last executing test programs: 10.78794023s ago: executing program 1 (id=4111): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000400)={0x0, 0x81, 0x20, 0xfea, 0xfffffffffffffffa}, &(0x7f0000000440)=0x18) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0x0, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x34}, 0x60) sendmmsg$nfc_llcp(r0, &(0x7f0000004a40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40005}], 0x1, 0x20000010) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getgid() ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000000)={0x7a}) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xff00) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x24000800) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c000000090601080000ffffffff0000000000000900020073797a31000000000500010007000000340007801800018014000240fe8004000000000000000000000000bb060004400e1f00cd0500070088000000060005409f6612b5e18f458f85a92cae0888c25e425788996568796f0433e2828ea00053d63a0d06c95ab40376798de6b82d52dd759a26f1765680ca896c5e867ad95cdb35bb5df9420febf6b8cd485c78189c5770b5387337171e06688fac2a79142c9cd77761cf8c25ac5c0c9f2792786d2df8df8e714c931c63070600c23430572044b4960cef833f7e03e6c139ecaf380a207258e66be895fa8b923731efd4844ae54e61f5edac107cbe4a5fefda9cf369e53603b3"], 0x5c}, 0x1, 0x0, 0x0, 0x100000c2}, 0x40090) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 8.076464778s ago: executing program 3 (id=4128): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xe}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c005) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, &(0x7f0000000180)='\xaf&\\%\x00', 0x2000, &(0x7f00000001c0)={@align=0x1, {0x3, 0x6, 0xc654f5a, 0x1}}, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x7fffffff}, {[0x80, 0x1000, 0xaa0e, 0x5813]}, 0x3, 0xa4, &(0x7f0000000280)=""/164}) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r2, 0x2, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x5c30f14ee6992f9}, 0x4) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000500)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x50, r1, 0xed745000) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000580)=0xc) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0x40010, r3, 0x58e39000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x101, 0x204, 0x9, 0xb, 0x0}, &(0x7f0000000600)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000640)={0xea, 0x7, 0x304, 0x2, 0x6, 0x101, 0x10000, 0x1, r4}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000680)={0x2, 0x8002, 0xb8, 0x1000, r4}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', 0x0, 0x8, r3}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r1, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x3, 0x3, 0xffff, 0x10000, r5, 0x5, '\x00', r6, 0xffffffffffffffff, 0x1, 0x5, 0x5, 0xe, @void, @value, @value=r1}, 0x50) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x97}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x0) bind$inet6(r1, &(0x7f0000000980)={0xa, 0x4e20, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000a00), r3) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x6c, r7, 0x104, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast1}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x2a}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000091}, 0x40080c0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000000b80)={0x1304, 0x13, 0x1, 0x70bd27, 0x25dfdbfb, {0x23, 0x2, 0xf9, 0x5, {0x4e23, 0x4e23, [0x8, 0x788, 0x8, 0x7fffffff], [0x9, 0x100, 0x5, 0x5], r6, [0x6, 0x6]}, 0x3, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x7a, 0x1, "5558c76e903adf2e4247378c5a4935a11beb4973f31812f39f41d0772b8fb6a106a3021690b2bdb62f89b422159efc08d0e7bae11fbceb25f6358cf0fe249bfbbafd5a4e503fa5d4bf43176dbad8ec306c18d4d6f5dcaaa8f33e38c8741e05017220f48393c1bddf4dbc47a5ce8567d0d03871554bd6"}, @INET_DIAG_REQ_BYTECODE={0x69, 0x1, "b572ac5f4633f6416b4849e5569067cd7493a6c1ba97107e3298de0e21d55b1991bae47b7cf5cf950a5f23380c7fe44fc6d66eed16e8e18891e9ce0064a45c32cc6dc5797d384a3488fc3c6fe3a6b7b68f3b89c5ba7b30ae665764c570b82df8ba48988f6e"}, @INET_DIAG_REQ_BYTECODE={0xea, 0x1, "02d7f219fb245494456a657443b04a97d0e9300466fb13f4e6a12a9d2a142966108c0f274c9086eaacd5332cc549c8c43a9e5d509bb2bd7d7abc29c63c497603b6b057fec42ded43044a952818173653e093a480b90a9a751e36d3ccb29dbc046696c81bc41681d524296206f2a208e43cdda93b4b74aa7fd3e1264a5fce158026cf733226c88da9e57564fe4877d61720bbc27e750b28fa8999e34f8c9cbbca8e0d95359a59bde0604134270a1b95fb521d1726e6d184a609e1ae45909b5a93d080b2ddcd6316848c7ad900bd3050f0f7d63ee4d437577b5a5d61d1942ccc69ca86ec23da38"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xdd, 0x1, "cd5c19398234469b24118a43ae6b920327f6211e97d6a523a5420fc0ed3b8917120f424e8eeb2243d21bc12d2d8e5744a0c36df64ffa7c5aef39e51ca2661fdf3df7676cb2795d46d87c505687d4e092d282b0ef99c3c33142b67d1b3e558fd4f344fb4496d6cffd4a99f0f4aa67061451440f9c22a91a821e731bc56e3c3f91a352ed7e1a1352232c911d5997c5e6572d436c2c0adafdcd6b7efbe96abb9cf7af5a284d73d354590350a21185b0b164257df0a2c34ce9da7adda3c9d7222d38ae2d0efcfbbcfd6ea64699d9eef8239e94be8b0bd3275798fe"}]}, 0x1304}, 0x1, 0x0, 0x0, 0x4000000}, 0x8845) socket$kcm(0x29, 0x7, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001f40), 0xffffffffffffffff) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000001f80), 0x2) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000002080)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002040)={&(0x7f0000002000)={0x1c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x40010) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x24, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x3}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002240)={'ip_vti0\x00', &(0x7f00000021c0)={'gretap0\x00', r6, 0x10, 0x1, 0x0, 0x7fff, {{0xc, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x2, 0x2f, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x3b}, {[@timestamp={0x44, 0x1c, 0x24, 0x0, 0x6, [0xd, 0x1, 0x40, 0x4, 0xcf9b, 0xc0000000]}]}}}}}) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r8, &(0x7f0000002440)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002400)={&(0x7f0000002300)={0xd0, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x63ef}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x333}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe63b}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x90}, 0x1) 7.495548192s ago: executing program 3 (id=4134): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000000400000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000008000"/28], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000200)={r1, &(0x7f00000014c0), 0x0, 0x4}, 0xfffffffffffffe6a) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0100000004000000060000000b00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRESDEC=r2], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f0000000040)=""/83, 0x53, 0x0, &(0x7f0000000400)=""/136, 0x88}}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x400454d0, 0x6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r6) sendfile(r7, r8, 0x0, 0xffffffff000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000006c0)=ANY=[@ANYRES32=r4, @ANYRES16=r0, @ANYRES16=r2, @ANYRESDEC=r5, @ANYBLOB="0024bb0ea8aa32005445ea1f2abd9f569cbe497076ef63ffb53150432703ab5d91a919c37759c7147a5e36fbeff2a7a0cb5566", @ANYRES16=r8], 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001900)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="2f0000000020000004000000430228805f89178896b68c0354a8645cb084685eb64e64cebccb5ed3be137d4c1899274811f227da772d8c332bc8548746fb29a425e00d53147bcaa192f0b7723af1700de6b2cf5ecc8765bfd6ed39bfb54431b788339922b50bb8979fc1fec3f0128d0ef59cca7a86b0cb200effa3b2fc31324467788e4121324195f5b413ea94c592682f0bdbae5bc51dbb0f31851f57c2dde191829b3e9ab9ea40304f949a5ba7baf00265a0518d7e2bc892a63ce38f9e4e22ce7ae12702dff6b15f9a939629074007", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r13, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xa2b7, @private0, 0x7ff}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0x1}, {0x0, 0x1b}], 0x2, &(0x7f0000001a00)=ANY=[@ANYRESHEX=r12], 0x10b8}, 0x103) recvmmsg(r13, &(0x7f0000006380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012000, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000000)) r14 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r14, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r13, &(0x7f0000001380), 0x0, 0xc841) 6.299394912s ago: executing program 3 (id=4140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010000b48a22a866930054000000"], 0x14}}, 0x880) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$inet(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x100}}, 0x4048010) socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000280)=0xd, 0x4) r4 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r4, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x5}, 0x1c, &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000840000000000000006005c82c0c3d98b688d00000000000084000000080000e61f0100"/56], 0x38, 0x4855}, 0x24000052) r5 = socket$can_raw(0x1d, 0x3, 0x1) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) bind$can_raw(r5, 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r7, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0cbc20159700b00000000000119078000000000000000000004e20009c907801000000000000007b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00000000000000000000000000bcfd56f1375461caaa2f19935e6996c7096ffeeb03000000000000649a3bfbc1f39cb307b3472eb9cdb042d2643fcbb2c5a57df67d544af6e8dafe09"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="181c7344530000000000000000000000953afda350b1daa6255a85d2b47f8435b01529c4e08e49f9a31320a03380a2866babf849ca2d7ae7df67369d215218ac5a31748144e03f70b74be90750685da61aa59e000052934191e54968be5ccbf5c39cc76951b1c0e321b1a6860e21561f98721320986b4032ee5879b5489d85b8f87768563b1834a49d55f9"], 0x0, 0x2003}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 5.514136238s ago: executing program 2 (id=4144): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x7891000) unshare(0x22020600) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0}}], 0x1, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r3, 0x89e3, &(0x7f0000000140)={0x2b, 0x2, 0x8, 0x19}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000500)=@assoc_value={r5}, 0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r5, 0x5}, 0x8) r6 = socket$inet6(0xa, 0x2, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='cubic', 0x5) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000000a004e23ffff0d00ff0200000000000000000000000000010c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001fffffe00000000"], 0x20000) unshare(0x41050080) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x4, &(0x7f0000000000)=""/231, &(0x7f0000000200)=0xe7) 5.016982021s ago: executing program 2 (id=4145): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x100000000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x3, 0x1, 0x0, 0xf, 0x0, 0x7, [{0x3, 0x801, 0x5}]}]}, {0x0, [0x4f, 0x0, 0x30]}}, 0x0, 0x35, 0x0, 0x9}, 0x28) listen(r3, 0x0) r4 = epoll_create1(0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r5, &(0x7f0000001440)=ANY=[@ANYBLOB="000086dd"], 0x76) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)={0x4}) shutdown(r3, 0x1) ioctl$TUNSETOFFLOAD(r2, 0x5421, 0x6) 4.884254289s ago: executing program 3 (id=4146): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000000c0), 0x4) 4.745483473s ago: executing program 3 (id=4147): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) (async, rerun: 64) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (rerun: 64) 4.445913083s ago: executing program 4 (id=4148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, 0x0, 0xffffffffffffff70) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xffffffff}, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000090)={&(0x7f0000000300)=@newtclass={0x30, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0x1}, {0x0, 0x1}}, [@tclass_kind_options=@c_qfq={{0x8}, {0x4}}]}, 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000000b0)={&(0x7f0000000500)=@setlink={0x20, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x41, 0x1}}, 0x20}}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000700)={0x11, 0x300, r4}, 0x14) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f00000005c0)=0x10001, 0x4) write(r5, &(0x7f0000000600)='\x00', 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@ipmr_newroute={0x158, 0x18, 0x10, 0x70bd29, 0x25dfdbfc, {0x80, 0x0, 0x729af92f7b18acb5, 0xb, 0x2, 0x3, 0x0, 0x1, 0x600}, [@RTA_METRICS={0x70, 0x8, 0x0, 0x1, "ecab55c0441af6519484c68f1129bfbcb8e8594835a4b63322e9060b6b30b6c3580a8b36ab081c396e0c682133bb620f1c9fd370954a34ca559e962246620b9a3f08aceca3fdfe4e90afefafe473e44e20efafa71b3bf07ca0204068891d9864a8d2ee5d5e458185de35e54c"}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_TOS={0x5, 0x5, 0x3}}, @RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_IP_PROTO={0x5, 0x1b, 0x3a}, @RTA_METRICS={0x94, 0x8, 0x0, 0x1, "c6d9a391125b76aac11e0505fed22fc8a5a72bad89d5e4b6c2a452bb8a563ed672d3ebb5f73560f022b7557ad4426b485e08dc7b007e575c0bcec836ccf58a82d877f699b418137884e25f774d3afdfcdfd58778dfdf7a119b0f80257628d8cef15488f257694a4ec4fb6c23e5c42fe1164e563761006316cfccf55e77eb32ed684e7c0995c900"/144}, @RTA_NH_ID={0x8, 0x1e, 0xe866}, @RTA_MULTIPATH={0xc, 0x9, {0xfbf0, 0x4, 0xfa, r4}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x158}, 0x1, 0x0, 0x0, 0x6008009}, 0x0) 4.380023035s ago: executing program 2 (id=4149): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x24}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x1}}]}}, 0x0, 0x42}, 0x28) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x9, 0x20}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0x1a, 0x0, 0x1, [@generic="63224b9e"]}, @nested={0x4, 0x37}]}, 0x2c}], 0x1}, 0x4040010) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000040)={0x2, 0x8, 0x1000007, 0xfffffff6, 0x9a}) 4.210237964s ago: executing program 1 (id=4150): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000000)='cgroup\x00', 0x101, 0x0, 0xf, 0x0, 0x0}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000080)='pids.events\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) socket$unix(0x1, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r9, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r13], 0x2c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r2) r15 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf4, r14, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r15}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x108, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xcc, 0x2, [@TCA_MATCHALL_ACT={0xc8, 0x2, [@m_ct={0xc4, 0x1d, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x1c, 0x1, {0x0, 0x0, 0x3}}]}, {0x82, 0x6, "57ad5c489b302f1304fa8cc0382dedea3b05d359a36b6e5ad3ccab4b292c05e3721300fc8191125d710b1591f2274c7c131056ddfc3a6bf9133d82bf964654f7117b029e9452024cba63daaa0a3a625c7212857470b0cc3928ec3e54f20742db207da30ecd0cb34fb1d82719710a42c611a17f632507e3094d898ba10a80"}, {0xc}, {0xc}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x108}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x108, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xfff2}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xcc, 0x2, [@TCA_MATCHALL_ACT={0xc8, 0x2, [@m_ct={0xc4, 0x1d, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x1c, 0x1, {0x0, 0x0, 0x3}}]}, {0x82, 0x6, "57ad5c489b302f1304fa8cc0382dedea3b05d359a36b6e5ad3ccab4b292c05e3721300fc8191125d710b1591f2274c7c131056ddfc3a6bf9133d82bf964654f7117b029e9452024cba63daaa0a3a625c7212857470b0cc3928ec3e54f20742db207da30ecd0cb34fb1d82719710a42c611a17f632507e3094d898ba10a80"}, {0xc}, {0xc}}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}]}, 0x108}}, 0x0) write(r4, &(0x7f0000000140)="000008004500001c123400004011e5c8ac141401ac141402", 0x18) 3.875817546s ago: executing program 4 (id=4152): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000440)={'vlan1\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x8020ffa1}, {0xfffffff9, 0x80500}]}}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x10e) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$unix(0x1, 0x3, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r4, 0xc0205866, &(0x7f0000000900)={&(0x7f0000000100)=0x9ae, 0x5, &(0x7f0000000140), &(0x7f00000008c0)}) connect$unix(r5, 0x0, 0x0) r6 = getpid() r7 = getuid() getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000740)={0x0, 0x0, 0x0}, &(0x7f0000000780)=0xc) r9 = socket(0x40000000015, 0x5, 0x0) bind$inet(r9, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r10 = socket(0x40000000015, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) sendmmsg$unix(r4, &(0x7f0000000880)=[{{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000200)="394e8037857d431d200a0d987efe45365acae06b0560703cba41e9e6eb3236d39f7fbd21a0c57871f06ee8a0ccca7b31f488f5c91423f9973840ed68ad7db6ae203c8710ab16e7b7e7520c605595a12b5a0ed477c7b117b603afb7f500042d42164f921f038938bfcc7e13c8a9e65eba5e73a32219a8bd519ebd9f06e784a59c5d87217e2f99752f27762140f04d7a2e", 0x90}, {&(0x7f00000002c0)="9bf90ffad6256eb22875ac98fdd367bab7665b5e1f358ddf60f7d7f59ffb121076b7eaa8cccf", 0x26}, {0x0}, {&(0x7f0000000580)="3fe1ef4299cd0644bda3015117426307d67e2bcf252668d5a45524fee5fc5970cc15df1f03b1a5ffd02b3213bfa04d97a04f2c5620a1083230281674dd0231588284e73fdccb6baad2f926eabad77375c224b6837eabf836bdb1421b0b175e05f45f1eed89747e50efccab259c5f07db6e06e0e38c13ff26dcfca78ddd198e3e0fc13dae49098aff055cb3b1f36bfa04643a6d30e3e29e51d072bc62ad1d94557f33b7fbb0788287a8", 0xa9}, {&(0x7f0000000640)="c9e07db553caa1f43222d27df491d5fc6cdf3065e453e685ce34099e9bad06b9d20f0decf840b8efec566b92d6afa92110cceab21fbf0a211a9ab264e99d35597462d4aab357c8206714b6c709d8f91af947842dd27f8b1e1d17d9f2b41e59", 0x5f}], 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r5, @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r4, @ANYBLOB, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x8800}}], 0x1, 0x4) ioctl$TUNSETOWNER(r2, 0x400454cc, r7) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028006000a"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x2c0, 0x0, 0x18c, 0x203, 0xd0, 0x19030000, 0x1f0, 0x2e0, 0x2e0, 0x1f0, 0x2e0, 0x3, 0x0, {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, [0xff000000, 0xffffff00, 0xffffffff, 0xff], [0x0, 0x0, 0xffffffff, 0xffffff00], 'dvmrp1\x00', 'bridge0\x00', {0xff}, {}, 0x2c, 0x2, 0x1, 0x20}, 0x300, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x8, 0x2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, [0xffffffff, 0xffffff00, 0xff, 0xff], [0x0, 0x0, 0xff000000, 0xffffff00], 'pim6reg1\x00', 'nicvf0\x00', {0xff}, {}, 0x6f, 0x10, 0x4, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0xf9, 0x4}, {0xffffffffffffffff, 0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="18430100a1a20100140003007866726d30000000000000000000000030001a800c000a8005000800020000003f000a8014000700ff0100000000000000000000050000000000000003000000050027"], 0x6c}, 0x1, 0x0, 0x0, 0x4000884}, 0x8000) 3.875381615s ago: executing program 2 (id=4153): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, 0x0, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 64) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x4d, 0xffffffffffffffff, &(0x7f00000003c0)=0x16) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000013000500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00", @ANYRES32=0xc9], 0x3c}}, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) (async) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000805"], 0x11) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1500000072009fb3010000000000000007"], 0x20}}, 0x4000) 3.545471724s ago: executing program 3 (id=4154): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x10, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@alu={0x4, 0x1, 0xb, 0x0, 0x4, 0x8, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x2022, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x2, {0xa, 0x4e22, 0x2, @loopback, 0x8}}}, 0x80) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) ioctl$AUTOFS_IOC_ASKUMOUNT(r3, 0x80049370, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r2, &(0x7f00000001c0)="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", &(0x7f0000000340)=@udp=r3, 0x2}, 0x20) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet(r5, 0x0, 0x0) r6 = socket(0x15, 0x5, 0x0) getsockopt(r6, 0x200000000114, 0x2716, &(0x7f0000000580)=""/102393, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x40084) 2.845331877s ago: executing program 0 (id=4155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x24) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000080000000000800008081115e000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x8, 0x1, 0x2, 0x80000000, {{0x17, 0x4, 0x3, 0x0, 0x5c, 0x67, 0x0, 0xa, 0x4, 0x0, @broadcast, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0xc, 0xb8, 0x3, 0x6, [{@rand_addr=0x64010101}]}, @lsrr={0x83, 0xb, 0xac, [@private=0xa010101, @remote]}, @ra={0x94, 0x4}, @cipso={0x86, 0x2d, 0x3, [{0x6, 0x7, "2883a09070"}, {0x5, 0x6, 'y4!J'}, {0x2, 0xa, "15907bedfa8fd6c3"}, {0x0, 0x9, "1c9dd4c026118a"}, {0x6, 0x7, "863a5e5f8a"}]}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@datasec={0x2, 0x1, 0x0, 0xf, 0x3, [{0x1, 0x1, 0x3}], "44942d"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "9a"}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x44}, 0x28) (async) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000300)={r1, 0x1, 0x6, @remote}, 0x10) 2.692198045s ago: executing program 4 (id=4156): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close(r0) socket$nl_audit(0x10, 0x3, 0x9) 2.532879731s ago: executing program 0 (id=4157): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000000c0), 0x4) 2.257680816s ago: executing program 0 (id=4158): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000000)=0x76, 0x4) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x300, 0xf0, 0x700001b, 0x148, 0xf0, 0x148, 0x268, 0x206, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xc8, 0xf0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@addrtype={{0x30}, {0xb07, 0x8bdbc34b207a16b3, 0x20, 0x1}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0x110, 0x178, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'bridge_slave_1\x00', {0x3, 0xfffffffe, 0x0, 0xc, 0x0, 0x531aeecb, 0xc07, 0x0, 0x18}, {0xfff}}}, @common=@unspec=@ipvs={{0x48}, {@ipv6=@private0, [0xff, 0xffffff00], 0x4e22, 0x2b, 0x2, 0x4e20, 0x8, 0x38}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x2, 0x3, 0x3, 0xd, '\x00', 'syz0\x00', {0x54}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 2.102821062s ago: executing program 4 (id=4159): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000080)=ANY=[], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRESDEC=r0], &(0x7f0000000200)='syzkaller\x00', 0x4, 0xffd, &(0x7f0000001e40)=""/4093}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r2}, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x5}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, &(0x7f0000000280)='0', 0x1, 0x40000, &(0x7f0000000340)={0x11, 0x6, r6, 0x1, 0x2, 0x6, @local}, 0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0100000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0400000400"/20, @ANYRES32=r10, @ANYRES32=r8, @ANYBLOB="0100000003"], 0x50) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x7800, 0x20, 0x1, 0x39c0, {{0x6, 0x4, 0x2, 0x3, 0x18, 0x68, 0x0, 0x8b, 0x2f, 0x0, @remote, @remote, {[@noop]}}}}}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf2500000000", @ANYRES32=r14, @ANYBLOB="3a2205000a010000300012800b00010067656e6576650000200002"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x7, 0x1, 0x0, 0x41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x8000, 0x7800, 0xb3, 0x34960a00}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000480)={'sit0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x8, 0x1, 0x8, 0x5, {{0x30, 0x4, 0x0, 0x8, 0xc0, 0x66, 0x0, 0x5f, 0x29, 0x0, @rand_addr=0x64010101, @local, {[@timestamp={0x44, 0x14, 0x55, 0x0, 0xc, [0x2, 0x5, 0x3, 0x8000]}, @rr={0x7, 0x7, 0x14, [@broadcast]}, @timestamp={0x44, 0x20, 0x12, 0x0, 0x2, [0x55, 0x9, 0xe01, 0x4, 0x401, 0x8, 0x10000]}, @timestamp_addr={0x44, 0x24, 0x98, 0x1, 0x1, [{@empty, 0x7fff}, {@empty, 0xdd}, {@rand_addr=0x64010100}, {@remote, 0x8}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x48, 0x3, [{0x5, 0x8, "cf7121864c8d"}, {0x2, 0xf, "65fae2136ea8a2ab93c51f13c0"}, {0x5, 0xf, "b9f9912f05c94cb83ee17ad450"}, {0x1, 0xf, "1f43d5a7b6f48a893ea8ae058a"}, {0x2, 0x2}, {0x1, 0xb, "8e15711a351ec29b5e"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000004c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x7b, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x3c, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r18 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r19, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r18, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd22, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @multicast}]}}}, @IFLA_LINK={0x8, 0x5, r20}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000c00)={0x220, 0x0, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x4}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r20}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x44}, 0x801) 2.085527325s ago: executing program 1 (id=4160): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000065a12083a4100037040000000000", @ANYRES32=0x0, @ANYBLOB="8305050000000000200012800800010067726500140002800800050008000000080006000a"], 0x40}, 0x1, 0x0, 0x0, 0x2400004c}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_emit_ethernet(0xae, &(0x7f0000000940)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, "e7cbf9", 0x78, 0x3a, 0xff, @mcast2, @mcast2, {[@srh={0x88, 0x0, 0x4, 0x0, 0x6, 0x10, 0x1}, @srh={0x84, 0xa, 0x4, 0x5, 0x8, 0x0, 0x6, [@private0={0xfc, 0x0, '\x00', 0x1}, @private1, @remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @dev={0xfe, 0x80, '\x00', 0xe}]}], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @private1}}}}}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0x5001}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) sendmmsg(r1, &(0x7f0000008b40)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000001540)="f2", 0x1}, {0x0}], 0x2}}], 0x1, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000200)=0xc) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x20e6, 0x0, @empty}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$xdp(0x2c, 0x3, 0x0) recvmsg(r5, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x102) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xae5f}, &(0x7f0000000100)=0x8) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000500)={@dev={0xfe, 0x80, '\x00', 0x2}, 0x40, r7}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000600)={'syzkaller1\x00', 0x41}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010530000a002800060000006000000000301140fe800000000000000000000000000001fe80000000000000000000000000000220e620e600"], 0x64) r8 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0xa6, &(0x7f0000000040)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x30, '\x00', {0xd, 0x6, '])k', 0x8, 0x2b, 0xff, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [@srh={0x2f, 0x0, 0x4, 0x0, 0x0, 0x8, 0x9}, @srh={0x2c, 0x6, 0x4, 0x3, 0x8, 0x40, 0x100, [@dev={0xfe, 0x80, '\x00', 0x25}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}]}]}}}}}}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r11 = accept4$inet6(r9, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c, 0x80000) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@newlinkprop={0x44, 0x6c, 0x1, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x5273c, 0x402}, [@IFLA_MAP={0x24, 0xe, {0x6, 0x3, 0x7f, 0x3, 0xb, 0x61}}]}, 0x44}}, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r11, 0x84, 0x2, &(0x7f0000000180)={0x9, 0x7, 0x0, 0x401}, 0x8) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="000d81ffffff00000000000000a9e90000000004", @ANYRES32=0x0, @ANYBLOB="0101020064c501001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r10, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB], 0x4c}, 0x1, 0xba01, 0x0, 0x40d0}, 0x810) 2.005713875s ago: executing program 0 (id=4161): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x1, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000180)={r0, &(0x7f0000000000)='}[-2^\x00', 0x2c0100, &(0x7f0000000080)={@align=0x1e02, {0x3, 0xf200, 0x0, 0x1}}, 0x6, &(0x7f00000000c0), &(0x7f0000000140)=0x6}) vmsplice(r1, &(0x7f00000008c0)=[{&(0x7f0000000380)="2de29313a98a8a4f464050cb6ab205be92eea6c26b5de4a172208ecd6a6944556f997de983cc0142a43a9f28b722bd1caf07f0c900db26fa94a226923bd3b732bd743b5b7429f340a2c3938246af4987a963fa20f4a6bded2ce3b0a3aac749bcf418c28e49464c74bd0fa8fb46dd12e50c8391f8621ec6e589cd36dec3c36c331cd394ec6ff0a8c362d4c81f76b6fa7ca7ff684ca4bdf27d88d3a1a656f1f2d84b5f0ea8794bc50d481900f0c5ec85728bfd9b8c80c2f5de349cef054d3e605fedb29b7872b1", 0xc6}, {&(0x7f0000000480)="f899ab83a3691e29dcc83c30dc99ec6d92a422aaaa09db3b4aa8693c081551256d5e2a71952758da61d36f2c75617925c52d9fb077c123ef503a359d4d7b78833434043a6913072e20e7bfeff7a969a24aed9fb167b2fc842d00aa1392d0fb09e2d2d7d4197983d6f71a7b6baaa1fca9ceb4ab0f27c93cae2521faa948e485ec46", 0x81}, {&(0x7f0000000540)="4b4b0cb223d72dd005a7a000b0ccceedcf255e04c23d2ee48380288a6faede820e23558e00edcd69ff8ad39cd99415bc", 0x30}, {&(0x7f0000000580)="d2b3d7ecaad49842d75cad9d490939c6a42225be113dd258853704e1f9277b30c9d8751c92cfd3d5c3e5db52ef2827a180706069acd76330b1333914dd725de6ae26438261d0ec996f48e1cc97a0447cded8005f04965bb6c704a2a68f13b28d1f026c9a71b48cf6b7bbf4d664c177", 0x6f}, {&(0x7f0000000600)="b5798fdac591426432884c994625fa142195cba1b3a8588164a4dcfaf20e2ed759e93fbec62d26039e6a371be062f3f880", 0x31}, {&(0x7f0000000640)="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", 0xfd}, {&(0x7f0000000740)="8c4825c0af220ea03a093ebb35b08dabea20e34ad01531c975f14a8ddb3624792ab6c7e3840125bd4af47a7ae37982c6476771a968790f70530e1dc0784dbe125f80998b09941b6bd74099d505267861c4f738cef02d9f34f011e54d54973b5cc42d", 0x62}, {&(0x7f00000007c0)="1132c14b3a8a0887551b3b66ecfdc2e6117201b6865599bd2621ac56bc744f451f34bd0dee1a130d4e9f8fa57d25e8e7a71ab5a0b2e6d1f2dded4278466f68520b953d8d731da71068a93acbe8fad46fec3a735f2a1d422bca7a3a6a8dd2134471adc9ca78827531d6ac2204dff68f711c40d7bb5a3202a4e2e02b39f5faa6ab5073f0f71a337741850628849941e357316ad3b8baf866180272445bef3126151f5327b938b9c2285463f619544cc8663f35c02e590caa56a66519a2a2dcd82134d6a8823f2200066b11e90a6c1bfa6bd19b6ce244089b0fae1b366ea0e9d64d4474027f81e676a9b70c8440858338f6", 0xf0}], 0x8, 0x18) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 1.871895828s ago: executing program 2 (id=4162): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@volatile={0x0, 0x0, 0x0, 0x9, 0x2}, @fwd={0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x7, '\x00', 0x0, r1, 0xffffffff, 0x1}, 0x50) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'ip6gre0\x00'}}, 0x1e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086dd65001144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) r10 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r10, &(0x7f0000000000)={0x18, 0x0, {0x103, @empty, 'ip6_vti0\x00'}}, 0x1e) socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)=ANY=[@ANYBLOB="e00400002000010025bd7000fcdbdf25cf04f2800f0018007d3a2e9c5bc85c23277d000014000200fc02000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b50b1778bdafefc46b0449a0368bf84b36ec72dd71265fc2e882348c26c2126237dd5927f5ae655b1086cda40e00aec03004734be31d75035d5be98a503326409334c9bdf132b20251dc076eb43d9621dc08c029d1608a468426fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f45b5351cbbd6e4993d5456dfcc708bea7b984b604bb12a6d5688ac538d2edcb3f4df2208180f6c12d43046fe578a30a83b08337e57e70e43dc5cd55238da036362ea0a8d98276e1523a1b10473a961b32c8cb75768d813ed3fb8fec36c4bb3375ed8bb4eb756a781eba656905bdf613ca1dbc768fcb7212a00b0a90598d8f09fb0946e90cbd0a1adee3dff44c9ba0912b031bc744d0c315f5a7899165b4f748caac224c05364aa2df312aae43ebb32a09402003dd80080096000f00000041020780af663fbac91414f1d008f27d5ac126c85f62b5422065ebbe02ba3b72cf8a4134556db5996c610bebf49598c5a0546aaa512d3b1d2d8f8a41ab5cdf4d3ec049112c6c6c1802f20bd9f7ac47bf8c419755954a0352f2b5d60a60c8f7181500eb00592de2f4b8ca953bd9f9c7ff98f690acba000000afa2b5e95d54fc217b1e3fb3d0dd68a2ed829e652e96d24a81fe35533de378af8fc1857b81d3f638374ea5775d0bdf2a36fdfec9e353d28f179fbf7f9ed782fd8d9b8f7f162ad4c8815a8577fef8e5018a0d2018aa7fb42fe4d16b57a0613bf18d5ff6fda3967cb23c4c59a4a09ff6308de37c62b0d2c3e5519527532b56167b3793371185a2899e8822f935040db441f07ab8b707000f46d22e990efe25ecc2486139552c56116a243e60f565763fe50c6ac930739903383ad81314eb3c00ba94a102b338fc0cf97d098671b34dd1e60055217a1a917d07f172139b95e81831d081eb176df5000f6e06b5e881b1105498569d9fcbb204e0cb2660050032000000000023b2bb35ffddf19d23b14e62e4ce5b896a139ac17ab74bab31f76c38a0abb73e7d8191f3ca0d83f3632ffb32f9ea33e06004ae505307ae0a59ba25388aee637fa56435fbb9726255d4faf8f0a8774036601637a49b623a8f47e42d5866ff5e16bc5184ab88b8406a5e747b0119474fcfb3ce8402357051bf49e79fe78bdbfb2fb01ef17b0400d48051ed8af18f5b99e8672c23bef250930756b76bbb1b9b44fc2110f992e23eafc099a8fdb59a2351182dde69c589bc53ea3e8805b92c5769c21180745cf42a0000001800c3801400c400fc020000000000000000000000000001b5005100be45e53f3d4dc9c6f5e849458cda19466cc3e7a16cf6f3902f8b460e2c8ee7ca0269300c7d093e600701cc0098c43e46a22f3bd62c57a709cf425560dcdfecabf63f88491a064701e967e0a30a696399d42a31aa5c284bb329f7196bc6b6f4073e7ed9911e009fbeddb778da6435b1549fca333b4a3dbcec316ab43868edc62dbfadae39326f1ba29dba2ffe2b9b7bce88a1ee090bdcf4142eb18f248c839c2f4fa744c95f0da29b0f0fc8e939977b5f5400000000"], 0x4e0}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000c80)=@req3={0xf, 0x8, 0x1, 0xbd8c, 0x6, 0x7fff, 0x3}, 0x1c) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x80, 0x10, 0x439, 0x0, 0x25dfdbfe, {}, [@IFLA_LINKINFO={0x60, 0x12, 0x0, 0x1, @vti={{0x8}, {0x54, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @remote}, @IFLA_VTI_LOCAL={0x8, 0x4, @remote}, @IFLA_VTI_REMOTE={0x8, 0x5, @multicast2}, @IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010101}, @vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x619}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_LINK={0x8}, @IFLA_VTI_OKEY={0x8, 0x3, 0x47}, @IFLA_VTI_LINK={0x8}], @IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004840}, 0x0) 1.74611363s ago: executing program 0 (id=4163): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) (async) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000007c0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20040811) r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) (async) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={r5, 0x2}, 0x8) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) (async) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 1.297074473s ago: executing program 4 (id=4164): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newsa={0x144, 0x1a, 0x633, 0x0, 0x25dfdbfd, {{@in6=@local, @in6=@remote, 0x3, 0x4004, 0x4e24, 0x8001, 0x0, 0x80}, {@in6=@remote, 0x0, 0x32}, @in6=@loopback, {0x323, 0x80000001, 0x0, 0xc0, 0x4000, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x2}, {}, 0x70bd29, 0x3503, 0xa, 0x5}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_dont_frag={0x4}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x200080d4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000800)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x6, &(0x7f0000000300)=@raw=[@generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xffffffc0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0], 0x0, 0xac, &(0x7f0000000440)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x5f, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r4, r3, 0x25, 0x8, @val=@tracing={r5, 0x6}}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f00000003c0)='GPL\x00', 0x5, 0xfa, &(0x7f0000000400)=""/250, 0x41000, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x10, 0xffffffff, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000005c0)=[0xffffffffffffffff, 0x1], &(0x7f0000000600)=[{0x5, 0x3, 0xf, 0x3}, {0x0, 0x2, 0x0, 0x7}, {0x4, 0x1, 0xc, 0x7}, {0x3, 0x3, 0x7, 0xa}, {0x1, 0x1, 0x3, 0x3}, {0x4, 0x2}, {0x2, 0x4, 0x9}], 0x10, 0x9}, 0x94) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000780)=@generic={&(0x7f0000000740)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r11}, &(0x7f0000000280), &(0x7f0000000240)=r10}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r14, 0x0, r13, 0x0, 0xf3a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x18, 0x3, &(0x7f00000001c0)=@raw=[@alu={0x4, 0x1, 0x4, 0xb, 0x9, 0xc, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x3, 0x3, 0x1, 0x8, 0x6, 0x20, 0xfffffffffffffffc}], &(0x7f0000000200)='GPL\x00', 0x4, 0xc9, &(0x7f0000000240)=""/201, 0x40f00, 0x49, '\x00', 0x0, @fallback=0x13, r1, 0x8, &(0x7f0000000340)={0x3, 0x5}, 0x8, 0x10, 0x0, 0x0, r5, r6, 0x3, &(0x7f0000000900)=[r7, r8, r9, r11, r12, r13, 0xffffffffffffffff], &(0x7f0000000940)=[{0x4, 0x4, 0x8, 0xb}, {0x4, 0x2, 0xa, 0xd}, {0x0, 0x4, 0x2, 0xc}], 0x10, 0xff}, 0x94) 1.095629439s ago: executing program 1 (id=4165): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) socket$netlink(0x10, 0x3, 0x0) (async) writev(r0, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) (async) 794.678321ms ago: executing program 2 (id=4166): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)={0x38, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x3}, {0x4, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x4000804) socket$kcm(0x1e, 0x4, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140", @ANYRES8], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000010c0)={0x11, 0x7, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @map_fd={0x18, 0x5, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000fc0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa}, 0x94) 627.243528ms ago: executing program 0 (id=4167): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xe4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x0, 0x2, 0x1, 0x0, 0x1}]}]}], {0x35, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x80}, 0x1, 0x0, 0x0, 0x4004850}, 0x20040040) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000004) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000440)=0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x3d, 0x0, &(0x7f00000003c0)) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000540)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x1001, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_BURST={0x8, 0x6, 0xff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84a, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x4, 0xb}, 0x5, 0x34, 0x91f}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x7, 0x3, 0x6, 0x1, 0x1, 0xa2, 0x20fff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56561, 0x70bd2b, 0x1, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0x3, 0x8}, {0x7, 0x4}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20002000}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 224.165665ms ago: executing program 1 (id=4168): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0xd, &(0x7f00000000c0), 0x4) 223.866815ms ago: executing program 4 (id=4169): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000000000007fff0001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r6, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r6, &(0x7f0000000100)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4000d}, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) bind$netlink(r5, 0x0, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000600000000007a79e2b3b26cdb7551100100000c000000"], 0x10}, 0x0) sendfile(r8, r4, 0x0, 0x5) r9 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r9, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0x3}, {0x4, 0x9}}}, 0x24}}, 0x0) 0s ago: executing program 1 (id=4170): socket$alg(0x26, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4000}) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000000)={0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="84020201"], 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x41}, 0x2}}}, &(0x7f0000000040)=0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e26, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffff}, 0x1c) listen(r1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x1) sendto$inet(r5, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "3533670244f9c17b", "fd73b0610edb2d71e52c522eddc7014d", "421c1beb", "2302ad114616d7c6"}, 0x28) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r6, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008820}, 0x800) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r8, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) recvfrom$rxrpc(r8, 0x0, 0x0, 0x60, &(0x7f0000002a00)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xb, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0x24) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000004cc0), r7) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)=ANY=[@ANYBLOB="84000000", @ANYRES16=r9, @ANYBLOB="01002abd7000fedbdf2503000000080004000a010101140006006272696467655f736c6176655f31000014000200ff02000000000000000000000000000114000300fe8000000000000000000000000000aa290007003a6f626a6563745f723a"], 0x84}, 0x1, 0x0, 0x0, 0x200080c4}, 0x48040) kernel console output (not intermixed with test programs): 1][T15953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.059727][T20382] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3219'. [ 526.059754][T20382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3219'. [ 526.747682][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 526.759340][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 526.760620][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 526.764471][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 526.766985][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 528.193165][T20429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3227'. [ 528.878900][ T4936] Bluetooth: hci4: command tx timeout [ 529.008121][T20458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3232'. [ 529.008156][T20458] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3232'. [ 529.063457][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3232'. [ 529.188593][T20445] bridge3: entered promiscuous mode [ 529.206749][T20460] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3232'. [ 529.686023][T15961] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 529.794179][T20397] lo speed is unknown, defaulting to 1000 [ 529.883837][T20467] xt_TCPMSS: Only works on TCP SYN packets [ 530.064418][T20480] netlink: 'syz.4.3235': attribute type 1 has an invalid length. [ 530.756572][T15961] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 530.950274][ T4936] Bluetooth: hci4: command tx timeout [ 531.068383][T20483] tipc: Enabling of bearer rejected, failed to enable media [ 531.080851][T20495] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3233'. [ 531.082931][T20489] syzkaller0: entered promiscuous mode [ 531.082957][T20489] syzkaller0: entered allmulticast mode [ 531.682305][T20521] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3238'. [ 531.742838][T15961] team0: Port device netdevsim1 removed [ 531.776650][T15961] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.093404][T15961] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 532.192185][T20536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3240'. [ 533.039042][ T4936] Bluetooth: hci4: command tx timeout [ 533.046145][T20556] macvlan0: entered promiscuous mode [ 533.806260][T20582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3245'. [ 533.806310][T20582] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3245'. [ 533.912234][T20583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3245'. [ 533.912289][T20583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3245'. [ 534.283410][T15961] pim6reg: left allmulticast mode [ 534.283630][T15961] dvmrp0: left allmulticast mode [ 534.283777][T15961] pimreg32768: left allmulticast mode [ 534.538123][T15961] bond3 (unregistering): (slave ip6gre2): Releasing backup interface [ 534.648530][T20596] netlink: 'syz.4.3247': attribute type 2 has an invalid length. [ 534.653012][T20596] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3247'. [ 534.711777][T20600] netlink: 'syz.4.3247': attribute type 10 has an invalid length. [ 535.108891][ T4936] Bluetooth: hci4: command tx timeout [ 535.561887][T15961] batman_adv: batadv0: Removing interface: gretap1 [ 535.862626][T15961] batman_adv: batadv0: Interface deactivated: macvlan2 [ 535.885695][T15961] batman_adv: batadv0: Removing interface: macvlan2 [ 536.041229][T15961] team0: Port device bridge3 removed [ 536.169047][T15961] bond0 (unregistering): Released all slaves [ 536.193863][T15961] bond1 (unregistering): Released all slaves [ 536.197532][T15960] smbdirect: ib_dev[sy] removed [ 536.288212][T15961] bond2 (unregistering): (slave veth5): Releasing active interface [ 536.315777][T15961] bond2 (unregistering): (slave veth7): Releasing active interface [ 536.345631][T15961] bond2 (unregistering): (slave veth9): Releasing active interface [ 536.359066][T15961] bond2 (unregistering): Released all slaves [ 536.428857][T15961] bond3 (unregistering): Released all slaves [ 536.458017][T15961] bond4 (unregistering): Released all slaves [ 536.506159][T15961] bond5 (unregistering): Released all slaves [ 536.530233][T15961] bond6 (unregistering): Released all slaves [ 536.563216][T15961] bond7 (unregistering): Released all slaves [ 536.584799][T15961] bond8 (unregistering): Released all slaves [ 536.627683][T15961] bond9 (unregistering): Released all slaves [ 536.684628][T15961] bond10 (unregistering): Released all slaves [ 537.131681][T20600] team0: Device veth0_vlan failed to register rx_handler [ 537.262037][T20636] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3249'. [ 537.504721][T15961] ovs-s: left promiscuous mode [ 537.678366][T20645] netlink: 'syz.4.3252': attribute type 1 has an invalid length. [ 537.814120][T15961] ovs-dp0: left promiscuous mode [ 537.995410][T20645] 8021q: adding VLAN 0 to HW filter on device bond1 [ 538.028285][T20646] macvlan0: left promiscuous mode [ 538.095908][T20646] bond1: (slave macvlan0): Enslaving as a backup interface with a down link [ 538.207594][T20654] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3254'. [ 538.308169][T15961] tipc: Left network mode [ 538.345787][T20656] bridge0: port 3(bond0) entered blocking state [ 538.346280][T20656] bridge0: port 3(bond0) entered disabled state [ 538.346851][T20656] bond0: entered allmulticast mode [ 538.346868][T20656] bond_slave_0: entered allmulticast mode [ 538.347279][T20656] bond_slave_1: entered allmulticast mode [ 538.427488][T20656] bond0: entered promiscuous mode [ 538.427520][T20656] bond_slave_0: entered promiscuous mode [ 538.449623][T20656] bond_slave_1: entered promiscuous mode [ 538.461722][T20656] bridge0: port 3(bond0) entered blocking state [ 538.461819][T20656] bridge0: port 3(bond0) entered forwarding state [ 538.494130][T15961] IPVS: stopping backup sync thread 16577 ... [ 538.825353][T20654] hsr_slave_1 (unregistering): left promiscuous mode [ 538.870891][T20397] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.871759][T20397] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.872050][T20397] bridge_slave_0: entered allmulticast mode [ 538.912390][T20397] bridge_slave_0: entered promiscuous mode [ 539.028425][T20691] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3259'. [ 539.167544][T20397] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.168111][T20397] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.168476][T20397] bridge_slave_1: entered allmulticast mode [ 539.199263][T20397] bridge_slave_1: entered promiscuous mode [ 539.321924][T20694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3261'. [ 539.623455][T20702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3262'. [ 539.623874][T20707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3262'. [ 539.728208][T20397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 539.811606][T20710] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3264'. [ 539.903366][T20720] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3265'. [ 539.903822][T20720] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3265'. [ 539.904176][T20720] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3265'. [ 539.937906][T20397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.232315][T20722] vlan3: entered allmulticast mode [ 540.360319][T20397] team0: Port device team_slave_0 added [ 540.361402][T20730] sch_fq: defrate 0 ignored. [ 540.416055][T20397] team0: Port device team_slave_1 added [ 540.496739][T20731] sch_fq: defrate 0 ignored. [ 540.722854][T20397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.722874][T20397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.722904][T20397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.801992][T20735] ip6gre1: entered promiscuous mode [ 540.805289][T20397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.805306][T20397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 540.805334][T20397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.362536][T20761] netlink: 'syz.1.3272': attribute type 1 has an invalid length. [ 541.422917][T20754] ip6tnl1: entered allmulticast mode [ 541.552145][T20397] hsr_slave_0: entered promiscuous mode [ 541.564031][T20397] hsr_slave_1: entered promiscuous mode [ 541.574121][T20397] debugfs: 'hsr0' already exists in 'hsr' [ 541.574145][T20397] Cannot create hsr debugfs directory [ 541.590728][T11090] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 541.590985][T11090] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 541.621135][ T7192] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 541.747417][T20764] netlink: 'syz.4.3273': attribute type 4 has an invalid length. [ 542.088824][ T7192] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 542.371551][T15961] hsr_slave_0: left promiscuous mode [ 542.387717][T15961] hsr_slave_1: left promiscuous mode [ 542.470097][ T8010] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 544.019292][ T4936] Bluetooth: hci1: link tx timeout [ 544.019509][ T4936] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 544.131993][T20815] __nla_validate_parse: 3 callbacks suppressed [ 544.132017][T20815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3280'. [ 544.132762][T20816] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3280'. [ 544.594475][T15961] IPVS: stop unused estimator thread 0... [ 545.117319][T20781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.555120][T20825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3283'. [ 545.958309][T20838] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3285'. [ 545.989488][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 546.068775][ T4936] Bluetooth: hci1: command 0x0406 tx timeout [ 546.211491][T20397] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 546.294698][T20397] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.311293][T20397] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 546.365907][T20397] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 546.394401][T20397] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 546.425205][T20397] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 546.469418][T20397] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 546.516584][T20397] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 547.245042][T20397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.392263][T20397] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.446933][T12756] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.447058][T12756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.514310][T11090] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.514440][T11090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.669115][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 548.117851][T20872] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3291'. [ 548.118301][T20872] gretap0: entered promiscuous mode [ 548.139696][T20872] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3291'. [ 548.139915][T20872] 0ªî{X¹¦: renamed from gretap0 [ 548.201209][T20872] 0ªî{X¹¦: left promiscuous mode [ 548.201235][T20872] 0ªî{X¹¦: entered allmulticast mode [ 548.231020][T20872] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 548.900210][T20886] netlink: 'syz.3.3294': attribute type 2 has an invalid length. [ 548.900236][T20886] netlink: 'syz.3.3294': attribute type 2 has an invalid length. [ 550.161414][T20397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.645285][T20397] veth0_vlan: entered promiscuous mode [ 550.688353][T20397] veth1_vlan: entered promiscuous mode [ 550.707214][T20917] openvswitch: netlink: Tunnel attr 2 has unexpected len 7 expected 4 [ 550.979896][T20397] veth0_macvtap: entered promiscuous mode [ 551.010971][T20397] veth1_macvtap: entered promiscuous mode [ 551.194815][T20397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.273849][T20397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.303779][T20935] netlink: 'syz.3.3301': attribute type 39 has an invalid length. [ 551.560708][T15979] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.605588][T11090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.681413][T11090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.689624][T15961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.074274][T20944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3303'. [ 552.095767][T15961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.095793][T15961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.241723][T20943] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3304'. [ 552.433491][T20943] netlink: zone id is out of range [ 552.433510][T20943] netlink: zone id is out of range [ 552.433520][T20943] netlink: zone id is out of range [ 552.433530][T20943] netlink: zone id is out of range [ 552.433538][T20943] netlink: zone id is out of range [ 552.433548][T20943] netlink: zone id is out of range [ 552.433561][T20943] netlink: zone id is out of range [ 552.433570][T20943] netlink: zone id is out of range [ 552.602406][T20946] 0ªî{X¹¦: left allmulticast mode [ 553.525865][T20970] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3305'. [ 554.160141][T20946] bridge0: port 3(bond0) entered disabled state [ 554.160569][T20946] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.161377][T20946] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.348793][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 555.850386][T20946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.990657][T20946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.076607][T20946] syzkaller0: left promiscuous mode [ 557.076636][T20946] syzkaller0: left allmulticast mode [ 557.103430][T20946] ip6gretap0: left allmulticast mode [ 557.103469][T20946] macsec1: left allmulticast mode [ 557.221228][T15962] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.231929][T15953] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.232086][T15953] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.232203][T15953] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.277549][T15979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.277575][T15979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.690855][T20997] netlink: 'syz.1.3308': attribute type 2 has an invalid length. [ 558.440547][T21016] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3314'. [ 558.495934][T21022] netlink: 'syz.1.3315': attribute type 1 has an invalid length. [ 558.592977][T21017] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3314'. [ 558.625334][T21022] bond4: entered promiscuous mode [ 558.627830][T21022] 8021q: adding VLAN 0 to HW filter on device bond4 [ 558.675052][T21022] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3315'. [ 558.788117][T21032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3315'. [ 558.923991][T21022] gretap0: entered promiscuous mode [ 558.924049][T21022] gretap0: left allmulticast mode [ 559.048034][T21032] 8021q: adding VLAN 0 to HW filter on device bond4 [ 559.059244][T21032] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 559.059271][T21032] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 559.140926][T21032] bond4: (slave wireguard0): making interface the new active one [ 559.140954][T21032] wireguard0: entered promiscuous mode [ 559.190275][T21032] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 559.344403][T21041] netlink: 'syz.0.3317': attribute type 1 has an invalid length. [ 559.803260][T21051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3320'. [ 559.839460][T21049] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3319'. [ 560.009963][T15953] IPVS: starting estimator thread 0... [ 560.027393][T21058] net_ratelimit: 434 callbacks suppressed [ 560.027414][T21058] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 560.098973][T21062] IPVS: using max 34 ests per chain, 81600 per kthread [ 560.505708][T21073] netlink: 59 bytes leftover after parsing attributes in process `syz.0.3324'. [ 561.067125][T21090] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3326'. [ 561.969454][T21123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3333'. [ 561.969503][T21123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3333'. [ 562.151609][T21123] lo speed is unknown, defaulting to 1000 [ 562.175444][T21126] ip_tables: iptables: counters copy to user failed while replacing table [ 562.878379][T21075] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 562.910776][T21078] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 563.041982][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.462988][T21153] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3337'. [ 563.535339][T21155] netlink: 'syz.3.3338': attribute type 1 has an invalid length. [ 563.593886][T21159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3338'. [ 563.711655][T21160] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3338'. [ 563.961067][T21160] 8021q: adding VLAN 0 to HW filter on device bond1 [ 564.031529][T21155] bridge2: entered promiscuous mode [ 564.137445][T21155] bond1: (slave bridge2): making interface the new active one [ 564.198789][T21155] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 564.447123][T21167] tipc: Enabled bearer , priority 0 [ 564.680379][T21166] lo speed is unknown, defaulting to 1000 [ 565.582743][T21191] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3347'. [ 565.790789][T21197] xt_TCPMSS: Only works on TCP SYN packets [ 566.021763][T21202] FAULT_INJECTION: forcing a failure. [ 566.021763][T21202] name failslab, interval 1, probability 0, space 0, times 0 [ 566.021800][T21202] CPU: 0 UID: 0 PID: 21202 Comm: syz.1.3350 Not tainted syzkaller #0 PREEMPT(full) [ 566.021825][T21202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 566.021840][T21202] Call Trace: [ 566.021849][T21202] [ 566.021858][T21202] dump_stack_lvl+0xe8/0x150 [ 566.021900][T21202] should_fail_ex+0x410/0x560 [ 566.022011][T21202] should_failslab+0xa8/0x100 [ 566.022045][T21202] __kvmalloc_node_noprof+0x176/0x820 [ 566.022077][T21202] ? __kvmalloc_node_noprof+0x345/0x820 [ 566.022101][T21202] ? bpf_compute_scc+0x106/0xb10 [ 566.022136][T21202] ? bpf_compute_scc+0x106/0xb10 [ 566.022166][T21202] bpf_compute_scc+0x106/0xb10 [ 566.022211][T21202] bpf_check+0x2720/0x2ef0 [ 566.022257][T21202] ? __pfx_bpf_check+0x10/0x10 [ 566.022286][T21202] ? bpf_obj_name_cpy+0x194/0x1e0 [ 566.022332][T21202] bpf_prog_load+0x14d6/0x1c20 [ 566.022373][T21202] ? __pfx_bpf_prog_load+0x10/0x10 [ 566.022429][T21202] __sys_bpf+0xd0d/0xd90 [ 566.022465][T21202] ? __pfx___sys_bpf+0x10/0x10 [ 566.022504][T21202] ? __fget_files+0x2a/0x420 [ 566.022574][T21202] ? ksys_write+0x242/0x270 [ 566.022618][T21202] ? __pfx_ksys_write+0x10/0x10 [ 566.022658][T21202] __x64_sys_bpf+0xba/0xd0 [ 566.022686][T21202] do_syscall_64+0x166/0x520 [ 566.022720][T21202] ? trace_irq_disable+0x3b/0x140 [ 566.022750][T21202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.022776][T21202] ? clear_bhb_loop+0x70/0xc0 [ 566.022804][T21202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.022827][T21202] RIP: 0033:0x7fdff759e159 [ 566.022849][T21202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.022868][T21202] RSP: 002b:00007fdff8410028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 566.022892][T21202] RAX: ffffffffffffffda RBX: 00007fdff7825fa0 RCX: 00007fdff759e159 [ 566.022909][T21202] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 566.022923][T21202] RBP: 00007fdff8410090 R08: 0000000000000000 R09: 0000000000000000 [ 566.022937][T21202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 566.022950][T21202] R13: 00007fdff7826038 R14: 00007fdff7825fa0 R15: 00007ffe96f87e18 [ 566.022984][T21202] [ 566.074111][T21199] syzkaller0: entered promiscuous mode [ 566.074136][T21199] syzkaller0: entered allmulticast mode [ 566.824440][T21210] lo speed is unknown, defaulting to 1000 [ 567.589944][T21238] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3358'. [ 567.590058][T21238] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 567.638041][T21238] 0ªî{X¹¦: entered allmulticast mode [ 567.638497][T21238] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 567.697399][T21246] netlink: 'syz.1.3360': attribute type 1 has an invalid length. [ 567.740349][T21246] bond5: entered promiscuous mode [ 567.740777][T21246] 8021q: adding VLAN 0 to HW filter on device bond5 [ 567.919259][T21250] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3360'. [ 568.077577][T21250] vlan2: entered allmulticast mode [ 568.077748][T21250] bond5: entered allmulticast mode [ 568.199105][T21254] bond5: (slave bridge6): making interface the new active one [ 568.199135][T21254] bridge6: entered promiscuous mode [ 568.199332][T21254] bridge6: entered allmulticast mode [ 568.238401][T21254] bond5: (slave bridge6): Enslaving as an active interface with an up link [ 568.545034][T21260] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3361'. [ 568.744169][T21272] netlink: 'syz.1.3364': attribute type 2 has an invalid length. [ 568.744196][T21272] netlink: 'syz.1.3364': attribute type 2 has an invalid length. [ 568.766162][T21269] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3361'. [ 568.873939][T21277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3365'. [ 569.120366][T21283] ip_tables: iptables: counters copy to user failed while replacing table [ 569.420945][T21280] syzkaller1: entered promiscuous mode [ 569.420972][T21280] syzkaller1: entered allmulticast mode [ 569.934202][T21298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3368'. [ 570.391269][T21305] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3370'. [ 570.443090][T21305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3370'. [ 570.483175][T21305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.483204][T21305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.509105][T21305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.509130][T21305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.083643][T21337] netlink: 'syz.3.3377': attribute type 8 has an invalid length. [ 571.096057][T21332] netlink: Failed to add GPL helper -22 [ 571.096743][T21332] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.512852][T21347] syzkaller0: entered promiscuous mode [ 571.512877][T21347] syzkaller0: entered allmulticast mode [ 572.009795][T21365] tipc: Enabled bearer , priority 0 [ 572.010760][T21365] syzkaller0: entered promiscuous mode [ 572.010781][T21365] syzkaller0: entered allmulticast mode [ 572.044043][T21365] tipc: Resetting bearer [ 572.069828][T21364] tipc: Resetting bearer [ 572.098004][T21364] tipc: Disabling bearer [ 572.290888][T21368] syzkaller0: entered promiscuous mode [ 572.290916][T21368] syzkaller0: entered allmulticast mode [ 573.828107][T21405] xt_CT: No such helper "snmp" [ 574.549083][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 575.412300][T21423] sctp: [Deprecated]: syz.3.3395 (pid 21423) Use of int in maxseg socket option. [ 575.412300][T21423] Use struct sctp_assoc_value instead [ 577.972100][T21442] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3400'. [ 578.006298][T21449] geneve1: Caught tx_queue_len zero misconfig [ 579.343327][T21482] FAULT_INJECTION: forcing a failure. [ 579.343327][T21482] name failslab, interval 1, probability 0, space 0, times 0 [ 579.343361][T21482] CPU: 0 UID: 0 PID: 21482 Comm: syz.1.3404 Not tainted syzkaller #0 PREEMPT(full) [ 579.343383][T21482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 579.343396][T21482] Call Trace: [ 579.343404][T21482] [ 579.343413][T21482] dump_stack_lvl+0xe8/0x150 [ 579.343448][T21482] should_fail_ex+0x410/0x560 [ 579.343478][T21482] should_failslab+0xa8/0x100 [ 579.343509][T21482] __kvmalloc_node_noprof+0x176/0x820 [ 579.343537][T21482] ? __kvmalloc_node_noprof+0x345/0x820 [ 579.343562][T21482] ? bpf_compute_scc+0x106/0xb10 [ 579.343583][T21482] ? bpf_compute_scc+0x106/0xb10 [ 579.343613][T21482] bpf_compute_scc+0x106/0xb10 [ 579.343658][T21482] bpf_check+0x2720/0x2ef0 [ 579.343711][T21482] ? __pfx_bpf_check+0x10/0x10 [ 579.343740][T21482] ? bpf_obj_name_cpy+0x194/0x1e0 [ 579.343778][T21482] bpf_prog_load+0x14d6/0x1c20 [ 579.343819][T21482] ? __pfx_bpf_prog_load+0x10/0x10 [ 579.343875][T21482] __sys_bpf+0xd0d/0xd90 [ 579.343910][T21482] ? __pfx___sys_bpf+0x10/0x10 [ 579.343948][T21482] ? __fget_files+0x2a/0x420 [ 579.343999][T21482] ? ksys_write+0x242/0x270 [ 579.344036][T21482] ? __pfx_ksys_write+0x10/0x10 [ 579.344079][T21482] __x64_sys_bpf+0xba/0xd0 [ 579.344105][T21482] do_syscall_64+0x166/0x520 [ 579.344136][T21482] ? trace_irq_disable+0x3b/0x140 [ 579.344159][T21482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.344182][T21482] ? clear_bhb_loop+0x70/0xc0 [ 579.344210][T21482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.344232][T21482] RIP: 0033:0x7fdff759e159 [ 579.344254][T21482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.344273][T21482] RSP: 002b:00007fdff8410028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 579.344298][T21482] RAX: ffffffffffffffda RBX: 00007fdff7825fa0 RCX: 00007fdff759e159 [ 579.344315][T21482] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 579.344330][T21482] RBP: 00007fdff8410090 R08: 0000000000000000 R09: 0000000000000000 [ 579.344344][T21482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 579.344358][T21482] R13: 00007fdff7826038 R14: 00007fdff7825fa0 R15: 00007ffe96f87e18 [ 579.344395][T21482] [ 579.698178][T21486] syzkaller0: entered promiscuous mode [ 579.698204][T21486] syzkaller0: entered allmulticast mode [ 580.601842][ T5626] Bluetooth: hci1: connection err: -111 [ 580.664474][T21499] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 581.382243][T21536] x_tables: duplicate underflow at hook 2 [ 581.446167][T21522] bond2: option ad_user_port_key: mode dependency failed, not supported in mode balance-alb(6) [ 581.538844][T21522] bond2 (unregistering): Released all slaves [ 581.705131][T21535] ip6gre0: Caught tx_queue_len zero misconfig [ 581.708388][T21538] batadv0: entered promiscuous mode [ 581.743744][T21547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3415'. [ 582.006590][T21547] hsr_slave_1 (unregistering): left promiscuous mode [ 582.060931][T21542] bridge0: port 3(bond0) entered blocking state [ 582.061429][T21542] bridge0: port 3(bond0) entered disabled state [ 582.061789][T21542] bond0: entered allmulticast mode [ 582.061810][T21542] bond_slave_0: entered allmulticast mode [ 582.062222][T21542] bond_slave_1: entered allmulticast mode [ 582.119307][T21542] bond0: entered promiscuous mode [ 582.119334][T21542] bond_slave_0: entered promiscuous mode [ 582.120259][T21542] bond_slave_1: entered promiscuous mode [ 582.150706][T21542] bridge0: port 3(bond0) entered blocking state [ 582.150819][T21542] bridge0: port 3(bond0) entered forwarding state [ 582.246974][T21541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3413'. [ 582.877417][T21566] netlink: 'syz.1.3417': attribute type 34 has an invalid length. [ 582.932649][T21571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3419'. [ 582.953592][T21571] veth1_to_team: Caught tx_queue_len zero misconfig [ 582.953676][T21571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3419'. [ 583.369223][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3424'. [ 583.374214][T21589] syzkaller0: entered promiscuous mode [ 583.374241][T21589] syzkaller0: entered allmulticast mode [ 583.483343][T21599] syzkaller0: entered promiscuous mode [ 583.483372][T21599] syzkaller0: entered allmulticast mode [ 583.726568][T21593] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 583.776905][T21593] bond6 (unregistering): Released all slaves [ 583.908147][T21592] lo: Caught tx_queue_len zero misconfig [ 584.091514][T21611] xt_hashlimit: size too large, truncated to 1048576 [ 584.314425][T21622] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3428'. [ 584.412851][T21620] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3427'. [ 584.732182][T21627] C: renamed from veth1_to_team (while UP) [ 584.776980][T21627] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3429'. [ 585.061302][T21635] syzkaller1: entered promiscuous mode [ 585.061519][T21635] syzkaller1: entered allmulticast mode [ 585.175669][T21635] syzkaller1: left promiscuous mode [ 585.287375][T21635] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3431'. [ 585.287413][T21635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3431'. [ 585.421700][T21635] vlan3: entered promiscuous mode [ 585.421724][T21635] bond0: entered promiscuous mode [ 585.421738][T21635] bond_slave_0: entered promiscuous mode [ 585.425620][T21635] bond_slave_1: entered promiscuous mode [ 585.962921][T21659] openvswitch: netlink: Tunnel attr 329 out of range max 16 [ 585.967905][T21659] openvswitch: netlink: Tunnel attr 329 out of range max 16 [ 585.992602][T21659] openvswitch: netlink: Tunnel attr 329 out of range max 16 [ 585.998300][T21659] openvswitch: netlink: Tunnel attr 329 out of range max 16 [ 586.022633][T21659] openvswitch: netlink: Tunnel attr 329 out of range max 16 [ 586.085821][T21648] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3435'. [ 586.673598][T21652] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 586.673625][T21652] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 586.736324][T21676] FAULT_INJECTION: forcing a failure. [ 586.736324][T21676] name failslab, interval 1, probability 0, space 0, times 0 [ 586.736358][T21676] CPU: 1 UID: 0 PID: 21676 Comm: syz.4.3440 Not tainted syzkaller #0 PREEMPT(full) [ 586.736379][T21676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 586.736391][T21676] Call Trace: [ 586.736399][T21676] [ 586.736408][T21676] dump_stack_lvl+0xe8/0x150 [ 586.736442][T21676] should_fail_ex+0x410/0x560 [ 586.736470][T21676] should_failslab+0xa8/0x100 [ 586.736497][T21676] __kmalloc_cache_noprof+0xa3/0x600 [ 586.736519][T21676] ? do_check_common+0x26e/0x55c0 [ 586.736544][T21676] ? do_check_common+0x26e/0x55c0 [ 586.736576][T21676] do_check_common+0x26e/0x55c0 [ 586.736618][T21676] ? bpf_compute_live_registers+0x1f40/0x1ff0 [ 586.736639][T21676] ? bpf_insn_def32+0x1ae/0x650 [ 586.736674][T21676] ? mark_fastcall_patterns+0xf32/0xf90 [ 586.736698][T21676] ? __pfx_do_check_common+0x10/0x10 [ 586.736749][T21676] do_check_main+0xa2/0x1f0 [ 586.736776][T21676] bpf_check+0x2777/0x2ef0 [ 586.736820][T21676] ? __pfx_bpf_check+0x10/0x10 [ 586.736851][T21676] ? bpf_obj_name_cpy+0x194/0x1e0 [ 586.736888][T21676] bpf_prog_load+0x14d6/0x1c20 [ 586.736927][T21676] ? __pfx_bpf_prog_load+0x10/0x10 [ 586.736984][T21676] __sys_bpf+0xd0d/0xd90 [ 586.737020][T21676] ? __pfx___sys_bpf+0x10/0x10 [ 586.737059][T21676] ? __fget_files+0x2a/0x420 [ 586.737112][T21676] ? ksys_write+0x242/0x270 [ 586.737156][T21676] ? __pfx_ksys_write+0x10/0x10 [ 586.737199][T21676] __x64_sys_bpf+0xba/0xd0 [ 586.737226][T21676] do_syscall_64+0x166/0x520 [ 586.737258][T21676] ? trace_irq_disable+0x3b/0x140 [ 586.737281][T21676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.737306][T21676] ? clear_bhb_loop+0x70/0xc0 [ 586.737334][T21676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.737358][T21676] RIP: 0033:0x7f1bbc59e159 [ 586.737380][T21676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.737400][T21676] RSP: 002b:00007f1bbd53d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 586.737425][T21676] RAX: ffffffffffffffda RBX: 00007f1bbc825fa0 RCX: 00007f1bbc59e159 [ 586.737442][T21676] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 586.737458][T21676] RBP: 00007f1bbd53d090 R08: 0000000000000000 R09: 0000000000000000 [ 586.737474][T21676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 586.737488][T21676] R13: 00007f1bbc826038 R14: 00007f1bbc825fa0 R15: 00007ffdb6d07878 [ 586.737525][T21676] [ 586.791964][T21671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3438'. [ 586.796105][T21671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3438'. [ 586.798474][T21671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3438'. [ 586.880228][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.145924][T21652] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 587.145952][T21652] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 587.491863][T21652] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 587.491889][T21652] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 587.908086][T21652] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 587.908115][T21652] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 587.915438][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.989316][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.320245][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.949732][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 589.604137][T21739] Bluetooth: ISO socket layer initialized [ 589.772459][T21745] FAULT_INJECTION: forcing a failure. [ 589.772459][T21745] name failslab, interval 1, probability 0, space 0, times 0 [ 589.772495][T21745] CPU: 1 UID: 0 PID: 21745 Comm: syz.0.3452 Not tainted syzkaller #0 PREEMPT(full) [ 589.772520][T21745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 589.772533][T21745] Call Trace: [ 589.772542][T21745] [ 589.772552][T21745] dump_stack_lvl+0xe8/0x150 [ 589.772590][T21745] should_fail_ex+0x410/0x560 [ 589.772623][T21745] should_failslab+0xa8/0x100 [ 589.772655][T21745] __kmalloc_cache_noprof+0xa3/0x600 [ 589.772680][T21745] ? __kmalloc_cache_noprof+0x14d/0x600 [ 589.772701][T21745] ? do_check_common+0x348/0x55c0 [ 589.772730][T21745] ? do_check_common+0x348/0x55c0 [ 589.772766][T21745] do_check_common+0x348/0x55c0 [ 589.772815][T21745] ? bpf_compute_live_registers+0x1f40/0x1ff0 [ 589.772841][T21745] ? bpf_insn_def32+0x1ae/0x650 [ 589.772887][T21745] ? mark_fastcall_patterns+0xf32/0xf90 [ 589.772917][T21745] ? __pfx_do_check_common+0x10/0x10 [ 589.772963][T21745] do_check_main+0xa2/0x1f0 [ 589.772992][T21745] bpf_check+0x2777/0x2ef0 [ 589.773034][T21745] ? __pfx_bpf_check+0x10/0x10 [ 589.773062][T21745] ? bpf_obj_name_cpy+0x194/0x1e0 [ 589.773100][T21745] bpf_prog_load+0x14d6/0x1c20 [ 589.773140][T21745] ? __pfx_bpf_prog_load+0x10/0x10 [ 589.773194][T21745] __sys_bpf+0xd0d/0xd90 [ 589.773228][T21745] ? __pfx___sys_bpf+0x10/0x10 [ 589.773268][T21745] ? __fget_files+0x2a/0x420 [ 589.773319][T21745] ? ksys_write+0x242/0x270 [ 589.773356][T21745] ? __pfx_ksys_write+0x10/0x10 [ 589.773407][T21745] __x64_sys_bpf+0xba/0xd0 [ 589.773434][T21745] do_syscall_64+0x166/0x520 [ 589.773467][T21745] ? trace_irq_disable+0x3b/0x140 [ 589.773489][T21745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.773513][T21745] ? clear_bhb_loop+0x70/0xc0 [ 589.773542][T21745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 589.773565][T21745] RIP: 0033:0x7fbd8799e159 [ 589.773586][T21745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 589.773605][T21745] RSP: 002b:00007fbd85bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 589.773630][T21745] RAX: ffffffffffffffda RBX: 00007fbd87c25fa0 RCX: 00007fbd8799e159 [ 589.773648][T21745] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 589.773663][T21745] RBP: 00007fbd85bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 589.773678][T21745] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 589.773691][T21745] R13: 00007fbd87c26038 R14: 00007fbd87c25fa0 R15: 00007ffe1f022418 [ 589.773728][T21745] [ 590.344492][T21753] __nla_validate_parse: 31 callbacks suppressed [ 590.344514][T21753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3454'. [ 590.477333][T21758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3456'. [ 590.797415][T21769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3460'. [ 590.797451][T21769] netlink: 'syz.1.3460': attribute type 5 has an invalid length. [ 590.865469][T21769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3460'. [ 590.865503][T21769] netlink: 'syz.1.3460': attribute type 5 has an invalid length. [ 590.879686][ T1290] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.880710][ T1290] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.880781][ T1290] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.880824][ T1290] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.981240][T21770] net_ratelimit: 1 callbacks suppressed [ 590.981260][T21770] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.031428][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.069842][T21783] xt_bpf: check failed: parse error [ 591.075752][T21783] netlink: 'syz.1.3461': attribute type 2 has an invalid length. [ 591.075779][T21783] netlink: 'syz.1.3461': attribute type 2 has an invalid length. [ 591.249778][ T7199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.354977][T21766] netlink: Failed to add %pK helper -22 [ 591.355038][T21766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.552626][ T7199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.662682][T21789] xt_recent: Unsupported userspace flags (000000c5) [ 591.830943][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.916050][T21809] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3467'. [ 592.069605][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.178410][T15960] IPVS: starting estimator thread 0... [ 592.261142][T21822] IPVS: using max 26 ests per chain, 62400 per kthread [ 592.416596][T21828] tc_dump_action: action bad kind [ 592.416916][T21830] tc_dump_action: action bad kind [ 592.454001][T21828] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 592.472341][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.557702][T21829] xt_policy: output policy not valid in PREROUTING and INPUT [ 592.725003][T21835] Bluetooth: hci0: unsupported parameter 5134 [ 592.725028][T21835] Bluetooth: hci0: unsupported parameter 8192 [ 592.725043][T21835] Bluetooth: hci0: unsupported parameter 5134 [ 592.725260][T21835] Bluetooth: hci0: unsupported parameter 8192 [ 593.373291][T21852] netlink: 'syz.4.3475': attribute type 21 has an invalid length. [ 593.373315][T21852] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3475'. [ 593.373392][T21852] netlink: 'syz.4.3475': attribute type 4 has an invalid length. [ 593.373408][T21852] netlink: 'syz.4.3475': attribute type 3 has an invalid length. [ 593.373422][T21852] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3475'. [ 593.436257][T21853] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3474'. [ 593.673327][T21865] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3476'. [ 593.673358][T21865] netlink: 'syz.3.3476': attribute type 1 has an invalid length. [ 593.732295][T21856] lo speed is unknown, defaulting to 1000 [ 594.003261][T21870] tipc: Started in network mode [ 594.003296][T21870] tipc: Node identity 9a029dcf3b22, cluster identity 4711 [ 594.003665][T21870] tipc: Enabled bearer , priority 0 [ 594.036698][T21870] syzkaller0: entered promiscuous mode [ 594.036911][T21870] syzkaller0: entered allmulticast mode [ 594.124677][T21870] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 594.366396][T21875] netlink: 'syz.2.3479': attribute type 10 has an invalid length. [ 594.496352][T21878] tipc: Resetting bearer [ 594.919185][T21869] tipc: Resetting bearer [ 595.010997][T21869] tipc: Disabling bearer [ 595.197580][ T922] tipc: Node number set to 2703269327 [ 595.360482][T21900] vlan3: entered allmulticast mode [ 596.231009][ T922] net_ratelimit: 6 callbacks suppressed [ 596.231033][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 596.356775][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3488'. [ 596.371129][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3488'. [ 596.371360][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3488'. [ 596.371585][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3488'. [ 596.371818][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3488'. [ 596.372046][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3488'. [ 596.372273][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3488'. [ 596.373126][T21929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3487'. [ 596.378833][T21931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3488'. [ 596.580497][T21933] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3488'. [ 596.955766][T21955] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 597.161174][T21954] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.226729][T21956] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 597.242684][T21956] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 597.269553][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.316019][T21954] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 597.326559][T21963] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 597.347510][T21954] bond2 (unregistering): Released all slaves [ 598.103125][T21988] bond1: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 598.103164][T21988] bond1: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 598.104361][T21988] bond1: entered allmulticast mode [ 598.104972][T21988] 8021q: adding VLAN 0 to HW filter on device bond1 [ 598.314649][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.549567][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.353230][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.794807][T22056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 599.873056][T22074] IPVS: lblc: SCTP 172.20.20.187:0 - no destination available [ 600.288382][T22065] IPVS: Scheduler module ip_vs_sip not found [ 600.392425][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.169654][T15960] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 601.192947][T15979] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 601.193247][T15979] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 601.193287][T15979] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 601.468866][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.472475][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.592540][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.055156][T22147] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 602.130664][T22154] __nla_validate_parse: 9 callbacks suppressed [ 602.130688][T22154] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3518'. [ 602.441883][T22152] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3517'. [ 602.549097][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 602.927707][T22143] ieee802154 phy0 wpan0: encryption failed: -126 [ 603.097078][T22176] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3523'. [ 603.242278][T22176] 8021q: adding VLAN 0 to HW filter on device macsec2 [ 603.525207][T22182] bond2: entered promiscuous mode [ 603.527768][T22182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 603.589847][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.632395][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 604.633743][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.669171][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 605.673617][T22240] netlink: 260 bytes leftover after parsing attributes in process `syz.4.3533'. [ 606.444397][T22279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3542'. [ 606.481133][T22281] xt_REDIRECT: bad MAP_IPS. [ 606.711313][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.954751][T22295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3547'. [ 607.077958][T22298] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3547'. [ 607.674269][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.749568][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.141966][T22332] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3554'. [ 608.793025][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.953016][T22346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3556'. [ 608.953723][T22346] xt_cgroup: path and classid specified [ 609.132032][T22347] syzkaller0: entered promiscuous mode [ 609.132057][T22347] syzkaller0: entered allmulticast mode [ 609.228435][T22347] tipc: Started in network mode [ 609.228470][T22347] tipc: Node identity ae7e8b793861, cluster identity 4711 [ 609.266430][T22347] tipc: Enabled bearer , priority 0 [ 609.312067][T22358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3558'. [ 609.312105][T22358] netlink: 'syz.0.3558': attribute type 26 has an invalid length. [ 609.312120][T22358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3558'. [ 609.312761][T22358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3558'. [ 609.312788][T22358] netlink: 'syz.0.3558': attribute type 26 has an invalid length. [ 609.312813][T22358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3558'. [ 609.454986][T22357] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 609.804767][T22344] tipc: Resetting bearer [ 609.828952][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.145949][T22344] tipc: Disabling bearer [ 610.699705][T22391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3563'. [ 610.719702][ T7199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.800090][T15960] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.800144][T15960] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.800183][T15960] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.800221][T15960] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 610.870861][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 610.871679][T22396] xt_MASQUERADE: bad rangesize 20224 [ 610.972729][T22400] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3563'. [ 611.031030][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.607404][T22408] syzkaller0: left promiscuous mode [ 611.607612][T22408] syzkaller0: left allmulticast mode [ 611.912630][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.062126][T22431] netlink: 'syz.1.3573': attribute type 1 has an invalid length. [ 612.132805][T22431] bond6: entered promiscuous mode [ 612.133307][T22431] 8021q: adding VLAN 0 to HW filter on device bond6 [ 612.206378][T22431] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3573'. [ 612.265069][T22442] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3575'. [ 612.311953][ T7199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.418184][T22431] bond6: (slave bridge7): making interface the new active one [ 612.423023][T22431] bridge7: entered promiscuous mode [ 612.443477][T22431] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 612.704150][T22448] netlink: 'syz.2.3576': attribute type 1 has an invalid length. [ 612.870070][T22451] bond2: entered promiscuous mode [ 612.870125][T22451] bond2: entered allmulticast mode [ 612.873706][T22451] 8021q: adding VLAN 0 to HW filter on device bond2 [ 612.949643][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.973980][T22452] bridge1: entered promiscuous mode [ 612.974183][T22452] bridge1: entered allmulticast mode [ 612.974837][T22452] bond2: (slave bridge1): Enslaving as a backup interface with an up link [ 613.032222][T22448] bridge2: entered promiscuous mode [ 613.032420][T22448] bridge2: entered allmulticast mode [ 613.033658][T22448] bond2: (slave bridge2): Enslaving as a backup interface with a down link [ 613.039972][T14957] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 613.079834][T22448] bridge3: entered promiscuous mode [ 613.080042][T22448] bridge3: entered allmulticast mode [ 613.081028][T22448] bond2: (slave bridge3): Enslaving as a backup interface with a down link [ 613.191919][T14957] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 613.592322][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.754211][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 613.991563][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.073795][T22474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.074019][T22474] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 614.230537][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 614.367599][T22481] __nla_validate_parse: 1 callbacks suppressed [ 614.367624][T22481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3586'. [ 614.401927][T22481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3586'. [ 614.401957][T22481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3586'. [ 614.588118][T22484] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3589'. [ 614.588145][T22484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.618024][T22484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 614.632232][T22484] batman_adv: batadv0: Removing interface: vlan2 [ 616.163116][ T30] audit: type=1800 audit(1790698888.959:14): pid=22519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3595" name=3A202E31323334352E2E2E2E2028313829207238203D2030783363333130303030300A202020202020323A202E31323334352E2E382E20283835292063616C6C2070632B360A202020202020333A202E2E2E2E2E2E2E2E382E2028313829207230203D203078313130303030303066666666666666660A202020202020353A202E2E2E2E2E2E2E2E382E202836362920696620773820733E2030783020676F746F2070632B300A202020202020363A202E2E2E2E2E2E2E2E2E2E20283138292072 dev="tmpfs" ino=290 res=0 errno=0 [ 616.990244][T22542] nbd: must specify a size in bytes for the device [ 617.190375][ T922] net_ratelimit: 14 callbacks suppressed [ 617.190398][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 617.891058][T22569] netlink: 'syz.2.3604': attribute type 39 has an invalid length. [ 618.002840][T22567] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3603'. [ 618.192004][T22573] syzkaller0: entered promiscuous mode [ 618.192029][T22573] syzkaller0: entered allmulticast mode [ 618.236216][T22571] netlink: 'syz.1.3605': attribute type 4 has an invalid length. [ 618.337479][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.337728][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.567128][ T7199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 618.682277][T22581] netlink: 'syz.4.3608': attribute type 3 has an invalid length. [ 618.682307][T22581] netlink: 'syz.4.3608': attribute type 1 has an invalid length. [ 618.682323][T22581] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3608'. [ 618.682341][T22581] NCSI netlink: No device for ifindex 0 [ 618.825318][T22580] lo speed is unknown, defaulting to 1000 [ 618.913263][T22589] Bluetooth: MGMT ver 1.23 [ 618.913307][T22589] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 618.946220][T22589] Bluetooth: hci1: expected 36 bytes, got 2 bytes [ 619.057996][T22598] Bluetooth: hci0: unsupported parameter 5135 [ 619.058021][T22598] Bluetooth: hci0: unsupported parameter 8192 [ 619.058036][T22598] Bluetooth: hci0: unsupported parameter 5135 [ 619.058050][T22598] Bluetooth: hci0: unsupported parameter 8192 [ 619.323185][T22583] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3610'. [ 619.382041][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.382273][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 619.421396][T22602] ip_tables: iptables: counters copy to user failed while replacing table [ 619.677905][T22604] ip6gretap0: entered promiscuous mode [ 619.685915][T22604] macsec1: entered allmulticast mode [ 619.685937][T22604] ip6gretap0: entered allmulticast mode [ 619.883379][T22613] tap0: tun_chr_ioctl cmd 1074025673 [ 619.905596][T22610] tap0: tun_chr_ioctl cmd 1074025672 [ 619.905625][T22610] tap0: ignored: set checksum disabled [ 620.396259][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.396568][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.429549][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.102764][T22673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3631'. [ 622.312625][T22677] batadv_slave_1: entered promiscuous mode [ 622.446027][T22676] batadv_slave_1: left promiscuous mode [ 622.470637][ T8005] net_ratelimit: 4 callbacks suppressed [ 622.470662][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 622.470917][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.047169][T22696] openvswitch: netlink: Unknown key attributes 1 [ 623.081287][T22698] netlink: 'syz.0.3639': attribute type 2 has an invalid length. [ 623.101165][T22698] macvlan0: entered promiscuous mode [ 623.189629][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.258418][T22696] lo speed is unknown, defaulting to 1000 [ 623.509429][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.509696][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.829818][ T7199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.830084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.472310][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.556576][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 624.556830][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.361746][T22765] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3653'. [ 626.433738][T22765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3653'. [ 627.637433][T22774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3656'. [ 627.678061][ T922] net_ratelimit: 6 callbacks suppressed [ 627.678086][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 627.678317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.719264][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.719590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 628.798195][ T9302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.753451][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 629.753738][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.438262][T22750] ip6erspan0: entered allmulticast mode [ 630.440202][ T1290] bond0: (slave bond_slave_0): interface is now down [ 630.440288][ T1290] bond0: (slave bond_slave_1): interface is now down [ 630.463531][ T1290] bond0: (slave bond_slave_0): interface is now down [ 630.463567][ T1290] bond0: (slave bond_slave_1): interface is now down [ 630.479238][T12756] bond0: (slave bond_slave_0): interface is now down [ 630.479314][T12756] bond0: (slave bond_slave_1): interface is now down [ 630.498884][T12756] bond0: (slave bond_slave_0): interface is now down [ 630.498912][T12756] bond0: (slave bond_slave_1): interface is now down [ 630.523691][ T1290] bond0: (slave bond_slave_0): interface is now down [ 630.523721][ T1290] bond0: (slave bond_slave_1): interface is now down [ 630.542228][T12756] bond0: (slave bond_slave_0): interface is now down [ 630.542254][T12756] bond0: (slave bond_slave_1): interface is now down [ 630.558982][T12756] bond0: (slave bond_slave_0): interface is now down [ 630.559014][T12756] bond0: (slave bond_slave_1): interface is now down [ 630.581613][T11090] bond0: (slave bond_slave_0): interface is now down [ 630.581699][T11090] bond0: (slave bond_slave_1): interface is now down [ 630.600598][T15979] bond0: (slave bond_slave_0): interface is now down [ 630.600624][T15979] bond0: (slave bond_slave_1): interface is now down [ 630.622620][T15979] bond0: (slave bond_slave_0): interface is now down [ 630.622686][T15979] bond0: (slave bond_slave_1): interface is now down [ 630.640316][T11090] bond0: (slave bond_slave_0): interface is now down [ 630.640342][T11090] bond0: (slave bond_slave_1): interface is now down [ 630.660221][T15979] bond0: (slave bond_slave_0): interface is now down [ 630.660293][T15979] bond0: (slave bond_slave_1): interface is now down [ 630.662454][T22765] bond0: (slave bond_slave_0): Releasing backup interface [ 630.686804][T15979] bond0: (slave bond_slave_0): interface is now down [ 630.686839][T15979] bond0: (slave bond_slave_1): interface is now down [ 630.701859][T12756] bond0: (slave bond_slave_0): interface is now down [ 630.701933][T12756] bond0: (slave bond_slave_1): interface is now down [ 630.712955][T22765] bond_slave_0 (unregistering): left promiscuous mode [ 630.718967][T12756] bond0: (slave bond_slave_0): interface is now down [ 630.719030][T12756] bond0: (slave bond_slave_1): interface is now down [ 630.739072][T12756] bond0: (slave bond_slave_0): interface is now down [ 630.739098][T12756] bond0: (slave bond_slave_1): interface is now down [ 630.761861][T12756] bond0: (slave bond_slave_0): interface is now down [ 630.761886][T12756] bond0: (slave bond_slave_1): interface is now down [ 630.779966][T15979] bond0: (slave bond_slave_0): interface is now down [ 630.780038][T15979] bond0: (slave bond_slave_1): interface is now down [ 630.793791][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.794492][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 630.812647][T11090] bond0: (slave bond_slave_0): interface is now down [ 630.812710][T11090] bond0: (slave bond_slave_1): interface is now down [ 630.830806][T15979] bond0: (slave bond_slave_0): interface is now down [ 630.830836][T15979] bond0: (slave bond_slave_1): interface is now down [ 630.831743][T22766] bridge0: port 3(veth0) entered blocking state [ 630.832062][T22766] bridge0: port 3(veth0) entered disabled state [ 630.832268][T22766] veth0: entered allmulticast mode [ 630.837760][T22766] veth0: entered promiscuous mode [ 630.845537][T22766] bridge0: port 3(veth0) entered blocking state [ 630.845876][T22766] bridge0: port 3(veth0) entered forwarding state [ 630.860717][T15979] bond0: (slave bond_slave_0): interface is now down [ 630.860790][T15979] bond0: (slave bond_slave_1): interface is now down [ 630.887685][T12756] bond0: (slave bond_slave_0): interface is now down [ 630.887759][T12756] bond0: (slave bond_slave_1): interface is now down [ 630.899546][T15953] bond0: (slave bond_slave_0): interface is now down [ 630.899613][T15953] bond0: (slave bond_slave_1): interface is now down [ 630.921258][T15953] bond0: (slave bond_slave_0): interface is now down [ 630.921337][T15953] bond0: (slave bond_slave_1): interface is now down [ 630.941035][T12756] bond0: (slave bond_slave_0): interface is now down [ 630.941101][T12756] bond0: (slave bond_slave_1): interface is now down [ 630.959394][T12756] bond0: (slave bond_slave_0): interface is now down [ 630.959420][T12756] bond0: (slave bond_slave_1): interface is now down [ 630.982303][T15953] bond0: (slave bond_slave_0): interface is now down [ 630.982329][T15953] bond0: (slave bond_slave_1): interface is now down [ 631.008883][T12756] bond0: (slave bond_slave_0): interface is now down [ 631.008912][T12756] bond0: (slave bond_slave_1): interface is now down [ 631.032709][T12756] bond0: (slave bond_slave_0): interface is now down [ 631.032735][T12756] bond0: (slave bond_slave_1): interface is now down [ 631.052074][T15979] bond0: (slave bond_slave_0): interface is now down [ 631.052101][T15979] bond0: (slave bond_slave_1): interface is now down [ 631.068672][T12756] bond0: (slave bond_slave_0): interface is now down [ 631.068697][T12756] bond0: (slave bond_slave_1): interface is now down [ 631.098236][T12756] bond0: (slave bond_slave_0): interface is now down [ 631.098262][T12756] bond0: (slave bond_slave_1): interface is now down [ 631.109857][T15953] bond0: (slave bond_slave_0): interface is now down [ 631.109915][T15953] bond0: (slave bond_slave_1): interface is now down [ 631.129079][ T1290] bond0: (slave bond_slave_0): interface is now down [ 631.129164][ T1290] bond0: (slave bond_slave_1): interface is now down [ 631.149828][T15960] bond0: (slave bond_slave_0): interface is now down [ 631.149853][T15960] bond0: (slave bond_slave_1): interface is now down [ 631.174458][T15960] bond0: (slave bond_slave_0): interface is now down [ 631.174485][T15960] bond0: (slave bond_slave_1): interface is now down [ 631.194140][ T1290] bond0: (slave bond_slave_0): interface is now down [ 631.194165][ T1290] bond0: (slave bond_slave_1): interface is now down [ 631.208927][T15979] bond0: (slave bond_slave_0): interface is now down [ 631.208951][T15979] bond0: (slave bond_slave_1): interface is now down [ 631.241654][T11086] bond0: (slave bond_slave_0): interface is now down [ 631.241680][T11086] bond0: (slave bond_slave_1): interface is now down [ 631.372899][T11086] bond0: now running without any active interface! [ 631.395751][T22790] nbd2: detected capacity change from 0 to 63 [ 631.420367][ T5626] block nbd2: Receive control failed (result -32) [ 631.422299][ T2017] block nbd2: Send control failed (result -32) [ 631.422899][ T2017] block nbd2: Request send failed, requeueing [ 631.429984][ T2017] block nbd2: Dead connection, failed to find a fallback [ 631.436707][ T2017] block nbd2: shutting down sockets [ 631.436762][ T2017] blk_print_req_error: 27 callbacks suppressed [ 631.436797][ T2017] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 631.436978][ T2017] buffer_io_error: 27 callbacks suppressed [ 631.437020][ T2017] Buffer I/O error on dev nbd2, logical block 0, async page read [ 631.443863][ T2017] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 631.443892][ T2017] Buffer I/O error on dev nbd2, logical block 1, async page read [ 631.444026][ T2017] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 631.444049][ T2017] Buffer I/O error on dev nbd2, logical block 2, async page read [ 631.454040][ T2017] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 631.454075][ T2017] Buffer I/O error on dev nbd2, logical block 3, async page read [ 631.454310][ T2017] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 631.454338][ T2017] Buffer I/O error on dev nbd2, logical block 0, async page read [ 631.454443][ T2017] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 631.454470][ T2017] Buffer I/O error on dev nbd2, logical block 1, async page read [ 631.459140][ T2017] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 631.459240][ T2017] Buffer I/O error on dev nbd2, logical block 2, async page read [ 631.461941][ T2017] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 631.461972][ T2017] Buffer I/O error on dev nbd2, logical block 3, async page read [ 631.462107][ T2017] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 631.462135][ T2017] Buffer I/O error on dev nbd2, logical block 0, async page read [ 631.462334][ T2017] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 631.462403][ T2017] Buffer I/O error on dev nbd2, logical block 1, async page read [ 631.586894][T22778] ldm_validate_partition_table(): Disk read failed. [ 631.587782][T22778] Dev nbd2: unable to read RDB block 0 [ 631.589107][T22778] nbd2: unable to read partition table [ 631.685418][T22778] ldm_validate_partition_table(): Disk read failed. [ 631.686601][T22778] Dev nbd2: unable to read RDB block 0 [ 631.738258][T22778] nbd2: unable to read partition table [ 631.829913][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.951816][T22803] syzkaller1: entered promiscuous mode [ 631.951842][T22803] syzkaller1: entered allmulticast mode [ 632.266440][ T1290] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.268821][T11086] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.268883][T11086] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.268920][T11086] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.385590][T22814] x_tables: duplicate entry at hook 1 [ 632.604767][T22814] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3665'. [ 632.699333][T22826] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3667'. [ 632.828002][T22830] syzkaller0: entered promiscuous mode [ 632.828029][T22830] syzkaller0: entered allmulticast mode [ 632.869221][ T8005] net_ratelimit: 2 callbacks suppressed [ 632.869243][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.869563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.064162][T22826] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3667'. [ 633.135120][T22834] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3667'. [ 633.208200][T22836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3667'. [ 633.910354][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 633.910591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.889263][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.954730][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 634.955042][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.997125][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 635.997371][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.033931][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 637.949502][ T9302] net_ratelimit: 1 callbacks suppressed [ 637.949526][ T9302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.146956][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 638.147215][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.192201][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 639.192440][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.238810][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.239053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 640.958972][ T9302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.269072][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.269334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.029477][ T9302] net_ratelimit: 2 callbacks suppressed [ 643.029501][ T9302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.029720][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.349627][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.349913][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.994048][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.389103][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.389341][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.429032][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 645.429292][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 646.469652][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.548928][ T8008] net_ratelimit: 4 callbacks suppressed [ 648.548952][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 648.549192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.589656][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.589901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.086743][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.629863][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.630123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.669143][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.669390][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.709544][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.750667][ T8005] net_ratelimit: 2 callbacks suppressed [ 653.750692][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 653.750930][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.788964][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.789210][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.829756][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.830005][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.156793][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.869291][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.869530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 657.908955][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.949632][ T8008] net_ratelimit: 1 callbacks suppressed [ 658.949657][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 658.949894][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.199644][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.989093][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 659.989336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.029218][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 661.029472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.069667][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.069923][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 662.239372][ T9302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 663.594221][T22852] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3673'. [ 663.701698][T22863] siw: device registration error -23 [ 663.706328][T22866] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3672'. [ 664.149455][ T8005] net_ratelimit: 4 callbacks suppressed [ 664.149481][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 664.149906][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.189616][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.189883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 665.281672][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.232578][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.232818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 666.523487][T22853] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 666.855557][T22882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3677'. [ 667.269263][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.269537][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.278150][T22894] syzkaller0: entered promiscuous mode [ 667.278175][T22894] syzkaller0: entered allmulticast mode [ 667.332697][T22902] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3683'. [ 667.479565][T22912] ip_tables: iptables: counters copy to user failed while replacing table [ 667.532242][T22914] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3685'. [ 667.584316][ T30] audit: type=1804 audit(1790698940.379:15): pid=22904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3683" name="/newroot/169/cgroup.controllers" dev="tmpfs" ino=893 res=1 errno=0 [ 667.584581][ T30] audit: type=1800 audit(1790698940.379:16): pid=22904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3683" name="cgroup.controllers" dev="tmpfs" ino=893 res=0 errno=0 [ 668.387153][T22926] bond3: up delay (7) is not a multiple of miimon (100), value rounded to 0 ms [ 668.387189][T22926] bond3: down delay (1) is not a multiple of miimon (100), value rounded to 0 ms [ 668.654321][T22926] bond3: entered allmulticast mode [ 668.879688][T22928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3687'. [ 668.944404][T22935] Cannot find add_set index 2 as target [ 669.362469][ T8005] net_ratelimit: 4 callbacks suppressed [ 669.362494][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.362714][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.366497][T22965] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3692'. [ 669.501476][T22972] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3695'. [ 669.930108][T22966] syzkaller0: entered promiscuous mode [ 669.930135][T22966] syzkaller0: entered allmulticast mode [ 670.155336][T22979] bond0: (slave gretap0): Enslaving as an active interface with an up link [ 670.390510][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.390733][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.428902][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.429256][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.430225][ T9302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.482097][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.482423][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 672.484384][T15953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.471036][ T9302] net_ratelimit: 3 callbacks suppressed [ 674.471059][ T9302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.558000][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 674.558248][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.592172][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.592431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 675.985943][T23010] pim6reg: entered allmulticast mode [ 676.025903][T23008] lo speed is unknown, defaulting to 1000 [ 676.122373][T22997] lo speed is unknown, defaulting to 1000 [ 676.495581][T23027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3704'. [ 676.604328][T23014] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3702'. [ 676.630957][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.631255][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 676.911465][T23030] ip6erspan0: entered allmulticast mode [ 677.491446][T23053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3707'. [ 677.491495][T23053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 677.659702][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.677394][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.125577][T23075] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3713'. [ 678.254715][T23082] lo speed is unknown, defaulting to 1000 [ 679.377671][T23025] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 679.389632][T23053] netlink: 'syz.1.3707': attribute type 1 has an invalid length. [ 679.750510][ T8010] net_ratelimit: 6 callbacks suppressed [ 679.750532][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.752563][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 679.962530][T23108] netlink: 100 bytes leftover after parsing attributes in process `syz.3.3719'. [ 680.441565][T23116] bond4: entered allmulticast mode [ 680.446257][T23108] lo speed is unknown, defaulting to 1000 [ 680.513548][T23131] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 680.516890][T23131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.709637][ T7199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.753010][T23127] 8021q: adding VLAN 0 to HW filter on device bond5 [ 680.773682][T23127] bond5: entered allmulticast mode [ 680.786331][T23127] bond4: (slave bond5): Enslaving as an active interface with an up link [ 680.803502][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.803705][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.803737][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.803925][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.824252][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 680.898208][T23130] bond4 (unregistering): (slave bond5): Releasing backup interface [ 680.909982][T23130] bond5: left allmulticast mode [ 680.927555][T23130] bond4 (unregistering): Released all slaves [ 681.002953][T23137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3726'. [ 681.003016][T23137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3726'. [ 681.169228][T23144] IPVS: set_ctl: invalid protocol: 92 255.255.255.255:20003 [ 681.371818][T23137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3726'. [ 681.371883][T23137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3726'. [ 681.704365][T23137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3726'. [ 681.704433][T23137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3726'. [ 681.889595][T23167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3731'. [ 682.008785][T23168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3731'. [ 682.305672][T23174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3732'. [ 682.618104][T23180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3735'. [ 682.817912][T23180] oös-system: entered promiscuous mode [ 683.537352][T23212] ieee802154 phy0 wpan0: encryption failed: -126 [ 683.605420][T23216] netlink: 'syz.3.3743': attribute type 1 has an invalid length. [ 683.693943][T23217] netlink: 'syz.4.3744': attribute type 62 has an invalid length. [ 683.763421][T23223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 683.831785][T23219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3745'. [ 683.933157][T23228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3747'. [ 684.546906][T23240] bridge0: port 3(vlan2) entered blocking state [ 684.547399][T23240] bridge0: port 3(vlan2) entered disabled state [ 684.547773][T23240] vlan2: entered allmulticast mode [ 684.547791][T23240] geneve0: entered allmulticast mode [ 684.583558][T23240] vlan2: entered promiscuous mode [ 684.583599][T23240] geneve0: entered promiscuous mode [ 684.834065][T23248] netlink: 'syz.1.3753': attribute type 1 has an invalid length. [ 684.869782][ T8008] net_ratelimit: 13 callbacks suppressed [ 684.869806][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.870029][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.911727][ T9302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.913678][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.914718][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.914952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.328336][T23293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3761'. [ 686.559753][ T1290] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.559983][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.815163][T23304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.815443][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.815697][T23304] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 686.874986][T23310] __nla_validate_parse: 1 callbacks suppressed [ 686.875010][T23310] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3763'. [ 687.346208][T23317] netlink: 'syz.1.3768': attribute type 1 has an invalid length. [ 687.379787][T23321] netlink: 'syz.1.3768': attribute type 10 has an invalid length. [ 687.379815][T23321] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3768'. [ 687.428323][T23324] netlink: 'syz.2.3769': attribute type 2 has an invalid length. [ 687.501730][T23317] bond7: option mode: invalid value (7) [ 687.559514][T23317] bond7 (unregistering): Released all slaves [ 687.875313][T23321] dummy0: entered promiscuous mode [ 687.963199][T23324] : entered promiscuous mode [ 689.218268][T23362] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3778'. [ 689.908858][ T8005] net_ratelimit: 13 callbacks suppressed [ 689.908881][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.909136][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.193553][T23377] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20000 [ 690.222920][T23377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3781'. [ 690.260539][T23380] sctp_setsockopt_delayed_ack: 23 callbacks suppressed [ 690.260564][T23380] sctp: [Deprecated]: syz.1.3782 (pid 23380) Use of struct sctp_assoc_value in delayed_ack socket option. [ 690.260564][T23380] Use struct sctp_sack_info instead [ 690.358707][T23384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3783'. [ 690.358735][T23384] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 690.358931][T23384] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 690.552110][T23384] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 690.552323][T23384] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.951729][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.951972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 691.082244][T23402] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3785'. [ 691.482850][T23418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3788'. [ 691.565508][T23425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3788'. [ 691.831734][T23431] ip_tables: iptables: counters copy to user failed while replacing table [ 691.832626][T23431] ip_tables: iptables: counters copy to user failed while replacing table [ 691.882654][T23431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3790'. [ 691.990997][ T9302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.000578][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.000829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.309422][T15953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 692.726360][T15962] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 693.102381][T23471] syzkaller0: entered promiscuous mode [ 693.102409][T23471] syzkaller0: entered allmulticast mode [ 694.949056][ T8005] net_ratelimit: 9 callbacks suppressed [ 694.949087][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 694.949368][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.030165][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.587404][T23452] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 695.880889][T23483] netlink: 'syz.0.3802': attribute type 3 has an invalid length. [ 695.880916][T23483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3802'. [ 695.992827][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 695.993073][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.079775][T23488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3804'. [ 696.148931][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.149335][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 696.151014][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.186515][T11086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.187310][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.212879][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 696.444354][T23505] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3808'. [ 696.565968][T23508] gretap0: entered promiscuous mode [ 696.596739][T23508] vlan2: entered promiscuous mode [ 696.762681][T23517] vlan4: entered allmulticast mode [ 696.765552][T23517] bridge0: port 4(vlan4) entered blocking state [ 696.767179][T23523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3811'. [ 696.767338][T23517] bridge0: port 4(vlan4) entered disabled state [ 696.816772][T23514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3811'. [ 696.828342][T23517] vlan4: entered promiscuous mode [ 697.261720][T23536] netlink: 'syz.4.3813': attribute type 1 has an invalid length. [ 697.554587][T23536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 697.629065][T23541] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3814'. [ 698.559718][T23561] veth0: entered promiscuous mode [ 698.695573][T23559] lo speed is unknown, defaulting to 1000 [ 698.939229][T23561] veth0: left promiscuous mode [ 700.075880][T23613] netlink: 'syz.4.3826': attribute type 10 has an invalid length. [ 700.100371][T23615] netlink: 'syz.4.3826': attribute type 10 has an invalid length. [ 700.150482][ T922] net_ratelimit: 14 callbacks suppressed [ 700.150506][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.150753][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 700.216797][T23622] netlink: 'syz.3.3827': attribute type 10 has an invalid length. [ 700.216824][T23622] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3827'. [ 700.289299][T23596] lo: entered allmulticast mode [ 700.289363][T23596] lo: left allmulticast mode [ 700.533595][T23627] netlink: 'syz.4.3826': attribute type 10 has an invalid length. [ 700.593052][T23613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 700.597987][T23613] team0: Port device netdevsim1 added [ 700.738388][T23605] syzkaller0: entered promiscuous mode [ 700.738522][T23605] syzkaller0: entered allmulticast mode [ 700.865451][T23627] team0: Port device netdevsim1 removed [ 700.884917][T23627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 700.887338][T23627] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 701.048368][T23607] lo speed is unknown, defaulting to 1000 [ 701.190752][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.191069][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.251937][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.252242][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.310771][ T7199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 702.924785][T23694] syzkaller0: entered promiscuous mode [ 702.924811][T23694] syzkaller0: entered allmulticast mode [ 703.004573][T23697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3839'. [ 703.019450][T23694] tipc: Started in network mode [ 703.019487][T23694] tipc: Node identity 0260cf1748e8, cluster identity 4711 [ 703.020361][T23694] tipc: Enabled bearer , priority 0 [ 703.193274][T11086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.194539][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.204864][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 703.486892][T23704] tipc: Resetting bearer [ 703.512847][T23693] tipc: Resetting bearer [ 703.595787][T23693] tipc: Disabling bearer [ 703.875936][T23720] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3842'. [ 704.003981][T23720] veth3: entered allmulticast mode [ 704.161367][T23732] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 1, id = 0 [ 704.319827][T23735] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3847'. [ 704.522057][T23746] block nbd3: server does not support multiple connections per device. [ 704.540187][T23746] block nbd3: shutting down sockets [ 705.133255][T23750] 8021q: adding VLAN 0 to HW filter on device bond7 [ 705.274733][ T8005] net_ratelimit: 3 callbacks suppressed [ 705.274761][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.275059][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.355284][ T7199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.374531][T23770] ip6t_rpfilter: unknown options [ 705.983232][T23794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3856'. [ 706.110346][T23801] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 706.309872][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.310126][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.433130][T23811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3859'. [ 706.445253][T23810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3858'. [ 706.461502][T23809] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3862'. [ 706.543919][T23811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3859'. [ 706.544723][T23811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3859'. [ 706.545977][T23811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3859'. [ 707.349055][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.349294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.425177][T23832] syzkaller0: entered promiscuous mode [ 707.425425][T23832] syzkaller0: entered allmulticast mode [ 708.023686][T23862] openvswitch: netlink: IPv4 tunnel dst address is zero [ 708.023722][T23862] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 708.252509][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.643502][T23888] __nla_validate_parse: 2 callbacks suppressed [ 708.643527][T23888] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3874'. [ 708.675104][T23852] bridge0: port 3(bond0) entered disabled state [ 708.675558][T23852] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.676198][T23852] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.744235][T23890] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3876'. [ 709.466929][T23856] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3870'. [ 709.709131][T11086] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.709171][T11086] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.709210][T11086] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.709238][T11086] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.709274][T11086] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.709300][T11086] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.709337][T11086] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 709.709365][T11086] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.375479][T23927] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3885'. [ 710.469453][ T922] net_ratelimit: 9 callbacks suppressed [ 710.469477][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.469746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 710.816945][T23942] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3890'. [ 711.111764][T23948] netlink: 'syz.2.3893': attribute type 2 has an invalid length. [ 711.431833][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.510455][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.510691][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.851769][T23974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3901'. [ 711.943244][T23982] syzkaller0: entered promiscuous mode [ 711.943453][T23982] syzkaller0: entered allmulticast mode [ 712.031225][T23986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3900'. [ 712.054718][T23986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.054978][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.095259][T23986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3900'. [ 712.334306][T23998] netlink: 'syz.2.3900': attribute type 10 has an invalid length. [ 712.334335][T23998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3900'. [ 712.550080][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.550338][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.887999][T23964] tipc: Resetting bearer [ 713.003522][T23964] bond0: (slave bond_slave_0): Releasing backup interface [ 713.024516][T23964] bond0: (slave bond_slave_1): Releasing backup interface [ 713.053477][T23964] team0: Port device team_slave_0 removed [ 713.075579][T23964] team0: Port device team_slave_1 removed [ 713.091794][T23964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.098133][T23964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.124294][T23964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.139950][T23964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.179210][T23989] netlink: 'syz.3.3902': attribute type 4 has an invalid length. [ 713.186308][T23964] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 713.230151][T23975] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3901'. [ 713.326922][T23986] 8021q: adding VLAN 0 to HW filter on device bond4 [ 713.380825][T23997] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 713.380959][T23998] dummy0: entered promiscuous mode [ 713.383897][T23998] bond4: (slave dummy0): Releasing backup interface [ 715.050946][T24063] block nbd0: reconnected socket [ 715.052850][T24063] netlink: 'syz.0.3916': attribute type 9 has an invalid length. [ 715.204274][T24064] __nla_validate_parse: 1 callbacks suppressed [ 715.204298][T24064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3914'. [ 715.274273][ T5626] block nbd0: Receive control failed (result -32) [ 715.379735][T24067] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3917'. [ 715.387619][T24067] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3917'. [ 715.387654][T24067] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3917'. [ 715.552630][T24082] ieee802154 phy0 wpan0: encryption failed: -126 [ 715.670715][ T922] net_ratelimit: 10 callbacks suppressed [ 715.670737][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.671011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.826864][T24083] syzkaller1: entered promiscuous mode [ 715.826898][T24083] syzkaller1: entered allmulticast mode [ 716.006358][T24102] netlink: NAT attributes may be specified only when CT COMMIT flag is also specified. [ 716.006400][T24102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 716.120071][T24111] netlink: 'syz.3.3924': attribute type 4 has an invalid length. [ 716.710463][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.710717][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.568811][ T9302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.749695][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.749926][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.799025][T24138] sock: sock_timestamping_bind_phc: sock not bind to device [ 717.860441][T24137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3930'. [ 718.208457][T24143] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 718.594544][T24162] netlink: 5120 bytes leftover after parsing attributes in process `syz.3.3934'. [ 718.791852][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 719.982671][T24200] netlink: 'syz.0.3944': attribute type 4 has an invalid length. [ 719.982698][T24200] netlink: 'syz.0.3944': attribute type 3 has an invalid length. [ 719.983016][T24201] netlink: 'syz.0.3944': attribute type 4 has an invalid length. [ 719.983035][T24201] netlink: 'syz.0.3944': attribute type 3 has an invalid length. [ 719.983192][T24202] netlink: 'syz.0.3944': attribute type 4 has an invalid length. [ 719.983210][T24202] netlink: 'syz.0.3944': attribute type 3 has an invalid length. [ 720.174161][T24207] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3946'. [ 720.174205][T24207] netlink: 'syz.1.3946': attribute type 10 has an invalid length. [ 720.174225][T24207] netlink: 'syz.1.3946': attribute type 5 has an invalid length. [ 720.174241][T24207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3946'. [ 720.222988][T24207] geneve0: entered promiscuous mode [ 720.223014][T24207] geneve0: entered allmulticast mode [ 720.242113][T11086] netdevsim netdevsim1 netdevsim3: set [1, 2] type 2 family 0 port 57206 - 0 [ 720.242168][T11086] netdevsim netdevsim1 netdevsim2: set [1, 2] type 2 family 0 port 57206 - 0 [ 720.242210][T11086] netdevsim netdevsim1 netdevsim1: set [1, 2] type 2 family 0 port 57206 - 0 [ 720.242251][T11086] netdevsim netdevsim1 netdevsim0: set [1, 2] type 2 family 0 port 57206 - 0 [ 720.857492][T24227] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3948'. [ 720.871444][ T8010] net_ratelimit: 7 callbacks suppressed [ 720.871466][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.871674][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.977595][ T9302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.170207][T24233] netlink: 'syz.0.3952': attribute type 1 has an invalid length. [ 721.348317][T24233] 8021q: adding VLAN 0 to HW filter on device bond4 [ 721.731553][T24254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3955'. [ 721.731586][T24254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3955'. [ 721.837851][T24259] netlink: 'syz.4.3958': attribute type 1 has an invalid length. [ 721.853492][T24259] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3958'. [ 721.873060][T24259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3958'. [ 721.873683][T24259] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3958'. [ 721.909629][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.909914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 721.975490][T24261] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 722.113911][T24263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 722.336268][T24267] syz_tun: entered allmulticast mode [ 722.506652][T24277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3960'. [ 722.617412][T24290] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3960'. [ 722.707490][T24277] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3960'. [ 722.719308][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.949674][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.949942][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.181939][T24307] vlan0: entered promiscuous mode [ 723.182168][T24307] vlan0: entered allmulticast mode [ 723.182186][T24307] veth0_vlan: entered allmulticast mode [ 723.569913][T24320] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3969'. [ 723.593215][T24324] IPv6: Can't replace route, no match found [ 723.851441][T24320] hsr_slave_0 (unregistering): left promiscuous mode [ 724.263700][T24341] netlink: 'syz.1.3978': attribute type 18 has an invalid length. [ 724.340857][T24350] netlink: 'syz.1.3978': attribute type 18 has an invalid length. [ 724.342334][T24347] netlink: 'syz.1.3978': attribute type 18 has an invalid length. [ 724.762054][T24338] syzkaller0: entered promiscuous mode [ 724.762081][T24338] syzkaller0: entered allmulticast mode [ 724.789888][T24342] tipc: Enabled bearer , priority 0 [ 724.863888][T24338] tipc: Resetting bearer [ 725.116551][T24335] tipc: Resetting bearer [ 725.315604][T24335] tipc: Disabling bearer [ 725.908930][ T8008] net_ratelimit: 9 callbacks suppressed [ 725.908952][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.909158][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.207739][T24401] x_tables: duplicate underflow at hook 2 [ 726.510617][T24409] __nla_validate_parse: 7 callbacks suppressed [ 726.510641][T24409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3991'. [ 726.787364][T24416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.788055][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.951248][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.951477][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.037203][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.132268][T24427] netlink: 'syz.2.3998': attribute type 1 has an invalid length. [ 727.132293][T24427] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3998'. [ 727.132309][T24427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3998'. [ 727.137236][T24427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3998'. [ 727.690907][T24443] xt_l2tp: invalid flags combination: 8 [ 727.729027][T24443] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4000'. [ 727.911257][T24454] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4005'. [ 727.989789][ T8010] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 727.990049][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.184821][T24459] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4010'. [ 728.232317][T24462] veth1_to_bond: entered allmulticast mode [ 728.273815][T24459] bond5: entered promiscuous mode [ 728.273840][T24459] bond5: entered allmulticast mode [ 728.274121][T24462] veth1_to_bond: entered promiscuous mode [ 728.341672][T24468] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4008'. [ 728.654101][T24465] lo speed is unknown, defaulting to 1000 [ 728.757642][T24478] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.4011'. [ 729.029992][ T8008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.131858][T24494] xt_TCPMSS: Only works on TCP SYN packets [ 729.410399][T24506] netlink: 'syz.4.4016': attribute type 49 has an invalid length. [ 729.474565][T24460] veth1_to_bond: left promiscuous mode [ 729.478017][T24487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4013'. [ 729.504218][T24460] veth1_to_bond: left allmulticast mode [ 729.924814][T24516] netlink: 'syz.1.4018': attribute type 1 has an invalid length. [ 730.033789][T24514] v: renamed from veth0_vlan [ 730.090497][T24529] netlink: 'syz.4.4021': attribute type 1 has an invalid length. [ 730.692204][T24548] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 730.717231][T24548] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 730.731245][T24548] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 731.069019][T24559] netlink: 'syz.0.4029': attribute type 15 has an invalid length. [ 731.108854][ T922] net_ratelimit: 10 callbacks suppressed [ 731.108877][ T922] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.109091][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.187224][T24559] netlink: 'syz.0.4029': attribute type 15 has an invalid length. [ 731.202136][T15961] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 731.208188][T15961] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 731.208242][T15961] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 731.208280][T15961] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 731.349524][T15961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.349735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 731.421914][ T1290] IPVS: starting estimator thread 0... [ 731.508747][T24580] IPVS: using max 24 ests per chain, 57600 per kthread [ 731.535675][T24586] __nla_validate_parse: 10 callbacks suppressed [ 731.535698][T24586] netlink: 284 bytes leftover after parsing attributes in process `syz.0.4035'. [ 731.565651][T24571] syzkaller0: entered promiscuous mode [ 731.565687][T24571] syzkaller0: entered allmulticast mode [ 731.651625][T24567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4031'. [ 731.717962][T24591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4035'. [ 731.975979][T24600] bridge_slave_1: left allmulticast mode [ 731.976010][T24600] bridge_slave_1: left promiscuous mode [ 731.976979][T24600] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.015437][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4036'. [ 732.078867][T24600] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 732.544474][T24609] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4038'. [ 732.544513][T24609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4038'. [ 732.610379][T24609] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4038'. [ 732.611895][ T5281] v: left promiscuous mode [ 732.642528][ T922] v: entered promiscuous mode [ 733.127128][ T9302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.294740][T24633] x_tables: duplicate entry at hook 1 [ 733.331013][T24635] syzkaller0: entered promiscuous mode [ 733.331039][T24635] syzkaller0: entered allmulticast mode [ 733.380662][T24635] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4041'. [ 733.545110][T24651] syzkaller1: entered promiscuous mode [ 733.545138][T24651] syzkaller1: entered allmulticast mode [ 733.686616][T24657] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4044'. [ 733.705888][T24650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4044'. [ 734.552665][T11090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.552921][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.822537][T24686] netlink: 'syz.3.4052': attribute type 3 has an invalid length. [ 734.840488][T24687] Bluetooth: hci0: unsupported parameter 1280 [ 734.840510][T24687] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 736.149213][ T7199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.264634][T24736] sctp: [Deprecated]: syz.1.4058 (pid 24736) Use of struct sctp_assoc_value in delayed_ack socket option. [ 736.264634][T24736] Use struct sctp_sack_info instead [ 736.680838][T24746] netlink: 'syz.2.4061': attribute type 3 has an invalid length. [ 737.047033][T24760] __nla_validate_parse: 2 callbacks suppressed [ 737.047069][T24760] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4065'. [ 737.111585][T15979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.111808][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.156773][T15979] IPVS: starting estimator thread 0... [ 737.259501][T24770] IPVS: using max 26 ests per chain, 62400 per kthread [ 737.607910][T24783] x_tables: duplicate underflow at hook 2 [ 738.176892][T24802] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4072'. [ 738.833769][T24821] ip6gretap0: left promiscuous mode [ 738.850171][T24821] bridge0: port 3(bond0) entered blocking state [ 738.850301][T24821] bridge0: port 3(bond0) entered forwarding state [ 738.850954][T24821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 738.853097][T24821] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.123959][T24821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 739.156090][T24821] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 739.199976][ T7199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.296739][T24840] netlink: 'syz.2.4078': attribute type 1 has an invalid length. [ 739.323480][T15960] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.323619][T15960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.345708][T15960] bridge0: port 4(vlan4) entered blocking state [ 739.345821][T15960] bridge0: port 4(vlan4) entered forwarding state [ 739.376230][T15960] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.376415][T15960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.513778][T24840] 8021q: adding VLAN 0 to HW filter on device bond5 [ 739.655303][T24842] bond5: (slave veth5): Enslaving as an active interface with a down link [ 739.739764][T24842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4078'. [ 739.796368][T24843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.807950][T24843] bond5: (slave batadv0): making interface the new active one [ 739.818375][T24843] batadv0: entered promiscuous mode [ 739.825261][T24843] bond5: (slave batadv0): Enslaving as an active interface with an up link [ 739.949342][T24857] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.190246][T24842] bond5 (unregistering): (slave veth5): Releasing active interface [ 740.281055][T24842] bond5 (unregistering): (slave batadv0): Releasing active interface [ 740.281089][T24842] batadv0: left promiscuous mode [ 740.313102][T24842] bond5 (unregistering): Released all slaves [ 740.317812][T15960] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 740.318035][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 741.720102][T24911] netlink: 'syz.2.4089': attribute type 1 has an invalid length. [ 741.957947][T24910] 8021q: adding VLAN 0 to HW filter on device bond6 [ 741.968397][T24910] bond5: (slave bond6): making interface the new active one [ 741.976909][T24910] bond5: (slave bond6): Enslaving as an active interface with an up link [ 742.007595][T24917] bond5: (slave gretap1): Enslaving as a backup interface with an up link [ 742.153863][T24910] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4089'. [ 742.177825][T24910] 8021q: adding VLAN 0 to HW filter on device bond5 [ 742.263335][T24910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.263511][T24910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.263784][T24910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.280069][ T7199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.546916][T24910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.547137][T24910] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.644316][T24930] ip_tables: iptables: counters copy to user failed while replacing table [ 742.662538][T24931] ip_tables: iptables: counters copy to user failed while replacing table [ 742.716784][T24930] ip6tnl0: Caught tx_queue_len zero misconfig [ 742.883735][T11090] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.884060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 743.927092][T24954] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4099'. [ 743.949025][T24954] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4099'. [ 744.224731][T24960] bond6 (unregistering): Released all slaves [ 744.519135][T24975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4103'. [ 744.875435][T24975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4103'. [ 744.875675][T15979] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.875722][T15979] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.875761][T15979] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 744.875798][T15979] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 745.034355][T24988] syz_tun: entered allmulticast mode [ 745.090353][T24954] netlink: 'syz.2.4099': attribute type 12 has an invalid length. [ 745.410193][T24996] netlink: 'syz.3.4108': attribute type 10 has an invalid length. [ 745.642771][T25001] lo speed is unknown, defaulting to 1000 [ 745.704110][T25007] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4112'. [ 745.704137][T25007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4112'. [ 745.952572][T25012] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4113'. [ 746.411645][T25017] netlink: 'syz.0.4114': attribute type 1 has an invalid length. [ 746.440778][T25017] netlink: 'syz.0.4114': attribute type 1 has an invalid length. [ 746.441804][T25017] netlink: 'syz.0.4114': attribute type 1 has an invalid length. [ 746.494322][T25017] netlink: 'syz.0.4114': attribute type 1 has an invalid length. [ 746.494642][T25017] netlink: 'syz.0.4114': attribute type 1 has an invalid length. [ 746.494903][T25017] netlink: 'syz.0.4114': attribute type 1 has an invalid length. [ 746.497092][T25017] netlink: 'syz.0.4114': attribute type 1 has an invalid length. [ 746.818412][T25022] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4115'. [ 747.104029][T25035] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4119'. [ 747.124448][ T5626] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 748.099561][T25056] netlink: 35 bytes leftover after parsing attributes in process `syz.2.4126'. [ 748.127682][T25056] net_ratelimit: 8 callbacks suppressed [ 748.127704][T25056] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.128010][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.429256][ T9302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.568072][T25067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4130'. [ 748.622691][T25067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4130'. [ 748.622725][T25067] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 748.637320][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.637924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 748.731984][T25067] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4130'. [ 748.732019][T25067] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 748.755954][T25073] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4132'. [ 748.998412][T25077] validate_nla: 58 callbacks suppressed [ 748.999593][T25077] netlink: 'syz.2.4133': attribute type 1 has an invalid length. [ 749.000361][T25077] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4133'. [ 749.173773][T25083] netlink: 'syz.4.4135': attribute type 34 has an invalid length. [ 749.173802][T25083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4135'. [ 749.242903][T25083] bond6: option lacp_strict: invalid value (16) [ 749.244752][T25083] bond6 (unregistering): Released all slaves [ 749.465510][T25097] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4137'. [ 749.847599][T25108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4139'. [ 749.989068][T11090] wlan0: Trigger new scan to find an IBSS to join [ 750.148277][T25109] vlan3: entered allmulticast mode [ 750.148303][T25109] bridge6: entered allmulticast mode [ 750.996490][T25128] sctp: [Deprecated]: syz.2.4144 (pid 25128) Use of struct sctp_assoc_value in delayed_ack socket option. [ 750.996490][T25128] Use struct sctp_sack_info instead [ 751.496415][T25122] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4143'. [ 751.519844][ T9302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.837191][T11086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 751.837409][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.221951][T25144] netlink: 'syz.1.4150': attribute type 11 has an invalid length. [ 752.746621][T25145] 8021q: adding VLAN 0 to HW filter on device bond2 [ 752.762251][T25145] 8021q: adding VLAN 0 to HW filter on device bond3 [ 752.823943][T15961] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 752.920625][T25191] Cannot find add_set index 0 as target [ 752.981675][T12756] wlan0: Trigger new scan to find an IBSS to join [ 754.137781][T25219] xt_hashlimit: overflow, try lower: 4294967294/0 [ 754.394183][T15961] net_ratelimit: 3 callbacks suppressed [ 754.394206][T15961] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.394421][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.501874][T25235] __nla_validate_parse: 1 callbacks suppressed [ 754.501898][T25235] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4159'. [ 754.549577][ T9302] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.946514][T25238] syzkaller0: entered promiscuous mode [ 754.946727][T25238] syzkaller0: entered allmulticast mode [ 755.236458][T25261] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4165'. [ 755.248900][T25261] 0·: renamed from hsr0 (while UP) [ 755.282038][T25261] 0·: entered allmulticast mode [ 755.282065][T25261] hsr_slave_0: entered allmulticast mode [ 755.282459][T25261] hsr_slave_1: entered allmulticast mode [ 755.294006][T25261] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 755.487086][T25261] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4165'. [ 755.487214][T25261] 1·: renamed from c0· (while UP) [ 755.690957][T25261] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 755.715589][T25269] netlink: 'syz.2.4166': attribute type 3 has an invalid length. [ 755.989031][T15953] wlan0: Trigger new scan to find an IBSS to join [ 756.320771][T25193] infiniband syz1: set down [ 756.320798][T25193] infiniband syz1: added ipvlan0 [ 756.413637][T25193] [ 756.416029][T25193] ====================================================== [ 756.423105][T25193] WARNING: possible circular locking dependency detected [ 756.430160][T25193] syzkaller #0 Not tainted [ 756.434598][T25193] ------------------------------------------------------ [ 756.441641][T25193] syz.3.4154/25193 is trying to acquire lock: [ 756.447725][T25193] ffffffff8ee904e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720 [ 756.456830][T25193] [ 756.456830][T25193] but task is already holding lock: [ 756.464219][T25193] ffffffff8ebf9100 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 756.473711][T25193] [ 756.473711][T25193] which lock already depends on the new lock. [ 756.473711][T25193] [ 756.484162][T25193] [ 756.484162][T25193] the existing dependency chain (in reverse order) is: [ 756.493211][T25193] [ 756.493211][T25193] -> #7 (wq_pool_mutex){+.+.}-{4:4}: [ 756.500809][T25193] __mutex_lock+0x19d/0x1550 [ 756.506159][T25193] __alloc_workqueue+0xa4f/0x1fe0 [ 756.511832][T25193] alloc_workqueue_noprof+0xe3/0x210 [ 756.517680][T25193] padata_alloc+0xbe/0x360 [ 756.522681][T25193] pcrypt_init_padata+0x27/0x100 [ 756.528349][T25193] pcrypt_init+0x60/0xc0 [ 756.533249][T25193] do_one_initcall+0x250/0x870 [ 756.538578][T25193] do_initcall_level+0x10a/0x1a0 [ 756.544118][T25193] do_initcalls+0x59/0xa0 [ 756.549022][T25193] kernel_init_freeable+0x29d/0x3e0 [ 756.554942][T25193] kernel_init+0x22/0x1d0 [ 756.559820][T25193] ret_from_fork+0x514/0xb70 [ 756.564988][T25193] ret_from_fork_asm+0x1a/0x30 [ 756.570319][T25193] [ 756.570319][T25193] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 756.578090][T25193] cpus_read_lock+0x42/0x160 [ 756.583237][T25193] static_key_slow_inc+0x12/0x30 [ 756.588744][T25193] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 756.595240][T25193] nbd_genl_foreach_sock+0x265/0x450 [ 756.601114][T25193] nbd_genl_reconfigure+0xbbb/0x1040 [ 756.607053][T25193] genl_family_rcv_msg_doit+0x233/0x340 [ 756.613277][T25193] genl_rcv_msg+0x614/0x7a0 [ 756.618351][T25193] netlink_rcv_skb+0x226/0x4a0 [ 756.623691][T25193] genl_rcv+0x28/0x40 [ 756.628239][T25193] netlink_unicast+0x7bd/0x940 [ 756.633631][T25193] netlink_sendmsg+0x813/0xb40 [ 756.638951][T25193] sock_sendmsg_nosec+0x13a/0x180 [ 756.644530][T25193] ____sys_sendmsg+0x54e/0x850 [ 756.649873][T25193] ___sys_sendmsg+0x2a5/0x360 [ 756.655194][T25193] __x64_sys_sendmsg+0x1b1/0x290 [ 756.660692][T25193] do_syscall_64+0x166/0x520 [ 756.665844][T25193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.672299][T25193] [ 756.672299][T25193] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 756.680168][T25193] __mutex_lock+0x19d/0x1550 [ 756.685417][T25193] nbd_queue_rq+0x373/0xff0 [ 756.690499][T25193] blk_mq_dispatch_rq_list+0x499/0x1990 [ 756.696757][T25193] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 756.703706][T25193] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 756.710252][T25193] blk_mq_run_work_fn+0x16c/0x300 [ 756.715844][T25193] process_scheduled_works+0xc3d/0x1630 [ 756.721970][T25193] worker_thread+0xa47/0xfb0 [ 756.727132][T25193] kthread+0x38b/0x480 [ 756.731750][T25193] ret_from_fork+0x514/0xb70 [ 756.736987][T25193] ret_from_fork_asm+0x1a/0x30 [ 756.742400][T25193] [ 756.742400][T25193] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 756.749650][T25193] __mutex_lock+0x19d/0x1550 [ 756.754837][T25193] nbd_queue_rq+0xc1/0xff0 [ 756.759808][T25193] blk_mq_dispatch_rq_list+0x499/0x1990 [ 756.765997][T25193] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 756.772886][T25193] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 756.779429][T25193] blk_mq_run_work_fn+0x16c/0x300 [ 756.785013][T25193] process_scheduled_works+0xc3d/0x1630 [ 756.791116][T25193] worker_thread+0xa47/0xfb0 [ 756.796412][T25193] kthread+0x38b/0x480 [ 756.801030][T25193] ret_from_fork+0x514/0xb70 [ 756.806178][T25193] ret_from_fork_asm+0x1a/0x30 [ 756.811505][T25193] [ 756.811505][T25193] -> #3 (set->srcu){.+.+}-{0:0}: [ 756.818675][T25193] __synchronize_srcu+0xc9/0x2f0 [ 756.824165][T25193] elevator_switch+0x1e8/0x7b0 [ 756.829552][T25193] elevator_change+0x2fa/0x480 [ 756.834957][T25193] elevator_set_default+0x375/0x440 [ 756.840725][T25193] blk_register_queue+0x3f3/0x4e0 [ 756.846370][T25193] __add_disk+0x6b8/0xdb0 [ 756.851256][T25193] add_disk_fwnode+0x100/0x3a0 [ 756.856584][T25193] nbd_dev_add+0x733/0xb60 [ 756.861633][T25193] nbd_init+0x168/0x1f0 [ 756.866433][T25193] do_one_initcall+0x250/0x870 [ 756.871759][T25193] do_initcall_level+0x10a/0x1a0 [ 756.877250][T25193] do_initcalls+0x59/0xa0 [ 756.882137][T25193] kernel_init_freeable+0x29d/0x3e0 [ 756.887972][T25193] kernel_init+0x22/0x1d0 [ 756.892874][T25193] ret_from_fork+0x514/0xb70 [ 756.898103][T25193] ret_from_fork_asm+0x1a/0x30 [ 756.903556][T25193] [ 756.903556][T25193] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 756.911424][T25193] __mutex_lock+0x19d/0x1550 [ 756.916603][T25193] elevator_change+0x1af/0x480 [ 756.921934][T25193] elevator_set_none+0xb5/0x140 [ 756.927349][T25193] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 756.933853][T25193] nbd_start_device+0x189/0xb30 [ 756.939263][T25193] nbd_genl_connect+0x167d/0x1cd0 [ 756.945104][T25193] genl_family_rcv_msg_doit+0x233/0x340 [ 756.951223][T25193] genl_rcv_msg+0x614/0x7a0 [ 756.956385][T25193] netlink_rcv_skb+0x226/0x4a0 [ 756.961711][T25193] genl_rcv+0x28/0x40 [ 756.966359][T25193] netlink_unicast+0x7bd/0x940 [ 756.971693][T25193] netlink_sendmsg+0x813/0xb40 [ 756.977018][T25193] sock_sendmsg_nosec+0x13a/0x180 [ 756.982611][T25193] ____sys_sendmsg+0x54e/0x850 [ 756.987976][T25193] ___sys_sendmsg+0x2a5/0x360 [ 756.993231][T25193] __x64_sys_sendmsg+0x1b1/0x290 [ 756.999613][T25193] do_syscall_64+0x166/0x520 [ 757.004786][T25193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.011776][T25193] [ 757.011776][T25193] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 757.020439][T25193] blk_alloc_queue+0x544/0x690 [ 757.025853][T25193] __blk_mq_alloc_disk+0x194/0x390 [ 757.031534][T25193] nbd_dev_add+0x494/0xb60 [ 757.036510][T25193] nbd_init+0x168/0x1f0 [ 757.041244][T25193] do_one_initcall+0x250/0x870 [ 757.046583][T25193] do_initcall_level+0x10a/0x1a0 [ 757.052088][T25193] do_initcalls+0x59/0xa0 [ 757.056979][T25193] kernel_init_freeable+0x29d/0x3e0 [ 757.062734][T25193] kernel_init+0x22/0x1d0 [ 757.067620][T25193] ret_from_fork+0x514/0xb70 [ 757.072769][T25193] ret_from_fork_asm+0x1a/0x30 [ 757.078110][T25193] [ 757.078110][T25193] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 757.085362][T25193] __lock_acquire+0x164c/0x2de0 [ 757.090811][T25193] lock_acquire+0x115/0x350 [ 757.095873][T25193] fs_reclaim_acquire+0x71/0x100 [ 757.101384][T25193] __kmalloc_noprof+0xbc/0x720 [ 757.106704][T25193] apply_wqattrs_prepare+0xee/0xdc0 [ 757.112457][T25193] __alloc_workqueue+0x11be/0x1fe0 [ 757.118122][T25193] alloc_workqueue_noprof+0xe3/0x210 [ 757.124048][T25193] ib_mad_init_device+0x993/0x2150 [ 757.129826][T25193] add_client_context+0x37c/0x7b0 [ 757.135443][T25193] enable_device_and_get+0x19c/0x3e0 [ 757.141339][T25193] ib_register_device+0xdc8/0x1080 [ 757.147033][T25193] rxe_register_device+0x1e3/0x350 [ 757.152866][T25193] rxe_net_add+0x81/0x110 [ 757.157875][T25193] rxe_newlink+0xf4/0x1c0 [ 757.162886][T25193] nldev_newlink+0x5be/0x650 [ 757.168117][T25193] rdma_nl_rcv+0x6ef/0xa40 [ 757.173135][T25193] netlink_unicast+0x7bd/0x940 [ 757.178474][T25193] netlink_sendmsg+0x813/0xb40 [ 757.183793][T25193] sock_sendmsg_nosec+0x13a/0x180 [ 757.189396][T25193] ____sys_sendmsg+0x54e/0x850 [ 757.194729][T25193] ___sys_sendmsg+0x2a5/0x360 [ 757.199969][T25193] __x64_sys_sendmsg+0x1b1/0x290 [ 757.205487][T25193] do_syscall_64+0x166/0x520 [ 757.210644][T25193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.217093][T25193] [ 757.217093][T25193] other info that might help us debug this: [ 757.217093][T25193] [ 757.227348][T25193] Chain exists of: [ 757.227348][T25193] fs_reclaim --> cpu_hotplug_lock --> wq_pool_mutex [ 757.227348][T25193] [ 757.239910][T25193] Possible unsafe locking scenario: [ 757.239910][T25193] [ 757.247385][T25193] CPU0 CPU1 [ 757.252847][T25193] ---- ---- [ 757.258262][T25193] lock(wq_pool_mutex); [ 757.262629][T25193] lock(cpu_hotplug_lock); [ 757.269701][T25193] lock(wq_pool_mutex); [ 757.276511][T25193] lock(fs_reclaim); [ 757.280537][T25193] [ 757.280537][T25193] *** DEADLOCK *** [ 757.280537][T25193] [ 757.288713][T25193] locks held by syz.3.4154/25193: 6, last CPU#1: [ 757.295073][T25193] #0: ffffffff9ad93c88 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40 [ 757.305139][T25193] #1: ffffffff8ffb0b08 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42b/0x650 [ 757.314590][T25193] #2: ffffffff8ffa1c28 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 757.324656][T25193] #3: ffffffff8ffa1f28 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0 [ 757.334786][T25193] #4: ffff88802bd18658 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33e/0x7b0 [ 757.345708][T25193] #5: ffffffff8ebf9100 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 757.355571][T25193] [ 757.355571][T25193] stack backtrace: [ 757.361500][T25193] CPU: 1 UID: 0 PID: 25193 Comm: syz.3.4154 Not tainted syzkaller #0 PREEMPT(full) [ 757.370896][T25193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 757.380973][T25193] Call Trace: [ 757.384276][T25193] [ 757.387452][T25193] dump_stack_lvl+0xe8/0x150 [ 757.392099][T25193] print_circular_bug+0x2e2/0x300 [ 757.397178][T25193] check_noncircular+0x12f/0x150 [ 757.402151][T25193] __lock_acquire+0x164c/0x2de0 [ 757.407111][T25193] ? check_path+0x21/0x40 [ 757.411459][T25193] ? check_noncircular+0xdb/0x150 [ 757.416510][T25193] ? lockdep_unlock+0x5c/0xd0 [ 757.421225][T25193] lock_acquire+0x115/0x350 [ 757.425758][T25193] ? __kmalloc_noprof+0xbc/0x720 [ 757.430718][T25193] ? pcpu_alloc_noprof+0xde2/0x1900 [ 757.435945][T25193] ? apply_wqattrs_prepare+0xee/0xdc0 [ 757.441345][T25193] fs_reclaim_acquire+0x71/0x100 [ 757.446305][T25193] ? __kmalloc_noprof+0xbc/0x720 [ 757.451263][T25193] __kmalloc_noprof+0xbc/0x720 [ 757.456078][T25193] ? apply_wqattrs_prepare+0xee/0xdc0 [ 757.461473][T25193] ? apply_wqattrs_prepare+0xee/0xdc0 [ 757.466874][T25193] apply_wqattrs_prepare+0xee/0xdc0 [ 757.472096][T25193] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 757.478104][T25193] ? pcpu_alloc_noprof+0x100f/0x1900 [ 757.483421][T25193] ? pcpu_alloc_noprof+0x1036/0x1900 [ 757.488827][T25193] __alloc_workqueue+0x11be/0x1fe0 [ 757.493970][T25193] alloc_workqueue_noprof+0xe3/0x210 [ 757.499308][T25193] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 757.505412][T25193] ? __ib_alloc_pd+0x451/0x5c0 [ 757.510298][T25193] ib_mad_init_device+0x993/0x2150 [ 757.515448][T25193] ? __pfx_ib_mad_init_device+0x10/0x10 [ 757.521017][T25193] ? do_raw_spin_unlock+0xf5/0x200 [ 757.526159][T25193] ? _raw_spin_unlock+0x28/0x50 [ 757.531029][T25193] add_client_context+0x37c/0x7b0 [ 757.536163][T25193] ? __pfx_add_client_context+0x10/0x10 [ 757.541740][T25193] ? xa_find+0x25b/0x2b0 [ 757.546008][T25193] enable_device_and_get+0x19c/0x3e0 [ 757.551330][T25193] ? __pfx_enable_device_and_get+0x10/0x10 [ 757.557171][T25193] ? device_add+0x6f6/0xb80 [ 757.561772][T25193] ib_register_device+0xdc8/0x1080 [ 757.566922][T25193] ? __pfx_ib_register_device+0x10/0x10 [ 757.572494][T25193] ? ib_device_set_netdev+0x5c9/0x6d0 [ 757.577913][T25193] rxe_register_device+0x1e3/0x350 [ 757.583047][T25193] rxe_net_add+0x81/0x110 [ 757.587394][T25193] rxe_newlink+0xf4/0x1c0 [ 757.591747][T25193] nldev_newlink+0x5be/0x650 [ 757.596369][T25193] ? __pfx_nldev_newlink+0x10/0x10 [ 757.601550][T25193] ? apparmor_capable+0x126/0x170 [ 757.606683][T25193] ? security_capable+0x7e/0x2c0 [ 757.611702][T25193] ? __pfx_nldev_newlink+0x10/0x10 [ 757.616849][T25193] rdma_nl_rcv+0x6ef/0xa40 [ 757.621302][T25193] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 757.626309][T25193] ? netlink_deliver_tap+0x2e/0x1b0 [ 757.631535][T25193] ? netlink_deliver_tap+0x2e/0x1b0 [ 757.636780][T25193] netlink_unicast+0x7bd/0x940 [ 757.641578][T25193] netlink_sendmsg+0x813/0xb40 [ 757.646375][T25193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.651682][T25193] ? apparmor_socket_sendmsg+0x98/0x360 [ 757.657256][T25193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 757.662576][T25193] sock_sendmsg_nosec+0x13a/0x180 [ 757.667621][T25193] ____sys_sendmsg+0x54e/0x850 [ 757.672502][T25193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 757.677818][T25193] ? import_iovec+0x73/0xa0 [ 757.682415][T25193] ___sys_sendmsg+0x2a5/0x360 [ 757.687122][T25193] ? __lock_acquire+0x747/0x2de0 [ 757.692079][T25193] ? __pfx____sys_sendmsg+0x10/0x10 [ 757.697305][T25193] ? futex_wait+0x2a2/0x390 [ 757.701867][T25193] ? __fget_files+0x2a/0x420 [ 757.706486][T25193] ? __fget_files+0x3a2/0x420 [ 757.711190][T25193] __x64_sys_sendmsg+0x1b1/0x290 [ 757.716157][T25193] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 757.721660][T25193] do_syscall_64+0x166/0x520 [ 757.726278][T25193] ? trace_irq_disable+0x3b/0x140 [ 757.731318][T25193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.737400][T25193] ? clear_bhb_loop+0x70/0xc0 [ 757.742097][T25193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.748008][T25193] RIP: 0033:0x7f362cf9e159 [ 757.752441][T25193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.772080][T25193] RSP: 002b:00007f362deb9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 757.780518][T25193] RAX: ffffffffffffffda RBX: 00007f362d226180 RCX: 00007f362cf9e159 [ 757.788684][T25193] RDX: 0000000000040084 RSI: 0000200000000180 RDI: 0000000000000003 [ 757.796670][T25193] RBP: 00007f362d03506b R08: 0000000000000000 R09: 0000000000000000 [ 757.804753][T25193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.812754][T25193] R13: 00007f362d226218 R14: 00007f362d226180 R15: 00007ffc64b8cc78 [ 757.820760][T25193] [ 757.826332][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 757.838546][ T7199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.896129][T11086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.896280][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.896320][T25193] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 757.898210][T25193] infiniband syz1: Couldn't open port 1 [ 757.898369][T25193] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 757.898404][T25193] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 758.012894][T25193] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 758.068979][T25193] RDS/IB: syz1: added [ 758.069027][T25193] smc: adding ib device syz1 with port count 1 [ 758.069048][T25193] smc: ib device syz1 port 1 has no pnetid [ 758.408899][T15953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.149785][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.149946][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.878814][ T7199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 761.172607][T25269] Set syz1 is full, maxelem 65536 reached [ 763.359296][T15979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.359486][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.908956][ T7199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.189567][T12756] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.189735][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog