last executing test programs: 9.148275319s ago: executing program 3 (id=19113): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz1\x00', 0x200002, 0x0) close(r2) write(r0, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r5, 0x6, 0x1a, 0x0, &(0x7f0000000380)) 7.675673166s ago: executing program 3 (id=19122): close(0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000100)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x9, 0x12d58}}, 0x44) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f00000003c0)={0x2, 0xffffffffffffffff, 0x800}, &(0x7f0000000400)=0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) socket(0xa, 0x3, 0xff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000580)={{0x84, @broadcast, 0x4f29, 0x3, 'ovf\x00', 0x5, 0xc, 0x6c}, {@rand_addr=0x64010101, 0x4e23, 0x10002, 0x1, 0x1}}, 0x44) 7.28784114s ago: executing program 3 (id=19125): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080), 0x37) listen(r0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) 6.865372599s ago: executing program 1 (id=19128): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r3, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r3, 0x0, 0x80, 0x8) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe07}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 6.433765649s ago: executing program 4 (id=19132): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x3}]}, 0x34}}, 0x24000880) 6.225040269s ago: executing program 2 (id=19134): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, 0x0, 0x40000) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120006001800177b000008000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010104, @remote}}}], 0x20}}, {{&(0x7f0000000100)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010102, @loopback}}}], 0x20}}], 0x2, 0x0) 6.104591259s ago: executing program 0 (id=19135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0xd, 0x9, 0xffffffffffffffff, 0x6, 0x588}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x1fc16}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x90}}, 0x0) write$tun(r0, &(0x7f0000000300)={@val={0x70}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x5, 0x0, 0x4}}, {@x25={0x8100, {0x2, 0x8, 0x1}}}}}, 0x1d) 5.816722843s ago: executing program 2 (id=19136): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfffffffc, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200281, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x8000}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000003c0)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 5.730288821s ago: executing program 1 (id=19137): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, r1, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x4000) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000000c0), r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x0, 0x0, &(0x7f0000000700)='syzkaller\x00', 0x6, 0xa9, &(0x7f0000000740)=""/169, 0x40f00, 0xc, '\x00', r2, 0x25, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x1, 0xf, 0x7, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000980)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x94) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc082}, 0x20040080) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 5.38551045s ago: executing program 0 (id=19138): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) close(0x4) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000280)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @value=r3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 5.384817507s ago: executing program 1 (id=19139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x2, &(0x7f0000000240)=@raw=[@generic={0x85, 0x0, 0x0, 0x0, 0x7}, @generic={0x95}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@ifindex=r4, r5, 0x2e, 0x0, 0x0, @void, @value=0x0}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="b702000000000000b703000000000000b704000000000000850000009800000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@ifindex=r2, r6, 0x2e, 0x0, 0x0, @void, @value=0x0}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@getchain={0x24, 0x11, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x5}, {0xfff3}}}, 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x58, 0x10, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x14318}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_AF_SPEC={0x24, 0x1a, 0x0, 0x1, [@AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}]}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) 5.306094463s ago: executing program 4 (id=19140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r0, 0x913e0000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000707000/0x2000)=nil, 0x2000, 0x3, 0x12, r1, 0xc3ceb000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r3, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x3, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r4, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r2, 0x0) 5.156827319s ago: executing program 2 (id=19141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xf0, 0x5, 0x0, 0x80000000, 0x6cb3, 0xd97, 0x26e, 0x4, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000640), 0x56) sendmsg$kcm(r6, &(0x7f0000000680)={&(0x7f00000006c0)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000780)="27030200dc0f14000e0005000024c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) 4.844873803s ago: executing program 4 (id=19142): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xc1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x80000, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000540)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_devices(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r2) close(0x4) 4.621728593s ago: executing program 2 (id=19143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x14, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x2, 0x892f}, {}, {}, {0xa888}}}}}}}, 0x0) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="0503e5fdd3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 4.594484164s ago: executing program 1 (id=19144): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x8, 0x5, 0x400, 0x9, 0x81, 0x101, 0x86a4, 0xc40, 0x7fffffff, 0xfffffffd, 0x1, 0xb, 0x16, 0x6, 0xca11, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "abcc61b4e508c02286f1bafc7a22c407a52b0e13291c865d493f15736245f220cd4e40006df455836aa3bd3aaa2c9b95578719c46f89e01798d28b6d63cf7465ea95bd97b018b7afaccdcb0000000000000009e790f0875fb4b795ca95b7dd712d2c5d69945535f92f74a71236743acdf902703c7bd07f2df5989ee40e409b077cc85e96554beb53c986a216051bd5979a8cfcfe9f98be58ffcf44f6cfda8579dbaedceee578bfd1fb554b6e185e9315425ef0a3fc69d17ede93fc7c46357990f7acfdb8216ea52f604b9f12033688caa4b04adecfc926b3f6ca25bcb5432905e3f30ccbf10cf0f2d00858ba2bbd2702b8d4a7a7c744fbaa2fa35b1c586020d6"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x845}, 0x24008004) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8005}, 0x44004) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}, 0x1, 0x700}, 0x0) 4.094375298s ago: executing program 3 (id=19145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000010010000900000005"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000001c00)=r3) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000340), &(0x7f00000001c0), 0x20000402, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20) 2.263381013s ago: executing program 0 (id=19146): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x6, 0x2, 0x0, 0x0, 0xfffd, 0x0, 0xfffd, 0xd, 0x1, 0x1, @multicast2, @remote, {[@lsrr={0x83, 0x3, 0xa9}]}}, "df19aa93e4aa6298"}}}}}, 0x0) sendto$inet(r1, &(0x7f0000000900)="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", 0x142, 0x12, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000001140)=0x7f, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000001180)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f00000011c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 2.120442053s ago: executing program 0 (id=19147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0xfff1, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newtfilter={0xd4, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xa8, 0x2, [@TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0x401, 0x5}, {0x8001, 0xfb86, 0xffffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x5, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000640)=ANY=[], 0xfdef) 960.667696ms ago: executing program 1 (id=19148): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x42}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r1, 0x607d8000) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000001e1401003dbd01000100000008"], 0x18}}, 0x2000481c) socket$nl_sock_diag(0x10, 0x3, 0x4) 892.660599ms ago: executing program 4 (id=19149): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fcd3fd00004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 769.831566ms ago: executing program 2 (id=19150): socket$pppoe(0x18, 0x1, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000714010000000000000000000800", @ANYRES32=r1], 0x30}}, 0x94) 677.268425ms ago: executing program 0 (id=19151): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000640), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x3}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) 621.500407ms ago: executing program 3 (id=19152): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x6}]}, 0x24}}, 0x0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), r0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x1, 0x100, 0x100, 0x100, 0x3, 0x4}, 0x1c) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000240)={{0xffffffffffffffff, &(0x7f0000000040)='NET_DM\x00', 0x80, &(0x7f00000000c0)={@_ha_fsid={[0x1, 0x4]}, {0x94f8, 0x4a, 0x9, 0x1}}, 0x7fffffff, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x4}, {[0x6, 0x9, 0x8, 0x96c00000]}, 0xd9, 0x27, &(0x7f0000000200)=""/39}) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x6c, 0x4, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_HOOK={0x4c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'gre0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd490eba}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x24, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x17, 0x0, 0x0, @u64}, @typed={0x4, 0x19}]}, 0x24}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) write(0xffffffffffffffff, &(0x7f0000000014)="050001", 0x3) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB='='], 0x20) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x0, 0x0, {0x2}}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002400)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2fe4a74041c1ce1c}, 0x48) 594.016668ms ago: executing program 1 (id=19153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40480, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x8397cfd36601e9d7}, {0xffff, 0xffff}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x3, 0x7fffffff, 0x635d, 0x5, 0xffffffff, 0x407}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40c8844}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600602fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 443.651416ms ago: executing program 0 (id=19154): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff3207c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 375.635953ms ago: executing program 3 (id=19155): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000900), 0x3a, 0x10, &(0x7f0000000980), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 319.069648ms ago: executing program 2 (id=19156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xb, 0x0, 0x5, 0x80000001, 0x7}, 0x41}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000004c0), 0x56) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000600)="27030200dc0f14000e0003000324c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 181.418919ms ago: executing program 4 (id=19157): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$l2tp(0x2, 0x2, 0x73) write$cgroup_subtree(r1, 0x0, 0x32600) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x5, &(0x7f0000000dc0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2c9f6}]}, &(0x7f0000000e00)='GPL\x00', 0x8, 0x9c, &(0x7f0000000e40)=""/156, 0x40f00, 0x40}, 0x94) listen(0xffffffffffffffff, 0x7) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c00), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) 0s ago: executing program 4 (id=19158): r0 = socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) close(r1) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4dff000013001118680907070000000f0000ff3f04000000170a001700000000040014001000030001302564aa58b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)={0x24, r4, 0x1, 0x0, 0xffffffff, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x5, 0x3e}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x2000000}, 0x100) ioctl$XFS_IOC_GETPARENTS_BY_HANDLE(r0, 0xc040583f, &(0x7f0000000180)={{@_ha_fsid={[0x100, 0x4]}, {0x8c, 0x90e9, 0x8, 0x7f}}, {{[0x1, 0x6, 0x80000001, 0x8001]}, 0x0, 0x2, 0x4, 0x0, &(0x7f0000000100)=[{{@_ha_fsid={[0xb, 0x4]}, {0x0, 0x3, 0xfffffff2, 0xfff}}, 0x100, 0x0, '\xce\x00'}, {{@_ha_fsid={[0xffffffff, 0x4]}, {0x53b, 0x3, 0x5, 0x5}}, 0xc, 0x0, 'S/-.\x00'}, {{@_ha_fsid={[0x2, 0xfff]}, {0x9, 0x2, 0x5, 0x10001}}, 0xfffffff9, 0x0, '(\x7f\x00'}]}}) kernel console output (not intermixed with test programs): rocess `syz.1.15549'. [ 1080.931529][ T7384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1081.102772][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.162594][ T7384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1081.359039][ T7393] atomic_op ffff8880543729e0 conn xmit_atomic 0000000000000000 [ 1082.070759][ T1254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.142919][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1082.608835][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803f8ef000: rx timeout, send abort [ 1083.104025][ T7450] netlink: 104 bytes leftover after parsing attributes in process `syz.3.15579'. [ 1083.108897][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803f8ef000: abort rx timeout. Force session deactivation [ 1083.182923][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.930679][ T7478] af_packet: tpacket_rcv: packet too big, clamped from 2916 to 4294967286. macoff=82 [ 1084.057152][ T7485] netlink: 27 bytes leftover after parsing attributes in process `syz.3.15590'. [ 1084.173923][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15591'. [ 1084.223048][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.224665][ T7488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1085.263485][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.302854][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.401501][ T7572] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1087.937620][ T7593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15622'. [ 1087.953289][ T7595] netlink: 'syz.4.15623': attribute type 10 has an invalid length. [ 1088.096321][ T7595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.172202][ T7600] dummy0: left allmulticast mode [ 1088.172230][ T7600] dummy0: left promiscuous mode [ 1088.172461][ T7600] bridge0: port 1(dummy0) entered disabled state [ 1088.339143][ T7600] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1088.548299][ T7602] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1088.596979][ T7602] bond7: (slave lo): Enslaving as an active interface with an up link [ 1088.640800][ T7602] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1088.667165][ T5773] lo speed is unknown, defaulting to 1000 [ 1088.670054][T27834] lo speed is unknown, defaulting to 1000 [ 1088.672704][ T3816] lo speed is unknown, defaulting to 1000 [ 1089.022549][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15634'. [ 1089.696671][ T7653] netlink: 'syz.0.15643': attribute type 1 has an invalid length. [ 1089.696693][ T7653] netlink: 'syz.0.15643': attribute type 6 has an invalid length. [ 1089.696709][ T7653] netlink: 'syz.0.15643': attribute type 3 has an invalid length. [ 1090.710857][ T7673] ip_tables: iptables: counters copy to user failed while replacing table [ 1091.352949][ T7693] netlink: 27 bytes leftover after parsing attributes in process `syz.4.15661'. [ 1092.547402][ T7734] syz_tun: entered allmulticast mode [ 1092.591465][ T7731] syz_tun: left allmulticast mode [ 1092.660746][ T7730] nbd2: detected capacity change from 0 to 63 [ 1092.662108][ T7735] block nbd2: NBD_DISCONNECT [ 1092.677007][ T7735] block nbd2: Disconnected due to user request. [ 1092.678126][ T7735] block nbd2: shutting down sockets [ 1094.969407][ T7784] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1095.019436][ T7781] gtp0: entered promiscuous mode [ 1095.253094][ T7791] netlink: 'syz.3.15700': attribute type 19 has an invalid length. [ 1095.253118][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15700'. [ 1095.711419][ T7791] netlink: 'syz.3.15700': attribute type 19 has an invalid length. [ 1095.711445][ T7791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15700'. [ 1097.686805][ T7849] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15724'. [ 1097.815109][ T7849] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1097.836581][ T7857] veth0_macvtap: Caught tx_queue_len zero misconfig [ 1098.832807][ T7888] netlink: 'syz.0.15739': attribute type 4 has an invalid length. [ 1099.791517][ T7911] netlink: 'syz.3.15749': attribute type 4 has an invalid length. [ 1099.982768][ C1] tipc: RX(1000001): key[1] is activated [ 1100.623411][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1100.624929][ C1] ip6_tunnel: ip6tnl5 xmit: Local address not yet configured! [ 1101.309274][ T7942] syzkaller1: entered promiscuous mode [ 1101.309299][ T7942] syzkaller1: entered allmulticast mode [ 1101.623537][ T7951] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1102.758181][ T7988] netlink: 'syz.4.15782': attribute type 1 has an invalid length. [ 1102.818814][ T7988] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1102.843264][ T7994] IPv4: Oversized IP packet from 127.202.26.0 [ 1103.223667][ T8007] syzkaller1: entered promiscuous mode [ 1103.223694][ T8007] syzkaller1: entered allmulticast mode [ 1104.507248][ T8054] netlink: 'syz.3.15807': attribute type 1 has an invalid length. [ 1104.605470][ T8054] bond8: entered promiscuous mode [ 1104.605931][ T8054] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1104.802118][ T8056] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1104.828882][ T8056] bond8: (slave bond9): making interface the new active one [ 1104.828924][ T8056] bond9: entered promiscuous mode [ 1104.832010][ T8056] bond8: (slave bond9): Enslaving as an active interface with an up link [ 1105.309836][ T8071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15814'. [ 1105.310118][ T8071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.15814'. [ 1105.433903][ T8074] pim6reg1: entered promiscuous mode [ 1105.433927][ T8074] pim6reg1: entered allmulticast mode [ 1106.418722][ T8107] netlink: 'syz.4.15830': attribute type 15 has an invalid length. [ 1106.572960][ T8102] veth0: entered promiscuous mode [ 1106.609163][ T8107] netlink: 'syz.4.15830': attribute type 15 has an invalid length. [ 1106.705365][ T1015] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 1106.708828][T20402] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 1106.740098][T20402] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 1106.741142][T20402] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0 [ 1106.817633][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15834'. [ 1106.837628][ T8114] xfrm2: entered promiscuous mode [ 1106.837653][ T8114] xfrm2: entered allmulticast mode [ 1106.838129][ T8114] netlink: 12 bytes leftover after parsing attributes in process `syz.4.15834'. [ 1106.860040][ T8100] veth0: left promiscuous mode [ 1107.506162][ T8134] netlink: 'syz.3.15843': attribute type 21 has an invalid length. [ 1107.506186][ T8134] netlink: 'syz.3.15843': attribute type 22 has an invalid length. [ 1107.506201][ T8134] netlink: 'syz.3.15843': attribute type 23 has an invalid length. [ 1107.506215][ T8134] netlink: 'syz.3.15843': attribute type 25 has an invalid length. [ 1107.506229][ T8134] netlink: 'syz.3.15843': attribute type 26 has an invalid length. [ 1107.506244][ T8134] netlink: 16 bytes leftover after parsing attributes in process `syz.3.15843'. [ 1107.855728][ T8142] netlink: 'syz.1.15844': attribute type 12 has an invalid length. [ 1107.917502][ T8145] IPv6: NLM_F_CREATE should be specified when creating new route [ 1107.922413][ T8145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1107.922430][ T8145] IPv6: NLM_F_CREATE should be set when creating new route [ 1108.153107][ T8158] netlink: 27 bytes leftover after parsing attributes in process `syz.4.15850'. [ 1108.456680][ T8169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15855'. [ 1108.531279][ T8171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15856'. [ 1108.554616][ T8171] netlink: 20 bytes leftover after parsing attributes in process `syz.3.15856'. [ 1109.087692][ T8188] netlink: 112 bytes leftover after parsing attributes in process `syz.3.15862'. [ 1113.160691][ T8212] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.191337][ T8226] netlink: 'syz.1.15877': attribute type 1 has an invalid length. [ 1113.510316][ T8226] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1113.551753][ T8234] No such timeout policy "syz1" [ 1113.641315][ T8228] bond3: (slave geneve5): making interface the new active one [ 1113.655121][ T8228] bond3: (slave geneve5): Enslaving as an active interface with an up link [ 1113.967863][ T8212] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.330471][ T8212] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.448033][ T8212] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.733773][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.734119][ T3723] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.734160][ T3723] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.734195][ T3723] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1115.116398][ T8264] geneve4: entered promiscuous mode [ 1115.132972][ T1015] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 37220 - 0 [ 1115.133020][ T1015] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 37220 - 0 [ 1115.133057][ T1015] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 37220 - 0 [ 1115.133093][ T1015] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 37220 - 0 [ 1115.388376][ T8269] ip_tables: iptables: counters copy to user failed while replacing table [ 1115.868142][ T8287] netlink: 'syz.4.15899': attribute type 4 has an invalid length. [ 1115.988679][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.287369][ T8301] mac80211_hwsim hwsim2 syzkaller0: Caught tx_queue_len zero misconfig [ 1116.866627][ T8317] netlink: 176 bytes leftover after parsing attributes in process `syz.2.15910'. [ 1116.986280][ T8321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.15913'. [ 1117.121891][ T8321] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1117.130761][ T8323] bond4: option ad_select: unable to set because the bond device is up [ 1117.826205][ T8344] netlink: 'syz.3.15922': attribute type 6 has an invalid length. [ 1117.996909][ T8347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15923'. [ 1118.037450][ T8350] netlink: 'syz.3.15925': attribute type 6 has an invalid length. [ 1118.439613][ T8360] gre0: Caught tx_queue_len zero misconfig [ 1118.951787][ T8377] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1119.028033][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15940'. [ 1119.107630][ T8381] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 1119.126964][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.15940'. [ 1119.314068][ T8386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15941'. [ 1119.346666][ T8386] IPv6: sit2: Disabled Multicast RS [ 1120.310695][ T8402] netlink: 16 bytes leftover after parsing attributes in process `syz.2.15947'. [ 1124.905226][ T8535] netlink: 160 bytes leftover after parsing attributes in process `syz.1.16001'. [ 1125.248190][ T8547] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16006'. [ 1125.947766][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16018'. [ 1125.948302][ T8571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16018'. [ 1126.021467][ T8573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16019'. [ 1126.021510][ T8573] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16019'. [ 1126.108891][ T8575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16019'. [ 1126.108932][ T8575] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16019'. [ 1126.480677][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880570f0c00: rx timeout, send abort [ 1126.648694][ T8594] ip6gretap0: entered promiscuous mode [ 1126.662683][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16030'. [ 1126.980743][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880570f0c00: abort rx timeout. Force session deactivation [ 1127.198524][ T8607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16033'. [ 1129.509733][ T8654] ifb0: entered allmulticast mode [ 1130.025575][ T8672] netlink: 'syz.2.16057': attribute type 1 has an invalid length. [ 1130.243053][ T8672] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1130.338726][ T8676] bond8: (slave geneve5): making interface the new active one [ 1130.361995][ T8676] bond8: (slave geneve5): Enslaving as an active interface with an up link [ 1130.933927][ T8705] syzkaller1: entered promiscuous mode [ 1130.933954][ T8705] syzkaller1: entered allmulticast mode [ 1131.855469][ T8724] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1132.108567][ T8729] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1132.291984][ T8733] syzkaller1: entered promiscuous mode [ 1132.292017][ T8733] syzkaller1: entered allmulticast mode [ 1133.583044][ T8768] bridge4: entered promiscuous mode [ 1133.583138][ T8768] bridge4: entered allmulticast mode [ 1134.032134][ T8778] __nla_validate_parse: 5 callbacks suppressed [ 1134.032158][ T8778] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16100'. [ 1134.817771][ T8803] sit4: entered allmulticast mode [ 1135.055666][ T8809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16113'. [ 1135.497496][ T8822] netlink: 16 bytes leftover after parsing attributes in process `syz.1.16116'. [ 1135.644779][ T8830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16120'. [ 1135.644814][ T8830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16120'. [ 1135.708459][ T8831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16120'. [ 1135.708498][ T8831] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16120'. [ 1135.827086][ T8830] gretap0: entered promiscuous mode [ 1135.854529][ T8830] gretap0: left promiscuous mode [ 1136.031011][ T8831] gretap0: entered promiscuous mode [ 1136.043925][ T8831] gretap0: left promiscuous mode [ 1137.141138][ T8872] netlink: 'syz.2.16140': attribute type 1 has an invalid length. [ 1137.315211][ T8872] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1137.338634][ T8877] bond9: option tlb_dynamic_lb: unable to set because the bond device is up [ 1137.596929][ T8882] netlink: 7 bytes leftover after parsing attributes in process `syz.3.16141'. [ 1137.892049][ T8896] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1138.774232][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16160'. [ 1138.774256][ T8927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16160'. [ 1138.774283][ T8927] netlink: 'syz.2.16160': attribute type 12 has an invalid length. [ 1138.774298][ T8927] netlink: 'syz.2.16160': attribute type 14 has an invalid length. [ 1138.861578][ T8927] netlink: 'syz.2.16160': attribute type 12 has an invalid length. [ 1138.861603][ T8927] netlink: 'syz.2.16160': attribute type 14 has an invalid length. [ 1138.897426][ T3733] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.897499][ T3733] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.897536][ T3733] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1138.897570][ T3733] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1139.482831][ T8941] __nla_validate_parse: 2 callbacks suppressed [ 1139.482852][ T8941] netlink: 1404 bytes leftover after parsing attributes in process `syz.0.16169'. [ 1140.055594][ T8967] netlink: 1335 bytes leftover after parsing attributes in process `syz.4.16178'. [ 1140.984950][ T8982] netlink: 'syz.4.16187': attribute type 21 has an invalid length. [ 1140.985022][ T8982] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16187'. [ 1141.955583][ T9002] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16197'. [ 1142.167828][ T9008] syzkaller1: entered allmulticast mode [ 1143.374083][ T9029] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1143.442908][ T9033] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1143.522268][ T9029] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1144.214874][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16216'. [ 1145.418387][ T9084] syzkaller1: entered promiscuous mode [ 1145.418599][ T9084] syzkaller1: entered allmulticast mode [ 1147.060063][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16246'. [ 1147.503540][ T9135] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1147.503582][ T9135] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1147.503612][ T9135] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1147.631003][ T9135] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1147.631062][ T9135] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1147.631094][ T9135] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1147.807985][ T9135] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1147.808025][ T9135] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1147.808055][ T9135] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1148.068412][ T9135] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1148.068452][ T9135] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1148.068481][ T9135] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 1149.443080][ T9160] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1149.492808][ T3721] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.492847][ T3721] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.492907][ T3721] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1149.578525][ T9164] netlink: 10 bytes leftover after parsing attributes in process `syz.2.16261'. [ 1149.653551][ T3723] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.653592][ T3723] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.653620][ T3723] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1149.743203][ T3721] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.743242][ T3721] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.743271][ T3721] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1149.743374][ T3721] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1149.743412][ T3721] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1149.743440][ T3721] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1150.137310][ T9172] netlink: 'syz.2.16265': attribute type 3 has an invalid length. [ 1150.219732][ T9175] netlink: 'syz.1.16266': attribute type 1 has an invalid length. [ 1150.444417][ T9175] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1150.613905][ T9177] bond5: (slave gretap2): making interface the new active one [ 1150.624083][ T9177] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 1150.816125][ T9187] ip_tables: iptables: counters copy to user failed while replacing table [ 1150.820397][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16272'. [ 1150.820418][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16272'. [ 1150.820432][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16272'. [ 1150.820447][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16272'. [ 1150.820462][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16272'. [ 1150.820476][ T9189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16272'. [ 1150.820490][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16272'. [ 1150.820505][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16272'. [ 1150.935402][ T9187] xt_hashlimit: size too large, truncated to 1048576 [ 1152.306283][ T9229] netlink: 'syz.4.16284': attribute type 1 has an invalid length. [ 1152.306307][ T9229] netlink: 'syz.4.16284': attribute type 2 has an invalid length. [ 1152.464770][ T9237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.518242][ T9231] sctp: [Deprecated]: syz.0.16286 (pid 9231) Use of int in max_burst socket option. [ 1152.518242][ T9231] Use struct sctp_assoc_value instead [ 1152.561908][ T9237] batman_adv: batadv0: Adding interface: veth0 [ 1152.561928][ T9237] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.629796][ T9237] batman_adv: batadv0: Interface activated: veth0 [ 1152.629866][ T9243] batman_adv: batadv0: Interface deactivated: veth0 [ 1152.629883][ T9243] batman_adv: batadv0: Removing interface: veth0 [ 1153.917279][ T9280] __nla_validate_parse: 8 callbacks suppressed [ 1153.917301][ T9280] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16308'. [ 1153.973983][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16308'. [ 1154.344881][ T30] audit: type=1800 audit(1793629610.314:20): pid=9290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16313" name=B702 dev="tmpfs" ino=16392 res=0 errno=-22 [ 1154.618328][ T9294] team0: Mode "l" not found [ 1155.743453][ T9335] bond0: entered promiscuous mode [ 1155.743477][ T9335] bond4: entered promiscuous mode [ 1155.890954][ T9341] syzkaller1: entered promiscuous mode [ 1155.890988][ T9341] syzkaller1: entered allmulticast mode [ 1156.433586][ T9360] netlink: 'syz.1.16343': attribute type 1 has an invalid length. [ 1156.565038][ T9360] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1156.670765][ T9368] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16346'. [ 1157.111725][ T9381] bond0: invalid NS target ff00:0:0:f9:: specified for addition [ 1157.111760][ T9381] bond0: option ns_ip6_target: invalid value (18446744073709551615) [ 1160.501885][ T9472] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1160.621078][ T9472] bond10 (unregistering): Released all slaves [ 1161.513892][ T9497] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16391'. [ 1161.516945][ T9497] ip_tables: iptables: counters copy to user failed while replacing table [ 1162.403529][ T9516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16400'. [ 1162.952172][ T9533] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16407'. [ 1163.748213][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16415'. [ 1163.748240][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16415'. [ 1166.134916][ T9551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16415'. [ 1166.134944][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16415'. [ 1166.928882][ T9575] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16424'. [ 1168.294246][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16442'. [ 1168.294273][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16442'. [ 1168.294300][ T9618] netlink: 'syz.1.16442': attribute type 6 has an invalid length. [ 1168.325591][ T9618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16442'. [ 1168.325616][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16442'. [ 1168.325643][ T9618] netlink: 'syz.1.16442': attribute type 6 has an invalid length. [ 1169.296695][ T9563] udevd[9563]: setting owner of /dev/rfcomm2 to uid=0, gid=18 failed: No such file or directory [ 1170.251542][ T30] audit: type=1800 audit(1793629626.214:21): pid=9687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16469" name=303030303030303030303030303030303030303030303016 dev="tmpfs" ino=16573 res=0 errno=-22 [ 1170.593419][ T9697] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1177.188086][ T9818] netlink: 'syz.3.16525': attribute type 18 has an invalid length. [ 1177.188111][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16525'. [ 1177.425224][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.479363][ T9823] netlink: 'syz.0.16526': attribute type 3 has an invalid length. [ 1177.479388][ T9823] netlink: 646 bytes leftover after parsing attributes in process `syz.0.16526'. [ 1178.723640][ T9818] netlink: 'syz.3.16525': attribute type 18 has an invalid length. [ 1178.723672][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16525'. [ 1179.154329][ T9826] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1180.771250][ T9878] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16548'. [ 1180.917877][ T9881] netlink: 'syz.2.16549': attribute type 1 has an invalid length. [ 1180.917901][ T9881] netlink: 'syz.2.16549': attribute type 22 has an invalid length. [ 1181.080707][ T9882] netlink: 'syz.4.16550': attribute type 1 has an invalid length. [ 1182.074934][ T9920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16566'. [ 1182.385443][ T9924] netlink: 'syz.3.16566': attribute type 1 has an invalid length. [ 1182.749547][ T9938] ip_tables: iptables: counters copy to user failed while replacing table [ 1183.301788][ T9944] tipc: Enabled bearer , priority 0 [ 1183.416219][ T9946] netlink: 'syz.0.16575': attribute type 1 has an invalid length. [ 1183.566339][ T9956] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16579'. [ 1183.583986][ T9948] gretap2: entered allmulticast mode [ 1183.598930][ T9948] bond8: (slave gretap2): making interface the new active one [ 1183.600862][ T9948] bond8: (slave gretap2): Enslaving as an active interface with an up link [ 1184.113149][ T9958] syzkaller1: entered promiscuous mode [ 1184.113178][ T9958] syzkaller1: entered allmulticast mode [ 1185.404714][T10000] netlink: 'syz.1.16593': attribute type 1 has an invalid length. [ 1185.737731][ T30] audit: type=1800 audit(1793629641.704:22): pid=10008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.16596" name="blkio.bfq.time_recursive" dev="tmpfs" ino=16691 res=0 errno=-22 [ 1186.474263][T10025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16604'. [ 1186.499316][T10024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16603'. [ 1186.503983][T10025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16604'. [ 1187.053391][T10038] netlink: 'syz.2.16609': attribute type 1 has an invalid length. [ 1187.672990][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1187.774330][T10049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16614'. [ 1187.774545][T10049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16614'. [ 1188.101093][T10057] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16618'. [ 1189.389061][T10091] ip_tables: iptables: counters copy to user failed while replacing table [ 1190.636853][T10123] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1191.211841][T10136] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1191.299916][T10136] syzkaller1: entered promiscuous mode [ 1191.299942][T10136] syzkaller1: entered allmulticast mode [ 1192.575901][T10159] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1193.426877][T10178] syzkaller1: entered promiscuous mode [ 1193.426903][T10178] syzkaller1: entered allmulticast mode [ 1193.574744][T10177] ip_tables: iptables: counters copy to user failed while replacing table [ 1194.133093][T10194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16671'. [ 1194.371482][T10203] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16676'. [ 1194.832050][T10217] netlink: 140 bytes leftover after parsing attributes in process `syz.0.16680'. [ 1194.845911][T10217] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16680'. [ 1194.950497][T10220] syzkaller1: entered promiscuous mode [ 1194.950648][T10220] syzkaller1: entered allmulticast mode [ 1195.070359][T10222] ±ÿ†ˆ¬hËdtÍ: renamed from lo [ 1195.072295][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880564bd000: rx timeout, send abort [ 1195.192703][T10226] netlink: 72 bytes leftover after parsing attributes in process `syz.4.16686'. [ 1195.572347][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880564bd000: abort rx timeout. Force session deactivation [ 1196.289179][T10237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16690'. [ 1196.289218][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16690'. [ 1198.129088][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16689'. [ 1198.180946][T10237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16690'. [ 1198.183752][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16690'. [ 1198.914993][T10263] ip_tables: iptables: counters copy to user failed while replacing table [ 1199.220599][T10272] netlink: 268 bytes leftover after parsing attributes in process `syz.1.16703'. [ 1199.220772][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16703'. [ 1199.419844][T10279] netlink: 'syz.4.16708': attribute type 1 has an invalid length. [ 1199.561344][T10279] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1199.596202][T10283] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 1199.699517][T10283] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1199.716658][T10283] bond7: (slave wlan1): Opening slave failed [ 1201.308949][T10327] ip_tables: iptables: counters copy to user failed while replacing table [ 1202.105111][T10344] ip_tables: iptables: counters copy to user failed while replacing table [ 1202.107813][T10344] ip_tables: iptables: counters copy to user failed while replacing table [ 1202.667004][T10352] ip_tables: iptables: counters copy to user failed while replacing table [ 1203.296179][T10365] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16736'. [ 1203.485639][T10372] tipc: Enabled bearer , priority 0 [ 1203.507312][T10368] tipc: Resetting bearer [ 1203.659609][T10368] tipc: Disabling bearer [ 1204.164227][T10389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16747'. [ 1204.271180][T10392] syzkaller1: entered promiscuous mode [ 1204.271285][T10392] syzkaller1: entered allmulticast mode [ 1205.042681][T10418] ip_tables: iptables: counters copy to user failed while replacing table [ 1206.396523][T10448] netlink: 'syz.1.16771': attribute type 1 has an invalid length. [ 1206.513679][T10448] bond7: entered promiscuous mode [ 1206.513746][T10448] bond7: entered allmulticast mode [ 1206.514168][T10448] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1206.557742][T10450] erspan2: entered allmulticast mode [ 1206.600849][T10450] bond7: (slave erspan2): making interface the new active one [ 1206.600874][T10450] erspan2: entered promiscuous mode [ 1206.623487][T10450] bond7: (slave erspan2): Enslaving as an active interface with an up link [ 1207.641417][T10467] netlink: 'syz.4.16779': attribute type 1 has an invalid length. [ 1207.728519][T10467] bond8: entered promiscuous mode [ 1207.728955][T10467] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1207.894939][T10467] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1207.898585][T10467] bond8: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 1207.898609][T10467] bond8: (slave ip6gre4): Setting fail_over_mac to active for active-backup mode [ 1207.976013][T10467] bond8: (slave ip6gre4): making interface the new active one [ 1207.976036][T10467] ip6gre4: entered promiscuous mode [ 1208.025560][T10467] bond8: (slave ip6gre4): Enslaving as an active interface with an up link [ 1208.095059][T10478] ip_tables: iptables: counters copy to user failed while replacing table [ 1208.283996][T10480] syzkaller0: entered promiscuous mode [ 1208.284021][T10480] syzkaller0: entered allmulticast mode [ 1208.606459][T10491] netlink: 'syz.2.16787': attribute type 1 has an invalid length. [ 1208.606481][T10491] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16787'. [ 1208.789532][T10496] tipc: New replicast peer: 172.20.20.187 [ 1208.789755][T10496] tipc: Enabled bearer , priority 10 [ 1209.356937][T10514] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1210.037107][T10533] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1210.106488][T10533] xt_hashlimit: size too large, truncated to 1048576 [ 1210.275663][T10540] ip_tables: iptables: counters copy to user failed while replacing table [ 1210.348037][T10544] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16801'. [ 1210.481009][T10540] syzkaller1: entered promiscuous mode [ 1210.481036][T10540] syzkaller1: entered allmulticast mode [ 1210.806784][T10551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16805'. [ 1211.841432][T10590] ip_tables: iptables: counters copy to user failed while replacing table [ 1212.951119][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16826'. [ 1213.149003][T10607] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16826'. [ 1213.357903][T10613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1213.503344][T10613] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1215.705828][T10666] xt_hashlimit: size too large, truncated to 1048576 [ 1216.105861][T10677] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16850'. [ 1216.221703][T10681] xt_hashlimit: size too large, truncated to 1048576 [ 1216.221725][T10681] xt_hashlimit: max too large, truncated to 1048576 [ 1216.311995][T10680] netlink: 'syz.3.16851': attribute type 1 has an invalid length. [ 1216.330951][T10682] netlink: 'syz.2.16850': attribute type 1 has an invalid length. [ 1216.465323][T10680] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1216.927071][T10697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16856'. [ 1216.927113][T10697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16856'. [ 1217.581391][T10705] netlink: 'syz.4.16859': attribute type 1 has an invalid length. [ 1217.615098][T10706] netlink: 'syz.0.16860': attribute type 1 has an invalid length. [ 1217.718022][T10713] xt_hashlimit: size too large, truncated to 1048576 [ 1217.770532][T10705] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1217.820345][T10712] ip_tables: iptables: counters copy to user failed while replacing table [ 1218.056061][T10710] bond9: (slave geneve5): making interface the new active one [ 1218.056591][T10710] bond9: (slave geneve5): Enslaving as an active interface with an up link [ 1218.435953][T10725] netlink: 'syz.4.16863': attribute type 6 has an invalid length. [ 1218.435974][T10725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16863'. [ 1218.794401][ T3724] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1218.794758][ T3724] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1218.794808][ T3724] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1218.794845][ T3724] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1219.483429][T10749] ip_tables: iptables: counters copy to user failed while replacing table [ 1220.785203][T10769] bond8: entered allmulticast mode [ 1220.785229][T10769] ip6gre4: entered allmulticast mode [ 1220.821789][T10768] bond8: left allmulticast mode [ 1220.821812][T10768] ip6gre4: left allmulticast mode [ 1221.108848][T10774] netlink: 'syz.0.16882': attribute type 1 has an invalid length. [ 1221.258097][T10774] bond10: entered promiscuous mode [ 1221.258331][T10774] bond10: entered allmulticast mode [ 1221.280875][T10774] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1221.451691][T10778] erspan1: entered allmulticast mode [ 1221.498355][T10778] bond10: (slave erspan1): making interface the new active one [ 1221.498382][T10778] erspan1: entered promiscuous mode [ 1221.502055][T10778] bond10: (slave erspan1): Enslaving as an active interface with an up link [ 1221.697240][T10804] netlink: 'syz.3.16889': attribute type 2 has an invalid length. [ 1221.697268][T10804] netlink: 'syz.3.16889': attribute type 2 has an invalid length. [ 1221.791417][T10799] ip6gretap2: entered allmulticast mode [ 1222.085599][T10812] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.16891'. [ 1222.114215][T10812] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.16891'. [ 1223.030219][T10832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16898'. [ 1223.099018][T10832] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1223.187122][T10832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1223.207322][T10832] bond11: (slave bond0): Enslaving as an active interface with an up link [ 1223.848059][T10846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16902'. [ 1225.162413][T10890] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1225.166180][T10889] syzkaller1: entered promiscuous mode [ 1225.166241][T10889] syzkaller1: entered allmulticast mode [ 1225.202458][T10890] batman_adv: batadv0: Adding interface: veth0 [ 1225.202481][T10890] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1225.207851][T10890] batman_adv: batadv0: Interface activated: veth0 [ 1225.243958][T10890] batman_adv: batadv0: Interface deactivated: veth0 [ 1225.243984][T10890] batman_adv: batadv0: Removing interface: veth0 [ 1225.385077][T10895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16922'. [ 1225.447270][T10896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16922'. [ 1228.750754][T10968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16943'. [ 1229.771521][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16956'. [ 1229.771549][T10995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16956'. [ 1230.116020][T11002] netlink: 'syz.2.16958': attribute type 1 has an invalid length. [ 1230.166646][T11002] netlink: 'syz.2.16958': attribute type 1 has an invalid length. [ 1230.557771][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16963'. [ 1230.800339][T11022] syzkaller1: entered promiscuous mode [ 1230.800364][T11022] syzkaller1: entered allmulticast mode [ 1231.120315][T11030] netlink: 7 bytes leftover after parsing attributes in process `syz.0.16969'. [ 1232.632275][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16982'. [ 1232.696635][T11068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16982'. [ 1234.306234][T11125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17000'. [ 1234.514511][T11131] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17003'. [ 1234.566297][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17004'. [ 1234.616900][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17004'. [ 1235.543163][T11158] PKCS7: Unknown OID: [4] (bad) [ 1235.543187][T11158] PKCS7: Only support pkcs7_signedData type [ 1236.264576][T11177] netlink: 'syz.0.17021': attribute type 3 has an invalid length. [ 1236.465910][T11179] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.17023'. [ 1236.469841][T11179] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.17023'. [ 1238.412088][T11224] gretap1: entered promiscuous mode [ 1238.484288][T11228] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17040'. [ 1238.769141][T11239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17042'. [ 1238.867193][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.623317][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17072'. [ 1244.338055][T11406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17106'. [ 1244.338097][T11406] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17106'. [ 1244.400993][T11407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17106'. [ 1244.401033][T11407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17106'. [ 1247.223672][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17121'. [ 1247.335147][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17121'. [ 1247.650343][T11461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17128'. [ 1247.944868][T11466] netlink: 'syz.0.17130': attribute type 4 has an invalid length. [ 1248.621034][T11483] netlink: 'syz.0.17136': attribute type 83 has an invalid length. [ 1250.675918][T11526] openvswitch: netlink: Missing valid actions attribute. [ 1250.675979][T11526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1251.352058][T11542] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1252.769031][T11586] xt_hashlimit: size too large, truncated to 1048576 [ 1253.149628][T11597] netlink: 'syz.2.17176': attribute type 39 has an invalid length. [ 1254.457018][T11632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17190'. [ 1254.638832][T11636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17192'. [ 1254.768946][T11639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17192'. [ 1254.807683][T11640] netlink: 'syz.3.17193': attribute type 1 has an invalid length. [ 1254.880254][T11640] gretap2: entered allmulticast mode [ 1254.893166][T11640] bond12: (slave gretap2): making interface the new active one [ 1254.893886][T11640] bond12: (slave gretap2): Enslaving as an active interface with an up link [ 1255.336401][T11655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17200'. [ 1255.341218][T11655] ip_tables: iptables: counters copy to user failed while replacing table [ 1259.008620][T11758] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17236'. [ 1259.139742][T11761] syzkaller1: entered promiscuous mode [ 1259.139765][T11761] syzkaller1: entered allmulticast mode [ 1259.509103][T11766] syzkaller1: entered promiscuous mode [ 1259.509130][T11766] syzkaller1: entered allmulticast mode [ 1259.635406][T11771] syzkaller1: entered promiscuous mode [ 1259.635434][T11771] syzkaller1: entered allmulticast mode [ 1260.883702][T11800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17250'. [ 1261.286719][T11814] smc: net device lo applied user defined pnetid SYZ2 [ 1261.289369][T11814] smc: net device lo erased user defined pnetid SYZ2 [ 1262.670787][T11848] netlink: 'syz.1.17266': attribute type 2 has an invalid length. [ 1262.670813][T11848] nbd: illegal input index -2130444284 [ 1262.679089][T11848] nbd: couldn't find device at index 1 [ 1262.865968][T11857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17269'. [ 1262.878202][T11856] GUP no longer grows the stack in syz.1.17270 (11856): 200000003000-20000000a000 (200000001000) [ 1262.878301][T11856] CPU: 1 UID: 0 PID: 11856 Comm: syz.1.17270 Not tainted syzkaller #0 PREEMPT(full) [ 1262.878372][T11856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1262.878419][T11856] Call Trace: [ 1262.878456][T11856] [ 1262.878480][T11856] dump_stack_lvl+0xe8/0x150 [ 1262.878602][T11856] __get_user_pages+0x23b1/0x2750 [ 1262.878698][T11856] ? lock_acquire+0x115/0x350 [ 1262.878830][T11856] ? __gup_longterm_locked+0xcb2/0x16f0 [ 1262.878914][T11856] ? rcu_is_watching+0x16/0xb0 [ 1262.879028][T11856] __gup_longterm_locked+0xe24/0x16f0 [ 1262.879187][T11856] gup_fast_fallback+0x360/0x27a0 [ 1262.879429][T11856] ? __pfx_gup_fast_fallback+0x10/0x10 [ 1262.879516][T11856] ? is_valid_gup_args+0x11f/0x200 [ 1262.879588][T11856] ? get_user_pages_fast+0x4d/0xb0 [ 1262.879675][T11856] __iov_iter_get_pages_alloc+0x378/0xa40 [ 1262.879773][T11856] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1262.879867][T11856] ? __fget_files+0x2a/0x420 [ 1262.879966][T11856] iov_iter_get_pages2+0x5e/0xa0 [ 1262.880046][T11856] __se_sys_vmsplice+0x844/0x16f0 [ 1262.880193][T11856] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 1262.880281][T11856] ? __pfx_futex_wait+0x10/0x10 [ 1262.880570][T11856] do_syscall_64+0x166/0x520 [ 1262.880637][T11856] ? trace_irq_disable+0x3b/0x140 [ 1262.880719][T11856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.880782][T11856] ? clear_bhb_loop+0x70/0xc0 [ 1262.880857][T11856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.880918][T11856] RIP: 0033:0x7f0c9c79fb19 [ 1262.880973][T11856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.881035][T11856] RSP: 002b:00007f0c9d6a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 1262.881098][T11856] RAX: ffffffffffffffda RBX: 00007f0c9ca25fa0 RCX: 00007f0c9c79fb19 [ 1262.881147][T11856] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1262.881190][T11856] RBP: 00007f0c9c837b70 R08: 0000000000000000 R09: 0000000000000000 [ 1262.881229][T11856] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1262.881270][T11856] R13: 00007f0c9ca26038 R14: 00007f0c9ca25fa0 R15: 00007ffd3bba5c58 [ 1262.881377][T11856] [ 1263.197866][T11857] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1263.417759][T11861] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1263.701722][T11864] syzkaller1: entered promiscuous mode [ 1263.701934][T11864] syzkaller1: entered allmulticast mode [ 1264.053475][T11881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17278'. [ 1264.078296][T11881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17278'. [ 1264.196609][T11887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17280'. [ 1264.255238][T11892] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17280'. [ 1265.038820][T11915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17289'. [ 1265.232433][T11915] bond8: entered promiscuous mode [ 1265.241743][T11915] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1265.860893][T11919] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1265.885612][T11919] bond8: (slave xfrm2): The slave device specified does not support setting the MAC address [ 1265.886203][T11919] bond8: (slave xfrm2): Error -95 calling set_mac_address [ 1266.431692][T11941] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1266.986275][T11947] netlink: 'syz.0.17301': attribute type 1 has an invalid length. [ 1267.162076][T11947] bond11: entered promiscuous mode [ 1267.187094][T11947] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1267.375682][T11953] veth15: entered promiscuous mode [ 1267.400387][T11953] bond11: (slave veth15): Enslaving as a backup interface with a down link [ 1270.560015][T11970] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17309'. [ 1270.606737][T11970] bond12: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1270.610278][T11970] bond12 (unregistering): Released all slaves [ 1270.646494][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17308'. [ 1270.646518][T11973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17308'. [ 1270.699680][T11974] syz_tun: entered allmulticast mode [ 1270.716035][T11975] smbdirect: ib_dev[s`z1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1270.716076][T11975] smbdirect: ib_dev[s`z1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1270.716122][T11975] smbdirect: ib_dev[s`z1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1271.081789][T11967] syz_tun: left allmulticast mode [ 1271.508271][T11991] NFSD: Failed to start, no listeners configured. [ 1271.615657][T11995] netlink: 'syz.2.17317': attribute type 219 has an invalid length. [ 1271.697108][T11988] sctp: [Deprecated]: syz.1.17314 (pid 11988) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1271.697108][T11988] Use struct sctp_sack_info instead [ 1272.132367][T12004] ip_tables: iptables: counters copy to user failed while replacing table [ 1272.458628][T12018] sctp: [Deprecated]: syz.4.17325 (pid 12018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1272.458628][T12018] Use struct sctp_sack_info instead [ 1272.771953][T12021] syzkaller1: entered promiscuous mode [ 1272.771978][T12021] syzkaller1: entered allmulticast mode [ 1274.473684][T12052] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17337'. [ 1274.894720][T12063] syzkaller1: entered promiscuous mode [ 1274.894745][T12063] syzkaller1: entered allmulticast mode [ 1275.185523][T12073] netlink: 'syz.0.17344': attribute type 83 has an invalid length. [ 1275.752586][T12091] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17353'. [ 1277.644488][T12127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17367'. [ 1278.022250][T12132] netlink: 316 bytes leftover after parsing attributes in process `syz.1.17369'. [ 1278.759717][T12163] ip_tables: iptables: counters copy to user failed while replacing table [ 1279.178445][T12174] syzkaller1: entered promiscuous mode [ 1279.178472][T12174] syzkaller1: entered allmulticast mode [ 1279.475999][T12176] nbd0: detected capacity change from 0 to 63 [ 1279.487854][T12180] block nbd0: NBD_DISCONNECT [ 1279.488146][T12180] block nbd0: Disconnected due to user request. [ 1279.488188][T12180] block nbd0: shutting down sockets [ 1280.421436][T12202] netlink: 'syz.2.17390': attribute type 4 has an invalid length. [ 1280.469741][T12204] netlink: 'syz.2.17390': attribute type 4 has an invalid length. [ 1280.628832][T12203] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1280.743468][T12212] netlink: 11575 bytes leftover after parsing attributes in process `syz.0.17393'. [ 1280.903939][T12217] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17394'. [ 1281.736732][T12234] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1282.354009][T12246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17408'. [ 1282.447676][T12246] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1282.488570][T12246] erspan0: entered promiscuous mode [ 1282.510615][T12246] debugfs: 'hsr1' already exists in 'hsr' [ 1282.510640][T12246] Cannot create hsr debugfs directory [ 1282.580616][T12248] syzkaller1: entered promiscuous mode [ 1282.580640][T12248] syzkaller1: entered allmulticast mode [ 1283.657810][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17415'. [ 1283.960918][T12284] netlink: 'syz.1.17420': attribute type 10 has an invalid length. [ 1283.960953][T12284] netlink: 55 bytes leftover after parsing attributes in process `syz.1.17420'. [ 1285.735131][T12326] ip_tables: iptables: counters copy to user failed while replacing table [ 1285.738521][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17435'. [ 1285.769635][T12328] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17435'. [ 1286.002905][T12332] netlink: 'syz.2.17438': attribute type 1 has an invalid length. [ 1286.086933][T12332] bond11: entered promiscuous mode [ 1286.087386][T12332] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1286.153037][T12332] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17438'. [ 1286.591799][T12335] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1286.592361][T12335] bond11: (slave gre3): The slave device specified does not support setting the MAC address [ 1286.592383][T12335] bond11: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 1286.757703][T12335] bond11: (slave gre3): making interface the new active one [ 1286.757730][T12335] gre3: entered promiscuous mode [ 1286.761689][T12335] bond11: (slave gre3): Enslaving as an active interface with an up link [ 1286.966409][T12332] bond11 (unregistering): (slave gre3): Releasing backup interface [ 1286.966442][T12332] gre3: left promiscuous mode [ 1287.027249][T12332] bond11 (unregistering): Released all slaves [ 1287.213864][T12350] A link change request failed with some changes committed already. Interface 26±ÿ†ˆ¬hËdtÍ may have been left with an inconsistent configuration, please check. [ 1287.219398][T12356] netlink: 10 bytes leftover after parsing attributes in process `syz.3.17446'. [ 1287.719967][T12372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17452'. [ 1287.845061][T12376] syzkaller1: entered promiscuous mode [ 1287.845086][T12376] syzkaller1: entered allmulticast mode [ 1288.499410][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17450'. [ 1288.499445][T12366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17450'. [ 1288.569058][T12366] bridge0: entered promiscuous mode [ 1288.569085][T12366] bridge0: entered allmulticast mode [ 1288.667749][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17461'. [ 1288.890696][T12401] syzkaller1: entered promiscuous mode [ 1288.890902][T12401] syzkaller1: entered allmulticast mode [ 1289.060391][T12403] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1290.584720][T12422] netlink: 'syz.0.17471': attribute type 12 has an invalid length. [ 1290.585650][T12423] syzkaller1: entered promiscuous mode [ 1290.585672][T12423] syzkaller1: entered allmulticast mode [ 1290.639661][T12431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17473'. [ 1291.137744][T12446] ip_tables: iptables: counters copy to user failed while replacing table [ 1291.681279][T12463] netlink: 'syz.3.17485': attribute type 1 has an invalid length. [ 1291.756180][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17485'. [ 1291.756224][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17485'. [ 1291.875760][T12463] bond13: entered promiscuous mode [ 1291.881651][T12463] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1292.038621][T12466] bond13: (slave bridge3): making interface the new active one [ 1292.038646][T12466] bridge3: entered promiscuous mode [ 1292.066471][T12466] bond13: (slave bridge3): Enslaving as an active interface with an up link [ 1293.794583][T12507] syzkaller1: entered promiscuous mode [ 1293.794610][T12507] syzkaller1: entered allmulticast mode [ 1294.632371][T12520] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17504'. [ 1297.260099][T12580] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1299.028451][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17541'. [ 1299.747055][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17547'. [ 1300.212312][T12650] netlink: 'syz.0.17550': attribute type 178 has an invalid length. [ 1300.308199][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.525699][T12655] netlink: 'syz.4.17552': attribute type 1 has an invalid length. [ 1300.660932][T12655] bond11: entered promiscuous mode [ 1300.666925][T12655] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1300.749004][T12658] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1300.749033][T12658] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1300.749051][T12658] bond11: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1301.519548][T12676] netlink: 'syz.1.17560': attribute type 1 has an invalid length. [ 1301.623206][T12676] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1301.815222][T12679] bond9: (slave veth13): Enslaving as an active interface with a down link [ 1301.815386][T12676] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 1301.816078][T12676] bond9: (slave wlan1): Opening slave failed [ 1301.912822][T12689] ip_tables: iptables: counters copy to user failed while replacing table [ 1302.898752][T12713] netlink: 76 bytes leftover after parsing attributes in process `syz.4.17570'. [ 1303.874464][T12738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17579'. [ 1304.112228][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17581'. [ 1304.112264][T12746] netlink: 'syz.1.17581': attribute type 12 has an invalid length. [ 1304.134924][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17581'. [ 1304.134958][T12746] netlink: 'syz.1.17581': attribute type 12 has an invalid length. [ 1304.556776][T12751] netlink: 'syz.1.17584': attribute type 1 has an invalid length. [ 1304.751795][T12751] bond10: entered promiscuous mode [ 1304.763346][T12751] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1304.858599][T12755] bond10: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1304.858628][T12755] bond10: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1304.858646][T12755] bond10: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 1304.926628][T12760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17586'. [ 1305.154823][T12768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17588'. [ 1305.222799][T12761] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1305.224941][T12765] bond14: entered promiscuous mode [ 1305.224960][T12765] veth0_to_bond: entered promiscuous mode [ 1305.231583][T12765] bond14: entered allmulticast mode [ 1305.259589][T12765] veth0_to_bond: entered allmulticast mode [ 1305.280586][T12765] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1306.346896][T12792] syzkaller1: entered promiscuous mode [ 1306.346923][T12792] syzkaller1: entered allmulticast mode [ 1306.443984][T12795] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17599'. [ 1306.483873][T12798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17601'. [ 1306.922201][T12805] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17602'. [ 1307.126462][T12817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17604'. [ 1310.662061][T12838] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17613'. [ 1310.927160][T12846] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1312.056181][T12854] netlink: 14 bytes leftover after parsing attributes in process `syz.4.17618'. [ 1312.226146][T12861] syzkaller1: entered promiscuous mode [ 1312.226172][T12861] syzkaller1: entered allmulticast mode [ 1313.372672][T12898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17631'. [ 1313.469672][T12870] lo: entered promiscuous mode [ 1313.469699][T12870] lo: entered allmulticast mode [ 1313.472171][T12870] bond0: entered promiscuous mode [ 1313.472194][T12870] bond0: entered allmulticast mode [ 1313.494584][T12870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1313.497214][T12870] dummy0: entered promiscuous mode [ 1313.497237][T12870] dummy0: entered allmulticast mode [ 1313.497554][T12870] eql: entered promiscuous mode [ 1313.497571][T12870] eql: entered allmulticast mode [ 1313.499681][T12870] ifb0: entered promiscuous mode [ 1313.499701][T12870] ifb0: entered allmulticast mode [ 1313.500244][T12870] ifb1: entered promiscuous mode [ 1313.500267][T12870] ifb1: entered allmulticast mode [ 1313.502713][T12870] virtio_net virtio1 eth0: entered promiscuous mode [ 1313.502781][T12870] virtio_net virtio1 eth0: entered allmulticast mode [ 1313.510557][T12870] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 1313.510582][T12870] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 1313.510601][T12870] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1313.934717][T12906] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17634'. [ 1314.583903][T12930] syzkaller1: entered promiscuous mode [ 1314.583926][T12930] syzkaller1: entered allmulticast mode [ 1315.120693][T12947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17650'. [ 1315.120722][T12947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17650'. [ 1315.125844][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17650'. [ 1315.125909][T12947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17650'. [ 1316.054379][T12967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17657'. [ 1316.054536][T12967] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17657'. [ 1316.107953][T12969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17657'. [ 1316.107991][T12969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17657'. [ 1316.790444][T12980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17662'. [ 1316.822139][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17662'. [ 1316.860328][T12980] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17662'. [ 1318.985469][T13040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17680'. [ 1319.164900][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17683'. [ 1319.290016][ T3721] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1319.307956][T13054] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1320.283433][T13078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17692'. [ 1321.937091][T13116] gretap2: entered promiscuous mode [ 1322.458459][T13131] syzkaller1: entered promiscuous mode [ 1322.458485][T13131] syzkaller1: entered allmulticast mode [ 1323.022752][ C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1323.705245][T13157] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1323.928195][T13154] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1325.069663][T13207] __nla_validate_parse: 1 callbacks suppressed [ 1325.069684][T13207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17731'. [ 1325.663126][T13223] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17737'. [ 1325.902997][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1327.197901][T13257] netlink: 'syz.0.17749': attribute type 4 has an invalid length. [ 1327.224047][T13257] netlink: 'syz.0.17749': attribute type 4 has an invalid length. [ 1327.556069][T13267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17754'. [ 1327.898878][T13271] sch_tbf: burst 88 is lower than device veth5 mtu (1514) ! [ 1328.425796][T13289] netlink: 'syz.3.17761': attribute type 1 has an invalid length. [ 1328.456058][T13292] netlink: 'syz.1.17760': attribute type 1 has an invalid length. [ 1328.684301][T13292] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1329.066541][T13296] bond11: (slave veth21): Enslaving as an active interface with a down link [ 1329.111157][T13297] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1329.111448][T13297] bond11: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1329.457939][T13311] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17768'. [ 1329.582451][T13316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17769'. [ 1329.582489][T13316] netlink: 'syz.1.17769': attribute type 7 has an invalid length. [ 1329.590748][T13316] netlink: 'syz.1.17769': attribute type 8 has an invalid length. [ 1329.590807][T13316] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17769'. [ 1329.648829][T13319] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17769'. [ 1329.648869][T13319] netlink: 'syz.1.17769': attribute type 7 has an invalid length. [ 1329.648886][T13319] netlink: 'syz.1.17769': attribute type 8 has an invalid length. [ 1329.648900][T13319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17769'. [ 1330.382885][ C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1332.160341][T13375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17793'. [ 1332.741293][T13398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17799'. [ 1332.872047][ T1015] tipc: Subscription rejected, illegal request [ 1333.981727][T13416] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17802'. [ 1335.488475][T13459] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17813'. [ 1335.489584][T13458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17812'. [ 1335.504430][ C1] tipc: RX(1000001): key[1] is activated [ 1336.055518][T13476] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17819'. [ 1336.214128][T13483] netlink: 40 bytes leftover after parsing attributes in process `syz.1.17819'. [ 1336.214157][T13483] netlink: 3 bytes leftover after parsing attributes in process `syz.1.17819'. [ 1337.253894][T13470] netlink: 264 bytes leftover after parsing attributes in process `syz.0.17817'. [ 1337.253930][T13470] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17817'. [ 1337.287261][T13515] syzkaller1: entered promiscuous mode [ 1337.287286][T13515] syzkaller1: entered allmulticast mode [ 1337.509822][T13519] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17833'. [ 1338.174965][T13547] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17841'. [ 1338.503686][T13559] ip_tables: iptables: counters copy to user failed while replacing table [ 1339.365814][T13569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17848'. [ 1339.715467][T13586] ip_tables: iptables: counters copy to user failed while replacing table [ 1340.350477][T13594] ip_tables: iptables: counters copy to user failed while replacing table [ 1340.978918][T13600] netlink: 168 bytes leftover after parsing attributes in process `syz.0.17861'. [ 1344.462762][ C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1345.017167][T13648] syzkaller1: entered promiscuous mode [ 1345.017194][T13648] syzkaller1: entered allmulticast mode [ 1345.048356][T13646] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17880'. [ 1345.248831][T13658] tipc: Failed to remove unknown binding: 66,1,1/0:4098175586/4098175588 [ 1345.880305][T13670] syzkaller1: entered promiscuous mode [ 1345.880520][T13670] syzkaller1: entered allmulticast mode [ 1345.956500][T13675] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17888'. [ 1346.689818][T13695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17894'. [ 1346.713439][T13695] tipc: Started in network mode [ 1346.713471][T13695] tipc: Node identity a643e585e4d9, cluster identity 4711 [ 1346.713770][T13695] tipc: Enabled bearer , priority 0 [ 1347.009890][T13699] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17896'. [ 1347.383421][T13708] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1347.684616][T13719] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17904'. [ 1347.730415][T13721] netlink: 'syz.1.17906': attribute type 12 has an invalid length. [ 1347.836620][ T3822] tipc: Node number set to 1117447557 [ 1348.714398][T13739] netlink: 15143 bytes leftover after parsing attributes in process `syz.0.17911'. [ 1348.903984][T13743] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17913'. [ 1349.110764][T13748] syzkaller1: entered promiscuous mode [ 1349.110790][T13748] syzkaller1: entered allmulticast mode [ 1350.519538][T13784] syz_tun: entered allmulticast mode [ 1350.529954][T13784] siw: device registration error -23 [ 1350.570066][T13783] syz_tun: left allmulticast mode [ 1351.278607][T13808] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17933'. [ 1351.522922][T13815] ip6gretap0: entered allmulticast mode [ 1351.554340][T13816] netlink: 64 bytes leftover after parsing attributes in process `syz.3.17936'. [ 1352.233704][T13817] syzkaller1: entered promiscuous mode [ 1352.233756][T13817] syzkaller1: entered allmulticast mode [ 1352.560617][T13837] netlink: 68 bytes leftover after parsing attributes in process `syz.4.17943'. [ 1352.680611][T13842] netlink: 'syz.2.17944': attribute type 1 has an invalid length. [ 1352.680640][T13842] netlink: 64543 bytes leftover after parsing attributes in process `syz.2.17944'. [ 1355.850463][T13924] netlink: 'syz.1.17973': attribute type 1 has an invalid length. [ 1356.232119][T13927] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1356.253934][T13927] bond12: (slave bond13): making interface the new active one [ 1356.255906][T13927] bond12: (slave bond13): Enslaving as an active interface with an up link [ 1357.856712][T13966] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17986'. [ 1358.180930][T13968] netlink: 64 bytes leftover after parsing attributes in process `syz.1.17987'. [ 1358.228443][T13968] syzkaller1: entered promiscuous mode [ 1358.228468][T13968] syzkaller1: entered allmulticast mode [ 1359.017157][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17996'. [ 1359.048603][T13996] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17996'. [ 1359.782667][T14021] netlink: 64 bytes leftover after parsing attributes in process `syz.3.18004'. [ 1359.821212][T14021] syzkaller1: entered promiscuous mode [ 1359.821236][T14021] syzkaller1: entered allmulticast mode [ 1360.543242][T14031] tipc: Enabled bearer , priority 0 [ 1360.549970][T14031] syzkaller0: entered promiscuous mode [ 1360.549992][T14031] syzkaller0: entered allmulticast mode [ 1361.110769][T14045] netlink: 64 bytes leftover after parsing attributes in process `syz.3.18013'. [ 1361.214376][T14045] syzkaller1: entered promiscuous mode [ 1361.214583][T14045] syzkaller1: entered allmulticast mode [ 1361.656333][T14056] netlink: 64 bytes leftover after parsing attributes in process `syz.1.18016'. [ 1361.752252][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.782313][T14056] syzkaller1: entered promiscuous mode [ 1361.782553][T14056] syzkaller1: entered allmulticast mode [ 1362.078894][T14067] syzkaller0: left promiscuous mode [ 1362.078922][T14067] syzkaller0: left allmulticast mode [ 1362.484759][T14077] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18022'. [ 1362.623272][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18022'. [ 1362.837554][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18022'. [ 1365.290498][T14127] netlink: 'syz.0.18035': attribute type 11 has an invalid length. [ 1365.290522][T14127] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18035'. [ 1365.415714][T14129] syzkaller0: left promiscuous mode [ 1365.415936][T14129] syzkaller0: left allmulticast mode [ 1365.417830][T14129] tipc: Resetting bearer [ 1368.294991][T14219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18072'. [ 1368.312997][T14219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18072'. [ 1371.741719][T14282] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1371.983194][ C1] ip6_tunnel: ip6tnl7 xmit: Local address not yet configured! [ 1372.273075][T14294] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18102'. [ 1372.584015][T14303] netlink: 'syz.0.18105': attribute type 1 has an invalid length. [ 1372.692289][T14307] netlink: 'syz.0.18105': attribute type 10 has an invalid length. [ 1372.692311][T14307] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18105'. [ 1372.955297][T14303] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1373.311507][T14326] ip_tables: iptables: counters copy to user failed while replacing table [ 1376.775796][T14361] netlink: 'syz.2.18123': attribute type 4 has an invalid length. [ 1376.843485][T14367] netlink: 'syz.2.18123': attribute type 4 has an invalid length. [ 1376.884064][T14365] ip_tables: iptables: counters copy to user failed while replacing table [ 1377.137475][T14378] sctp: [Deprecated]: syz.0.18128 (pid 14378) Use of int in max_burst socket option. [ 1377.137475][T14378] Use struct sctp_assoc_value instead [ 1377.814718][T14391] syz_tun: entered allmulticast mode [ 1377.871828][T14391] dvmrp6: entered allmulticast mode [ 1377.890675][T14389] syz_tun: left allmulticast mode [ 1378.405987][T14410] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1380.534510][T14451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18155'. [ 1382.044851][T14492] ip_tables: iptables: counters copy to user failed while replacing table [ 1382.125846][T14494] syzkaller1: entered promiscuous mode [ 1382.125871][T14494] syzkaller1: entered allmulticast mode [ 1384.853788][T14533] bond12: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1386.200376][T14533] bond12 (unregistering): Released all slaves [ 1387.437423][T14558] syzkaller1: entered promiscuous mode [ 1387.437448][T14558] syzkaller1: entered allmulticast mode [ 1388.210185][T14572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18194'. [ 1388.210733][T14572] tipc: Resetting bearer [ 1388.369070][T14572] tipc: Disabling bearer [ 1388.412669][T20402] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1388.412731][T20402] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1388.412767][T20402] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1388.412904][T20402] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1388.522723][T14577] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18196'. [ 1388.611404][T14579] netlink: 'syz.2.18199': attribute type 1 has an invalid length. [ 1388.684192][T14579] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1388.858446][T14581] bond11: (slave veth20): Enslaving as an active interface with a down link [ 1388.894058][T14579] bond11: (slave macvlan0): making interface the new active one [ 1388.911014][T14579] bond11: (slave macvlan0): Enslaving as an active interface with an up link [ 1389.658637][T14608] bond0: left promiscuous mode [ 1389.658665][T14608] bond4: left promiscuous mode [ 1390.356231][T14608] bond_slave_0: left allmulticast mode [ 1390.443509][T14608] veth0_to_team: left promiscuous mode [ 1391.187919][T14608] tipc: Resetting bearer [ 1391.497080][T14608] mac80211_hwsim hwsim10 wlan1: left promiscuous mode [ 1391.499214][T14608] bond1: left allmulticast mode [ 1391.849240][T14608] xfrm1: left allmulticast mode [ 1391.894609][T14608] erspan1: left allmulticast mode [ 1391.921350][T14608] ip6tnl2: left allmulticast mode [ 1392.080802][T14608] gtp1: left allmulticast mode [ 1392.106733][T14608] bridge4: left promiscuous mode [ 1392.106760][T14608] bridge4: left allmulticast mode [ 1392.170551][T14608] ip6gre2: left allmulticast mode [ 1392.196218][T14608] geneve3: left promiscuous mode [ 1392.282075][T14608] ip6tnl5: left allmulticast mode [ 1392.620063][T14608] batman_adv: batadv0: Interface deactivated: macvlan2 [ 1392.639690][T14608] ip6gre3: left allmulticast mode [ 1392.757234][T14608] xfrm2: left promiscuous mode [ 1392.757263][T14608] xfrm2: left allmulticast mode [ 1392.986881][T14608] bond8: left promiscuous mode [ 1392.986909][T14608] ip6gre4: left promiscuous mode [ 1393.327303][T14608] bond11: left promiscuous mode [ 1393.417133][T14608] gretap2: left promiscuous mode [ 1393.473179][ T1015] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1393.473220][ T1015] netdevsim netdevsim4 netdevsim0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1393.473251][ T1015] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.473397][ T1015] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1393.473427][ T1015] netdevsim netdevsim4 netdevsim1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1393.473456][ T1015] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.473498][ T1015] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1393.473526][ T1015] netdevsim netdevsim4 netdevsim2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1393.473555][ T1015] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.473596][ T1015] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1393.473624][ T1015] netdevsim netdevsim4 netdevsim3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 1393.473653][ T1015] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.342140][T14680] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1395.536805][T14682] team0: Mode changed to "loadbalance" [ 1396.168398][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18229'. [ 1396.168429][T14709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18229'. [ 1397.000115][T14724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18233'. [ 1397.100969][T14721] bond14: entered allmulticast mode [ 1397.200855][T14724] macvlan0: entered promiscuous mode [ 1397.202764][T14724] macvlan0: entered allmulticast mode [ 1397.217948][T14724] bond14: (slave macvlan0): Opening slave failed [ 1397.380615][T14728] x_tables: duplicate underflow at hook 1 [ 1403.368482][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18276'. [ 1403.368834][T14875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18276'. [ 1404.458466][T14903] netlink: 'syz.0.18281': attribute type 10 has an invalid length. [ 1404.608011][T14903] bridge0: left allmulticast mode [ 1404.627210][T14909] ip_tables: iptables: counters copy to user failed while replacing table [ 1405.358653][T14923] veth0_to_bridge: entered promiscuous mode [ 1405.369216][T14923] macvtap2: entered allmulticast mode [ 1405.369237][T14923] veth0_to_bridge: entered allmulticast mode [ 1406.291525][T14947] bridge9: entered allmulticast mode [ 1406.777826][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18297'. [ 1406.777865][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18297'. [ 1407.300389][T14975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18299'. [ 1407.562812][T14983] batman_adv: batadv0: Adding interface: syzkaller0 [ 1407.562833][T14983] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1407.562869][T14983] batman_adv: batadv0: Interface activated: syzkaller0 [ 1407.881269][ C1] tipc: RX(1000001): key[1] is activated [ 1408.075734][T14981] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1408.295933][T14981] batman_adv: batadv0: Removing interface: syzkaller0 [ 1409.011183][T15020] bond15: entered allmulticast mode [ 1409.062887][T15020] macvlan3: entered promiscuous mode [ 1409.062913][T15020] macvlan3: entered allmulticast mode [ 1409.063888][T15020] bond15: entered promiscuous mode [ 1409.070118][T15020] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1409.146291][T15020] bond15: left promiscuous mode [ 1409.517477][ T5296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1409.558505][T15043] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18316'. [ 1409.882426][T15048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18320'. [ 1410.098788][T15054] tipc: Enabling of bearer rejected, already enabled [ 1410.118440][T15052] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 1410.118470][T15052] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 1410.228414][T15057] netlink: 'syz.1.18323': attribute type 19 has an invalid length. [ 1410.467908][T15063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18325'. [ 1410.803570][T15071] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18330'. [ 1411.282335][T15082] syzkaller1: entered promiscuous mode [ 1411.282360][T15082] syzkaller1: entered allmulticast mode [ 1413.428376][T15146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18350'. [ 1413.428419][T15146] netlink: 'syz.1.18350': attribute type 7 has an invalid length. [ 1413.428435][T15146] netlink: 'syz.1.18350': attribute type 8 has an invalid length. [ 1413.428450][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18350'. [ 1413.480697][T15146] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18350'. [ 1413.480737][T15146] netlink: 'syz.1.18350': attribute type 7 has an invalid length. [ 1413.480754][T15146] netlink: 'syz.1.18350': attribute type 8 has an invalid length. [ 1413.480768][T15146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18350'. [ 1414.074821][T15156] ip_tables: iptables: counters copy to user failed while replacing table [ 1414.175782][T15153] syzkaller1: entered promiscuous mode [ 1414.175817][T15153] syzkaller1: entered allmulticast mode [ 1414.324855][T15158] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1414.339645][T15158] team0: Device ipvlan2 is already an upper device of the team interface [ 1414.528848][T15162] ip_tables: iptables: counters copy to user failed while replacing table [ 1414.899423][T15170] netlink: 168 bytes leftover after parsing attributes in process `syz.1.18359'. [ 1415.384593][T15178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18364'. [ 1415.727946][T15190] TC_ACT_REPEAT abuse ? [ 1415.939800][T15197] syzkaller1: entered promiscuous mode [ 1415.939827][T15197] syzkaller1: entered allmulticast mode [ 1416.256321][T15215] netlink: 'syz.2.18374': attribute type 3 has an invalid length. [ 1416.256352][T15215] netlink: 'syz.2.18374': attribute type 2 has an invalid length. [ 1417.034653][T15236] netlink: 'syz.4.18382': attribute type 11 has an invalid length. [ 1417.590322][T15246] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 1417.590548][T15246] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 1419.359863][T15297] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1420.210795][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18416'. [ 1420.576850][T15330] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18420'. [ 1420.730671][T15340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18424'. [ 1422.335881][T15390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18443'. [ 1422.391298][T15392] netlink: 75 bytes leftover after parsing attributes in process `syz.2.18442'. [ 1422.500265][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18443'. [ 1422.723511][T15392] 8021q: adding VLAN 0 to HW filter on device team0 [ 1422.975331][T15392] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1423.193561][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.471181][T15405] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18446'. [ 1424.996054][T15430] netlink: 'syz.2.18454': attribute type 1 has an invalid length. [ 1424.996077][T15430] netlink: 244 bytes leftover after parsing attributes in process `syz.2.18454'. [ 1425.060101][T15429] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18455'. [ 1425.284535][T15434] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18455'. [ 1425.906937][T15449] netlink: 'syz.4.18458': attribute type 1 has an invalid length. [ 1428.915636][T15449] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1429.370605][T15479] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18467'. [ 1429.617487][T15486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18467'. [ 1429.647285][T15480] virt_wifi0 speed is unknown, defaulting to 1000 [ 1429.731425][T15480] virt_wifi0 speed is unknown, defaulting to 1000 [ 1429.732299][T15480] virt_wifi0 speed is unknown, defaulting to 1000 [ 1429.754956][T15480] smbdirect: ib_dev[ÿ]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1429.754999][T15480] smbdirect: ib_dev[ÿ]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1429.755045][T15480] smbdirect: ib_dev[ÿ]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1429.951149][T15480] virt_wifi0 speed is unknown, defaulting to 1000 [ 1429.981772][T15480] virt_wifi0 speed is unknown, defaulting to 1000 [ 1430.006503][T15480] virt_wifi0 speed is unknown, defaulting to 1000 [ 1430.046977][T15480] virt_wifi0 speed is unknown, defaulting to 1000 [ 1430.061018][T15480] virt_wifi0 speed is unknown, defaulting to 1000 [ 1430.435957][T15506] syzkaller1: entered promiscuous mode [ 1430.435983][T15506] syzkaller1: entered allmulticast mode [ 1430.687938][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18470'. [ 1431.328418][T15529] netlink: 'syz.4.18482': attribute type 1 has an invalid length. [ 1431.443239][T15529] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1431.484289][T15529] netlink: 'syz.4.18482': attribute type 10 has an invalid length. [ 1431.484315][T15529] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18482'. [ 1432.004976][T15534] bond12: (slave veth9): Enslaving as an active interface with a down link [ 1432.304590][T15552] syzkaller1: entered promiscuous mode [ 1432.304615][T15552] syzkaller1: entered allmulticast mode [ 1432.315332][T15552] netlink: 60 bytes leftover after parsing attributes in process `syz.4.18488'. [ 1432.863970][T15556] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 1433.599065][T15577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18495'. [ 1433.661245][T15577] tipc: Enabled bearer , priority 0 [ 1433.721798][T15577] tipc: Resetting bearer [ 1433.889990][T15577] tipc: Disabling bearer [ 1434.229831][T15594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18502'. [ 1434.242968][T15594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18502'. [ 1435.188655][T15612] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 1435.237087][T15612] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 1435.905971][T15633] netlink: 256 bytes leftover after parsing attributes in process `syz.2.18515'. [ 1435.905997][T15633] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18515'. [ 1436.902121][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18519'. [ 1436.920575][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18519'. [ 1437.067824][T15647] ip_tables: iptables: counters copy to user failed while replacing table [ 1439.477700][T15687] tipc: Enabling of bearer rejected, already enabled [ 1439.481758][T15690] syzkaller0: entered promiscuous mode [ 1439.489962][T15690] syzkaller0: entered allmulticast mode [ 1439.881669][T15700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18538'. [ 1440.117918][T15705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18540'. [ 1440.117952][T15705] bond0: option arp_all_targets: invalid value (673200689) [ 1440.371753][T15709] netlink: 'syz.2.18542': attribute type 1 has an invalid length. [ 1440.574486][T15709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18542'. [ 1440.676194][T15713] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1440.705640][T15713] bond12: (slave bond13): making interface the new active one [ 1440.707560][T15713] bond12: (slave bond13): Enslaving as an active interface with an up link [ 1440.841516][T15716] bond12: (slave gretap2): Enslaving as a backup interface with an up link [ 1440.859821][T15709] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1440.874845][T15724] syzkaller0: left promiscuous mode [ 1440.874868][T15724] syzkaller0: left allmulticast mode [ 1441.148164][T15723] syzkaller0: entered promiscuous mode [ 1441.148378][T15723] syzkaller0: entered allmulticast mode [ 1444.818132][T15761] syzkaller1: entered promiscuous mode [ 1444.818158][T15761] syzkaller1: entered allmulticast mode [ 1445.172429][T15779] xt_ecn: cannot match TCP bits for non-tcp packets [ 1445.824613][T15793] netlink: 100 bytes leftover after parsing attributes in process `syz.3.18563'. [ 1446.778832][T15824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18572'. [ 1447.111902][T15832] ip_tables: iptables: counters copy to user failed while replacing table [ 1447.128329][T15832] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18574'. [ 1447.962089][T15857] TC_ACT_REPEAT abuse ? [ 1448.148374][T15854] syzkaller0: entered promiscuous mode [ 1448.148402][T15854] syzkaller0: entered allmulticast mode [ 1450.053272][T15889] netlink: 332 bytes leftover after parsing attributes in process `syz.0.18589'. [ 1450.053334][T15889] netlink: 'syz.0.18589': attribute type 9 has an invalid length. [ 1450.053350][T15889] netlink: 108 bytes leftover after parsing attributes in process `syz.0.18589'. [ 1450.053367][T15889] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18589'. [ 1453.086155][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18593'. [ 1453.086183][T15901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18593'. [ 1455.681168][T15917] bond15: option ad_user_port_key: invalid value (65535) [ 1455.681195][T15917] bond15: option ad_user_port_key: allowed values 0 - 1023 [ 1455.723774][T15917] bond15 (unregistering): Released all slaves [ 1456.155392][T15937] tipc: Enabling of bearer rejected, already enabled [ 1456.548524][T15937] syzkaller0: entered promiscuous mode [ 1456.548550][T15937] syzkaller0: entered allmulticast mode [ 1456.877374][T15953] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18606'. [ 1456.935159][T15952] batman_adv: batadv0: Adding interface: syzkaller0 [ 1456.935191][T15952] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1456.935226][T15952] batman_adv: batadv0: Interface activated: syzkaller0 [ 1457.001258][T15953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18606'. [ 1457.096220][T15951] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 1457.154224][T15951] batman_adv: batadv0: Removing interface: syzkaller0 [ 1457.342132][T15962] geneve5: entered promiscuous mode [ 1457.373489][ T62] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.373538][ T62] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.373576][ T62] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1457.970343][T15972] syzkaller0: entered promiscuous mode [ 1457.970371][T15972] syzkaller0: entered allmulticast mode [ 1459.519650][T15995] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18621'. [ 1461.369300][T15988] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1461.787527][T16010] netlink: 164 bytes leftover after parsing attributes in process `syz.1.18627'. [ 1461.860988][T16015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18628'. [ 1461.861020][T16015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18628'. [ 1461.861064][T16015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18628'. [ 1462.244325][T16020] syzkaller1: entered promiscuous mode [ 1462.246834][T16020] syzkaller1: entered allmulticast mode [ 1462.549829][T16036] lo: entered allmulticast mode [ 1462.578906][T16029] lo: left allmulticast mode [ 1463.314245][T16054] ip_tables: iptables: counters copy to user failed while replacing table [ 1465.229381][T16074] syzkaller0: entered promiscuous mode [ 1465.229591][T16074] syzkaller0: entered allmulticast mode [ 1465.232134][T16080] netlink: 'syz.2.18645': attribute type 39 has an invalid length. [ 1465.482421][T16086] netlink: 72 bytes leftover after parsing attributes in process `syz.0.18648'. [ 1465.535025][T16086] tipc: Enabled bearer , priority 10 [ 1465.608871][T16088] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 1465.608902][T16088] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 1465.883240][T16090] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 1465.917497][T16097] syzkaller0: entered promiscuous mode [ 1465.917521][T16097] syzkaller0: entered allmulticast mode [ 1466.098250][T16101] xt_ipcomp: unknown flags 1D [ 1467.887153][T16160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1468.729282][T16177] xt_nfacct: accounting object `' does not exist [ 1468.867355][T16181] netlink: 'syz.1.18681': attribute type 2 has an invalid length. [ 1469.322252][T16188] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18682'. [ 1469.673809][T16197] ip_tables: iptables: counters copy to user failed while replacing table [ 1469.752053][T16199] ip_tables: iptables: counters copy to user failed while replacing table [ 1469.919208][T16202] netlink: 'syz.4.18689': attribute type 1 has an invalid length. [ 1469.931991][T16203] ip_tables: iptables: counters copy to user failed while replacing table [ 1469.950341][T16203] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18688'. [ 1470.005361][T16202] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1470.037759][T16205] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1470.366154][T16216] tipc: Failed to remove unknown binding: 66,0,0/16777217:1684657489/1684657491 [ 1470.366358][T16216] tipc: Failed to remove unknown binding: 66,0,0/16777217:1684657489/1684657490 [ 1470.372282][T16216] tipc: Failed to remove unknown binding: 66,0,0/16777217:1684657489/1684657491 [ 1470.372511][T16216] tipc: Failed to remove unknown binding: 66,0,0/16777217:1684657489/1684657490 [ 1470.460145][T16218] syzkaller1: entered promiscuous mode [ 1470.460353][T16218] syzkaller1: entered allmulticast mode [ 1470.511030][T16218] syzkaller1: left promiscuous mode [ 1470.544150][T16222] netlink: 'syz.4.18695': attribute type 1 has an invalid length. [ 1470.767970][T16232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18697'. [ 1470.784564][T16222] bond14: entered promiscuous mode [ 1470.788920][T16222] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1470.847052][T16223] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1470.847080][T16223] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1470.847099][T16223] bond14: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1470.969621][T16227] bond14: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1470.969650][T16227] bond14: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1471.240210][T16233] bridge10: entered allmulticast mode [ 1471.276346][T16233] bond13: (slave bridge10): Enslaving as an active interface with an up link [ 1471.862718][T16256] syzkaller0: entered promiscuous mode [ 1471.862929][T16256] syzkaller0: entered allmulticast mode [ 1471.922175][T16259] netlink: 84 bytes leftover after parsing attributes in process `syz.0.18705'. [ 1472.438246][T16262] veth26: entered allmulticast mode [ 1473.133180][T16282] syzkaller0: left promiscuous mode [ 1473.133343][T16282] syzkaller0: left allmulticast mode [ 1473.504435][T16295] syzkaller1: entered promiscuous mode [ 1473.507290][T16295] syzkaller1: entered allmulticast mode [ 1473.961327][T16305] netlink: 'syz.4.18722': attribute type 1 has an invalid length. [ 1474.211544][T16307] ip6tnl8: entered promiscuous mode [ 1474.211601][T16307] ip6tnl8: entered allmulticast mode [ 1475.223931][T16326] xt_CT: No such helper "netbios-ns" [ 1475.582628][T16342] ip_tables: iptables: counters copy to user failed while replacing table [ 1475.874518][T16348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18734'. [ 1476.371950][T16355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18740'. [ 1476.391623][ T5644] block nbd0: Receive control failed (result -107) [ 1476.892709][T16366] netlink: 'syz.4.18743': attribute type 1 has an invalid length. [ 1477.335822][T16381] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18746'. [ 1478.326308][T16352] team_slave_0: left allmulticast mode [ 1478.560589][T16395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18750'. [ 1478.560618][T16395] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18750'. [ 1478.995367][T16352] geneve1: left promiscuous mode [ 1478.995762][T16352] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 1479.036726][T16352] geneve2: left promiscuous mode [ 1479.125251][T16352] ip6tnl5: left allmulticast mode [ 1479.154698][T16352] bridge0: left promiscuous mode [ 1479.219334][T16352] macsec1: left promiscuous mode [ 1479.329101][T16352] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1479.332315][T16352] ip6gretap1: left allmulticast mode [ 1479.367633][T16352] batman_adv: batadv0: Interface deactivated: gretap0 [ 1479.620911][T16352] bond0: left promiscuous mode [ 1479.927156][T16352] bridge4: left promiscuous mode [ 1479.927182][T16352] bridge4: left allmulticast mode [ 1480.289455][T16352] bond7: left promiscuous mode [ 1480.289481][T16352] erspan2: left promiscuous mode [ 1480.289650][T16352] bond7: left allmulticast mode [ 1480.328102][T16352] erspan2: left allmulticast mode [ 1480.635598][T16352] bond10: left promiscuous mode [ 1480.727879][T16352] bond14: left allmulticast mode [ 1480.956622][T14626] lo speed is unknown, defaulting to 1000 [ 1480.959249][T14626] !!0: Port: 1 Link DOWN [ 1481.006836][T16366] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 1481.241185][T16394] bond7: option mode: unable to set because the bond device has slaves [ 1481.444268][ T62] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1481.444314][ T62] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.444343][ T62] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1481.444383][ T62] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1481.444413][ T62] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.444440][ T62] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1481.444473][ T62] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1481.444500][ T62] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.444527][ T62] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1481.444563][ T62] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1481.444590][ T62] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1481.444617][ T62] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1481.551344][T16413] netlink: 'syz.4.18755': attribute type 10 has an invalid length. [ 1481.551405][T16413] netlink: 55 bytes leftover after parsing attributes in process `syz.4.18755'. [ 1481.938808][T16413] tipc: Disabling bearer [ 1482.383814][T16422] syzkaller0: entered promiscuous mode [ 1482.383844][T16422] syzkaller0: entered allmulticast mode [ 1482.966719][T16455] ip_tables: iptables: counters copy to user failed while replacing table [ 1487.435731][T16499] netlink: 164 bytes leftover after parsing attributes in process `syz.0.18774'. [ 1487.435859][T16499] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18774'. [ 1487.986167][T16507] syzkaller0: entered promiscuous mode [ 1487.986373][T16507] syzkaller0: entered allmulticast mode [ 1488.109714][T16511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18779'. [ 1488.245441][T16515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18781'. [ 1488.544987][T16515] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1489.634182][T16538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18789'. [ 1489.652111][ T5644] block nbd6: Receive control failed (result -1) [ 1489.765025][T16548] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18790'. [ 1490.347307][T16544] syzkaller1: entered promiscuous mode [ 1490.347336][T16544] syzkaller1: entered allmulticast mode [ 1490.981019][T16577] netlink: 'syz.4.18796': attribute type 1 has an invalid length. [ 1491.117592][T16577] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1491.570876][T16594] netlink: 'syz.4.18800': attribute type 1 has an invalid length. [ 1491.777723][T16594] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1491.986592][T16599] bond17: (slave gretap3): making interface the new active one [ 1491.992354][T16599] bond17: (slave gretap3): Enslaving as an active interface with an up link [ 1492.645206][T16618] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18808'. [ 1492.809488][T16626] TC_ACT_REPEAT abuse ? [ 1493.538004][T16649] syzkaller0: entered promiscuous mode [ 1493.538029][T16649] syzkaller0: entered allmulticast mode [ 1493.723509][T16653] syzkaller0: entered promiscuous mode [ 1493.723535][T16653] syzkaller0: entered allmulticast mode [ 1494.441381][T16672] syzkaller0: entered promiscuous mode [ 1494.441406][T16672] syzkaller0: entered allmulticast mode [ 1494.923959][T16686] tipc: Resetting bearer [ 1494.985980][T16690] netlink: 'syz.4.18826': attribute type 4 has an invalid length. [ 1495.089558][T16690] netlink: 'syz.4.18826': attribute type 4 has an invalid length. [ 1495.114152][ T5854] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 1495.114180][ T5854] syz0: Port: 1 Link ACTIVE [ 1495.114298][ T5854] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 1496.453931][T16725] ip_tables: iptables: counters copy to user failed while replacing table [ 1496.511603][T16728] tipc: Failed to remove unknown binding: 66,0,0/16777217:557460153/557460155 [ 1496.511718][T16728] tipc: Failed to remove unknown binding: 66,0,0/16777217:557460153/557460154 [ 1496.534132][T16728] tipc: Failed to remove unknown binding: 66,0,0/16777217:557460153/557460154 [ 1496.534167][T16728] tipc: Failed to remove unknown binding: 66,0,0/16777217:557460153/557460155 [ 1496.534193][T16728] tipc: Failed to remove unknown binding: 66,0,0/16777217:557460153/557460154 [ 1497.317745][T16751] ip_tables: iptables: counters copy to user failed while replacing table [ 1497.488071][T16743] syzkaller0: entered promiscuous mode [ 1497.488097][T16743] syzkaller0: entered allmulticast mode [ 1499.039305][T16784] netlink: 'syz.2.18851': attribute type 1 has an invalid length. [ 1501.312379][T16779] syz_tun: entered allmulticast mode [ 1501.323844][T16784] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 1501.335319][T16779] syz_tun: left allmulticast mode [ 1501.486971][T16792] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18855'. [ 1501.839523][T16797] macvlan5: entered promiscuous mode [ 1501.839549][T16797] macvlan5: entered allmulticast mode [ 1501.843255][T16797] bond15: entered promiscuous mode [ 1501.863842][T16797] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1501.881111][T16797] bond15: left promiscuous mode [ 1502.446790][T16822] syzkaller0: entered promiscuous mode [ 1502.446815][T16822] syzkaller0: entered allmulticast mode [ 1502.534189][T16825] ip_tables: iptables: counters copy to user failed while replacing table [ 1503.457539][T16842] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.624320][T16854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18871'. [ 1503.668862][T16842] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1503.831994][T16854] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18871'. [ 1504.095090][T16842] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.615215][T16880] netlink: 'syz.0.18876': attribute type 39 has an invalid length. [ 1504.963515][T20402] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.070649][T20402] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.070705][T20402] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.141400][T20402] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1505.232006][T16886] syzkaller0: entered promiscuous mode [ 1505.232225][T16886] syzkaller0: entered allmulticast mode [ 1505.776239][T16910] syzkaller0: entered promiscuous mode [ 1505.776264][T16910] syzkaller0: entered allmulticast mode [ 1506.289923][T16923] dummy0: left promiscuous mode [ 1506.290143][T16923] dummy0: left allmulticast mode [ 1506.769948][T16897] syzkaller1: entered promiscuous mode [ 1506.769974][T16897] syzkaller1: entered allmulticast mode [ 1507.119562][T16956] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1507.641638][T16967] ip_tables: iptables: counters copy to user failed while replacing table [ 1507.960056][T16963] syzkaller1: entered promiscuous mode [ 1507.960082][T16963] syzkaller1: entered allmulticast mode [ 1508.241163][T16991] netlink: 'syz.1.18903': attribute type 1 has an invalid length. [ 1508.484059][T17003] netlink: 'syz.1.18903': attribute type 10 has an invalid length. [ 1508.484084][T17003] netlink: 40 bytes leftover after parsing attributes in process `syz.1.18903'. [ 1508.577545][T17007] netlink: 'syz.2.18905': attribute type 1 has an invalid length. [ 1508.633949][T16991] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1508.752880][T16994] bond15: (slave veth25): Enslaving as an active interface with a down link [ 1508.790485][T16998] bond15: (slave dummy0): making interface the new active one [ 1508.805231][T16998] dummy0: entered promiscuous mode [ 1508.806133][T16998] bond15: (slave dummy0): Enslaving as an active interface with an up link [ 1508.808057][T17003] bond15: (slave dummy0): Releasing active interface [ 1509.213369][T17010] macvlan5: entered promiscuous mode [ 1509.213624][T17010] macvlan5: entered allmulticast mode [ 1509.238642][T17010] bond16: entered promiscuous mode [ 1509.247687][T17010] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 1509.270198][T17010] bond16: left promiscuous mode [ 1510.237888][T17047] bond18: (slave macvlan0): Error -22 calling dev_set_mtu [ 1510.846944][T17066] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1510.860072][T17062] lo speed is unknown, defaulting to 1000 [ 1510.873948][T17062] wg0 speed is unknown, defaulting to 1000 [ 1511.398715][T17062] wg2 speed is unknown, defaulting to 1000 [ 1511.410071][T17062] lo speed is unknown, defaulting to 1000 [ 1511.427742][T17062] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 1512.199563][T17062] virt_wifi0 speed is unknown, defaulting to 1000 [ 1513.081659][T17097] syzkaller0: entered promiscuous mode [ 1513.081684][T17097] syzkaller0: entered allmulticast mode [ 1513.510010][T17103] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 1513.510219][T17103] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 1514.382092][T17128] syz_tun: entered allmulticast mode [ 1514.541593][T17132] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 1514.541623][T17132] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 1515.186735][T17154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1515.555639][T17174] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1515.650249][ T5652] block nbd7: Receive control failed (result -32) [ 1515.650290][ T5644] block nbd7: Receive control failed (result -32) [ 1515.864685][T17182] netlink: 'syz.0.18953': attribute type 1 has an invalid length. [ 1516.055062][T17182] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1516.235273][T17184] bond14: (slave veth0_to_bond): making interface the new active one [ 1516.256006][T17184] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1516.379122][T17182] macvlan6: entered promiscuous mode [ 1516.379148][T17182] macvlan6: entered allmulticast mode [ 1516.398034][T17182] bond14: entered promiscuous mode [ 1516.398058][T17182] veth0_to_bond: entered promiscuous mode [ 1516.419614][T17182] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 1516.469235][T17182] bond14: (slave macvlan6): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 1516.524039][T17182] bond14: left promiscuous mode [ 1516.524064][T17182] veth0_to_bond: left promiscuous mode [ 1516.722559][T17194] block nbd0: reconnected socket [ 1516.729645][ T5652] block nbd0: Receive control failed (result -32) [ 1517.023654][ T5854] page_pool_release_retry() stalled pool shutdown: id 344, 1 inflight 60 sec [ 1517.825983][T17221] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 1517.826016][T17221] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 1517.850980][T17229] tipc: Enabled bearer , priority 0 [ 1518.007199][T17232] tipc: Enabling of bearer rejected, already enabled [ 1518.014058][T17219] syzkaller0: entered promiscuous mode [ 1518.014274][T17219] syzkaller0: entered allmulticast mode [ 1518.049316][T17213] tipc: Resetting bearer [ 1518.117482][T17213] tipc: Disabling bearer [ 1519.071083][T17258] netlink: 148 bytes leftover after parsing attributes in process `syz.3.18973'. [ 1519.140097][T17252] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1522.275229][T17285] netlink: 52 bytes leftover after parsing attributes in process `syz.4.18983'. [ 1522.331525][T17285] netlink: 76 bytes leftover after parsing attributes in process `syz.4.18983'. [ 1522.354997][T17285] netlink: 52 bytes leftover after parsing attributes in process `syz.4.18983'. [ 1522.463648][T17291] netlink: 'syz.3.18984': attribute type 1 has an invalid length. [ 1522.609691][T17291] bond16: entered promiscuous mode [ 1522.610161][T17291] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1522.846760][T17291] macvtap1: entered allmulticast mode [ 1522.881848][T17296] macvtap2: entered allmulticast mode [ 1522.916523][T17299] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 1522.916726][T17299] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 1523.041525][T17305] bond16: (slave bridge9): making interface the new active one [ 1523.041551][T17305] bridge9: entered promiscuous mode [ 1523.133943][T17305] bond16: (slave bridge9): Enslaving as an active interface with an up link [ 1524.302197][T17345] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 1524.302227][T17345] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 1524.657766][T17354] netlink: 'syz.2.19000': attribute type 1 has an invalid length. [ 1524.731450][T17359] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19000'. [ 1524.754076][T17354] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1524.956131][T17354] bond18: (slave bridge16): making interface the new active one [ 1525.001488][T17354] bond18: (slave bridge16): Enslaving as an active interface with an up link [ 1525.081659][T17368] netlink: 'syz.3.18999': attribute type 1 has an invalid length. [ 1525.366903][T17379] netlink: 'syz.4.19006': attribute type 1 has an invalid length. [ 1525.389757][T17381] xt_hashlimit: size too large, truncated to 1048576 [ 1525.505657][T17384] xt_hashlimit: size too large, truncated to 1048576 [ 1525.637413][T17390] netlink: 'syz.3.19008': attribute type 1 has an invalid length. [ 1526.404813][T17404] netlink: 'syz.2.19009': attribute type 83 has an invalid length. [ 1529.377027][T17379] workqueue: Failed to create a rescuer kthread for wq "bond19": -EINTR [ 1529.450033][T17383] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1529.522106][T17383] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1529.598061][T17442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19015'. [ 1529.856686][T17446] bond16: entered promiscuous mode [ 1529.856893][T17446] bond16: entered allmulticast mode [ 1530.220617][T17460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19021'. [ 1530.325196][T17460] bond17: entered promiscuous mode [ 1530.325225][T17460] bond17: entered allmulticast mode [ 1530.367295][T17464] sch_tbf: burst 0 is lower than device syzkaller0 mtu (313) ! [ 1531.179509][T17490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19031'. [ 1531.324623][T17490] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1531.333306][T17495] lo: entered promiscuous mode [ 1531.334047][T17495] bond17: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1531.455160][T17495] 8021q: adding VLAN 0 to HW filter on device bond17 [ 1531.514320][T17495] bond17: (slave lo): Enslaving as an active interface with an up link [ 1531.768339][T17506] syzkaller0: entered promiscuous mode [ 1531.768360][T17506] syzkaller0: entered allmulticast mode [ 1533.057361][T17532] bridge9: left allmulticast mode [ 1533.148641][T17532] geneve5: left promiscuous mode [ 1533.297378][T17532] bond14: left promiscuous mode [ 1533.363269][ T30] audit: type=1804 audit(1793629989.334:23): pid=17538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.19045" name="/newroot/3709/cgroup.controllers" dev="tmpfs" ino=18671 res=1 errno=0 [ 1533.363524][ T30] audit: type=1800 audit(1793629989.334:24): pid=17538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19045" name="cgroup.controllers" dev="tmpfs" ino=18671 res=0 errno=-22 [ 1533.666147][ T3822] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 1533.666216][ T3822] syz0: Port: 1 Link DOWN [ 1533.820746][ T3818] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 1533.833983][ T31] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.834232][ T31] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.834285][ T31] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1533.834325][ T31] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.280533][T17562] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 1534.280565][T17562] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 1534.656252][T17578] ip_tables: iptables: counters copy to user failed while replacing table [ 1534.661011][T17574] bond0: entered promiscuous mode [ 1534.667984][T17574] bond0: left promiscuous mode [ 1535.366612][T17592] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19059'. [ 1535.555257][T17598] erspan0: left promiscuous mode [ 1535.593831][T17598] 8021q: adding VLAN 0 to HW filter on device .` [ 1535.613476][T17598] 8021q: adding VLAN 0 to HW filter on device team0 [ 1535.634325][T17598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1535.708118][T17598] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1535.724324][T17598] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1535.724390][ T3818] lo speed is unknown, defaulting to 1000 [ 1535.724557][ T3818] !!0: Port: 1 Link ACTIVE [ 1535.832978][T17607] netlink: 'syz.2.19065': attribute type 1 has an invalid length. [ 1535.902826][T17602] syzkaller0: entered promiscuous mode [ 1535.902853][T17602] syzkaller0: entered allmulticast mode [ 1536.048333][T17607] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19065'. [ 1536.068747][T17607] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1537.060607][T17607] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1537.133121][T17607] bond19: (slave geneve6): making interface the new active one [ 1537.134496][T17607] bond19: (slave geneve6): Enslaving as an active interface with an up link [ 1537.406035][ T3724] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1537.483719][ T3724] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1537.483770][ T3724] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1537.483807][ T3724] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1537.570274][T17636] vlan4: entered promiscuous mode [ 1537.570298][T17636] hsr0: entered promiscuous mode [ 1537.574540][T17636] vlan4: entered allmulticast mode [ 1537.574563][T17636] hsr0: entered allmulticast mode [ 1537.574577][T17636] hsr_slave_1: entered allmulticast mode [ 1537.602260][T17638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19074'. [ 1537.636072][T17636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19072'. [ 1537.786727][T17646] netlink: 44 bytes leftover after parsing attributes in process `syz.4.19075'. [ 1537.786756][T17646] netlink: 192 bytes leftover after parsing attributes in process `syz.4.19075'. [ 1537.786818][T17646] netlink: 44 bytes leftover after parsing attributes in process `syz.4.19075'. [ 1537.925591][T17638] bond0: (slave syz_tun): Releasing backup interface [ 1537.999599][T17636] hsr_slave_1: left promiscuous mode [ 1538.104956][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19077'. [ 1538.105004][T17648] netlink: 'syz.1.19077': attribute type 1 has an invalid length. [ 1538.105023][T17648] netlink: 'syz.1.19077': attribute type 1 has an invalid length. [ 1538.105040][T17648] netlink: 'syz.1.19077': attribute type 1 has an invalid length. [ 1538.105056][T17648] netlink: 'syz.1.19077': attribute type 1 has an invalid length. [ 1538.105072][T17648] netlink: 'syz.1.19077': attribute type 1 has an invalid length. [ 1538.105088][T17648] netlink: 'syz.1.19077': attribute type 1 has an invalid length. [ 1538.105103][T17648] netlink: 'syz.1.19077': attribute type 1 has an invalid length. [ 1538.105119][T17648] netlink: 'syz.1.19077': attribute type 1 has an invalid length. [ 1538.105134][T17648] netlink: 'syz.1.19077': attribute type 1 has an invalid length. [ 1538.256153][T17653] mac80211_hwsim hwsim2 syzkaller0: left promiscuous mode [ 1538.256184][T17653] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 1538.640096][T17662] syzkaller0: entered promiscuous mode [ 1538.640123][T17662] syzkaller0: entered allmulticast mode [ 1539.280090][T17676] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1539.442809][T17680] bond15: (slave veth27): Enslaving as an active interface with a down link [ 1539.524342][T17682] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1539.530799][T17682] bond15: (slave batadv0): making interface the new active one [ 1539.549648][T17682] batadv0: entered promiscuous mode [ 1539.550383][T17682] bond15: (slave batadv0): Enslaving as an active interface with an up link [ 1539.651162][T17686] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19090'. [ 1539.746196][T17676] bond15 (unregistering): (slave veth27): Releasing active interface [ 1539.788259][T17676] bond15 (unregistering): (slave batadv0): Releasing active interface [ 1539.788294][T17676] batadv0: left promiscuous mode [ 1539.819803][T17676] bond15 (unregistering): Released all slaves [ 1540.328216][T17698] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 1540.328741][T17698] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 1542.095242][T17730] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 1, id = 0 [ 1542.470652][T17744] ip_tables: iptables: counters copy to user failed while replacing table [ 1542.500732][T17740] syzkaller0: entered promiscuous mode [ 1542.500960][T17740] syzkaller0: entered allmulticast mode [ 1542.501156][T17742] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19106'. [ 1542.715694][T17749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19110'. [ 1542.973191][T17757] tun1: tun_chr_ioctl cmd 1074025675 [ 1542.973220][T17757] tun1: persist enabled [ 1542.979895][T17760] syzkaller0: left promiscuous mode [ 1542.980248][T17760] syzkaller0: left allmulticast mode [ 1543.158586][T17752] tun1: tun_chr_ioctl cmd 1074025675 [ 1543.158614][T17752] tun1: persist enabled [ 1543.357269][T17770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19114'. [ 1543.542720][T17778] bond20: entered promiscuous mode [ 1543.542749][T17778] bond20: entered allmulticast mode [ 1543.550343][T17777] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19115'. [ 1544.046241][T17783] syzkaller1: entered promiscuous mode [ 1544.046267][T17783] syzkaller1: entered allmulticast mode [ 1544.302971][T17786] tc_dump_action: action bad kind [ 1544.668967][T17793] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1544.768710][T17797] syzkaller1: entered promiscuous mode [ 1544.768735][T17797] syzkaller1: entered allmulticast mode [ 1545.042843][T17805] validate_nla: 27 callbacks suppressed [ 1545.042869][T17805] netlink: 'syz.4.19126': attribute type 1 has an invalid length. [ 1545.278934][T17808] veth11: entered allmulticast mode [ 1545.315329][T17808] bond19: (slave veth11): Enslaving as an active interface with a down link [ 1545.340170][T17805] bond13: (slave veth0_to_bond): Releasing backup interface [ 1545.401492][T17805] bond19: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1545.993349][T17828] netlink: 'syz.2.19134': attribute type 1 has an invalid length. [ 1546.111084][T17828] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1546.146443][T17830] bond21: (slave ip6erspan0): making interface the new active one [ 1546.149305][T17830] bond21: (slave ip6erspan0): Enslaving as an active interface with an up link [ 1546.791777][T17839] tipc: Enabling of bearer rejected, already enabled [ 1547.148425][T17860] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19139'. [ 1547.282207][T17860] xfrm0: entered promiscuous mode [ 1547.282479][T17860] xfrm0: entered allmulticast mode [ 1548.074270][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.112665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.911934][T17889] ip_tables: iptables: counters copy to user failed while replacing table [ 1550.142946][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.184002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.185135][T20402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.324876][T17907] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19148'. [ 1551.396935][T17903] syzkaller0: entered promiscuous mode [ 1551.397145][T17903] syzkaller0: entered allmulticast mode [ 1551.822757][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.832164][ T3724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.914627][T17917] syzkaller0: entered promiscuous mode [ 1551.914655][T17917] syzkaller0: entered allmulticast mode [ 1552.222680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.328839][T17936] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.19158'. [ 1552.452269][T17943] [ 1552.454683][T17943] ====================================================== [ 1552.461726][T17943] WARNING: possible circular locking dependency detected [ 1552.468799][T17943] syzkaller #0 Not tainted [ 1552.473237][T17943] ------------------------------------------------------ [ 1552.480280][T17943] syz.4.19158/17943 is trying to acquire lock: [ 1552.486469][T17943] ffff88801cec4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x6d/0x240 [ 1552.497052][T17943] [ 1552.497052][T17943] but task is already holding lock: [ 1552.504530][T17943] ffff88801cec4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0 [ 1552.514335][T17943] [ 1552.514335][T17943] which lock already depends on the new lock. [ 1552.514335][T17943] [ 1552.524778][T17943] [ 1552.524778][T17943] the existing dependency chain (in reverse order) is: [ 1552.533832][T17943] [ 1552.533832][T17943] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1552.541861][T17943] down_write+0x91/0x200 [ 1552.546685][T17943] kernfs_add_one+0x41/0x510 [ 1552.551915][T17943] kernfs_create_dir_ns+0x18c/0x220 [ 1552.557667][T17943] internal_create_group+0x440/0x1180 [ 1552.563620][T17943] cpuhp_invoke_callback+0x434/0x810 [ 1552.569469][T17943] cpuhp_issue_call+0x3f0/0x750 [ 1552.574889][T17943] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1552.581550][T17943] __cpuhp_setup_state+0x3f/0x60 [ 1552.587042][T17943] do_one_initcall+0x250/0x870 [ 1552.592368][T17943] do_initcall_level+0x10a/0x1a0 [ 1552.597862][T17943] do_initcalls+0x59/0xa0 [ 1552.602748][T17943] kernel_init_freeable+0x29d/0x3e0 [ 1552.608521][T17943] kernel_init+0x22/0x1d0 [ 1552.613425][T17943] ret_from_fork+0x514/0xb70 [ 1552.618568][T17943] ret_from_fork_asm+0x1a/0x30 [ 1552.623913][T17943] [ 1552.623913][T17943] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1552.631775][T17943] [ 1552.631775][T17943] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1552.639560][T17943] cpus_read_lock+0x3d/0x160 [ 1552.644710][T17943] static_key_slow_inc+0x12/0x30 [ 1552.650205][T17943] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1552.656485][T17943] nbd_genl_foreach_sock+0x265/0x450 [ 1552.662338][T17943] nbd_genl_reconfigure+0xbbb/0x1040 [ 1552.668193][T17943] genl_family_rcv_msg_doit+0x233/0x340 [ 1552.674302][T17943] genl_rcv_msg+0x614/0x7a0 [ 1552.679361][T17943] netlink_rcv_skb+0x226/0x4a0 [ 1552.684690][T17943] genl_rcv+0x28/0x40 [ 1552.689218][T17943] netlink_unicast+0x8ef/0xa80 [ 1552.694536][T17943] netlink_sendmsg+0x7f0/0xb20 [ 1552.699878][T17943] sock_sendmsg_nosec+0x14e/0x190 [ 1552.705477][T17943] ____sys_sendmsg+0x54e/0x850 [ 1552.710795][T17943] ___sys_sendmsg+0x2a5/0x360 [ 1552.716106][T17943] __x64_sys_sendmsg+0x1b1/0x290 [ 1552.721625][T17943] do_syscall_64+0x166/0x520 [ 1552.726774][T17943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1552.733257][T17943] [ 1552.733257][T17943] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1552.740938][T17943] __mutex_lock+0x197/0x15a0 [ 1552.746081][T17943] nbd_queue_rq+0x373/0xff0 [ 1552.751133][T17943] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1552.757292][T17943] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1552.764181][T17943] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1552.770721][T17943] blk_mq_run_work_fn+0x167/0x2f0 [ 1552.776304][T17943] process_scheduled_works+0xc3d/0x1630 [ 1552.782416][T17943] worker_thread+0xa47/0xfb0 [ 1552.787564][T17943] kthread+0x38b/0x480 [ 1552.792179][T17943] ret_from_fork+0x514/0xb70 [ 1552.797319][T17943] ret_from_fork_asm+0x1a/0x30 [ 1552.802647][T17943] [ 1552.802647][T17943] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1552.809900][T17943] __mutex_lock+0x197/0x15a0 [ 1552.815084][T17943] nbd_queue_rq+0xc1/0xff0 [ 1552.820057][T17943] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1552.826167][T17943] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1552.833046][T17943] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1552.839573][T17943] blk_mq_run_work_fn+0x167/0x2f0 [ 1552.845153][T17943] process_scheduled_works+0xc3d/0x1630 [ 1552.851274][T17943] worker_thread+0xa47/0xfb0 [ 1552.856426][T17943] kthread+0x38b/0x480 [ 1552.861052][T17943] ret_from_fork+0x514/0xb70 [ 1552.866204][T17943] ret_from_fork_asm+0x1a/0x30 [ 1552.871545][T17943] [ 1552.871545][T17943] -> #4 (set->srcu){.+.+}-{0:0}: [ 1552.878715][T17943] __synchronize_srcu+0xca/0x2f0 [ 1552.884217][T17943] elevator_switch+0x1e8/0x7b0 [ 1552.889541][T17943] elevator_change+0x2fa/0x480 [ 1552.894868][T17943] elevator_set_default+0x375/0x440 [ 1552.900633][T17943] blk_register_queue+0x404/0x4f0 [ 1552.906215][T17943] __add_disk+0x6b8/0xdb0 [ 1552.911106][T17943] add_disk_fwnode+0x100/0x3a0 [ 1552.916428][T17943] nbd_dev_add+0x733/0xb60 [ 1552.921433][T17943] nbd_init+0x168/0x1f0 [ 1552.926148][T17943] do_one_initcall+0x250/0x870 [ 1552.931460][T17943] do_initcall_level+0x10a/0x1a0 [ 1552.936961][T17943] do_initcalls+0x59/0xa0 [ 1552.941843][T17943] kernel_init_freeable+0x29d/0x3e0 [ 1552.947716][T17943] kernel_init+0x22/0x1d0 [ 1552.952607][T17943] ret_from_fork+0x514/0xb70 [ 1552.957747][T17943] ret_from_fork_asm+0x1a/0x30 [ 1552.963069][T17943] [ 1552.963069][T17943] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1552.970944][T17943] __mutex_lock+0x197/0x15a0 [ 1552.976094][T17943] elevator_change+0x1af/0x480 [ 1552.981525][T17943] elevator_set_none+0xb5/0x140 [ 1552.986942][T17943] blk_mq_update_nr_hw_queues+0x5ef/0x19e0 [ 1552.993321][T17943] nbd_start_device+0x189/0xb30 [ 1552.998811][T17943] nbd_genl_connect+0x167d/0x1cd0 [ 1553.004403][T17943] genl_family_rcv_msg_doit+0x233/0x340 [ 1553.010537][T17943] genl_rcv_msg+0x614/0x7a0 [ 1553.015591][T17943] netlink_rcv_skb+0x226/0x4a0 [ 1553.020916][T17943] genl_rcv+0x28/0x40 [ 1553.025470][T17943] netlink_unicast+0x8ef/0xa80 [ 1553.030803][T17943] netlink_sendmsg+0x7f0/0xb20 [ 1553.036215][T17943] sock_sendmsg_nosec+0x14e/0x190 [ 1553.041803][T17943] ____sys_sendmsg+0x54e/0x850 [ 1553.047120][T17943] ___sys_sendmsg+0x2a5/0x360 [ 1553.052353][T17943] __x64_sys_sendmsg+0x1b1/0x290 [ 1553.057842][T17943] do_syscall_64+0x166/0x520 [ 1553.062992][T17943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.069436][T17943] [ 1553.069436][T17943] -> #2 (&q->q_usage_counter(io)#56){++++}-{0:0}: [ 1553.078109][T17943] blk_alloc_queue+0x544/0x690 [ 1553.083523][T17943] __blk_mq_alloc_disk+0x194/0x390 [ 1553.089185][T17943] nbd_dev_add+0x494/0xb60 [ 1553.094255][T17943] nbd_init+0x168/0x1f0 [ 1553.098979][T17943] do_one_initcall+0x250/0x870 [ 1553.104298][T17943] do_initcall_level+0x10a/0x1a0 [ 1553.109788][T17943] do_initcalls+0x59/0xa0 [ 1553.114676][T17943] kernel_init_freeable+0x29d/0x3e0 [ 1553.120424][T17943] kernel_init+0x22/0x1d0 [ 1553.125324][T17943] ret_from_fork+0x514/0xb70 [ 1553.130469][T17943] ret_from_fork_asm+0x1a/0x30 [ 1553.135788][T17943] [ 1553.135788][T17943] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1553.143045][T17943] fs_reclaim_acquire+0x71/0x100 [ 1553.148539][T17943] kmem_cache_alloc_noprof+0x5f/0x600 [ 1553.154553][T17943] __kernfs_iattrs+0xdd/0x380 [ 1553.159797][T17943] kernfs_iop_setattr+0xe6/0x3f0 [ 1553.165310][T17943] notify_change+0xbba/0xea0 [ 1553.170556][T17943] do_truncate+0x1c2/0x250 [ 1553.175571][T17943] path_openat+0x18a6/0x20f0 [ 1553.180731][T17943] do_file_open+0x23e/0x4a0 [ 1553.185804][T17943] do_sys_openat2+0x115/0x200 [ 1553.191046][T17943] __x64_sys_openat+0x138/0x170 [ 1553.196489][T17943] do_syscall_64+0x166/0x520 [ 1553.201634][T17943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.208091][T17943] [ 1553.208091][T17943] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1553.216655][T17943] __lock_acquire+0x164c/0x2de0 [ 1553.222077][T17943] lock_acquire+0x115/0x350 [ 1553.227143][T17943] down_write+0x91/0x200 [ 1553.231945][T17943] kernfs_unlink_sibling+0x6d/0x240 [ 1553.237710][T17943] kernfs_rename_ns+0x575/0x9e0 [ 1553.243132][T17943] sysfs_rename_link_ns+0x16e/0x1b0 [ 1553.249096][T17943] device_rename+0x110/0x210 [ 1553.254247][T17943] cfg80211_dev_rename+0x16f/0x250 [ 1553.259925][T17943] nl80211_set_wiphy+0x63f/0x3430 [ 1553.265523][T17943] genl_family_rcv_msg_doit+0x233/0x340 [ 1553.271629][T17943] genl_rcv_msg+0x614/0x7a0 [ 1553.276690][T17943] netlink_rcv_skb+0x226/0x4a0 [ 1553.282018][T17943] genl_rcv+0x28/0x40 [ 1553.286639][T17943] netlink_unicast+0x8ef/0xa80 [ 1553.291966][T17943] netlink_sendmsg+0x7f0/0xb20 [ 1553.297292][T17943] sock_sendmsg_nosec+0x14e/0x190 [ 1553.302862][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.302877][T17943] ____sys_sendmsg+0x54e/0x850 [ 1553.316288][T17943] ___sys_sendmsg+0x2a5/0x360 [ 1553.321515][T17943] __x64_sys_sendmsg+0x1b1/0x290 [ 1553.327095][T17943] do_syscall_64+0x166/0x520 [ 1553.332255][T17943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.338703][T17943] [ 1553.338703][T17943] other info that might help us debug this: [ 1553.338703][T17943] [ 1553.349042][T17943] Chain exists of: [ 1553.349042][T17943] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1553.349042][T17943] [ 1553.363509][T17943] Possible unsafe locking scenario: [ 1553.363509][T17943] [ 1553.370985][T17943] CPU0 CPU1 [ 1553.376368][T17943] ---- ---- [ 1553.381757][T17943] lock(&root->kernfs_rwsem); [ 1553.386575][T17943] lock(cpuhp_state_mutex); [ 1553.393724][T17943] lock(&root->kernfs_rwsem); [ 1553.401035][T17943] lock(&root->kernfs_iattr_rwsem); [ 1553.406446][T17943] [ 1553.406446][T17943] *** DEADLOCK *** [ 1553.406446][T17943] [ 1553.414618][T17943] locks held by syz.4.19158/17943: 4, last CPU#1: [ 1553.421062][T17943] #0: ffffffff914f05a8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1553.429387][T17943] #1: ffffffff916d4540 (cfg80211_mutex){+.+.}-{4:4}, at: nl80211_set_wiphy+0xaa/0x3430 [ 1553.439188][T17943] #2: ffff888066ba0800 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_set_wiphy+0x4e8/0x3430 [ 1553.449244][T17943] #3: ffff88801cec4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_rename_ns+0xb4/0x9e0 [ 1553.459311][T17943] [ 1553.459311][T17943] stack backtrace: [ 1553.465229][T17943] CPU: 1 UID: 0 PID: 17943 Comm: syz.4.19158 Not tainted syzkaller #0 PREEMPT(full) [ 1553.474717][T17943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1553.484803][T17943] Call Trace: [ 1553.488116][T17943] [ 1553.491082][T17943] dump_stack_lvl+0xe8/0x150 [ 1553.496252][T17943] print_circular_bug+0x2e2/0x300 [ 1553.501339][T17943] check_noncircular+0x12f/0x150 [ 1553.506343][T17943] __lock_acquire+0x164c/0x2de0 [ 1553.511241][T17943] ? __lock_acquire+0x747/0x2de0 [ 1553.516258][T17943] ? __lock_acquire+0x747/0x2de0 [ 1553.521249][T17943] lock_acquire+0x115/0x350 [ 1553.525795][T17943] ? kernfs_unlink_sibling+0x6d/0x240 [ 1553.531216][T17943] down_write+0x91/0x200 [ 1553.535497][T17943] ? kernfs_unlink_sibling+0x6d/0x240 [ 1553.540932][T17943] ? __pfx_down_write+0x10/0x10 [ 1553.545820][T17943] ? kernfs_root+0x1c/0x230 [ 1553.550366][T17943] ? kernfs_root+0x1c/0x230 [ 1553.554930][T17943] ? kernfs_root+0x1c/0x230 [ 1553.559483][T17943] ? kernfs_root+0x1ea/0x230 [ 1553.564156][T17943] kernfs_unlink_sibling+0x6d/0x240 [ 1553.569406][T17943] kernfs_rename_ns+0x575/0x9e0 [ 1553.574326][T17943] sysfs_rename_link_ns+0x16e/0x1b0 [ 1553.579580][T17943] device_rename+0x110/0x210 [ 1553.584228][T17943] cfg80211_dev_rename+0x16f/0x250 [ 1553.589381][T17943] nl80211_set_wiphy+0x63f/0x3430 [ 1553.594461][T17943] ? lock_acquire+0x115/0x350 [ 1553.599184][T17943] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 1553.604719][T17943] ? nl80211_pre_doit+0x543/0xfa0 [ 1553.609882][T17943] ? nl80211_pre_doit+0x86e/0xfa0 [ 1553.614957][T17943] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1553.621329][T17943] genl_family_rcv_msg_doit+0x233/0x340 [ 1553.626919][T17943] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1553.633052][T17943] ? bpf_lsm_capable+0x9/0x20 [ 1553.637762][T17943] ? security_capable+0x7e/0x2c0 [ 1553.642747][T17943] genl_rcv_msg+0x614/0x7a0 [ 1553.647298][T17943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1553.652378][T17943] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1553.657785][T17943] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 1553.663286][T17943] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1553.668794][T17943] netlink_rcv_skb+0x226/0x4a0 [ 1553.673622][T17943] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1553.678689][T17943] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1553.684023][T17943] ? down_read+0x2b9/0x320 [ 1553.688477][T17943] genl_rcv+0x28/0x40 [ 1553.692495][T17943] netlink_unicast+0x8ef/0xa80 [ 1553.697309][T17943] netlink_sendmsg+0x7f0/0xb20 [ 1553.702209][T17943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1553.707568][T17943] ? aa_sock_msg_perm+0x144/0x210 [ 1553.712631][T17943] ? apparmor_socket_sendmsg+0x98/0x360 [ 1553.718244][T17943] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1553.723574][T17943] sock_sendmsg_nosec+0x14e/0x190 [ 1553.728651][T17943] ____sys_sendmsg+0x54e/0x850 [ 1553.733488][T17943] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1553.738921][T17943] ? import_iovec+0x73/0xa0 [ 1553.743467][T17943] ___sys_sendmsg+0x2a5/0x360 [ 1553.748172][T17943] ? __lock_acquire+0x747/0x2de0 [ 1553.753156][T17943] ? __pfx____sys_sendmsg+0x10/0x10 [ 1553.758399][T17943] ? futex_wake+0x51b/0x5f0 [ 1553.762965][T17943] ? __fget_files+0x3a2/0x420 [ 1553.767681][T17943] ? __fget_files+0x2a/0x420 [ 1553.772315][T17943] __x64_sys_sendmsg+0x1b1/0x290 [ 1553.777296][T17943] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1553.782802][T17943] do_syscall_64+0x166/0x520 [ 1553.787426][T17943] ? trace_irq_disable+0x3b/0x140 [ 1553.792490][T17943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.798598][T17943] ? clear_bhb_loop+0x70/0xc0 [ 1553.803315][T17943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.809260][T17943] RIP: 0033:0x7f76faf9fb19 [ 1553.813722][T17943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1553.833372][T17943] RSP: 002b:00007f76f91b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1553.841825][T17943] RAX: ffffffffffffffda RBX: 00007f76fb226180 RCX: 00007f76faf9fb19 [ 1553.849827][T17943] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 1553.857829][T17943] RBP: 00007f76fb037b70 R08: 0000000000000000 R09: 0000000000000000 [ 1553.865829][T17943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1553.873917][T17943] R13: 00007f76fb226218 R14: 00007f76fb226180 R15: 00007ffeec195248 [ 1553.881956][T17943] [ 1554.392606][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.422574][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.238581][T17927] syzkaller0: entered promiscuous mode [ 1556.238696][T17927] syzkaller0: entered allmulticast mode [ 1556.248908][T17925] syz_tun: entered promiscuous mode [ 1556.249253][T17925] vlan4: entered promiscuous mode [ 1556.308127][ T1254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.331741][T17936] 0ªX¹¦Dö»: renamed from gretap0 [ 1556.334328][T17936] 0ªX¹¦Dö»: entered allmulticast mode [ 1556.472670][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1556.943513][T20402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.512577][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.552549][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.592559][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.622597][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.343072][T20402] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1561.662554][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog