 605.626973][T23540] tun0: tun_chr_ioctl cmd 1074025677 [ 605.627075][T23540] tun0: linktype set to 778 [ 605.627553][T23540] tun0: tun_chr_ioctl cmd 1074025676 [ 605.627568][T23540] tun0: owner set to 60929 [ 605.820997][ C0] net_ratelimit: 159 callbacks suppressed [ 605.821109][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.821580][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.821871][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.822229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.822510][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.822792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.537370][T23559] netlink: 'syz.2.4152': attribute type 1 has an invalid length. [ 606.641737][T23559] bond23: option mode: invalid value (8) [ 606.667928][T23559] bond23 (unregistering): Released all slaves [ 606.771290][T23586] netlink: 'syz.2.4152': attribute type 10 has an invalid length. [ 606.771319][T23586] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4152'. [ 606.813489][T23584] netlink: 'syz.4.4159': attribute type 1 has an invalid length. [ 606.944305][T23586] dummy0: entered promiscuous mode [ 607.075122][T23584] bond25: entered promiscuous mode [ 607.078117][T23584] 8021q: adding VLAN 0 to HW filter on device bond25 [ 607.209388][T23590] ipvlan21: entered allmulticast mode [ 607.209410][T23590] bond25: entered allmulticast mode [ 607.219448][T23594] ipvlan22: entered allmulticast mode [ 607.231160][T23599] tipc: Enabling of bearer rejected, already enabled [ 607.232203][T23605] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4161'. [ 607.562255][T23626] tipc: Enabling of bearer rejected, already enabled [ 608.461423][ T9854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.806415][T23670] IPVS: Scheduler module ip_vs_sip not found [ 609.530287][T23703] ipvlan0: left allmulticast mode [ 609.536191][T23703] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 609.715275][T23708] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.715912][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.540952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.922590][T23753] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4190'. [ 610.993051][T23755] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4190'. [ 611.019100][T23753] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 611.245161][T23760] netlink: 'syz.1.4192': attribute type 1 has an invalid length. [ 611.351897][T23760] bond37: option mode: invalid value (8) [ 611.374474][T23760] bond37 (unregistering): Released all slaves [ 611.452480][T23778] netlink: 'syz.1.4192': attribute type 10 has an invalid length. [ 611.452502][T23778] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4192'. [ 611.517470][T23774] dummy0: left promiscuous mode [ 611.555762][T23778] dummy0: entered promiscuous mode [ 612.065355][T23808] tipc: Enabling of bearer rejected, already enabled [ 613.196855][T23849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4214'. [ 613.278570][T23851] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4215'. [ 613.336944][T23853] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4216'. [ 613.434007][T23860] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4216'. [ 613.620207][T23869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4219'. [ 614.140944][ C0] net_ratelimit: 4 callbacks suppressed [ 614.140966][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.526508][T23922] netlink: 'syz.2.4229': attribute type 1 has an invalid length. [ 615.588576][T23922] bond23: option mode: invalid value (8) [ 615.706041][T23930] netlink: 'syz.2.4229': attribute type 10 has an invalid length. [ 615.706062][T23930] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4229'. [ 617.341093][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.341429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.341582][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.748803][T23922] bond23 (unregistering): Released all slaves [ 617.884830][T23928] dummy0: left promiscuous mode [ 617.888391][T23930] dummy0: entered promiscuous mode [ 617.927927][T23946] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4232'. [ 618.063646][ T9854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.990499][T23975] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4238'. [ 619.049030][T23975] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4238'. [ 619.237397][T23988] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4237'. [ 619.572659][T23999] bridge_slave_1: default FDB implementation only supports local addresses [ 621.090100][T24045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4254'. [ 621.457496][T24072] syzkaller1: entered promiscuous mode [ 621.457518][T24072] syzkaller1: entered allmulticast mode [ 621.575101][T24079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4262'. [ 621.963344][T24094] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.963968][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.690378][T24122] ip_tables: iptables: counters copy to user failed while replacing table [ 623.100980][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.101296][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.101612][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.227456][T24135] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 624.839781][T24201] ip6gretap2: entered allmulticast mode [ 624.865070][T24201] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 624.865821][T24201] batman_adv: batadv0: Adding interface: ip6gretap2 [ 624.865835][T24201] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 624.865862][T24201] batman_adv: batadv0: Interface activated: ip6gretap2 [ 625.121362][T24210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4291'. [ 625.176519][T24210] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 625.267227][T24219] netlink: 'syz.1.4295': attribute type 1 has an invalid length. [ 625.438241][T24219] bond37: entered promiscuous mode [ 625.449465][T24219] 8021q: adding VLAN 0 to HW filter on device bond37 [ 625.517477][T24223] ipvlan9: entered allmulticast mode [ 625.517499][T24223] bond37: entered allmulticast mode [ 625.605706][T24219] ipvlan10: entered allmulticast mode [ 626.175847][T24242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4301'. [ 626.200100][T24242] netlink: 11 bytes leftover after parsing attributes in process `syz.4.4301'. [ 626.465367][T24256] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 626.728643][T24268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4308'. [ 626.728665][T24268] netlink: 'syz.2.4308': attribute type 5 has an invalid length. [ 626.780219][T24271] netlink: 'syz.4.4309': attribute type 1 has an invalid length. [ 626.873034][T24271] bond26: entered promiscuous mode [ 626.876084][T24271] 8021q: adding VLAN 0 to HW filter on device bond26 [ 626.903345][T24274] ipvlan23: entered allmulticast mode [ 626.903374][T24274] bond26: entered allmulticast mode [ 626.940229][T24271] ipvlan24: entered allmulticast mode [ 626.956154][T24271] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4309'. [ 627.000152][T24278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4310'. [ 627.601242][T24308] tipc: Enabling of bearer rejected, no device for the media [ 627.636902][T24309] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4317'. [ 627.672882][ T9854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.140979][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.141333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.141639][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.141929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.142214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.142495][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.142781][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.143065][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.143343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.531135][T24329] netlink: 'syz.3.4321': attribute type 1 has an invalid length. [ 628.597910][T24329] bond30: entered promiscuous mode [ 628.600132][T24329] 8021q: adding VLAN 0 to HW filter on device bond30 [ 628.777765][T24329] ipvlan12: entered allmulticast mode [ 628.777786][T24329] bond30: entered allmulticast mode [ 628.794221][T24329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4321'. [ 628.836631][T24339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4323'. [ 628.838577][T24335] ipvlan13: entered allmulticast mode [ 629.314616][T24371] tipc: Enabling of bearer rejected, already enabled [ 629.710506][T24386] netlink: 'syz.1.4335': attribute type 1 has an invalid length. [ 629.761747][T24386] bond38: entered promiscuous mode [ 629.762247][T24386] 8021q: adding VLAN 0 to HW filter on device bond38 [ 629.779827][T24386] ipvlan11: entered allmulticast mode [ 629.779847][T24386] bond38: entered allmulticast mode [ 629.804849][T24386] ipvlan12: entered allmulticast mode [ 629.807820][T24386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4335'. [ 629.982303][T24400] netlink: 'syz.1.4340': attribute type 11 has an invalid length. [ 630.319826][T24403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4340'. [ 630.519768][T24424] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4343'. [ 633.992403][T24563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4380'. [ 634.266379][T24573] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 636.079735][T24628] syzkaller1: entered promiscuous mode [ 636.079756][T24628] syzkaller1: entered allmulticast mode [ 636.228444][T24637] netlink: 'syz.0.4400': attribute type 6 has an invalid length. [ 636.263381][T24638] tipc: Enabling of bearer rejected, already enabled [ 636.586958][T24652] net_ratelimit: 220 callbacks suppressed [ 636.586981][T24652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.587545][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.663547][T24652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.663878][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.664132][T24652] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.664984][ T8761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 636.670824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.180941][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.181306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.181786][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.922665][T24690] netlink: 'syz.0.4412': attribute type 1 has an invalid length. [ 637.978030][T24690] bond21: entered promiscuous mode [ 637.978508][T24690] 8021q: adding VLAN 0 to HW filter on device bond21 [ 638.007397][T24697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4413'. [ 638.073179][T24690] ipvlan8: entered allmulticast mode [ 638.073201][T24690] bond21: entered allmulticast mode [ 638.077167][T24686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4411'. [ 638.129400][T24690] ipvlan9: entered allmulticast mode [ 638.133487][T24690] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4412'. [ 638.436656][T24715] tipc: Enabling of bearer rejected, no device for the media [ 640.517779][T24762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4429'. [ 641.062243][T24799] tipc: Enabling of bearer rejected, already enabled [ 641.362925][T24816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4440'. [ 641.952868][T24836] net_ratelimit: 6 callbacks suppressed [ 641.952888][T24836] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 642.518233][T24872] netlink: 'syz.1.4457': attribute type 1 has an invalid length. [ 642.589489][T24872] bond39: entered promiscuous mode [ 642.591369][T24872] 8021q: adding VLAN 0 to HW filter on device bond39 [ 642.594068][T24877] tipc: Enabling of bearer rejected, already enabled [ 642.651598][T24879] ipvlan13: entered allmulticast mode [ 642.651621][T24879] bond39: entered allmulticast mode [ 642.674034][T24872] ipvlan14: entered allmulticast mode [ 642.680239][T24872] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4457'. [ 642.941067][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.941464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.941855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.942153][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.942521][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 642.942829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.827246][T24926] syzkaller1: entered promiscuous mode [ 643.827269][T24926] syzkaller1: entered allmulticast mode [ 644.296875][T24954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.297524][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.747509][T24980] netlink: 'syz.3.4488': attribute type 4 has an invalid length. [ 644.770171][T24980] netlink: 'syz.3.4488': attribute type 4 has an invalid length. [ 644.958676][T24985] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 645.254406][T25013] gre0: entered promiscuous mode [ 645.254427][T25013] gre0: entered allmulticast mode [ 645.304291][T24991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4491'. [ 645.831553][T25035] netlink: 'syz.4.4503': attribute type 83 has an invalid length. [ 646.296835][T25063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4510'. [ 646.332718][T25064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4509'. [ 646.475265][T25063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4510'. [ 646.666125][T25075] tipc: Enabling of bearer rejected, already enabled [ 646.712794][T25063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4510'. [ 648.701048][ C0] net_ratelimit: 4 callbacks suppressed [ 648.701070][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.701406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.701721][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.187637][T25145] bridge39: entered promiscuous mode [ 649.187714][T25145] bridge39: entered allmulticast mode [ 649.632023][T25174] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 649.660904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.806048][T25209] netlink: 316 bytes leftover after parsing attributes in process `syz.1.4541'. [ 651.124239][T25221] syzkaller1: entered promiscuous mode [ 651.124261][T25221] syzkaller1: entered allmulticast mode [ 651.504694][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4550'. [ 651.509319][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4550'. [ 651.509675][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4550'. [ 651.509983][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4550'. [ 651.510296][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4550'. [ 651.558118][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4550'. [ 651.558641][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4550'. [ 651.559353][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4550'. [ 652.016241][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4550'. [ 652.053054][T25249] tipc: Enabling of bearer rejected, already enabled [ 652.236521][T25269] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 654.154404][T25338] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 654.271217][T25345] tipc: Enabling of bearer rejected, already enabled [ 654.378154][T25343] netlink: 'syz.2.4570': attribute type 1 has an invalid length. [ 654.499184][T25343] bond23: option mode: invalid value (8) [ 654.509786][T25343] bond23 (unregistering): Released all slaves [ 654.578559][T25354] netlink: 'syz.2.4570': attribute type 10 has an invalid length. [ 654.669673][T25351] dummy0: left promiscuous mode [ 654.680789][T25354] dummy0: entered promiscuous mode [ 654.754861][T25359] netlink: 'syz.3.4572': attribute type 1 has an invalid length. [ 654.815972][T25359] bond31: option mode: invalid value (8) [ 654.819324][T25359] bond31 (unregistering): Released all slaves [ 654.893361][T25368] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 655.008250][T25367] dummy0: left promiscuous mode [ 655.716816][T25408] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 655.761642][T25410] bond0: entered promiscuous mode [ 655.903749][T25421] __nla_validate_parse: 21 callbacks suppressed [ 655.903769][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4590'. [ 655.904670][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4590'. [ 655.905193][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4590'. [ 655.905565][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4590'. [ 655.905862][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4590'. [ 655.906304][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4590'. [ 655.906860][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4590'. [ 655.907651][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4590'. [ 655.907924][T25421] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4590'. [ 656.121607][T25430] netlink: 'syz.1.4594': attribute type 12 has an invalid length. [ 656.539838][T25447] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 657.040177][T25453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4600'. [ 657.055256][T25453] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 657.111572][T25475] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 657.830454][T25506] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 659.696667][T25582] tipc: Enabling of bearer rejected, already enabled [ 660.286092][T25602] netlink: 'syz.2.4630': attribute type 1 has an invalid length. [ 660.382895][T25602] bond23: option mode: invalid value (8) [ 660.480904][T25614] netlink: 'syz.2.4630': attribute type 10 has an invalid length. [ 660.777378][T25602] bond23 (unregistering): Released all slaves [ 661.029152][T25611] dummy0: left promiscuous mode [ 661.066374][T25614] dummy0: entered promiscuous mode [ 661.256537][T25632] tipc: Enabled bearer , priority 0 [ 661.384634][T25637] __nla_validate_parse: 2 callbacks suppressed [ 661.384655][T25637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4639'. [ 661.396602][T25637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4639'. [ 661.397035][T25637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4639'. [ 661.397387][T25637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4639'. [ 661.397735][T25637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4639'. [ 661.405492][T25637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4639'. [ 661.405779][T25637] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4639'. [ 661.426934][T25637] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4639'. [ 661.857553][T25659] tipc: Enabling of bearer rejected, already enabled [ 662.396641][T25683] tipc: Enabling of bearer rejected, already enabled [ 662.457475][T25688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4650'. [ 662.479423][T25688] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4650'. [ 663.175009][T25719] ip_tables: iptables: counters copy to user failed while replacing table [ 663.665670][T25751] tipc: Enabling of bearer rejected, already enabled [ 664.389422][T25781] syzkaller1: entered promiscuous mode [ 664.389443][T25781] syzkaller1: entered allmulticast mode [ 664.570185][T25786] bridge37: entered promiscuous mode [ 664.570211][T25786] bridge37: entered allmulticast mode [ 664.590468][T25786] team0: Port device bridge37 added [ 665.455358][T25827] tipc: Enabling of bearer rejected, already enabled [ 666.311041][T25856] caif0: tun_chr_ioctl cmd 35111 [ 667.343290][T25901] tipc: Enabling of bearer rejected, no device for the media [ 667.745909][T25915] tipc: Enabling of bearer rejected, already enabled [ 668.254083][T25931] __nla_validate_parse: 4 callbacks suppressed [ 668.254165][T25931] netlink: 260 bytes leftover after parsing attributes in process `syz.4.4706'. [ 668.254910][T25931] sctp: [Deprecated]: syz.4.4706 (pid 25931) Use of int in maxseg socket option. [ 668.254910][T25931] Use struct sctp_assoc_value instead [ 668.840435][T25958] ip_tables: iptables: counters copy to user failed while replacing table [ 668.962878][T25958] syzkaller1: entered promiscuous mode [ 668.962903][T25958] syzkaller1: entered allmulticast mode [ 669.312145][T25976] ip_tables: iptables: counters copy to user failed while replacing table [ 669.860053][T25985] tipc: Enabling of bearer rejected, no device for the media [ 671.389650][T26043] ip_tables: iptables: counters copy to user failed while replacing table [ 671.393862][T26039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4732'. [ 671.394499][T26039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4732'. [ 671.398052][T26043] syzkaller0: left promiscuous mode [ 671.470862][ T8761] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.470905][ T8761] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.470935][ T8761] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.470965][ T8761] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 671.768154][T26058] netlink: 'syz.2.4737': attribute type 1 has an invalid length. [ 671.838790][T26058] netlink: 'syz.2.4737': attribute type 1 has an invalid length. [ 671.993567][T26063] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4739'. [ 671.994111][T26067] syzkaller1: entered promiscuous mode [ 671.994130][T26067] syzkaller1: entered allmulticast mode [ 672.119520][T26073] tipc: Enabling of bearer rejected, already enabled [ 672.304312][T26086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4744'. [ 672.938645][T26108] netlink: 'syz.2.4748': attribute type 1 has an invalid length. [ 673.106163][T26112] netlink: 'syz.0.4749': attribute type 1 has an invalid length. [ 673.153680][T26112] bond22: option mode: invalid value (8) [ 673.157505][T26112] bond22 (unregistering): Released all slaves [ 673.482068][T26128] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4753'. [ 673.603400][T26145] block nbd0: not configured, cannot reconfigure [ 673.766305][T26150] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 673.930340][T26161] ip_tables: iptables: counters copy to user failed while replacing table [ 673.994385][T26161] raw_sendmsg: syz.4.4762 forgot to set AF_INET. Fix it! [ 674.787495][T26200] netlink: 'syz.2.4771': attribute type 1 has an invalid length. [ 674.826568][T26200] bond23: option mode: invalid value (8) [ 674.828691][T26200] bond23 (unregistering): Released all slaves [ 674.892766][T26210] dummy0: left promiscuous mode [ 674.907564][T26210] netlink: 'syz.2.4771': attribute type 10 has an invalid length. [ 674.907585][T26210] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4771'. [ 674.907699][T26210] dummy0: entered promiscuous mode [ 675.482437][T26232] syzkaller1: entered promiscuous mode [ 675.482460][T26232] syzkaller1: entered allmulticast mode [ 676.314516][T26243] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 677.135058][T26284] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4788'. [ 677.314862][T26297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4789'. [ 677.894359][T26322] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 678.082051][T26326] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4798'. [ 678.499274][T26342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4801'. [ 679.322604][T26385] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4811'. [ 680.106482][T26401] tc_dump_action: action bad kind [ 680.458810][T26416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4816'. [ 680.616079][T26420] netlink: 1363 bytes leftover after parsing attributes in process `syz.0.4818'. [ 680.872528][T26430] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4821'. [ 681.115910][T26436] tipc: Enabling of bearer rejected, no device for the media [ 681.316592][T26442] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4823'. [ 681.802729][T26461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4827'. [ 681.858698][T26457] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4826'. [ 681.907381][T26457] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 682.205517][T26477] netlink: 'syz.2.4830': attribute type 1 has an invalid length. [ 682.267423][T26481] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4832'. [ 682.287380][T26477] 8021q: adding VLAN 0 to HW filter on device bond23 [ 682.288752][T26476] hsr0 speed is unknown, defaulting to 1000 [ 683.118243][T26506] sctp: [Deprecated]: syz.3.4834 (pid 26506) Use of int in max_burst socket option. [ 683.118243][T26506] Use struct sctp_assoc_value instead [ 683.761541][T26513] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4837'. [ 684.448304][T26528] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 684.812850][T26541] netlink: 'syz.3.4843': attribute type 1 has an invalid length. [ 684.875180][T26541] bond31: option mode: invalid value (8) [ 684.897336][T26541] bond31 (unregistering): Released all slaves [ 684.992556][T26557] netlink: 'syz.3.4843': attribute type 10 has an invalid length. [ 684.992578][T26557] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4843'. [ 685.114895][T26557] dummy0: entered promiscuous mode [ 686.285881][T26579] syzkaller1: entered promiscuous mode [ 686.285903][T26579] syzkaller1: entered allmulticast mode [ 686.289274][T26595] ip_tables: iptables: counters copy to user failed while replacing table [ 686.656036][T26604] netlink: 'syz.0.4855': attribute type 178 has an invalid length. [ 687.024742][T26621] netlink: 'syz.4.4859': attribute type 1 has an invalid length. [ 687.071462][T26621] bond27: option mode: invalid value (8) [ 687.085418][T26621] bond27 (unregistering): Released all slaves [ 687.229626][T26632] netlink: 'syz.4.4859': attribute type 10 has an invalid length. [ 687.229648][T26632] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4859'. [ 689.009092][T26685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4872'. [ 690.852045][T26765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4884'. [ 692.906375][T26788] lo: entered promiscuous mode [ 692.906397][T26788] lo: entered allmulticast mode [ 692.926239][T26788] bond0: entered promiscuous mode [ 692.927807][T26788] bond0: entered allmulticast mode [ 692.933063][T26788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.936445][T26788] @: entered promiscuous mode [ 692.936465][T26788] @: entered allmulticast mode [ 692.951253][T26788] eql: entered promiscuous mode [ 692.951272][T26788] eql: entered allmulticast mode [ 692.954053][T26788] ifb0: entered promiscuous mode [ 692.954074][T26788] ifb0: entered allmulticast mode [ 692.954419][T26788] ifb1: entered promiscuous mode [ 692.954433][T26788] ifb1: entered allmulticast mode [ 692.966146][T26788] virtio_net virtio1 eth0: entered promiscuous mode [ 692.966170][T26788] virtio_net virtio1 eth0: entered allmulticast mode [ 692.966995][T26788] mac80211_hwsim hwsim0 wlan0: entered promiscuous mode [ 692.967014][T26788] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 692.967030][T26788] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 694.011920][T26812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4895'. [ 694.011955][T26812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4895'. [ 694.063513][T26812] bridge0: entered promiscuous mode [ 694.063536][T26812] bridge0: entered allmulticast mode [ 694.424829][T26846] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 694.803563][T26862] netlink: 'syz.0.4906': attribute type 11 has an invalid length. [ 694.961136][T26862] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4906'. [ 695.336987][T26885] ip_tables: iptables: counters copy to user failed while replacing table [ 697.396998][T26945] tipc: Enabled bearer , priority 10 [ 697.428469][T26941] tipc: Resetting bearer [ 697.475403][T26941] tipc: Disabling bearer [ 697.527965][T26958] syzkaller1: entered promiscuous mode [ 697.527988][T26958] syzkaller1: entered allmulticast mode [ 697.811807][T26965] netlink: 'syz.2.4931': attribute type 1 has an invalid length. [ 697.907455][T26965] bond24: option mode: invalid value (8) [ 697.923625][T26965] bond24 (unregistering): Released all slaves [ 698.009236][T26980] netlink: 'syz.2.4931': attribute type 10 has an invalid length. [ 698.009256][T26980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4931'. [ 698.035075][T26955] scsi_nl_rcv_msg: discarding partial skb [ 698.149013][T26975] dummy0: left promiscuous mode [ 698.169683][T26980] dummy0: entered promiscuous mode [ 698.332777][T26991] tipc: Enabling of bearer rejected, already enabled [ 698.423685][T26995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4939'. [ 698.944689][T27006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4942'. [ 699.114526][T27020] netlink: 'syz.0.4946': attribute type 1 has an invalid length. [ 699.207576][T27020] bond22: option mode: invalid value (8) [ 699.217707][T27020] bond22 (unregistering): Released all slaves [ 699.300123][T27035] netlink: 'syz.0.4946': attribute type 10 has an invalid length. [ 699.300144][T27035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4946'. [ 699.690811][T27047] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4951'. [ 699.762731][T27054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4950'. [ 699.767913][T27047] syzkaller1: entered promiscuous mode [ 699.767935][T27047] syzkaller1: entered allmulticast mode [ 700.704282][T27098] tipc: Enabling of bearer rejected, no device for the media [ 701.105092][T27111] ip_tables: iptables: counters copy to user failed while replacing table [ 701.248969][T27120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4964'. [ 702.189487][T27161] vcan0: tx drop: invalid da for name 0x0000000000000005 [ 703.026635][T27209] syzkaller1: entered promiscuous mode [ 703.026659][T27209] syzkaller1: entered allmulticast mode [ 703.249858][T27225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4991'. [ 703.444906][T27232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4993'. [ 703.447713][T27232] tipc: Bearer : already 2 bearers with priority 10 [ 703.447732][T27232] tipc: Bearer : trying with adjusted priority [ 703.447741][T27232] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 703.686764][T27244] netlink: 'syz.1.4997': attribute type 1 has an invalid length. [ 703.709829][T27244] bond40: option mode: invalid value (8) [ 703.744495][T27244] bond40 (unregistering): Released all slaves [ 703.884102][T27259] netlink: 'syz.1.4997': attribute type 10 has an invalid length. [ 703.884123][T27259] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4997'. [ 703.909702][T27252] dummy0: left promiscuous mode [ 703.941771][T27259] dummy0: entered promiscuous mode [ 704.338950][T27282] netlink: 'syz.4.5003': attribute type 21 has an invalid length. [ 704.338972][T27282] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5003'. [ 704.339021][T27282] netlink: 'syz.4.5003': attribute type 4 has an invalid length. [ 704.339033][T27282] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5003'. [ 704.682717][T27297] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 704.857235][T27306] netlink: 'syz.2.5012': attribute type 11 has an invalid length. [ 705.041681][T27316] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5014'. [ 705.057823][T27311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5012'. [ 705.248703][T27330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5016'. [ 705.263635][T27330] ip_tables: iptables: counters copy to user failed while replacing table [ 705.332622][T27330] nfnetlink_queue: nf_queue: full at 0 entries, dropping packets(s) [ 706.192978][T27362] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5024'. [ 706.454238][T27372] netlink: 'syz.3.5027': attribute type 11 has an invalid length. [ 706.766923][T27372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5027'. [ 706.822816][T27385] 0: reclassify loop, rule prio 0, protocol 03 [ 707.054586][T27381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5029'. [ 707.400794][T27411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5032'. [ 707.461494][T27417] netlink: 'syz.0.5034': attribute type 1 has an invalid length. [ 707.503466][T27417] bond22: option mode: invalid value (8) [ 707.505302][T27417] bond22 (unregistering): Released all slaves [ 707.693797][T27424] syzkaller0: left promiscuous mode [ 707.693820][T27424] syzkaller0: left allmulticast mode [ 707.694260][T27424] tipc: Resetting bearer [ 707.694436][ T8627] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.694527][ T8627] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.694558][ T8627] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.694589][ T8627] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 707.694828][T27419] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 707.695314][T27428] tipc: Enabling of bearer rejected, already enabled [ 707.780220][T27435] iwpm_parse_nlmsg: Invalid attribute (msg type Add Mapping response ret = -34) [ 708.132025][T27455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5042'. [ 708.635980][T27474] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 709.829142][T27513] __nla_validate_parse: 2 callbacks suppressed [ 709.829161][T27513] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5056'. [ 709.880382][T27515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5056'. [ 710.372807][T27531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5060'. [ 710.481538][T27531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5060'. [ 711.405918][T27569] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 712.088055][T27604] af_packet: packet size is too long (35070 > 2016) [ 712.350685][T27619] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 713.958530][T27671] block nbd0: not configured, cannot reconfigure [ 713.977194][T27672] syzkaller1: entered promiscuous mode [ 713.977229][T27672] syzkaller1: entered allmulticast mode [ 714.228480][T27678] tipc: Enabled bearer , priority 0 [ 714.394052][T27678] syzkaller0: entered promiscuous mode [ 714.394210][T27678] syzkaller0: entered allmulticast mode [ 714.394748][T27678] tipc: Resetting bearer [ 714.519266][ T8627] tipc: Resetting bearer [ 714.589980][T27675] tipc: Resetting bearer [ 716.833198][T27675] tipc: Disabling bearer [ 716.853068][T27694] syzkaller0: entered promiscuous mode [ 716.853102][T27694] syzkaller0: entered allmulticast mode [ 716.853283][T27694] tipc: Resetting bearer [ 717.659438][T27730] virtio_blk virtio6: 1/0/0 default/read/poll queues [ 717.690308][T27730] virtio_blk virtio6: [vdb] 262144 512-byte logical blocks (134 MB/128 MiB) [ 718.275417][T27773] ip_tables: iptables: counters copy to user failed while replacing table [ 718.389797][T27776] tipc: Enabling of bearer rejected, no device for the media [ 719.539571][T27819] bridge0: entered allmulticast mode [ 719.583827][T27826] tipc: Enabling of bearer rejected, already enabled [ 720.080463][T27846] ip_tables: iptables: counters copy to user failed while replacing table [ 721.053902][T27878] syzkaller0: left promiscuous mode [ 721.053926][T27878] syzkaller0: left allmulticast mode [ 721.054164][T27878] tipc: Resetting bearer [ 721.347164][T27894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5140'. [ 721.579759][T27907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5139'. [ 721.685615][T27914] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 723.277911][T27987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5160'. [ 724.008249][T28016] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5166'. [ 724.254130][T28023] netlink: 'syz.4.5169': attribute type 1 has an invalid length. [ 724.256551][T28028] batman_adv: batadv0: Removing interface: veth0 [ 724.289494][T28028] bond24: (slave veth0_to_bond): Releasing active interface [ 724.308070][T28028] team0: Port device team_slave_0 removed [ 724.330250][T28028] team0: Port device team_slave_1 removed [ 724.331248][T28028] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.356096][T28028] bond0: (slave netdevsim1): Releasing backup interface [ 724.363449][T28028] tipc: Resetting bearer [ 724.377509][T28028] bond1: (slave geneve2): Releasing active interface [ 724.392417][T28028] bond4: (slave bridge1): Releasing backup interface [ 724.392582][T28028] bridge1: left allmulticast mode [ 724.420240][T28028] bond5: (slave bridge2): Releasing backup interface [ 724.448912][T28028] bond6: (slave bridge3): Releasing backup interface [ 724.457028][T28041] netlink: 'syz.4.5169': attribute type 10 has an invalid length. [ 724.457050][T28041] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5169'. [ 724.491186][T28028] bond7: (slave bridge4): Releasing backup interface [ 724.491337][T28028] bridge4: left allmulticast mode [ 724.523096][T28028] bond8: (slave bridge6): Releasing backup interface [ 724.523247][T28028] bridge6: left allmulticast mode [ 724.550701][T28028] batman_adv: batadv0: Removing interface: gretap1 [ 724.569929][T28028] bond9: (slave bridge7): Releasing backup interface [ 724.570084][T28028] bridge7: left allmulticast mode [ 724.605079][T28028] bond10: (slave bridge10): Releasing backup interface [ 724.643503][T28028] bond11: (slave wireguard0): Releasing backup interface [ 724.677071][T28028] bond12: (slave bridge14): Releasing backup interface [ 724.702925][T28028] bond13: (slave bridge15): Releasing backup interface [ 724.734677][T28052] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5173'. [ 724.737470][T28028] bond14: (slave bridge16): Releasing backup interface [ 724.763701][T28028] bond15: (slave bridge18): Releasing backup interface [ 724.763881][T28028] bridge18: left allmulticast mode [ 724.787920][T28028] bond16: (slave bridge19): Releasing backup interface [ 724.788094][T28028] bridge19: left allmulticast mode [ 724.804837][T28028] bond17: (slave bridge20): Releasing backup interface [ 724.804988][T28028] bridge20: left allmulticast mode [ 724.809663][T28028] bond19: (slave gretap2): Releasing active interface [ 724.836322][T28028] bond22: (slave veth11): Releasing active interface [ 724.853547][T28028] team0: Port device bridge26 removed [ 724.862216][T28028] bond24: (slave veth13): Releasing active interface [ 724.879193][T28028] bond25: (slave bridge28): Releasing backup interface [ 724.894186][T28028] bond27: (slave veth15): Releasing backup interface [ 724.912574][T28028] bond28: (slave bridge29): Releasing backup interface [ 724.912601][T28028] bridge29: left promiscuous mode [ 724.945082][T28028] bond29: (slave bridge32): Releasing backup interface [ 724.945109][T28028] bridge32: left promiscuous mode [ 724.985798][T28028] team0: Port device bridge37 removed [ 725.317406][T28060] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5174'. [ 725.585714][T28082] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 725.901992][T28102] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5181'. [ 726.084314][T28111] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 726.276251][T28118] netlink: 'syz.3.5186': attribute type 1 has an invalid length. [ 726.298782][T28118] bond31: option mode: invalid value (8) [ 726.316039][T28118] bond31 (unregistering): Released all slaves [ 726.450062][T28130] netlink: 'syz.0.5188': attribute type 1 has an invalid length. [ 726.597609][T28126] dummy0: left promiscuous mode [ 726.616506][T28125] netlink: 'syz.2.5187': attribute type 21 has an invalid length. [ 726.616529][T28125] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5187'. [ 726.660867][T28140] netlink: 'syz.0.5188': attribute type 10 has an invalid length. [ 726.660890][T28140] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5188'. [ 726.739728][T28130] 8021q: adding VLAN 0 to HW filter on device bond22 [ 726.808047][T28135] bond22: (slave veth7): Enslaving as an active interface with a down link [ 726.824332][T28125] netlink: 'syz.2.5187': attribute type 4 has an invalid length. [ 726.824357][T28125] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5187'. [ 726.922000][T28146] ip_tables: iptables: counters copy to user failed while replacing table [ 727.226361][T28164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5190'. [ 727.539605][T28174] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 728.518795][T28217] netlink: 'syz.2.5207': attribute type 1 has an invalid length. [ 728.706460][T28217] bond24: entered promiscuous mode [ 728.724336][T28217] 8021q: adding VLAN 0 to HW filter on device bond24 [ 728.809156][T28229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5208'. [ 728.845014][T28217] bond24: (slave bridge35): making interface the new active one [ 728.845039][T28217] bridge35: entered promiscuous mode [ 728.846079][T28217] bond24: (slave bridge35): Enslaving as an active interface with an up link [ 728.913712][T28227] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 729.055893][T28235] netlink: 'syz.4.5211': attribute type 1 has an invalid length. [ 729.117537][T28235] bond27: option mode: invalid value (8) [ 729.133463][T28235] bond27 (unregistering): Released all slaves [ 729.266308][T28257] netlink: 'syz.4.5211': attribute type 10 has an invalid length. [ 729.266329][T28257] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5211'. [ 729.446424][T28263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5222'. [ 729.920228][T28283] syzkaller1: entered promiscuous mode [ 729.920251][T28283] syzkaller1: entered allmulticast mode [ 731.079691][T28329] tipc: Failed to remove unknown binding: 66,0,0/3777953241:3319983931/3319983933 [ 731.079721][T28329] tipc: Failed to remove unknown binding: 66,0,0/3777953241:3319983931/3319983932 [ 731.080414][T28329] tipc: Failed to remove unknown binding: 66,0,0/3777953241:3319983931/3319983932 [ 731.080438][T28329] tipc: Failed to remove unknown binding: 66,0,0/3777953241:3319983931/3319983933 [ 731.080457][T28329] tipc: Failed to remove unknown binding: 66,0,0/3777953241:3319983931/3319983932 [ 731.147651][T28325] geneve4: entered promiscuous mode [ 731.160233][T28327] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 731.182599][ T43] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.182760][ T43] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.182801][ T43] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.182830][ T43] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.586046][T28355] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5227'. [ 731.741272][T28356] 0: reclassify loop, rule prio 0, protocol 03 [ 731.810996][T28352] syzkaller0: entered promiscuous mode [ 731.811022][T28352] syzkaller0: entered allmulticast mode [ 732.998642][T28399] x_tables: duplicate underflow at hook 1 [ 734.404436][T28367] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 734.498234][T28398] syzkaller0: entered promiscuous mode [ 734.498258][T28398] syzkaller0: entered allmulticast mode [ 734.527658][T28402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5239'. [ 734.632430][ T4952] block nbd0: Receive control failed (result -107) [ 734.727286][T28414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5242'. [ 734.966471][T28421] tipc: Enabling of bearer rejected, already enabled [ 735.111190][T28430] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5244'. [ 735.753173][T28457] netlink: 'syz.2.5250': attribute type 1 has an invalid length. [ 735.799866][T28457] bond25: option mode: invalid value (8) [ 735.827908][T28457] bond25 (unregistering): Released all slaves [ 735.946376][T28472] netlink: 'syz.2.5250': attribute type 10 has an invalid length. [ 735.946396][T28472] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5250'. [ 736.034918][T28469] dummy0: left promiscuous mode [ 736.042643][T28471] syzkaller0: entered promiscuous mode [ 736.042664][T28471] syzkaller0: entered allmulticast mode [ 736.043541][T28471] tipc: Resetting bearer [ 736.043864][T28472] dummy0: entered promiscuous mode [ 736.065445][T28474] syzkaller0: entered promiscuous mode [ 736.065467][T28474] syzkaller0: entered allmulticast mode [ 736.462423][T28490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5257'. [ 736.496310][T28491] tipc: Enabling of bearer rejected, no device for the media [ 737.193079][T28531] netlink: 'syz.1.5267': attribute type 1 has an invalid length. [ 737.247111][T28531] bond40: option mode: invalid value (8) [ 737.270987][T28531] bond40 (unregistering): Released all slaves [ 737.401014][T28537] netlink: 'syz.1.5267': attribute type 10 has an invalid length. [ 737.401036][T28537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5267'. [ 737.598832][T28536] dummy0: left promiscuous mode [ 737.611787][T28537] dummy0: entered promiscuous mode [ 737.657165][T28543] netlink: 'syz.2.5269': attribute type 1 has an invalid length. [ 737.715110][T28543] 8021q: adding VLAN 0 to HW filter on device bond25 [ 737.980489][T28548] bond25: (slave gretap0): making interface the new active one [ 738.012436][T28548] bond25: (slave gretap0): Enslaving as an active interface with an up link [ 738.247460][T28560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5272'. [ 738.364654][T28564] netlink: 'syz.2.5273': attribute type 21 has an invalid length. [ 738.364677][T28564] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5273'. [ 738.364729][T28564] netlink: 'syz.2.5273': attribute type 4 has an invalid length. [ 738.364741][T28564] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5273'. [ 738.950886][T28598] tipc: Enabling of bearer rejected, already enabled [ 739.458377][T28618] syz_tun: entered promiscuous mode [ 739.458586][T28618] vlan4: entered promiscuous mode [ 740.083964][T28645] netlink: 'syz.0.5288': attribute type 21 has an invalid length. [ 740.083987][T28645] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5288'. [ 740.084035][T28645] netlink: 'syz.0.5288': attribute type 4 has an invalid length. [ 740.084047][T28645] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5288'. [ 740.148994][T28627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5286'. [ 740.256757][T28646] tipc: Resetting bearer [ 740.287404][T28652] netlink: 'syz.2.5292': attribute type 1 has an invalid length. [ 740.511841][T28659] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5293'. [ 740.803494][T28678] tipc: Enabling of bearer rejected, no device for the media [ 741.037879][T28694] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5302'. [ 741.209776][T28694] bond31: entered promiscuous mode [ 741.209802][T28694] bond31: entered allmulticast mode [ 741.474038][T28704] validate_nla: 1 callbacks suppressed [ 741.474059][T28704] netlink: 'syz.2.5303': attribute type 21 has an invalid length. [ 741.474073][T28704] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5303'. [ 741.474122][T28704] netlink: 'syz.2.5303': attribute type 4 has an invalid length. [ 741.474135][T28704] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5303'. [ 741.687514][T28705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5304'. [ 741.768166][T28727] bridge0: port 1(macvlan3) entered blocking state [ 741.768366][T28727] bridge0: port 1(macvlan3) entered disabled state [ 741.768495][T28727] macvlan3: entered allmulticast mode [ 741.784980][T28727] macvlan3: entered promiscuous mode [ 741.785580][T28727] bridge0: port 1(macvlan3) entered blocking state [ 741.785700][T28727] bridge0: port 1(macvlan3) entered listening state [ 742.055168][T28746] netlink: 'syz.0.5314': attribute type 1 has an invalid length. [ 742.259656][T28752] syzkaller0: entered promiscuous mode [ 742.259681][T28752] syzkaller0: entered allmulticast mode [ 742.363502][T28763] ip_tables: iptables: counters copy to user failed while replacing table [ 742.687483][T28780] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 742.805171][T28784] netlink: 'syz.4.5320': attribute type 21 has an invalid length. [ 742.805192][T28784] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5320'. [ 742.805247][T28784] netlink: 'syz.4.5320': attribute type 4 has an invalid length. [ 742.805259][T28784] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5320'. [ 742.855889][T28787] tipc: Enabling of bearer rejected, already enabled [ 744.113091][T28840] netlink: 'syz.4.5332': attribute type 21 has an invalid length. [ 744.115428][T28840] netlink: 'syz.4.5332': attribute type 4 has an invalid length. [ 744.352784][T28849] TC_ACT_REPEAT abuse ? [ 745.347916][T28882] tipc: Enabling of bearer rejected, no device for the media [ 745.369755][T28887] syzkaller0: left promiscuous mode [ 745.369775][T28887] syzkaller0: left allmulticast mode [ 745.370061][T28887] tipc: Resetting bearer [ 745.528685][T28890] netlink: 'syz.3.5345': attribute type 21 has an invalid length. [ 745.528708][T28890] __nla_validate_parse: 2 callbacks suppressed [ 745.528718][T28890] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5345'. [ 745.528761][T28890] netlink: 'syz.3.5345': attribute type 4 has an invalid length. [ 745.528773][T28890] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5345'. [ 746.287321][T28922] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 746.392042][T28924] syzkaller1: entered promiscuous mode [ 746.392064][T28924] syzkaller1: entered allmulticast mode [ 746.775492][T28934] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5356'. [ 746.954818][T28937] netlink: 'syz.4.5357': attribute type 21 has an invalid length. [ 746.954840][T28937] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5357'. [ 746.954893][T28937] netlink: 'syz.4.5357': attribute type 4 has an invalid length. [ 746.954905][T28937] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5357'. [ 747.299079][T28954] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5360'. [ 748.524122][T28983] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 748.790261][T28991] netlink: 'syz.1.5369': attribute type 8 has an invalid length. [ 748.839708][T28988] netlink: 'syz.4.5368': attribute type 21 has an invalid length. [ 748.839733][T28988] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5368'. [ 748.839786][T28988] netlink: 'syz.4.5368': attribute type 4 has an invalid length. [ 748.839798][T28988] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5368'. [ 749.128304][T29004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5372'. [ 749.595510][T29023] tipc: Enabling of bearer rejected, already enabled [ 749.663248][T29028] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5376'. [ 751.102717][T29059] syzkaller0: left promiscuous mode [ 751.102757][T29059] syzkaller0: left allmulticast mode [ 751.132052][T29058] syzkaller0: entered promiscuous mode [ 751.132073][T29058] syzkaller0: entered allmulticast mode [ 751.406880][T29069] netlink: 'syz.4.5384': attribute type 1 has an invalid length. [ 751.567351][T29080] netlink: 'syz.0.5383': attribute type 21 has an invalid length. [ 751.567372][T29080] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5383'. [ 751.674383][T29080] netlink: 'syz.0.5383': attribute type 4 has an invalid length. [ 751.674407][T29080] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5383'. [ 751.734797][T29069] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5384'. [ 751.879549][T29069] bond27: (slave bridge42): making interface the new active one [ 751.879985][T29069] bond27: (slave bridge42): Enslaving as an active interface with an up link [ 752.074718][T29093] syzkaller0: entered promiscuous mode [ 752.074742][T29093] syzkaller0: entered allmulticast mode [ 752.471347][T29102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5391'. [ 754.313248][ T30] audit: type=1107 audit(1793991149.654:237): pid=29143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 754.359315][T29144] netlink: 'syz.2.5397': attribute type 10 has an invalid length. [ 754.359338][T29144] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5397'. [ 754.672698][T29154] netlink: 'syz.1.5398': attribute type 21 has an invalid length. [ 754.672720][T29154] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5398'. [ 755.511864][T29154] netlink: 'syz.1.5398': attribute type 4 has an invalid length. [ 755.511888][T29154] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5398'. [ 755.616767][T29166] netlink: 'syz.2.5402': attribute type 11 has an invalid length. [ 755.842989][T29166] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5402'. [ 755.967214][T29181] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 756.157612][T29190] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5407'. [ 756.844781][T29214] netlink: 'syz.1.5413': attribute type 21 has an invalid length. [ 756.844804][T29214] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5413'. [ 756.942476][ C1] bridge0: port 1(macvlan3) entered learning state [ 757.283003][T29214] netlink: 'syz.1.5413': attribute type 4 has an invalid length. [ 757.283025][T29214] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5413'. [ 757.417393][T29219] syzkaller0: entered promiscuous mode [ 757.417410][T29219] syzkaller0: entered allmulticast mode [ 759.612179][T29260] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5419'. [ 761.396605][T29230] syzkaller0: entered promiscuous mode [ 761.396627][T29230] syzkaller0: entered allmulticast mode [ 761.413726][T29249] syzkaller0: entered promiscuous mode [ 761.413747][T29249] syzkaller0: entered allmulticast mode [ 761.413999][T29249] tipc: Resetting bearer [ 761.703568][T29288] netlink: 'syz.1.5426': attribute type 21 has an invalid length. [ 761.703591][T29288] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5426'. [ 761.703640][T29288] netlink: 'syz.1.5426': attribute type 4 has an invalid length. [ 761.703651][T29288] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5426'. [ 761.985851][T29298] bridge0: received packet on macvlan3 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 762.223147][T29307] syzkaller0: entered promiscuous mode [ 762.223169][T29307] syzkaller0: entered allmulticast mode [ 762.252340][T29313] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 763.303694][T29344] netlink: 'syz.4.5439': attribute type 21 has an invalid length. [ 763.303719][T29344] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5439'. [ 763.303770][T29344] netlink: 'syz.4.5439': attribute type 4 has an invalid length. [ 763.303781][T29344] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5439'. [ 763.711897][T29352] syzkaller0: entered promiscuous mode [ 763.711920][T29352] syzkaller0: entered allmulticast mode [ 763.717400][T29352] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 764.153645][T29365] syzkaller0: Caught tx_queue_len zero misconfig [ 764.363406][T29385] ip_tables: iptables: counters copy to user failed while replacing table [ 764.849314][T29401] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 764.950253][T29398] netlink: 'syz.4.5450': attribute type 21 has an invalid length. [ 764.950275][T29398] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5450'. [ 764.950324][T29398] netlink: 'syz.4.5450': attribute type 4 has an invalid length. [ 764.950337][T29398] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5450'. [ 765.262242][T29412] syzkaller0: left promiscuous mode [ 765.262265][T29412] syzkaller0: left allmulticast mode [ 765.262499][T29412] tipc: Resetting bearer [ 765.913162][T29431] syzkaller0: entered promiscuous mode [ 765.913183][T29431] syzkaller0: entered allmulticast mode [ 766.205882][T29427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 766.436133][T29448] ip_tables: iptables: counters copy to user failed while replacing table [ 766.927274][T29463] syzkaller0: entered promiscuous mode [ 766.927297][T29463] syzkaller0: entered allmulticast mode [ 766.929344][ T62] hfsc: classify hop budget exhausted, dropping packet [ 766.949505][T29463] hfsc: classify hop budget exhausted, dropping packet [ 767.290448][T29479] netlink: 'syz.4.5463': attribute type 21 has an invalid length. [ 767.290473][T29479] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5463'. [ 767.292617][T29479] netlink: 'syz.4.5463': attribute type 4 has an invalid length. [ 767.292634][T29479] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5463'. [ 767.698582][T29491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5467'. [ 767.703518][T29491] xt_cgroup: path and classid specified [ 768.377324][T29503] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 768.835414][T29523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5476'. [ 768.892895][T29523] macvtap1: entered promiscuous mode [ 768.893129][T29523] macvtap1: entered allmulticast mode [ 768.893145][T29523] dummy0: entered allmulticast mode [ 768.893924][T29531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5476'. [ 768.896809][T29528] netlink: 'syz.1.5477': attribute type 1 has an invalid length. [ 768.901857][T29531] dummy0: left allmulticast mode [ 768.945542][T29531] macvtap1: left promiscuous mode [ 768.945567][T29531] macvtap1: left allmulticast mode [ 768.987642][T29533] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5477'. [ 769.051951][T29537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5477'. [ 769.054898][T29528] bond40: entered promiscuous mode [ 769.055306][T29528] 8021q: adding VLAN 0 to HW filter on device bond40 [ 769.128227][T29528] bond40: (slave bridge43): making interface the new active one [ 769.128251][T29528] bridge43: entered promiscuous mode [ 769.129372][T29528] bond40: (slave bridge43): Enslaving as an active interface with an up link [ 769.211887][T29546] syzkaller0: entered promiscuous mode [ 769.211910][T29546] syzkaller0: entered allmulticast mode [ 769.495499][T29559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5484'. [ 769.527024][T29561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5485'. [ 770.016736][T29576] netlink: 'syz.3.5488': attribute type 1 has an invalid length. [ 770.032088][T29576] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5488'. [ 770.226879][T29588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5489'. [ 770.226931][T29588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5489'. [ 770.285445][T29584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5489'. [ 770.667409][T29600] netlink: 'syz.0.5492': attribute type 1 has an invalid length. [ 770.804189][T29600] macvtap1: entered allmulticast mode [ 770.849256][T29600] macvtap2: entered allmulticast mode [ 770.957454][T29600] bond23: (slave bridge30): making interface the new active one [ 770.971440][T29600] bond23: (slave bridge30): Enslaving as an active interface with an up link [ 771.411499][T29622] syzkaller0: entered promiscuous mode [ 771.411520][T29622] syzkaller0: entered allmulticast mode [ 771.432149][T29627] tipc: Enabling of bearer rejected, already enabled [ 771.432928][T29627] syzkaller0: entered promiscuous mode [ 771.432946][T29627] syzkaller0: entered allmulticast mode [ 771.433175][T29627] tipc: Resetting bearer [ 772.303714][ C1] bridge0: port 1(macvlan3) entered forwarding state [ 772.303742][ C1] bridge0: topology change detected, propagating [ 772.355722][T29638] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 774.369267][T29699] tipc: Enabling of bearer rejected, already enabled [ 774.490368][T29704] IPVS: Error connecting to the multicast addr [ 774.590154][T29711] __nla_validate_parse: 1 callbacks suppressed [ 774.590174][T29711] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5511'. [ 774.685346][T29715] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 776.197285][T29760] openvswitch: netlink: ufid size 24 bytes exceeds the range (1, 16) [ 776.213757][T29760] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5520'. [ 776.707731][T29790] syzkaller0: left promiscuous mode [ 776.707754][T29790] syzkaller0: left allmulticast mode [ 776.829701][T29795] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5525'. [ 776.927621][T29803] netlink: 'syz.4.5528': attribute type 1 has an invalid length. [ 776.983405][T29805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5528'. [ 776.983426][T29805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5528'. [ 777.040397][T29803] bond29: entered promiscuous mode [ 777.043925][T29803] 8021q: adding VLAN 0 to HW filter on device bond29 [ 777.077398][T29803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5528'. [ 777.077420][T29803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5528'. [ 777.169170][T29805] bond29: (slave bridge43): making interface the new active one [ 777.169195][T29805] bridge43: entered promiscuous mode [ 777.193465][T29805] bond29: (slave bridge43): Enslaving as an active interface with an up link [ 777.271620][T29816] netlink: 'syz.1.5529': attribute type 1 has an invalid length. [ 777.344378][T29816] 8021q: adding VLAN 0 to HW filter on device bond41 [ 777.345438][T29820] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 777.405246][T29822] bond41: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 777.849283][T29835] tipc: Enabling of bearer rejected, already enabled [ 778.412457][T29855] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 778.495301][T29858] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3842151550/3842151552 [ 778.495331][T29858] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3842151550/3842151551 [ 778.495937][T29858] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3842151550/3842151552 [ 778.495960][T29858] tipc: Failed to remove unknown binding: 66,0,0/2886997162:3842151550/3842151551 [ 778.825497][T29876] syzkaller0: entered promiscuous mode [ 778.825521][T29876] syzkaller0: entered allmulticast mode [ 778.849195][T29877] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 779.033254][ T4952] block nbd2: Receive control failed (result -22) [ 779.040315][T29884] nbd2: detected capacity change from 0 to 32 [ 779.048538][ T4965] block nbd2: Dead connection, failed to find a fallback [ 779.048559][ T4965] block nbd2: shutting down sockets [ 779.048571][ T4965] blk_print_req_error: 64 callbacks suppressed [ 779.048581][ T4965] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.048604][ T4965] buffer_io_error: 138 callbacks suppressed [ 779.048614][ T4965] Buffer I/O error on dev nbd2, logical block 0, async page read [ 779.055210][ T4965] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.055238][ T4965] Buffer I/O error on dev nbd2, logical block 0, async page read [ 779.055557][ T4965] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.055579][ T4965] Buffer I/O error on dev nbd2, logical block 0, async page read [ 779.062955][ T4965] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.062989][ T4965] Buffer I/O error on dev nbd2, logical block 0, async page read [ 779.069365][ T4965] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.069398][ T4965] Buffer I/O error on dev nbd2, logical block 0, async page read [ 779.085838][ T4965] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.085869][ T4965] Buffer I/O error on dev nbd2, logical block 0, async page read [ 779.087762][ T4965] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.087791][ T4965] Buffer I/O error on dev nbd2, logical block 0, async page read [ 779.102361][ T6969] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.102388][ T6969] Buffer I/O error on dev nbd2, logical block 0, async page read [ 779.102447][T29656] ldm_validate_partition_table(): Disk read failed. [ 779.102557][ T6969] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.102578][ T6969] Buffer I/O error on dev nbd2, logical block 0, async page read [ 779.103631][ T6969] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 779.103657][ T6969] Buffer I/O error on dev nbd2, logical block 0, async page read [ 779.105190][T29656] Dev nbd2: unable to read RDB block 0 [ 779.105746][T29656] nbd2: unable to read partition table [ 779.139797][T29656] ldm_validate_partition_table(): Disk read failed. [ 779.142014][T29656] Dev nbd2: unable to read RDB block 0 [ 779.145365][T29656] nbd2: unable to read partition table [ 779.544951][T29900] netlink: 'syz.2.5551': attribute type 10 has an invalid length. [ 779.544973][T29900] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5551'. [ 779.907033][T29923] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5555'. [ 780.095020][T29930] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 780.149215][T29933] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5558'. [ 781.010009][T29955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5563'. [ 781.010042][T29955] bond0: option lp_interval: invalid value (0) [ 781.010058][T29955] bond0: option lp_interval: allowed values 1 - 2147483647 [ 781.165735][T29961] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 781.332370][T29968] caif0: tun_chr_ioctl cmd 2147767507 [ 781.775452][T29991] netlink: 'syz.0.5569': attribute type 1 has an invalid length. [ 781.810121][T29991] 8021q: adding VLAN 0 to HW filter on device bond24 [ 781.824832][T29991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5569'. [ 781.833295][T29991] bridge31: entered promiscuous mode [ 781.846438][T29991] bond24: (slave bridge31): making interface the new active one [ 781.854320][T29991] bond24: (slave bridge31): Enslaving as an active interface with an up link [ 781.949056][T29996] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 782.201246][T30008] tipc: Resetting bearer [ 782.295120][T30012] tipc: Enabling of bearer rejected, no device for the media [ 782.603667][T30027] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5578'. [ 782.685331][T30031] netlink: 'syz.3.5579': attribute type 1 has an invalid length. [ 782.760044][T30031] 8021q: adding VLAN 0 to HW filter on device bond32 [ 782.831698][T30035] 8021q: adding VLAN 0 to HW filter on device bond32 [ 782.832050][T30035] bond32: (slave gre3): The slave device specified does not support setting the MAC address [ 782.864097][T30035] bond32: (slave gre3): Error -95 calling set_mac_address [ 782.963733][T30031] gretap0: entered promiscuous mode [ 782.978555][T30031] bond32: (slave gretap0): making interface the new active one [ 782.979069][T30031] bond32: (slave gretap0): Enslaving as an active interface with an up link [ 783.174678][T30031] 8021q: adding VLAN 0 to HW filter on device bond33 [ 783.197290][T30031] bond32: (slave bond33): Enslaving as an active interface with a down link [ 783.242715][T30035] bond32 (unregistering): (slave gretap0): Releasing active interface [ 783.280358][T30035] bond32 (unregistering): (slave bond33): Releasing active interface [ 783.303611][T30035] bond32 (unregistering): Released all slaves [ 783.522462][T30048] netlink: 'syz.0.5581': attribute type 11 has an invalid length. [ 783.772265][T30048] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5581'. [ 784.196195][T30084] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5587'. [ 784.659423][T30097] netlink: 'syz.0.5590': attribute type 1 has an invalid length. [ 784.763946][T30097] bond25: entered promiscuous mode [ 784.765344][T30101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5590'. [ 784.765364][T30101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5590'. [ 784.765819][T30097] 8021q: adding VLAN 0 to HW filter on device bond25 [ 784.824050][T30097] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5590'. [ 784.908582][T30097] bond25: (slave bridge32): making interface the new active one [ 784.908606][T30097] bridge32: entered promiscuous mode [ 784.910426][T30097] bond25: (slave bridge32): Enslaving as an active interface with an up link [ 785.703700][T30132] netlink: 'syz.0.5597': attribute type 1 has an invalid length. [ 785.703724][T30132] __nla_validate_parse: 1 callbacks suppressed [ 785.703734][T30132] netlink: 5268 bytes leftover after parsing attributes in process `syz.0.5597'. [ 785.703749][T30132] netlink: 'syz.0.5597': attribute type 1 has an invalid length. [ 785.969176][T30142] netlink: 'syz.0.5600': attribute type 11 has an invalid length. [ 786.214030][T30147] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5600'. [ 786.297149][T30160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5602'. [ 786.385179][T30160] tipc: Resetting bearer [ 786.405693][T30160] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 786.500788][T30162] syzkaller0: left promiscuous mode [ 786.500811][T30162] syzkaller0: left allmulticast mode [ 786.609830][T30173] netlink: 'syz.0.5604': attribute type 1 has an invalid length. [ 786.734967][T30176] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5604'. [ 786.734990][T30176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5604'. [ 786.768068][T30173] bond26: entered promiscuous mode [ 786.768524][T30173] 8021q: adding VLAN 0 to HW filter on device bond26 [ 786.810296][T30173] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5604'. [ 786.810319][T30173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5604'. [ 786.904779][T30173] bond26: (slave bridge33): making interface the new active one [ 786.904803][T30173] bridge33: entered promiscuous mode [ 786.909526][T30173] bond26: (slave bridge33): Enslaving as an active interface with an up link [ 786.984539][T30188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5608'. [ 786.986342][T30188] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 787.222917][T30195] gre0: left promiscuous mode [ 787.258677][T30195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.271870][T30195] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.277599][T30195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 787.358919][T30195] veth1_vlan: left promiscuous mode [ 787.367631][T30195] vlan0: left promiscuous mode [ 787.369948][T30195] veth1_vlan: entered promiscuous mode [ 787.370254][T30195] macvlan0: left promiscuous mode [ 787.389261][T30195] macvlan1: left promiscuous mode [ 787.396750][T30195] ipvlan1: left promiscuous mode [ 787.398579][T30195] veth1_macvtap: left promiscuous mode [ 787.399844][T30195] veth0_macvtap: left promiscuous mode [ 787.417744][T30195] veth0_macvtap: entered promiscuous mode [ 787.417956][T30195] macvtap0: left promiscuous mode [ 787.419133][T30195] tipc: Resetting bearer [ 787.420953][T30195] veth1_macvtap: entered promiscuous mode [ 787.421205][T30195] macsec0: left promiscuous mode [ 787.451824][T30195] geneve0: left promiscuous mode [ 787.453362][T30195] geneve1: left promiscuous mode [ 787.455321][T30195] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 787.455684][T30195] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 787.456807][T30195] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 787.457520][T30195] netdevsim netdevsim3 netdevsim2: left promiscuous mode [ 787.457874][T30195] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 787.458635][T30195] netdevsim netdevsim3 netdevsim3: left promiscuous mode [ 787.459432][T30195] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 787.459972][T30195] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 787.459991][T30195] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 787.567862][T27189] syz0: Port: 1 Link ACTIVE [ 787.716965][T30209] tipc: Enabling of bearer rejected, no device for the media [ 787.841811][ T8627] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.841854][ T8627] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.841884][ T8627] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.841912][ T8627] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.909007][T30223] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 787.941251][T30223] syzkaller0: entered promiscuous mode [ 787.941276][T30223] syzkaller0: entered allmulticast mode [ 787.948149][T30223] tipc: Enabled bearer , priority 0 [ 787.990957][T30222] tipc: Resetting bearer [ 788.035594][T30222] tipc: Disabling bearer [ 788.256600][T30234] syzkaller0: entered promiscuous mode [ 788.256620][T30234] syzkaller0: entered allmulticast mode [ 788.346590][T30240] tipc: Enabling of bearer rejected, already enabled [ 788.359878][T30234] tipc: Enabled bearer , priority 0 [ 788.373873][T30233] tipc: Resetting bearer [ 788.375904][T30246] netlink: 'syz.1.5622': attribute type 1 has an invalid length. [ 788.416126][T30233] tipc: Disabling bearer [ 788.442427][T30247] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5622'. [ 788.504649][T30251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5622'. [ 788.526177][T30246] bond42: entered promiscuous mode [ 788.528125][T30246] 8021q: adding VLAN 0 to HW filter on device bond42 [ 788.583127][T30246] bond42: (slave bridge44): making interface the new active one [ 788.583151][T30246] bridge44: entered promiscuous mode [ 788.585843][T30246] bond42: (slave bridge44): Enslaving as an active interface with an up link [ 788.727220][T30260] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 788.745309][T30260] tipc: Resetting bearer [ 788.801603][T30260] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 788.935537][T30260] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 789.326853][T30280] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 789.673395][T30294] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 789.932930][T30310] tipc: Enabling of bearer rejected, already enabled [ 790.878843][T30329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5636'. [ 791.102376][T30337] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 791.143464][T30339] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5638'. [ 791.143654][T30339] netlink: 120 bytes leftover after parsing attributes in process `syz.2.5638'. [ 791.312604][T30345] ip_tables: iptables: counters copy to user failed while replacing table [ 791.387189][T30345] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 792.695275][T30389] ip_tables: iptables: counters copy to user failed while replacing table [ 793.573261][T30424] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5653'. [ 793.935405][T30437] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5656'. [ 793.951039][T30436] netlink: 'syz.3.5656': attribute type 8 has an invalid length. [ 794.341700][T30450] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 795.156622][T30478] syzkaller0: entered promiscuous mode [ 795.156646][T30478] syzkaller0: entered allmulticast mode [ 795.232662][T30478] tipc: Bearer : already 2 bearers with priority 0 [ 795.232685][T30478] tipc: Enabling of bearer rejected, cannot adjust to lower [ 795.445806][T30490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5665'. [ 795.579641][T30492] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 795.613813][T30492] batman_adv: batadv0: Adding interface: syz_tun [ 795.613830][T30492] batman_adv: batadv0: The MTU of interface syz_tun is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.618974][T30492] batman_adv: batadv0: Interface activated: syz_tun [ 796.107353][T30519] netlink: 'syz.1.5671': attribute type 1 has an invalid length. [ 796.107377][T30519] netlink: 256 bytes leftover after parsing attributes in process `syz.1.5671'. [ 796.157934][T30518] bond2: (slave lo): Releasing backup interface [ 796.171123][T30519] netlink: 'syz.1.5671': attribute type 58 has an invalid length. [ 796.171147][T30519] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5671'. [ 796.213999][T30518] bond2: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 796.228352][T30518] bond26: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 796.269885][T30518] bond26: (slave lo): Enslaving as an active interface with an up link [ 796.287548][T30518] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 797.286610][T30552] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 797.331974][T30553] tipc: Enabling of bearer rejected, no device for the media [ 797.373435][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.373982][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.374431][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.374943][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.375981][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.376519][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.376997][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.377453][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.661029][T30565] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5678'. [ 797.701061][T30558] net_ratelimit: 376 callbacks suppressed [ 797.701081][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.701554][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.702060][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.703146][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.703613][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.704159][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.704613][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.705119][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.705564][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.706018][T30558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 797.824604][T30565] bond27: entered promiscuous mode [ 797.825040][T30565] 8021q: adding VLAN 0 to HW filter on device bond27 [ 798.245293][T30562] 8021q: adding VLAN 0 to HW filter on device bond27 [ 798.245727][T30562] bond27: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 798.250330][T30562] bond27: (slave ip6gre1): Error -95 calling set_mac_address [ 798.655180][T30582] syzkaller1: entered promiscuous mode [ 798.655203][T30582] syzkaller1: entered allmulticast mode [ 798.934935][T30598] netlink: 'syz.0.5687': attribute type 1 has an invalid length. [ 798.934958][T30598] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5687'. [ 798.939649][T30598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5687'. [ 799.134818][T30598] xt_IDLETIMER: timeout value is zero [ 799.429264][T30608] udevd[30608]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 799.447914][T30458] udevd[30458]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 799.634038][T30627] tipc: Enabling of bearer rejected, already enabled [ 799.877096][T30638] netlink: 'syz.4.5693': attribute type 1 has an invalid length. [ 800.017986][T30638] bond30: entered promiscuous mode [ 800.018488][T30638] 8021q: adding VLAN 0 to HW filter on device bond30 [ 800.165666][T30638] bond30: (slave bridge44): making interface the new active one [ 800.165692][T30638] bridge44: entered promiscuous mode [ 800.193207][T30638] bond30: (slave bridge44): Enslaving as an active interface with an up link [ 800.456932][T30653] netlink: 'syz.4.5695': attribute type 1 has an invalid length. [ 800.581461][T30662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5695'. [ 800.601086][T30653] 8021q: adding VLAN 0 to HW filter on device bond31 [ 800.601732][T30658] veth0_to_bond: left promiscuous mode [ 800.667452][T30658] bond31: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 800.757714][T30662] bridge45: entered promiscuous mode [ 800.786843][T30662] bond31: (slave bridge45): Enslaving as an active interface with an up link [ 802.485983][T30717] tipc: Enabling of bearer rejected, already enabled [ 803.105602][T30740] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5710'. [ 803.268522][T30746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5710'. [ 803.442076][ C1] net_ratelimit: 1377 callbacks suppressed [ 803.442098][ C1] bridge0: received packet on macvlan3 with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 803.445182][T30721] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5708'. [ 803.447543][T30748] syzkaller0: left promiscuous mode [ 803.447563][T30748] syzkaller0: left allmulticast mode [ 803.447840][T30748] tipc: Resetting bearer [ 803.704297][T30752] netlink: 'syz.0.5714': attribute type 1 has an invalid length. [ 803.769019][T30752] bond27: option mode: invalid value (8) [ 803.784828][T30752] bond27 (unregistering): Released all slaves [ 803.831033][T30760] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5716'. [ 803.831068][T30760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5716'. [ 803.843759][T30757] xt_hashlimit: size too large, truncated to 1048576 [ 803.914247][T30765] netlink: 'syz.0.5714': attribute type 10 has an invalid length. [ 803.914270][T30765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5714'. [ 804.237042][T30773] block nbd3: server does not support multiple connections per device. [ 804.237540][T30773] block nbd3: shutting down sockets [ 804.831074][T30800] netlink: 'syz.3.5723': attribute type 19 has an invalid length. [ 805.216424][T30804] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5724'. [ 805.312559][T30817] tipc: Bearer : already 2 bearers with priority 0 [ 805.312580][T30817] tipc: Enabling of bearer rejected, cannot adjust to lower [ 805.315393][T30817] syzkaller0: entered promiscuous mode [ 805.315417][T30817] syzkaller0: entered allmulticast mode [ 805.382574][T30813] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 805.680066][T30819] netlink: 'syz.0.5726': attribute type 1 has an invalid length. [ 805.731401][T30820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5726'. [ 805.763941][T30828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5728'. [ 805.853217][T30819] bond27: entered promiscuous mode [ 805.856839][T30819] 8021q: adding VLAN 0 to HW filter on device bond27 [ 805.919980][T30820] 8021q: adding VLAN 0 to HW filter on device bond27 [ 805.920322][T30820] bond27: (slave wireguard0): The slave device specified does not support setting the MAC address [ 805.920340][T30820] bond27: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 805.949198][T30820] bond27: (slave wireguard0): making interface the new active one [ 805.949222][T30820] wireguard0: entered promiscuous mode [ 805.958465][T30820] bond27: (slave wireguard0): Enslaving as an active interface with an up link [ 805.975916][T30829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5729'. [ 806.028965][T30835] netlink: 'syz.1.5730': attribute type 1 has an invalid length. [ 806.085286][T30835] bond43: option mode: invalid value (8) [ 806.087469][T30835] bond43 (unregistering): Released all slaves [ 806.270334][T30842] dummy0: left promiscuous mode [ 806.713572][T30876] netlink: 'syz.0.5736': attribute type 1 has an invalid length. [ 806.843960][T30883] 8021q: adding VLAN 0 to HW filter on device bond29 [ 806.868335][T30883] bond28: (slave bond29): making interface the new active one [ 806.868952][T30883] bond28: (slave bond29): Enslaving as an active interface with an up link [ 806.869024][T30882] tipc: Enabling of bearer rejected, already enabled [ 806.945326][T30876] bond28: (slave gretap4): Enslaving as a backup interface with an up link [ 806.946045][T30869] lo: Caught tx_queue_len zero misconfig [ 806.946072][T30869] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 806.985970][T30883] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 807.008989][T30876] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 807.678447][T30904] nbd: must specify at least one socket [ 807.870229][T30921] IPv6: NLM_F_CREATE should be specified when creating new route [ 807.870372][T30921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 807.870383][T30921] IPv6: NLM_F_CREATE should be set when creating new route [ 808.183209][T30921] __nla_validate_parse: 3 callbacks suppressed [ 808.183232][T30921] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5741'. [ 808.568904][T30938] tipc: Enabling of bearer rejected, already enabled [ 809.614455][T30970] ip_tables: iptables: counters copy to user failed while replacing table [ 809.784918][T30969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5750'. [ 809.787636][T30977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5749'. [ 811.289853][T31015] netlink: 'syz.1.5756': attribute type 1 has an invalid length. [ 811.334286][T31015] bond43: option mode: invalid value (8) [ 811.337339][T31015] bond43 (unregistering): Released all slaves [ 811.673621][T31018] tc_dump_action: action bad kind [ 811.886497][T31041] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 812.946098][T31072] netlink: 'syz.2.5767': attribute type 1 has an invalid length. [ 813.364268][T31082] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 815.004157][T31129] x_tables: duplicate underflow at hook 2 [ 815.375883][T31143] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 815.478472][T31148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5777'. [ 815.869562][T31165] block nbd3: server does not support multiple connections per device. [ 815.890354][T31165] block nbd3: shutting down sockets [ 816.100409][T31173] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5781'. [ 816.413442][T31178] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 817.298260][T31204] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5788'. [ 818.828300][T31257] sctp: [Deprecated]: syz.2.5795 (pid 31257) Use of int in max_burst socket option. [ 818.828300][T31257] Use struct sctp_assoc_value instead [ 818.887005][T31258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5795'. [ 819.306609][T31240] tipc: Enabling of bearer rejected, already enabled [ 819.628207][T31267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5797'. [ 819.967976][T31269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.008089][T31269] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 820.079002][T31269] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 820.111943][T31269] bond0 (unregistering): Released all slaves [ 820.156856][T31273] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 820.158972][T31275] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 820.243798][T31295] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 820.826956][T31319] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 820.900817][T31322] lo: entered allmulticast mode [ 821.075964][T31330] tipc: Enabling of bearer rejected, already enabled [ 824.571006][T31320] lo: left allmulticast mode [ 824.906435][T31382] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 824.965314][T31383] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 825.461702][T31404] netlink: 'syz.3.5819': attribute type 1 has an invalid length. [ 825.569233][T31405] netlink: 'syz.3.5819': attribute type 10 has an invalid length. [ 825.569258][T31405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5819'. [ 825.569412][T31405] dummy0: entered promiscuous mode [ 825.922441][T31423] netlink: 'syz.1.5822': attribute type 1 has an invalid length. [ 825.969072][T31423] 8021q: adding VLAN 0 to HW filter on device bond43 [ 826.017717][T31431] netlink: 'syz.0.5823': attribute type 1 has an invalid length. [ 826.041774][T31423] bond43: (slave geneve6): making interface the new active one [ 826.046891][T31423] bond43: (slave geneve6): Enslaving as an active interface with an up link [ 826.315306][T31433] netlink: 'syz.0.5823': attribute type 10 has an invalid length. [ 826.315329][T31433] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5823'. [ 826.352558][T31433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 826.352577][T31433] IPv6: NLM_F_CREATE should be set when creating new route [ 826.352617][T31433] IPv6: NLM_F_CREATE should be set when creating new route [ 827.585866][T31475] netlink: 'syz.1.5830': attribute type 1 has an invalid length. [ 827.730166][T31484] netlink: 'syz.1.5830': attribute type 10 has an invalid length. [ 827.730189][T31484] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5830'. [ 827.779321][T31484] dummy0: entered promiscuous mode [ 828.495430][T31507] netlink: 'syz.0.5836': attribute type 1 has an invalid length. [ 828.633967][T31507] bond30: option mode: invalid value (8) [ 828.654398][T31507] bond30 (unregistering): Released all slaves [ 828.722901][T31518] netlink: 'syz.0.5836': attribute type 10 has an invalid length. [ 828.722923][T31518] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5836'. [ 828.980152][T31529] netlink: 'syz.1.5838': attribute type 1 has an invalid length. [ 829.177327][T31542] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5839'. [ 829.384444][T31529] 8021q: adding VLAN 0 to HW filter on device bond44 [ 829.400049][T31543] tipc: Resetting bearer [ 829.400093][T31543] batman_adv: batadv0: Interface deactivated: syz_tun [ 829.439824][T31543] batman_adv: batadv0: Removing interface: syz_tun [ 829.909431][ C1] af_packet: tpacket_rcv: packet too big, clamped from 342 to 4294967286. macoff=82 [ 830.209632][T31538] batman_adv: batadv0: Adding interface: veth0 [ 830.209672][T31538] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 830.209775][T31538] batman_adv: batadv0: Interface activated: veth0 [ 830.986646][T31599] netlink: 'syz.3.5845': attribute type 8 has an invalid length. [ 831.145526][T31603] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 832.149910][T31638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5854'. [ 833.265834][T31671] bond31: (slave veth0_to_bond): Releasing backup interface [ 833.265858][T31671] bond31: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 834.180115][T31671] bond0: (slave bond_slave_0): Releasing backup interface [ 834.211548][T31671] team0: Port device team_slave_0 removed [ 834.232464][T31671] team0: Port device team_slave_1 removed [ 834.232835][T31671] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 834.248749][T31671] bond5: (slave bridge1): Releasing backup interface [ 834.268245][T31671] bond6: (slave bridge2): Releasing backup interface [ 834.283290][T31671] bond7: (slave bridge3): Releasing backup interface [ 834.300033][T31671] team0: Port device bond8 removed [ 834.313063][T31671] bond9: (slave bridge7): Releasing backup interface [ 834.319168][T31671] bond10: (slave bridge12): Releasing backup interface [ 834.319322][T31671] bridge12: left allmulticast mode [ 834.342725][T31671] bond11: (slave bridge15): Releasing backup interface [ 834.346673][T31671] bond12: (slave bridge17): Releasing backup interface [ 834.366399][T31671] bond14: (slave veth9): Releasing backup interface [ 834.371521][T31671] batman_adv: batadv0: Removing interface: ip6gretap1 [ 834.390339][T31671] bond15: (slave bridge25): Releasing backup interface [ 834.390363][T31671] bridge25: left promiscuous mode [ 834.425872][T31671] bond17: (slave bridge28): Releasing backup interface [ 834.425897][T31671] bridge28: left promiscuous mode [ 834.456410][T31671] bond18: (slave bridge30): Releasing backup interface [ 834.456437][T31671] bridge30: left promiscuous mode [ 834.456627][T31671] bridge30: left allmulticast mode [ 834.483985][T31671] bond19: (slave bridge31): Releasing backup interface [ 834.484011][T31671] bridge31: left promiscuous mode [ 834.484198][T31671] bridge31: left allmulticast mode [ 834.496207][T31671] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 834.496229][T31671] batman_adv: batadv0: Removing interface: ip6gretap2 [ 834.534439][T31671] bond27: (slave bridge42): Releasing backup interface [ 834.558767][T31671] bond29: (slave bridge43): Releasing backup interface [ 834.558795][T31671] bridge43: left promiscuous mode [ 834.599329][T31671] bond30: (slave bridge44): Releasing backup interface [ 834.599356][T31671] bridge44: left promiscuous mode [ 834.624724][T31671] bond31: (slave bridge45): Releasing backup interface [ 834.857997][T31700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5864'. [ 835.019245][T31708] netlink: 'syz.4.5865': attribute type 1 has an invalid length. [ 835.179000][T31708] 8021q: adding VLAN 0 to HW filter on device bond32 [ 835.179322][T31718] netlink: 'syz.0.5867': attribute type 1 has an invalid length. [ 835.460734][T31730] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20265 [ 835.484972][T31730] netlink: 'syz.1.5868': attribute type 1 has an invalid length. [ 835.686960][T31725] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5868'. [ 835.688381][T31725] 8021q: adding VLAN 0 to HW filter on device bond45 [ 835.972082][T31752] netlink: 'syz.2.5873': attribute type 1 has an invalid length. [ 835.972105][T31752] nbd: illegal input index 393236 [ 836.033049][T31756] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 836.036997][T31752] IPVS: stopping backup sync thread 31756 ... [ 836.443622][T31754] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 836.448646][T31754] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5871'. [ 838.552209][T31816] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 838.816291][T31827] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 838.964322][T31824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5883'. [ 838.966638][T31824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5883'. [ 839.394176][T31856] netlink: 'syz.4.5886': attribute type 1 has an invalid length. [ 839.394202][T31856] nbd: illegal input index 393236 [ 839.405097][T31857] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 839.407407][T31856] IPVS: stopping backup sync thread 31857 ... [ 841.355700][T31917] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5893'. [ 841.619499][ T30] audit: type=1804 audit(1793991236.964:238): pid=31928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5898" name="/newroot/1195/cgroup.controllers" dev="tmpfs" ino=6279 res=1 errno=0 [ 841.619546][ T30] audit: type=1800 audit(1793991236.964:239): pid=31928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5898" name="cgroup.controllers" dev="tmpfs" ino=6279 res=0 errno=-22 [ 841.672816][T31930] netlink: 'syz.2.5897': attribute type 11 has an invalid length. [ 841.689520][T31928] bond0: left promiscuous mode [ 841.689544][T31928] bond0: left allmulticast mode [ 841.712580][T31928] netlink: 'syz.4.5898': attribute type 10 has an invalid length. [ 841.712939][T31928] netlink: 'syz.4.5898': attribute type 10 has an invalid length. [ 841.973939][T31930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5897'. [ 842.094230][T31950] ip_tables: iptables: counters copy to user failed while replacing table [ 842.243489][T31955] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5902'. [ 842.243528][T31955] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5902'. [ 842.273057][T31955] ip_tables: iptables: counters copy to user failed while replacing table [ 842.584202][T31960] bond0: entered promiscuous mode [ 842.584650][T31960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.282929][T31987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5907'. [ 844.412403][T32022] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5910'. [ 844.939268][T32041] block nbd0: reconnected socket [ 844.982917][T32041] netlink: 'syz.0.5914': attribute type 9 has an invalid length. [ 845.158446][ T4952] block nbd0: Receive control failed (result -32) [ 847.065981][T32105] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5924'. [ 847.386177][T32114] tipc: Enabling of bearer rejected, already enabled [ 848.339441][T32145] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5934'. [ 848.339472][T32145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5934'. [ 849.528715][T32170] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5938'. [ 849.546192][T32170] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5938'. [ 850.364937][T32199] tipc: Enabling of bearer rejected, already enabled [ 850.415733][T32201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5944'. [ 850.786751][T32221] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5947'. [ 851.036829][T32213] syzkaller1: entered promiscuous mode [ 851.036852][T32213] syzkaller1: entered allmulticast mode [ 852.217864][T32253] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 852.465580][T32266] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 852.632119][T32277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5960'. [ 852.632151][T32277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5960'. [ 852.632165][T32277] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5960'. [ 852.700119][T32287] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 852.728963][T32288] netlink: 'syz.4.5959': attribute type 10 has an invalid length. [ 852.728995][T32288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5959'. [ 852.776725][T32283] tipc: Enabling of bearer rejected, already enabled [ 854.762474][T32341] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5971'. [ 854.762509][T32341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5971'. [ 854.762522][T32341] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5971'. [ 855.021774][T32346] tc_dump_action: action bad kind [ 855.074875][T32357] netlink: 'syz.1.5975': attribute type 10 has an invalid length. [ 855.375129][T32371] tipc: Enabling of bearer rejected, already enabled [ 855.802792][T32398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5986'. [ 856.008894][T32407] ip_tables: iptables: counters copy to user failed while replacing table [ 856.158994][T32417] netlink: 'syz.0.5992': attribute type 11 has an invalid length. [ 856.203697][T32419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5993'. [ 856.435934][T32430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5992'. [ 856.503199][T32437] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 857.045452][T32438] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 857.085128][T32455] sock: sock_timestamping_bind_phc: sock not bind to device [ 857.485737][T32471] tipc: Enabling of bearer rejected, already enabled [ 857.680113][T32485] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6008'. [ 857.714908][T32485] batman_adv: batadv0: Interface deactivated: veth0 [ 857.714930][T32485] batman_adv: batadv0: Removing interface: veth0 [ 857.729591][T32485] bridge0: port 1(veth0) entered blocking state [ 857.729701][T32485] bridge0: port 1(veth0) entered disabled state [ 857.729839][T32485] veth0: entered allmulticast mode [ 857.744246][T32485] veth0: entered promiscuous mode [ 857.748949][T32485] bridge0: port 1(veth0) entered blocking state [ 857.749063][T32485] bridge0: port 1(veth0) entered forwarding state [ 857.796072][T32489] netlink: 'syz.1.6009': attribute type 1 has an invalid length. [ 857.816922][T32490] netlink: 'syz.4.6010': attribute type 1 has an invalid length. [ 857.887195][T32490] bond33: entered promiscuous mode [ 857.887793][T32490] 8021q: adding VLAN 0 to HW filter on device bond33 [ 857.943808][T32502] netlink: 'syz.2.6012': attribute type 11 has an invalid length. [ 858.086400][T32485] bridge0: port 1(veth0) entered disabled state [ 858.260171][T32505] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6012'. [ 858.626345][T32485] tipc: Resetting bearer [ 858.696674][T32485] tipc: Resetting bearer [ 858.904400][T32490] ipvlan4: entered allmulticast mode [ 858.904423][T32490] bond33: entered allmulticast mode [ 858.933438][T32497] bond33: (slave bridge46): making interface the new active one [ 858.933463][T32497] bridge46: entered promiscuous mode [ 858.933631][T32497] bridge46: entered allmulticast mode [ 858.935134][T32497] bond33: (slave bridge46): Enslaving as an active interface with an up link [ 859.000895][ T8627] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.000930][ T8627] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.000965][ T8627] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.000985][ T8627] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.006109][ T8627] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.006141][ T8627] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.007577][ T8460] syz0: Port: 1 Link DOWN [ 859.021929][ T8627] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 859.021961][ T8627] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.198197][T32535] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 859.584584][ T30] audit: type=1804 audit(1793991254.934:240): pid=32555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6022" name="/newroot/1277/cgroup.controllers" dev="tmpfs" ino=6686 res=1 errno=0 [ 859.584638][ T30] audit: type=1800 audit(1793991254.934:241): pid=32555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6022" name="cgroup.controllers" dev="tmpfs" ino=6686 res=0 errno=-22 [ 859.666328][T32555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6022'. [ 859.730787][T32566] tipc: Enabling of bearer rejected, already enabled [ 859.875267][T32573] netlink: 'syz.3.6026': attribute type 1 has an invalid length. [ 859.949560][T32573] bond32: entered promiscuous mode [ 859.960104][T32573] 8021q: adding VLAN 0 to HW filter on device bond32 [ 859.995254][T32573] ipvlan14: entered allmulticast mode [ 859.995275][T32573] bond32: entered allmulticast mode [ 860.025638][T32582] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6028'. [ 860.042007][T32573] bond32: (slave bridge39): making interface the new active one [ 860.042031][T32573] bridge39: entered promiscuous mode [ 860.042208][T32573] bridge39: entered allmulticast mode [ 860.043663][T32573] bond32: (slave bridge39): Enslaving as an active interface with an up link [ 860.785183][T32608] [ 860.787565][T32608] ====================================================== [ 860.794609][T32608] WARNING: possible circular locking dependency detected [ 860.801746][T32608] syzkaller #0 Not tainted [ 860.806163][T32608] ------------------------------------------------------ [ 860.813180][T32608] syz.4.6036/32608 is trying to acquire lock: [ 860.819246][T32608] ffff88802acb7218 (set->srcu){.+.+}-{0:0}, at: __synchronize_srcu+0xb6/0x2f0 [ 860.828290][T32608] [ 860.828290][T32608] but task is already holding lock: [ 860.835651][T32608] ffff888027635958 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 860.845188][T32608] [ 860.845188][T32608] which lock already depends on the new lock. [ 860.845188][T32608] [ 860.855581][T32608] [ 860.855581][T32608] the existing dependency chain (in reverse order) is: [ 860.864591][T32608] [ 860.864591][T32608] -> #6 (&q->elevator_lock){+.+.}-{4:4}: [ 860.872512][T32608] __mutex_lock+0x197/0x15a0 [ 860.877721][T32608] elevator_change+0x1af/0x480 [ 860.883005][T32608] elevator_set_none+0xb5/0x140 [ 860.888376][T32608] blk_mq_update_nr_hw_queues+0x60b/0x1b70 [ 860.894782][T32608] nbd_start_device+0x189/0xb30 [ 860.900245][T32608] nbd_genl_connect+0x167d/0x1cd0 [ 860.905785][T32608] genl_family_rcv_msg_doit+0x233/0x340 [ 860.911977][T32608] genl_rcv_msg+0x614/0x7a0 [ 860.917005][T32608] netlink_rcv_skb+0x226/0x4a0 [ 860.922285][T32608] genl_rcv+0x28/0x40 [ 860.926777][T32608] netlink_unicast+0x8ef/0xa80 [ 860.932056][T32608] netlink_sendmsg+0x7f0/0xb20 [ 860.937424][T32608] sock_sendmsg_nosec+0x14e/0x190 [ 860.943111][T32608] ____sys_sendmsg+0x54e/0x850 [ 860.948395][T32608] ___sys_sendmsg+0x2a5/0x360 [ 860.953589][T32608] __x64_sys_sendmsg+0x1b1/0x290 [ 860.959044][T32608] do_syscall_64+0x166/0x520 [ 860.964230][T32608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.970667][T32608] [ 860.970667][T32608] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 860.979326][T32608] blk_alloc_queue+0x544/0x690 [ 860.984662][T32608] __blk_mq_alloc_disk+0x194/0x390 [ 860.990286][T32608] nbd_dev_add+0x494/0xb60 [ 860.995295][T32608] nbd_init+0x168/0x1f0 [ 861.000059][T32608] do_one_initcall+0x250/0x870 [ 861.005355][T32608] do_initcall_level+0x10a/0x1a0 [ 861.010890][T32608] do_initcalls+0x59/0xa0 [ 861.015742][T32608] kernel_init_freeable+0x29d/0x3e0 [ 861.021450][T32608] kernel_init+0x22/0x1d0 [ 861.026298][T32608] ret_from_fork+0x514/0xb70 [ 861.031437][T32608] ret_from_fork_asm+0x1a/0x30 [ 861.036725][T32608] [ 861.036725][T32608] -> #4 (fs_reclaim){+.+.}-{0:0}: [ 861.043928][T32608] fs_reclaim_acquire+0x71/0x100 [ 861.049496][T32608] __kmalloc_cache_node_noprof+0x66/0x620 [ 861.055786][T32608] create_worker+0x112/0x7c0 [ 861.060924][T32608] workqueue_prepare_cpu+0xe4/0x170 [ 861.066660][T32608] cpuhp_invoke_callback+0x434/0x810 [ 861.072501][T32608] _cpu_up+0x2ce/0x5b0 [ 861.077090][T32608] cpu_up+0x1d2/0x220 [ 861.081620][T32608] cpuhp_bringup_mask+0xb2/0x1a0 [ 861.087166][T32608] cpuhp_bringup_cpus_parallel+0x109/0x120 [ 861.093491][T32608] bringup_nonboot_cpus+0x17/0x30 [ 861.099035][T32608] smp_init+0x32/0x110 [ 861.103697][T32608] kernel_init_freeable+0x27f/0x3e0 [ 861.109408][T32608] kernel_init+0x22/0x1d0 [ 861.114251][T32608] ret_from_fork+0x514/0xb70 [ 861.119368][T32608] ret_from_fork_asm+0x1a/0x30 [ 861.124655][T32608] [ 861.124655][T32608] -> #3 (cpu_hotplug_lock){++++}-{0:0}: [ 861.132376][T32608] cpus_read_lock+0x3d/0x160 [ 861.137489][T32608] static_key_slow_inc+0x12/0x30 [ 861.142981][T32608] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 861.149220][T32608] nbd_genl_foreach_sock+0x265/0x450 [ 861.155040][T32608] nbd_genl_reconfigure+0xbbb/0x1040 [ 861.160859][T32608] genl_family_rcv_msg_doit+0x233/0x340 [ 861.166915][T32608] genl_rcv_msg+0x614/0x7a0 [ 861.171930][T32608] netlink_rcv_skb+0x226/0x4a0 [ 861.177207][T32608] genl_rcv+0x28/0x40 [ 861.181727][T32608] netlink_unicast+0x8ef/0xa80 [ 861.187032][T32608] netlink_sendmsg+0x7f0/0xb20 [ 861.192301][T32608] sock_sendmsg_nosec+0x14e/0x190 [ 861.197841][T32608] ____sys_sendmsg+0x54e/0x850 [ 861.203111][T32608] ___sys_sendmsg+0x2a5/0x360 [ 861.208294][T32608] __x64_sys_sendmsg+0x1b1/0x290 [ 861.213746][T32608] do_syscall_64+0x166/0x520 [ 861.218849][T32608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.225245][T32608] [ 861.225245][T32608] -> #2 (&nsock->tx_lock){+.+.}-{4:4}: [ 861.232877][T32608] __mutex_lock+0x197/0x15a0 [ 861.237981][T32608] nbd_queue_rq+0x373/0xff0 [ 861.242992][T32608] blk_mq_dispatch_rq_list+0x499/0x1990 [ 861.249125][T32608] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 861.256001][T32608] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 861.262488][T32608] blk_mq_run_work_fn+0x167/0x2f0 [ 861.268024][T32608] process_scheduled_works+0xc3d/0x1630 [ 861.274082][T32608] worker_thread+0xa47/0xfb0 [ 861.279186][T32608] kthread+0x38b/0x480 [ 861.283783][T32608] ret_from_fork+0x514/0xb70 [ 861.288884][T32608] ret_from_fork_asm+0x1a/0x30 [ 861.294154][T32608] [ 861.294154][T32608] -> #1 (&cmd->lock){+.+.}-{4:4}: [ 861.301349][T32608] __mutex_lock+0x197/0x15a0 [ 861.306449][T32608] nbd_queue_rq+0xc1/0xff0 [ 861.311372][T32608] blk_mq_dispatch_rq_list+0x499/0x1990 [ 861.317430][T32608] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 861.324265][T32608] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 861.330764][T32608] blk_mq_run_work_fn+0x167/0x2f0 [ 861.336298][T32608] process_scheduled_works+0xc3d/0x1630 [ 861.342366][T32608] worker_thread+0xa47/0xfb0 [ 861.347469][T32608] kthread+0x38b/0x480 [ 861.352046][T32608] ret_from_fork+0x514/0xb70 [ 861.357145][T32608] ret_from_fork_asm+0x1a/0x30 [ 861.362415][T32608] [ 861.362415][T32608] -> #0 (set->srcu){.+.+}-{0:0}: [ 861.369522][T32608] __lock_acquire+0x164c/0x2de0 [ 861.374907][T32608] lock_sync+0xb3/0x130 [ 861.379591][T32608] __synchronize_srcu+0xca/0x2f0 [ 861.385044][T32608] elevator_switch+0x1e8/0x7b0 [ 861.390321][T32608] elevator_change+0x2fa/0x480 [ 861.395595][T32608] elevator_set_default+0x375/0x440 [ 861.401312][T32608] blk_register_queue+0x404/0x4f0 [ 861.406847][T32608] __add_disk+0x6b8/0xdb0 [ 861.411681][T32608] add_disk_fwnode+0x100/0x3a0 [ 861.416954][T32608] nbd_dev_add+0x733/0xb60 [ 861.421876][T32608] nbd_genl_connect+0x96c/0x1cd0 [ 861.427319][T32608] genl_family_rcv_msg_doit+0x233/0x340 [ 861.433373][T32608] genl_rcv_msg+0x614/0x7a0 [ 861.438380][T32608] netlink_rcv_skb+0x226/0x4a0 [ 861.443653][T32608] genl_rcv+0x28/0x40 [ 861.448141][T32608] netlink_unicast+0x8ef/0xa80 [ 861.453411][T32608] netlink_sendmsg+0x7f0/0xb20 [ 861.458679][T32608] sock_sendmsg_nosec+0x14e/0x190 [ 861.464213][T32608] ____sys_sendmsg+0x54e/0x850 [ 861.469484][T32608] ___sys_sendmsg+0x2a5/0x360 [ 861.474669][T32608] __x64_sys_sendmsg+0x1b1/0x290 [ 861.480113][T32608] do_syscall_64+0x166/0x520 [ 861.485211][T32608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.491611][T32608] [ 861.491611][T32608] other info that might help us debug this: [ 861.491611][T32608] [ 861.501823][T32608] Chain exists of: [ 861.501823][T32608] set->srcu --> &q->q_usage_counter(io)#49 --> &q->elevator_lock [ 861.501823][T32608] [ 861.515567][T32608] Possible unsafe locking scenario: [ 861.515567][T32608] [ 861.523068][T32608] CPU0 CPU1 [ 861.528420][T32608] ---- ---- [ 861.533815][T32608] lock(&q->elevator_lock); [ 861.538392][T32608] lock(&q->q_usage_counter(io)#49); [ 861.546272][T32608] lock(&q->elevator_lock); [ 861.553374][T32608] sync(set->srcu); [ 861.557256][T32608] [ 861.557256][T32608] *** DEADLOCK *** [ 861.557256][T32608] [ 861.565385][T32608] locks held by syz.4.6036/32608: 6, last CPU#0: [ 861.571812][T32608] #0: ffffffff916f7b28 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 861.579985][T32608] #1: ffffffff916f7960 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 861.588933][T32608] #2: ffff888079a5a1c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xea/0x3a0 [ 861.599274][T32608] #3: ffff8880276359e0 (&q->sysfs_lock){+.+.}-{4:4}, at: blk_register_queue+0x10d/0x4f0 [ 861.609098][T32608] #4: ffff888027635468 (&q->q_usage_counter(queue)#58){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 861.619970][T32608] #5: ffff888027635958 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 861.629799][T32608] [ 861.629799][T32608] stack backtrace: [ 861.635690][T32608] CPU: 0 UID: 0 PID: 32608 Comm: syz.4.6036 Not tainted syzkaller #0 PREEMPT(full) [ 861.645043][T32608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 861.655099][T32608] Call Trace: [ 861.658433][T32608] [ 861.661355][T32608] dump_stack_lvl+0xe8/0x150 [ 861.666008][T32608] print_circular_bug+0x2e2/0x300 [ 861.671029][T32608] check_noncircular+0x12f/0x150 [ 861.675961][T32608] __lock_acquire+0x164c/0x2de0 [ 861.680804][T32608] ? lockdep_unlock+0x5c/0xd0 [ 861.685518][T32608] ? __lock_acquire+0x1511/0x2de0 [ 861.690529][T32608] lock_sync+0xb3/0x130 [ 861.694671][T32608] ? __synchronize_srcu+0xb6/0x2f0 [ 861.699773][T32608] ? __synchronize_srcu+0xb6/0x2f0 [ 861.704875][T32608] __synchronize_srcu+0xca/0x2f0 [ 861.709802][T32608] ? __pfx___synchronize_srcu+0x10/0x10 [ 861.715331][T32608] ? do_raw_spin_lock+0x12b/0x2f0 [ 861.720349][T32608] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 861.726216][T32608] ? ktime_get_mono_fast_ns+0x2d2/0x2f0 [ 861.731751][T32608] ? synchronize_srcu+0x20c/0x270 [ 861.736768][T32608] elevator_switch+0x1e8/0x7b0 [ 861.741525][T32608] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 861.746972][T32608] elevator_change+0x2fa/0x480 [ 861.751727][T32608] ? do_raw_spin_unlock+0xf5/0x200 [ 861.756826][T32608] elevator_set_default+0x375/0x440 [ 861.762018][T32608] ? __pfx_elevator_set_default+0x10/0x10 [ 861.767736][T32608] ? disk_register_independent_access_ranges+0x2d8/0x380 [ 861.774817][T32608] ? blk_crypto_sysfs_register+0x11c/0x170 [ 861.780694][T32608] blk_register_queue+0x404/0x4f0 [ 861.785709][T32608] __add_disk+0x6b8/0xdb0 [ 861.790031][T32608] add_disk_fwnode+0x100/0x3a0 [ 861.794785][T32608] nbd_dev_add+0x733/0xb60 [ 861.799189][T32608] ? __pfx_nbd_dev_add+0x10/0x10 [ 861.804120][T32608] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 861.809913][T32608] ? bpf_lsm_capable+0x9/0x20 [ 861.814580][T32608] ? security_capable+0x7e/0x2c0 [ 861.819582][T32608] ? radix_tree_lookup+0x240/0x290 [ 861.824723][T32608] nbd_genl_connect+0x96c/0x1cd0 [ 861.829651][T32608] ? __pfx_nbd_genl_connect+0x10/0x10 [ 861.835016][T32608] ? rcu_is_watching+0x16/0xb0 [ 861.839786][T32608] ? trace_kmalloc+0x2a/0xf0 [ 861.844376][T32608] ? __kmalloc_noprof+0x387/0x710 [ 861.849422][T32608] ? __nla_parse+0x40/0x60 [ 861.853933][T32608] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 861.860260][T32608] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 861.866602][T32608] genl_family_rcv_msg_doit+0x233/0x340 [ 861.872147][T32608] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 861.878216][T32608] ? __lock_acquire+0x747/0x2de0 [ 861.883162][T32608] genl_rcv_msg+0x614/0x7a0 [ 861.887663][T32608] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.892681][T32608] ? __pfx_nbd_genl_connect+0x10/0x10 [ 861.898138][T32608] netlink_rcv_skb+0x226/0x4a0 [ 861.902947][T32608] ? __pfx_genl_rcv_msg+0x10/0x10 [ 861.907975][T32608] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 861.913260][T32608] ? down_read+0x2b9/0x320 [ 861.917671][T32608] genl_rcv+0x28/0x40 [ 861.921644][T32608] netlink_unicast+0x8ef/0xa80 [ 861.926405][T32608] netlink_sendmsg+0x7f0/0xb20 [ 861.931156][T32608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.936432][T32608] ? aa_sock_msg_perm+0x144/0x210 [ 861.941531][T32608] ? apparmor_socket_sendmsg+0x98/0x360 [ 861.947105][T32608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 861.952376][T32608] sock_sendmsg_nosec+0x14e/0x190 [ 861.957396][T32608] ____sys_sendmsg+0x54e/0x850 [ 861.962148][T32608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 861.967425][T32608] ? import_iovec+0x73/0xa0 [ 861.972019][T32608] ___sys_sendmsg+0x2a5/0x360 [ 861.976685][T32608] ? __lock_acquire+0x747/0x2de0 [ 861.981646][T32608] ? __pfx____sys_sendmsg+0x10/0x10 [ 861.986837][T32608] ? futex_wait+0x2a2/0x390 [ 861.991374][T32608] ? __fget_files+0x3a2/0x420 [ 861.996105][T32608] ? __fget_files+0x2a/0x420 [ 862.000689][T32608] __x64_sys_sendmsg+0x1b1/0x290 [ 862.005618][T32608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 862.011083][T32608] do_syscall_64+0x166/0x520 [ 862.015665][T32608] ? trace_irq_disable+0x3b/0x140 [ 862.020680][T32608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.026732][T32608] ? clear_bhb_loop+0x70/0xc0 [ 862.031398][T32608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.037289][T32608] RIP: 0033:0x7ff0fa39fb19 [ 862.041694][T32608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.061293][T32608] RSP: 002b:00007ff0fb196028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 862.069704][T32608] RAX: ffffffffffffffda RBX: 00007ff0fa625fa0 RCX: 00007ff0fa39fb19 [ 862.077671][T32608] RDX: 0000000000004040 RSI: 00002000000001c0 RDI: 0000000000000009 [ 862.085632][T32608] RBP: 00007ff0fa437b70 R08: 0000000000000000 R09: 0000000000000000 [ 862.093588][T32608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 862.101561][T32608] R13: 00007ff0fa626038 R14: 00007ff0fa625fa0 R15: 00007ffd9909db58 [ 862.109531][T32608]