last executing test programs: 6.775145974s ago: executing program 2 (id=6399): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0xffff}, {0xfff1, 0xffff}, {0x8, 0xfff2}}}, 0x17}, 0x1, 0x0, 0x0, 0x10000}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x40090) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f00000003c0)="ab29d92826349952eb8f7a2a74f53504000000df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188902c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f8753816730559058dcec151c64a358f9f940f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb", 0x161}, {&(0x7f0000000540)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff", 0x43}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x8, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x4, 0x3, 0x6, 0xfffffffffffffff4, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000700)='syzkaller\x00', 0x2, 0x85, &(0x7f0000000740)=""/133, 0x1e00, 0x30, '\x00', 0x0, @cgroup_sock_addr=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000880)=[{0x4, 0x3, 0x1, 0x8}, {0x0, 0x4, 0x3, 0x4}, {0x4, 0x3, 0xa, 0x4}, {0x5, 0x3, 0x8, 0x1}, {0x4, 0x1, 0x0, 0x2}], 0x10, 0x7}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r6, 0x0, 0x49, 0x8, &(0x7f0000000b00), &(0x7f0000000b40)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) splice(r5, &(0x7f0000000b80)=0x7, r6, &(0x7f0000000bc0)=0x1, 0xffff, 0x9) recvmmsg(r4, &(0x7f0000000c00)=[{{&(0x7f0000000c40)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000cc0)=[{&(0x7f0000000d40)=""/102, 0x365}, {&(0x7f0000000dc0)=""/76, 0x14c}, {&(0x7f0000000e40)=""/4096, 0x197}, {&(0x7f0000001e40)=""/92, 0x645}, {&(0x7f0000001ec0)=""/73, 0x1b}, {&(0x7f0000001f40)=""/77, 0x188}, {&(0x7f0000001fc0)=""/154, 0x2c}, {&(0x7f0000002080)=""/17, 0x1d8}], 0x21, &(0x7f00000020c0)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000002180)={0x77359400}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000021c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000002200)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000022c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r8, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000002300)={0x17, {{0x29, 0x0, 0x43000000, @private1, 0x6}}, {{0xa, 0x0, 0x4, @remote}}}, 0x108) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002440), r9) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000fddbdf25020000000800010003000000def555df4afe41eb0d11bf031618c6b75c1a66151bafdfb105eca225506242a3f0740257d4a5dcb39e0dc9a24f670776cf26f4"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 4.637539674s ago: executing program 2 (id=6410): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) socket$unix(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000ffdbfb251100000005"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x7ff}, 0x0, 0x0, 0x2}}, 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x24000000) socket$nl_xfrm(0x10, 0x3, 0x6) bind$unix(r4, &(0x7f00000008c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r7 = socket$unix(0x1, 0x2, 0x0) connect$unix(r7, &(0x7f0000000940)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r7, &(0x7f00000009c0), 0x307017fdb7a66cb, 0x3ec0) bind$unix(r7, &(0x7f0000000a00)=@file={0x1, './file0\x00'}, 0x6e) pselect6(0x40, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x306737e2, 0x6}, 0x0, &(0x7f0000000ac0)={0x1f, 0x2}, 0x0, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b40), r8) sendmsg$NLBL_MGMT_C_ADDDEF(r8, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a00000a0201060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 3.820023586s ago: executing program 3 (id=6414): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x100004}}, &(0x7f0000000580)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c00)='memory.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c40)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES64=r0], 0x20) 3.714843208s ago: executing program 4 (id=6415): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4048c01}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x9, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x24040075) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.70458288s ago: executing program 1 (id=6416): r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000540)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x4f1}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008d4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x48088) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000680)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa09000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e210000000800000000000000000000000000000001"], 0x610) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f00000008c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) 3.510022025s ago: executing program 3 (id=6417): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) ioctl$NILFS_IOCTL_GET_BDESCS(0xffffffffffffffff, 0xc0186e87, &(0x7f00000001c0)={&(0x7f0000000080), 0x0, 0x28, 0x4, 0xffffffffffffff00}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000300)={0x802}, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg1\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x88) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x0) poll(0x0, 0x0, 0x80000000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd28, 0x35dfdbfc, {0xa, 0x80, 0x80, 0x0, 0x8, 0x0, 0x0, 0x7, 0x17}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x140000d0}, 0x20048810) sendmsg$nl_route(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) close(0x3) 3.47091767s ago: executing program 0 (id=6418): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000140)=0x1, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f00000001c0)=[{{&(0x7f0000000200)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000240)}}], 0x1, 0x20008000) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000780)=""/222}, 0x94) 3.470388068s ago: executing program 2 (id=6419): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) r3 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000500)={0x40000000, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000005c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r4, &(0x7f0000000600)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000640)={{{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xfffc, 0xffff, 0x0, 0x2}, {0x0, 0x28c, 0x30, 0x0, 0x1, 0x3, 0x0, 0xc}, {0x7, 0x0, 0x1}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x4d3, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x7fffffe, 0x3}}, 0xe8) sendmmsg(r4, &(0x7f0000000740), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r6, &(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x2}}, 0x10) bind$tipc(r6, &(0x7f0000000400)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r6, &(0x7f0000000440)=@name={0x1e, 0x2, 0x2, {{0x42, 0x4}, 0x1}}, 0x10) bind$tipc(r6, 0x0, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f00000004c0)={'sit0\x00', 0x600}) close(r0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000480)={0x7, 'pimreg0\x00', {0x73}, 0x3c7}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'syztnl1\x00', r5, 0x4, 0x6, 0x8, 0xcf, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @private2, 0x8000, 0x40, 0x4, 0xfffffffe}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 3.412786986s ago: executing program 4 (id=6420): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x40, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @empty, @loopback={0x57}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57}, {}, {0x8, 0x88be, 0x1ff}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x6}}}}}}}}}, 0x0) 3.292085278s ago: executing program 1 (id=6421): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xb000)=nil, 0xb000, 0x2, 0x12, r1, 0x852ac000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000200000000000000000000054c000000000000000100000d"], &(0x7f0000000e40)=""/4089, 0x3a, 0xff9, 0xa, 0x32e}, 0x28) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000050000000004000009000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r5, 0x0, 0xfc) sendmsg$inet(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1}, 0x4000080) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x6, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000880)='GPL\x00'}, 0x94) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000008c0)={r7}, 0x8) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000900)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000980)={r8, r7, 0x0, r8}, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000004000000000000000010060851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000ffb0180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000a80)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000ac0)=""/222}, 0x78) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x1}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@setlink={0x20, 0x13, 0x5}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x401, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x0, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x86dd}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x20}}, 0x0) 2.812697027s ago: executing program 4 (id=6422): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000000)={0x40, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x96}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0xffffffff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, 0x0, 0x0}, 0x20) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x6, 0x2, 0x4, 0x7fffffffffffffff, 0x1}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x3}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r14, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf118a815524c8bb}, @TCA_TBF_PARMS={0x28, 0x1, {{0xed, 0x2, 0xe1, 0x400, 0xac, 0x8}, {0x36, 0x2, 0x4, 0x2, 0x3, 0x5}, 0x6, 0x9, 0x1e69}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.739718083s ago: executing program 0 (id=6423): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipmr_delroute={0x13, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {0x80, 0x20, 0x90, 0x0, 0x0, 0x4, 0x0, 0x5, 0x5100}, [@RTA_DST={0x8, 0x1, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000004) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x40000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x2000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x20, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f0000000880)="b800000500000000", &(0x7f00000008c0)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1, 0xd3f5, 0x7, 0x400, 0xffffffffffffffff, 0x7c0, '\x00', r7, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0xd}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r8, &(0x7f00000003c0), 0x0}, 0x20) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004055}, 0x24000840) sendmsg$netlink(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd62f}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3f, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.530124541s ago: executing program 3 (id=6424): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000013c0)=@newtfilter={0x30, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x0) 2.409085407s ago: executing program 1 (id=6425): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r1 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r0, r0, 0x2f, 0x0, @void}, 0x10) close(0x3) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) unshare(0x22020600) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r1, r0, 0x4, r0}, 0x10) 2.270830102s ago: executing program 0 (id=6426): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x18, r2, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="010000000000000020", 0x9) 2.172086262s ago: executing program 1 (id=6427): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0xffff}, {0xfff1, 0xffff}, {0x8, 0xfff2}}}, 0x17}, 0x1, 0x0, 0x0, 0x10000}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r1) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r2, 0x3141e0b2751b0f9b, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6051}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x40090) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f00000003c0)="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", 0x161}, {&(0x7f0000000540)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff", 0x43}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x20004080) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x8, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x4, 0x3, 0x6, 0xfffffffffffffff4, 0xfffffffffffffff0}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000700)='syzkaller\x00', 0x2, 0x85, &(0x7f0000000740)=""/133, 0x1e00, 0x30, '\x00', 0x0, @cgroup_sock_addr=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x5, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, r0, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000880)=[{0x4, 0x3, 0x1, 0x8}, {0x0, 0x4, 0x3, 0x4}, {0x4, 0x3, 0xa, 0x4}, {0x5, 0x3, 0x8, 0x1}, {0x4, 0x1, 0x0, 0x2}], 0x10, 0x7}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000a40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r6, 0x0, 0x49, 0x8, &(0x7f0000000b00), &(0x7f0000000b40)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) splice(r5, &(0x7f0000000b80)=0x7, r6, &(0x7f0000000bc0)=0x1, 0xffff, 0x9) recvmmsg(r4, &(0x7f0000000c00)=[{{&(0x7f0000000c40)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000cc0)=[{&(0x7f0000000d40)=""/102, 0x365}, {&(0x7f0000000dc0)=""/76, 0x14c}, {&(0x7f0000000e40)=""/4096, 0x197}, {&(0x7f0000001e40)=""/92, 0x645}, {&(0x7f0000001ec0)=""/73, 0x1b}, {&(0x7f0000001f40)=""/77, 0x188}, {&(0x7f0000001fc0)=""/154, 0x2c}, {&(0x7f0000002080)=""/17, 0x1d8}], 0x21, &(0x7f00000020c0)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000002180)={0x77359400}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000021c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000002200)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000022c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r8, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000002300)={0x17, {{0x29, 0x0, 0x43000000, @private1, 0x6}}, {{0xa, 0x0, 0x4, @remote}}}, 0x108) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002440), r9) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000002480)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000002780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="01002cbd7000fddbdf25020000000800010003000000def555df4afe41eb0d11bf031618c6b75c1a66151bafdfb105eca225506242a3f0740257d4a5dcb39e0dc9a24f670776cf26f4"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 2.114705051s ago: executing program 4 (id=6428): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001780)={0x3, 0x5, &(0x7f0000002180)=ANY=[@ANYBLOB="1802000080800000000000000000e08f8500000027000000850000002a00000095"], &(0x7f00000021c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002200)={r1, 0x0, 0xd, 0x0, &(0x7f0000002280)="0000000000a3a8446d158935e0", 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002300), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f00000023c0)={&(0x7f0000002400)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7200000000003900000008000300", @ANYRES32=r5, @ANYBLOB="5c005a80140001800500070001000000050006000100000044000380120001000c"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000002440)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002500)={0x170, r2, 0x3, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x0, 0x2b}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x13}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xc105}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x4, 0x8001, 0x1, 0x1, 0x8]}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xf9}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x11}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5c}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0xffffff3a, 0x8, 0x0, 0x4]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x6}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xf]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2e0}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xa}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9}]}, @NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0xffff}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x15f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffbdb}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x651}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1e}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x9]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x8, 0x81]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x5d9}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8001}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x1, 0xed07, 0x4]}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x7}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1d2}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1c}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xff}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400a1}, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000002680), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x10, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000026c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) unshare(0x22020600) r7 = syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) connect(r7, 0x0, 0x0) bind$bt_hci(r6, &(0x7f0000002700)={0x1f, 0xffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000002740)=ANY=[@ANYBLOB="4a00ffff11003ee0b4fdddd685986a49e00588f1ba6f01"], 0x17) nanosleep(0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r8, 0x0, 0x33, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r9, 0x0, 0x33, 0x0, 0x0) sendto$inet(r9, 0x0, 0x0, 0x20040940, 0x0, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.062550836s ago: executing program 3 (id=6429): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000380)={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x14}, 0x4}, 0xe8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="48000000100005040100000000000000000000000000000000000000000000000c0003006272696467653000200012800b00010062726964676500000d00028005000700"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000700)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="60000000100005040100000000000000000000000000000000000000000000000a0003007665746830000000340012800900010076657468000000002400028020000100000000000000000000000000000000000a0003007665746831000000"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000840)={'veth0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r5, @ANYBLOB="1400018008000100000001000500030003000000"], 0x2c}}, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000003c0)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000000400)='X', 0x34000, 0xe0, &(0x7f0000000440)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x84) close(0x3) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000040000000030a010400000000000000000200000a0900010073797a30000000000900030073797a3000000000140004800800014000000004080002400000000038000000060a010400000000000000000200000a0900010073797a30000000000900020073797a30000000120c000640"], 0xc0}}, 0x0) r7 = openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r7, 0x0, 0x32600) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x65, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313f, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0xffff0001}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r9, 0x84, 0x6e, &(0x7f0000000240)=[@in6={0xa, 0x4e23, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e23, @multicast1}], 0x2c) close(r8) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) write$cgroup_devices(r7, &(0x7f0000000a40)={'c', ' *:* ', 'rwm\x00'}, 0xa) 1.930371963s ago: executing program 0 (id=6430): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000800000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006500)={0x0, 0x0, &(0x7f0000006540)={&(0x7f0000006580)=@newtaction={0x90, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x7c, 0x1, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x300, 0x0, 0x1}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x90}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_emit_ethernet(0x36, &(0x7f0000000140)={@multicast, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @remote, @broadcast}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001}}}}}, 0x0) 1.661286602s ago: executing program 0 (id=6431): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000003b80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000003bc0)=0x4, 0x4) connect$inet(r1, &(0x7f0000003c80)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) 1.310605025s ago: executing program 2 (id=6432): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x11, 0x0, @rand_addr=0x64010101, @broadcast}, "3297e3ba0fa8a2e71bd9fe1a399b5110420b70460c0dad392d66248a43540df968e7fcaab34569c0e36170578c0d3c546a98b26295e2592f360905866eb4720fed03a977a3df4224895629fd6ccec64f13a999f18f518e3ee28798381975e862f1db9dccdb2f1c1fb60f5ffc7a339d40a8bd1f24cede8a32f186f142e194d4fb48224759faf813ea80e6a853e79b4fe27fe3e1aec5897b314a7f0d515b07b1835986b4885e9826d902c40f16cd77c58b6433ab039955ce9db11f36f459e7114ace6c9989eecea80a81fd39f339356c7c3391af83da2486503a7973f6db4806cf3e5ca94cf7e1f79fd00decd76100c18251a59d1474caabf4d3ca6a9a9885df710e68c5b0dc11832dbb5eecb5c88c2f8f02bdbd88569ad4a740359cbca8c378118220d73bdd1e661c3a74f77aa931b11cd38119b0f084bb96e84803fca6566c33ee1e4e34ab0253fbf24f9f5974af5e1fc2a43a4ec9dd9928a8f38a128ea27c429300ae5a6bd7740471f973d8224b2b07879f4fbe7dcbed776a72ebdc713bcf1d7aa45b01c32a1003e6670d58510bd79ba2fde5cb2b82cef2cc315648f4e9d96d848ba327949b8926253cbdef6888a8982108b6ac7a1108533dd3fe125002e2e286362d1055082a9d73ec5ac3080f2a501ff27250b62c8965f371cf92b32d6422d79f66261eb08a2f8fe50049e102c69ce703d116d0834208cc957d0f1376457a90245816d7642412897fdd2f982fdfbc3af65aa0446b00c767b79aec40e460887ea02188e3a0960eea39b144859467b881978378c9fd593259e0f63148179fe2c2f6d40987b63a6e384e63027f03d8039d707522942d5dc88fd842524d006290b6a65e9cc86cc5b401a60ec4aedfb3bf4d0447bb681810a16b9684b72c2f4593ef834a0203e78cd1d9dbc978e9ae8f3ab62c07f1e41d59470decee7b0cc41ac49e4b7589ab6da65849f62ec217bb39ed161e7d337822d96badbd74d66451ea9a74bed591dc9631bf639dcf7846ee428a9fa55bfceedf3b1c23642f3b58dd0a7273664c6c49c9160a4b9cc5b72d0210e305b94e2cb09ae1d4af9d365b5093851f229c8c30aef75d45ccdbab4b86d801a9ad3b27f26ba601d531c0743717aa7aae29d37f496fec7682c5a1abd321ad61941a2d23fcac6af1d1875e308c8d8c64a5152be47b59c09d293f46b857310a99f1885f0a49d432aa0d39a3e8fc885e75e66b63215133175a19267c8d0adf7d8f644e742ed5369d1405e99e63b78727f135e0243f24d9ce354a1562102ee8de4c191508343b86bf7e7519ddd770ce55e17e590561b2f437194c97ad46622a6ae3dd68d9993e6744954f4cd308bd6594fdccedc578e80aed274a65219697229059723ac37d535cca0e9c314e7941b4160bbd2ffba71f26ffe3228431bc81463078ad70583277ef18bce23ca2e5b9a00670956ea8e0e2c739c006106c8c9ee3f92ba728d8490742b74a9a18cbedfc4e69bb87e0da4c7dfb964374c28c837d4641fb99a19b233675f8526af395335e0185cf3934805442ac379980b687a7128e53284ba9e741b5fe9bc969bfbd55cbce76842915e076e2adf844338d16d3802c681bafdcc60465bd34dfc2d1c069ceee40060e0570fc1275ccabfe3f9be3e84ceedf72cd649c082232008e2b0c94594588c00e0fe911bbf1c12eb6c37ce05674a7597feecf27f5e051ffa824d9ff93638dfa9a84c77562aa2cf897f55a97b79c18544ad03480e1011b8f93e0ead9c2c6672448f585c5803ae99be777fbc662ef4450c1e936ed8b3c8047f00e72adc84561f417f8e5e1dde4967005d96a64fc75d9f486b3ebdb5904a0a56ec48542f0efce939f66fd69259e7376ad37e84434ea90f35b2d3bd63b5c36b267d8f2c7dc5a50b46e00ed086dff8b039e07b84c60611269d4f282ad04dc8e0b481eece2f8a614734be73617f0ad5be195446b09dca4cf1f32653dd3e188aece76f3014deb2ba61744835c0f735234b6a4637c948a7b4fd4203b286ca87d669e325d70277075b094f59eb1dff6c9c05c40d5e464c563df79486e1a32e6ed9bcf675aac7968b4e98dc4e210215b0d3b6a2525b2e3df11f3f1490eb39cabffbe32e23659121fde8e4e346e0f595aaf3666a5f6f118c1a1128039502ac04c40b85eb4c54e6c95b8d1c2aac74ae9e1c355ccde9d54d5d833293f5df09224482179e5bcd8e227c99172a6e14c2cd4e6462ceb0a905a1d64804840ce62e350c6efac10a7fcb029f84af64e2256d45afd3b3f59379895740e0cd2fd24c63264f785bb6e3f40ec72ed67d1a7d87dd264743d9c951cb5aa8bc6f1d1bc9b23303d5aa7f8f6f961326757456057000cb2bacf78cc229002777e932c2640b8dfa793846ca49fa93996db95104a8808a1906b19df17e754b90582b6c49efb3ddce067dd9292291cfd2bb0323ce8098f29e4fce0de31cf5c7e2e2da5d0d0996a8be776de8fecfd3ce68e80d21f1701f6b90ac51278abbd727d19415e0ebe001b990b177b8db0c592b18a4b5e4a6221902362e5b20e6e6f2131a5a5e03c1150b179ef40c933c2fef1b79de738652ec4c32565f5cf751a11db177099c4e2e5bd7616cd0dd501d5bfccf5691de3cca590365328648baf8a9487a3c212193c9bb837594460967e823067a9465eba7001eaf609a810488ef5c147aaa5e9e8c75b585ac3582b6915e20b5aa2f79b7a94857122988c56dbce1ea52de1a56652e839bb853be3ee16052b33fb83ca54d8e4e19440a5e81492107043a66286f63ca87a1f7b8a4e9547a7eb6005419cfd28cb37e9e374f4d0143973286e87070754025c1a6fccfdc6858eaca8c35ecb19584ce7141cc79a5bc813469161b87a19fc21f3373d1f25b3427916dd1be2a589b70ea3b39fcc7801e13beaf19b76164faf3dc4ab8faa5648d24eddd6caceaa0d5ac9cad633c19a4a4d059ee823a49b7cf82c5777d376c111f58ea8fd473429907852301a2c856f27bd0c687ab5be0e2bbef64ddee1601375a4440e3f59d60f57caebfe457f82432523ec4a61cdbb7f1e91e4b05fda892df131c274b19929d26f7a5a6d3ca487983f729601ed9bb4bf5c1cc3d453d406e9534688dec6a2dd0b9db149365c125a95e129565e62cc91f7d960abe1055b730ae0994e7eb08392d5745d0e4f529c4defc3d3e43d0815b0cc63effa88d20c13b14e780c2f6c89a1ee5e4db45a5c272186cc3e51b13dab3add5f467e8ca0f4c45a1fc76db2f0cbf794102946aafcd8cd8a3e935a606b9721645c4d550ae0907f345593736506efc626498c974753d474a73626041d3a54f8fb50de2a6335611a3779da3a02daceb2256d9b102d4d30dd3cd389a04b1a7a6076879f36534bb3379debb46ed1fa2c40096c752017dd024345c58313b43070ff7bef94dc3cafbe6ec20d59e5ea3c196ba3b783bfa87384407efc664cd350c80ac397516018e35371956e414755cde304d2a228c1540ba6fd6a7402d11c666964f024da4c016eb556ba2c5fab86c60c12efb1496295d80f0383526e8e0fc55a287bbd3cb966a916f57958d8b6ef97aa0c4b47f7746bab6b99698c1c96b25c4e2e084147866fe0970b109dd26984adc0758eb6442712cc46dcd8ed3038b0595252eed1b8a46525862662d1e67eba66ac341f8d27853eed54854f488f079bd48df6ce7a4be8b1b61fd23a2dc4d3ade0992011539cc63f80fcfc75008c20cb639348cb218f8f476a6d56917f4ca07e67fc20ea2e9642eaf2182b397e279f5f6c70438fb8aa39cba788588c181461ea7efe1a0dd5b95eb26f7158b91012f7ce0ee1b4e79ce4da377bea4551738a0f491a84f19b3be9827b4469c299527aa9c20b8bf12f919976a0356bba720fb91010763c79bcbb10d89280f0f97cdd19aa0d54828b308195fac170613cf4b515e340a9ef2c97f618a9f50b30ae34ebeed9a38b4c6969680accc740b154ecb014fb5d543a59ccb98a7de2823a2dec39f331cb503eb74fef61262c6d4050bc723caee834eb28c64ce007f6027375e936b62387cf1778970e88b0574a0106d4c855be7425767c551b2fa644d9d8a59f787e7610581b768057d229673344571c3d6e3f10975b2859f568398b1f38f89524d9ad0c1588617c3883a1227b714c81cdf28da54f33968c1c50f28da01c308eb31d319b3e77f96bec001c9300000000000000009cc0062283ac112868592619db14d629c47bfb793a723dcd2f7b07ae4ec14ca3ef4b955ea5b2b153a279b080f6236d418075b86850974c8850efb306d5c304e726bf2643b4403e6d46b0e0395b02e93308b4b2c3e957308d497dc51c753344a7878f1f0c91295fd76e3d1cc9ef813161c6b92b7ea6068ceb97d8f45a4ce57af7d7632d699951f7fe3c71c3a32b014c74425c67e5030546b10cf7edcec2eca5ba31dc62c08f83f35bc2e36b93f15f071bc2537ebe9ca19f86dce4e84272e10323d0ceaa2cc47fe4f6ad101d454c761f9863e94af91199ce5f12469bca7ba39314b84aa7efa4bdc18f7700c19511d48d6132450111d70401a8ac73565d5386ca12345e884d08b23f9c901000a95eb4167865e58c28b112f47c96beeaa6657c923e25e56529107c5c30e65bb485d5ed21b91332db4e09df7e59dcfa05c994570deb3f9b838e22ae4abbf9a9a8c319cc9112c8dba7c2278f78b9578b0254c46a4c04b8fa4fedad6bd275f70b1618971ef6503379bfb0a508c9944328af2c820091a89e3f75e68e7f980ddc9154d273f7f2ce7a6294aefe93136860786679b80e41f6636ff45efeacfb52e2ba2bd9bd9c9030079a46caca5c4b340c17d01ba8ecbc5c561b2038481a8321c009d12136a3ad5461881d998eeaac5236fdcd8f81fb5e53848bb096d9198fd0d38830d1809f2a632b31e2b67754140c907ed58aead048b2d8af9a1c407e48db815212cfdcca97222dabdfe01f311a73e1e82c3e189ec5add48d3f8190eb9e14b58e540f7f1388a7c687629eadb19fd8a133dc8177629270ecaabff79efb6c1f750d89b9e6c5f34c6238066f8e3e425e46a27b3c0d2e9e2ed3cffe2a6f39b8e0137ea5de689b94107fb4748a5feb3902f0feba64dae4c2e69bc8d86463575c6b0ef4a8a64fef41121e57a8c67eda07e9fc8f98299677de198ea0a649ef3c00591940b2c27ba1414aaa1633deb52e3a44cfa8d7a00d014317c026a7d7f42a34b97128e1bf9cda4d8315819ac73ed5061bf9b5631d07b09b85b78ff1b6eb86e9e8c4faa0f991cd6fa0b0eb71b39c20ca9bc7c156f3bd255a5b408df172396bafd7f0fb11c6eaf1eb0a06576d37bee00424bf699584b1dfed68f0d8d8a35f0427c783fe2d79b4373628971e87501a5e4bb05b5058d0b2132741f26e76065b6f4017d963c8ee5605c4c5b6eebb96fca0a41893cb6add3fb0d728abeb860f22cedbd36e464bdaf124a7041460f7af3d64b54e9ffd240b5afad9baf6e5dd8406bc1b205da5848f51fc9dd5197716e144e1b0386614bd3cfd5ddb80ada1e5ca74c8960093a553b1f6288aa7f53663cdd867f658e51b95772dc7a6fa45fa03e14988a33250e6c16fbf0351769080d64ddfbdbf77e1215563bf2e82ecc38a682846d7e2e2ac4e87d715f97f15e84c3df04affee49612a735907d3c4d310a54a6f609873ad56f29a138f4d5661f6865e030487"}}, 0xfce) 1.310331842s ago: executing program 3 (id=6433): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x17, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000000000000000000000000000018080000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000c6090100000003e70400000006000000180100002020702500000000002020207b9af8ff00000000ae91faff0000000037010000f8ffffffb702000008000000b70300000000000014000000060000005c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.245261827s ago: executing program 4 (id=6434): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) ioctl$NILFS_IOCTL_GET_BDESCS(0xffffffffffffffff, 0xc0186e87, &(0x7f00000001c0)={&(0x7f0000000080), 0x0, 0x28, 0x4, 0xffffffffffffff00}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff1}, {0x0, 0xfff3}, {0x9, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041891}, 0x24000010) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000300)={0x802}, 0x10) sendmsg$nl_generic(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wg1\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x88) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x0) poll(0x0, 0x0, 0x80000000) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000f40)=@ipv6_newrule={0x44, 0x20, 0x1, 0x70bd28, 0x35dfdbfc, {0xa, 0x80, 0x80, 0x0, 0x8, 0x0, 0x0, 0x7, 0x17}, [@FRA_SRC={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}, 0x1, 0x0, 0x0, 0x140000d0}, 0x20048810) sendmsg$nl_route(r3, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001040)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) close(0x3) 649.0229ms ago: executing program 1 (id=6435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller1\x00', 0x5001}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000d40)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0xff47, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x80}}, 0x0) 449.633482ms ago: executing program 0 (id=6436): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create(0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipmr_delroute={0x13, 0x19, 0x1, 0x70bd2b, 0x25dfdbff, {0x80, 0x20, 0x90, 0x0, 0x0, 0x4, 0x0, 0x5, 0x5100}, [@RTA_DST={0x8, 0x1, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x4000004) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)={0x40000002}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x2000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x16, 0x20, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r6, 0xfca804a0, 0x10, 0x38, &(0x7f0000000880)="b800000500000000", &(0x7f00000008c0)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="11000000040000000400000009"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x1, 0xd3f5, 0x7, 0x400, 0xffffffffffffffff, 0x7c0, '\x00', r7, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0xd}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r8, &(0x7f00000003c0), 0x0}, 0x20) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x30, 0x7, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xfa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004055}, 0x24000840) sendmsg$netlink(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)={0x28, 0x10, 0x1, 0x0, 0x0, "", [@nested={0xffffffffffffff85, 0x0, 0x0, 0x0, [@typed={0x3e, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x1c, 0x0, 0x0, @u32=0xc9}]}]}, 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@base={0x6, 0x4, 0x2, 0x7, 0x0, 0x1, 0xe92}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xd62f}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0xc3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3f, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 363.452415ms ago: executing program 2 (id=6437): sendmmsg(0xffffffffffffffff, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002800)=[{0x10, 0x119, 0x1000}], 0x10}}], 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r0, 0x1, 0x52, &(0x7f00000001c0)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x400e1, &(0x7f000005ffe4)={0xa, 0xffff, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xfc, 0x0, 0x8, 0x40, 0xfd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x0, 0x0) 203.263029ms ago: executing program 3 (id=6438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e80), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000001600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r4, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000000)={0x40, r5, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x96}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0xffffffff}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1200000004000000080000000280"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r7, 0x0, 0x0}, 0x20) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xfffffffb}, 0x5, 0x34, 0x91f}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0x16}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x18000, 0x2, 0x1, 0x5, 0xb, 0xfffffffc}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x6, 0x2, 0x4, 0x7fffffffffffffff, 0x1}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x3}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000b0}, 0xc0d0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56561, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r14, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf118a815524c8bb}, @TCA_TBF_PARMS={0x28, 0x1, {{0xed, 0x2, 0xe1, 0x400, 0xac, 0x8}, {0x36, 0x2, 0x4, 0x2, 0x3, 0x5}, 0x6, 0x9, 0x1e69}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 201.251037ms ago: executing program 4 (id=6439): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="8802020000000000fc020000000000000001010000000000"], 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000019bc0), 0x0, 0x0) close(r2) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000019c00)={'syzkaller0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_route_sched(r3, &(0x7f0000019c40)={0x0, 0x0, &(0x7f0000019c80)={&(0x7f0000019cc0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000019d00)={'syzkaller0\x00', @random="0100003600"}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000019d40)={'syzkaller0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000019d80)={&(0x7f0000019dc0)=@xdp={0x2c, 0xa888, r6, 0x2042}, 0x80, &(0x7f0000019e40)=[{&(0x7f0000019e80)='\'', 0x1}], 0x1}, 0x4005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000019a80)={0x18, 0x5, &(0x7f0000019b40)=ANY=[@ANYBLOB="1802000003000000000000000000000018430000fdffffff000000000000100095"], &(0x7f0000019b80)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7e24}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x2}, @IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000000}, 0x880) 41.837507ms ago: executing program 1 (id=6440): pipe(&(0x7f0000000080)) socket(0x10, 0x3, 0x0) epoll_create(0x7) epoll_create(0x7) epoll_create1(0x80000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fc2b0000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x400000000010, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 0s ago: executing program 2 (id=6441): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00060001000000000000000c00020000000000000000001c0007"], 0x48}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$bt_rfcomm(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r3, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) kernel console output (not intermixed with test programs): e3): failed to get link speed/duplex [ 679.100751][ C1] Dropped outbound packet type=88ca [ 679.318044][T21380] SET target dimension over the limit! [ 679.370374][T21380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4270'. [ 679.387421][T21380] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4270'. [ 680.140858][ C1] Dropped outbound packet type=88ca [ 680.235668][T21399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4273'. [ 680.650270][T21399] tipc: Resetting bearer [ 680.669252][T21399] tipc: Resetting bearer [ 680.701005][T21407] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4274'. [ 680.703141][T14334] tipc: Resetting bearer [ 680.800485][T21413] tipc: Enabled bearer , priority 0 [ 680.832465][T21413] tipc: Resetting bearer [ 680.838064][T21411] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4276'. [ 681.134610][T21409] tipc: Disabling bearer [ 681.540376][T21442] xt_CT: No such helper "snmp" [ 681.545805][T21451] veth0_to_bridge: entered promiscuous mode [ 681.564431][T21451] macvtap2: entered allmulticast mode [ 681.564456][T21451] veth0_to_bridge: entered allmulticast mode [ 681.899402][T21451] veth0_to_bridge: left allmulticast mode [ 681.899435][T21451] veth0_to_bridge: left promiscuous mode [ 682.932228][T14334] net_ratelimit: 11 callbacks suppressed [ 682.932253][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 683.045317][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 683.151375][ T7063] bond6: (slave bridge3): failed to get link speed/duplex [ 683.214056][T21493] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 683.261004][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 683.324205][T21496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4290'. [ 683.371115][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 683.480882][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 683.561887][T21509] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4292'. [ 683.631006][T21504] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4292'. [ 683.632527][T21509] 8021q: adding VLAN 0 to HW filter on device bond26 [ 683.633443][T21510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4291'. [ 683.656443][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 683.724103][T21504] xt_LOG: level 16 >= 8 [ 683.759032][T21504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4292'. [ 683.759060][T21504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4292'. [ 683.802493][ T7063] bond6: (slave bridge3): failed to get link speed/duplex [ 683.916300][ T1128] bond6: (slave bridge3): failed to get link speed/duplex [ 684.020981][ T1128] bond6: (slave bridge3): failed to get link speed/duplex [ 684.123823][T21394] udevd[21394]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 684.258852][T21523] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 684.273590][T21523] tipc: Enabled bearer , priority 0 [ 684.290868][T21523] tipc: Resetting bearer [ 684.335091][T21521] tipc: Disabling bearer [ 684.544971][T21531] syzkaller0: entered promiscuous mode [ 684.544998][T21531] syzkaller0: entered allmulticast mode [ 684.955914][T21546] vlan7: entered promiscuous mode [ 684.955940][T21546] bridge0: entered promiscuous mode [ 685.159727][T21568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4304'. [ 685.259289][T21568] netlink: 'syz.3.4304': attribute type 1 has an invalid length. [ 685.508671][T21573] netlink: 'syz.4.4305': attribute type 10 has an invalid length. [ 685.508697][T21573] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4305'. [ 685.681237][T21576] block nbd3: server does not support multiple connections per device. [ 685.681588][T21576] block nbd3: shutting down sockets [ 685.832422][T21584] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4307'. [ 686.256090][T21591] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 686.265728][T21591] tipc: Enabled bearer , priority 0 [ 686.272303][T21591] tipc: Resetting bearer [ 686.359545][T21590] tipc: Disabling bearer [ 686.437095][T21596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4311'. [ 686.537012][T21599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4312'. [ 686.940930][T21617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4315'. [ 687.346088][T21628] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4318'. [ 687.366482][T21628] bridge0: port 1(veth0) entered blocking state [ 687.366612][T21628] bridge0: port 1(veth0) entered disabled state [ 687.366812][T21628] veth0: entered allmulticast mode [ 687.379671][T21628] veth0: entered promiscuous mode [ 687.592077][T21636] block nbd0: reconnected socket [ 687.599448][ T4951] block nbd0: Receive control failed (result -32) [ 687.977423][T21651] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 687.988060][T21651] tipc: Enabled bearer , priority 0 [ 688.000561][T21651] tipc: Resetting bearer [ 688.118208][T21650] tipc: Disabling bearer [ 688.193774][ T1128] net_ratelimit: 26 callbacks suppressed [ 688.193801][ T1128] bond6: (slave bridge3): failed to get link speed/duplex [ 688.301622][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 688.412007][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 688.431512][T21660] tipc: Enabled bearer , priority 0 [ 688.433848][T21660] syzkaller0: entered promiscuous mode [ 688.433871][T21660] syzkaller0: entered allmulticast mode [ 688.439548][T21660] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 688.520764][T16542] bond6: (slave bridge3): failed to get link speed/duplex [ 688.572094][T21657] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 688.589436][T21657] tipc: Resetting bearer [ 688.626471][T21656] tipc: Resetting bearer [ 688.706289][T21656] tipc: Disabling bearer [ 688.766103][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 688.872264][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 688.980853][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 689.270787][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 689.386143][ T1128] bond6: (slave bridge3): failed to get link speed/duplex [ 689.552398][T16543] bond6: (slave bridge3): failed to get link speed/duplex [ 689.559555][T21700] sctp: [Deprecated]: syz.1.4332 (pid 21700) Use of int in max_burst socket option. [ 689.559555][T21700] Use struct sctp_assoc_value instead [ 690.009733][T21719] netlink: 'syz.0.4338': attribute type 10 has an invalid length. [ 690.468091][T21736] syzkaller0: MTU not usable for tipc bearer [ 690.468138][T21736] tipc: Enabling of bearer rejected, failed to enable media [ 690.475910][T21736] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 690.679286][T21731] sch_tbf: burst 8 is lower than device syzkaller0 mtu (65589) ! [ 691.333589][T21762] syzkaller0: entered promiscuous mode [ 691.333615][T21762] syzkaller0: entered allmulticast mode [ 691.733372][T21779] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4351'. [ 691.760109][T21777] netlink: 'syz.1.4350': attribute type 10 has an invalid length. [ 691.770537][T21779] bridge0: port 1(veth0) entered blocking state [ 691.771993][T21779] bridge0: port 1(veth0) entered disabled state [ 691.772198][T21779] veth0: entered allmulticast mode [ 691.775924][T21779] veth0: entered promiscuous mode [ 691.805134][T21779] bridge0: port 1(veth0) entered blocking state [ 691.805282][T21779] bridge0: port 1(veth0) entered forwarding state [ 692.270221][T21801] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4355'. [ 692.465008][T21779] bridge0: port 1(veth0) entered disabled state [ 692.479265][T21779] tipc: Resetting bearer [ 693.021096][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 693.021236][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 693.049954][T21779] tipc: Resetting bearer [ 693.050447][T21779] tipc: Resetting bearer [ 693.133483][T21779] bond9: left allmulticast mode [ 693.133507][T21779] bond9: left promiscuous mode [ 693.199754][T21792] tipc: Enabled bearer , priority 0 [ 693.206810][T21797] syzkaller0: entered promiscuous mode [ 693.206836][T21797] syzkaller0: entered allmulticast mode [ 693.221057][T16542] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.221092][T16542] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.221176][T16542] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.221201][T16542] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.221238][T16542] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.221263][T16542] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.221299][T16542] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.221324][T16542] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.260072][T21814] syzkaller0: entered promiscuous mode [ 693.260095][T21814] syzkaller0: entered allmulticast mode [ 693.520265][T21817] tipc: Resetting bearer [ 693.566919][T21817] tipc: Disabling bearer [ 693.795843][T21839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4357'. [ 693.936492][T21855] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4358'. [ 694.050875][ T42] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.050928][ T42] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.050963][ T42] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 694.308893][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4362'. [ 694.475009][T21871] netlink: 'syz.4.4364': attribute type 10 has an invalid length. [ 694.709798][T21879] xt_hashlimit: size too large, truncated to 1048576 [ 694.835661][T21886] netlink: 'syz.0.4367': attribute type 11 has an invalid length. [ 695.214848][T21886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4367'. [ 695.646177][T21907] syzkaller0: entered promiscuous mode [ 695.646204][T21907] syzkaller0: entered allmulticast mode [ 695.748507][T21909] tc_dump_action: action bad kind [ 696.211722][T21928] tipc: Enabled bearer , priority 0 [ 696.214196][T21928] syzkaller0: entered promiscuous mode [ 696.214218][T21928] syzkaller0: entered allmulticast mode [ 696.228386][T21922] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 696.430786][T21935] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 696.440088][T21922] tipc: Resetting bearer [ 696.488699][T21918] tipc: Resetting bearer [ 696.708599][T21918] tipc: Disabling bearer [ 696.775236][T21939] syzkaller0: MTU not usable for tipc bearer [ 696.775281][T21939] tipc: Enabling of bearer rejected, failed to enable media [ 696.969151][T21939] net_ratelimit: 18 callbacks suppressed [ 696.969173][T21939] syzkaller0: mtu less than device minimum [ 697.343018][T21959] netlink: 'syz.3.4376': attribute type 10 has an invalid length. [ 697.999329][T21974] syzkaller0: entered promiscuous mode [ 697.999354][T21974] syzkaller0: entered allmulticast mode [ 698.551066][T21994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4383'. [ 698.629753][T21997] syzkaller0: MTU not usable for tipc bearer [ 698.629799][T21997] tipc: Enabling of bearer rejected, failed to enable media [ 698.646642][T21997] syzkaller0: entered promiscuous mode [ 698.646664][T21997] syzkaller0: entered allmulticast mode [ 698.713043][T21997] sch_tbf: burst 8 is lower than device syzkaller0 mtu (82) ! [ 698.993238][T22005] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4386'. [ 699.374030][T22014] netlink: 'syz.4.4389': attribute type 10 has an invalid length. [ 699.773510][T22020] can: request_module (can-proto-0) failed. [ 700.037251][T22031] can: request_module (can-proto-0) failed. [ 700.428113][T22043] netlink: 'syz.4.4396': attribute type 1 has an invalid length. [ 700.546427][T22043] 8021q: adding VLAN 0 to HW filter on device bond17 [ 700.647963][T22049] bond17: entered promiscuous mode [ 700.647990][T22049] bond17: entered allmulticast mode [ 700.741436][T22055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4398'. [ 700.781417][T22047] tipc: Enabled bearer , priority 0 [ 700.794696][T22047] syzkaller0: entered promiscuous mode [ 700.794718][T22047] syzkaller0: entered allmulticast mode [ 700.850887][T22047] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 700.934527][T22047] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 700.981555][T22047] tipc: Resetting bearer [ 701.024305][T22045] tipc: Resetting bearer [ 701.247997][T22045] tipc: Disabling bearer [ 701.352192][T22081] netlink: 'syz.2.4402': attribute type 10 has an invalid length. [ 701.481528][T22088] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4403'. [ 701.576232][T22088] 8021q: adding VLAN 0 to HW filter on device team0 [ 701.576829][T22088] tipc: Resetting bearer [ 701.656755][T22093] netlink: 'syz.2.4415': attribute type 10 has an invalid length. [ 702.314275][T22088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 702.314303][T22088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 702.315344][T22088] tipc: Resetting bearer [ 702.315639][T22088] tipc: Resetting bearer [ 702.315891][T22088] veth1_vlan: left promiscuous mode [ 702.317361][T22088] veth0_vlan: left promiscuous mode [ 702.319153][T22088] veth0_vlan: entered promiscuous mode [ 702.324365][T22088] veth1_vlan: entered promiscuous mode [ 702.330077][T22088] veth1_macvtap: left promiscuous mode [ 702.332462][T22088] veth1_macvtap: entered promiscuous mode [ 702.347338][T22088] 8021q: adding VLAN 0 to HW filter on device bond1 [ 702.350075][T22088] 8021q: adding VLAN 0 to HW filter on device bond2 [ 702.358646][T22088] 8021q: adding VLAN 0 to HW filter on device bond3 [ 702.372190][T22088] 8021q: adding VLAN 0 to HW filter on device bond4 [ 702.378756][T22088] 8021q: adding VLAN 0 to HW filter on device bond5 [ 702.388994][T22088] 8021q: adding VLAN 0 to HW filter on device bond6 [ 702.415165][T22088] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 702.423111][T22088] 8021q: adding VLAN 0 to HW filter on device bond7 [ 702.433462][T22088] 8021q: adding VLAN 0 to HW filter on device bond8 [ 702.436579][T22088] 8021q: adding VLAN 0 to HW filter on device bond9 [ 702.437186][T22088] bond9: entered allmulticast mode [ 702.437221][T22088] bond9: entered promiscuous mode [ 702.437432][T22088] macvlan2: left promiscuous mode [ 702.437444][T22088] bond9: left promiscuous mode [ 702.439918][T22088] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 702.455960][T22088] 8021q: adding VLAN 0 to HW filter on device bond10 [ 702.491045][ T13] bond6: (slave bridge3): link status up again after 0 ms [ 702.503950][T22088] 8021q: adding VLAN 0 to HW filter on device bond11 [ 702.511677][ T13] bond6: (slave bridge3): link status up again after 0 ms [ 702.520862][T22088] bond12: left promiscuous mode [ 702.520887][T22088] wireguard0: left promiscuous mode [ 702.521997][T22088] 8021q: adding VLAN 0 to HW filter on device bond12 [ 702.525108][T22088] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 702.532085][T14329] bond6: (slave bridge3): link status up again after 0 ms [ 702.535480][T13483] bridge0: port 1(veth0) entered blocking state [ 702.535585][T13483] bridge0: port 1(veth0) entered forwarding state [ 702.536144][T22110] sctp: [Deprecated]: syz.1.4406 (pid 22110) Use of int in max_burst socket option deprecated. [ 702.536144][T22110] Use struct sctp_assoc_value instead [ 702.551633][T14329] bond6: (slave bridge3): link status up again after 0 ms [ 702.570866][ T13] bond6: (slave bridge3): link status up again after 0 ms [ 702.590903][T14329] bond6: (slave bridge3): link status up again after 0 ms [ 702.611176][T14329] bond6: (slave bridge3): link status up again after 0 ms [ 702.631369][T14329] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.631407][T14329] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.631450][T14329] bond6: (slave bridge3): link status up again after 0 ms [ 702.631471][T14329] bond6: (slave bridge3): failed to get link speed/duplex [ 702.631505][T14329] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.631529][T14329] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.631565][T14329] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.631589][T14329] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.631623][T14329] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 702.631646][T14329] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 702.703430][T14334] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 702.711674][ T1955] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 702.805559][T22109] netlink: 'syz.1.4406': attribute type 8 has an invalid length. [ 703.094243][T14334] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 703.321904][T11613] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 703.340273][T22130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4408'. [ 703.521814][T22138] syzkaller0: entered promiscuous mode [ 703.521841][T22138] syzkaller0: entered allmulticast mode [ 703.527062][T22139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4410'. [ 703.558503][T22137] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4411'. [ 703.572201][T22138] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 703.694706][T22122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4407'. [ 703.694734][T22122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4407'. [ 704.330096][T22147] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 704.672830][T13483] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 704.673090][T13483] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 704.750460][T22175] syzkaller0: MTU not usable for tipc bearer [ 704.750506][T22175] tipc: Enabling of bearer rejected, failed to enable media [ 704.814477][T22175] sch_tbf: burst 8 is lower than device syzkaller0 mtu (82) ! [ 704.861266][T11613] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 704.946807][T22184] netlink: 'syz.1.4419': attribute type 1 has an invalid length. [ 705.035575][T22194] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4417'. [ 705.064074][T22190] netlink: 'syz.0.4418': attribute type 10 has an invalid length. [ 705.819922][T22195] tipc: Resetting bearer [ 705.848260][T22195] tipc: Resetting bearer [ 705.848451][T22195] tipc: Resetting bearer [ 705.928379][T22223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4422'. [ 706.441466][T22233] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4433'. [ 706.604136][T16542] tipc: Subscription rejected, illegal request [ 707.101068][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 707.126923][T22249] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4424'. [ 707.208327][ T29] audit: type=1804 audit(1793770713.354:12): pid=22253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.4425" name="/newroot/826/cgroup.controllers" dev="tmpfs" ino=4260 res=1 errno=0 [ 707.208388][ T29] audit: type=1800 audit(1793770713.354:13): pid=22253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4425" name="cgroup.controllers" dev="tmpfs" ino=4260 res=0 errno=-22 [ 707.315457][T22253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4425'. [ 707.369208][T22252] ksmbd: Unknown IPC event: 8, ignore. [ 707.583820][ T63] net_ratelimit: 18 callbacks suppressed [ 707.583845][ T63] bond6: (slave bridge3): failed to get link speed/duplex [ 707.601259][T22260] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 707.614316][T22260] sch_tbf: burst 8 is lower than device syzkaller0 mtu (65589) ! [ 707.614987][T22260] syzkaller0: mtu less than device minimum [ 707.690741][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 707.815393][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 707.921414][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 708.146175][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 708.251100][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 708.362853][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 708.399724][T22279] netlink: 'syz.3.4432': attribute type 10 has an invalid length. [ 708.471475][ T63] bond6: (slave bridge3): failed to get link speed/duplex [ 708.581612][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 708.861131][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 708.987423][T22293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4436'. [ 709.126883][T22300] netlink: 'syz.4.4437': attribute type 11 has an invalid length. [ 709.309387][T22297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 709.496730][T22308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4438'. [ 710.109013][T22318] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4439'. [ 710.414206][T22323] xt_hashlimit: size too large, truncated to 1048576 [ 710.602099][T22334] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4444'. [ 710.833838][T22343] xt_IDLETIMER: timeout value is zero [ 711.164386][T22356] netlink: 'syz.2.4445': attribute type 10 has an invalid length. [ 711.447621][T22363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4447'. [ 711.541199][T22367] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4448'. [ 711.568665][T22357] udevd[22357]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 711.597874][T22357] udevd[22357]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 711.637116][T22370] syz_tun: left allmulticast mode [ 711.637144][T22370] syz_tun: left promiscuous mode [ 711.637421][T22370] bridge0: port 1(syz_tun) entered disabled state [ 711.664910][T22370] batman_adv: batadv0: Adding interface: syz_tun [ 711.664933][T22370] batman_adv: batadv0: Interface activated: syz_tun [ 712.631880][T16542] net_ratelimit: 29 callbacks suppressed [ 712.631906][T16542] bond6: (slave bridge3): failed to get link speed/duplex [ 712.741048][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 712.850772][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 712.966114][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 713.070763][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 713.184774][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 713.298993][ T63] bond6: (slave bridge3): failed to get link speed/duplex [ 713.491720][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 713.601173][T14329] bond6: (slave bridge3): failed to get link speed/duplex [ 713.710758][ T63] bond6: (slave bridge3): failed to get link speed/duplex [ 715.546834][T22461] netlink: 'syz.4.4459': attribute type 1 has an invalid length. [ 715.644038][T22461] 8021q: adding VLAN 0 to HW filter on device bond18 [ 715.760101][T22460] wlan1 speed is unknown, defaulting to 1000 [ 715.778616][T22460] wg2 speed is unknown, defaulting to 1000 [ 716.062405][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 716.779070][T22483] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4462'. [ 717.064879][T22488] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4463'. [ 717.341394][ C1] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 717.392768][T22500] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4466'. [ 717.448402][T22500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4466'. [ 717.475837][T22500] tipc: Can't bind to reserved service type 1 [ 717.587384][T22506] tipc: Enabling of bearer rejected, media not registered [ 717.711576][ T63] net_ratelimit: 24 callbacks suppressed [ 717.711601][ T63] bond6: (slave bridge3): failed to get link speed/duplex [ 717.725574][T22509] syzkaller0: entered promiscuous mode [ 717.725596][T22509] syzkaller0: entered allmulticast mode [ 717.832287][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 717.976022][T22516] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4468'. [ 718.073648][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 718.493627][T22517] bridge0: port 1(veth0) entered disabled state [ 718.513963][T22517] tipc: Resetting bearer [ 718.870176][T22517] tipc: Resetting bearer [ 718.874155][T22517] tipc: Resetting bearer [ 719.367469][T22517] bond9: left allmulticast mode [ 719.774253][T13483] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.774290][T13483] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.774325][T13483] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.774348][T13483] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.774380][T13483] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.774403][T13483] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.774435][T13483] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 719.774459][T13483] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.092740][T22563] siw: device registration error -23 [ 720.467753][T22579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4478'. [ 720.740313][T22579] tipc: Disabling bearer [ 720.840229][T22589] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4479'. [ 721.556567][T22585] bond2: option mode: unable to set because the bond device has slaves [ 721.559653][T22586] lo: left promiscuous mode [ 721.807340][T22586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 721.946265][T22586] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 721.974474][T22586] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 722.049341][T22594] bond2 (unregistering): (slave lo): Releasing backup interface [ 722.049906][T22594] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 722.049928][T22594] lo: left promiscuous mode [ 722.050475][T22594] bond2 (unregistering): Released all slaves [ 722.176015][T22625] syzkaller0: entered promiscuous mode [ 722.176044][T22625] syzkaller0: entered allmulticast mode [ 722.418515][T22643] netlink: 'syz.3.4482': attribute type 3 has an invalid length. [ 722.446481][T22643] netlink: 'syz.3.4482': attribute type 1 has an invalid length. [ 722.446506][T22643] netlink: 'syz.3.4482': attribute type 268 has an invalid length. [ 722.446521][T22643] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4482'. [ 723.485266][T22678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4487'. [ 723.879642][T22693] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4488'. [ 726.550022][T22702] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4491'. [ 726.567999][T22702] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 726.905038][T22728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4494'. [ 727.105479][T22728] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 727.281128][T22738] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 727.428133][T22741] smc: net device lo applied user defined pnetid SYZ0 [ 728.680504][T22766] netlink: 'syz.0.4500': attribute type 1 has an invalid length. [ 728.680529][T22766] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4500'. [ 728.687137][T22766] netlink: 'syz.0.4500': attribute type 11 has an invalid length. [ 728.872446][T22776] batman_adv: batadv0: Removing interface: veth0 [ 728.891990][T22776] bridge0: port 1(veth0) entered blocking state [ 728.897223][T22776] bridge0: port 1(veth0) entered disabled state [ 728.897399][T22776] veth0: entered allmulticast mode [ 728.912091][T22776] veth0: entered promiscuous mode [ 728.955056][T22777] syzkaller0: entered promiscuous mode [ 728.955082][T22777] syzkaller0: entered allmulticast mode [ 729.548092][T22802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4509'. [ 729.548154][T22802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4509'. [ 729.557405][T22802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4509'. [ 729.558269][T22802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4509'. [ 730.642818][T22834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4518'. [ 730.642857][T22834] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4518'. [ 730.939264][T22834] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4518'. [ 730.939369][T22834] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4518'. [ 731.064834][T22848] syzkaller0: MTU not usable for tipc bearer [ 731.064876][T22848] tipc: Enabling of bearer rejected, failed to enable media [ 731.342099][T22842] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 731.344436][T22842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4519'. [ 731.523228][T22863] netlink: 'syz.2.4524': attribute type 3 has an invalid length. [ 732.076676][T22872] syzkaller0: entered promiscuous mode [ 732.076703][T22872] syzkaller0: entered allmulticast mode [ 732.126155][T22872] tipc: Enabled bearer , priority 0 [ 732.182422][T22870] tipc: Resetting bearer [ 732.264310][T22870] tipc: Disabling bearer [ 732.374177][T22881] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 732.774603][T22898] syzkaller0: entered promiscuous mode [ 732.774630][T22898] syzkaller0: entered allmulticast mode [ 732.785235][T22898] tipc: Enabled bearer , priority 0 [ 732.837671][T22897] tipc: Resetting bearer [ 733.147253][T22897] tipc: Disabling bearer [ 733.189081][T22914] tipc: Failed to remove unknown binding: 66,1,1/929041273:1008630941/1008630942 [ 733.310030][T22920] netlink: 'syz.4.4535': attribute type 4 has an invalid length. [ 733.354931][T22923] netlink: 'syz.4.4535': attribute type 4 has an invalid length. [ 733.498938][T22917] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 733.937689][T22934] bond17: entered promiscuous mode [ 733.938987][T22934] bond17: entered allmulticast mode [ 733.939537][T22934] 8021q: adding VLAN 0 to HW filter on device bond17 [ 734.559700][ T63] smbdirect: ib_dev[syz1] removed [ 734.570484][T22945] sch_tbf: burst 12 is lower than device syzkaller0 mtu (82) ! [ 734.598827][T22949] syzkaller0: MTU not usable for tipc bearer [ 734.598873][T22949] tipc: Enabling of bearer rejected, failed to enable media [ 736.082875][T23009] veth0: left allmulticast mode [ 736.082905][T23009] veth0: left promiscuous mode [ 736.083170][T23009] bridge0: port 1(veth0) entered disabled state [ 736.689125][T23022] block nbd0: reconnected socket [ 736.693011][T23022] netlink: 'syz.2.4551': attribute type 9 has an invalid length. [ 736.898992][ T4951] block nbd0: Receive control failed (result -32) [ 737.097405][T23034] __nla_validate_parse: 5 callbacks suppressed [ 737.097429][T23034] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4552'. [ 737.097485][T23034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4552'. [ 737.129776][T23034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4552'. [ 737.140295][T23034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4552'. [ 737.201823][T23036] netlink: 'syz.2.4553': attribute type 1 has an invalid length. [ 737.229317][T23036] syzkaller1: entered promiscuous mode [ 737.229342][T23036] syzkaller1: entered allmulticast mode [ 737.374157][T23036] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4553'. [ 737.383770][T23046] syzkaller0: entered promiscuous mode [ 737.383800][T23046] syzkaller0: entered allmulticast mode [ 737.384279][T23036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4553'. [ 737.397017][T23046] tipc: Enabled bearer , priority 0 [ 737.426260][T23042] tipc: Resetting bearer [ 737.525065][T23042] tipc: Disabling bearer [ 737.803271][T23061] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4555'. [ 738.671380][T23082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4563'. [ 738.730375][T23092] ip_tables: iptables: counters copy to user failed while replacing table [ 739.020317][T23091] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4565'. [ 739.141183][T23092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4565'. [ 740.990197][T23164] ip_tables: iptables: counters copy to user failed while replacing table [ 741.316859][T23146] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.317959][T23146] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.383286][T23146] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 741.413831][T23146] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 741.423185][T23155] veth0: left allmulticast mode [ 741.423212][T23155] veth0: left promiscuous mode [ 741.423436][T23155] bridge0: port 1(veth0) entered disabled state [ 741.580029][T11611] wg2 speed is unknown, defaulting to 1000 [ 741.580069][T11611] syz2: Port: 1 Link ACTIVE [ 742.168983][T23199] __nla_validate_parse: 5 callbacks suppressed [ 742.169016][T23199] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4580'. [ 742.290823][T23201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4580'. [ 742.641855][T23206] tipc: Failed to remove unknown binding: 66,1,1/9480874:2558941979/2558941980 [ 742.790313][T23211] block nbd0: reconnected socket [ 742.796543][T23211] netlink: 'syz.0.4582': attribute type 9 has an invalid length. [ 742.960110][ T4951] block nbd0: Receive control failed (result -32) [ 743.375824][T23237] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4585'. [ 743.450230][T23235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4586'. [ 743.956187][T23256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4588'. [ 745.021272][T23264] tipc: Resetting bearer [ 745.022080][T23264] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 745.320057][T23291] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4594'. [ 745.421712][T23298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4594'. [ 745.834736][T23306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4596'. [ 745.990247][T23306] erspan0: entered promiscuous mode [ 746.017939][T23306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4596'. [ 746.481164][T23331] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4600'. [ 747.274720][T23349] __nla_validate_parse: 1 callbacks suppressed [ 747.274744][T23349] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4605'. [ 747.390530][T23367] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 747.704760][T23376] netlink: 'syz.1.4608': attribute type 1 has an invalid length. [ 747.758085][T23376] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4608'. [ 747.898099][T23384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4611'. [ 748.048284][T23386] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 748.126692][T23379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4611'. [ 748.126725][T23379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4611'. [ 748.200024][T23384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4611'. [ 748.317318][T23399] netlink: 'syz.3.4613': attribute type 10 has an invalid length. [ 748.373137][T23396] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4612'. [ 748.397210][T23402] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4614'. [ 748.398604][T23402] bridge0: port 1(veth0) entered blocking state [ 748.398820][T23402] bridge0: port 1(veth0) entered disabled state [ 748.399004][T23402] veth0: entered allmulticast mode [ 748.429973][T23402] veth0: entered promiscuous mode [ 748.872365][T23402] bridge0: port 1(veth0) entered disabled state [ 749.188451][T23402] tipc: Resetting bearer [ 749.373794][T23415] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4615'. [ 749.391275][T14334] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.391311][T14334] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 749.391362][T14334] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.391388][T14334] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 749.391422][T14334] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.391446][T14334] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 749.391480][T14334] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.391505][T14334] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 749.477453][T23429] ip_tables: iptables: counters copy to user failed while replacing table [ 749.887163][ T29] audit: type=1804 audit(1793770756.034:14): pid=23442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4618" name="/newroot/901/cgroup.controllers" dev="tmpfs" ino=4634 res=1 errno=0 [ 749.888289][ T29] audit: type=1800 audit(1793770756.034:15): pid=23442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4618" name="cgroup.controllers" dev="tmpfs" ino=4634 res=0 errno=-22 [ 749.995436][T23442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4618'. [ 751.945833][T23480] ip6gretap2: entered allmulticast mode [ 751.958298][T23480] batman_adv: batadv0: Adding interface: ip6gretap2 [ 751.958324][T23480] batman_adv: batadv0: Interface activated: ip6gretap2 [ 754.013220][T23532] vlan5: entered promiscuous mode [ 754.013247][T23532] bridge0: entered promiscuous mode [ 754.076216][T23534] __nla_validate_parse: 4 callbacks suppressed [ 754.076239][T23534] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4632'. [ 754.291986][T23534] bridge0: port 1(ip6gretap0) entered blocking state [ 754.292207][T23534] bridge0: port 1(ip6gretap0) entered disabled state [ 754.292354][T23534] ip6gretap0: entered allmulticast mode [ 754.299847][T23534] ip6gretap0: entered promiscuous mode [ 754.367737][T23541] bond21: left promiscuous mode [ 754.367763][T23541] geneve3: left promiscuous mode [ 754.368076][T23541] bond24: left promiscuous mode [ 754.423032][T23541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4633'. [ 754.474946][T23545] netlink: 'syz.3.4634': attribute type 4 has an invalid length. [ 754.474970][T23545] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4634'. [ 754.564093][T23558] netlink: 'syz.0.4635': attribute type 16 has an invalid length. [ 754.564117][T23558] netlink: 'syz.0.4635': attribute type 17 has an invalid length. [ 754.660267][T23561] netlink: 'syz.2.4636': attribute type 10 has an invalid length. [ 754.868854][T23558] 0ªX¹¦Dö»: left allmulticast mode [ 754.878212][T23558] erspan0: left promiscuous mode [ 754.934217][T23558] xfrm0: left allmulticast mode [ 754.937188][T23558] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 754.997275][T23548] netpci0: tun_chr_ioctl cmd 1074025678 [ 754.997305][T23548] netpci0: group set to 0 [ 755.304434][T23578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4639'. [ 755.755473][T23607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4643'. [ 756.505193][T23629] netlink: 'syz.2.4648': attribute type 10 has an invalid length. [ 757.079799][T23640] vlan1: entered promiscuous mode [ 757.167815][T23651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4652'. [ 758.081534][T23679] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4656'. [ 758.585019][T23691] tc_dump_action: action bad kind [ 758.799312][T23702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4657'. [ 759.238859][T23713] sctp: [Deprecated]: syz.3.4659 (pid 23713) Use of int in max_burst socket option deprecated. [ 759.238859][T23713] Use struct sctp_assoc_value instead [ 759.523071][T23714] netlink: 'syz.3.4659': attribute type 8 has an invalid length. [ 761.835626][T23787] netlink: 'syz.4.4669': attribute type 11 has an invalid length. [ 762.085713][T23802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4672'. [ 762.183890][T23787] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4669'. [ 762.240149][T23806] xfrm0: entered allmulticast mode [ 762.248177][T23806] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 762.317796][T23810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4673'. [ 762.385400][T23813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4670'. [ 762.398936][T23813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4670'. [ 762.424766][ T1128] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.424815][ T1128] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.424846][ T1128] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.424878][ T1128] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 762.846608][T23824] block nbd3: server does not support multiple connections per device. [ 762.846986][T23824] block nbd3: shutting down sockets [ 763.325000][T23828] vlan2: entered promiscuous mode [ 763.325024][T23828] bridge0: entered promiscuous mode [ 764.531143][T23870] syzkaller0: entered promiscuous mode [ 764.531169][T23870] syzkaller0: entered allmulticast mode [ 765.191403][T23892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4686'. [ 765.230583][T23889] syzkaller0: entered promiscuous mode [ 765.230608][T23889] syzkaller0: entered allmulticast mode [ 765.605866][T23901] tipc: Enabled bearer , priority 0 [ 765.671112][T23901] tipc: Resetting bearer [ 766.327329][T23888] tipc: Resetting bearer [ 766.447325][T23888] tipc: Disabling bearer [ 766.539080][T23918] can: request_module (can-proto-0) failed. [ 767.444220][T23935] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4689'. [ 768.014045][T23951] block nbd3: server does not support multiple connections per device. [ 768.014426][T23951] block nbd3: shutting down sockets [ 768.109886][T23961] netlink: 'syz.1.4694': attribute type 1 has an invalid length. [ 768.206051][T23966] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4694'. [ 768.510324][T23980] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4694'. [ 769.306888][T24007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4699'. [ 769.608082][T24019] netlink: 'syz.1.4701': attribute type 4 has an invalid length. [ 769.608106][T24019] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4701'. [ 770.376299][T24035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4704'. [ 770.416614][T24035] bridge0: port 3(veth0) entered blocking state [ 770.416814][T24035] bridge0: port 3(veth0) entered disabled state [ 770.417003][T24035] veth0: entered allmulticast mode [ 770.443288][T24035] veth0: entered promiscuous mode [ 770.722080][T24035] batman_adv: batadv0: Interface deactivated: syz_tun [ 770.794381][T24035] tipc: Resetting bearer [ 771.353106][T14334] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.353163][T14334] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.353202][T14334] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.769631][T24098] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4711'. [ 772.076532][T24108] block nbd3: server does not support multiple connections per device. [ 772.076917][T24108] block nbd3: shutting down sockets [ 772.149134][T24111] syzkaller0: MTU not usable for tipc bearer [ 772.149180][T24111] tipc: Enabling of bearer rejected, failed to enable media [ 772.154557][T16543] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.154636][T16543] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.154669][T16543] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.206338][T24108] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4713'. [ 772.369585][T24116] netlink: 'syz.4.4716': attribute type 1 has an invalid length. [ 772.431287][T24119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4716'. [ 772.431313][T24119] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4716'. [ 772.519144][T24116] bond19: entered promiscuous mode [ 772.527124][T24116] 8021q: adding VLAN 0 to HW filter on device bond19 [ 772.656762][T24116] syzkaller0: left promiscuous mode [ 772.656787][T24116] syzkaller0: left allmulticast mode [ 772.989135][T24130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4719'. [ 772.989183][T24130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4719'. [ 772.993576][T24130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4719'. [ 772.996510][T24130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4719'. [ 773.138862][T24134] netlink: 'syz.0.4720': attribute type 33 has an invalid length. [ 773.138886][T24134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4720'. [ 773.138912][T24134] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 773.228167][T24130] netlink: 'syz.4.4719': attribute type 1 has an invalid length. [ 773.537386][T24144] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4721'. [ 773.627090][T24148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4722'. [ 773.688914][T24151] syzkaller0: entered promiscuous mode [ 773.688939][T24151] syzkaller0: entered allmulticast mode [ 773.699882][T24144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4721'. [ 773.699909][T24144] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4721'. [ 773.770147][T24150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4721'. [ 774.246005][T24163] syzkaller0: entered promiscuous mode [ 774.246032][T24163] syzkaller0: entered allmulticast mode [ 774.271876][T24163] tipc: Enabled bearer , priority 0 [ 774.303744][T24163] tipc: Resetting bearer [ 774.320388][T24162] tipc: Resetting bearer [ 774.363006][T24162] tipc: Disabling bearer [ 774.599225][T24176] syzkaller0: MTU not usable for tipc bearer [ 774.599302][T24176] tipc: Enabling of bearer rejected, failed to enable media [ 774.646966][T24176] sch_tbf: burst 8 is lower than device syzkaller0 mtu (82) ! [ 775.027768][T24193] batman_adv: batadv0: Removing interface: macvtap0 [ 776.614068][T24247] syzkaller0: entered promiscuous mode [ 776.614095][T24247] syzkaller0: entered allmulticast mode [ 777.399336][T24270] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 777.714511][T24285] syzkaller0: left promiscuous mode [ 777.714539][T24285] syzkaller0: left allmulticast mode [ 777.873454][T24282] bond20: entered promiscuous mode [ 777.873501][T24282] bond20: entered allmulticast mode [ 777.874085][T24282] 8021q: adding VLAN 0 to HW filter on device bond20 [ 777.891623][T24292] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 778.313995][T24308] __nla_validate_parse: 7 callbacks suppressed [ 778.314020][T24308] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4751'. [ 778.659865][T24322] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20265 [ 778.668117][T24322] IPVS: nq: FWM 3 0x00000003 - no destination available [ 778.683765][T24322] netlink: 'syz.4.4754': attribute type 1 has an invalid length. [ 778.952298][T24322] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4754'. [ 778.964199][T24332] bond20: (slave geneve4): Opening slave failed [ 779.050287][T24331] tipc: Enabled bearer , priority 0 [ 779.055651][T24338] syzkaller0: entered promiscuous mode [ 779.055673][T24338] syzkaller0: entered allmulticast mode [ 779.074840][T24324] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 779.151035][T24322] 8021q: adding VLAN 0 to HW filter on device bond20 [ 779.177621][T24324] tipc: Resetting bearer [ 779.417826][T24320] tipc: Resetting bearer [ 779.510074][T24320] tipc: Disabling bearer [ 780.232984][T24370] bond29: entered promiscuous mode [ 780.233071][T24370] bond29: entered allmulticast mode [ 780.233561][T24370] 8021q: adding VLAN 0 to HW filter on device bond29 [ 781.126584][T24396] veth0: left allmulticast mode [ 781.126616][T24396] veth0: left promiscuous mode [ 781.126863][T24396] bridge0: port 1(veth0) entered disabled state [ 781.262141][T24396] bridge0 (unregistering): left allmulticast mode [ 782.856688][T24451] syzkaller0: entered promiscuous mode [ 782.856714][T24451] syzkaller0: entered allmulticast mode [ 784.223173][T24474] bond21: entered promiscuous mode [ 784.223243][T24474] bond21: entered allmulticast mode [ 784.223711][T24474] 8021q: adding VLAN 0 to HW filter on device bond21 [ 785.099513][T24514] syzkaller0: entered promiscuous mode [ 785.099538][T24514] syzkaller0: entered allmulticast mode [ 785.202862][T24518] syzkaller0: entered promiscuous mode [ 785.202888][T24518] syzkaller0: entered allmulticast mode [ 785.894854][T24546] block nbd3: server does not support multiple connections per device. [ 785.895271][T24546] block nbd3: shutting down sockets [ 785.905587][T24547] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4786'. [ 787.306071][T24572] bond18: entered promiscuous mode [ 787.306099][T24572] bond18: entered allmulticast mode [ 787.308633][T24572] 8021q: adding VLAN 0 to HW filter on device bond18 [ 787.730816][T24595] netlink: 'syz.1.4792': attribute type 1 has an invalid length. [ 788.187376][T24595] 8021q: adding VLAN 0 to HW filter on device bond30 [ 788.347057][T24587] wg2 speed is unknown, defaulting to 1000 [ 788.379581][T24609] netlink: 'syz.3.4794': attribute type 1 has an invalid length. [ 788.610323][T24609] 8021q: adding VLAN 0 to HW filter on device bond19 [ 788.802965][T24607] wg2 speed is unknown, defaulting to 1000 [ 791.499825][T24685] syzkaller0: left promiscuous mode [ 791.499851][T24685] syzkaller0: left allmulticast mode [ 791.607042][T24685] bond21: entered promiscuous mode [ 791.608456][T24685] bond21: entered allmulticast mode [ 791.609887][T24685] 8021q: adding VLAN 0 to HW filter on device bond21 [ 793.001621][T24724] syzkaller0: entered promiscuous mode [ 793.001647][T24724] syzkaller0: entered allmulticast mode [ 793.328406][T24728] syzkaller0: entered promiscuous mode [ 793.328434][T24728] syzkaller0: entered allmulticast mode [ 794.360339][T24759] vlan5: entered promiscuous mode [ 794.360365][T24759] bridge0: entered promiscuous mode [ 794.744351][T24771] syzkaller0: entered promiscuous mode [ 794.744377][T24771] syzkaller0: entered allmulticast mode [ 795.103487][T24785] tipc: Enabled bearer , priority 0 [ 795.238669][T24785] tipc: Resetting bearer [ 795.850966][T24791] bond31: entered promiscuous mode [ 795.850997][T24791] bond31: entered allmulticast mode [ 795.860785][T24791] 8021q: adding VLAN 0 to HW filter on device bond31 [ 795.865192][T24768] tipc: Resetting bearer [ 796.047960][T24768] tipc: Disabling bearer [ 797.191025][T24831] block nbd3: server does not support multiple connections per device. [ 797.191401][T24831] block nbd3: shutting down sockets [ 797.293994][T24831] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4822'. [ 798.698472][T24863] bond20: entered promiscuous mode [ 798.698585][T24863] bond20: entered allmulticast mode [ 798.699040][T24863] 8021q: adding VLAN 0 to HW filter on device bond20 [ 799.004309][T24876] can: request_module (can-proto-0) failed. [ 800.505238][T24923] block nbd3: server does not support multiple connections per device. [ 800.505622][T24923] block nbd3: shutting down sockets [ 802.206104][T24955] netlink: 'syz.2.4845': attribute type 16 has an invalid length. [ 802.206131][T24955] netlink: 'syz.2.4845': attribute type 17 has an invalid length. [ 802.289943][T24955] batman_adv: batadv0: Interface activated: syz_tun [ 802.465057][T24955] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 802.888828][T24955] netpci0: tun_chr_ioctl cmd 1074025678 [ 802.888853][T24955] netpci0: group set to 0 [ 804.418110][T25023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4857'. [ 804.960037][T25031] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 805.613890][T25052] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4862'. [ 805.820897][T12026] IPVS: ip_vs_send_async error -101 [ 806.154275][T25078] netlink: 'syz.1.4869': attribute type 1 has an invalid length. [ 806.349415][T25078] 8021q: adding VLAN 0 to HW filter on device bond32 [ 806.523554][T25071] wg2 speed is unknown, defaulting to 1000 [ 807.210068][T25112] sch_tbf: burst 8 is lower than device syzkaller0 mtu (82) ! [ 807.879572][T25133] netlink: 'syz.1.4878': attribute type 10 has an invalid length. [ 808.120464][T25137] netlink: 'syz.1.4880': attribute type 1 has an invalid length. [ 808.120490][T25137] netlink: 244 bytes leftover after parsing attributes in process `syz.1.4880'. [ 808.554729][T25156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4894'. [ 808.847275][T25155] can: request_module (can-proto-0) failed. [ 809.453047][T25185] netlink: 'syz.1.4890': attribute type 10 has an invalid length. [ 809.694801][T25194] vlan0: entered promiscuous mode [ 809.855653][T25204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4897'. [ 810.304478][T25219] syzkaller0: entered promiscuous mode [ 810.304505][T25219] syzkaller0: entered allmulticast mode [ 810.420423][T25223] netlink: 'syz.4.4902': attribute type 29 has an invalid length. [ 810.624463][T25230] netlink: 'syz.4.4906': attribute type 3 has an invalid length. [ 810.624488][T25230] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4906'. [ 811.383805][T25263] syzkaller0: entered promiscuous mode [ 811.383830][T25263] syzkaller0: entered allmulticast mode [ 811.549193][T25271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4920'. [ 812.397159][T25303] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 812.845522][T25306] syzkaller0: entered promiscuous mode [ 812.845547][T25306] syzkaller0: entered allmulticast mode [ 813.071097][T25316] can: request_module (can-proto-0) failed. [ 813.139122][T25319] syzkaller0: entered promiscuous mode [ 813.139149][T25319] syzkaller0: entered allmulticast mode [ 813.945390][T25356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4942'. [ 815.000644][T25391] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4947'. [ 815.011178][T25388] syzkaller0: entered promiscuous mode [ 815.011199][T25388] syzkaller0: entered allmulticast mode [ 815.584374][T25404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4950'. [ 816.046042][T25420] syzkaller0: left promiscuous mode [ 816.046076][T25420] syzkaller0: left allmulticast mode [ 816.128476][T25418] bond22: entered promiscuous mode [ 816.128543][T25418] bond22: entered allmulticast mode [ 816.128970][T25418] 8021q: adding VLAN 0 to HW filter on device bond22 [ 816.285230][T25430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4956'. [ 816.689116][T25445] netlink: 'syz.1.4960': attribute type 10 has an invalid length. [ 816.716339][T25445] team0: Port device veth1_to_hsr added [ 816.816969][T25447] syzkaller0: entered promiscuous mode [ 816.816995][T25447] syzkaller0: entered allmulticast mode [ 816.956414][T25455] syzkaller0: entered promiscuous mode [ 816.956440][T25455] syzkaller0: entered allmulticast mode [ 817.018829][T25455] sch_tbf: burst 8 is lower than device syzkaller0 mtu (82) ! [ 817.492409][T25474] syzkaller0: left promiscuous mode [ 817.492434][T25474] syzkaller0: left allmulticast mode [ 817.733327][T25474] bond22: entered promiscuous mode [ 817.735785][T25474] bond22: entered allmulticast mode [ 817.736323][T25474] 8021q: adding VLAN 0 to HW filter on device bond22 [ 818.092357][T25497] syzkaller0: entered promiscuous mode [ 818.092383][T25497] syzkaller0: entered allmulticast mode [ 818.104765][T25497] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 818.233648][T25497] sch_tbf: burst 8 is lower than device syzkaller0 mtu (65589) ! [ 818.234897][T25497] syzkaller0: mtu less than device minimum [ 818.339876][T25506] syzkaller0: entered promiscuous mode [ 818.339902][T25506] syzkaller0: entered allmulticast mode [ 818.364748][T25506] tipc: Enabled bearer , priority 0 [ 818.369020][T25506] tipc: Resetting bearer [ 818.387439][T25505] tipc: Resetting bearer [ 818.418303][T25505] tipc: Disabling bearer [ 818.624828][T25521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4982'. [ 819.071276][T25528] bond21: entered promiscuous mode [ 819.071348][T25528] bond21: entered allmulticast mode [ 819.071955][T25528] 8021q: adding VLAN 0 to HW filter on device bond21 [ 819.106050][T25539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4987'. [ 820.396190][T25560] syzkaller0: entered promiscuous mode [ 820.396220][T25560] syzkaller0: entered allmulticast mode [ 820.399966][T25567] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 820.677046][T25585] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4994'. [ 820.839890][T25593] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4999'. [ 823.255686][T25574] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 823.257375][T25570] syzkaller0: entered promiscuous mode [ 823.257399][T25570] syzkaller0: entered allmulticast mode [ 823.306949][T25597] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 823.404455][T25600] syzkaller0: left promiscuous mode [ 823.404492][T25600] syzkaller0: left allmulticast mode [ 823.418114][T25601] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR [ 824.025680][T25634] netlink: 'syz.1.5009': attribute type 10 has an invalid length. [ 824.026116][T25635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5008'. [ 824.455057][T25650] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5011'. [ 824.589780][T25653] openvswitch: netlink: EtherType 0 is less than min 600 [ 824.949817][T25658] sch_tbf: burst 0 is lower than device syzkaller0 mtu (65589) ! [ 824.959955][T25658] syzkaller0: entered promiscuous mode [ 824.959980][T25658] syzkaller0: entered allmulticast mode [ 824.975988][T25658] syzkaller0: MTU not usable for tipc bearer [ 824.976040][T25658] tipc: Enabling of bearer rejected, failed to enable media [ 825.118076][T25667] sch_tbf: burst 8 is lower than device syzkaller0 mtu (82) ! [ 825.629597][T25679] syzkaller0: left promiscuous mode [ 825.629625][T25679] syzkaller0: left allmulticast mode [ 825.789792][T25676] bond23: entered promiscuous mode [ 825.789921][T25676] bond23: entered allmulticast mode [ 825.790370][T25676] 8021q: adding VLAN 0 to HW filter on device bond23 [ 825.843454][T25692] netlink: 'syz.0.5021': attribute type 10 has an invalid length. [ 826.867584][T25734] netlink: 'syz.4.5035': attribute type 10 has an invalid length. [ 827.451643][T25758] syzkaller0: entered promiscuous mode [ 827.451668][T25758] syzkaller0: entered allmulticast mode [ 827.526892][T25758] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 827.669044][T25758] sch_tbf: burst 8 is lower than device syzkaller0 mtu (65589) ! [ 827.679244][T25758] syzkaller0: mtu less than device minimum [ 827.694729][T25762] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5043'. [ 828.712382][T25797] netlink: 'syz.3.5049': attribute type 10 has an invalid length. [ 828.933165][T25806] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 828.998693][T25806] syzkaller0: entered promiscuous mode [ 828.998719][T25806] syzkaller0: entered allmulticast mode [ 829.040473][T25806] tipc: Enabled bearer , priority 0 [ 829.134167][T25804] tipc: Resetting bearer [ 829.302840][T25804] tipc: Disabling bearer [ 829.466115][T25821] sch_tbf: burst 8 is lower than device syzkaller0 mtu (82) ! [ 829.752361][T25829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5056'. [ 830.098332][T25847] netlink: 'syz.3.5062': attribute type 10 has an invalid length. [ 830.689213][T25860] Timeout policy `syz1' can only be used by L3 protocol number 96 [ 830.726212][T25865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5068'. [ 831.016924][T25870] syzkaller0: MTU not usable for tipc bearer [ 831.016969][T25870] tipc: Enabling of bearer rejected, failed to enable media [ 831.181152][T25880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5072'. [ 831.293775][T25890] netlink: 'syz.4.5075': attribute type 1 has an invalid length. [ 831.474141][T25894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5078'. [ 831.611470][T25903] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5079'. [ 831.611609][T25903] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5079'. [ 831.943521][T25920] syzkaller0: MTU not usable for tipc bearer [ 831.943564][T25920] tipc: Enabling of bearer rejected, failed to enable media [ 833.740308][T25971] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5096'. [ 833.890911][T25972] syzkaller0: entered promiscuous mode [ 833.890935][T25972] syzkaller0: entered allmulticast mode [ 833.941958][T25972] tipc: Enabled bearer , priority 0 [ 833.978895][T25970] tipc: Resetting bearer [ 834.207466][T25970] tipc: Disabling bearer [ 834.668559][T25998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5105'. [ 834.668587][T25998] openvswitch: netlink: Flow actions attr not present in new flow. [ 835.440324][T26027] syzkaller0: MTU not usable for tipc bearer [ 835.440404][T26027] tipc: Enabling of bearer rejected, failed to enable media [ 835.963387][T26040] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5120'. [ 837.425229][T26086] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 837.426191][T26086] syzkaller0: entered promiscuous mode [ 837.426212][T26086] syzkaller0: entered allmulticast mode [ 837.479204][T26086] tipc: Enabled bearer , priority 0 [ 837.608086][T26084] tipc: Resetting bearer [ 837.764744][T26084] tipc: Disabling bearer [ 841.223548][T25939] Set syz0 is full, maxelem 65536 reached [ 842.042873][T26222] bridge0: Device is already in use. [ 843.416131][T26269] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5175'. [ 844.113665][T26293] syzkaller0: MTU not usable for tipc bearer [ 844.113711][T26293] tipc: Enabling of bearer rejected, failed to enable media [ 844.154382][T26293] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 844.160080][T26293] sch_tbf: burst 8 is lower than device syzkaller0 mtu (65589) ! [ 844.160397][T26293] syzkaller0: mtu less than device minimum [ 845.695643][T26351] ip_tables: iptables: counters copy to user failed while replacing table [ 845.927817][T26358] netlink: 'syz.4.5195': attribute type 29 has an invalid length. [ 845.927846][T26358] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5195'. [ 846.264525][T26362] tipc: Enabled bearer , priority 0 [ 846.278515][T26362] syzkaller0: entered promiscuous mode [ 846.278540][T26362] syzkaller0: entered allmulticast mode [ 846.299995][T26362] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 846.359732][T26362] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 846.374257][T26362] tipc: Resetting bearer [ 846.575472][T26359] tipc: Resetting bearer [ 846.619456][T26384] ip_tables: iptables: counters copy to user failed while replacing table [ 846.630376][T26359] tipc: Disabling bearer [ 846.725263][T26388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5205'. [ 846.886113][T26383] syzkaller0: entered promiscuous mode [ 846.886138][T26383] syzkaller0: entered allmulticast mode [ 846.910242][T26383] tipc: Enabled bearer , priority 0 [ 847.109529][T26385] tipc: Resetting bearer [ 847.148321][T26382] tipc: Resetting bearer [ 847.272304][T26382] tipc: Disabling bearer [ 847.312556][T26416] ip_tables: iptables: counters copy to user failed while replacing table [ 847.683294][T26430] vlan5: entered promiscuous mode [ 848.440220][T26460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5219'. [ 849.088284][T26478] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 849.104642][T26478] syzkaller0: entered promiscuous mode [ 849.104668][T26478] syzkaller0: entered allmulticast mode [ 849.119707][T26485] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5227'. [ 849.132001][T26478] tipc: Enabled bearer , priority 0 [ 849.180966][T26478] tipc: Resetting bearer [ 849.212938][T26476] tipc: Resetting bearer [ 849.285427][T26476] tipc: Disabling bearer [ 849.793452][T26509] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5232'. [ 850.045736][T26515] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5234'. [ 850.328365][T26522] macvtap0: entered promiscuous mode [ 850.511214][T26535] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 850.512656][T26535] syzkaller0: entered promiscuous mode [ 850.512678][T26535] syzkaller0: entered allmulticast mode [ 850.557863][T26535] tipc: Enabled bearer , priority 0 [ 850.569121][T26538] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5242'. [ 850.578167][T26538] bridge0: port 1(veth0) entered blocking state [ 850.579603][T26538] bridge0: port 1(veth0) entered disabled state [ 850.579784][T26538] veth0: entered allmulticast mode [ 850.597469][T26538] veth0: entered promiscuous mode [ 850.604451][T26538] bridge0: port 1(veth0) entered blocking state [ 850.604586][T26538] bridge0: port 1(veth0) entered forwarding state [ 850.620424][T26535] tipc: Resetting bearer [ 850.655891][T26533] tipc: Resetting bearer [ 850.693391][T26533] tipc: Disabling bearer [ 851.020900][T26538] bridge0: port 1(veth0) entered disabled state [ 851.138389][T26561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5247'. [ 851.292226][ T42] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.379415][T11601] wg2 speed is unknown, defaulting to 1000 [ 851.379460][T11601] syz2: Port: 1 Link DOWN [ 851.381916][ T13] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.381961][ T13] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.381996][ T13] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 851.843514][T26585] netlink: 'syz.3.5251': attribute type 10 has an invalid length. [ 852.167240][T26548] infiniband syz1: set down [ 852.174754][T26548] infiniband syz1: added ipvlan0 [ 852.197617][T26548] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 852.221136][T26548] infiniband syz1: Couldn't open port 1 [ 852.224319][T26548] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 852.224360][T26548] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 852.224400][T26548] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 852.404603][T26548] RDS/IB: syz1: added [ 852.404678][T26548] smc: adding ib device syz1 with port count 1 [ 852.404705][T26548] smc: ib device syz1 port 1 has no pnetid [ 854.936316][T26666] ip_tables: iptables: counters copy to user failed while replacing table [ 856.612013][T26712] ip_tables: iptables: counters copy to user failed while replacing table [ 857.887630][T26749] xt_hashlimit: size too large, truncated to 1048576 [ 859.831051][T26821] ip_tables: iptables: counters copy to user failed while replacing table [ 862.161962][T26892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5331'. [ 862.340379][T26901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5335'. [ 863.950466][T26954] ip_tables: iptables: counters copy to user failed while replacing table [ 864.057537][T26961] netlink: 108 bytes leftover after parsing attributes in process `syz.1.5348'. [ 864.077433][T26963] tipc: Enabling of bearer rejected, failed to enable media [ 864.883776][T27008] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5358'. [ 866.864358][T27081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5373'. [ 867.051837][T27092] netlink: 272 bytes leftover after parsing attributes in process `syz.4.5378'. [ 867.181235][T12026] IPVS: ip_vs_send_async error -101 [ 867.290118][T27097] nbd0: detected capacity change from 0 to 3 [ 867.301403][T27097] block nbd0: reconnected socket [ 867.302857][ T4951] block nbd0: Receive control failed (result -32) [ 867.344393][ T1992] block nbd0: Dead connection, failed to find a fallback [ 867.351711][T27102] buffer_io_error: 27 callbacks suppressed [ 867.351749][T27102] Buffer I/O error on dev nbd0, logical block 1, async page read [ 867.622108][T27109] sch_tbf: burst 12 is lower than device syzkaller0 mtu (65589) ! [ 867.629912][T27109] syzkaller0: MTU not usable for tipc bearer [ 867.629956][T27109] tipc: Enabling of bearer rejected, failed to enable media [ 867.641229][T27109] syzkaller0: mtu less than device minimum [ 868.608577][T27160] sch_tbf: burst 12 is lower than device syzkaller0 mtu (65589) ! [ 869.589703][T27187] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 869.598389][T27187] tipc: Enabled bearer , priority 0 [ 869.605324][T27187] tipc: Resetting bearer [ 869.643583][T27189] block nbd0: reconnected socket [ 869.649140][ T4951] block nbd0: Receive control failed (result -32) [ 869.655298][ T1992] block nbd0: Send control failed (result -32) [ 869.655505][ T1992] block nbd0: Request send failed, requeueing [ 869.663701][ T1992] block nbd0: Dead connection, failed to find a fallback [ 869.749726][T27186] tipc: Disabling bearer [ 869.795039][T27198] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5402'. [ 869.988935][T27207] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5401'. [ 870.155620][T27198] batman_adv: batadv0: Interface deactivated: syz_tun [ 870.246638][T27198] tipc: Resetting bearer [ 870.970738][ T42] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.970836][ T42] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 870.970873][ T42] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 871.876045][T27277] sch_tbf: burst 12 is lower than device syzkaller0 mtu (65589) ! [ 871.911710][T27277] syzkaller0: MTU not usable for tipc bearer [ 871.911756][T27277] tipc: Enabling of bearer rejected, failed to enable media [ 871.939670][T27277] syzkaller0: mtu less than device minimum [ 873.515125][T27320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5424'. [ 873.622886][T27324] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5425'. [ 874.222532][T27328] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 875.054963][T27369] syzkaller1: tun_chr_ioctl cmd 2147767520 [ 875.187454][T27330] infiniband syz0: set down [ 875.189193][T27330] infiniband syz0: added bridge_slave_1 [ 875.205145][T27330] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 875.209383][T27379] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5439'. [ 875.229885][T27330] infiniband syz0: Couldn't open port 1 [ 875.230182][T27330] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 875.230212][T27330] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 875.230252][T27330] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 875.337163][T27330] RDS/IB: syz0: added [ 875.337230][T27330] smc: adding ib device syz0 with port count 1 [ 875.337252][T27330] smc: ib device syz0 port 1 has no pnetid [ 875.872632][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 875.872706][ T7063] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 875.872745][ T7063] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 876.041423][T27400] sch_tbf: burst 8 is lower than device syzkaller0 mtu (82) ! [ 876.083263][T27407] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5446'. [ 877.191449][T27448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5455'. [ 877.897630][T27463] sch_tbf: burst 8 is lower than device syzkaller0 mtu (82) ! [ 877.917180][T27467] netlink: 'syz.3.5461': attribute type 3 has an invalid length. [ 879.227868][T27507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5471'. [ 879.256532][T27510] syzkaller0: entered promiscuous mode [ 879.256557][T27510] syzkaller0: entered allmulticast mode [ 879.259406][T27510] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 879.316296][T27510] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 879.748487][T27525] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5477'. [ 879.770818][T27525] SET target dimension over the limit! [ 880.257796][T27552] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5485'. [ 880.958291][T27578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5488'. [ 882.159379][ T29] audit: type=1804 audit(1793770888.304:16): pid=27608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5495" name="/newroot/1149/cgroup.controllers" dev="tmpfs" ino=5890 res=1 errno=0 [ 882.159438][ T29] audit: type=1800 audit(1793770888.304:17): pid=27608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5495" name="cgroup.controllers" dev="tmpfs" ino=5890 res=0 errno=-22 [ 882.213087][ T29] audit: type=1800 audit(1793770888.364:18): pid=27608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5495" name="cgroup.controllers" dev="tmpfs" ino=5890 res=0 errno=-22 [ 882.810842][T27634] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5500'. [ 882.908405][T27641] Bluetooth: MGMT ver 1.23 [ 883.443355][T27662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5508'. [ 883.555287][T27663] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5509'. [ 883.892223][T27681] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 884.092382][T27681] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 884.575218][T27707] tipc: Enabled bearer , priority 0 [ 884.693592][T27707] tipc: Disabling bearer [ 888.352844][T27845] ip_tables: iptables: counters copy to user failed while replacing table [ 888.587439][T27852] sch_tbf: burst 12 is lower than device syzkaller0 mtu (82) ! [ 889.984445][T27909] netlink: 'syz.2.5561': attribute type 5 has an invalid length. [ 890.036891][T27914] ip_tables: iptables: counters copy to user failed while replacing table [ 890.723594][T27939] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5573'. [ 891.037728][T27951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5577'. [ 891.318821][T27966] tipc: Enabling of bearer rejected, failed to enable media [ 892.004536][T27987] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 892.485278][T28008] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5591'. [ 894.411898][T28089] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 896.425942][T28170] bond2: entered promiscuous mode [ 896.427091][T28170] bond2: entered allmulticast mode [ 896.439923][T28170] 8021q: adding VLAN 0 to HW filter on device bond2 [ 897.439236][T28216] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 897.445426][T28216] syzkaller0: entered promiscuous mode [ 897.445447][T28216] syzkaller0: entered allmulticast mode [ 898.462918][T28250] bond18: entered promiscuous mode [ 898.463476][T28250] bond18: entered allmulticast mode [ 898.463948][T28250] 8021q: adding VLAN 0 to HW filter on device bond18 [ 898.862430][T28267] bond0: (slave macvlan2): Opening slave failed [ 899.147449][T28282] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5663'. [ 899.147490][T28282] bond0: ARP target 0.0.0.2 is already present [ 899.147512][T28282] bond0: option arp_ip_target: invalid value (33554432) [ 899.556516][T28301] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5671'. [ 900.897553][T28348] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5683'. [ 901.258839][T28370] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 901.407115][T28372] bond22: option tlb_dynamic_lb: invalid value (255) [ 901.545026][T28372] bond22 (unregistering): Released all slaves [ 902.749641][T28427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5706'. [ 902.773545][T28426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5705'. [ 902.773572][T28426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5705'. [ 903.573399][T28464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5710'. [ 903.812582][T28470] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 903.962839][T28475] ip_tables: iptables: counters copy to user failed while replacing table [ 904.306215][T28488] veth0_to_team: entered promiscuous mode [ 904.487152][T28498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5719'. [ 905.830466][T28543] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 905.893113][T28542] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 905.897972][T28542] syzkaller0: entered promiscuous mode [ 905.897995][T28542] syzkaller0: entered allmulticast mode [ 906.592931][T28553] rdma_rxe: rxe_newlink: failed to add bridge_slave_1 [ 906.824860][T28564] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 906.900216][T28565] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 907.186524][T28573] syzkaller0: MTU not usable for tipc bearer [ 907.186570][T28573] tipc: Enabling of bearer rejected, failed to enable media [ 907.189869][T28573] syzkaller0: mtu less than device minimum [ 908.184069][T28619] tipc: Enabled bearer , priority 0 [ 908.186474][T28619] syzkaller0: entered promiscuous mode [ 908.186496][T28619] syzkaller0: entered allmulticast mode [ 908.253354][T28619] tipc: Resetting bearer [ 908.279662][T28618] tipc: Resetting bearer [ 908.349791][T28618] tipc: Disabling bearer [ 909.316583][T28663] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5767'. [ 909.328942][T28665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5768'. [ 909.333562][T28665] bond0: Unable to set up delay as MII monitoring is disabled [ 909.647506][T28674] bridge0: port 1(veth0) entered blocking state [ 909.647719][T28674] bridge0: port 1(veth0) entered disabled state [ 909.647894][T28674] veth0: entered allmulticast mode [ 909.674956][T28674] veth0: entered promiscuous mode [ 909.809037][T28683] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 910.629746][T28719] netlink: 'syz.4.5780': attribute type 10 has an invalid length. [ 910.629774][T28719] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5780'. [ 911.706396][T28754] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5790'. [ 912.858323][T28781] netlink: 232 bytes leftover after parsing attributes in process `syz.0.5794'. [ 913.089998][T28789] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5795'. [ 913.369751][T28800] syzkaller1: entered promiscuous mode [ 913.369780][T28800] syzkaller1: entered allmulticast mode [ 913.589912][T28810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5800'. [ 914.150434][T28839] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5809'. [ 914.520756][T28854] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5814'. [ 915.109417][T28875] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5820'. [ 915.418347][T28891] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5823'. [ 915.553839][T28899] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5825'. [ 916.816106][T28948] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5833'. [ 917.311779][T28971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5838'. [ 917.335365][T28971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5838'. [ 917.736947][T28986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5841'. [ 917.974977][T28995] netlink: 'syz.4.5845': attribute type 10 has an invalid length. [ 918.199833][T29001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5848'. [ 918.765582][T29022] sctp: [Deprecated]: syz.4.5852 (pid 29022) Use of int in max_burst socket option. [ 918.765582][T29022] Use struct sctp_assoc_value instead [ 918.931618][T29032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5857'. [ 918.990734][T16543] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.990785][T16543] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.990821][T16543] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 918.996066][T29035] netlink: 'syz.1.5859': attribute type 10 has an invalid length. [ 919.678891][T29054] netlink: 'syz.1.5864': attribute type 10 has an invalid length. [ 919.816524][T29061] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5865'. [ 919.955276][T29066] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 919.957754][T29066] syzkaller0: entered promiscuous mode [ 919.957778][T29066] syzkaller0: entered allmulticast mode [ 920.006161][T29066] tipc: Enabling of bearer rejected, failed to enable media [ 920.979167][T29101] netlink: 'syz.1.5877': attribute type 10 has an invalid length. [ 921.347896][T29116] syzkaller0: MTU not usable for tipc bearer [ 921.347943][T29116] tipc: Enabling of bearer rejected, failed to enable media [ 921.387774][T29116] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 921.479950][T29116] syzkaller0: mtu less than device minimum [ 921.646384][T29128] netlink: 'syz.4.5886': attribute type 11 has an invalid length. [ 921.646411][T29128] netlink: 36 bytes leftover after parsing attributes in process `syz.4.5886'. [ 922.006942][T29127] bond19: entered promiscuous mode [ 922.008080][T29127] bond19: entered allmulticast mode [ 922.012347][T29127] 8021q: adding VLAN 0 to HW filter on device bond19 [ 922.188749][T29152] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5891'. [ 922.350799][T29158] netlink: 'syz.2.5892': attribute type 10 has an invalid length. [ 922.474138][T29142] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5888'. [ 922.771062][T29172] ip_tables: iptables: counters copy to user failed while replacing table [ 922.812778][T29175] tipc: Enabled bearer , priority 0 [ 922.816237][T29175] syzkaller0: entered promiscuous mode [ 922.816258][T29175] syzkaller0: entered allmulticast mode [ 922.839934][T29175] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 922.913375][T29175] tipc: Resetting bearer [ 922.929133][T29174] tipc: Resetting bearer [ 923.014521][T29174] tipc: Disabling bearer [ 923.470280][T29204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5904'. [ 923.491117][T29198] bond20: invalid NS target :: specified for addition [ 923.491152][T29198] bond20: option ns_ip6_target: invalid value (18446744073709551615) [ 923.520403][T29198] bond20 (unregistering): Released all slaves [ 923.950766][T29216] netlink: 'syz.0.5906': attribute type 10 has an invalid length. [ 923.953758][T29216] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5906'. [ 924.269451][T29232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5909'. [ 924.708076][T29251] tipc: Enabled bearer , priority 0 [ 924.713661][T29251] syzkaller0: entered promiscuous mode [ 924.713681][T29251] syzkaller0: entered allmulticast mode [ 924.723946][T29251] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 924.845901][T29251] tipc: Resetting bearer [ 924.858956][T29248] tipc: Resetting bearer [ 924.932208][T29248] tipc: Disabling bearer [ 925.384450][T29280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5917'. [ 925.529065][T29281] netlink: 'syz.3.5919': attribute type 10 has an invalid length. [ 925.552266][T29281] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5919'. [ 926.004119][T29298] syzkaller1: entered promiscuous mode [ 926.004148][T29298] syzkaller1: entered allmulticast mode [ 926.032177][T29298] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 926.107347][T29309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5925'. [ 926.544519][T29327] netlink: 'syz.4.5928': attribute type 1 has an invalid length. [ 926.670014][T29332] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5927'. [ 926.771633][T29327] bond24: (slave bridge0): Enslaving as a backup interface with an up link [ 926.880217][T29327] macvlan3: entered promiscuous mode [ 926.880244][T29327] macvlan3: entered allmulticast mode [ 926.894389][T29327] bond24: entered promiscuous mode [ 926.894415][T29327] bridge0: entered promiscuous mode [ 926.897850][T29327] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 926.943948][T29327] bond24: left promiscuous mode [ 926.944015][T29327] bridge0: left promiscuous mode [ 927.643284][T29373] netlink: 'syz.2.5934': attribute type 10 has an invalid length. [ 927.646312][T29373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5934'. [ 927.702272][T29377] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 927.713373][T29377] syzkaller0: entered promiscuous mode [ 927.713394][T29377] syzkaller0: entered allmulticast mode [ 927.956335][T29384] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5936'. [ 928.127789][T29385] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5933'. [ 929.002364][T29426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5945'. [ 929.580669][T12026] IPVS: ip_vs_send_async error -101 [ 929.678033][T29442] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 929.683217][T29442] syzkaller0: entered promiscuous mode [ 929.683238][T29442] syzkaller0: entered allmulticast mode [ 930.130332][T29457] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5954'. [ 930.146427][T29458] bridge0: entered allmulticast mode [ 930.177405][T29458] pim6reg: entered allmulticast mode [ 930.244157][T29462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5951'. [ 930.245386][T29462] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5951'. [ 931.521901][T29503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5962'. [ 931.564141][T29504] sch_tbf: burst 12 is lower than device syzkaller0 mtu (65589) ! [ 931.620140][T29504] syzkaller0: MTU not usable for tipc bearer [ 931.620183][T29504] tipc: Enabling of bearer rejected, failed to enable media [ 931.886840][T29518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5967'. [ 932.110660][ T5002] udevd[5002]: worker [27102] /devices/virtual/block/nbd0 is taking a long time [ 932.110708][T29523] syzkaller0: entered promiscuous mode [ 932.110730][T29523] syzkaller0: entered allmulticast mode [ 932.439279][T29538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5970'. [ 935.309489][T29572] sch_tbf: burst 12 is lower than device syzkaller0 mtu (82) ! [ 935.323576][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.324956][T16542] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.325000][T16542] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 935.325096][T29574] syzkaller0: MTU not usable for tipc bearer [ 935.325134][T29574] tipc: Enabling of bearer rejected, failed to enable media [ 935.875369][T29601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5981'. [ 936.671138][T29632] syzkaller1: entered promiscuous mode [ 936.671165][T29632] syzkaller1: entered allmulticast mode [ 937.372791][T29650] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5987'. [ 937.692398][T29661] sch_tbf: burst 12 is lower than device syzkaller0 mtu (65589) ! [ 937.697214][T29661] syzkaller0: MTU not usable for tipc bearer [ 937.697250][T29661] tipc: Enabling of bearer rejected, failed to enable media [ 937.794330][T29664] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5992'. [ 938.029278][T29679] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5995'. [ 938.809526][T29703] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6001'. [ 938.955049][T29710] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 938.955966][T29710] syzkaller0: entered promiscuous mode [ 938.955987][T29710] syzkaller0: entered allmulticast mode [ 938.981720][T29710] tipc: Enabled bearer , priority 0 [ 939.303163][T29708] tipc: Resetting bearer [ 939.388235][T29708] tipc: Disabling bearer [ 939.491533][T29716] syzkaller0: entered promiscuous mode [ 939.491561][T29716] syzkaller0: entered allmulticast mode [ 939.497970][T29716] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 939.572696][T29716] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 939.602222][T29724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6007'. [ 941.397241][T29793] syzkaller0: entered promiscuous mode [ 941.397268][T29793] syzkaller0: entered allmulticast mode [ 941.492188][T29791] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 946.704006][T29885] sch_tbf: burst 8 is lower than device syzkaller0 mtu (65589) ! [ 946.742906][T29889] syzkaller0: mtu less than device minimum [ 947.166770][T29924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6052'. [ 947.166808][T29924] netlink: 'syz.2.6052': attribute type 24 has an invalid length. [ 947.167001][T29924] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6052'. [ 947.167025][T29924] netlink: 'syz.2.6052': attribute type 24 has an invalid length. [ 948.157803][T29952] sch_tbf: burst 8 is lower than device syzkaller0 mtu (82) ! [ 949.424019][T30004] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.427294][T30004] tipc: Resetting bearer [ 949.611475][T30004] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 949.611506][T30004] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 949.612695][T30004] tipc: Resetting bearer [ 949.612992][T30004] tipc: Resetting bearer [ 949.616385][T30004] veth1_vlan: left promiscuous mode [ 949.640142][T30004] veth0_vlan: left promiscuous mode [ 949.664128][T30004] veth0_vlan: entered promiscuous mode [ 949.667413][T30004] veth1_vlan: entered promiscuous mode [ 949.685469][T30004] veth1_macvtap: left promiscuous mode [ 949.686797][T30004] veth1_macvtap: entered promiscuous mode [ 949.711582][T30004] 8021q: adding VLAN 0 to HW filter on device bond1 [ 949.714795][T30004] 8021q: adding VLAN 0 to HW filter on device bond2 [ 949.715858][T30004] 8021q: adding VLAN 0 to HW filter on device bond3 [ 949.742533][T30004] 8021q: adding VLAN 0 to HW filter on device bond4 [ 949.745907][T30004] 8021q: adding VLAN 0 to HW filter on device bond5 [ 949.747975][T30004] 8021q: adding VLAN 0 to HW filter on device bond6 [ 949.775364][T30004] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 949.776474][T30004] 8021q: adding VLAN 0 to HW filter on device bond7 [ 949.779604][T30004] 8021q: adding VLAN 0 to HW filter on device bond8 [ 949.803227][T30004] 8021q: adding VLAN 0 to HW filter on device bond9 [ 949.803966][T30004] bond9: entered allmulticast mode [ 949.804465][T30004] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 949.807140][T30004] 8021q: adding VLAN 0 to HW filter on device bond10 [ 949.824505][T30010] nbd: nbd2 already in use [ 949.826266][T30010] block nbd2: NBD_DISCONNECT [ 949.826299][T30010] block nbd2: Send disconnect failed -32 [ 949.826317][T30010] block nbd2: shutting down sockets [ 949.863435][T16542] bond6: (slave bridge3): link status up again after 0 ms [ 949.868829][T30004] 8021q: adding VLAN 0 to HW filter on device bond11 [ 949.890993][ T7063] bond6: (slave bridge3): link status up again after 0 ms [ 949.909216][T30004] 8021q: adding VLAN 0 to HW filter on device bond12 [ 949.910898][T14334] bond6: (slave bridge3): link status up again after 0 ms [ 949.933299][ T7063] bond6: (slave bridge3): link status up again after 0 ms [ 949.935431][T30004] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 949.972755][ T7063] bond6: (slave bridge3): link status up again after 0 ms [ 949.992545][ T12] bond6: (slave bridge3): link status up again after 0 ms [ 950.010925][T13483] bond6: (slave bridge3): link status up again after 0 ms [ 950.031062][T13483] bond6: (slave bridge3): link status up again after 0 ms [ 950.096729][T11609] syz0: Port: 1 Link ACTIVE [ 950.113232][T16543] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.113272][T16543] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.113346][T16543] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.113384][T16543] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.113425][T16543] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.113483][T16543] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.113525][T16543] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 950.113551][T16543] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.202132][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 950.222042][T27225] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 950.384162][T30029] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6078'. [ 950.424997][T16543] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 950.517248][T30032] syzkaller0: entered promiscuous mode [ 950.517275][T30032] syzkaller0: entered allmulticast mode [ 950.594969][T30017] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 950.805585][T30032] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 951.102368][T12435] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 951.595811][ T13] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 951.596075][ T13] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 951.851213][ T13] net_ratelimit: 15 callbacks suppressed [ 951.851240][ T13] bond6: (slave bridge3): failed to get link speed/duplex [ 952.000782][ T13] bond6: (slave bridge3): failed to get link speed/duplex [ 952.136037][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 952.273188][T16542] bond6: (slave bridge3): failed to get link speed/duplex [ 952.380950][ T10] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 952.404972][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 952.510691][ T7063] bond6: (slave bridge3): failed to get link speed/duplex [ 952.621350][ T13] bond6: (slave bridge3): failed to get link speed/duplex [ 952.732478][ T13] bond6: (slave bridge3): failed to get link speed/duplex [ 952.840746][T16542] bond6: (slave bridge3): failed to get link speed/duplex [ 952.950818][ T13] bond6: (slave bridge3): failed to get link speed/duplex [ 953.606676][T30115] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6093'. [ 953.980821][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 954.857697][T30155] batman_adv: batadv0: Interface activated: syz_tun [ 955.661676][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 956.901281][ T12] net_ratelimit: 26 callbacks suppressed [ 956.901304][ T12] bond6: (slave bridge3): failed to get link speed/duplex [ 956.933688][T30221] netlink: 'syz.3.6120': attribute type 20 has an invalid length. [ 956.933715][T30221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6120'. [ 956.991410][T30221] netlink: 'syz.3.6120': attribute type 20 has an invalid length. [ 956.991489][T30221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6120'. [ 957.004588][T14329] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.004634][T14329] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.004666][T14329] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.004697][T14329] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 957.010765][T14329] bond6: (slave bridge3): failed to get link speed/duplex [ 957.123142][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 957.253784][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 957.361226][ T13] bond6: (slave bridge3): failed to get link speed/duplex [ 957.472599][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 957.496431][T30233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6121'. [ 957.517360][T30233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6121'. [ 957.585757][T16542] bond6: (slave bridge3): failed to get link speed/duplex [ 957.694007][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 957.805101][ T7067] bond6: (slave bridge3): failed to get link speed/duplex [ 957.910715][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 961.762666][T30365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 961.776232][T30365] 8021q: adding VLAN 0 to HW filter on device team0 [ 961.821473][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 962.041402][T30365] veth1_vlan: left promiscuous mode [ 962.048157][T30365] veth1_vlan: entered promiscuous mode [ 962.076021][T30365] tipc: Resetting bearer [ 962.108660][T30365] 8021q: adding VLAN 0 to HW filter on device bond1 [ 962.128840][T30365] 8021q: adding VLAN 0 to HW filter on device bond2 [ 962.132433][T30365] 8021q: adding VLAN 0 to HW filter on device bond3 [ 962.138006][T30365] 8021q: adding VLAN 0 to HW filter on device bond4 [ 962.153472][T30365] 8021q: adding VLAN 0 to HW filter on device bond5 [ 962.172334][T30365] 8021q: adding VLAN 0 to HW filter on device bond6 [ 962.173690][T30365] 8021q: adding VLAN 0 to HW filter on device bond7 [ 962.177981][T30365] 8021q: adding VLAN 0 to HW filter on device bond8 [ 962.179506][T30365] 8021q: adding VLAN 0 to HW filter on device bond9 [ 962.211018][T30365] 8021q: adding VLAN 0 to HW filter on device bond10 [ 962.214333][T30365] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 962.215784][T30365] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 962.243394][T30365] 8021q: adding VLAN 0 to HW filter on device bond11 [ 962.244676][T30365] 8021q: adding VLAN 0 to HW filter on device bond12 [ 962.249516][T30365] 8021q: adding VLAN 0 to HW filter on device bond13 [ 962.271787][T30365] 8021q: adding VLAN 0 to HW filter on device bond14 [ 962.283653][T30365] 8021q: adding VLAN 0 to HW filter on device bond15 [ 962.289117][T30365] 8021q: adding VLAN 0 to HW filter on device bond16 [ 962.306395][T30365] 8021q: adding VLAN 0 to HW filter on device bond17 [ 962.309549][T30365] 8021q: adding VLAN 0 to HW filter on device bond18 [ 962.326318][T30365] net_ratelimit: 20 callbacks suppressed [ 962.326342][T30365] A link change request failed with some changes committed already. Interface dvmrp0 may have been left with an inconsistent configuration, please check. [ 962.480536][ C0] Dropped outbound packet type=88ca [ 962.581313][T13483] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.581380][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 962.581460][T13483] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.581509][T13483] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.581550][T13483] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 963.010604][ C0] Dropped outbound packet type=88ca [ 963.022565][ T7063] bond6: (slave bridge3): failed to get link speed/duplex [ 963.131313][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 963.360951][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 963.510803][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 963.620712][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 963.731437][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 963.741579][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 963.844039][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 963.952366][ T7067] bond6: (slave bridge3): failed to get link speed/duplex [ 964.060763][ C0] Dropped outbound packet type=88ca [ 964.317622][T30451] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 964.318525][T30451] syzkaller0: entered promiscuous mode [ 964.318549][T30451] syzkaller0: entered allmulticast mode [ 965.110529][ C0] Dropped outbound packet type=88ca [ 965.612251][ T7067] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.633379][ T7067] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.636939][ T7067] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.636996][ T7067] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 965.786973][T30500] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6174'. [ 966.140725][ C0] Dropped outbound packet type=88ca [ 966.243467][T30507] bond20: entered promiscuous mode [ 966.243539][T30507] bond20: entered allmulticast mode [ 966.243979][T30507] 8021q: adding VLAN 0 to HW filter on device bond20 [ 966.258623][T30517] netlink: 'syz.3.6176': attribute type 10 has an invalid length. [ 967.180570][ C0] Dropped outbound packet type=88ca [ 967.413475][ T42] net_ratelimit: 20 callbacks suppressed [ 967.413499][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 967.521138][ T7067] bond6: (slave bridge3): failed to get link speed/duplex [ 967.770634][ T12] bond6: (slave bridge3): failed to get link speed/duplex [ 967.882312][ T7067] bond6: (slave bridge3): failed to get link speed/duplex [ 968.032705][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 968.143754][ T13] bond6: (slave bridge3): failed to get link speed/duplex [ 968.221079][ C0] Dropped outbound packet type=88ca [ 968.371747][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 968.482651][ T7067] bond6: (slave bridge3): failed to get link speed/duplex [ 968.495590][T30582] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6187'. [ 968.536176][T30579] netlink: 'syz.1.6188': attribute type 10 has an invalid length. [ 968.592081][ T12] bond6: (slave bridge3): failed to get link speed/duplex [ 968.741052][T16542] bond6: (slave bridge3): failed to get link speed/duplex [ 969.260556][ C0] Dropped outbound packet type=88ca [ 969.343554][T30611] xt_hashlimit: size too large, truncated to 1048576 [ 969.508163][T30619] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6195'. [ 970.148877][T30638] netlink: 'syz.1.6201': attribute type 10 has an invalid length. [ 970.258337][T30644] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6205'. [ 970.300857][ C0] Dropped outbound packet type=88ca [ 970.376570][T30649] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6204'. [ 971.340562][ C0] Dropped outbound packet type=88ca [ 971.757193][T30701] netlink: 'syz.1.6216': attribute type 10 has an invalid length. [ 972.380822][ C0] Dropped outbound packet type=88ca [ 972.480710][ T42] net_ratelimit: 27 callbacks suppressed [ 972.480737][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 972.590656][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 972.712595][ T63] bond6: (slave bridge3): failed to get link speed/duplex [ 972.728621][T30724] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6219'. [ 972.831573][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 972.943349][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 973.051032][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 973.163558][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 973.273413][T14329] bond6: (slave bridge3): failed to get link speed/duplex [ 973.383726][T14329] bond6: (slave bridge3): failed to get link speed/duplex [ 973.420527][ C0] Dropped outbound packet type=88ca [ 973.492409][ T7067] bond6: (slave bridge3): failed to get link speed/duplex [ 974.006681][T30768] netlink: 'syz.3.6227': attribute type 10 has an invalid length. [ 974.460720][ C0] Dropped outbound packet type=88ca [ 975.281292][T30802] sch_tbf: burst 12 is lower than device syzkaller0 mtu (65589) ! [ 975.318196][T30802] syzkaller0: MTU not usable for tipc bearer [ 975.318241][T30802] tipc: Enabling of bearer rejected, failed to enable media [ 975.500554][ C0] Dropped outbound packet type=88ca [ 975.627709][T30808] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6235'. [ 975.645556][T30819] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6237'. [ 976.541788][ C0] Dropped outbound packet type=88ca [ 976.561415][T30853] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6245'. [ 976.661659][T30859] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 976.669190][T30859] syzkaller0: entered promiscuous mode [ 976.669216][T30859] syzkaller0: entered allmulticast mode [ 976.690060][T30859] tipc: Enabled bearer , priority 0 [ 976.736189][T30856] tipc: Resetting bearer [ 976.867738][T30856] tipc: Disabling bearer [ 977.233035][T30882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6254'. [ 977.570671][T14329] net_ratelimit: 29 callbacks suppressed [ 977.570696][T14329] bond6: (slave bridge3): failed to get link speed/duplex [ 977.590657][ C0] Dropped outbound packet type=88ca [ 977.680791][ T13] bond6: (slave bridge3): failed to get link speed/duplex [ 977.832760][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 978.620832][ C0] Dropped outbound packet type=88ca [ 979.670584][ C0] Dropped outbound packet type=88ca [ 980.183530][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 980.291062][T16542] bond6: (slave bridge3): failed to get link speed/duplex [ 980.383115][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 980.442740][ T7067] bond6: (slave bridge3): failed to get link speed/duplex [ 980.457254][T30920] sch_tbf: burst 12 is lower than device syzkaller0 mtu (1514) ! [ 980.710847][ C0] Dropped outbound packet type=88ca [ 980.798195][T30920] syzkaller0: entered promiscuous mode [ 980.798220][T30920] syzkaller0: entered allmulticast mode [ 980.811937][T30927] tipc: Enabled bearer , priority 0 [ 980.824287][T14329] bond6: (slave bridge3): failed to get link speed/duplex [ 980.886855][T30918] tipc: Resetting bearer [ 980.965156][T30918] tipc: Disabling bearer [ 981.051607][T16542] bond6: (slave bridge3): failed to get link speed/duplex [ 981.162295][ T63] bond6: (slave bridge3): failed to get link speed/duplex [ 981.277797][ T7067] bond6: (slave bridge3): failed to get link speed/duplex [ 981.382008][ T12] bond6: (slave bridge3): failed to get link speed/duplex [ 981.486901][T30956] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6271'. [ 981.740535][ C0] Dropped outbound packet type=88ca [ 982.168602][T30999] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6282'. [ 982.345150][T31001] sch_tbf: burst 12 is lower than device syzkaller0 mtu (65589) ! [ 982.427693][T31002] bond33: entered promiscuous mode [ 982.428654][T31002] bond33: entered allmulticast mode [ 982.430232][T31002] 8021q: adding VLAN 0 to HW filter on device bond33 [ 982.442700][T30996] syzkaller0: MTU not usable for tipc bearer [ 982.442743][T30996] tipc: Enabling of bearer rejected, failed to enable media [ 982.790875][ C0] Dropped outbound packet type=88ca [ 983.827123][ C0] Dropped outbound packet type=88ca [ 984.868991][ C0] Dropped outbound packet type=88ca [ 985.268048][T31001] net_ratelimit: 7 callbacks suppressed [ 985.268072][T31001] syzkaller0: mtu less than device minimum [ 985.381495][ T12] bond6: (slave bridge3): failed to get link speed/duplex [ 985.492540][ T12] bond6: (slave bridge3): failed to get link speed/duplex [ 985.600727][ T63] bond6: (slave bridge3): failed to get link speed/duplex [ 985.668070][T31037] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6289'. [ 985.719020][ T13] bond6: (slave bridge3): failed to get link speed/duplex [ 985.823033][ T7067] bond6: (slave bridge3): failed to get link speed/duplex [ 985.900526][ C0] Dropped outbound packet type=88ca [ 985.930984][ T12] bond6: (slave bridge3): failed to get link speed/duplex [ 986.041915][ T13] bond6: (slave bridge3): failed to get link speed/duplex [ 986.162545][T14329] bond6: (slave bridge3): failed to get link speed/duplex [ 986.167590][T31057] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6294'. [ 986.274130][ T13] bond6: (slave bridge3): failed to get link speed/duplex [ 986.299238][T31066] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6296'. [ 986.940900][ C0] Dropped outbound packet type=88ca [ 987.484154][T31105] bond12: entered allmulticast mode [ 987.489359][T31102] bond12: left allmulticast mode [ 987.653525][T31111] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6305'. [ 987.980569][ C0] Dropped outbound packet type=88ca [ 988.205772][T31126] syzkaller1: entered promiscuous mode [ 988.205800][T31126] syzkaller1: entered allmulticast mode [ 989.020787][ C0] Dropped outbound packet type=88ca [ 989.427736][T31175] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6318'. [ 990.060587][ C0] Dropped outbound packet type=88ca [ 990.300755][ T42] net_ratelimit: 29 callbacks suppressed [ 990.300778][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 990.410608][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 990.520683][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 990.631295][ T63] bond6: (slave bridge3): failed to get link speed/duplex [ 990.742629][ T63] bond6: (slave bridge3): failed to get link speed/duplex [ 990.853286][T16542] bond6: (slave bridge3): failed to get link speed/duplex [ 990.962024][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 991.100855][ C0] Dropped outbound packet type=88ca [ 991.151994][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 991.403767][ T12] bond6: (slave bridge3): failed to get link speed/duplex [ 991.510562][ T12] bond6: (slave bridge3): failed to get link speed/duplex [ 992.140603][ C0] Dropped outbound packet type=88ca [ 992.704334][T31252] bond22: entered promiscuous mode [ 992.704401][T31252] bond22: entered allmulticast mode [ 992.704824][T31252] 8021q: adding VLAN 0 to HW filter on device bond22 [ 993.183023][ C0] Dropped outbound packet type=88ca [ 993.632987][T31272] syzkaller0: entered promiscuous mode [ 993.633015][T31272] syzkaller0: entered allmulticast mode [ 994.230615][ C0] Dropped outbound packet type=88ca [ 995.266730][ C0] Dropped outbound packet type=88ca [ 996.306551][ C0] Dropped outbound packet type=88ca [ 996.712432][ T42] net_ratelimit: 13 callbacks suppressed [ 996.712458][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 996.820690][ T13] bond6: (slave bridge3): failed to get link speed/duplex [ 996.930714][ T13] bond6: (slave bridge3): failed to get link speed/duplex [ 997.040639][T16542] bond6: (slave bridge3): failed to get link speed/duplex [ 997.150698][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 997.340821][ C0] Dropped outbound packet type=88ca [ 997.766214][T31324] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6343'. [ 997.787777][T16542] bond6: (slave bridge3): failed to get link speed/duplex [ 998.203306][T16542] bond6: (slave bridge3): failed to get link speed/duplex [ 998.373477][ T12] bond6: (slave bridge3): failed to get link speed/duplex [ 998.380612][ C0] Dropped outbound packet type=88ca [ 998.432182][T31371] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6348'. [ 998.481151][ T13] bond6: (slave bridge3): failed to get link speed/duplex [ 998.524616][T31373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6347'. [ 998.593523][T16542] bond6: (slave bridge3): failed to get link speed/duplex [ 999.420788][ C0] Dropped outbound packet type=88ca [ 1000.049069][T31412] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6354'. [ 1000.460530][ C0] Dropped outbound packet type=88ca [ 1001.501058][ C0] Dropped outbound packet type=88ca [ 1001.977606][T31444] lo: entered promiscuous mode [ 1001.981826][T31450] batadv_slave_0: entered promiscuous mode [ 1001.982545][T14334] net_ratelimit: 18 callbacks suppressed [ 1001.982563][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 1001.985047][T31453] batadv_slave_0: left promiscuous mode [ 1001.985100][T31453] lo: left promiscuous mode [ 1002.151291][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 1002.225373][T31463] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.6365'. [ 1002.260669][ T42] bond6: (slave bridge3): failed to get link speed/duplex [ 1002.370617][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 1002.452955][T31474] ±ÿ†ˆ¬hËdtÍ: renamed from lo (while UP) [ 1002.540609][ C0] Dropped outbound packet type=88ca [ 1002.594088][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 1002.703934][T14329] bond6: (slave bridge3): failed to get link speed/duplex [ 1002.813790][ T7067] bond6: (slave bridge3): failed to get link speed/duplex [ 1002.885595][T31496] tipc: Enabling of bearer rejected, failed to enable media [ 1002.924246][T16543] bond6: (slave bridge3): failed to get link speed/duplex [ 1003.002613][T31492] sch_tbf: burst 8 is lower than device syzkaller0 mtu (82) ! [ 1003.038225][T16543] bond6: (slave bridge3): failed to get link speed/duplex [ 1003.142519][ T13] bond6: (slave bridge3): failed to get link speed/duplex [ 1003.580734][ C0] Dropped outbound packet type=88ca [ 1003.702099][T31513] syzkaller1: entered promiscuous mode [ 1003.702125][T31513] syzkaller1: entered allmulticast mode [ 1004.497839][T31537] netlink: 'syz.2.6375': attribute type 10 has an invalid length. [ 1004.620664][ C0] Dropped outbound packet type=88ca [ 1005.231080][T31551] netlink: 'syz.4.6378': attribute type 1 has an invalid length. [ 1005.368669][T31551] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1005.534054][T31567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6380'. [ 1005.660823][ C0] Dropped outbound packet type=88ca [ 1005.944856][T31572] sch_tbf: burst 8 is lower than device syzkaller0 mtu (65589) ! [ 1006.700748][ C0] Dropped outbound packet type=88ca [ 1007.092481][ T12] net_ratelimit: 28 callbacks suppressed [ 1007.092506][ T12] bond6: (slave bridge3): failed to get link speed/duplex [ 1007.188476][T31625] netlink: 'syz.3.6389': attribute type 10 has an invalid length. [ 1007.202171][T16542] bond6: (slave bridge3): failed to get link speed/duplex [ 1007.281622][T31628] syzkaller1: entered promiscuous mode [ 1007.281647][T31628] syzkaller1: entered allmulticast mode [ 1007.310872][T16543] bond6: (slave bridge3): failed to get link speed/duplex [ 1007.426258][T16543] bond6: (slave bridge3): failed to get link speed/duplex [ 1007.586646][T31639] syzkaller0: left promiscuous mode [ 1007.586675][T31639] syzkaller0: left allmulticast mode [ 1007.612205][ T12] bond6: (slave bridge3): failed to get link speed/duplex [ 1007.740722][ C0] Dropped outbound packet type=88ca [ 1007.781865][T31632] bond26: entered promiscuous mode [ 1007.783544][T31632] bond26: entered allmulticast mode [ 1007.783964][T31632] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1007.822399][ T12] bond6: (slave bridge3): failed to get link speed/duplex [ 1007.930620][ T12] bond6: (slave bridge3): failed to get link speed/duplex [ 1008.044079][ T63] bond6: (slave bridge3): failed to get link speed/duplex [ 1008.541219][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1008.712148][T31666] syzkaller0: entered promiscuous mode [ 1008.712178][T31666] syzkaller0: entered allmulticast mode [ 1008.712708][T31659] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1008.780554][ C0] Dropped outbound packet type=88ca [ 1008.883896][T14334] bond6: (slave bridge3): failed to get link speed/duplex [ 1008.884080][T31657] sch_tbf: burst 8 is lower than device syzkaller0 mtu (65589) ! [ 1009.018761][T31664] syzkaller0: mtu less than device minimum [ 1009.360206][T31690] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6396'. [ 1009.821254][ C0] Dropped outbound packet type=88ca [ 1010.404797][T31721] netlink: 'syz.3.6400': attribute type 10 has an invalid length. [ 1010.860518][ C0] Dropped outbound packet type=88ca [ 1011.142166][T31743] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6406'. [ 1011.287502][T31743] netlink: 'syz.3.6406': attribute type 1 has an invalid length. [ 1011.287528][T31743] netlink: 92 bytes leftover after parsing attributes in process `syz.3.6406'. [ 1011.745435][T31758] syzkaller0: entered promiscuous mode [ 1011.745464][T31758] syzkaller0: entered allmulticast mode [ 1011.782140][T31758] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1011.900787][ C0] Dropped outbound packet type=88ca [ 1011.962165][T31758] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1012.087042][T31761] tc_dump_action: action bad kind [ 1012.120825][T16542] net_ratelimit: 25 callbacks suppressed [ 1012.120850][T16542] bond6: (slave bridge3): failed to get link speed/duplex [ 1012.151670][T31761] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6408'. [ 1012.231767][ T13] bond6: (slave bridge3): failed to get link speed/duplex [ 1012.344157][ T7063] bond6: (slave bridge3): failed to get link speed/duplex [ 1012.405978][T31782] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6410'. [ 1012.452076][T14329] bond6: (slave bridge3): failed to get link speed/duplex [ 1012.560946][T13483] bond6: (slave bridge3): failed to get link speed/duplex [ 1012.593795][T31793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6412'. [ 1012.751372][T16543] bond6: (slave bridge3): failed to get link speed/duplex [ 1012.861287][ T12] bond6: (slave bridge3): failed to get link speed/duplex [ 1012.869085][T31798] netlink: 'syz.4.6413': attribute type 10 has an invalid length. [ 1012.940573][ C0] Dropped outbound packet type=88ca [ 1013.010722][T16543] bond6: (slave bridge3): failed to get link speed/duplex [ 1013.101637][T31804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6415'. [ 1013.124974][T31804] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6415'. [ 1013.140842][ T63] bond6: (slave bridge3): failed to get link speed/duplex [ 1013.252005][ T63] bond6: (slave bridge3): failed to get link speed/duplex [ 1013.661113][ C0] ip6_tunnel: ip6erspan1 xmit: Local address not yet configured! [ 1013.780337][T31838] veth0: left allmulticast mode [ 1013.781691][T31838] veth0: left promiscuous mode [ 1013.781969][T31838] bridge0: port 1(veth0) entered disabled state [ 1013.980848][ C0] Dropped outbound packet type=88ca [ 1014.236994][T31853] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1014.241328][T31853] sch_tbf: burst 8 is lower than device syzkaller0 mtu (65589) ! [ 1014.732993][T31869] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6428'. [ 1014.768506][T31873] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6429'. [ 1015.030526][ C0] Dropped outbound packet type=88ca [ 1015.535850][T31895] syzkaller1: entered promiscuous mode [ 1015.535877][T31895] syzkaller1: entered allmulticast mode [ 1016.060767][ C0] Dropped outbound packet type=88ca [ 1016.762861][T31929] syzkaller0: left promiscuous mode [ 1016.762890][T31929] syzkaller0: left allmulticast mode [ 1016.836101][T31924] bond27: entered promiscuous mode [ 1016.836479][T31924] bond27: entered allmulticast mode [ 1016.837151][T31924] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1016.851949][T31926] syzkaller0: entered promiscuous mode [ 1016.851971][T31926] syzkaller0: entered allmulticast mode [ 1016.854874][T31926] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1016.865436][ T31] INFO: task kworker/0:1H:1992 blocked for more than 143 seconds. [ 1016.865460][ T31] Not tainted syzkaller #0 [ 1016.865472][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1016.865482][ ** replaying previous printk message ** [ 1016.865482][ T31] task:kworker/0:1H state:D stack:26488 pid:1992 tgid:1992 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1016.865550][ T31] Workqueue: kblockd blk_mq_requeue_work [ 1016.865722][ T31] Call Trace: [ 1016.865731][ T31] [ 1016.865752][ T31] __schedule+0x17dd/0x5830 [ 1016.865877][ T31] ? __pfx___schedule+0x10/0x10 [ 1016.865912][ T31] ? __pfx___schedule+0x10/0x10 [ 1016.865948][ T31] ? schedule+0x90/0x2b0 [ 1016.865975][ T31] schedule+0x164/0x2b0 [ 1016.866001][ T31] schedule_timeout+0x152/0x2c0 [ 1016.866054][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1016.866088][ T31] ? __pfx_process_timeout+0x10/0x10 [ 1016.866152][ T31] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1016.866174][ T31] ? prepare_to_wait_event+0x3e4/0x4d0 [ 1016.866204][ T31] ? prepare_to_wait_event+0x440/0x4d0 [ 1016.866254][ T31] nbd_queue_rq+0x96a/0xff0 [ 1016.866351][ T31] ? __pfx_nbd_queue_rq+0x10/0x10 [ 1016.866376][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1016.866423][ T31] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1016.866496][ T31] ? sbitmap_get+0x229/0x390 [ 1016.866547][ T31] ? __pfx_blk_mq_dispatch_rq_list+0x10/0x10 [ 1016.866582][ T31] ? __blk_mq_alloc_driver_tag+0x2e7/0x6e0 [ 1016.866644][ T31] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1016.866693][ T31] ? __pfx___blk_mq_sched_dispatch_requests+0x10/0x10 [ 1016.866717][ T31] ? lock_acquire+0x115/0x350 [ 1016.866751][ T31] ? lock_acquire+0x115/0x350 [ 1016.866799][ T31] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1016.866826][ T31] ? blk_mq_run_hw_queue+0x317/0x4e0 [ 1016.866856][ T31] blk_mq_run_hw_queue+0x340/0x4e0 [ 1016.866928][ T31] blk_mq_run_hw_queues+0x268/0x3f0 [ 1016.866964][ T31] blk_mq_requeue_work+0x703/0x760 [ 1016.866996][ T31] ? __pfx_blk_mq_requeue_work+0x10/0x10 [ 1016.867028][ T31] ? rcu_is_watching+0x16/0xb0 [ 1016.867068][ T31] ? process_scheduled_works+0x97a/0x1630 [ 1016.867112][ T31] process_scheduled_works+0xc3d/0x1630 [ 1016.867180][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1016.867218][ T31] ? assign_work+0x3cf/0x5d0 [ 1016.867253][ T31] worker_thread+0xa47/0xfb0 [ 1016.892322][ T31] ? __kthread_parkme+0x71/0x1f0 [ 1016.892368][ T31] kthread+0x38b/0x480 [ 1016.892392][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1016.892418][ T31] ? __pfx_kthread+0x10/0x10 [ 1016.892464][ T31] ret_from_fork+0x514/0xb70 [ 1016.892542][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1016.892565][ T31] ? __switch_to+0xc78/0x1410 [ 1016.892597][ T31] ? __pfx_kthread+0x10/0x10 [ 1016.892621][ T31] ret_from_fork_asm+0x1a/0x30 [ 1016.892671][ T31] [ 1016.892822][ T31] [ 1016.892822][ T31] Showing all locks held in the system: [ 1016.892840][ T31] locks held by kworker/0:1/10: 2, on CPU#0: [ 1016.892921][ T31] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1016.892998][ T31] #1: ffffc900000f7c40 (xfrm_state_gc_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1016.893052][ T31] locks held by kworker/u8:1/13: 4, last CPU#1: [ 1016.893067][ T31] #0: ffff888056813148 ((wq_completion)krds_cp_wq#5/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1016.893121][ T31] #1: ffffc90000127c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1016.893176][ T31] #2: ffff888058c8cf80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1016.893276][ T31] #3: ffff88807f109de0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1016.893386][ T31] locks held by pr/ttyS0/30: 2, last CPU#1: [ 1016.893400][ T31] #0: ffffffff8fe33dd8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1016.893478][ T31] #1: ffffffff9bfef6d8 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 1016.893580][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 1016.893595][ T31] #0: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1016.893660][ T31] locks held by kworker/u8:4/63: 2, on CPU#1: [ 1016.893674][ T31] #0: ffff88813fe0c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1016.893729][ T31] #1: ffffc9000204fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1016.893791][ T31] locks held by kworker/0:1H/1992: 4, on CPU#0: [ 1016.893806][ T31] #0: ffff888020ee3948 ((wq_completion)kblockd){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1016.893859][ T31] #1: ffffc90006287c40 ((work_completion)(&(&q->requeue_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1016.895600][ T31] #2: ffff888027fcbd18 (set->srcu){.+.+}-{0:0}, at: blk_mq_run_hw_queue+0x317/0x4e0 [ 1016.895661][ T31] #3: ffff888028897178 (&cmd->lock){+.+.}-{4:4}, at: nbd_queue_rq+0xc1/0xff0 [ 1016.895721][ T31] locks held by dhcpcd/5297: 2, last CPU#1: [ 1016.895735][ T31] #0: ffff88802acf96f0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe2/0xf20 [ 1016.895836][ T31] #1: ffffffff9148c2e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1016.895900][ T31] locks held by getty/5391: 2, on CPU#1: [ 1016.895914][ T31] #0: ffff888037d720a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1016.895997][ T31] #1: ffffc900032362e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1016.896071][ T31] locks held by syz-executor/5645: 4, last CPU#0: [ 1016.896086][ T31] #0: ffffffff9003a4f0 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x470 [ 1016.896144][ T31] #1: ffff888024346540 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x18a/0x1e10 [ 1016.896216][ T31] #2: ffff88813ff7e540 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x277/0x1e10 [ 1016.896272][ T31] #3: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1016.896332][ T31] locks held by kworker/u8:14/7067: 3, on CPU#1: [ 1016.896345][ T31] #0: ffff88801c7da148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1016.896398][ T31] #1: ffffc9000389fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1016.896476][ T31] #2: ffffffff9148c2e0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 1016.896551][ T31] locks held by kworker/0:12/12435: 4, on CPU#0: [ 1016.896565][ T31] #0: ffff88813fe86d48 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1016.896617][ T31] #1: ffffc9000a6f7c40 ((work_completion)(&(&ssp->srcu_sup->work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1016.896670][ T31] #2: ffffffff8ff5b1e8 (&ssp->srcu_sup->srcu_gp_mutex){+.+.}-{4:4}, at: srcu_advance_state+0x4f/0x16d0 [ 1016.896720][ T31] #3: ffffffff8ff609a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 1016.896767][ T31] locks held by kworker/u8:21/14334: 5, last CPU#0: [ 1016.896781][ T31] #0: ffff888056816948 ((wq_completion)krds_cp_wq#5/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1016.896832][ T31] #1: ffffc9000270fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1016.896884][ T31] #2: ffff888058c8c980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1016.896930][ T31] #3: ffff8880789a9de0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1016.896973][ T31] #4: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: __inet6_bind+0x49b/0xf30 [ 1016.897027][ T31] locks held by udevd/27102: 1, on CPU#0: [ 1016.897040][ T31] #0: ffff8880282c5350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 1016.897140][ T31] locks held by kworker/0:2/27225: 3, on CPU#0: [ 1016.897153][ T31] #0: ffff88813ff4ad48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1016.898839][ T31] #1: ffffc90005a57c40 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1016.898893][ T31] #2: ffff88801cb40258 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x1fd/0x3b0 [ 1016.898996][ T31] locks held by syz.0.6436/31914: 2, last CPU#1: [ 1016.899010][ T31] #0: ffff888050ba0f80 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x19c/0xa40 [ 1016.899055][ T31] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1016.899107][ T31] locks held by syz.3.6438/31926: 1, on CPU#0: [ 1016.899120][ T31] #0: ffffffff9148c2e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 1016.899164][ T31] locks held by syz.4.6439/31921: 2, on CPU#0: [ 1016.899178][ T31] #0: ffff88805935bbc0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1016.899280][ T31] #1: ffffffff8ff609a8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x388/0x760 [ 1016.899326][ T31] locks held by modprobe/31925: 1, last CPU#1: [ 1016.899340][ T31] #0: ffff888079deb440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d5/0xa40 [ 1016.899383][ T31] locks held by syz.2.6441/31930: 2, last CPU#1: [ 1016.899397][ T31] #0: ffff88803cc661c8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1016.899473][ T31] #1: ffffffff8ff5a320 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1016.899527][ T31] [ 1016.899532][ T31] ============================================= [ 1016.899532][ T31] [ 1016.899542][ T31] NMI backtrace for cpu 0 [ 1016.899554][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1016.899575][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1016.899587][ T31] Call Trace: [ 1016.899595][ T31] [ 1016.899604][ T31] dump_stack_lvl+0xe8/0x150 [ 1016.899634][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 1016.899682][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1016.899719][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1016.899751][ T31] sys_info+0x135/0x170 [ 1016.899775][ T31] watchdog+0x1073/0x10f0 [ 1016.899829][ T31] ? watchdog+0x209/0x10f0 [ 1016.899860][ T31] kthread+0x38b/0x480 [ 1016.899882][ T31] ? __pfx_watchdog+0x10/0x10 [ 1016.899904][ T31] ? __pfx_kthread+0x10/0x10 [ 1016.899927][ T31] ret_from_fork+0x514/0xb70 [ 1016.899951][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1016.899972][ T31] ? __switch_to+0xc78/0x1410 [ 1016.900003][ T31] ? __pfx_kthread+0x10/0x10 [ 1016.900026][ T31] ret_from_fork_asm+0x1a/0x30 [ 1016.900065][ T31] [ 1016.900273][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1016.900301][ C1] NMI backtrace for cpu 1 [ 1016.900316][ C1] CPU: 1 UID: 0 PID: 30 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 1016.900338][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1016.900349][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1016.900380][ C1] Code: e8 2e b2 45 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 8f bc fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 8a 55 82 06 cc 44 89 f9 80 e1 07 [ 1016.900397][ C1] RSP: 0018:ffffc90000a678b8 EFLAGS: 00000002 [ 1016.900415][ C1] RAX: 1ffffffff37fde00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1016.900429][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 1016.900442][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 1016.900456][ C1] R10: dffffc0000000000 R11: ffffffff85836350 R12: dffffc0000000000 [ 1016.900472][ C1] R13: 0000000000000000 R14: ffffffff9bfef700 R15: 0000000000000000 [ 1016.900486][ C1] FS: 0000000000000000(0000) GS:ffff88812371f000(0000) knlGS:0000000000000000 [ 1016.900504][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1016.900518][ C1] CR2: 00007f4343213e08 CR3: 000000005c8f8000 CR4: 00000000003526f0 [ 1016.900539][ C1] Call Trace: [ 1016.900548][ C1] [ 1016.900558][ C1] wait_for_lsr+0x184/0x2f0 [ 1016.900587][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 1016.900640][ C1] serial8250_console_write+0xa7e/0x1200 [ 1016.900665][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 1016.900691][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1016.900716][ C1] ? __schedule+0x17f3/0x5830 [ 1016.900742][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 1016.900782][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 1016.900810][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 1016.900841][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 1016.900862][ C1] nbcon_kthread_func+0x6d9/0x8d0 [ 1016.900889][ C1] ? nbcon_kthread_func+0x163/0x8d0 [ 1016.900910][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1016.900937][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1016.900956][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1016.900977][ C1] kthread+0x38b/0x480 [ 1016.900997][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 1016.901018][ C1] ? __pfx_kthread+0x10/0x10 [ 1016.901040][ C1] ret_from_fork+0x514/0xb70 [ 1016.901062][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1016.901082][ C1] ? __switch_to+0xc78/0x1410 [ 1016.901110][ C1] ? __pfx_kthread+0x10/0x10 [ 1016.901131][ C1] ret_from_fork_asm+0x1a/0x30 [ 1016.901159][ C1] [ 1016.905721][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1018.144441][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1018.153574][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1018.163658][ T31] Call Trace: [ 1018.166965][ T31] [ 1018.169917][ T31] vpanic+0x26f/0x710 [ 1018.173925][ T31] panic+0xc5/0xd0 [ 1018.177662][ T31] ? __pfx_panic+0x10/0x10 [ 1018.182088][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 1018.187574][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 1018.192985][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1018.199196][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1018.205406][ T31] watchdog+0x10e7/0x10f0 [ 1018.209792][ T31] ? watchdog+0x209/0x10f0 [ 1018.214253][ T31] kthread+0x38b/0x480 [ 1018.218361][ T31] ? __pfx_watchdog+0x10/0x10 [ 1018.223073][ T31] ? __pfx_kthread+0x10/0x10 [ 1018.227702][ T31] ret_from_fork+0x514/0xb70 [ 1018.232324][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1018.237551][ T31] ? __switch_to+0xc78/0x1410 [ 1018.242357][ T31] ? __pfx_kthread+0x10/0x10 [ 1018.246968][ T31] ret_from_fork_asm+0x1a/0x30 [ 1018.251776][ T31] [ 1018.254959][ T31] Kernel Offset: disabled [ 1018.259303][ T31] Rebooting in 86400 seconds..