last executing test programs: 5.796664124s ago: executing program 1 (id=4313): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x42, &(0x7f0000000040), 0x3b) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1404, 0x200, 0x70bd26, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) 5.592771111s ago: executing program 1 (id=4315): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001"], 0x60}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4000054) r1 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030c00000000000000000000000100090000000000030006006c0000000200000000000000000000000000800002000100000000000002060b00000000030005000000000002000000000000000000000000000000010018"], 0x60}, 0x1, 0x7}, 0x24048051) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, 0x0, 0x42) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000058000004580000000b0000000c00000002000093000000001000000004000000070000000b000000100000000200000006000000000000100c00000008000000000000100c0000000d00000000000001000000006c000300020000000000000b0000000000612e2e2e300000616100"], &(0x7f00000002c0)=""/50, 0x7b, 0x32, 0x0, 0x8001}, 0x28) socket$netlink(0x10, 0x3, 0x8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x0, 0x7}, 0x14) (async) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x0, 0x7}, 0x14) 5.054693835s ago: executing program 1 (id=4323): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xc}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x38, 0x2, [@TCA_FW_ACT={0x34, 0x4, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000ffdbdf250700000014000200fe80000000000000000000000000004208000400ac1414bb140003"], 0x44}, 0x1, 0x0, 0x0, 0x24080850}, 0xc010) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 4.972618774s ago: executing program 2 (id=4324): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080fa735b4be1acbba447000000fee724c9c20da604f18cd281052c05f6df24bf874e2989ca05e314e8fdef698fb28afe5a38d204d57353f91694416a38c36db58bc9f05adf86c81fd85bedaf", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000040000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000530000008500000005000000bca90000000000003509000000d44a6be5000d0000000000b702000000000000739af0ff00000000c509040004100000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007060000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 4.848381221s ago: executing program 2 (id=4326): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00dd0000000000000000000000000000009b750a830a590f5e9b6ac7"], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000130001010000000000009e5a07000000", @ANYRES32=r6, @ANYBLOB="18040100000000000c001a800800058004000180"], 0x2c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, 0x0, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xe) sendmsg$nl_route(r7, &(0x7f0000000180)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_newnexthop={0x18, 0x68, 0x1, 0x3, 0x2}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r9, 0x300f000, 0xe, 0x0, &(0x7f0000000300)="00fda518984624ffb2c59f00d925", 0x0, 0x70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.720379365s ago: executing program 1 (id=4328): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x5c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001000), 0xfa4f75bbacff275d, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f00000000c0)={0x9c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x4}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a8c5ca6cbfc09a468ad2d5b786444773af11c58804f333b7"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "12bc81684d8717a5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "09736f2b990f5096"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xffffffff}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e52fe92f715faa8cb42f412be5481a96f4a5754dd0a05f29"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5e4dee356c98ec9f6b51ebf3130a4ea4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f4eac6de7220c421"}]}]}, 0x9c}}, 0x4004) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000e7070001"], 0x20}, 0x1, 0x200000000000000}, 0x0) 4.719992458s ago: executing program 0 (id=4329): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x33c, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x288, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x64, 0x2, 0x3, 0x17, 0x11, 0x8, 0x4}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1d}}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}, @TCA_STAB={0x74, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0x26, 0xffff, 0x8, 0x2, 0x2, 0x8008, 0x2}}, {0x8, 0x2, [0x6, 0x6]}}, {{0x1c, 0x1, {0x4, 0xc, 0x7f, 0x8, 0x0, 0x10, 0x3, 0x1}}, {0x6, 0x2, [0x5fd]}}, {{0x1c, 0x1, {0x7, 0x80, 0x0, 0x1000, 0x2, 0x7fffffff, 0x10088, 0x4}}, {0xc, 0x2, [0x4, 0xffff, 0xff52, 0x9]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0x10, 0x2}}]}, 0x33c}}, 0x0) unshare(0x20000400) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r4, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) close(r3) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x4, 0x0, 0x5, 0xe, 0x0, 0x0, 0x2000000, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x0, @remote, 0x5}}]}, 0x70}, 0x1, 0x7}, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275c, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f00000001c0)={0x10, 0xffff, 0x0, 0x7, 0x81}) recvmmsg(r5, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r8) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000924a41866dad5b8bd421180df2eec3068320163d94bd64c346b0939db833e6c522907d6c7f984187951df0ee9bc00843c4652a8f3f05c730d495fe050000000000000035b2494fac4455b04cb4ff8f13eba642e51142bcffcb9d8dc64ef9524bd8fe029d61721e9abe401e50d20100000015e55588e009f1da869a567eff99ecd2ef2942281391d682379f41684c38f5f6c4468f9f3f0d1bb129f2e12a26490a48e7d651af9b92e09e130627ef", @ANYRES16=r9, @ANYBLOB="01002dbd7000ffdbdf250100000018000180140002006970766c616e31000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) 4.719551777s ago: executing program 2 (id=4330): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=ANY=[], 0x34}}, 0x200000d5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000040), 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=ANY=[], 0x34}}, 0x200000d5) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) 4.515259816s ago: executing program 1 (id=4333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000040a0101"], 0x14}, 0x1, 0x0, 0x0, 0x444}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0xb, 0x0, &(0x7f0000000080)=0x1a) 4.48083754s ago: executing program 0 (id=4334): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000003c80)=""/4106, 0x100a}, {&(0x7f0000001480)=""/4113, 0x1011}], 0x3}, 0x1801}], 0x1, 0x10020, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket(0x29, 0x2, 0x0) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x200008c0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x10040) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x28, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x76}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000015) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfe, "", [@nested={0x104, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0a}, @typed={0x4, 0xe9}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x88, r4, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x72}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6bb}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x100}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0xf0f]}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x541}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x4fe}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xea}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x40) 4.405257857s ago: executing program 4 (id=4335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000700)=""/21, 0x15}, {&(0x7f0000000740)=""/37, 0x25}, {&(0x7f0000000780)=""/95, 0x5f}], 0x7, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}, 0x40000000) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff1, 0xfff2}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f00000003c0)=""/75, 0x4b}, {&(0x7f00000004c0)=""/199, 0xc7}, {&(0x7f0000000600)=""/201, 0xc9}, {&(0x7f0000000700)=""/21, 0x15}, {&(0x7f0000000740)=""/37, 0x25}, {&(0x7f0000000780)=""/95, 0x5f}], 0x7, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}, 0x40000000) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff1, 0xfff2}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}]}}]}, 0x4c}}, 0x0) (async) 4.319798132s ago: executing program 1 (id=4336): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000000580)=@raw=[@btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @ldst={0x3, 0x2, 0x5, 0x6, 0x8, 0xfffffffffffffffe, 0x10}], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe1b) socket$unix(0x1, 0x1, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x49, &(0x7f0000000140)=0x5, 0x4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x20000000}, 0xc) 4.308364964s ago: executing program 2 (id=4337): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000080)={&(0x7f0000000040)=[{0x0, 0x0, 0x4, 0x9, 0x4, 0x800000000, 0x40, 0xe}], 0x1, 0x38, 0x1, 0x3}) preadv(r0, &(0x7f0000001440)=[{&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000000100)=""/76, 0x4c}, {&(0x7f0000000180)=""/64, 0x40}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/248, 0xf8}], 0x8, 0x2, 0xb39) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) (async) ioctl$NILFS_IOCTL_GET_CPINFO(r0, 0x80186e82, &(0x7f0000000080)={&(0x7f0000000040)=[{0x0, 0x0, 0x4, 0x9, 0x4, 0x800000000, 0x40, 0xe}], 0x1, 0x38, 0x1, 0x3}) (async) preadv(r0, &(0x7f0000001440)=[{&(0x7f00000000c0)=""/2, 0x2}, {&(0x7f0000000100)=""/76, 0x4c}, {&(0x7f0000000180)=""/64, 0x40}, {&(0x7f0000000200)=""/103, 0x67}, {&(0x7f0000000280)=""/112, 0x70}, {&(0x7f0000000300)=""/11, 0xb}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/248, 0xf8}], 0x8, 0x2, 0xb39) (async) 4.163176921s ago: executing program 4 (id=4339): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x78, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'macvlan1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x4}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x8180}, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}]}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wg1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 4.101372389s ago: executing program 3 (id=4340): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}, {0x10, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x850}, 0x0) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x20008844) (async) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000040)={@none, 0x4, 0x2, 0x9, 0x7, 0x7, "eaa655e1842409abb52da37b6c7bd17145f7db770615336d2dd8cf65dca8b9e3c62bac38d1ac3c3d7a48f16c7fbbe1b3628c6591b3ca290e31893b8dbacda46ea4bf5b208d2280d6d518fa73215c7fbd40b8647232da332d1c70d60f7d4d7c26b045375d680ea3cb89e8d7634ade955a0e47c84ca1688cde93995d93dcc4dcd9"}) pipe(&(0x7f0000000100)) 4.049239313s ago: executing program 2 (id=4341): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001640)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x168, 0xffffffff, 0xffffffff, 0x168, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x5, 0x2}, {0x4, 0x1, 0x2}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x0, 0x3, 0x6, 0x3, 0x6], 0x4}, {0xbfff, [0x3, 0x5, 0x5, 0x4, 0x1, 0x1], 0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x4, 0x1dd) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) sendto$inet6(r3, 0x0, 0x3d, 0x4088010, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000100)=0x6328, 0x4) setsockopt$inet6_int(r5, 0x29, 0x33, &(0x7f0000000000)=0x8, 0x4) sendmmsg$inet6(r5, &(0x7f0000000440)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r5, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002063, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x0, 0x3, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) 3.981416777s ago: executing program 4 (id=4342): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r2, @ANYBLOB="021c4c260a000200aa"], 0x28}, 0x1, 0x0, 0x0, 0x44801}, 0x840) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x88f5}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6004}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x3f, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3e}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2e}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}]}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xfffa}, [@NFTA_SET_ELEM_LIST_SET={0xffffffffffffff7f, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x0, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x178}, 0x1, 0x0, 0x0, 0x885}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x12, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35}, 0x90) 3.884755651s ago: executing program 3 (id=4343): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)={0x20, r0, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=@ipv6_delroute={0xec, 0x19, 0x10, 0x70bd2b, 0x25dfdbff, {0xa, 0x10, 0x20, 0x10, 0xff, 0x1, 0x0, 0x3, 0x1000}, [@RTA_ENCAP={0x40, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0x3c, 0x1, {0x0, 0x38, 0x1, 0xff, 0xffffffff, [@dev={0xfe, 0x80, '\x00', 0x35}, @mcast2, @loopback]}}}, @RTA_METRICS={0x87, 0x8, 0x0, 0x1, "40620d6b34afb4f506e12c662542010630d6f19ba7ffd186097aea593a15be88d45690ff99a374a959b286b90b7e2085ba8f3472feb6b0979f591fd0f353388e2a8553b4b5e06467d461708e93ba9331c3e54f2d8a7570415310d46df7f98e84db643b2420ad23c960abce3f47ed16f07d3bbee5a7bae86a77e2f0032cff9481bddb27"}, @RTA_IIF={0x8, 0x3, r2}]}, 0xec}, 0x1, 0x0, 0x0, 0x48080}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x7b, 0xa, 0xff00}, [@call={0x1d, 0xa}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @generic]}, &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e}, 0x2d) 3.704707898s ago: executing program 3 (id=4344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b704000000000000850000004600000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.651953202s ago: executing program 4 (id=4345): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180300000000008000000000001000008510000006000000180000000000000000000000000000006500000000000000180000000000000000000000000000009500000000000000840300000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x8, 0x1, 0x48, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x7800, 0x8, 0x99, 0x2}}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x5dc}], 0x1}, 0x4) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r11, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000340)={'wg2\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000380)={@private1, 0x0}, &(0x7f00000003c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000400)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x3, 0x400, 0x4f, @mcast1, @empty, 0x1, 0x7, 0x5, 0x2}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x15c, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.450356258s ago: executing program 3 (id=4346): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000740), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590211c90000002f1eafbcf706e1050000006558000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) sendmmsg$inet6(r1, &(0x7f0000007900)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x3d66, @local, 0x8000005}, 0x18, &(0x7f0000000280)=[{&(0x7f0000000980)="dc", 0x1}], 0x1}}], 0x1, 0x931766f6319eed40) shutdown(r1, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000300", @ANYRES32], 0x60}}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x83, &(0x7f0000001c40)=""/4130, &(0x7f0000000000)=0x913) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0x15, 0xff, 0xf}, 0x2c) 3.385342742s ago: executing program 0 (id=4347): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000003c0)='cgroup.clone_children\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x74, 0x0, &(0x7f0000000000)=0x43) sendfile(r1, r1, 0x0, 0x8) 3.225375745s ago: executing program 0 (id=4348): socket$kcm(0x21, 0x2, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendfile(r0, r3, 0x0, 0xffffffff004) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xe, &(0x7f0000000080)=ANY=[@ANYRESDEC=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 3.021138029s ago: executing program 3 (id=4349): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) recvmsg(r2, &(0x7f00000001c0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000140)=""/5, 0x5}], 0x1}, 0x2100) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x84, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0xfffffebb}, @NLBL_CIPSOV4_A_MLSCATLST={0x58, 0xc, 0x0, 0x1, [{0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f19}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5a8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x180e16bb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47a2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2b49af5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6eed}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf2f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3783}]}, {0x4}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbae1}]}]}]}, 0x84}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@random="5bb65d3f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x24, 0x66, 0x0, 0x3, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @empty=0xe0000001}, {0x4e20, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xba, 0x100}}}}}}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300b68c530300000000030000000900010073797a30000000005c000000030a03000000000000000000030000000900030073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c000140000000000000000014000000110001"], 0xa4}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r9, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0xcc}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r11) sendmsg$IEEE802154_LLSEC_ADD_DEV(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x34, r12, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x4, 0x700000000000000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r12, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) 2.953277403s ago: executing program 4 (id=4350): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="85100000f5ffffff95000000000000e51749000008000000000000000010000085000000042ba509b6725c0fea000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240)={0x8000001}, 0x8) close(r0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000e500000000000000808500000053000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x100003}]}}]}, 0x3c}}, 0x20000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r4) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)={r0, r5}) 2.294111363s ago: executing program 0 (id=4351): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="14000000100035", 0x7}], 0x1}, 0x0) (async, rerun: 64) r0 = socket(0x2d, 0x2, 0x0) (rerun: 64) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f0000003fc0)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x5}, 0x1c, &(0x7f00000004c0)=[{&(0x7f00000001c0)="ae04c8736bb28d8af1febe5ef9711aef4acce1c2989b6ae3571d87b000a02ca6a94a70cba7361fed8e7e3506afeef1e2e34d3c1def4e6d55304c0438b12830d95c81cfee194de96101d083d49c1ae3282e30f6d62901a51a307f6260f82982ffd0fe", 0x62}, {&(0x7f0000000240)="2877952b8f4937c67a2757ccd56a8f56862b4d3b3589093252e94d6ca6b983e854f2407b3db1d166ff1050fa80a1b872f468c83df155046bf932379d65248f668a0304fd1e6282895c6a5748396da74d4c3da9a32d28896f59962056a62927014a67aaf56a74b8a3ae400eaf6f0563c9d61c112bbddc78d81caa714e72cebcfd62d96a71013f9a62", 0x88}, {&(0x7f00000003c0)="1b95743401cb84b66034625c1af5ddbbcbe8f8923362cfc1d839e78c3cc160a6206e4c349d2c25a0fb21b5685d75f58b661620059b792f82ff5efe3c72e197899713eeaebdda62f966cd6731df42e48c87c9d42e980d093fa13aebe64c0738d30b62a788af32f8e86a4e31651a9c4cc432be026dff058fedb7c294b5d0b76137c5bf74537370d81b2bca537f6a6d6f1d4401cbd34ed49518d656a1f5445b77361fc65533e1bba7e64a1cdde45f9a605090f1afcae51c1bd8d6ac5bace26b7dc5a56dd9af9f4f2012", 0xc8}], 0x3}}, {{&(0x7f0000000500)={0xa, 0x4e20, 0x4, @mcast1, 0xfffffffd}, 0x1c, &(0x7f00000006c0)=[{&(0x7f00000005c0)="a00b95a3e2941fbad04aa49d348b3c82fc73fc7b437053e8c2f64c30b6ba", 0x1e}, {&(0x7f0000000600)="e4c6d5596107b9566f586b2ef7ea09025cecc23f8361b88ded2a84119c7d5e2849f2e281df1b0dd37ee7aef888b873568ae91f73e9e791aba0e9327a3bf6c33ac560ac0d73b69d60c277d4dbaa290a049d709c80ed8117ac4fbf5ecfa2f94554d2fdfbc0f32bc951846ae7d7d3d5123a3dbceae728ad2bd6358b969114819b0869", 0x81}], 0x2, &(0x7f0000000700)=[@pktinfo={{0x24, 0x29, 0x32, {@mcast2, r2}}}], 0x28}}, {{&(0x7f0000000740)={0xa, 0x4e24, 0x3, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000780)="cb1ca8b7cef07aff43c38e8086c7d9cb8b364b57380d54d5646a4dc4586461d816e44ca1d03886aef2a630558c0a1c45417993b30c5eee67423436f556261473934b10e0936686bae19b9f1dd643ae76643b3a6c9974bfe1f52de995da49900a84e9c3f3bce49015c1c6a1a49c9e37563f0590f0680cd111230e812b3ac47fa9", 0x80}], 0x1, &(0x7f0000000840)=[@flowinfo={{0x14, 0x29, 0xb, 0x4}}, @dstopts={{0x78, 0x29, 0x37, {0x4, 0xc, '\x00', [@padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x3ff}, @hao={0xc9, 0x10, @private1}, @hao={0xc9, 0x10, @mcast2}, @pad1, @calipso={0x7, 0x20, {0x1, 0x6, 0xfc, 0x8edf, [0x7fffffffffffffff, 0x9, 0x80]}}, @ra={0x5, 0x2, 0x7fff}, @ra={0x5, 0x2, 0x9}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x32, 0x8, 0x1, 0x52, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, @ipv4={'\x00', '\xff\xff', @empty}, @empty]}}}], 0xe8}}, {{&(0x7f0000000980)={0xa, 0x4e22, 0x7ff, @private2, 0x1}, 0x1c, &(0x7f0000001b00)=[{&(0x7f00000009c0)="6059f1db594fea5402a249df7854fd4b8907cf1b79952cbe78c6201a312b90cd", 0x20}, {&(0x7f0000000a00)="923c11e7c845562a5ebbd3576f8ae9e02b9770c3b3f0aedf7940e91c6a5ab364aebc88e4ac7d66b8db73aa235759658a3e33d77c6cb0680961b1c222597fe7f447eede85303724b6f986c9f2cec879d8ecea8933b50664883536b9895458e187c14b9355329bd789370e1c28c5275e759a0715b550b553e6725f23130d975ffd297f50a1f32d3bab8afe3a2da37554e174e4fa5cfca8dca7ecc162a0487be8e766880db1b6183fff05b1b97a15850489c527bcbf2c191160c53e1f140c72b1a25e629aafa4140940a2e2", 0xca}, {&(0x7f0000000b00)="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", 0x1000}], 0x3, &(0x7f0000004100)=ANY=[@ANYBLOB="14000000000000002900000008000000000100000000000090000000000000002900000037000000b1f5000000000000071800000000000000f91add00000000000730000000030a9683000200000000000000050000000000000000000000000000000600000000000000ff7f00000000000005020006c9100000000000000000000000000000000104019501050000000000010600"/159], 0xa8}}, {{&(0x7f0000001c00)={0xa, 0x4e24, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7}, 0x1c, &(0x7f0000003ec0)=[{&(0x7f0000001c40)="5bc48fba5dc49f9423fd0c163d1ab6857bf6ce34c5297b9dbaebe96b7704c3193a80ae0b9b4364b280d537c0cae2a75b236b8dc2ad5d4bc068076889dc9faacc6f453f464a02170a675b6a41cf9f64f69c4cfbafe6355677eff8950d09cb4701495c5430d7195641f2811d8463aef35ef618826f186610378516dc4b96ce5841cf5248ef7450b3bdf46ad61669b63dcb67ff3ed08ff261d3415fbc2493f3c4cd7735c8f43cc0508cc9175c425d6aadc20815636dee031a706b7cee725b9e481c1ad10e594e0cc6e10761581424334bbfe231a94a7e6c659ff218a56cf9422821c3c54be6a103b0dd159f97903cfee637", 0xf0}, {&(0x7f0000001d40)="2e83d7399636e11d4c795eeb2f4d9a432f7d762d21f5656eb3a4", 0x1a}, {&(0x7f0000001d80)="6905d7a9e7a17dc7a4eeb37a22a032191aa1a4c3f89665c36f2aaa6ac9aa88202547741ca5a32d585a3b6a74921f93e6a4680e65adbcdd098fdb3e101f7765bb9b56ccb40651551a29e2ebee1d231c3d54eb0df42e14535dde60643e6afff2267436b48dc32375afc5c460dea0d0dfe270536940eccb3c30bd44514ba5d66dbb163419e169f6c4aba742702689149cb6d924fc4bea55c3a57bf3fab4efc8d587f20dbc8976ee0c23d91c875a372a239255ec51c43cb18f1186568ddd2b10a37ca226927d52e080182f420470051a0f43956df315768d37d7123b78528cab971d4a29f8231a3db208589098f2b8aaf372daa569839e1e378c194897912cdbe12d92130328c541e6b6b383ed5439062aa5c49d4285981e43e679ff6994d3bad67bd988ec5b6153b5f865f1ed7c635e7116e6da60a31408c271446b6018e1f93614e09c5dc3c66c4803defae5c38fc968c07f2b112a79a5e5791836f92909d3a997342320d21daab10e48c7cbdc432e182ca6224250d128d6f684fc852ac0472c024dfe16179e388ba53826ce2eea50a2dd00567b64e380012c0611843fc6ee0b3902d5d3e38041ccb29d1101038037c91fe3473e94a2cc30ffa4f7a0ea092a881aabd75c6a2a4ce8152862a223ab845173ceeb1606cd069d748206586e2743e57743d43e8307d7607936cf600c4650790e53131d34e36aca7c20b5d3f65c666dfc873d135787b98fa30807baf22f75f7fcffa16d51348c23ee180b98118884c60dd76ee7c1f1fdbe36ff1f6c62d7fcdb9941246e8e5e1130cb98fc82297a4996eb740108e37b4e9ff95361b8d977cc2883ae24cbda39f48e3d694cae89f4d791d1c657d4f9cbf66d8967cbb01cca3bedc339d9e61968826d2139f3329586cb4e3d741b3fe7f3fe813031ee71174a542ed16b5c63c4d37c421b807637eda6500b3e34cd0a82b5389b2b0ff200a163e22b60250fc902f7d39eab1301506c03735d3e5697d502b8187bf5c405d541bbe80cf96d15184935677da65979ad48fa194068a7e8cc7ffc92b244b7f32de183c3f9bf9b401f28d9cb7cdc6d30834fd41bd76c1c0f9c9323f08ea499a7100a2180f9c2e8d9014f0916ca15fa95e5e602d2f19a22911ebf31b4a553301c7c9d2c98c85b7aca835d4e29d4d0717872f80e6e1925c3394788cc111a885b31ef3ad36ebb7091dd84a702b3dab941eaf2e4b559fabb97b14c911c20ab41c156a1e78f1f7c556e08dc6d170edde789d15f84d6a0b7c64b2634486c1e7bd213266f95f3f7e13518d4be53f0b570c59c9106521080680f6dc81f2a311c8020156539c7b60e108a6946f784289ab2b461081b09750c7a608345e2e7aca9e2e773dfde939a1ba0046198e7a62b8e0efff2492f9688e8eb5af7842db781c10cb5cd27a898989cf641bf234caf00febeb8563b33f3cf8efcfb946f239f6aa57e1aed6e3404869e3abbb45ba43f6053ef329b39921934aa9aa49a45432c9cf22bf2789db9916a5446c0853998ebc6ce29285a888ba4e0110f0c2fb84d8b35aea30ba0d184b849887c6c38e16e2bf2968d3b3d2e274ca0406a43ada4350b609157e2c1fcdc225aad55f95c0402801d400ec34d5967296c562c53c356cace6ad545dd06f6343680b13af8eab9b4935a9de913cf954feadf8ae2563620b739a190afc327546b7e1e3904173339a3591fbf59e96dc3ef2e9e48dfd6e23e3fc37a95241a7f1224e54562cfb4396a5f4a6a19ca1cdba574645fe959141fa07fdba5acbf3fee63607aeab6b956b65a480133c4dc8c2c04154ee8a3db2b0ecaa501e89b29cdab57dc96d6fbee210b5e711b730951911c3edb3777e3dc9153895e5d57dc49b438717b4d0241a308bab28f79931998846c26e5b4aaabbdeea951b8957d7813e01b876a0e67d9d0aa4c4ee12756b28a103b232058d320f5997cd575911b803a26e24e3948cc9a03531daff33e222ba75178a6e3dff54c47788b7ac43435c3933fe0caf793c235b1a71e47b319f83fa6b65578ee43a599d7fd32324281a575254445becf23589bfa7433bbc7baed7b49f0ad193920d719f49bc87fcac079ca011b3f0eab7f4e1a9e4edfbfab56d1587caeebdf96fb86fc281ada6eb2cc69e5ecdd424a3b685c411f71e8ddf4709015715bd1f5b571fa53c5261fd685791db3e4f2f266cbcc5df92e4571054ecd9b9a508ad6c76052a2515c7167ed461ec455f0c571fad2765317e73e293a3089eb66dc3bfe68070336ed9c9a8ce769113a9fcf66ac15be7d51a1ec7c11f501b8933c316a1c4e7b3a9c64d5651a70ee4cccd4cc787f7028a7f70edba9f42114d5e50bb3d66074676df3673e9d9860db90304d1d20ee32374e333b0dccb124668a025febeec86b6ed7a5d141e15f6cd2e9c89b4a4688d93037cc220610dfa15e351832b063736c0a7064c2dfa81868c6284c445e0aed8a3c93cd2d13509fcb00e800888e4e75a73818d57b6e61a4aa8d152b173582a4201617adc1f513d48f010c6952f9bb7392351af23f975592a017950040d898b03c73d4aafe6af960c22fa439779c51b6e29569143cd01183b0c9c963c0b4cf9dfbaca6b4720595dbc738b0378e71cc6be55f315fad2b06dea915d535aba5ca9e5fe2f2baef4453f5d5e89dd5172cfc6ac163a7212cccfa46b7f6e954bc0adcc1f9e552358a86e1c48c8b61551e66e9b75aa79f8ad49f2e33527e6cb12ec0eb47dcc269af966ff85028d96fa9c9d28a46d4e6e1f9f029b61e6ab9e402164006763279d6b1767c8e304193299b52ac8669a9320458c1bb83e6543279b6525992b1acb5d70a6715fc570ca7e853f395d7b0d16931df15a59fca63ff35ab94c76e196c3bfa4e87228ca858c38655d1cd8afb9364bbb185be27461710a6818f963e7a42b68db5ecb3ca105a5a0411493186b2e95d4bed9e9933782a82a96e3a92dc606261e384b28bb0d02e069a21df6ea0af34f633a2dd8ce0038e94a195246cb417a64ebb727f1f14e4d219a6eaa70777bf54d0dc468016632a7a4f0650b90a1e62358dc0a050713d0094859284a447e0a3224b88a491fceece0aaa4fb646e3d7e389d1fbb77212c96964db6ad28e6abe544fdff8574c30fce0b939140f792f7f9f05513883e56d3aab1f224c2033815c55f16c153b87dc96fe1e8d60fd68cb2bf692502913346bb0a4fa2918856a29ba071919a83e4905ae5c339cd7367014840ae81f9d6cede157c330ee029596828fd98743e0cb906882f87b418b219f1756642bcb30ddb7969ec8a44c28d931f209ab85b31a509495cb33d782a64970541e10ee7d2b7801ee39ff78138332fc890883987b375ef2142f5a5e4432b2566212c1c64ba3f497f06170059afdf38edfdf464cc040fb09d4b1b5fc681ae6c33fb7b333287adbb0797626591e887ded0bc100f79fa2fd7061f4edc95de8523874e5db50c8fffaaa27d8b606bae2de28124fbd42bb31a8e379f0727f3911167758091d36429ae89b9f25d1c9560e2b3b75994003ad73644fe0b3f2a10977092a0f43553b44a2a0c268a022897fe27e645183869e32dbfeb3639e032366db4745567096ca82c93fad4255d636a246a109fb5b58f1ca198e95a300c17c15f019d59df8c2535df557481e98c38ca4dcdece2681ff963023f2993a7cf2fb1e037b33c4a4b5605cbd826590ecd8dac0d59ade4705ef7a1f5d401ea0b99dfeaebe17fa6ba274be93c9be817ebd871ee499047fe15ea62582fc28b3bf367980ac1c8c8acd5922fcda762daed4e50c100179641749f2a1117e161975e4f2a1a9038dc310c96b2362db235488203123f4647ec8c0d92419d1836bdc868a2b664aa850064adc29f50bfe2db0c7f85ec38c2624b81dee185ded13881bfeffc9a021cfa7c8355ad7cfcec44dc3d68ce04777348d1c500ab365a1c3e8339cb037abcdd83629623b350c5799e94d107ccc03de8d3869b103aac076c3da156faa220f0f4ab2bfd0889a60aa294dfefbd04e20e4c935249a31f3ea2f68997c33de1cb751eca245aaf91c134fc043585d49df761c14a46da4edccbdcf099a078714ed2074b2f646af6352ed0f188b4a227564ea8b014355998a4429b89f5f5927037738c8a906391bd54589715560b4be5188dbc5a9854e7f9378ded5172a0bc27a07bd8eb74ae9b83659e01e3cf71808afe36bb42c368a4c184d049e9a391568b87b8f672616d52bd39aeb65757803cde8fa3001479bdfe6292375b64cf9378579ad5a2ba70de7f8d5a24b8668ee3995752623bfaa4c95d3f65bcf6e70c1be24cb7aaaa56086c59135e6032ea1bd925b74673e66afb65e3bb1f978c78841ccc701ef4c3cf0a3b0c2bb21e00311ac75b5957ceb661e75ee356ac89d0d1d8e9cdeafc2f0295cd26034dd872e2ed1095be5d401a536346b06962d80bb462abef6bbfc4c02ddf85be9c41584974099484849dceb23c3ba53ff410abc43b728a621ed2237e0ff7c1a18f3924c9787adf6a777c0c703dda588d45f9dd5dbba9547f9ef3b4483f9c925b9132449d83b9399909baf52e27d64522931bd26d4007c7c15b8c14ce119734430f5ef8c0b976759bb9426409974012a96b68979bf6d629e2bc304617bdd1dd426ac404c204f2c7aa70b6a85bd5ba50b2530ea77b3c99d81641d8716cf274d6d5d5f3e1abdaa92c54adf56ee6e0e2428479eb54fb8879a7e431d86dbb1e6b7b6013b64a70576f53809c525c57c7260a8c19fda180ef48b2caa757e369dba0de6ab480c3997625be06428bff73a24b678226be74329f11705a60c1c7fce7e6d5dcd42cb39d7542f78cf7387ff2b8f16620ded6ed6fb5b1aafb8f36cebfb6e75792388dc6a666d0527a2f13c421ca935a1b44ae67c7b00212a2986937718f07fea32ce7cb1249cfdeda543ceb260989e37caa7dfe219e2d69a20a489cfc69474aa018c84ab36ec8cc69f8b1cabd8e25dc9ddbb3a1944abf6c180bf0c5e09437a3b466cfb13eb14cd175d7d4bdf2725626c54ba241f213779373c2213271474a68fc45b8acb96f0c0b58a1300f2cafc5dd7ba75ac42b858e4a82e035ae5569525f9541a39a0b42dff9e4c2c18b7dcf982969c2b5fda5d526f2cbd827280f0237f48a09641269f77e2c4c21f9ba2f54707a3baa2a4dca8082419052fa3699c9aab7c095851ea72caaea9601a735ae67e35cc987f3b43016095fc40d063d43c1b33c724c80e4fd90c0790644e6f575119e463af8e507a7884fba10551b42c6b787c95d591d214ab4d097c10fe8739ae4d5b85815f4e37f74f5af4a8a18fd08f58f387fbdf2b7723b32b1fe4fd90ad9281e774ec0b48c7635e93adb3c1c3fdab54fd76bc7008d2a1f2a19d384186103baecb4e9be441d7cd815cc60698c1cfd9f04a1c7f7804fd5ab5d00ad3ec75f5a578c6cfc082825fcb126cd66e4b5fe20c3e408ecdaa02b8da20b19f3c5443f45a57c0bbafde94f80e17cc2b61508d9394facea842dc77802a8acc1738280830db962ea5788b0df5ef3cf847e249366aca42b56402f9bc62863bce6ef95b1e1177c0c3f21bbfa709720c49f2c7e7f624409d343708fd2741baf6989fc16595df469dc4f466ffe11d436539b105e3840c125f008facbbc8e8dcd4645fcac448ee5122f09e00bcd4fb06c252af882c7d56b81baa29c74d99268c27c82a6830a1bb60a6bb01756ab627d23e62e31250e88b1b08fb0bfcc876af356885359fef04dfa7e0f5b1c1a3ed83d2c21dcb23ccb99f00bb99fe1d17956673cb6e0109d54a2267772814c35f5b1edf304ff1ae5dbb3b", 0x1000}, {&(0x7f0000002d80)="c85b452db84b58d80c618bf737c56a071e4a08c34764d0e2325f49b34c37d4930627ab", 0x23}, {&(0x7f0000002dc0)="db2e29a9ac30b5b9f766226267", 0xd}, {&(0x7f0000002e00)="a4c2093a4b501da58125f2010356a3e5b0f1835ae23c0166281a70daaf3c75ba6be3fc72534174a69db9170d54605b3771aa951fdf9ed31ec333d16267d784932a23562133e58602c6e5658aa82580942629fbd1a08579541a03ba31519871f000ed6a8f6d2ee488fc9efaf652a746c6b56cb3cafb8764d4eee842a903919b86212308facb04ddd6936de0ca84b98f33d9cec63181a83aa4ff6caa9a4d42ee3330098b86531c70572375cb4393b798d1dc3e2dc9ab0667", 0xb7}, {&(0x7f0000002ec0)="1b5d6b4f8db5cebf17a399a5da7b5aff23f4efd67ed10a4f34ee3f0a4ebc718d0fd3a40d9017de068bcd2488a38cc2e0c38e52da6539056e1a73e559effb03232eea6883bf0169a234c26a7b09a60313e69b6664564e88ae95f5af40f5956b50e675836222b5528760cebac5493fa6b6e81adc6816966b0b2051b6479bcc665869f6a14c6e72049d0ce5ac7333cdec6b76add9e7020f5f415b7f2a64c11c316b5ef0989d15bd8d6d0c45080b4fbc097f05b3edb31facbe6fe7c5ad7fa6a54cefb9ba9d5c19530fa7339ac120c8010925f040d0444b911fc1e56e90aa4b7a9b88d3dfaba1fdf46c8bd4a9b68ebb9aa58f196662351fc2988fd450cf426d9248c27687178fbe5b238cc7594701bf8397850868f791dbb47ef9274844540680365c758daa16a8bc33ee6284d7ca2656b87d8ad7495442f89d14a57bd20430838273a1667bd6ad2756d192e72c8559aa9501404580cef78b6f6bac090c8de281ce18d745f68543869d7a5df3b1ebca0eb834ac2ba23cae7a8e5ee9ebc6f28ab346c401f0de23cce7789d6a6904027f705f6d8014e8215949a02e46b815622c2a340ecedda9729fa6d1687ca7cf47094341236c61473c83c6af10c8ef82097277d67a59b5ef636d8a90bbe13a072126435e63fc0d1af9948bfea5c61339943f8b35da87571854d875b575e3185417ac116000137b052c36241e685d752f2fe2d59d5fc06afed3261fb0021e427eb4cb6a3143b8c82f5e5673c8d657c3e0acd6ad6bda2e0cfa9218fdd887f3f34d212b9aed1626f9473949828bfa1fe32d116f25c26217d71a38877202289af997435b53f94db6351e14a78a66839b3eee9472b5eab15fac950d84c54a870e45afe6083d81f20cc61c75564ed6d2689cfdffa73c9cc807513833538c80192c0e74697e4d940a5353cb435cd256931150c3f3fe82938d58e997a723c3ecd5f0b1341f08303e1baa3541ffc12755665e2be7c4dd74942799f0c469f2d64d0fdf82b4cb48182ebf94351d06f9d995b00c9782a2ee8c9bc8599e5a886c98280a8a73866c612bf7ab87613f1a6437b711f40d7c1533dd7dbef1ab191be9c3912aad65807fecec55a313ae1d1d7fe58e98c8ccc12459175aeafd562448b2661bfc7119e4a8addfd25c1afe51452437bebdf5849d989cc622c0f6d29b442eb60d5fa4d671e8ab14b5dbc87a0d39fb2002d7796a3c05d6a3166fd5cec5dd70ca172ddde23fad180a3af319563e70c203bf72cf539ab5663f9af67fb7dcc5318a3c39563f66245660ba269f51a57a2cf1a02695ff12a4ed01c13571cf29796ab3a3e87a3dd61c9d9483d4d3d8b88e32922e98defc3e17a1d7481561a1ba85865fa1b25a1016b2d396a941533b2c72e3803536faa5753f7f8fdd2fb07358eaed7176ff1a119a02124dfa1cdd42c0b3d20dc66ec3a0d6b397963ac68931d4dec135a033b8c45585597501ea2038e89de198d35a1a306ef2f6c366ae5803118ba80fa170d2cfede767b87a56f81750b8d4b00be10faaad2334e3b95ab3325329bbd9ada1d6499b49aafcc7353cfcfed1694d1f6ad4d30554be48747545c74d3359ac232119f71e077007e6cf38042d1b5039a16ff0be8e155a83e4680014e9566e9a8ab2661c75c5505455c0f0c7f12647bc855c1c8450d54a18c2d2fdba8a2dec2f1a3b202c426df8e64e786b90e4d104d1373e2669d248d28845e38068e63c547d1a3dde8ee3465522c955dc7d1611d45d310a4f570fbeee6f5eb0928b6e80fe649a61446e0ff38c139a31837bb7b5bc43048750dd059984a6db520574e9e376bee3b61ff8c0dee3d6b1e4fbcb309506169cfe5e9f8832faed9d9adbe4a1da732fa7b2ddcefbb70b2582fbe376090a643dc0ae085572db740380d4f552a0bd51fcbb955596170f4e2b8f40bbf24cb76073eba2af525fcf2728bbb8e15617e894fa78cdd05453f24013eb872463e4cd19e844ebeddb1b771ecaf1e4265d4ddf816b351388d4673cf42ddffe6751590d8e2c577f3703b5118b72144c928b0c1fdd541b29328e6dfceafff48a4c0af4864eef0693a55c3218110e562346316d549c1bfe14216616ea530c7c5f3abfd9a93f13f0ea9078444a86ef19480cb842479c11968849b57b661ea995fe0238069a729f8a2f615712fcf54d480b00adf522685f2c7fc526faa32e087aae2bbd031c76a556c2b35e0f61b52cec1286b651b7f4a8c8f60e75525bc8a32ef0d50757855aa866a258520d7a46e955326f3c60f67cdb3ddbbfa35885296e1f5d16b60572cb176b7e362b49afa589f1187190d10dec01a6a36604d8b9442812dcf0c9f3f981685592fd3e4749b5a7c2448a36ee8cddbb5817bbdac2832f9921eafb761521908d4d44be36f89b1fad879330ba7a15e73bce2dc9d24d5f0e53a75148915d756dfcbff0fd38e22c445e753a519a3e4d337110208ac363a21ff8dd8e28744cbe8d3d8befd2b07c716e37757c7323164743cac65607053d949edbb00910fedf8904216eb30c9a8bc57ee07b93b88c65f3c98cdbaa5ca3c40be243c5b49ce47ef9f3a09e53e8976fcd2c73ebfb1712fa589a90e2345096a565847e82c8909cc8251425b2174e1e3341ca2654c17c448856e9f40aab1067469a8de11ad8ae26f11d3981628db9c53cdc2b04c124d200997c31aece8b77f6092d85576eede3a225d72488000543ee36d3a7e2c3edc191a36728291b3261f8f6536f38a2a5ba934153ca9e69616d2db63686b06e173c9c34671e4b22a2dbd54546c6aeee43867d72db88d3dd7d8029a27487ca0b88a75f7af270e5c98f44502b234030e5999e36675835775dfdfba63b816d11dc03eb7554ce2ac35114c339ec719e4e35ddcdcd31a4749b49fd59bc17c906b22842951c1dbcde204ba141799675c5736bc79ead13b3e2d01f80068ebcd61939670ce509391a15f1b4bfb9ff82c2daa8d325bbf1bb3a6c8a7b72ad94e02b549ec78e81d2e46437abadfccdc98451ea602557f982dffbf573246b0223633be8d6ed1a85a3485a7d650028b4b3686ae5a6b3ece2d61d1022877081e98758bf59716af4a3345a1a80ec7f0f7a954aff77d6d299f51817fe0f8ecb73846f733d3cc46b11e11b89bd2e08792904c5b2dfa5a60e85cd420eff7e89c959cd2484ebcfb8c760d3588b5edc2e76448159e3e69d9aa6fb529b58fb5ac578c6ce8c9ae1ca027470d08dc345138e8f18d8bd296b1b8ffbd87a0197e45b77080f4abbd50c1f26e2669748e219e042c913d0a71c251dae0470d4f2928bb89e1048da24a6dbd43aadbd62ddfa4624f2f0aa446a31dccff7c78f8032c8c758a0e0876f3670f0f94f244649d138ff0433e18278eb287e0705a7d88d605ce985a55eba97598f033265f4dde35f75a987d11e800fc72e467ead8b89ff049c3bfa1bb8e9c0238094ded1a2cbffdc2eb7a104bcc0188fecdd3edb3afa906b5a6f403304cd2dadd61526cc974fdd7e6e00f31a39dbdaca09001e569d1937d338c33f919632ee41a2dee467cbe08566be3fad4c154050d7510a423da5ab03f930afe7dc34b932b82d8ac96087678df502812576f8d9bfc4df09196da72f0411e08ee37df0fd468ef4af1b89a63774ae68b52f7e1ae3e590029bbb0e6a68e40a236aecbebf4a3d731ba4ef2837abd04ee50270812d55990548e60cbad44bf4ca3530bd82efec5080ec9fedabfbb304d401f28aa9b4a4c15ca70f3e2e2cf2147a76ac9a4d313b3f8fb52f312f473df4aa1c3b09d046a0342ecf54779e2d928bf6125879a751250fcb9d487fe6ba7093381eb22cafdb72e942e55b3db2f75dbcba169b421c776a55f9ba417b056abbcd74cf911aee2fd297b2ffc0754b2391d1bd79647417863bff3d05f1d70b7123bd802eb62940b94ae657ac88859854adb7a276e1c71ecefec7a997ab7bac3149e05d13b09c66ebae4f7db7a5609bf97d7fa4f4120ff0e97c4832021bce847e894b8ecf0e975da6f4c2f86e9a56290e737983aee73ff9d8e708697bd254826e3dc16f69ff99620241a32059b83e96238946294a40c8e848fce233e612e8812aa4d8b70f49bf4d9ac8a97aeb072ee98476b59cb95d6992b9ff609668c6362095c43af69456ee646101e25bb4d2de359f1c308736d5d91a1920c5da0aa38f255b8f6f853c374a6a51968f40a76c3f47753ba35b0076520d374ba85932deaa62f9402ff4b91ace239eef557e78c14623ddf71b2a5d553779a8c72b26b63226692907f047660035939895022d84849f629470275abb28d1e229796d67ec8a5927635389e55a17e584dfe68db486d587b6a7c2b53acc53e3a033195c2592dd71f8ebd7fbeea5e72c49ccc447523320726b9eb65d84510ea02d90953665d75302210a94da38c35c34543928bf5a73be10f92d7237f11f50dbcd1c35f9d1aa2318c6fdb17f48aa6fb6c0c207c0c13dff7f90b12eb5b946f3c6af4ae0579e2a0690d421f9251d51e8db83769e8f623224d4a08979ce5d618014aeae9e74fe00a4fa15e1706b158aa6570770b2250dc1165d63704f59a5b6fab93a56a1167be095183bfa7a10a44e8a2007b1f8a75069710dd7550dbba5a15468ff5fde7e0baea9f18e61d2a2386567257d19ddf5fa7b2ed053fcb4fe03a0e0a787b8a761a075036b59d328a9460ce8d8ad5413bc52c2293d51851f0da0819c345dee34e048f502dbf271743784cce7421372cacc5ce607289589bd94755219ffb385cb024d430a2ce48e5b368b3a7b4e5a7876ece2ed5ceb56cec13751198b7a025301d15705ef6b42420dd04aa1bbb7c77c6bb2b0760bbf12447d56735bba60a03d0a3ac2dd0b84fe1afcbc84c8dd516da40dd9c63980309e479b7cd30591e1b46b7e070a3586a643de4ae8385dfbe317ef51bfceb63f3b1e9f2899b655528f9f0352e60c1faa978807490769ef75485403001c01820e7e9db1b016c901b71dd907128f1017a091a29c8f044ffc90b8c901413a33dd8cdf91aa915ad80d3f813e9edfb8ff9e0a532be36c393b3bea4af91e48e8090db54ae0947683a9bc5ff50ff8fd6dee316d8c3691b414c7bb4fc0d34d44b358093c25b9e98d9e94da0360eada9ef1828e0d71519c7a04fa7588ac984988f986d1e26dc055b6b6f1b30c5d78d4e5ded96d47844fa958a79169ff0f5ae9e0b6582c8da51204f7489c9e855cebe0d991448de703aae9406bfb5b88042d64845c6de3507723b477800e92680ae102da72b1193ba13b3221d3402f39e51bdc2bd87bc94580d4b5153b088939c9ff4ce82269f1cf0538d01e7144260c1351a7c413230b9f3a48b7bc034d5cb52492355a9f460813e29f96d6cd68b1dd3b94789674c234eb401b1b6bed65cf103f666876403ad8d8a2c10116a6e47f6446f1f1c4ec7915fc6ec47b3c11ef36f525a19b34c3c89f26f1455ba41ad234dd66a707a04dd6603e45e1434c59b61b234e1fb1cc4f6102fbca868b8cc504fc00817ac8cf986db05e616e059b7da4db1d10653faa286f893c3c40e9fefcc2da8bb9b18b9038a002aa98096fb7f8282d9d5dfe8ec929ab5a087f17863b7c1584e099cfb6ac36784cb67c8c677db5be155b3b89f966d1a0780f34067feb02bb89e0c28258efbc600d05916ffc6973edcbaa3c381dae82de6b3488c3e2865fddc34000456bfe999875b1e14ab62692ccfe86ac505ce187f12f909d55457341cb2bae22c8a00e20d8c639b12a3a13aad2f99291a71280a1aa48db2f1e6503a34a61b3272eb82744f67913f641e99accfc370f044944d7d00c23ad84750e83", 0x1000}], 0x7, &(0x7f0000003f40)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x2b, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x0, 0x0, '\x00', [@pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}], 0x60}}], 0x5, 0x2404c080) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x5d, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h'], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, 0x0, &(0x7f0000000140)=0xb) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) socket$inet6_sctp(0xa, 0x5, 0x84) 87.974239ms ago: executing program 3 (id=4352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRES32=r0], 0xb0}}, 0x0) 87.520404ms ago: executing program 4 (id=4353): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9, 0x3f}, {0x4}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001200)={0x5c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}}, 0x0) 1.18722ms ago: executing program 0 (id=4354): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3800000055003d0902000000fcdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="010301000700000000000000000000000000000008"], 0x38}}, 0x4000000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f0000004e40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000440)=""/135, 0x87}], 0x1}, 0x6}], 0x1, 0x10000, 0x0) sendmmsg$alg(r6, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="5cafbb19415082dc2d68ffed07036d0d5efb9b5b4aa4e9a4d27912e19aae487301239d3937561ccd182963aaec4f0da35db9774e343ed1481e4654a186e66f54441b06277fdce96084f808db6c16958d2e26bc2aed9ff05a186dd1275539ebe1290f9fe485bef994029e46888f17e178c7fee7c96eccf5ba47c10a0279e7ca7af27cc9916bd8c60fe999c0c2f044f8333028438bbf945070d290aa78a328d79addc16966ca29b99966324138b25de75739", 0xb1}], 0x1, 0x0, 0x0, 0x8000}], 0x1, 0x8810) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) 0s ago: executing program 2 (id=4355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x20048811) recvmsg(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/225, 0xe1}], 0x1}, 0x40020123) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): 16128 R14: 00007f8855c16090 R15: 00007fffe13d65b8 [ 358.141337][T16572] [ 358.433268][T16575] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2961'. [ 358.446937][T16575] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 358.516589][T16580] netlink: 'syz.0.2960': attribute type 1 has an invalid length. [ 358.517572][T16357] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.526677][T16580] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2960'. [ 358.653839][T16357] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.693770][T16357] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.726844][T16584] batadv0: entered promiscuous mode [ 358.738062][T16588] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2962'. [ 358.739912][T16584] macsec0: entered promiscuous mode [ 358.755254][T16584] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 358.766041][T16584] batadv0: left promiscuous mode [ 358.834891][T16357] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.850397][T16357] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.877259][T16357] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.033440][T16602] xt_hashlimit: size too large, truncated to 1048576 [ 359.059411][T16598] tipc: Resetting bearer [ 359.246583][T16604] : renamed from vxcan1 (while UP) [ 359.292291][T16357] hsr_slave_0: entered promiscuous mode [ 359.312579][T16357] hsr_slave_1: entered promiscuous mode [ 359.322899][T16357] debugfs: 'hsr0' already exists in 'hsr' [ 359.348591][T16357] Cannot create hsr debugfs directory [ 359.469446][T16616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2970'. [ 359.593590][ T8575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.618430][ T8575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.667951][T16623] xt_TCPMSS: Only works on TCP SYN packets [ 359.822844][T16627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2975'. [ 360.066803][ T5653] Bluetooth: hci5: command tx timeout [ 360.093670][T16357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.123120][T16645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2979'. [ 360.132755][T16357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.177230][T16635] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2977'. [ 360.206840][T16357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 360.245811][T16357] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 360.498908][T16659] netlink: 'syz.0.2984': attribute type 1 has an invalid length. [ 360.570705][T16357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.590017][T16357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.601150][T16357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 360.612528][T16357] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 360.636625][T16659] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 360.659146][T16661] veth11: entered promiscuous mode [ 360.745179][T16665] netlink: 'syz.3.2983': attribute type 3 has an invalid length. [ 360.790019][T16357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 360.823657][T16357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.846518][T16357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 360.867960][T16357] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 360.913430][T16681] netlink: 'syz.0.2988': attribute type 29 has an invalid length. [ 361.024147][T16357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 361.047212][T16357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.059997][T16691] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.2989'. [ 361.073642][T16357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 361.087629][T16357] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 361.168346][T16687] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 361.387448][T16706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2993'. [ 361.461292][T16710] netlink: 'syz.4.2995': attribute type 1 has an invalid length. [ 361.485892][T16710] netlink: 'syz.4.2995': attribute type 1 has an invalid length. [ 362.049153][T16357] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.085326][T16357] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 362.125821][T16357] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.177911][T16357] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 362.198420][T16357] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.251095][T16357] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 362.313080][T16357] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 362.352651][T16357] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 362.405072][T16760] macvlan0: entered promiscuous mode [ 362.532458][T16763] x_tables: unsorted entry at hook 1 [ 362.540516][T16763] sctp: [Deprecated]: syz.4.3013 (pid 16763) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.540516][T16763] Use struct sctp_sack_info instead [ 362.569385][T16357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.591414][T16765] sctp: [Deprecated]: syz.4.3013 (pid 16765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 362.591414][T16765] Use struct sctp_sack_info instead [ 362.613988][T16357] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.661012][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.668254][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.708143][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.715357][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.998053][T16781] __nla_validate_parse: 5 callbacks suppressed [ 362.998081][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'. [ 363.379762][T16805] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3021'. [ 363.394982][T16804] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3022'. [ 363.436177][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3022'. [ 363.462744][T16811] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 363.800334][T16829] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3027'. [ 364.142691][T16846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.455234][T16854] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3034'. [ 364.901718][T16867] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3035'. [ 365.047568][T16357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.349848][T16357] veth0_vlan: entered promiscuous mode [ 365.399253][T16357] veth1_vlan: entered promiscuous mode [ 365.430066][T16889] netlink: 'syz.0.3041': attribute type 10 has an invalid length. [ 365.480002][T16889] team0: Port device dummy0 added [ 365.555956][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.584823][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.599574][T16357] veth0_macvtap: entered promiscuous mode [ 365.622680][T16357] veth1_macvtap: entered promiscuous mode [ 365.698378][T16357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.740425][T16900] bridge0: port 1(syz_tun) entered blocking state [ 365.772023][T16900] bridge0: port 1(syz_tun) entered disabled state [ 365.808583][T16900] syz_tun: entered allmulticast mode [ 365.833468][T16900] syz_tun: entered promiscuous mode [ 365.878142][T16357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.905963][ T46] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.945028][ T1118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.974608][ T1118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.038345][ T1118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.073851][ T1118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.278345][T16922] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3052'. [ 366.300790][T16922] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3052'. [ 366.375595][ T3391] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.395675][ T3391] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.409285][T16928] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 366.420961][T16928] syz_tun: tun_net_xmit 86 [ 366.526507][ T8575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.555435][ T8575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.624327][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.851925][T16944] syzkaller0: entered promiscuous mode [ 366.861883][ C1] vcan0: j1939_tp_rxtimer: 0xffff888042e11c00: rx timeout, send abort [ 366.880802][T16944] syzkaller0: entered allmulticast mode [ 367.040542][T16951] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 367.198635][ T5651] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 367.213037][ T5651] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 367.228277][ T5651] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 367.238874][ T5651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 367.252051][ T5651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 367.362294][ C1] vcan0: j1939_tp_rxtimer: 0xffff888042e11800: rx timeout, send abort [ 367.372057][ C1] vcan0: j1939_tp_rxtimer: 0xffff888042e11c00: abort rx timeout. Force session deactivation [ 367.426284][ C1] syz_tun: tun_net_xmit 86 [ 367.664663][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.722323][T16976] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 367.835161][T16983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.869489][ C1] vcan0: j1939_tp_rxtimer: 0xffff888042e11400: rx timeout, send abort [ 367.879262][ C1] vcan0: j1939_tp_rxtimer: 0xffff888042e11800: abort rx timeout. Force session deactivation [ 368.327317][T16995] syzkaller0: entered promiscuous mode [ 368.348025][T16995] syzkaller0: entered allmulticast mode [ 368.368043][T16995] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 368.378797][ C1] vcan0: j1939_tp_rxtimer: 0xffff888042e11400: abort rx timeout. Force session deactivation [ 368.566762][T17005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 368.704412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.771258][T17008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3073'. [ 368.918565][T17026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3078'. [ 368.968362][T17026] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3078'. [ 369.079158][T17030] xt_hashlimit: invalid interval [ 369.301284][T17044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3083'. [ 369.344791][ T5653] Bluetooth: hci3: command tx timeout [ 369.561629][T16953] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.569048][T16953] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.576937][T16953] bridge_slave_0: entered allmulticast mode [ 369.593206][T16953] bridge_slave_0: entered promiscuous mode [ 369.611055][T17057] syzkaller0: entered promiscuous mode [ 369.639400][T17057] syzkaller0: entered allmulticast mode [ 369.672109][T16953] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.677461][T17061] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3088'. [ 369.679807][T16953] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.696355][T16953] bridge_slave_1: entered allmulticast mode [ 369.707834][T16953] bridge_slave_1: entered promiscuous mode [ 369.744337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.835054][T17061] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3088'. [ 369.852235][T16953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.865597][T16953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.875571][T17061] bridge0: port 1(syz_tun) entered blocking state [ 369.882103][T17061] bridge0: port 1(syz_tun) entered listening state [ 369.888939][T17061] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.896088][T17061] bridge0: port 2(bridge_slave_1) entered listening state [ 369.924463][T17061] bridge0: left promiscuous mode [ 369.939920][T17061] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3088'. [ 370.041779][T17061] bridge0: port 1(syz_tun) entered disabled state [ 370.048517][T17061] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.097042][T16953] team0: Port device team_slave_0 added [ 370.107175][T16953] team0: Port device team_slave_1 added [ 370.261850][T16953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.308920][T16953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.407846][T16953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.417733][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3096'. [ 370.461192][T16953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.487341][T16953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.522308][T16953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.577287][T17098] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3097'. [ 370.598635][T17090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3094'. [ 370.784375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.900100][T16953] hsr_slave_0: entered promiscuous mode [ 370.921041][T16953] hsr_slave_1: entered promiscuous mode [ 370.948014][T16953] debugfs: 'hsr0' already exists in 'hsr' [ 370.968884][T16953] Cannot create hsr debugfs directory [ 371.000851][T17105] team0: Device gtp0 is up. Set it down before adding it as a team port [ 371.111471][T17123] netlink: 'syz.0.3101': attribute type 3 has an invalid length. [ 371.133319][T17123] netlink: 'syz.0.3101': attribute type 3 has an invalid length. [ 371.385483][T17137] netlink: 'syz.1.3104': attribute type 8 has an invalid length. [ 371.425163][ T5653] Bluetooth: hci3: command tx timeout [ 371.699439][T17150] netlink: 'syz.2.3108': attribute type 1 has an invalid length. [ 371.712133][T16953] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.754155][T16953] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 371.824345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.859611][T17157] netlink: 'syz.3.3110': attribute type 1 has an invalid length. [ 371.963423][T16953] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 371.995562][T16953] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.163898][T16953] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.175137][T16953] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.380769][T17179] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 372.528391][T16953] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 372.539690][T16953] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.810001][T17195] bond8: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 372.824101][T17195] bond8 (unregistering): Released all slaves [ 372.864341][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.212832][T16953] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 373.226076][T16953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.234050][T16953] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 373.243592][T16953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.252090][T16953] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 373.271337][T16953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.281158][T16953] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 373.292841][T16953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.395047][T16953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.417675][T16953] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.432924][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.440078][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.457499][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.464696][ T3321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.504903][ T5653] Bluetooth: hci3: command tx timeout [ 373.823206][T17244] __nla_validate_parse: 7 callbacks suppressed [ 373.823225][T17244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3132'. [ 373.844708][T17244] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3132'. [ 373.904336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.966726][T17248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3133'. [ 374.183130][T16953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.486198][T17270] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 374.903984][T17298] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3143'. [ 374.944348][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.969740][T17300] netlink: 'syz.0.3145': attribute type 1 has an invalid length. [ 375.005048][T17300] 8021q: adding VLAN 0 to HW filter on device bond8 [ 375.036441][T16953] veth0_vlan: entered promiscuous mode [ 375.052866][T17300] macvlan6: entered promiscuous mode [ 375.059788][T17300] macvlan6: entered allmulticast mode [ 375.067452][T17300] bond8: entered promiscuous mode [ 375.073520][T17300] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 375.106402][T17300] bond8: left promiscuous mode [ 375.159104][T17305] A link change request failed with some changes committed already. Interface 26rB may have been left with an inconsistent configuration, please check. [ 375.188334][T16953] veth1_vlan: entered promiscuous mode [ 375.304705][T16953] veth0_macvtap: entered promiscuous mode [ 375.402575][T16953] veth1_macvtap: entered promiscuous mode [ 375.469051][T16953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.523783][T16953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.585473][ T5653] Bluetooth: hci3: command tx timeout [ 375.601643][ T1177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.653607][ T1177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.668302][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.697194][T17326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3152'. [ 375.721559][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.942268][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 375.971796][T17338] Bluetooth: MGMT ver 1.23 [ 375.983573][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.991967][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.138673][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.192282][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.663196][T17377] bond1: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 376.675632][T17385] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3164'. [ 376.676540][T17377] bond1 (unregistering): Released all slaves [ 376.692792][T17385] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.3164'. [ 377.024344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.222924][T17362] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 377.463162][T17390] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3166'. [ 377.559686][T17392] netlink: 'syz.4.3167': attribute type 10 has an invalid length. [ 377.734094][ T5651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.749924][ T5651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.758497][ T5651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.787835][T17394] bond1: option all_slaves_active: invalid value (222) [ 377.801782][ T5651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.811472][ T5651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.821505][T17394] bond1 (unregistering): Released all slaves [ 378.064390][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.556145][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 378.606476][T17436] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3180'. [ 378.655234][T17436] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3180'. [ 379.104329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.165338][T17465] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 379.318913][T17465] syzkaller0: entered promiscuous mode [ 379.326646][T17465] syzkaller0: entered allmulticast mode [ 379.906457][ T5651] Bluetooth: hci4: command tx timeout [ 380.144510][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.184415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.441949][T17460] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 381.984440][ T5651] Bluetooth: hci4: command tx timeout [ 381.987089][T17494] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3192'. [ 382.017916][T17495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3193'. [ 382.138166][T17501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3192'. [ 382.179201][T17501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3192'. [ 382.213598][T17501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3192'. [ 382.224319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.367982][T17501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3192'. [ 382.385539][T17501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3192'. [ 382.400587][ T4967] block nbd1: Possible stuck request ffff88802723e000: control (read@0,1024B). Runtime 120 seconds [ 382.411976][ T4967] block nbd1: Possible stuck request ffff88802723e1c0: control (read@1024,1024B). Runtime 120 seconds [ 382.425706][ T4967] block nbd1: Possible stuck request ffff88802723e380: control (read@2048,1024B). Runtime 120 seconds [ 382.438404][ T4967] block nbd1: Possible stuck request ffff88802723e540: control (read@3072,1024B). Runtime 120 seconds [ 382.457867][T17501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3192'. [ 382.474191][T17516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3199'. [ 382.504180][T17506] syzkaller0: entered promiscuous mode [ 382.512612][T17506] syzkaller0: entered allmulticast mode [ 382.756724][T17525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3200'. [ 383.264334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.080439][ T5651] Bluetooth: hci4: command tx timeout [ 384.307997][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.621113][T17400] bridge0: port 1(bridge_slave_0) entered blocking state [ 384.628629][T17400] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.636497][T17400] bridge_slave_0: entered allmulticast mode [ 384.643624][T17400] bridge_slave_0: entered promiscuous mode [ 384.658248][T17400] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.675519][T17400] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.695798][T17400] bridge_slave_1: entered allmulticast mode [ 384.731679][T17400] bridge_slave_1: entered promiscuous mode [ 384.869922][T17400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.890868][T17400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.961893][T17400] team0: Port device team_slave_0 added [ 384.971474][T17400] team0: Port device team_slave_1 added [ 385.028751][T17400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.036462][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.082456][T17400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.117347][T17400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.127110][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.153586][T17400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.265088][T17400] hsr_slave_0: entered promiscuous mode [ 385.280342][T17400] hsr_slave_1: entered promiscuous mode [ 385.292115][T17400] debugfs: 'hsr0' already exists in 'hsr' [ 385.298260][T17400] Cannot create hsr debugfs directory [ 385.344335][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.010534][T17400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.103946][T17400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.144436][ T5651] Bluetooth: hci4: command tx timeout [ 386.159737][T17400] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 386.384377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.421724][T17569] syzkaller0: entered promiscuous mode [ 386.450834][ T29] audit: type=1800 audit(1780681910.626:5): pid=17575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3217" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=84 res=0 errno=0 [ 386.505713][T17569] syzkaller0: entered allmulticast mode [ 386.549794][T17580] netlink: Unknown conntrack attr (type=2304, max=9) [ 386.582752][T17400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.609227][T17400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.636609][T17400] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 386.689196][T17569] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.844023][T17400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.857901][T17400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.884255][T17400] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 387.129019][T17604] __nla_validate_parse: 1 callbacks suppressed [ 387.129040][T17604] netlink: 7060 bytes leftover after parsing attributes in process `syz.2.3225'. [ 387.424328][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.477112][T17613] pim6reg: entered allmulticast mode [ 387.695084][T17400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.705951][T17400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.723274][T17622] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 387.732100][T17400] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 388.337628][T17400] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 388.375868][T17400] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.402456][T17400] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 388.464334][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.497129][T17400] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.516020][T17400] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 388.562592][T17645] netlink: 'syz.3.3232': attribute type 1 has an invalid length. [ 388.568445][T17400] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.602776][T17400] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 388.617456][T17645] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.3232'. [ 388.658214][T17400] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.671580][T17648] netlink: 'syz.1.3233': attribute type 10 has an invalid length. [ 388.770511][T17648] tipc: Resetting bearer [ 388.838792][T17648] team0: left allmulticast mode [ 388.855770][T17648] team0: left promiscuous mode [ 388.867175][T17648] bridge0: port 1(team0) entered disabled state [ 388.889099][T17648] tipc: Resetting bearer [ 388.905146][T17648] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.920963][T17648] bond0: (slave team0): Enslaving as an active interface with an up link [ 389.041131][T17660] IPv6: sit1: Disabled Multicast RS [ 389.062365][T17660] sit1: entered allmulticast mode [ 389.163906][T17658] mac80211_hwsim hwsim12 syzkaller0: left promiscuous mode [ 389.239731][ T5297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.297617][T17674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3237'. [ 389.338891][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3237'. [ 389.446214][T17674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3237'. [ 389.456665][T17674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3237'. [ 389.478499][ T57] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 389.504407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.523737][ T57] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.555958][ T57] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.598757][ T57] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.684243][T17685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3241'. [ 389.712717][T17685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3241'. [ 389.727843][T17400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.811156][T17400] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.866543][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.873723][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.964368][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.971571][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.041390][T17695] tipc: Enabled bearer , priority 0 [ 390.063196][T17695] syzkaller0: entered promiscuous mode [ 390.104829][T17695] syzkaller0: entered allmulticast mode [ 390.141974][T17695] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 390.245216][T17695] tipc: Resetting bearer [ 390.280857][T17693] tipc: Resetting bearer [ 390.345925][T17693] tipc: Disabling bearer [ 390.488830][T17707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3246'. [ 390.544329][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 390.754158][T17719] netlink: 'syz.2.3249': attribute type 15 has an invalid length. [ 390.803230][T17719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3249'. [ 390.890804][T17719] netlink: 'syz.2.3249': attribute type 15 has an invalid length. [ 390.892970][ T1118] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 390.958826][ T1118] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 390.992719][ T1118] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 391.038372][T17732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.177175][T17738] ipip0: entered allmulticast mode [ 391.248328][T17741] bridge2: port 1(veth5) entered blocking state [ 391.275766][T17741] bridge2: port 1(veth5) entered disabled state [ 391.295043][T17741] veth5: entered allmulticast mode [ 391.307804][T17741] veth5: entered promiscuous mode [ 391.323449][T17744] bridge2: port 2(veth0_to_bond) entered blocking state [ 391.333703][T17744] bridge2: port 2(veth0_to_bond) entered disabled state [ 391.355453][T17744] veth0_to_bond: entered allmulticast mode [ 391.379075][T17744] veth0_to_bond: entered promiscuous mode [ 391.393460][T17744] bridge2: port 2(veth0_to_bond) entered blocking state [ 391.400617][T17744] bridge2: port 2(veth0_to_bond) entered forwarding state [ 391.584333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.707253][T17400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.837552][T17771] openvswitch: netlink: IP tunnel dst address not specified [ 391.953235][T17400] veth0_vlan: entered promiscuous mode [ 392.023333][T17775] dvmrp0: entered allmulticast mode [ 392.058975][T17400] veth1_vlan: entered promiscuous mode [ 392.068451][T17785] netlink: 'syz.1.3267': attribute type 1 has an invalid length. [ 392.294095][T17797] netlink: 'syz.1.3270': attribute type 1 has an invalid length. [ 392.357870][T17797] __nla_validate_parse: 9 callbacks suppressed [ 392.357888][T17797] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3270'. [ 392.385527][T17797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3270'. [ 392.624689][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.641415][T17810] netlink: 'syz.1.3271': attribute type 29 has an invalid length. [ 392.735508][T17400] veth0_macvtap: entered promiscuous mode [ 392.795891][T17400] veth1_macvtap: entered promiscuous mode [ 392.890488][T17400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.958130][T17400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.979827][T17824] netlink: 'syz.1.3274': attribute type 1 has an invalid length. [ 393.018703][T17824] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3274'. [ 393.049274][ T8575] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.082376][ T8575] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.123819][ T8575] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.137668][T17821] netlink: 'syz.3.3275': attribute type 11 has an invalid length. [ 393.156242][ T8575] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.164840][T17821] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.3275'. [ 393.201759][T17828] netlink: 'syz.1.3274': attribute type 10 has an invalid length. [ 393.248549][T17828] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3274'. [ 393.405117][T17846] netlink: 'syz.3.3280': attribute type 16 has an invalid length. [ 393.415289][T17846] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3280'. [ 393.424510][T17847] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3280'. [ 393.534122][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.573761][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.664450][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.812659][T17861] syzkaller0: entered promiscuous mode [ 393.821662][T17861] syzkaller0: entered allmulticast mode [ 393.843416][ T8575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.877887][ T8575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.342823][T17882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3288'. [ 394.704326][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.781105][T17882] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.788864][T17882] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.995389][T17908] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3292'. [ 395.040478][T17882] bridge2: port 2(veth0_to_bond) entered disabled state [ 395.119667][T17882] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.153774][T17882] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.548166][T17908] veth1_macvtap: left promiscuous mode [ 395.599467][ T1177] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 395.632278][ T1177] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.687339][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 395.744336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.757133][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.838902][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 395.878104][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.033149][T17938] tipc: Enabling of bearer rejected, failed to enable media [ 396.110349][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3295'. [ 396.139961][ T5653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 396.156055][ T5653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 396.168835][ T5653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 396.184111][ T5653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 396.193002][ T5653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 396.327875][T17950] xt_CT: You must specify a L4 protocol and not use inversions on it [ 396.580241][ T5639] syz_tun (unregistering): left allmulticast mode [ 396.594756][ T5639] syz_tun (unregistering): left promiscuous mode [ 396.631360][ T5639] bridge0: port 1(syz_tun) entered disabled state [ 396.702068][T17965] tipc: Can't bind to reserved service type 1 [ 396.723613][T17965] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 396.784330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.357017][T17992] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 397.824398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.900903][T18020] erspan0: entered allmulticast mode [ 397.911633][T18015] __nla_validate_parse: 1 callbacks suppressed [ 397.911654][T18015] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3314'. [ 397.946135][T18015] bridge_slave_0: default FDB implementation only supports local addresses [ 398.149885][T18023] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3316'. [ 398.230194][T18026] validate_nla: 3 callbacks suppressed [ 398.230280][T18026] netlink: 'syz.0.3318': attribute type 1 has an invalid length. [ 398.248713][T18026] netlink: 'syz.0.3318': attribute type 1 has an invalid length. [ 398.261157][T18023] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3316'. [ 398.307681][ T5653] Bluetooth: hci0: command tx timeout [ 398.327002][T18031] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3319'. [ 398.773299][T18054] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 398.864331][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.886864][T18054] tipc: Started in network mode [ 398.899854][T18054] tipc: Node identity 4, cluster identity 4711 [ 398.927025][T18054] tipc: Node number set to 4 [ 398.937502][T18058] IPv6: Can't replace route, no match found [ 399.189034][T17944] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.198051][T17944] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.207678][T17944] bridge_slave_0: entered allmulticast mode [ 399.226474][T17944] bridge_slave_0: entered promiscuous mode [ 399.243042][T17944] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.258613][T17944] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.272262][T17944] bridge_slave_1: entered allmulticast mode [ 399.277242][T18075] netlink: 'syz.4.3332': attribute type 21 has an invalid length. [ 399.281481][T17944] bridge_slave_1: entered promiscuous mode [ 399.311446][T18076] netlink: 'syz.4.3332': attribute type 21 has an invalid length. [ 399.350244][T17944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.473196][T17944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.606196][T17944] team0: Port device team_slave_0 added [ 399.637562][T17944] team0: Port device team_slave_1 added [ 399.683251][T18094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3337'. [ 399.722691][T17944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.729927][T17944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.757128][T17944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.782026][T17944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.792065][T17944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.818645][T17944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.896663][T17944] hsr_slave_0: entered promiscuous mode [ 399.903659][T17944] hsr_slave_1: entered promiscuous mode [ 399.904343][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.911911][T17944] debugfs: 'hsr0' already exists in 'hsr' [ 399.923452][T17944] Cannot create hsr debugfs directory [ 400.053439][T18105] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3340'. [ 400.208601][T18111] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.234049][T17944] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.245470][T17944] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 400.265076][T17944] netdevsim netdevsim3 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 400.275338][T17944] netdevsim netdevsim3 eth3 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 400.381659][T17944] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.392718][ T5653] Bluetooth: hci0: command tx timeout [ 400.426930][T17944] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 400.472680][T17944] netdevsim netdevsim3 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 400.492093][T18117] Bluetooth: MGMT ver 1.23 [ 400.509514][T17944] netdevsim netdevsim3 eth2 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 400.561403][T18119] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3345'. [ 400.735544][T17944] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 400.776747][T17944] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 400.820738][T17944] netdevsim netdevsim3 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 400.857042][T17944] netdevsim netdevsim3 eth1 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 400.884813][T18129] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 400.894910][T18129] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 400.945218][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.036221][T17944] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 401.051512][T17944] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 401.068138][T17944] netdevsim netdevsim3 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 401.080475][T17944] netdevsim netdevsim3 eth0 (unregistering): unset [1, 2] type 2 family 0 port 19999 - 0 [ 401.521097][T18151] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 401.557535][T18149] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 401.593374][T18151] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3352'. [ 401.656715][T18151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.736419][T18151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.753110][T18151] bond0 (unregistering): Released all slaves [ 401.770836][T18157] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3355'. [ 401.890387][T18164] netlink: 'syz.1.3355': attribute type 1 has an invalid length. [ 401.898529][T18164] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3355'. [ 401.909833][T18157] 8021q: adding VLAN 0 to HW filter on device bond10 [ 401.928782][T18163] netlink: 'syz.0.3357': attribute type 6 has an invalid length. [ 401.947838][T17944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 401.968277][T18163] netlink: 'syz.0.3357': attribute type 5 has an invalid length. [ 401.984338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.049124][T17944] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.081104][T17944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 402.153452][T17944] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.185825][T18180] netlink: 'syz.4.3360': attribute type 3 has an invalid length. [ 402.209537][T17944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 402.293847][T17944] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.337487][T17944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 402.396628][T17944] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.468685][ T5653] Bluetooth: hci0: command tx timeout [ 402.578776][T17944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.611231][T17944] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.623087][T18200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.658799][ T1118] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.666034][ T1118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.746749][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.753968][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.767149][T18208] netlink: 'syz.4.3367': attribute type 25 has an invalid length. [ 402.791344][T18210] netlink: 'syz.0.3369': attribute type 1 has an invalid length. [ 402.838830][T18212] mac80211_hwsim hwsim5 : renamed from wlan1 [ 402.919939][ T8575] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.972160][T18212] __nla_validate_parse: 8 callbacks suppressed [ 402.972181][T18212] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3368'. [ 402.992544][T18224] netlink: 404 bytes leftover after parsing attributes in process `syz.0.3371'. [ 403.012910][ T35] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.024328][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.156693][ T57] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.167802][ T35] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 403.394503][T18238] validate_nla: 4 callbacks suppressed [ 403.394521][T18238] netlink: 'syz.4.3374': attribute type 1 has an invalid length. [ 403.589027][T18238] bond0: entered promiscuous mode [ 403.608959][T18238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.700386][T18238] bond0: (slave bridge1): making interface the new active one [ 403.714261][T18238] bridge1: entered promiscuous mode [ 403.732360][T18238] bridge1: left promiscuous mode [ 404.064420][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.481974][T17944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.544568][ T5653] Bluetooth: hci0: command tx timeout [ 404.654705][T17944] veth0_vlan: entered promiscuous mode [ 404.708660][T17944] veth1_vlan: entered promiscuous mode [ 404.807726][T17944] veth0_macvtap: entered promiscuous mode [ 404.828691][T17944] veth1_macvtap: entered promiscuous mode [ 404.912264][T17944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.019166][T17944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.106448][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.122931][ T72] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.201339][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.276964][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.352398][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.675330][ T8575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.700938][ T8575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.771097][ T8575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.791901][ T8575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.029517][T18346] netlink: 'syz.3.3294': attribute type 8 has an invalid length. [ 406.144396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.484939][T18357] xt_hashlimit: size too large, truncated to 1048576 [ 406.502670][T18359] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.537889][ T5651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 406.556472][ T5651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 406.568096][ T5651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 406.581197][ T5651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 406.592643][ T5651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 406.625167][ T5653] Bluetooth: hci0: command tx timeout [ 406.632219][T18359] bridge_slave_0 (unregistering): left allmulticast mode [ 406.743111][T18359] bridge_slave_0 (unregistering): left promiscuous mode [ 406.751742][T18359] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.184368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.320129][T18393] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3412'. [ 407.543584][T18405] netlink: 'syz.3.3413': attribute type 1 has an invalid length. [ 407.555208][T18404] nbd: must specify at least one socket [ 407.902979][T18414] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.3416'. [ 407.943883][T18414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3416'. [ 407.989202][T18414] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3416'. [ 408.002315][T18417] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3417'. [ 408.053827][T18417] tipc: Started in network mode [ 408.085080][T18417] tipc: Node identity 56aceb5d9a0e, cluster identity 4711 [ 408.106122][T18417] tipc: Enabled bearer , priority 0 [ 408.166725][T18423] syzkaller0: entered promiscuous mode [ 408.180746][T18423] syzkaller0: entered allmulticast mode [ 408.192091][T18414] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.202471][T18417] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 408.234410][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 408.309957][T18417] tipc: Resetting bearer [ 408.355590][T18416] tipc: Resetting bearer [ 408.446513][T18416] tipc: Disabling bearer [ 408.500283][T18439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.706844][ T5651] Bluetooth: hci1: command tx timeout [ 408.760579][T18454] netlink: 'syz.0.3428': attribute type 29 has an invalid length. [ 408.768952][T18454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3428'. [ 408.878257][T18464] netlink: 'syz.0.3428': attribute type 29 has an invalid length. [ 408.904389][T18464] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3428'. [ 409.091534][T18361] bridge0: port 1(bridge_slave_0) entered blocking state [ 409.101745][T18361] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.114565][T18361] bridge_slave_0: entered allmulticast mode [ 409.123717][T18361] bridge_slave_0: entered promiscuous mode [ 409.138425][T18473] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 409.149596][T18361] bridge0: port 2(bridge_slave_1) entered blocking state [ 409.169867][T18361] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.181446][T18361] bridge_slave_1: entered allmulticast mode [ 409.190973][T18361] bridge_slave_1: entered promiscuous mode [ 409.199480][T18473] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3429'. [ 409.221796][T18473] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3429'. [ 409.266322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.281115][T18361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.305895][T18361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.419184][T18361] team0: Port device team_slave_0 added [ 409.443565][T18361] team0: Port device team_slave_1 added [ 409.526199][T18361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.536292][T18361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.567822][T18361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.585034][T18361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.592026][T18361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.623620][T18361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.689781][T18361] hsr_slave_0: entered promiscuous mode [ 409.696978][T18361] hsr_slave_1: entered promiscuous mode [ 409.703409][T18361] debugfs: 'hsr0' already exists in 'hsr' [ 409.710113][T18361] Cannot create hsr debugfs directory [ 409.978204][T18361] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.041765][T18361] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.296724][T18361] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.300852][T18514] netlink: 'syz.2.3434': attribute type 62 has an invalid length. [ 410.307315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.322728][T18514] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3434'. [ 410.333831][T18361] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.439261][T18361] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.442638][T18518] sock: sock_set_timeout: `syz.3.3435' (pid 18518) tries to set negative timeout [ 410.451344][T18361] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.620298][T18361] netdevsim netdevsim1  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.637951][T18361] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.786011][ T5651] Bluetooth: hci1: command tx timeout [ 410.828728][T18539] netlink: zone id is out of range [ 410.834068][T18539] netlink: zone id is out of range [ 410.847490][T18539] netlink: zone id is out of range [ 410.856181][T18539] netlink: zone id is out of range [ 411.553382][T18570] netdevsim netdevsim3: Firmware load for '..' refused, path contains '..' component [ 411.763148][T18454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.809762][T18361] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 411.859263][T18361] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.904122][T18361] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 411.950824][T18361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.980472][T18361] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 412.000856][T18361] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 412.014097][T18361] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 412.028268][T18361] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 412.133402][T18361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.156568][T18361] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.169206][T18322] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.176387][T18322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.192730][T18322] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.199899][T18322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.384339][ C0] net_ratelimit: 9 callbacks suppressed [ 412.384444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.494868][ T4967] block nbd1: Possible stuck request ffff88802723e000: control (read@0,1024B). Runtime 150 seconds [ 412.507313][ T4967] block nbd1: Possible stuck request ffff88802723e1c0: control (read@1024,1024B). Runtime 150 seconds [ 412.520358][ T4967] block nbd1: Possible stuck request ffff88802723e380: control (read@2048,1024B). Runtime 150 seconds [ 412.532313][ T4967] block nbd1: Possible stuck request ffff88802723e540: control (read@3072,1024B). Runtime 150 seconds [ 412.613439][T18361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.671094][T18361] veth0_vlan: entered promiscuous mode [ 412.681475][T18361] veth1_vlan: entered promiscuous mode [ 412.711372][T18361] veth0_macvtap: entered promiscuous mode [ 412.720179][T18361] veth1_macvtap: entered promiscuous mode [ 412.739494][T18361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.752922][T18361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.766902][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.777620][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.791804][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.800716][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.875873][ T5651] Bluetooth: hci1: command tx timeout [ 412.899396][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.907565][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.938773][T18322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.947487][T18322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.424408][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.464411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.944600][ T5651] Bluetooth: hci1: command tx timeout [ 415.504431][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.101110][ T5002] udevd[5002]: worker [11914] /devices/virtual/block/nbd1 is taking a long time [ 416.544432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.586405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.624377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.664373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 420.704389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.744429][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.784506][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.824404][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.864385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.906051][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 426.944345][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.984380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.024453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 430.064377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 431.104415][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 432.144375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.184391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.222295][T18613] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3443'. [ 434.232698][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.279943][T18330] IPVS: starting estimator thread 0... [ 434.291586][T18613] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 434.384850][T18624] IPVS: using max 28 ests per chain, 67200 per kthread [ 434.404820][T18627] netlink: 'syz.1.3446': attribute type 61 has an invalid length. [ 434.446669][T18627] tipc: Started in network mode [ 434.479926][T18627] tipc: Node identity 05, cluster identity 4711 [ 434.499895][T18633] tc_dump_action: action bad kind [ 434.509295][T18633] netlink: 'syz.2.3448': attribute type 1 has an invalid length. [ 434.586458][T18634] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3448'. [ 434.686484][T18642] Bluetooth: MGMT ver 1.23 [ 434.693015][T18642] Bluetooth: hci1: too big key_count value 32778 [ 434.711245][T18642] netlink: 'syz.3.3452': attribute type 4 has an invalid length. [ 434.736481][T18642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3452'. [ 434.849411][T18646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3453'. [ 434.982815][T18649] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3455'. [ 435.004830][T18653] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3457'. [ 435.034115][T18655] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3458'. [ 435.098346][T18649] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3455'. [ 435.176162][T18660] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3456'. [ 435.264349][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 435.434587][T18663] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3459'. [ 435.941951][T18687] netlink: 'syz.4.3468': attribute type 8 has an invalid length. [ 435.976471][T18687] sch_fq: defrate 0 ignored. [ 436.038034][T18694] vlan2: entered promiscuous mode [ 436.051309][T18694] bridge0: entered promiscuous mode [ 436.304374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 436.783496][T18736] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 436.819673][T18736] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 437.339728][T18747] macvlan2: entered promiscuous mode [ 437.344344][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 437.369010][T18747] macvlan2: entered allmulticast mode [ 437.778567][T18789] xt_ecn: cannot match TCP bits for non-tcp packets [ 437.992716][T18801] sctp: [Deprecated]: syz.1.3504 (pid 18801) Use of int in maxseg socket option. [ 437.992716][T18801] Use struct sctp_assoc_value instead [ 438.301795][T18825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.384377][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.606364][T18843] netlink: 'syz.0.3516': attribute type 1 has an invalid length. [ 438.676730][T18837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.796995][T18844] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.804037][T18855] netlink: 'syz.4.3517': attribute type 1 has an invalid length. [ 438.805919][T18844] bond1: (slave bond2): Enslaving as an active interface with an up link [ 439.424368][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.457568][T18896] __nla_validate_parse: 13 callbacks suppressed [ 439.457588][T18896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3525'. [ 439.726757][T18904] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3525'. [ 439.813114][T18909] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20003 [ 439.991434][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 440.066601][T18918] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3529'. [ 440.464342][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.479908][T18934] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3533'. [ 440.619076][T18944] netem: change failed [ 440.822303][T18952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3539'. [ 440.827087][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3538'. [ 441.504351][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 441.751545][T19012] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3548'. [ 441.956342][T18994] xt_CT: No such helper "snmp_trap" [ 441.999583][T19019] FAULT_INJECTION: forcing a failure. [ 441.999583][T19019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.039736][T19012] bond1 (unregistering): Released all slaves [ 442.065345][T19019] CPU: 0 UID: 0 PID: 19019 Comm: syz.2.3551 Not tainted syzkaller #0 PREEMPT(full) [ 442.065370][T19019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.065384][T19019] Call Trace: [ 442.065391][T19019] [ 442.065402][T19019] dump_stack_lvl+0xe8/0x150 [ 442.065430][T19019] should_fail_ex+0x412/0x560 [ 442.065455][T19019] _copy_to_user+0x31/0xb0 [ 442.065545][T19019] simple_read_from_buffer+0xe1/0x170 [ 442.065572][T19019] proc_fail_nth_read+0x1bb/0x230 [ 442.065618][T19019] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.065644][T19019] ? rw_verify_area+0x2a6/0x4d0 [ 442.065667][T19019] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 442.065690][T19019] vfs_read+0x20c/0xa70 [ 442.065719][T19019] ? __pfx___mutex_lock+0x10/0x10 [ 442.065778][T19019] ? __pfx_vfs_read+0x10/0x10 [ 442.065802][T19019] ? __fget_files+0x2a/0x420 [ 442.065828][T19019] ? __fget_files+0x3a0/0x420 [ 442.065848][T19019] ? __fget_files+0x2a/0x420 [ 442.065878][T19019] ksys_read+0x150/0x270 [ 442.065907][T19019] ? __pfx_ksys_read+0x10/0x10 [ 442.065939][T19019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.065959][T19019] do_syscall_64+0x174/0x580 [ 442.065978][T19019] ? clear_bhb_loop+0x40/0x90 [ 442.065999][T19019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.066016][T19019] RIP: 0033:0x7f546415d68e [ 442.066033][T19019] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 442.066048][T19019] RSP: 002b:00007f5464fcbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 442.066067][T19019] RAX: ffffffffffffffda RBX: 00007f5464fcc6c0 RCX: 00007f546415d68e [ 442.066078][T19019] RDX: 000000000000000f RSI: 00007f5464fcc0a0 RDI: 0000000000000008 [ 442.066090][T19019] RBP: 00007f5464fcc090 R08: 0000000000000000 R09: 0000000000000000 [ 442.066100][T19019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.066111][T19019] R13: 00007f5464416128 R14: 00007f5464416090 R15: 00007ffd39f70a18 [ 442.066141][T19019] [ 442.356335][T19015] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3549'. [ 442.397446][T19015] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3549'. [ 442.442188][T19025] IPVS: Scheduler module ip_vs_sip not found [ 442.544755][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 442.555976][ T4967] block nbd1: Possible stuck request ffff88802723e000: control (read@0,1024B). Runtime 180 seconds [ 442.568687][ T4967] block nbd1: Possible stuck request ffff88802723e1c0: control (read@1024,1024B). Runtime 180 seconds [ 442.580297][ T4967] block nbd1: Possible stuck request ffff88802723e380: control (read@2048,1024B). Runtime 180 seconds [ 442.591755][ T4967] block nbd1: Possible stuck request ffff88802723e540: control (read@3072,1024B). Runtime 180 seconds [ 442.923634][T19046] netlink: 92 bytes leftover after parsing attributes in process `syz.3.3559'. [ 442.961046][T19046] netlink: 'syz.3.3559': attribute type 1 has an invalid length. [ 442.990619][T19050] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 443.518390][T19082] x_tables: duplicate underflow at hook 2 [ 443.584452][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 443.734070][T19093] netlink: 'syz.3.3573': attribute type 1 has an invalid length. [ 443.843741][T19092] IPv6: Can't replace route, no match found [ 443.980891][T19093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 444.028253][T19101] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 444.506136][T19131] tipc: Started in network mode [ 444.511269][T19131] tipc: Node identity b69b185e73df, cluster identity 4711 [ 444.528837][T19131] tipc: Enabled bearer , priority 0 [ 444.556056][T19130] tipc: Enabling of bearer rejected, already enabled [ 444.581339][T19137] syzkaller0: entered promiscuous mode [ 444.598874][T19137] syzkaller0: entered allmulticast mode [ 444.624362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.759736][T19144] __nla_validate_parse: 3 callbacks suppressed [ 444.759772][T19144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3583'. [ 444.788254][T19137] tipc: Resetting bearer [ 444.893524][T19137] tipc: Disabling bearer [ 444.933148][T19149] ip6gre0: Master is either lo or non-ether device [ 445.198019][T19167] syzkaller1: entered promiscuous mode [ 445.211050][T19167] syzkaller1: entered allmulticast mode [ 445.233218][T19169] netlink: 'syz.4.3592': attribute type 1 has an invalid length. [ 445.380518][T19169] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 445.592881][T19184] pim6reg: entered allmulticast mode [ 445.631447][T19185] pim6reg: left allmulticast mode [ 445.664340][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.716629][T19189] netlink: 'syz.4.3598': attribute type 5 has an invalid length. [ 446.005681][T19197] veth3: entered allmulticast mode [ 446.110960][T19212] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3605'. [ 446.411888][T19228] ip6gre0: Master is either lo or non-ether device [ 446.479577][T19226] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 446.571431][T19238] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3611'. [ 446.601730][T19238] macvlan1: entered allmulticast mode [ 446.704353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.017236][T19255] sctp: [Deprecated]: syz.0.3616 (pid 19255) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.017236][T19255] Use struct sctp_sack_info instead [ 447.309487][T19270] C: renamed from lo (while UP) [ 447.350998][T19270] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 447.392629][T19277] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3624'. [ 447.405366][T19273] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 447.463231][T19273] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 447.744332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 447.995063][T19289] debugfs: 'Ku crK:̥B| lS-!' already exists in 'ieee80211' [ 448.240551][T19301] netlink: 'syz.2.3633': attribute type 15 has an invalid length. [ 448.260615][T19301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3633'. [ 448.298556][T19301] netlink: 'syz.2.3633': attribute type 15 has an invalid length. [ 448.370458][T19301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3633'. [ 448.743053][T19325] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3636'. [ 448.784333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.910991][T19329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3639'. [ 448.972110][T19329] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3639'. [ 449.012603][T19336] netlink: 'syz.3.3641': attribute type 1 has an invalid length. [ 449.022087][T19339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3639'. [ 449.131540][T19339] veth0_macvtap: left promiscuous mode [ 449.253465][T19336] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 449.264186][T19346] syzkaller1: entered promiscuous mode [ 449.280049][T19346] syzkaller1: entered allmulticast mode [ 449.477211][T19358] ip6tnl1: entered allmulticast mode [ 449.482879][T19359] netlink: 'syz.0.3645': attribute type 1 has an invalid length. [ 449.599488][T19362] tipc: New replicast peer: 255.255.255.255 [ 449.642241][T19362] tipc: Enabled bearer , priority 10 [ 449.756264][T19363] bond1: (slave bridge3): making interface the new active one [ 449.772274][T19363] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 449.824939][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.835485][T19359] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 449.863448][T19374] macvlan0: entered promiscuous mode [ 449.880297][T19374] macvlan0: entered allmulticast mode [ 449.887641][T19374] bond1: entered promiscuous mode [ 449.894056][T19374] bridge3: entered promiscuous mode [ 449.904096][T19374] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 449.918154][T19374] bond1: (slave macvlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 449.936278][T19374] bond1: left promiscuous mode [ 449.941120][T19374] bridge3: left promiscuous mode [ 450.206289][T19395] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3654'. [ 450.232214][T19389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3654'. [ 450.241984][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3654'. [ 450.415904][T19407] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.3661'. [ 450.680847][T19415] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3664'. [ 450.755590][T17837] tipc: Node number set to 3309574238 [ 450.775948][T19417] syzkaller0: entered promiscuous mode [ 450.782856][T19417] syzkaller0: entered allmulticast mode [ 450.815351][T19424] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3666'. [ 450.865291][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.049227][T19433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3670'. [ 451.163115][T19447] openvswitch: netlink: Key type 362 is out of range max 32 [ 451.192946][T19433] bond2: entered promiscuous mode [ 451.200441][T19433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 451.299719][T19433] 8021q: adding VLAN 0 to HW filter on device bond2 [ 451.337615][T19433] bond2: (slave sit1): The slave device specified does not support setting the MAC address [ 451.361325][T19433] bond2: (slave sit1): Error -95 calling set_mac_address [ 451.904360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 452.944448][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.984360][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.498220][ T5002] udevd[5002]: worker [11914] /devices/virtual/block/nbd1 timeout; kill it [ 454.507363][ T5002] udevd[5002]: seq 16384 '/devices/virtual/block/nbd1' killed [ 455.024383][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.064356][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.104384][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.144387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 459.184518][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.224373][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.264371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.304442][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.344435][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.384374][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.424409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.585236][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 466.464380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.504958][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.544427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.584396][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 470.624412][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.664680][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.338695][T19456] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3674'. [ 472.475410][T19460] erspan0: left allmulticast mode [ 472.632091][ T4967] block nbd1: Possible stuck request ffff88802723e000: control (read@0,1024B). Runtime 210 seconds [ 472.643091][ T4967] block nbd1: Possible stuck request ffff88802723e1c0: control (read@1024,1024B). Runtime 210 seconds [ 472.655154][ T4967] block nbd1: Possible stuck request ffff88802723e380: control (read@2048,1024B). Runtime 210 seconds [ 472.667899][ T4967] block nbd1: Possible stuck request ffff88802723e540: control (read@3072,1024B). Runtime 210 seconds [ 472.704333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.757144][T19473] 8021q: adding VLAN 0 to HW filter on device bond1 [ 472.776989][T19473] 8021q: adding VLAN 0 to HW filter on device bond2 [ 472.981735][T19486] netlink: 'syz.3.3683': attribute type 1 has an invalid length. [ 473.113574][T19495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3686'. [ 473.295500][T19497] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3687'. [ 473.365473][T19502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3688'. [ 473.365680][T19497] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3687'. [ 473.541695][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3692'. [ 473.688377][T19511] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3693'. [ 473.745989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.893453][T19521] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.928896][T19521] bridge_slave_0 (unregistering): left allmulticast mode [ 473.951969][T19521] bridge_slave_0 (unregistering): left promiscuous mode [ 473.992373][T19521] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.026792][T19529] netlink: 'syz.1.3695': attribute type 63 has an invalid length. [ 474.120589][T19537] netlink: 'syz.1.3695': attribute type 63 has an invalid length. [ 474.172245][T19538] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.192078][T19539] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 474.209905][T19542] netlink: 'syz.1.3695': attribute type 1 has an invalid length. [ 474.230718][T19542] netlink: 'syz.1.3695': attribute type 2 has an invalid length. [ 474.446235][T19550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3702'. [ 474.531419][T19553] netlink: 'syz.0.3703': attribute type 1 has an invalid length. [ 474.574115][T19553] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3703'. [ 474.595416][T19553] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3703'. [ 474.596485][T19559] tap0: tun_chr_ioctl cmd 2148553947 [ 474.727201][T19573] IPv6: NLM_F_CREATE should be specified when creating new route [ 474.730193][T19574] IPv6: NLM_F_CREATE should be specified when creating new route [ 474.784375][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.123674][T19590] netlink: 'syz.4.3712': attribute type 3 has an invalid length. [ 475.298601][ T72] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.322223][ T72] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.366163][ T72] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.571194][T19608] netlink: 'syz.2.3719': attribute type 8 has an invalid length. [ 475.826627][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.995886][T19632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.017014][T19628] macvlan2: entered allmulticast mode [ 476.048565][T19628] dummy0: entered allmulticast mode [ 476.597162][T19662] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 476.688592][T19652] netlink: 'syz.4.3730': attribute type 1 has an invalid length. [ 476.864336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.692741][T19708] tipc: Enabling of bearer rejected, failed to enable media [ 477.811764][T19715] bridge1: entered promiscuous mode [ 477.844763][T19715] bridge1: entered allmulticast mode [ 477.904381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.114895][T19731] __nla_validate_parse: 15 callbacks suppressed [ 478.114917][T19731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3747'. [ 478.724225][T19762] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3755'. [ 478.901108][T19774] bond2: entered allmulticast mode [ 478.944372][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.966375][T19779] syzkaller0: entered promiscuous mode [ 478.976464][T19779] syzkaller0: entered allmulticast mode [ 479.010866][T19779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3759'. [ 479.124172][T19787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3761'. [ 479.181533][T19787] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3761'. [ 479.613204][T19807] tipc: Cannot configure node identity twice [ 479.715173][T19810] syzkaller1: entered promiscuous mode [ 479.728409][T19810] syzkaller1: entered allmulticast mode [ 479.914115][T19823] netlink: 'syz.2.3772': attribute type 21 has an invalid length. [ 479.939897][T19823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3772'. [ 479.961341][T19823] netlink: 'syz.2.3772': attribute type 21 has an invalid length. [ 479.984379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.000754][T19823] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3772'. [ 480.315253][T19845] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3779'. [ 480.345769][T19836] bond3: entered promiscuous mode [ 480.363645][T19838] macvlan3: entered promiscuous mode [ 480.377858][T19838] macvlan3: entered allmulticast mode [ 480.385520][T19838] bond3: (slave macvlan3): Opening slave failed [ 480.422971][T19840] netlink: 'syz.0.3777': attribute type 12 has an invalid length. [ 480.432206][T19840] netlink: 'syz.0.3777': attribute type 29 has an invalid length. [ 480.433653][T19854] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3781'. [ 480.441198][T19840] netlink: 148 bytes leftover after parsing attributes in process `syz.0.3777'. [ 480.738752][T19876] x_tables: duplicate underflow at hook 1 [ 481.024333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 481.349419][T19902] netlink: 'syz.1.3794': attribute type 1 has an invalid length. [ 481.644640][T19897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 481.690963][T19897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 481.888792][T19910] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 481.961568][ T8575] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.998629][ T8575] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.031896][ T8575] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.042958][ T8575] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.063696][ T8575] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.064401][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 482.078005][ T8575] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.101353][ T8575] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 482.141075][ T8575] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.187607][ T1111] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x6 [ 482.700910][T19947] netlink: 'syz.1.3806': attribute type 13 has an invalid length. [ 482.755300][T19947] veth1_macvtap: left promiscuous mode [ 482.776595][T19947] macsec0: entered allmulticast mode [ 483.104417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.222223][T19969] syzkaller0: entered promiscuous mode [ 483.228114][T19969] syzkaller0: entered allmulticast mode [ 483.377957][T19977] tipc: Enabled bearer , priority 0 [ 483.579067][T19990] syz_tun: entered allmulticast mode [ 483.596707][T19967] tipc: Resetting bearer [ 483.660789][T19967] tipc: Disabling bearer [ 483.694237][T19989] syz_tun: left allmulticast mode [ 484.065856][T20019] __nla_validate_parse: 8 callbacks suppressed [ 484.065876][T20019] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3828'. [ 484.144555][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.191563][T20024] x_tables: duplicate entry at hook 2 [ 485.051517][T20060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 485.184434][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 485.449192][T20078] netem: change failed [ 485.603689][T20089] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 485.691342][T20093] netlink: 'syz.4.3850': attribute type 1 has an invalid length. [ 485.926758][T20096] bond1: (slave veth5): Enslaving as an active interface with a down link [ 485.941311][T20093] 8021q: adding VLAN 0 to HW filter on device bond1 [ 486.224337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 486.309502][T20131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3859'. [ 486.405456][T20135] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3862'. [ 486.606001][T20144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3863'. [ 486.632216][T20144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3863'. [ 486.829198][T20152] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.3867'. [ 486.926633][T20157] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3869'. [ 486.954157][T20162] netlink: 'syz.1.3870': attribute type 1 has an invalid length. [ 487.013802][T20162] bond2: entered promiscuous mode [ 487.021012][T20162] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.062668][T20168] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 487.089647][T20162] 8021q: adding VLAN 0 to HW filter on device bond2 [ 487.136828][T20162] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 487.158762][T20162] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 487.173112][T20170] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3874'. [ 487.182398][T20162] bond2: (slave ip6gre1): making interface the new active one [ 487.202283][T20162] ip6gre1: entered promiscuous mode [ 487.221241][T20162] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 487.261924][T20168] ipvlan0: entered allmulticast mode [ 487.264430][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 487.279555][T20168] batadv_slave_1: entered allmulticast mode [ 487.311917][T20168] batman_adv: batadv0: Adding interface: ipvlan0 [ 487.337974][T20168] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 487.381978][T20168] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 487.395935][T20168] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 487.408632][T20168] batman_adv: batadv0: Interface activated: ipvlan0 [ 487.430157][T20170] 8021q: VLANs not supported on ip6_vti0 [ 487.587020][T20184] veth1_to_bond: entered allmulticast mode [ 487.673462][T20184] veth1_to_bond: left allmulticast mode [ 487.745633][T20196] netlink: 181276 bytes leftover after parsing attributes in process `syz.4.3877'. [ 488.002917][T20212] netlink: 'syz.4.3884': attribute type 1 has an invalid length. [ 488.026667][T20212] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3884'. [ 488.105913][T20212] tc_dump_action: action bad kind [ 488.145133][ T5651] Bluetooth: hci5: command 0x0406 tx timeout [ 488.304371][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 488.463563][T20237] macsec0: left allmulticast mode [ 488.918142][T20265] netlink: 'syz.2.3900': attribute type 3 has an invalid length. [ 489.344353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 490.384424][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 491.424403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 492.464581][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 493.265067][ T5653] Bluetooth: hci3: command 0x0406 tx timeout [ 493.504423][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 494.544417][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 495.584389][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 496.624383][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.664381][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.704380][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 499.744397][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 500.784516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.430723][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 501.824472][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.706310][ T4967] block nbd1: Possible stuck request ffff88802723e000: control (read@0,1024B). Runtime 240 seconds [ 502.717915][ T4967] block nbd1: Possible stuck request ffff88802723e1c0: control (read@1024,1024B). Runtime 240 seconds [ 502.730701][ T4967] block nbd1: Possible stuck request ffff88802723e380: control (read@2048,1024B). Runtime 240 seconds [ 502.742300][ T4967] block nbd1: Possible stuck request ffff88802723e540: control (read@3072,1024B). Runtime 240 seconds [ 502.864391][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.504826][ T5653] Bluetooth: hci4: command 0x0406 tx timeout [ 503.904385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 504.944399][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 505.984365][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.024353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.064398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 509.104532][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 510.144453][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.184409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.666675][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.224367][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.264346][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.304486][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.257994][T20295] netlink: 'syz.0.3907': attribute type 3 has an invalid length. [ 515.328342][T20294] syzkaller0: entered promiscuous mode [ 515.344228][T20294] syzkaller0: entered allmulticast mode [ 515.350040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 515.433341][T20306] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 515.707598][T20318] __nla_validate_parse: 137 callbacks suppressed [ 515.707618][T20318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3915'. [ 515.890438][T20330] syzkaller0: entered promiscuous mode [ 515.926278][T20330] syzkaller0: entered allmulticast mode [ 516.384362][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 516.543848][T20363] openvswitch: netlink: Missing valid actions attribute. [ 516.580313][T20363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.623251][T20369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3927'. [ 516.653132][T20363] sock: sock_timestamping_bind_phc: sock not bind to device [ 516.741719][T20375] netlink: 'syz.2.3928': attribute type 2 has an invalid length. [ 516.807497][T20375] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3928'. [ 516.820815][T20379] netlink: 'syz.3.3929': attribute type 10 has an invalid length. [ 516.862745][T20379] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.932141][T20379] bond0: (slave team0): Enslaving as an active interface with an up link [ 517.038465][T20386] No such timeout policy "syz0" [ 517.424665][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 517.733800][T20415] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3939'. [ 517.771390][T20413] syzkaller0: entered promiscuous mode [ 517.790085][T20413] syzkaller0: entered allmulticast mode [ 517.796172][T20420] netlink: 'syz.1.3941': attribute type 21 has an invalid length. [ 517.816377][ T5744] IPVS: starting estimator thread 0... [ 517.835079][T20420] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3941'. [ 517.934417][T20421] IPVS: using max 33 ests per chain, 79200 per kthread [ 518.464400][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.631898][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3951'. [ 518.679860][T20453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3951'. [ 518.725072][T20459] netlink: 'syz.3.3954': attribute type 11 has an invalid length. [ 518.864619][ T5651] Bluetooth: hci0: command 0x0406 tx timeout [ 519.054674][T20478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3958'. [ 519.504337][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 519.661137][T20515] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3966'. [ 519.830757][T20515] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3966'. [ 519.859259][T20515] netlink: 'syz.1.3966': attribute type 6 has an invalid length. [ 519.875059][T20515] netlink: 'syz.1.3966': attribute type 5 has an invalid length. [ 520.043010][T20534] veth1_macvtap: left promiscuous mode [ 520.286802][T20501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 520.296046][T20515] netlink: 'syz.1.3966': attribute type 3 has an invalid length. [ 520.315268][T20515] netlink: 'syz.1.3966': attribute type 1 has an invalid length. [ 520.544366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.743831][T20551] netlink: 'syz.1.3976': attribute type 10 has an invalid length. [ 520.776937][T20551] __nla_validate_parse: 5 callbacks suppressed [ 520.776957][T20551] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3976'. [ 520.843278][T20565] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3979'. [ 521.087795][T20576] netlink: 'syz.4.3981': attribute type 1 has an invalid length. [ 521.584330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 521.661074][T20596] netlink: 1 bytes leftover after parsing attributes in process `syz.1.3989'. [ 521.770817][T20602] gtp0: entered promiscuous mode [ 521.779982][T20602] gtp0: entered allmulticast mode [ 521.871976][T20610] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3994'. [ 522.410557][T20636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4002'. [ 522.442009][T20642] netlink: 'syz.2.4004': attribute type 1 has an invalid length. [ 522.461007][T20642] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4004'. [ 522.500941][T20642] netlink: 658 bytes leftover after parsing attributes in process `syz.2.4004'. [ 522.557249][T20642] netlink: 'syz.2.4004': attribute type 1 has an invalid length. [ 522.601583][T20639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4003'. [ 522.624339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.673429][T20652] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 522.967970][T20664] gtp0: entered promiscuous mode [ 522.993154][T20664] gtp0: entered allmulticast mode [ 523.020957][T20666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4011'. [ 523.191388][T20669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4012'. [ 523.256086][T20674] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 523.263360][T20675] netlink: 'syz.3.4014': attribute type 1 has an invalid length. [ 523.276137][T20676] netlink: 'syz.1.4015': attribute type 10 has an invalid length. [ 523.285537][T20674] netlink: 'syz.1.4015': attribute type 10 has an invalid length. [ 523.307728][T20675] ip6gre0: Master is either lo or non-ether device [ 523.664455][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.730302][T20698] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20002 [ 523.912525][T20704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 523.922280][T20704] xt_CT: You must specify a L4 protocol and not use inversions on it [ 524.085044][T20720] netlink: 'syz.1.4027': attribute type 21 has an invalid length. [ 524.293577][T20726] syzkaller0: entered promiscuous mode [ 524.308291][T20726] syzkaller0: entered allmulticast mode [ 524.704336][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 524.895604][T20755] vlan2: entered promiscuous mode [ 524.917935][T20755] geneve1: entered promiscuous mode [ 524.942422][T20755] vlan2: entered allmulticast mode [ 524.964727][T20755] geneve1: entered allmulticast mode [ 525.561952][T20785] bond0: (slave team0): Releasing backup interface [ 525.607471][T20785] bridge_slave_1: left allmulticast mode [ 525.618720][T20785] bridge_slave_1: left promiscuous mode [ 525.628472][T20785] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.668888][T20785] bond1: (slave veth0_to_bond): Releasing backup interface [ 525.708364][T20785] bond0: (slave bond_slave_0): Releasing backup interface [ 525.744785][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.755538][T20785] bond0: (slave bond_slave_1): Releasing backup interface [ 525.776909][T20785] team0: Port device team_slave_0 removed [ 525.789293][T20785] team0: Port device team_slave_1 removed [ 525.796604][T20785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 525.804094][T20785] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 525.813369][T20785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 525.823223][T20785] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 525.835321][T20785] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 525.860079][T20792] tipc: Started in network mode [ 525.868675][T20792] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 525.876672][T20792] tipc: Enabled bearer , priority 0 [ 526.785494][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.996076][T18329] tipc: Node number set to 11578026 [ 527.030186][T20860] __nla_validate_parse: 13 callbacks suppressed [ 527.030207][T20860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4074'. [ 527.294976][T20879] xt_hashlimit: size too large, truncated to 1048576 [ 527.356265][T20882] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4079'. [ 527.482771][T20880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4080'. [ 527.522482][T20887] validate_nla: 2 callbacks suppressed [ 527.522505][T20887] netlink: 'syz.3.4081': attribute type 142 has an invalid length. [ 527.540802][T20880] veth0_macvtap: left promiscuous mode [ 527.824358][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 527.911663][T20898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 527.957292][T20898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.283841][T20908] netlink: 532 bytes leftover after parsing attributes in process `syz.4.4089'. [ 528.302109][T20908] netlink: 'syz.4.4089': attribute type 4 has an invalid length. [ 528.348747][T20911] netlink: 532 bytes leftover after parsing attributes in process `syz.4.4089'. [ 528.391034][T20911] netlink: 'syz.4.4089': attribute type 4 has an invalid length. [ 528.586050][T20931] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4093'. [ 528.807926][T20931] bond3: entered promiscuous mode [ 528.814055][T20931] 8021q: adding VLAN 0 to HW filter on device bond3 [ 528.835223][T20935] bond2: (slave ip6gretap1): making interface the new active one [ 528.845325][T20935] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 528.864339][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.903948][T20944] 8021q: adding VLAN 0 to HW filter on device bond3 [ 528.918710][T20944] bond3: (slave sit1): The slave device specified does not support setting the MAC address [ 528.931704][T20944] bond3: (slave sit1): Error -95 calling set_mac_address [ 529.277747][T20946] syzkaller0: entered promiscuous mode [ 529.299701][T20946] syzkaller0: entered allmulticast mode [ 529.911963][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 530.944366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.984338][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.013016][T20996] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 532.532086][T21021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4115'. [ 532.693779][T21029] netlink: 'syz.2.4117': attribute type 12 has an invalid length. [ 532.719134][T21031] openvswitch: netlink: IPv4 tun info is not correct [ 532.724323][T21029] netlink: 'syz.2.4117': attribute type 29 has an invalid length. [ 532.749814][T21029] netlink: 148 bytes leftover after parsing attributes in process `syz.2.4117'. [ 532.770480][T21029] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4117'. [ 532.796164][T21037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4121'. [ 532.807912][ T4967] block nbd1: Possible stuck request ffff88802723e000: control (read@0,1024B). Runtime 270 seconds [ 532.821888][T21037] openvswitch: netlink: Unknown nsh attribute 0 [ 532.822358][ T4967] block nbd1: Possible stuck request ffff88802723e1c0: control (read@1024,1024B). Runtime 270 seconds [ 532.840343][ T4967] block nbd1: Possible stuck request ffff88802723e380: control (read@2048,1024B). Runtime 270 seconds [ 532.852959][ T4967] block nbd1: Possible stuck request ffff88802723e540: control (read@3072,1024B). Runtime 270 seconds [ 532.870302][T21037] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4121'. [ 532.925734][T21045] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 532.972608][T21046] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4122'. [ 533.024352][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.084692][T21037] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4121'. [ 533.098660][T21046] veth0_macvtap: left promiscuous mode [ 533.261614][T21049] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 533.281204][T21049] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 533.287500][T21059] netlink: 'syz.3.4127': attribute type 1 has an invalid length. [ 533.419155][T21059] bond3: entered promiscuous mode [ 533.457797][T21059] 8021q: adding VLAN 0 to HW filter on device bond3 [ 533.602942][T21072] netlink: 'syz.0.4129': attribute type 1 has an invalid length. [ 533.602942][T21074] netlink: 'syz.0.4129': attribute type 1 has an invalid length. [ 533.635925][ T9] IPVS: starting estimator thread 0... [ 533.674007][T21072] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:19969 [ 533.754410][T21078] IPVS: using max 32 ests per chain, 76800 per kthread [ 533.896334][T18322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.942238][T18322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.974833][T21094] netlink: 'syz.0.4134': attribute type 11 has an invalid length. [ 533.998912][ T200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.031260][T21094] netlink: 'syz.0.4134': attribute type 11 has an invalid length. [ 534.054021][ T200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.064403][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.081316][T21094] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4134'. [ 534.138091][T18329] IPVS: starting estimator thread 0... [ 534.156383][T21100] netlink: 'syz.0.4134': attribute type 11 has an invalid length. [ 534.187572][T21100] netlink: 'syz.0.4134': attribute type 11 has an invalid length. [ 534.227938][T21100] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4134'. [ 534.238019][T21110] IPVS: using max 29 ests per chain, 69600 per kthread [ 534.668829][T21127] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4144'. [ 534.685390][ T29] audit: type=1107 audit(1780682058.866:6): pid=21124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Jb5$EeY{3WTL"m0VRTk$MDJM' [ 535.023371][T21147] lo: entered promiscuous mode [ 535.057182][T21147] tunl0: entered promiscuous mode [ 535.071193][T21147] gre0: entered promiscuous mode [ 535.091267][T21147] gretap0: entered promiscuous mode [ 535.104369][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 535.116369][T21147] erspan0: entered promiscuous mode [ 535.141163][T21147] ip_vti0: entered promiscuous mode [ 535.156420][T21145] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 535.318380][T21160] bond4: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 535.429920][T21160] bond4: (slave lo): Enslaving as an active interface with an up link [ 535.493307][T21160] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 535.561720][T21145] syzkaller0: entered promiscuous mode [ 535.584164][T21145] syzkaller0: entered allmulticast mode [ 535.922733][T21195] openvswitch: netlink: IPv4 tun info is not correct [ 537.184348][ C0] net_ratelimit: 2 callbacks suppressed [ 537.184383][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.224363][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.661861][T21203] __nla_validate_parse: 3 callbacks suppressed [ 538.661881][T21203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4156'. [ 538.950307][T21226] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4160'. [ 539.005034][T21229] netlink: 'syz.0.4159': attribute type 1 has an invalid length. [ 539.050001][T21229] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4159'. [ 539.086080][T21236] netlink: 159404 bytes leftover after parsing attributes in process `syz.4.4160'. [ 539.264333][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.509808][T21255] openvswitch: netlink: Flow actions attr not present in new flow. [ 539.626477][T21255] bond4: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 539.673002][T21262] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.4167'. [ 539.697386][T21255] bond4 (unregistering): Released all slaves [ 539.751624][T21268] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4168'. [ 539.849593][T21272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4169'. [ 540.009184][T21278] netlink: 'syz.1.4170': attribute type 12 has an invalid length. [ 540.094070][T21282] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4172'. [ 540.304332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.356231][T21299] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4174'. [ 540.388795][T21299] openvswitch: netlink: Flow actions attr not present in new flow. [ 540.525449][T21307] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4177'. [ 540.689836][T21316] xt_ecn: cannot match TCP bits for non-tcp packets [ 540.987254][T21332] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 541.108154][T21332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 541.140964][T21332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.218306][T21332] bond0 (unregistering): Released all slaves [ 541.344323][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.454193][T21347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.551676][T21347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 541.964039][T21371] Cannot find set identified by id 0 to match [ 542.311243][T21383] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 542.388220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 542.668105][T21404] netlink: 'syz.3.4204': attribute type 1 has an invalid length. [ 542.874593][T21404] bond5: entered promiscuous mode [ 542.912319][T21404] 8021q: adding VLAN 0 to HW filter on device bond5 [ 543.049721][T21419] bridge2: entered promiscuous mode [ 543.089388][T21419] bridge2: entered allmulticast mode [ 543.202072][T21423] sctp: [Deprecated]: syz.2.4207 (pid 21423) Use of struct sctp_assoc_value in delayed_ack socket option. [ 543.202072][T21423] Use struct sctp_sack_info instead [ 543.240592][T21425] netlink: 'syz.3.4208': attribute type 10 has an invalid length. [ 543.336929][T21434] netlink: 'syz.1.4211': attribute type 2 has an invalid length. [ 543.369142][T21425] veth1_virt_wifi: entered promiscuous mode [ 543.381278][T21425] netlink: 'syz.3.4208': attribute type 10 has an invalid length. [ 543.424330][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.468564][T21425] netlink: 'syz.3.4208': attribute type 10 has an invalid length. [ 543.478064][T21420] syzkaller0: entered promiscuous mode [ 543.495115][T21420] syzkaller0: entered allmulticast mode [ 543.512121][T21425] netlink: 'syz.3.4208': attribute type 10 has an invalid length. [ 543.574797][ T29] audit: type=1804 audit(1780682067.736:7): pid=21438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4212" name="/newroot/164/cgroup.controllers" dev="tmpfs" ino=856 res=1 errno=0 [ 543.648483][ T29] audit: type=1800 audit(1780682067.736:8): pid=21438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4212" name="cgroup.controllers" dev="tmpfs" ino=856 res=0 errno=0 [ 543.672719][T21425] netlink: 'syz.3.4208': attribute type 10 has an invalid length. [ 543.723551][T21441] __nla_validate_parse: 13 callbacks suppressed [ 543.723570][T21441] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4213'. [ 543.725910][T21425] netlink: 'syz.3.4208': attribute type 10 has an invalid length. [ 543.799793][T21441] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.808354][T21441] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.177638][T21461] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4219'. [ 544.315164][T21467] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4224'. [ 544.464398][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.501788][T21477] vet: renamed from veth0_vlan [ 544.755678][T21497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4231'. [ 544.769629][ T46] IPVS: starting estimator thread 0... [ 544.792060][T21507] validate_nla: 27 callbacks suppressed [ 544.792077][T21507] netlink: 'syz.0.4234': attribute type 21 has an invalid length. [ 544.838637][T21507] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4234'. [ 544.849419][T21507] netlink: 'syz.0.4234': attribute type 5 has an invalid length. [ 544.868133][T21507] netlink: 'syz.0.4234': attribute type 6 has an invalid length. [ 544.885081][T21504] IPVS: using max 31 ests per chain, 74400 per kthread [ 544.933209][T21507] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4234'. [ 545.080793][T21507] netlink: 'syz.0.4234': attribute type 21 has an invalid length. [ 545.145710][T21507] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4234'. [ 545.239327][T21507] netlink: 'syz.0.4234': attribute type 5 has an invalid length. [ 545.271105][T21507] netlink: 'syz.0.4234': attribute type 6 has an invalid length. [ 545.316124][T21507] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4234'. [ 545.504407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.704199][T21551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4246'. [ 545.793429][T21549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.179842][T21577] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4253'. [ 546.205611][T21577] 0: renamed from hsr0 (while UP) [ 546.265710][T21577] 0: entered allmulticast mode [ 546.270718][T21577] hsr_slave_0: entered allmulticast mode [ 546.277130][T21577] hsr_slave_1: entered allmulticast mode [ 546.283435][T21577] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 546.350874][T21586] x_tables: unsorted entry at hook 1 [ 546.366105][T21586] netlink: zone id is out of range [ 546.375957][T21586] netlink: zone id is out of range [ 546.406985][T21586] netlink: zone id is out of range [ 546.421259][T21586] netlink: zone id is out of range [ 546.479380][T21586] netlink: zone id is out of range [ 546.953283][T21614] netlink: 'syz.4.4263': attribute type 83 has an invalid length. [ 547.498662][T21634] geneve3: entered promiscuous mode [ 547.512530][T21634] geneve3: entered allmulticast mode [ 547.527187][T20924] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 547.543627][T20924] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 547.584407][ C0] net_ratelimit: 61 callbacks suppressed [ 547.584427][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.587634][T20924] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 547.642168][T20924] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 548.624978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.786170][T21702] netlink: 'syz.1.4291': attribute type 4 has an invalid length. [ 548.903752][T21707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 549.013030][T21714] __nla_validate_parse: 5 callbacks suppressed [ 549.013049][T21714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4296'. [ 549.267738][T21728] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4302'. [ 549.388929][T21731] batadv_slave_1: entered promiscuous mode [ 549.440956][T21730] batadv_slave_1: left promiscuous mode [ 549.562340][T21734] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 549.575455][T21742] xt_ecn: cannot match TCP bits for non-tcp packets [ 549.577339][ T9] syzkaller1: tun_net_xmit 90 [ 549.595573][T21734] syzkaller1: ignored: set checksum disabled [ 549.664411][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.730304][T21734] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 549.756397][T21734] syzkaller1: Linktype set failed because interface is up [ 549.952918][T21766] netdevsim netdevsim2 : renamed from netdevsim0 [ 550.091106][T21772] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4315'. [ 550.192021][T21772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4315'. [ 550.309104][T21772] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 550.369260][T21772] bond3 (unregistering): Released all slaves [ 550.598107][T21803] netlink: 'syz.4.4322': attribute type 1 has an invalid length. [ 550.620249][T21806] netlink: 'syz.1.4323': attribute type 12 has an invalid length. [ 550.652517][T21806] netlink: 'syz.1.4323': attribute type 29 has an invalid length. [ 550.672666][T21806] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4323'. [ 550.694628][T21806] netlink: 'syz.1.4323': attribute type 1 has an invalid length. [ 550.704446][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 550.767822][T21806] netlink: 47 bytes leftover after parsing attributes in process `syz.1.4323'. [ 550.839496][T21814] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4327'. [ 550.989615][T21822] netlink: 'syz.1.4328': attribute type 1 has an invalid length. [ 551.019843][T21824] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.4331'. [ 551.025444][T21823] sock: sock_timestamping_bind_phc: sock not bind to device [ 551.070189][T21826] netlink: 'syz.3.4332': attribute type 10 has an invalid length. [ 551.110741][T21823] sock: sock_timestamping_bind_phc: sock not bind to device [ 551.118569][T21826] tipc: Resetting bearer [ 551.146560][T21826] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.202715][T21826] bond0: (slave team0): Enslaving as an active interface with an up link [ 551.338723][T21838] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4334'. [ 551.419219][T21844] openvswitch: netlink: Multiple metadata blocks provided [ 551.645798][T21852] Cannot find del_set index 4 as target [ 551.682939][T21840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.702406][T21840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 551.715218][T21859] netlink: 'syz.2.4341': attribute type 1 has an invalid length. [ 551.744432][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 551.815366][T21865] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4342'. [ 552.042021][T21861] syzkaller0: entered promiscuous mode [ 552.047875][T21861] syzkaller0: entered allmulticast mode [ 552.055212][T21870] tipc: New replicast peer: 255.255.255.255 [ 552.061905][T21870] tipc: Enabled bearer , priority 10 [ 552.114747][T21840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.125909][T21840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 552.477404][T21882] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 552.498084][T21840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.509399][T21840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 552.598565][ T5653] block nbd3: Receive control failed (result -1) [ 552.784437][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.824516][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 554.864428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.559796][T21840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.588969][T21840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 555.693327][T21840] [ 555.695689][T21840] ====================================================== [ 555.702866][T21840] WARNING: possible circular locking dependency detected [ 555.709933][T21840] syzkaller #0 Not tainted [ 555.714362][T21840] ------------------------------------------------------ [ 555.721398][T21840] syz.1.4336/21840 is trying to acquire lock: [ 555.727459][T21840] ffff88801be852a0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove+0x35/0x80 [ 555.737346][T21840] [ 555.737346][T21840] but task is already holding lock: [ 555.744702][T21840] ffffffff8f390260 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 555.753505][T21840] [ 555.753505][T21840] which lock already depends on the new lock. [ 555.753505][T21840] [ 555.763902][T21840] [ 555.763902][T21840] the existing dependency chain (in reverse order) is: [ 555.772911][T21840] [ 555.772911][T21840] -> #11 (gdp_mutex){+.+.}-{4:4}: [ 555.780224][T21840] __mutex_lock+0x1a3/0x1550 [ 555.785334][T21840] get_device_parent+0x16f/0x3a0 [ 555.790784][T21840] device_add+0x2e1/0xbb0 [ 555.795626][T21840] device_create+0x269/0x300 [ 555.800732][T21840] msr_device_create+0x33/0x50 [ 555.806050][T21840] cpuhp_invoke_callback+0x445/0x860 [ 555.811858][T21840] cpuhp_thread_fun+0x36b/0x780 [ 555.817247][T21840] smpboot_thread_fn+0x541/0xa50 [ 555.822695][T21840] kthread+0x389/0x470 [ 555.827277][T21840] ret_from_fork+0x514/0xb70 [ 555.832403][T21840] ret_from_fork_asm+0x1a/0x30 [ 555.837677][T21840] [ 555.837677][T21840] -> #10 (cpuhp_state-up){+.+.}-{0:0}: [ 555.845317][T21840] cpuhp_thread_fun+0x127/0x780 [ 555.850765][T21840] smpboot_thread_fn+0x541/0xa50 [ 555.856208][T21840] kthread+0x389/0x470 [ 555.860787][T21840] ret_from_fork+0x514/0xb70 [ 555.865896][T21840] ret_from_fork_asm+0x1a/0x30 [ 555.871173][T21840] [ 555.871173][T21840] -> #9 (cpu_hotplug_lock){++++}-{0:0}: [ 555.878890][T21840] cpus_read_lock+0x42/0x160 [ 555.883991][T21840] static_key_slow_inc+0x12/0x30 [ 555.889461][T21840] setup_udp_tunnel_sock+0x2fd/0x510 [ 555.895323][T21840] gtp_encap_enable_socket+0x3e1/0x5d0 [ 555.901350][T21840] gtp_newlink+0x813/0x1780 [ 555.906402][T21840] rtnl_newlink_create+0x329/0xb70 [ 555.912074][T21840] rtnl_newlink+0x166a/0x1bb0 [ 555.917267][T21840] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 555.922715][T21840] netlink_rcv_skb+0x232/0x4b0 [ 555.927996][T21840] netlink_unicast+0x75c/0x8e0 [ 555.933268][T21840] netlink_sendmsg+0x813/0xb40 [ 555.938553][T21840] ____sys_sendmsg+0x972/0x9f0 [ 555.943821][T21840] ___sys_sendmsg+0x2a5/0x360 [ 555.949009][T21840] __x64_sys_sendmsg+0x1bd/0x2a0 [ 555.954465][T21840] do_syscall_64+0x174/0x580 [ 555.959577][T21840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.965997][T21840] [ 555.965997][T21840] -> #8 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 555.973728][T21840] lock_sock_nested+0x41/0x100 [ 555.979016][T21840] inet_shutdown+0x6a/0x390 [ 555.984110][T21840] nbd_mark_nsock_dead+0x2e9/0x560 [ 555.989810][T21840] recv_work+0x1c2e/0x1d40 [ 555.994735][T21840] process_scheduled_works+0xb5d/0x1860 [ 556.000799][T21840] worker_thread+0xa53/0xfc0 [ 556.005910][T21840] kthread+0x389/0x470 [ 556.010510][T21840] ret_from_fork+0x514/0xb70 [ 556.015613][T21840] ret_from_fork_asm+0x1a/0x30 [ 556.020903][T21840] [ 556.020903][T21840] -> #7 (&nsock->tx_lock){+.+.}-{4:4}: [ 556.028557][T21840] __mutex_lock+0x1a3/0x1550 [ 556.033665][T21840] nbd_queue_rq+0x37b/0x1100 [ 556.038772][T21840] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 556.044926][T21840] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 556.051825][T21840] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 556.058405][T21840] blk_mq_run_hw_queue+0x348/0x4f0 [ 556.064024][T21840] blk_mq_dispatch_list+0xd16/0xe10 [ 556.069732][T21840] blk_mq_flush_plug_list+0x48d/0x570 [ 556.075615][T21840] __blk_flush_plug+0x3ed/0x4d0 [ 556.081059][T21840] __submit_bio+0x28d/0x580 [ 556.086070][T21840] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 556.092212][T21840] block_read_full_folio+0x599/0x830 [ 556.098029][T21840] filemap_read_folio+0x137/0x3b0 [ 556.103571][T21840] do_read_cache_folio+0x358/0x590 [ 556.109195][T21840] read_part_sector+0xb6/0x2b0 [ 556.114548][T21840] adfspart_check_ICS+0xb1/0x960 [ 556.119998][T21840] bdev_disk_changed+0x817/0x1770 [ 556.125527][T21840] blkdev_get_whole+0x380/0x510 [ 556.130934][T21840] bdev_open+0x31e/0xd30 [ 556.135682][T21840] blkdev_open+0x470/0x610 [ 556.140608][T21840] do_dentry_open+0x822/0x13a0 [ 556.145885][T21840] vfs_open+0x3b/0x340 [ 556.150466][T21840] path_openat+0x2e08/0x3860 [ 556.155566][T21840] do_file_open+0x23e/0x4a0 [ 556.160581][T21840] do_sys_openat2+0x113/0x200 [ 556.165766][T21840] __x64_sys_openat+0x138/0x170 [ 556.171122][T21840] do_syscall_64+0x174/0x580 [ 556.176221][T21840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.182628][T21840] [ 556.182628][T21840] -> #6 (&cmd->lock){+.+.}-{4:4}: [ 556.189827][T21840] __mutex_lock+0x1a3/0x1550 [ 556.194928][T21840] nbd_queue_rq+0xc6/0x1100 [ 556.199950][T21840] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 556.206005][T21840] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 556.212845][T21840] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 556.219333][T21840] blk_mq_run_hw_queue+0x348/0x4f0 [ 556.224952][T21840] blk_mq_dispatch_list+0xd16/0xe10 [ 556.230665][T21840] blk_mq_flush_plug_list+0x48d/0x570 [ 556.236570][T21840] __blk_flush_plug+0x3ed/0x4d0 [ 556.241929][T21840] __submit_bio+0x28d/0x580 [ 556.246943][T21840] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 556.253086][T21840] block_read_full_folio+0x599/0x830 [ 556.258880][T21840] filemap_read_folio+0x137/0x3b0 [ 556.264420][T21840] do_read_cache_folio+0x358/0x590 [ 556.270042][T21840] read_part_sector+0xb6/0x2b0 [ 556.275314][T21840] adfspart_check_ICS+0xb1/0x960 [ 556.280762][T21840] bdev_disk_changed+0x817/0x1770 [ 556.286295][T21840] blkdev_get_whole+0x380/0x510 [ 556.291666][T21840] bdev_open+0x31e/0xd30 [ 556.296414][T21840] blkdev_open+0x470/0x610 [ 556.301344][T21840] do_dentry_open+0x822/0x13a0 [ 556.306618][T21840] vfs_open+0x3b/0x340 [ 556.311194][T21840] path_openat+0x2e08/0x3860 [ 556.316384][T21840] do_file_open+0x23e/0x4a0 [ 556.321397][T21840] do_sys_openat2+0x113/0x200 [ 556.326580][T21840] __x64_sys_openat+0x138/0x170 [ 556.331937][T21840] do_syscall_64+0x174/0x580 [ 556.337033][T21840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.343432][T21840] [ 556.343432][T21840] -> #5 (set->srcu){.+.+}-{0:0}: [ 556.350545][T21840] __synchronize_srcu+0xca/0x300 [ 556.355991][T21840] elevator_switch+0x1e8/0x7a0 [ 556.361270][T21840] elevator_change+0x2cc/0x450 [ 556.366542][T21840] elevator_set_default+0x36c/0x430 [ 556.372256][T21840] blk_register_queue+0x3e9/0x4e0 [ 556.377804][T21840] __add_disk+0x677/0xd50 [ 556.382732][T21840] add_disk_fwnode+0xfb/0x480 [ 556.387921][T21840] nbd_dev_add+0x72c/0xb50 [ 556.392850][T21840] nbd_init+0x168/0x1f0 [ 556.397640][T21840] do_one_initcall+0x250/0x870 [ 556.402917][T21840] do_initcall_level+0x104/0x190 [ 556.408436][T21840] do_initcalls+0x59/0xa0 [ 556.413276][T21840] kernel_init_freeable+0x2a6/0x3e0 [ 556.418980][T21840] kernel_init+0x1d/0x1d0 [ 556.423875][T21840] ret_from_fork+0x514/0xb70 [ 556.428971][T21840] ret_from_fork_asm+0x1a/0x30 [ 556.434244][T21840] [ 556.434244][T21840] -> #4 (&q->elevator_lock){+.+.}-{4:4}: [ 556.442050][T21840] __mutex_lock+0x1a3/0x1550 [ 556.447148][T21840] elevator_change+0x1b3/0x450 [ 556.452420][T21840] elevator_set_none+0xb5/0x140 [ 556.457775][T21840] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 556.464090][T21840] nbd_start_device+0x17f/0xb10 [ 556.469451][T21840] nbd_genl_connect+0x165b/0x1cf0 [ 556.474988][T21840] genl_family_rcv_msg_doit+0x22a/0x330 [ 556.481046][T21840] genl_rcv_msg+0x61c/0x7a0 [ 556.486055][T21840] netlink_rcv_skb+0x232/0x4b0 [ 556.491332][T21840] genl_rcv+0x28/0x40 [ 556.495916][T21840] netlink_unicast+0x75c/0x8e0 [ 556.501190][T21840] netlink_sendmsg+0x813/0xb40 [ 556.506465][T21840] ____sys_sendmsg+0x972/0x9f0 [ 556.511735][T21840] ___sys_sendmsg+0x2a5/0x360 [ 556.516913][T21840] __x64_sys_sendmsg+0x1bd/0x2a0 [ 556.522357][T21840] do_syscall_64+0x174/0x580 [ 556.527453][T21840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.533855][T21840] [ 556.533855][T21840] -> #3 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 556.542445][T21840] blk_alloc_queue+0x546/0x680 [ 556.547725][T21840] __blk_mq_alloc_disk+0x197/0x390 [ 556.553348][T21840] nbd_dev_add+0x499/0xb50 [ 556.558337][T21840] nbd_init+0x168/0x1f0 [ 556.563002][T21840] do_one_initcall+0x250/0x870 [ 556.568270][T21840] do_initcall_level+0x104/0x190 [ 556.573710][T21840] do_initcalls+0x59/0xa0 [ 556.578546][T21840] kernel_init_freeable+0x2a6/0x3e0 [ 556.584255][T21840] kernel_init+0x1d/0x1d0 [ 556.589104][T21840] ret_from_fork+0x514/0xb70 [ 556.594200][T21840] ret_from_fork_asm+0x1a/0x30 [ 556.599472][T21840] [ 556.599472][T21840] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 556.606690][T21840] fs_reclaim_acquire+0x71/0x100 [ 556.612142][T21840] kmem_cache_alloc_lru_noprof+0x45/0x640 [ 556.618368][T21840] alloc_inode+0xb8/0x1b0 [ 556.623207][T21840] iget_locked+0x131/0x6a0 [ 556.628131][T21840] kernfs_get_inode+0x4f/0x780 [ 556.633401][T21840] kernfs_get_tree+0x5cd/0x980 [ 556.638668][T21840] sysfs_get_tree+0x46/0x110 [ 556.643767][T21840] vfs_get_tree+0x92/0x2a0 [ 556.648696][T21840] do_new_mount+0x341/0xd30 [ 556.653707][T21840] __se_sys_mount+0x31d/0x420 [ 556.658888][T21840] do_syscall_64+0x174/0x580 [ 556.663989][T21840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.670388][T21840] [ 556.670388][T21840] -> #1 (&root->kernfs_rwsem){++++}-{4:4}: [ 556.678369][T21840] down_write+0x96/0x200 [ 556.683117][T21840] kernfs_remove_by_name_ns+0x4e/0x140 [ 556.689088][T21840] device_links_driver_bound+0x54f/0x14e0 [ 556.695380][T21840] driver_bound+0xd8/0x2e0 [ 556.700344][T21840] really_probe+0x789/0xaf0 [ 556.705353][T21840] __driver_probe_device+0x1ef/0x380 [ 556.711144][T21840] driver_probe_device+0x4f/0x240 [ 556.716676][T21840] __device_attach_driver+0x279/0x430 [ 556.722552][T21840] bus_for_each_drv+0x258/0x2f0 [ 556.727922][T21840] __device_attach+0x2c5/0x450 [ 556.733220][T21840] device_initial_probe+0xa1/0xd0 [ 556.738758][T21840] bus_probe_device+0x12a/0x220 [ 556.744136][T21840] device_add+0x7e9/0xbb0 [ 556.748992][T21840] faux_device_create_with_groups+0x189/0x290 [ 556.755909][T21840] regulator_dummy_init+0x19/0x40 [ 556.761442][T21840] regulator_init+0xca/0x110 [ 556.766538][T21840] do_one_initcall+0x250/0x870 [ 556.771809][T21840] do_initcall_level+0x104/0x190 [ 556.777259][T21840] do_initcalls+0x59/0xa0 [ 556.782096][T21840] kernel_init_freeable+0x2a6/0x3e0 [ 556.787805][T21840] kernel_init+0x1d/0x1d0 [ 556.792661][T21840] ret_from_fork+0x514/0xb70 [ 556.797765][T21840] ret_from_fork_asm+0x1a/0x30 [ 556.803046][T21840] [ 556.803046][T21840] -> #0 (&root->kernfs_supers_rwsem){++++}-{4:4}: [ 556.811638][T21840] __lock_acquire+0x15a5/0x2cf0 [ 556.817001][T21840] lock_acquire+0x106/0x350 [ 556.822014][T21840] down_read+0x47/0x2e0 [ 556.826677][T21840] kernfs_remove+0x35/0x80 [ 556.831601][T21840] __kobject_del+0xe1/0x330 [ 556.836704][T21840] kobject_del+0x45/0x60 [ 556.841466][T21840] cleanup_glue_dir+0x1a3/0x220 [ 556.846850][T21840] device_del+0x780/0x8f0 [ 556.851708][T21840] unregister_netdevice_many_notify+0x1d5f/0x22c0 [ 556.858697][T21840] unregister_netdevice_queue+0x31f/0x360 [ 556.864931][T21840] nsim_destroy+0x26d/0x7f0 [ 556.870031][T21840] __nsim_dev_port_del+0x14f/0x200 [ 556.875721][T21840] nsim_dev_reload_destroy+0x288/0x490 [ 556.881708][T21840] nsim_dev_reload_down+0x8a/0xc0 [ 556.887256][T21840] devlink_reload+0x1eb/0x8c0 [ 556.892561][T21840] devlink_nl_reload_doit+0xaaa/0xc80 [ 556.898459][T21840] genl_family_rcv_msg_doit+0x22a/0x330 [ 556.904533][T21840] genl_rcv_msg+0x61c/0x7a0 [ 556.909557][T21840] netlink_rcv_skb+0x232/0x4b0 [ 556.914847][T21840] genl_rcv+0x28/0x40 [ 556.919393][T21840] netlink_unicast+0x75c/0x8e0 [ 556.924676][T21840] netlink_sendmsg+0x813/0xb40 [ 556.929957][T21840] ____sys_sendmsg+0x972/0x9f0 [ 556.935233][T21840] ___sys_sendmsg+0x2a5/0x360 [ 556.940417][T21840] __x64_sys_sendmsg+0x1bd/0x2a0 [ 556.945865][T21840] do_syscall_64+0x174/0x580 [ 556.950964][T21840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.957363][T21840] [ 556.957363][T21840] other info that might help us debug this: [ 556.957363][T21840] [ 556.967571][T21840] Chain exists of: [ 556.967571][T21840] &root->kernfs_supers_rwsem --> cpuhp_state-up --> gdp_mutex [ 556.967571][T21840] [ 556.980951][T21840] Possible unsafe locking scenario: [ 556.980951][T21840] [ 556.988452][T21840] CPU0 CPU1 [ 556.993847][T21840] ---- ---- [ 556.999194][T21840] lock(gdp_mutex); [ 557.003081][T21840] lock(cpuhp_state-up); [ 557.009913][T21840] lock(gdp_mutex); [ 557.016321][T21840] rlock(&root->kernfs_supers_rwsem); [ 557.021763][T21840] [ 557.021763][T21840] *** DEADLOCK *** [ 557.021763][T21840] [ 557.029885][T21840] 5 locks held by syz.1.4336/21840: [ 557.035062][T21840] #0: ffffffff8fe38628 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 557.043318][T21840] #1: ffff8880332b1128 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x34a/0x490 [ 557.053676][T21840] #2: ffff888022edf258 (&devlink->lock_key#10){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x360/0x490 [ 557.064902][T21840] #3: ffffffff8fdc8c00 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x16b/0x7f0 [ 557.073864][T21840] #4: ffffffff8f390260 (gdp_mutex){+.+.}-{4:4}, at: cleanup_glue_dir+0xc3/0x220 [ 557.082988][T21840] [ 557.082988][T21840] stack backtrace: [ 557.088863][T21840] CPU: 0 UID: 0 PID: 21840 Comm: syz.1.4336 Not tainted syzkaller #0 PREEMPT(full) [ 557.088904][T21840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 557.088928][T21840] Call Trace: [ 557.088935][T21840] [ 557.088943][T21840] dump_stack_lvl+0xe8/0x150 [ 557.088966][T21840] print_circular_bug+0x2e1/0x300 [ 557.088994][T21840] check_noncircular+0x12e/0x150 [ 557.089021][T21840] __lock_acquire+0x15a5/0x2cf0 [ 557.089047][T21840] ? irqentry_exit+0x218/0x8b0 [ 557.089067][T21840] ? lockdep_hardirqs_on+0x7a/0x110 [ 557.089086][T21840] ? __pfx___schedule+0x10/0x10 [ 557.089116][T21840] ? kernfs_remove+0x35/0x80 [ 557.089136][T21840] lock_acquire+0x106/0x350 [ 557.089152][T21840] ? kernfs_remove+0x35/0x80 [ 557.089175][T21840] down_read+0x47/0x2e0 [ 557.089191][T21840] ? kernfs_remove+0x35/0x80 [ 557.089211][T21840] kernfs_remove+0x35/0x80 [ 557.089231][T21840] __kobject_del+0xe1/0x330 [ 557.089250][T21840] kobject_del+0x45/0x60 [ 557.089265][T21840] cleanup_glue_dir+0x1a3/0x220 [ 557.089282][T21840] device_del+0x780/0x8f0 [ 557.089307][T21840] ? __pfx_device_del+0x10/0x10 [ 557.089321][T21840] ? netdev_unregister_kobject+0x344/0x450 [ 557.089414][T21840] unregister_netdevice_many_notify+0x1d5f/0x22c0 [ 557.089438][T21840] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 557.089463][T21840] unregister_netdevice_queue+0x31f/0x360 [ 557.089481][T21840] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 557.089501][T21840] nsim_destroy+0x26d/0x7f0 [ 557.089523][T21840] __nsim_dev_port_del+0x14f/0x200 [ 557.089539][T21840] nsim_dev_reload_destroy+0x288/0x490 [ 557.089556][T21840] nsim_dev_reload_down+0x8a/0xc0 [ 557.089570][T21840] devlink_reload+0x1eb/0x8c0 [ 557.089596][T21840] ? __pfx_devlink_reload+0x10/0x10 [ 557.089618][T21840] ? devlink_resources_validate+0xa7/0xd0 [ 557.089669][T21840] ? devlink_resources_validate+0xa7/0xd0 [ 557.089691][T21840] devlink_nl_reload_doit+0xaaa/0xc80 [ 557.089717][T21840] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 557.089740][T21840] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 557.089758][T21840] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 557.089779][T21840] genl_family_rcv_msg_doit+0x22a/0x330 [ 557.089798][T21840] ? __asan_memcpy+0x40/0x70 [ 557.089829][T21840] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 557.089850][T21840] ? bpf_lsm_capable+0x9/0x20 [ 557.089865][T21840] ? security_capable+0x7e/0x2c0 [ 557.089923][T21840] genl_rcv_msg+0x61c/0x7a0 [ 557.089942][T21840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 557.089958][T21840] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 557.089978][T21840] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 557.089999][T21840] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 557.090021][T21840] ? __pfx_ref_tracker_free+0x10/0x10 [ 557.090074][T21840] netlink_rcv_skb+0x232/0x4b0 [ 557.090096][T21840] ? __pfx_genl_rcv_msg+0x10/0x10 [ 557.090113][T21840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 557.090139][T21840] ? down_read+0x270/0x2e0 [ 557.090154][T21840] ? genl_rcv+0xd/0x40 [ 557.090170][T21840] genl_rcv+0x28/0x40 [ 557.090194][T21840] netlink_unicast+0x75c/0x8e0 [ 557.090217][T21840] netlink_sendmsg+0x813/0xb40 [ 557.090242][T21840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 557.090265][T21840] ? aa_sock_msg_perm+0xf1/0x1b0 [ 557.090287][T21840] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 557.090313][T21840] ____sys_sendmsg+0x972/0x9f0 [ 557.090328][T21840] ? __might_fault+0xaf/0x130 [ 557.090349][T21840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 557.090366][T21840] ? import_iovec+0x73/0xa0 [ 557.090385][T21840] ___sys_sendmsg+0x2a5/0x360 [ 557.090398][T21840] ? __lock_acquire+0x6b5/0x2cf0 [ 557.090414][T21840] ? __pfx____sys_sendmsg+0x10/0x10 [ 557.090431][T21840] ? futex_wait+0x2a2/0x390 [ 557.090466][T21840] ? __fget_files+0x2a/0x420 [ 557.090484][T21840] ? __fget_files+0x3a0/0x420 [ 557.090504][T21840] __x64_sys_sendmsg+0x1bd/0x2a0 [ 557.090519][T21840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 557.090536][T21840] ? rcu_is_watching+0x15/0xb0 [ 557.090557][T21840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.090573][T21840] do_syscall_64+0x174/0x580 [ 557.090588][T21840] ? trace_irq_disable+0x3b/0x140 [ 557.090609][T21840] ? clear_bhb_loop+0x40/0x90 [ 557.090626][T21840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.090640][T21840] RIP: 0033:0x7f6f5d59ce59 [ 557.090656][T21840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 557.090671][T21840] RSP: 002b:00007f6f5e3b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 557.090687][T21840] RAX: ffffffffffffffda RBX: 00007f6f5d815fa0 RCX: 00007f6f5d59ce59 [ 557.090698][T21840] RDX: 0000000024004804 RSI: 0000200000000080 RDI: 0000000000000003 [ 557.090708][T21840] RBP: 00007f6f5d632d6f R08: 0000000000000000 R09: 0000000000000000 [ 557.090718][T21840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.090727][T21840] R13: 00007f6f5d816038 R14: 00007f6f5d815fa0 R15: 00007ffec3de13e8 [ 557.090745][T21840] [ 557.572233][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 557.752717][T20924] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 557.768782][T20924] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 557.832474][ T3321] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 557.841199][ T3321] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 557.861712][ T3321] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 557.875077][ T3321] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 557.912386][ T1055] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 557.920993][ T1055] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 558.625128][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.664616][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.704992][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.744553][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.785009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 562.866685][ T1318] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 562.875933][ T4967] block nbd1: Possible stuck request ffff88802723e000: control (read@0,1024B). Runtime 300 seconds [ 562.886933][ T4967] block nbd1: Possible stuck request ffff88802723e1c0: control (read@1024,1024B). Runtime 300 seconds [ 562.898540][ T4967] block nbd1: Possible stuck request ffff88802723e380: control (read@2048,1024B). Runtime 300 seconds [ 562.909756][ T4967] block nbd1: Possible stuck request ffff88802723e540: control (read@3072,1024B). Runtime 300 seconds [ 563.824647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.864993][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog