last executing test programs: 2.897679269s ago: executing program 3 (id=733): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) shutdown(r1, 0x1) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140), 0x0, 0x24040000, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001580)=@generic={&(0x7f0000001540)='./file0\x00', 0x0, 0x18}, 0x18) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000001740)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001600)={0xe8, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_ID={0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}]}, @CTA_STATUS={0x8}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}]}, 0xe8}, 0x1, 0x0, 0x0, 0x404c040}, 0xc004010) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310328bd7000fbdbdf250200"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 2.886972871s ago: executing program 2 (id=734): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(0xffffffffffffffff, &(0x7f00000000c0)="29000000140005b7ff000000040860eb0101b6ff02159f02c26ed638eeb7", 0x1e) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) 2.607081932s ago: executing program 2 (id=736): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/107, 0x6b}], 0x1) sendmmsg$inet(r0, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="a1bb036d6753aa32d58fc8443aeef5ec478a1ab44b508b1f23d81c95369fdf2da8b5da85604516e1848194a5eca5dce17c8ac0cb57472c7b91bd618f16ad", 0x3e}, {&(0x7f0000000340)="e919a6cc1f3824abcfa7bc88ed23362261539b6e241a54b16d63ab76ee0023e532d5f6c79a9bbe9df89f303c02f04bccb054fc2ae2355817b23ee90b3b9555cc78ff", 0x42}], 0x2}}], 0x1, 0x0) 2.224659117s ago: executing program 3 (id=740): r0 = socket(0x1d, 0x3, 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="200226bdf000fddbdf250600deff0a6817912c17e5c4979c3e5d7a67d5fc0bdd3645f7a55370d0249b386a1f4fe17acbc233a6dfe358f197aa25cf27a4b7322b1ea50dc82b13665064eb02e362587d10e4511cb64026158269fb9971fd08d981c420c108a126f95ed5d76aa08091fa6d4382476eca8191c274d0a8cf7abcebeba63e9f648b2fb5"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x24001800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe) preadv(r2, &(0x7f0000000100), 0xa, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x5}, 0x90) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendfile(r6, r5, &(0x7f0000000b80)=0x1349cdec, 0x80000001) r7 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2}}}}) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001c00)=""/4096, 0x1000, 0x1, &(0x7f0000000340)=""/198, 0xc6}, &(0x7f0000000440)=0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r10, 0x400, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffff7}]}, 0x24}}, 0x0) 2.116934591s ago: executing program 0 (id=741): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket(0x9, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRES64=r0, @ANYRESHEX=r0, @ANYRES64], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x9, 0x4, &(0x7f0000000700)=ANY=[], &(0x7f0000000900)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x5, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0), &(0x7f00000008c0)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x404c881}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r4, 0x0, 0x0, 0xee) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000000)={0x2001, 0x0, 0x1}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) bind$tipc(r5, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r7, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x1004) 2.002940066s ago: executing program 0 (id=745): r0 = socket(0x1d, 0x3, 0x1) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="200226bdf000fddbdf250600deff0a6817912c17e5c4979c3e5d7a67d5fc0bdd3645f7a55370d0249b386a1f4fe17acbc233a6dfe358f197aa25cf27a4b7322b1ea50dc82b13665064eb02e362587d10e4511cb64026158269fb9971fd08d981c420c108a126f95ed5d76aa08091fa6d4382476eca8191c274d0a8cf7abcebeba63e9f648b2fb57f074bd5cd8e1a3349dd5a406c2093f8269bd0f9bd0943"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x24001800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000300)='cgroup.controllers\x00', 0x275a, 0xfffe) preadv(r2, &(0x7f0000000100), 0xa, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x7, 0x5}, 0x90) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendfile(r6, r5, &(0x7f0000000b80)=0x1349cdec, 0x80000001) r7 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x60, 0x0, 0x0, 0x2f, 0x0, @empty, @multicast2}}}}) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r8, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001c00)=""/4096, 0x1000, 0x1, &(0x7f0000000340)=""/198, 0xc6}, &(0x7f0000000440)=0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x78}}, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r10, 0x400, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0xfffffff7}]}, 0x24}}, 0x0) 1.842882906s ago: executing program 3 (id=748): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000380)={0x1, 0x28c9, 0x0, 0x8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x3ff) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xffffff23, &(0x7f0000000200)}, 0x10) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc1888000) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x12123, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.618001695s ago: executing program 2 (id=751): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) 1.61212025s ago: executing program 0 (id=752): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x46, &(0x7f0000000980)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "400005", 0x10, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, @mcast2, {[], @ni={0x8c, 0x0, 0x0, 0x3, 0x6, 0x8}}}}}}, 0x0) 1.474144356s ago: executing program 1 (id=753): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x8040480) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, 0x0) 1.404177801s ago: executing program 1 (id=754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x201, 0x10000000, 0x1000, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)}], 0x1}, 0x4011) 1.19356265s ago: executing program 4 (id=756): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003940)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000140)="ecf949f7d06a7d6d75d2c36b6c85e6cb5c5a8dfe92b1f850aa85b88ff8ef18a5c091f5c3ed2946809623f1ef724094403e5226de9f9783c17952ed1be43a064a51228beef3f5c2f2cb979325754e62b9f91e7d93427eaf79060a07a7689794d919ea4c564475b2af228a2b2139a195045672eb3971a0e4452bf41ae136846063e8c68c1967a6d4a4789c0bcedb3c4b71089f6c59d3f2d8b48a6d0736f8c7e62f0a986b3ccc31a9c206a9e09a12e254f8694867014c26ae43b36ce0eaf3cecc8d8a84861236668a68fd17f3", 0xcb}, {&(0x7f0000000240)="6d71ffadb2db4d61009de58dcae740fdf545", 0x12}, {&(0x7f0000000280)="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", 0x4cd}], 0x3}}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f0000001640)="88f5d4", 0x3}], 0x1}}], 0x2, 0x400ff8d) 1.129403315s ago: executing program 0 (id=757): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty, 0x1b}, 0x1c) 1.090273986s ago: executing program 4 (id=758): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r6, 0x28}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x8}], 0x2}, 0x5) 1.047123282s ago: executing program 1 (id=759): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000001500)=[{{&(0x7f0000000600)={0xa, 0x4e21, 0xffff, @private2, 0x401}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000640)="be", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000f80)=[{0x0}], 0x1}}], 0x2, 0x20044040) r2 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff000000", 0x36}], 0x1) 1.041482219s ago: executing program 0 (id=760): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x37}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r3, &(0x7f0000001500)=[{{&(0x7f0000000600)={0xa, 0x4e21, 0xffff, @private2, 0x401}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000640)="be", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000b80)='S', 0x1}], 0x1}}], 0x2, 0x20044040) r4 = socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x3, 0x300) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd2", 0x59}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x2}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) recvmmsg(r1, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20010020, 0x0) ioctl$int_out(r0, 0xa8c0, &(0x7f00000001c0)) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 1.013887506s ago: executing program 2 (id=761): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x129}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10000}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000) 857.479311ms ago: executing program 3 (id=762): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x58, r1, 0x1, 0x70bd29, 0x2ddfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 803.252191ms ago: executing program 4 (id=763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 757.707923ms ago: executing program 2 (id=764): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) shutdown(r1, 0x1) r3 = socket(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000140), 0x0, 0x24040000, 0x0, 0x0) getsockopt$bt_hci(r1, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001580)=@generic={&(0x7f0000001540)='./file0\x00', 0x0, 0x18}, 0x18) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000001740)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001600)={0xe8, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_ID={0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x3}, @CTA_TUPLE_REPLY={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}]}, @CTA_STATUS={0x8}, @CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}]}, 0xe8}, 0x1, 0x0, 0x0, 0x404c040}, 0xc004010) sendto$inet6(r6, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310328bd7000fbdbdf250200"], 0x78}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) 750.465373ms ago: executing program 1 (id=765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f000000a100)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x20}]}}}]}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 701.847142ms ago: executing program 3 (id=766): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(0x3) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="0209fa000400e6f0c0474078712ef2c3e024bd7000fedb5aa120c1cf7f32a23c1694fbabbc533b4e5f77bade49b0c9"], 0x20}}, 0x24000800) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8405d22596f37403}, 0x4054) 609.291503ms ago: executing program 4 (id=767): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="080008000600090000001400000045"], 0xfce) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020267b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fffffff88500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010000000000000000001d00000020000180140002006e657464657673696d3000000000000008"], 0x34}}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000c80)={@none, 0xfff, 0x6, 0x8, 0x5, 0x2, "3de3ec9ae3c724fe2f9bd0af27c8d617197ef4b2ed8bd6e0f603e646d7cb8a65f1c191f9f4a5810a2565ececbd771600ffd1edb59212f2874b480287ec294e84af5ce61f642cbd53aea036944ca0eefae708aad5e03d91cc8eccfd4ec4665065f52089208b99ebf8fd14645a3919cb804846ecde861b5e51324e355bc43721f9"}) bind$llc(r0, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip_vti0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) 545.360848ms ago: executing program 1 (id=768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b40)={0x64, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xb44}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 287.480399ms ago: executing program 4 (id=769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x201, 0x10000000, 0x1000, 0x8}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r3, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)}], 0x1}, 0x4011) 286.518758ms ago: executing program 1 (id=770): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd700000000040020000000800", @ANYRES32=r6, @ANYBLOB="0c009900d308000079000000080026006c0900000800a08d1d4a2a390800270002"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 241.565032ms ago: executing program 3 (id=771): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd700000000040020000000800", @ANYRES32=r6, @ANYBLOB="0c009900d308000079000000080026006c0900000800a08d1d4a2a390800270002"], 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010400000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c094) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdfffffffddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000042104020008001b000000000038001a8004002d8030000a80050008"], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 184.335489ms ago: executing program 2 (id=772): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000380)={0x1, 0x28c9, 0x0, 0x8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) socket(0x10, 0x3, 0x3ff) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0xd0}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xffffff23, &(0x7f0000000200)}, 0x10) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xc1888000) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x12123, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 81.125585ms ago: executing program 0 (id=773): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340)) r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x9, 0xc5, @vifc_lcl_ifindex=r1, @remote}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = getpid() sendmsg$nl_route(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@getlink={0x54, 0x12, 0x200, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x120, 0x100}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xf30e}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x1}, @IFLA_TXQLEN={0x8, 0xd, 0x8001}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x4}, @IFLA_IFALIASn={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) sendfile(r3, r2, 0x0, 0x10000) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xfff4, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x2, 0x401, 0x7ff, 0x20200, r2, 0x5, '\x00', r6, r7, 0x5, 0x3, 0x0, 0x5}, 0x50) unshare(0x6a040000) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) r9 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@getneigh={0x14, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x45844}, 0x0) sendmsg$key(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x2, 0x13, 0x0, 0xe, 0x2, 0x0, 0x0, 0x25dfdbf8}, 0x10}}, 0x4000050) 0s ago: executing program 4 (id=774): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0xa4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) kernel console output (not intermixed with test programs): unexpected cc 0x0c38 length: 249 > 2 [ 68.592573][ T5637] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.599055][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.613183][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.621585][ T5636] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.640380][ T5636] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.170498][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.178180][ T5623] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.185384][ T5623] bridge_slave_0: entered allmulticast mode [ 70.192304][ T5623] bridge_slave_0: entered promiscuous mode [ 70.234501][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.241969][ T5623] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.249210][ T5623] bridge_slave_1: entered allmulticast mode [ 70.256069][ T5623] bridge_slave_1: entered promiscuous mode [ 70.284158][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.291267][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.298461][ T5629] bridge_slave_0: entered allmulticast mode [ 70.305318][ T5629] bridge_slave_0: entered promiscuous mode [ 70.349440][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.356629][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.363804][ T5629] bridge_slave_1: entered allmulticast mode [ 70.370606][ T5629] bridge_slave_1: entered promiscuous mode [ 70.418879][ T5623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.477122][ T5623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.486420][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.493782][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.500870][ T5627] bridge_slave_0: entered allmulticast mode [ 70.508041][ T5627] bridge_slave_0: entered promiscuous mode [ 70.530510][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.548690][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.555858][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.563332][ T5627] bridge_slave_1: entered allmulticast mode [ 70.570137][ T5627] bridge_slave_1: entered promiscuous mode [ 70.595085][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.629586][ T5633] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.636824][ T5633] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.644230][ T5633] bridge_slave_0: entered allmulticast mode [ 70.651046][ T5633] bridge_slave_0: entered promiscuous mode [ 70.667713][ T5623] team0: Port device team_slave_0 added [ 70.673541][ T49] Bluetooth: hci1: command tx timeout [ 70.673658][ T49] Bluetooth: hci3: command tx timeout [ 70.679044][ T5625] Bluetooth: hci2: command tx timeout [ 70.684893][ T49] Bluetooth: hci0: command tx timeout [ 70.690313][ T5630] Bluetooth: hci4: command tx timeout [ 70.699857][ T5623] team0: Port device team_slave_1 added [ 70.715683][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.722980][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.730130][ T5628] bridge_slave_0: entered allmulticast mode [ 70.737307][ T5628] bridge_slave_0: entered promiscuous mode [ 70.744608][ T5633] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.751731][ T5633] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.759853][ T5633] bridge_slave_1: entered allmulticast mode [ 70.766802][ T5633] bridge_slave_1: entered promiscuous mode [ 70.790986][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.800262][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.807634][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.814825][ T5628] bridge_slave_1: entered allmulticast mode [ 70.821615][ T5628] bridge_slave_1: entered promiscuous mode [ 70.839367][ T5629] team0: Port device team_slave_0 added [ 70.855202][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.895522][ T5629] team0: Port device team_slave_1 added [ 70.901778][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.908831][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.934908][ T5623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.967183][ T5633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.984508][ T5623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.991444][ T5623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.017593][ T5623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.029961][ T5627] team0: Port device team_slave_0 added [ 71.038327][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.049577][ T5633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.077148][ T5627] team0: Port device team_slave_1 added [ 71.096515][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.114013][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.120950][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.146995][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.159161][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.166159][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.192356][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.235251][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.241848][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.258963][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.267052][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.292933][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.314412][ T5633] team0: Port device team_slave_0 added [ 71.330247][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.337373][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.363528][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.376038][ T5628] team0: Port device team_slave_0 added [ 71.383715][ T5633] team0: Port device team_slave_1 added [ 71.395248][ T5623] hsr_slave_0: entered promiscuous mode [ 71.401453][ T5623] hsr_slave_1: entered promiscuous mode [ 71.416673][ T5628] team0: Port device team_slave_1 added [ 71.453170][ T5629] hsr_slave_0: entered promiscuous mode [ 71.459598][ T5629] hsr_slave_1: entered promiscuous mode [ 71.465936][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 71.471689][ T5629] Cannot create hsr debugfs directory [ 71.520144][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.527147][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.553426][ T5633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.588977][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.596213][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.622272][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.633803][ T5633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.640752][ T5633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.667036][ T5633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.695846][ T5627] hsr_slave_0: entered promiscuous mode [ 71.702077][ T5627] hsr_slave_1: entered promiscuous mode [ 71.708194][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 71.714954][ T5627] Cannot create hsr debugfs directory [ 71.720995][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.728016][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.754154][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.926769][ T5628] hsr_slave_0: entered promiscuous mode [ 71.933227][ T5628] hsr_slave_1: entered promiscuous mode [ 71.939432][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 71.945220][ T5628] Cannot create hsr debugfs directory [ 71.970322][ T5633] hsr_slave_0: entered promiscuous mode [ 71.976491][ T5633] hsr_slave_1: entered promiscuous mode [ 71.982393][ T5633] debugfs: 'hsr0' already exists in 'hsr' [ 71.988156][ T5633] Cannot create hsr debugfs directory [ 72.311730][ T5623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.324215][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.332340][ T5623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.342184][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.367563][ T5623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.377167][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.385114][ T5623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.395062][ T5623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.473868][ T5629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.485439][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.493583][ T5629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.502429][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.510339][ T5629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.519949][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.527644][ T5629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.536929][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.615218][ T5627] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.624899][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.632652][ T5627] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.642373][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.650236][ T5627] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.659166][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.667593][ T5627] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.678068][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.753811][ T5630] Bluetooth: hci3: command tx timeout [ 72.754316][ T5636] Bluetooth: hci4: command tx timeout [ 72.759403][ T5625] Bluetooth: hci0: command tx timeout [ 72.764922][ T5643] Bluetooth: hci1: command tx timeout [ 72.772832][ T49] Bluetooth: hci2: command tx timeout [ 72.808398][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.826686][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.846645][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.857799][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.866252][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.877660][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.885411][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.894893][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.977315][ T5623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.016013][ T5633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.025346][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.036532][ T5633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.045906][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.054495][ T5633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.064309][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.072171][ T5633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.081129][ T5633] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.095351][ T5623] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.126611][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.133939][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.167831][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.193369][ T183] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.200473][ T183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.238316][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.251760][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.267647][ T183] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.274751][ T183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.298134][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.305232][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.359459][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.388350][ T183] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.395432][ T183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.419935][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.427108][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.496681][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.622168][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.646817][ T183] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.653972][ T183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.683263][ T5633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.713805][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.720929][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.789011][ T5633] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.836666][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.843816][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.882631][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.890011][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.229753][ T5623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.331170][ T5623] veth0_vlan: entered promiscuous mode [ 74.370888][ T5623] veth1_vlan: entered promiscuous mode [ 74.455315][ T5623] veth0_macvtap: entered promiscuous mode [ 74.486597][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.507380][ T5623] veth1_macvtap: entered promiscuous mode [ 74.605737][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.628738][ T5623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.684005][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.698192][ T183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.731487][ T183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.747231][ T5629] veth0_vlan: entered promiscuous mode [ 74.769437][ T183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.793376][ T183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.835725][ T49] Bluetooth: hci1: command tx timeout [ 74.838924][ T5629] veth1_vlan: entered promiscuous mode [ 74.841414][ T5643] Bluetooth: hci4: command tx timeout [ 74.848041][ T5636] Bluetooth: hci2: command tx timeout [ 74.853113][ T49] Bluetooth: hci0: command tx timeout [ 74.860109][ T5625] Bluetooth: hci3: command tx timeout [ 74.963402][ T5629] veth0_macvtap: entered promiscuous mode [ 75.027696][ T5629] veth1_macvtap: entered promiscuous mode [ 75.040135][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.075395][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.111981][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.157163][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.167968][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.188390][ T1341] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.197510][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.207635][ T1341] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.223940][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.243686][ T1341] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.257467][ T1341] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.288928][ T5633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.331735][ T5623] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.438998][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.458080][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.510567][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.518832][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.571920][ T5627] veth0_vlan: entered promiscuous mode [ 75.589845][ T5628] veth0_vlan: entered promiscuous mode [ 75.718595][ T5824] syz.3.4 uses obsolete (PF_INET,SOCK_PACKET) [ 75.735226][ T5825] gretap0: entered promiscuous mode [ 75.741399][ T5825] vlan2: entered promiscuous mode [ 75.782521][ T5628] veth1_vlan: entered promiscuous mode [ 75.799829][ T5633] veth0_vlan: entered promiscuous mode [ 75.827857][ T5627] veth1_vlan: entered promiscuous mode [ 75.865925][ T5633] veth1_vlan: entered promiscuous mode [ 75.903575][ T5824] block nbd0: server does not support multiple connections per device. [ 75.932259][ T5824] block nbd0: shutting down sockets [ 75.995924][ T5628] veth0_macvtap: entered promiscuous mode [ 76.027045][ T5627] veth0_macvtap: entered promiscuous mode [ 76.061891][ T5824] bridge0: port 3(vlan2) entered blocking state [ 76.070180][ T5824] bridge0: port 3(vlan2) entered disabled state [ 76.076727][ T5824] vlan2: entered allmulticast mode [ 76.081950][ T5824] geneve0: entered allmulticast mode [ 76.090106][ T5824] vlan2: entered promiscuous mode [ 76.095307][ T5824] geneve0: entered promiscuous mode [ 76.105480][ T5628] veth1_macvtap: entered promiscuous mode [ 76.219499][ T5627] veth1_macvtap: entered promiscuous mode [ 76.259412][ T5633] veth0_macvtap: entered promiscuous mode [ 76.282244][ T5633] veth1_macvtap: entered promiscuous mode [ 76.293866][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.344820][ T5831] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.6'. [ 76.398238][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.414564][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.469621][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.538442][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.541379][ T5836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 76.552777][ T79] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.563685][ T79] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.572633][ T79] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.616958][ T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.652667][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.668542][ T79] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.913380][ T5636] Bluetooth: hci4: command tx timeout [ 76.913835][ T5625] Bluetooth: hci0: command tx timeout [ 76.918804][ T5630] Bluetooth: hci1: command tx timeout [ 76.924323][ T49] Bluetooth: hci3: command tx timeout [ 76.929553][ T5636] Bluetooth: hci2: command tx timeout [ 77.045790][ T79] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.159504][ T79] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.169408][ T79] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.185401][ T79] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.192864][ T5625] block nbd0: Receive control failed (result -32) [ 77.200891][ T49] block nbd0: Receive control failed (result -32) [ 77.219854][ T47] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.285944][ T47] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.295229][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.367218][ T5841] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 77.388336][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.407844][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.460308][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.468354][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.502621][ T183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.512496][ T183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.534241][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.543749][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.611321][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.634164][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.721419][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.744989][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.788310][ T5853] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 77.857227][ T29] audit: type=1804 audit(1777810599.508:2): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2" name="/newroot/0/cgroup.controllers" dev="tmpfs" ino=18 res=1 errno=0 [ 77.919657][ T29] audit: type=1800 audit(1777810599.508:3): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2" name="cgroup.controllers" dev="tmpfs" ino=18 res=0 errno=0 [ 77.973632][ T29] audit: type=1804 audit(1777810599.538:4): pid=5853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2" name="/newroot/0/cgroup.controllers" dev="tmpfs" ino=18 res=1 errno=0 [ 78.108812][ T101] cfg80211: failed to load regulatory.db [ 78.229531][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.237764][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.503280][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.534843][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.808563][ T5890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14'. [ 78.921286][ T5867] netlink: 'syz.1.11': attribute type 4 has an invalid length. [ 79.008729][ T5869] syzkaller1: entered promiscuous mode [ 79.014432][ T5869] syzkaller1: entered allmulticast mode [ 79.086097][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.093845][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.205184][ T5886] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.220002][ T5886] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.321446][ T5876] syzkaller1: entered promiscuous mode [ 79.327090][ T5876] syzkaller1: entered allmulticast mode [ 79.334701][ T5889] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 79.342426][ T183] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.351742][ T183] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.476774][ T183] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.477751][ T5900] Zero length message leads to an empty skb [ 79.504642][ T183] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.536900][ T5900] netlink: 'syz.3.16': attribute type 13 has an invalid length. [ 79.564641][ T5900] netlink: 'syz.3.16': attribute type 17 has an invalid length. [ 79.613577][ T183] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.659899][ T5904] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16'. [ 79.798409][ T5900] bridge0: port 3(vlan2) entered blocking state [ 79.804969][ T5900] bridge0: port 3(vlan2) entered forwarding state [ 79.825515][ T183] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.844715][ T5895] syz.4.15 (5895) used greatest stack depth: 15904 bytes left [ 79.853256][ C1] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 79.869017][ T183] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.973648][ T5910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.041343][ T183] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.079867][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.149256][ T5910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.273924][ T101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.308396][ T5910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.457889][ T5910] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.570626][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19'. [ 80.692174][ T5925] netlink: 216 bytes leftover after parsing attributes in process `syz.4.19'. [ 80.726154][ T5925] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19'. [ 80.739933][ T5927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 80.764531][ T5925] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19'. [ 80.833765][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.934293][ T5929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.962176][ T5929] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.996914][ T5929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.101966][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.145775][ T5929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.214763][ T5929] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.243137][ T5929] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.296628][ T5929] veth1_vlan: left promiscuous mode [ 81.311560][ T5929] veth0_vlan: left promiscuous mode [ 81.313790][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.330272][ T5929] veth0_vlan: entered promiscuous mode [ 81.359078][ T5929] veth1_vlan: entered promiscuous mode [ 81.386609][ T5929] veth1_macvtap: left promiscuous mode [ 81.406830][ T5929] veth0_macvtap: left promiscuous mode [ 81.422534][ T5929] veth0_macvtap: entered promiscuous mode [ 81.432898][ T5929] veth1_macvtap: entered promiscuous mode [ 81.450965][ T5929] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.459626][ T5929] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.481398][ T1602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.494711][ T5929] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.512478][ T5929] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.544921][ T183] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.552117][ T183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.562064][ T183] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.569240][ T183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.661238][ T5944] bridge_slave_0 (unregistering): left allmulticast mode [ 81.668669][ T5944] bridge_slave_0 (unregistering): left promiscuous mode [ 81.676235][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.724709][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.787161][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.803611][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.815975][ T5950] warning: `syz.4.24' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.841662][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.870079][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.881464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.897290][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.916298][ T5953] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.965342][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.998747][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.200731][ T1162] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.340204][ T35] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.558259][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.0.29'. [ 83.488151][ T5979] netlink: 'syz.0.30': attribute type 3 has an invalid length. [ 83.545196][ T5979] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 83.986075][ T5987] netlink: 44 bytes leftover after parsing attributes in process `syz.3.31'. [ 84.236527][ T5990] syzkaller1: entered promiscuous mode [ 84.259152][ T5990] syzkaller1: entered allmulticast mode [ 84.375222][ T6003] netlink: 12 bytes leftover after parsing attributes in process `syz.3.35'. [ 84.416941][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.424531][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.620592][ T5998] netlink: 40 bytes leftover after parsing attributes in process `syz.2.34'. [ 84.656218][ T5998] netlink: 260 bytes leftover after parsing attributes in process `syz.2.34'. [ 84.659471][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.745708][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.884408][ T5990] syzkaller1: left promiscuous mode [ 84.889723][ T5990] syzkaller1: left allmulticast mode [ 84.902599][ T6004] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 84.924755][ T6006] syzkaller0: entered promiscuous mode [ 84.939166][ T6006] syzkaller0: entered allmulticast mode [ 84.960234][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.983379][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.994779][ T5729] net_ratelimit: 20 callbacks suppressed [ 84.994792][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.058915][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.088049][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.165653][ T6009] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 85.240731][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'. [ 85.293753][ T6028] syzkaller0: entered promiscuous mode [ 85.315176][ T6028] syzkaller0: entered allmulticast mode [ 85.406907][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.37'. [ 85.633416][ T5359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.954159][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.034057][ T5359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.276684][ T1602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.294903][ T6042] netlink: 'syz.4.40': attribute type 4 has an invalid length. [ 86.371879][ T6044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.41'. [ 86.402983][ T6044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.41'. [ 86.468956][ T6047] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.477818][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.552936][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.597100][ T5359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.606376][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.882225][ T6052] bridge0: port 3(vlan2) entered disabled state [ 86.890790][ T6052] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.898414][ T6052] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.171261][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.219590][ T6052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.468140][ T6056] bridge_slave_0 (unregistering): left allmulticast mode [ 87.481070][ T6056] bridge_slave_0 (unregistering): left promiscuous mode [ 87.489161][ T6056] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.537542][ T6081] syzkaller0: entered promiscuous mode [ 87.544585][ T6081] syzkaller0: entered allmulticast mode [ 87.551960][ T79] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.561297][ T79] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.592638][ T79] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.601796][ T79] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.821548][ T6098] syzkaller1: entered promiscuous mode [ 87.830219][ T6098] syzkaller1: entered allmulticast mode [ 87.872022][ T6101] af_packet: tpacket_rcv: packet too big, clamped from 29 to 4294967272. macoff=96 [ 88.083255][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.090906][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.180515][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.192262][ T6106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.472116][ T56] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.480726][ T56] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.492429][ T56] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.508086][ T56] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.705752][ T6115] __nla_validate_parse: 141 callbacks suppressed [ 88.705767][ T6115] netlink: 4 bytes leftover after parsing attributes in process `syz.0.66'. [ 88.745864][ T29] audit: type=1804 audit(1777810610.398:5): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.66" name="/newroot/10/cgroup.controllers" dev="tmpfs" ino=69 res=1 errno=0 [ 88.780960][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'. [ 88.816815][ T29] audit: type=1800 audit(1777810610.398:6): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.66" name="cgroup.controllers" dev="tmpfs" ino=69 res=0 errno=0 [ 88.840324][ T6120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.56'. [ 88.864425][ T6122] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 88.885269][ T29] audit: type=1804 audit(1777810610.448:7): pid=6115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.66" name="/newroot/10/cgroup.controllers" dev="tmpfs" ino=69 res=1 errno=0 [ 88.893144][ T6122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.57'. [ 88.935461][ T6120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.56'. [ 88.958623][ T6120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.56'. [ 88.978319][ T6120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.56'. [ 88.994750][ T6120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.56'. [ 89.018743][ T6120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.56'. [ 89.049885][ T6120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.56'. [ 89.275030][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.282535][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.568649][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.580212][ T6120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.868220][ T79] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.896744][ T79] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.921050][ T79] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.940268][ T79] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.049838][ T6122] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 90.299428][ T6168] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 90.326939][ T6168] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 90.504404][ T6175] syz_tun: entered allmulticast mode [ 90.620046][ T6181] net_ratelimit: 12 callbacks suppressed [ 90.620066][ T6181] netlink: ct family unspecified [ 90.693027][ T6181] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.748816][ T6176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.756995][ T6180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.766050][ T6180] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.779013][ T6180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.791806][ T6176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.809792][ T6176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.819512][ T6176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.828518][ T6176] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.837285][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.845738][ T79] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.854214][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.863689][ T6186] unsupported nlmsg_type 40 [ 90.977450][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.992289][ T6180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.051584][ T6180] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 91.090920][ T6180] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.156239][ T6180] veth1_vlan: left promiscuous mode [ 91.192309][ T6180] veth0_vlan: left promiscuous mode [ 91.226380][ T6180] veth0_vlan: entered promiscuous mode [ 91.271952][ T6180] veth1_vlan: entered promiscuous mode [ 91.322650][ T6180] veth1_macvtap: left promiscuous mode [ 91.348118][ T6180] veth0_macvtap: left promiscuous mode [ 91.409811][ T6180] veth0_macvtap: entered promiscuous mode [ 91.440607][ T6180] veth1_macvtap: entered promiscuous mode [ 91.504115][ T6180] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.523596][ T6180] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.541016][ T6180] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.558332][ T6180] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.584842][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.592005][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.620764][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.627961][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.817684][ T47] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.841408][ T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.928145][ T6211] netlink: 'syz.0.75': attribute type 1 has an invalid length. [ 91.937815][ T6211] netlink: 'syz.0.75': attribute type 1 has an invalid length. [ 91.987713][ T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.012462][ T1110] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.184176][ T6212] syzkaller1: entered promiscuous mode [ 92.199865][ T6212] syzkaller1: entered allmulticast mode [ 92.305968][ T6225] veth3: entered allmulticast mode [ 92.315260][ T6225] bridge1: port 1(veth3) entered blocking state [ 92.321887][ T6225] bridge1: port 1(veth3) entered disabled state [ 92.335576][ T6225] veth3: entered promiscuous mode [ 92.350635][ T6231] veth3: left promiscuous mode [ 92.363610][ T6231] bridge1: port 1(veth3) entered disabled state [ 92.500649][ T49] block nbd1: Receive control failed (result -32) [ 92.507385][ T5625] block nbd1: Receive control failed (result -32) [ 92.550724][ T6233] syzkaller0: entered promiscuous mode [ 92.556829][ T6233] syzkaller0: entered allmulticast mode [ 94.159141][ T6260] __nla_validate_parse: 292 callbacks suppressed [ 94.159158][ T6260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.85'. [ 94.174462][ T6260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.85'. [ 94.183381][ T6260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.85'. [ 94.192204][ T6260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.85'. [ 94.204041][ T6260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.85'. [ 94.212862][ T6260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.85'. [ 94.221628][ T6260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.85'. [ 94.231568][ T6260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.85'. [ 94.252793][ T6260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.85'. [ 94.273266][ T6260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.85'. [ 94.654720][ T6292] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 95.049613][ T6316] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 95.089089][ T49] block nbd2: Receive control failed (result -32) [ 95.096282][ T5625] block nbd2: Receive control failed (result -32) [ 95.336104][ T6322] syzkaller0: entered promiscuous mode [ 95.341957][ T6322] syzkaller0: entered allmulticast mode [ 95.360669][ T6323] dvmrp0: entered allmulticast mode [ 96.037330][ T5729] net_ratelimit: 308 callbacks suppressed [ 96.037347][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.198019][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.206837][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.216261][ T5359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.544457][ T6336] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.671877][ T6338] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.680444][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.003164][ T5846] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.162490][ T6337] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.233393][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.304787][ T6342] netlink: 'syz.3.103': attribute type 1 has an invalid length. [ 97.325596][ T6342] netlink: 'syz.3.103': attribute type 1 has an invalid length. [ 97.400751][ T6337] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.449701][ T6345] nbd: nbd2 already in use [ 97.454683][ T6345] block nbd0: NBD_DISCONNECT [ 97.468107][ T6345] block nbd0: Send disconnect failed -32 [ 97.483462][ T6345] block nbd0: Send disconnect failed -32 [ 97.495598][ T6345] block nbd0: shutting down sockets [ 97.578296][ T6337] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.597042][ T6343] syzkaller1: entered promiscuous mode [ 97.605425][ T6343] syzkaller1: entered allmulticast mode [ 97.667387][ T6337] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.041537][ T1110] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.061226][ T1110] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.097990][ T47] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.154220][ T1110] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.273060][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.942293][ T6397] syzkaller0: entered promiscuous mode [ 98.976389][ T6397] syzkaller0: entered allmulticast mode [ 99.350301][ T6409] __nla_validate_parse: 142 callbacks suppressed [ 99.350319][ T6409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.117'. [ 99.378601][ T6409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.117'. [ 99.409042][ T6409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.117'. [ 99.444565][ T6409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.117'. [ 99.473624][ T6409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.117'. [ 99.480165][ T6414] netlink: 'syz.3.119': attribute type 1 has an invalid length. [ 99.490811][ T6409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.117'. [ 99.505239][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.119'. [ 99.512074][ T6409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.117'. [ 99.524225][ T6414] netlink: 'syz.3.119': attribute type 1 has an invalid length. [ 99.531754][ T6416] netlink: 28 bytes leftover after parsing attributes in process `syz.1.120'. [ 99.551348][ T6409] netlink: 36 bytes leftover after parsing attributes in process `syz.0.117'. [ 99.727014][ T6422] xt_bpf: check failed: parse error [ 99.732634][ T6414] syzkaller1: entered promiscuous mode [ 99.739935][ T6414] syzkaller1: entered allmulticast mode [ 100.122570][ T49] block nbd0: Receive control failed (result -32) [ 100.129495][ T5625] block nbd0: Receive control failed (result -32) [ 100.473977][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.481515][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.681682][ T6444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.709190][ T6444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.891956][ T1162] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.911528][ T1162] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.960559][ T1162] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.015155][ T1162] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.198087][ T6465] netlink: 'syz.1.133': attribute type 1 has an invalid length. [ 101.834222][ T6473] netlink: 'syz.3.135': attribute type 1 has an invalid length. [ 102.016626][ T6481] netlink: 'syz.1.137': attribute type 1 has an invalid length. [ 102.087533][ T6485] syzkaller1: entered promiscuous mode [ 102.103260][ T6485] syzkaller1: entered allmulticast mode [ 102.305687][ T6481] netlink: 'syz.1.137': attribute type 1 has an invalid length. [ 102.500742][ T6494] netlink: 'syz.4.138': attribute type 4 has an invalid length. [ 102.573444][ T6494] netlink: 'syz.4.138': attribute type 1 has an invalid length. [ 102.614927][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.640239][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.673126][ T6497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.729738][ T6537] syzkaller1: entered promiscuous mode [ 103.780555][ T6537] syzkaller1: entered allmulticast mode [ 104.034953][ T6551] net_ratelimit: 5 callbacks suppressed [ 104.034969][ T6551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.070004][ T6551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.092519][ T6551] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.114442][ T6549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.130596][ T6549] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.157861][ T6549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.230039][ T47] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.239119][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.248928][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.257298][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.273354][ T1341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.281841][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.291380][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.378912][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.421780][ T6549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.474477][ T6549] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 104.500232][ T6549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.618735][ T6549] veth1_vlan: left promiscuous mode [ 104.646597][ T6549] veth0_vlan: left promiscuous mode [ 104.667300][ T6549] veth0_vlan: entered promiscuous mode [ 104.700563][ T6549] veth1_vlan: entered promiscuous mode [ 104.743547][ T6549] veth1_macvtap: left promiscuous mode [ 104.765743][ T6549] veth0_macvtap: left promiscuous mode [ 104.785186][ T6549] veth0_macvtap: entered promiscuous mode [ 104.816078][ T6549] veth1_macvtap: entered promiscuous mode [ 104.861774][ T6549] 8021q: adding VLAN 0 to HW filter on device eth0 [ 104.878276][ T6549] 8021q: adding VLAN 0 to HW filter on device eth1 [ 104.900689][ T6549] 8021q: adding VLAN 0 to HW filter on device eth2 [ 104.913223][ T6549] 8021q: adding VLAN 0 to HW filter on device eth3 [ 104.980588][ T6556] __nla_validate_parse: 434 callbacks suppressed [ 104.980603][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.148'. [ 104.982402][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.002893][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.033932][ T6459] IPVS: starting estimator thread 0... [ 105.078865][ T1110] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.098369][ T1110] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.145063][ T6580] IPVS: using max 30 ests per chain, 72000 per kthread [ 105.155885][ T1110] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.183941][ T1110] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.344158][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.153'. [ 105.364775][ T6587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.153'. [ 105.384862][ T6587] netlink: 'syz.2.153': attribute type 4 has an invalid length. [ 105.625644][ T6601] ip6erspan0: entered promiscuous mode [ 105.646859][ T6601] ip6erspan0: entered allmulticast mode [ 105.676167][ T6602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.156'. [ 106.176526][ T6620] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 106.249466][ T6614] syzkaller1: entered promiscuous mode [ 106.259578][ T6614] syzkaller1: entered allmulticast mode [ 106.696093][ T6647] netlink: 12 bytes leftover after parsing attributes in process `syz.0.165'. [ 107.059976][ T49] block nbd3: Receive control failed (result -32) [ 107.066939][ T5625] block nbd3: Receive control failed (result -32) [ 107.449306][ T6678] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 107.511035][ T6678] netem: incorrect ge model size [ 107.563651][ T6678] netem: change failed [ 107.628037][ T6685] netlink: 28 bytes leftover after parsing attributes in process `syz.1.170'. [ 107.649495][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 108.094052][ T6697] netlink: 'syz.1.172': attribute type 1 has an invalid length. [ 108.180274][ T6702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.172'. [ 108.236304][ T6705] netlink: 28 bytes leftover after parsing attributes in process `syz.1.172'. [ 108.790791][ T6732] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 108.806217][ T6732] netlink: 'syz.3.178': attribute type 1 has an invalid length. [ 109.125601][ T6734] syzkaller1: entered promiscuous mode [ 109.146399][ T6734] syzkaller1: entered allmulticast mode [ 109.233832][ T6749] netlink: 'syz.0.180': attribute type 1 has an invalid length. [ 109.264202][ T6749] netlink: 'syz.0.180': attribute type 1 has an invalid length. [ 109.432794][ T49] block nbd4: Receive control failed (result -32) [ 109.440050][ T5625] block nbd4: Receive control failed (result -32) [ 109.472961][ T6458] net_ratelimit: 17 callbacks suppressed [ 109.472975][ T6458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.619168][ T6750] syzkaller1: entered promiscuous mode [ 109.635211][ T6750] syzkaller1: entered allmulticast mode [ 109.641251][ T1110] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.651747][ T1341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.660528][ T6142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.669242][ T6142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.678419][ T6458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.686956][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.697679][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.985691][ T6774] xt_hashlimit: size too large, truncated to 1048576 [ 110.043076][ T6777] netlink: 'syz.0.185': attribute type 1 has an invalid length. [ 110.087637][ T6777] __nla_validate_parse: 4 callbacks suppressed [ 110.087652][ T6777] netlink: 224 bytes leftover after parsing attributes in process `syz.0.185'. [ 110.231320][ T6784] netlink: 'syz.4.187': attribute type 1 has an invalid length. [ 110.344363][ T6791] netlink: 20 bytes leftover after parsing attributes in process `syz.4.187'. [ 110.370367][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.441895][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.187'. [ 110.760955][ T5359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.405112][ T6838] netlink: 36 bytes leftover after parsing attributes in process `syz.4.189'. [ 111.458153][ T6838] netlink: 36 bytes leftover after parsing attributes in process `syz.4.189'. [ 111.531742][ T6838] netlink: 36 bytes leftover after parsing attributes in process `syz.4.189'. [ 111.561772][ T6853] netlink: 'syz.3.193': attribute type 1 has an invalid length. [ 111.572965][ T6838] netlink: 36 bytes leftover after parsing attributes in process `syz.4.189'. [ 111.613917][ T6838] netlink: 36 bytes leftover after parsing attributes in process `syz.4.189'. [ 111.655881][ T6838] netlink: 36 bytes leftover after parsing attributes in process `syz.4.189'. [ 111.677765][ T6838] netlink: 36 bytes leftover after parsing attributes in process `syz.4.189'. [ 112.316696][ T6864] veth3: entered allmulticast mode [ 112.350903][ T6864] bond2: (slave veth3): Enslaving as an active interface with an up link [ 112.423417][ T6870] bond2 (unregistering): (slave veth3): Releasing backup interface [ 112.479857][ T6870] bond2 (unregistering): Released all slaves [ 112.885939][ T6897] netlink: 'syz.1.199': attribute type 1 has an invalid length. [ 113.265656][ T6918] xt_hashlimit: size too large, truncated to 1048576 [ 113.318175][ T6921] netlink: 'syz.0.201': attribute type 1 has an invalid length. [ 114.574623][ T6971] Bluetooth: MGMT ver 1.23 [ 114.914289][ T6458] net_ratelimit: 4 callbacks suppressed [ 114.914305][ T6458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.393720][ T1341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.402581][ T6458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.410714][ T1341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.437348][ T6458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.446153][ T5359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.456041][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.871664][ T6992] netlink: 'syz.1.210': attribute type 13 has an invalid length. [ 115.886862][ T6992] netlink: 'syz.1.210': attribute type 17 has an invalid length. [ 116.125784][ T6992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.146148][ T6992] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.216494][ T7001] __nla_validate_parse: 147 callbacks suppressed [ 116.216509][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 116.238378][ T6992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.269243][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.279565][ T6142] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.288710][ T1162] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.361883][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.385528][ T6992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.417103][ T6992] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 116.432782][ T6992] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 116.483587][ T6992] veth1_vlan: left promiscuous mode [ 116.491127][ T6992] veth0_vlan: left promiscuous mode [ 116.497407][ T6992] veth0_vlan: entered promiscuous mode [ 116.519350][ T6992] veth1_vlan: entered promiscuous mode [ 116.539593][ T6992] veth1_macvtap: left promiscuous mode [ 116.554519][ T6992] veth0_macvtap: left promiscuous mode [ 116.566329][ T6992] veth0_macvtap: entered promiscuous mode [ 116.601646][ T6992] veth1_macvtap: entered promiscuous mode [ 116.649237][ T6992] 8021q: adding VLAN 0 to HW filter on device eth0 [ 116.683521][ T6992] 8021q: adding VLAN 0 to HW filter on device eth1 [ 116.719783][ T6992] 8021q: adding VLAN 0 to HW filter on device eth2 [ 116.740590][ T6992] 8021q: adding VLAN 0 to HW filter on device eth3 [ 116.775756][ T6992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 116.796815][ T6992] ip6erspan0: left promiscuous mode [ 116.812749][ T6992] ip6erspan0: left allmulticast mode [ 116.870746][ T6992] veth3: left allmulticast mode [ 117.579310][ T7011] RDS: rds_bind could not find a transport for ::ffff:172.30.1.5, load rds_tcp or rds_rdma? [ 117.592191][ T7011] RDS: rds_bind could not find a transport for fe88::105, load rds_tcp or rds_rdma? [ 117.769725][ T7015] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 117.961123][ T5359] IPVS: starting estimator thread 0... [ 118.063326][ T7021] IPVS: using max 53 ests per chain, 127200 per kthread [ 118.517785][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz.3.209'. [ 118.526756][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz.3.209'. [ 118.536027][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz.3.209'. [ 118.546163][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz.3.209'. [ 118.555279][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz.3.209'. [ 118.564431][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz.3.209'. [ 118.573502][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz.3.209'. [ 118.582436][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz.3.209'. [ 118.592017][ T6995] netlink: 36 bytes leftover after parsing attributes in process `syz.3.209'. [ 118.616718][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.623874][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.634523][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.641659][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.716016][ T1162] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.739529][ T7005] vlan3: entered promiscuous mode [ 118.745269][ T7005] bridge0: entered promiscuous mode [ 118.754347][ T7006] netlink: 'syz.2.212': attribute type 4 has an invalid length. [ 118.869707][ T7030] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.909740][ T1162] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.952612][ T1162] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.983185][ T1162] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.076733][ T7049] xt_hashlimit: size too large, truncated to 1048576 [ 119.558304][ T7069] dvmrp0: entered allmulticast mode [ 120.433212][ T6458] net_ratelimit: 20 callbacks suppressed [ 120.433227][ T6458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.673065][ T5359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.461357][ T7104] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 121.473046][ T6458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.521958][ T7105] __nla_validate_parse: 142 callbacks suppressed [ 121.521971][ T7105] netlink: 20 bytes leftover after parsing attributes in process `syz.3.228'. [ 121.576970][ T7104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.228'. [ 121.705373][ T7033] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.714997][ T6458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.715940][ T7052] netlink: 'syz.2.222': attribute type 1 has an invalid length. [ 121.737007][ T7052] netlink: 224 bytes leftover after parsing attributes in process `syz.2.222'. [ 121.789380][ T7107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.229'. [ 121.798820][ T6826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.806928][ T6826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.815047][ T6826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.829636][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.837750][ T6458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.846273][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.846821][ T7107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.229'. [ 121.949052][ T7107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.229'. [ 122.036835][ T7115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 122.044102][ T7107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.229'. [ 122.093433][ T7107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.229'. [ 122.130320][ T7107] netlink: 36 bytes leftover after parsing attributes in process `syz.3.229'. [ 122.201677][ T7116] bridge_slave_1: left allmulticast mode [ 122.209993][ T7116] bridge_slave_1: left promiscuous mode [ 122.218256][ T7116] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.228919][ T7116] bridge_slave_0: left allmulticast mode [ 122.248574][ T7116] bridge_slave_0: left promiscuous mode [ 122.261664][ T7116] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.607877][ T7131] syzkaller0: entered promiscuous mode [ 122.613672][ T7131] syzkaller0: entered allmulticast mode [ 122.961716][ T7145] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 122.988051][ T7145] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 124.652057][ T29] audit: type=1804 audit(1777810646.308:8): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.241" name="/newroot/43/cgroup.controllers" dev="tmpfs" ino=243 res=1 errno=0 [ 124.681271][ T29] audit: type=1800 audit(1777810646.308:9): pid=7178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.241" name="cgroup.controllers" dev="tmpfs" ino=243 res=0 errno=0 [ 125.556348][ T5746] net_ratelimit: 13 callbacks suppressed [ 125.556366][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 125.771342][ T7147] team0 (unregistering): Port device team_slave_0 removed [ 125.780105][ T7147] team0 (unregistering): Port device team_slave_1 removed [ 125.831609][ T7177] vlan2: entered promiscuous mode [ 125.838983][ T7177] team0: entered promiscuous mode [ 125.844697][ T7177] team_slave_0: entered promiscuous mode [ 125.850556][ T7177] team_slave_1: entered promiscuous mode [ 125.874535][ T6458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.034399][ T6458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.048619][ T7184] xt_hashlimit: size too large, truncated to 1048576 [ 126.111339][ T7190] netlink: 'syz.2.243': attribute type 1 has an invalid length. [ 126.143041][ T7193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.151909][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 126.286879][ T7193] dvmrp0: entered allmulticast mode [ 126.305605][ T7200] netlink: 'syz.0.247': attribute type 1 has an invalid length. [ 126.394590][ T7204] syzkaller1: entered promiscuous mode [ 126.420331][ T7204] syzkaller1: entered allmulticast mode [ 126.964516][ T6458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.074780][ T6458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.275620][ T7229] xt_hashlimit: size too large, truncated to 1048576 [ 127.330214][ T7232] netlink: 'syz.2.249': attribute type 1 has an invalid length. [ 127.371220][ T7232] __nla_validate_parse: 445 callbacks suppressed [ 127.371238][ T7232] netlink: 224 bytes leftover after parsing attributes in process `syz.2.249'. [ 127.553426][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.576542][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.586108][ T6458] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 127.750965][ T7240] syzkaller0: entered promiscuous mode [ 127.770912][ T7240] syzkaller0: entered allmulticast mode [ 127.838744][ T7200] netlink: 'syz.0.247': attribute type 1 has an invalid length. [ 128.594327][ T7282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 130.370013][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.258'. [ 130.373467][ T7284] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 130.381283][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.258'. [ 130.388557][ T7284] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 130.388582][ T7284] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 130.417819][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.258'. [ 130.427572][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.258'. [ 130.437671][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.258'. [ 130.450608][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.258'. [ 130.476824][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.258'. [ 130.488250][ T7296] netlink: 36 bytes leftover after parsing attributes in process `syz.4.258'. [ 130.674166][ T5359] net_ratelimit: 9 callbacks suppressed [ 130.674179][ T5359] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 130.731297][ T7308] syzkaller0: entered promiscuous mode [ 130.767915][ T7308] syzkaller0: entered allmulticast mode [ 130.881387][ T7318] xt_hashlimit: size too large, truncated to 1048576 [ 130.946422][ T7321] netlink: 'syz.3.264': attribute type 1 has an invalid length. [ 131.109154][ T7319] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.126523][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.347415][ T7319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.375982][ T7319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.393406][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.510517][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.561019][ T7333] syzkaller0: entered promiscuous mode [ 131.585106][ T7333] syzkaller0: entered allmulticast mode [ 131.859805][ T1122] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.909596][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 131.958277][ T1122] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.046896][ T1122] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.097361][ T1122] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.194913][ T7371] syzkaller0: entered promiscuous mode [ 132.214001][ T7371] syzkaller0: entered allmulticast mode [ 132.305487][ T7376] gretap0: entered promiscuous mode [ 132.370015][ T7379] netlink: 'syz.4.270': attribute type 33 has an invalid length. [ 132.388478][ T7379] __nla_validate_parse: 439 callbacks suppressed [ 132.388492][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz.4.270'. [ 132.429720][ T7379] bond0: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 132.578759][ T7381] syzkaller0: entered promiscuous mode [ 132.591332][ T7381] syzkaller0: entered allmulticast mode [ 132.624700][ T7385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.272'. [ 132.655985][ T7385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.272'. [ 132.683303][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.711945][ T7385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.272'. [ 132.740239][ T7385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.272'. [ 132.771708][ T7385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.272'. [ 132.793629][ T7385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.272'. [ 132.817654][ T7385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.272'. [ 132.857977][ T7385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.272'. [ 132.913571][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 132.926417][ T7385] netlink: 36 bytes leftover after parsing attributes in process `syz.3.272'. [ 133.954292][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.193768][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 134.996737][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 135.956797][ T7436] syzkaller0: entered promiscuous mode [ 135.971854][ T7436] syzkaller0: entered allmulticast mode [ 136.033187][ T6147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 136.187935][ T7440] syzkaller0: entered promiscuous mode [ 136.205975][ T7440] syzkaller0: entered allmulticast mode [ 136.466166][ T7446] netlink: 'syz.0.286': attribute type 1 has an invalid length. [ 136.978082][ T7458] syzkaller0: entered promiscuous mode [ 136.997062][ T7458] syzkaller0: entered allmulticast mode [ 137.075661][ T6147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.228151][ T7466] netlink: 'syz.0.292': attribute type 13 has an invalid length. [ 137.237828][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 137.250425][ T7466] netlink: 'syz.0.292': attribute type 17 has an invalid length. [ 137.282605][ T7466] netlink: 'syz.0.292': attribute type 27 has an invalid length. [ 137.377674][ T7467] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 137.394534][ T7467] RDS: rds_bind could not find a transport for fe88::104, load rds_tcp or rds_rdma? [ 138.122819][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 139.152992][ T6147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.196495][ T6147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.268142][ T7514] netlink: 'syz.1.300': attribute type 4 has an invalid length. [ 140.286141][ T6140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.300725][ T7515] syzkaller0: entered promiscuous mode [ 140.302646][ T7514] __nla_validate_parse: 294 callbacks suppressed [ 140.302659][ T7514] netlink: 17 bytes leftover after parsing attributes in process `syz.1.300'. [ 140.313526][ T7515] syzkaller0: entered allmulticast mode [ 140.347098][ T7518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.301'. [ 140.375355][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.413929][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.516465][ T7517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 140.629350][ T7526] syzkaller0: entered promiscuous mode [ 140.640942][ T7526] syzkaller0: entered allmulticast mode [ 140.875456][ T7536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.307'. [ 140.946558][ T7536] ip6gre2: entered promiscuous mode [ 140.964969][ T7536] ip6gre2: entered allmulticast mode [ 140.982727][ T7541] netlink: 'syz.3.308': attribute type 27 has an invalid length. [ 141.065554][ T7541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.088685][ T7541] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.146514][ T7541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.233523][ T101] net_ratelimit: 4 callbacks suppressed [ 141.233537][ T101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.255171][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.264989][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.277384][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.288037][ T101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.298957][ T807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.310124][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.318660][ T5815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.343966][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.354594][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 141.435691][ T7541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.484728][ T7541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.545123][ T7541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 141.593364][ T7541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.688098][ T7541] veth1_vlan: left promiscuous mode [ 141.709987][ T7553] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 141.719539][ T7541] veth0_vlan: left promiscuous mode [ 141.735920][ T7553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'. [ 141.753646][ T7541] veth0_vlan: entered promiscuous mode [ 141.761535][ T7553] netlink: 'syz.4.310': attribute type 1 has an invalid length. [ 141.795667][ T7541] veth1_vlan: entered promiscuous mode [ 141.845263][ T7541] veth1_macvtap: left promiscuous mode [ 141.879866][ T7541] veth0_macvtap: left promiscuous mode [ 141.896878][ T7541] veth0_macvtap: entered promiscuous mode [ 141.904867][ T7541] veth1_macvtap: entered promiscuous mode [ 141.920967][ T7541] bridge0: port 3(vlan2) entered blocking state [ 141.927419][ T7541] bridge0: port 3(vlan2) entered forwarding state [ 141.941954][ T7541] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.951592][ T7541] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 141.961515][ T7541] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 141.972584][ T7541] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 141.986268][ T7541] gretap0: entered promiscuous mode [ 141.994691][ T7541] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.004864][ T7536] netlink: 'syz.2.307': attribute type 6 has an invalid length. [ 142.012751][ T7536] netlink: 72 bytes leftover after parsing attributes in process `syz.2.307'. [ 142.026594][ T7548] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.026628][ T7543] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 142.043232][ T7543] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 142.055223][ T7543] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 142.069016][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.076855][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.168028][ T47] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.178343][ T47] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.187970][ T47] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.198409][ T7559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.312'. [ 142.207723][ T7559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.312'. [ 142.217437][ T7559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.312'. [ 142.227385][ T7559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.312'. [ 142.242845][ T7559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.312'. [ 142.390582][ T7563] syzkaller0: entered promiscuous mode [ 142.398624][ T7563] syzkaller0: entered allmulticast mode [ 142.411371][ T47] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.517700][ T7578] xt_hashlimit: size too large, truncated to 1048576 [ 142.585863][ T7581] netlink: 'syz.4.316': attribute type 1 has an invalid length. [ 142.793333][ T7589] netlink: 'syz.1.315': attribute type 2 has an invalid length. [ 142.836957][ T7589] netlink: 'syz.1.315': attribute type 2 has an invalid length. [ 144.934565][ T7637] dvmrp0: entered allmulticast mode [ 145.289505][ T7647] xt_hashlimit: size too large, truncated to 1048576 [ 145.387807][ T7654] netlink: 'syz.0.327': attribute type 1 has an invalid length. [ 145.466610][ T7654] __nla_validate_parse: 299 callbacks suppressed [ 145.466639][ T7654] netlink: 224 bytes leftover after parsing attributes in process `syz.0.327'. [ 146.355169][ T6141] net_ratelimit: 38 callbacks suppressed [ 146.355185][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.434987][ T6147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.515105][ T6147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.599892][ T1341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.610146][ T1341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.653114][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.754305][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.762417][ T56] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.771277][ C0] bridge0: received packet on vlan2 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 146.783476][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 146.828338][ T7702] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 146.863572][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 146.912952][ T7702] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 147.091591][ T7700] syzkaller0: entered promiscuous mode [ 147.097383][ T7700] syzkaller0: entered allmulticast mode [ 147.870153][ T7706] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 148.887254][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.337'. [ 148.896885][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.337'. [ 148.907232][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.337'. [ 148.916944][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.337'. [ 148.928160][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.337'. [ 148.937853][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.337'. [ 148.947685][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.337'. [ 148.957403][ T7727] netlink: 36 bytes leftover after parsing attributes in process `syz.0.337'. [ 149.073420][ T5625] Bluetooth: hci1: command 0x0401 tx timeout [ 149.164267][ T7742] xt_hashlimit: size too large, truncated to 1048576 [ 149.199549][ T7744] lo speed is unknown, defaulting to 1000 [ 149.223849][ T7744] lo speed is unknown, defaulting to 1000 [ 149.230346][ T7748] netlink: 'syz.0.341': attribute type 1 has an invalid length. [ 149.297979][ T7744] lo speed is unknown, defaulting to 1000 [ 149.371875][ T7744] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 149.464960][ T7744] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 149.515997][ T7744] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 149.744461][ T7744] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 149.746939][ T7750] lo speed is unknown, defaulting to 1000 [ 149.932338][ T7744] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 150.431934][ T7744] lo speed is unknown, defaulting to 1000 [ 150.490027][ T7744] lo speed is unknown, defaulting to 1000 [ 150.525520][ T7744] lo speed is unknown, defaulting to 1000 [ 150.555049][ T7744] lo speed is unknown, defaulting to 1000 [ 150.677907][ T7744] lo speed is unknown, defaulting to 1000 [ 150.797586][ T7804] lo speed is unknown, defaulting to 1000 [ 151.205006][ T7814] syzkaller0: entered promiscuous mode [ 151.216231][ T7814] syzkaller0: entered allmulticast mode [ 151.548746][ T7830] xt_hashlimit: size too large, truncated to 1048576 [ 151.634742][ T101] net_ratelimit: 32 callbacks suppressed [ 151.634758][ T101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.706238][ T7835] netlink: 'syz.2.354': attribute type 1 has an invalid length. [ 151.712779][ T7828] __nla_validate_parse: 145 callbacks suppressed [ 151.712795][ T7828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.351'. [ 151.745439][ T7835] netlink: 224 bytes leftover after parsing attributes in process `syz.2.354'. [ 151.845676][ T7828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.351'. [ 151.877586][ T101] IPVS: starting estimator thread 0... [ 151.891138][ T7849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.900086][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 151.903345][ T7828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.351'. [ 151.994566][ T7828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.351'. [ 152.014155][ T7852] IPVS: using max 29 ests per chain, 69600 per kthread [ 152.039032][ T7828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.351'. [ 152.058539][ T7849] netlink: 'syz.1.356': attribute type 39 has an invalid length. [ 152.077423][ T7828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.351'. [ 152.097728][ T7828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.351'. [ 152.130132][ T7828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.351'. [ 152.156942][ T7828] netlink: 36 bytes leftover after parsing attributes in process `syz.3.351'. [ 152.270423][ T7828] bridge0: port 3(vlan2) entered disabled state [ 152.277790][ T7828] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.683614][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.691765][ T1602] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 152.712961][ T7828] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.748860][ T7828] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.254192][ T1162] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.268363][ T1162] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.307699][ T1162] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.341882][ T1162] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.529908][ T7906] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.539103][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.593237][ T7900] syzkaller1: entered promiscuous mode [ 153.598755][ T7900] syzkaller1: entered allmulticast mode [ 153.616044][ T7889] lo speed is unknown, defaulting to 1000 [ 153.698291][ T7911] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.707287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 153.723959][ T6459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 154.275406][ T7921] Bluetooth: MGMT ver 1.23 [ 154.636581][ T7929] bond1: invalid ARP target 0.0.0.0 specified for addition [ 154.650310][ T7929] bond1: option arp_ip_target: invalid value (0) [ 154.661201][ T7929] bond1 (unregistering): Released all slaves [ 154.859807][ T7933] lo speed is unknown, defaulting to 1000 [ 155.185861][ T7946] netlink: 'syz.1.375': attribute type 13 has an invalid length. [ 155.228160][ T7946] gretap0: refused to change device tx_queue_len [ 155.260455][ T6141] lo speed is unknown, defaulting to 1000 [ 155.325859][ T7950] block nbd0: NBD_DISCONNECT [ 155.336283][ T7950] block nbd0: Send disconnect failed -32 [ 155.346275][ T7950] block nbd0: Send disconnect failed -32 [ 155.352628][ T7950] block nbd0: shutting down sockets [ 155.481064][ T7957] syzkaller0: entered promiscuous mode [ 155.492619][ T7957] syzkaller0: entered allmulticast mode [ 155.590082][ T7955] lo speed is unknown, defaulting to 1000 [ 156.131192][ T7964] lo speed is unknown, defaulting to 1000 [ 156.574636][ T7990] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 156.771423][ T7996] net_ratelimit: 12 callbacks suppressed [ 156.771440][ T7996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.785612][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.807317][ T7996] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.833152][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.845960][ T8000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.857719][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.904080][ T5746] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.922904][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.937317][ T8000] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 156.938283][ T8006] IPVS: dh: TCP 172.20.20.170:0 - no destination available [ 157.478377][ T8016] netlink: 'syz.0.395': attribute type 1 has an invalid length. [ 157.499140][ T8017] __nla_validate_parse: 154 callbacks suppressed [ 157.499156][ T8017] netlink: 72 bytes leftover after parsing attributes in process `syz.1.394'. [ 157.504641][ T8016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.395'. [ 157.564618][ T8017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.394'. [ 157.623934][ T8020] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 158.112421][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'. [ 158.274207][ T8035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.398'. [ 158.341697][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'. [ 158.376558][ T8016] netlink: 'syz.0.395': attribute type 1 has an invalid length. [ 158.451570][ T8037] netlink: 80 bytes leftover after parsing attributes in process `syz.3.400'. [ 158.539089][ T8040] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 158.942652][ T8042] lo speed is unknown, defaulting to 1000 [ 159.321840][ T8072] xt_hashlimit: size too large, truncated to 1048576 [ 159.396204][ T8073] netlink: 'syz.2.406': attribute type 1 has an invalid length. [ 159.488206][ T8073] netlink: 224 bytes leftover after parsing attributes in process `syz.2.406'. [ 159.823565][ T8084] netlink: 'syz.1.408': attribute type 1 has an invalid length. [ 160.067106][ T8085] bond3: (slave vxcan5): The slave device specified does not support setting the MAC address [ 160.089150][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.1.408'. [ 160.097085][ T8085] bond3: (slave vxcan5): Error -95 calling set_mac_address [ 160.463163][ T8087] bond3: (slave gretap2): making interface the new active one [ 160.531527][ T8087] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 160.547785][ T8124] netlink: 28 bytes leftover after parsing attributes in process `syz.2.412'. [ 160.575265][ T8084] macvlan0: entered promiscuous mode [ 160.580578][ T8084] macvlan0: entered allmulticast mode [ 160.594988][ T8101] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 160.614803][ T8101] syzkaller1: Refused to change device type [ 160.837463][ T8133] syzkaller0: entered promiscuous mode [ 160.851400][ T8133] syzkaller0: entered allmulticast mode [ 160.888575][ T8130] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.466970][ T8149] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 161.699202][ T8156] xt_hashlimit: size too large, truncated to 1048576 [ 161.753510][ T8157] netlink: 'syz.1.422': attribute type 1 has an invalid length. [ 161.793113][ T6141] net_ratelimit: 20 callbacks suppressed [ 161.793127][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 161.828066][ T8160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.033631][ T6459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 162.097959][ T8169] dvmrp0: entered allmulticast mode [ 162.277974][ T8169] lo speed is unknown, defaulting to 1000 [ 162.949069][ T8210] __nla_validate_parse: 156 callbacks suppressed [ 162.949086][ T8210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'. [ 163.089211][ T6459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 163.118814][ T8210] netlink: 20 bytes leftover after parsing attributes in process `syz.1.427'. [ 163.184703][ T8224] netlink: 28 bytes leftover after parsing attributes in process `syz.1.427'. [ 163.481147][ T8227] syzkaller0: entered promiscuous mode [ 163.496237][ T8227] syzkaller0: entered allmulticast mode [ 163.507574][ T8233] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 163.508437][ T8236] smbdirect: ib_dev[syz2] removed [ 163.527179][ T8233] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 163.527232][ T8233] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 163.578973][ T8238] netlink: 208 bytes leftover after parsing attributes in process `syz.4.431'. [ 163.604782][ T8233] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 163.788408][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.3.434'. [ 163.964334][ T5625] block nbd0: Receive control failed (result -1) [ 164.114033][ T6459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.737778][ T8255] netlink: 28 bytes leftover after parsing attributes in process `syz.0.436'. [ 164.836486][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 164.859980][ T8261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.436'. [ 164.935416][ T8265] netlink: 28 bytes leftover after parsing attributes in process `syz.0.436'. [ 165.166109][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 165.950174][ T8276] xt_hashlimit: size too large, truncated to 1048576 [ 166.007304][ T8278] netlink: 'syz.1.438': attribute type 1 has an invalid length. [ 166.024857][ T8278] netlink: 224 bytes leftover after parsing attributes in process `syz.1.438'. [ 166.076859][ T8270] bond3: option arp_all_targets: invalid value (129) [ 166.087675][ T8270] bond3 (unregistering): Released all slaves [ 166.124503][ T8285] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.140707][ T8283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 166.153943][ T8283] netlink: 'syz.2.439': attribute type 1 has an invalid length. [ 166.274484][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 166.296997][ T8281] bond1: (slave geneve2): making interface the new active one [ 166.307064][ T8281] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 166.321449][ T6826] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 166.354662][ T6826] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 166.408451][ T6826] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 166.451994][ T6826] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 166.526193][ T8296] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 166.593590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.027794][ T8296] vlan0: entered allmulticast mode [ 167.035129][ T8296] bridge0: port 3(vlan0) entered blocking state [ 167.041578][ T8296] bridge0: port 3(vlan0) entered disabled state [ 167.049853][ T8296] vlan0: entered promiscuous mode [ 167.056036][ T8311] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.324264][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.492541][ T8349] netlink: 'syz.4.445': attribute type 1 has an invalid length. [ 167.507984][ T8352] syzkaller0: entered promiscuous mode [ 167.518887][ T8344] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 167.539217][ T8352] syzkaller0: entered allmulticast mode [ 167.873568][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 167.908171][ T8362] RDS: rds_bind could not find a transport for fe88::101, load rds_tcp or rds_rdma? [ 168.085744][ T8366] __nla_validate_parse: 7 callbacks suppressed [ 168.085760][ T8366] netlink: 28 bytes leftover after parsing attributes in process `syz.4.452'. [ 168.188966][ T8367] netlink: 20 bytes leftover after parsing attributes in process `syz.4.452'. [ 168.272564][ T8370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.452'. [ 168.325110][ T8372] xt_hashlimit: size too large, truncated to 1048576 [ 168.363351][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 168.376279][ T8376] netlink: 'syz.0.454': attribute type 1 has an invalid length. [ 168.388596][ T8376] netlink: 224 bytes leftover after parsing attributes in process `syz.0.454'. [ 168.406750][ T8374] bridge0: port 1(veth0_virt_wifi) entered blocking state [ 168.425168][ T8374] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 168.436641][ T8374] veth0_virt_wifi: entered allmulticast mode [ 168.476919][ T8374] veth0_virt_wifi: entered promiscuous mode [ 168.499238][ T8386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.457'. [ 168.614614][ T8389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.457'. [ 168.723512][ T8386] netlink: 28 bytes leftover after parsing attributes in process `syz.1.457'. [ 169.315877][ T8412] netlink: 'syz.1.460': attribute type 1 has an invalid length. [ 169.394210][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.419639][ T8412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.460'. [ 169.516621][ T8433] netlink: 'syz.0.461': attribute type 1 has an invalid length. [ 169.531539][ T8434] netlink: 'syz.3.463': attribute type 11 has an invalid length. [ 169.554270][ T5625] Bluetooth: hci4: command tx timeout [ 169.792338][ T8445] netlink: 220 bytes leftover after parsing attributes in process `syz.3.465'. [ 169.802563][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 169.836188][ T8445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.465'. [ 169.907461][ T8447] xt_hashlimit: size too large, truncated to 1048576 [ 170.074617][ T6141] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 170.331511][ T8462] xt_hashlimit: size too large, truncated to 1048576 [ 170.433740][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.484757][ T8466] netlink: 'syz.0.468': attribute type 1 has an invalid length. [ 170.545187][ T8477] xt_hashlimit: size too large, truncated to 1048576 [ 170.605827][ T8480] netlink: 'syz.3.471': attribute type 1 has an invalid length. [ 170.711400][ T8466] bond2: entered promiscuous mode [ 170.727731][ T8466] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.902590][ T8459] bond2: (slave veth3): making interface the new active one [ 170.915429][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 170.917914][ T8459] veth3: entered promiscuous mode [ 170.930787][ T8459] bond2: (slave veth3): Enslaving as an active interface with an up link [ 170.941182][ T183] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 170.995152][ T5761] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.120531][ T8498] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.130144][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 171.953265][ T6829] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 171.981101][ T6829] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 172.133322][ T6146] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 172.136472][ T8540] IPv6: NLM_F_CREATE should be specified when creating new route [ 172.178352][ T8540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.186199][ T8540] IPv6: NLM_F_CREATE should be set when creating new route [ 172.193522][ T8540] IPv6: NLM_F_CREATE should be set when creating new route [ 172.200751][ T8540] IPv6: NLM_F_CREATE should be set when creating new route [ 172.263742][ T8540] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.514126][ T6146] net_ratelimit: 2049 callbacks suppressed [ 172.514141][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 172.654149][ T8550] tipc: Started in network mode [ 172.659498][ T8550] tipc: Node identity b22ca2e888bc, cluster identity 4711 [ 172.681200][ T8550] tipc: Enabled bearer , priority 0 [ 172.726090][ T8551] syzkaller0: entered promiscuous mode [ 172.753098][ T8551] syzkaller0: entered allmulticast mode [ 172.808176][ T8550] netem: change failed [ 172.877683][ T8555] netlink: 'syz.3.483': attribute type 10 has an invalid length. [ 172.909615][ T8550] netlink: 'syz.1.480': attribute type 1 has an invalid length. [ 172.927732][ T8555] team0: Port device dummy0 added [ 172.935548][ T8550] netlink: 'syz.1.480': attribute type 2 has an invalid length. [ 172.954042][ T8550] netlink: 'syz.1.480': attribute type 2 has an invalid length. [ 172.968642][ T8560] xt_hashlimit: size too large, truncated to 1048576 [ 173.002363][ T8550] netlink: 'syz.1.480': attribute type 2 has an invalid length. [ 173.014908][ T8555] veth0: entered promiscuous mode [ 173.023642][ T8562] netlink: 'syz.4.485': attribute type 1 has an invalid length. [ 173.041706][ T8550] netlink: 'syz.1.480': attribute type 1 has an invalid length. [ 173.054470][ T8555] bond0: entered promiscuous mode [ 173.066259][ T8555] bond_slave_0: entered promiscuous mode [ 173.103563][ T8555] bond_slave_1: entered promiscuous mode [ 173.109282][ T8550] netlink: 'syz.1.480': attribute type 2 has an invalid length. [ 173.191147][ T8549] tipc: Resetting bearer [ 173.265922][ T8549] tipc: Disabling bearer [ 173.553044][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.774801][ T8554] bond0: left promiscuous mode [ 173.818772][ T8554] bond_slave_0: left promiscuous mode [ 173.905759][ T8554] bond_slave_1: left promiscuous mode [ 173.954228][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 173.973106][ T8554] veth0: left promiscuous mode [ 174.216944][ T8615] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 174.389866][ T8620] __nla_validate_parse: 8 callbacks suppressed [ 174.389882][ T8620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.491'. [ 174.603186][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 174.861584][ T8639] netlink: 28 bytes leftover after parsing attributes in process `syz.2.495'. [ 175.642156][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.353460][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 176.398158][ T8654] xt_hashlimit: size too large, truncated to 1048576 [ 176.449196][ T8655] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 176.498423][ T8655] netlink: 224 bytes leftover after parsing attributes in process `syz.1.499'. [ 176.549576][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 176.580297][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 176.598664][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 176.617571][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 176.630284][ T8658] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.646244][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.500'. [ 176.648581][ T8664] netlink: 132 bytes leftover after parsing attributes in process `syz.2.502'. [ 176.680802][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.993558][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.572446][ T8708] netlink: 'syz.1.508': attribute type 1 has an invalid length. [ 177.714858][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.920488][ T8723] netlink: 28 bytes leftover after parsing attributes in process `syz.3.512'. [ 178.027760][ T8724] syzkaller0: entered promiscuous mode [ 178.042032][ T8724] syzkaller0: entered allmulticast mode [ 178.355228][ T8736] syzkaller0: entered promiscuous mode [ 178.360978][ T8736] syzkaller0: entered allmulticast mode [ 178.460726][ T8733] bond4: (slave vxcan5): The slave device specified does not support setting the MAC address [ 178.484529][ T8733] bond4: (slave vxcan5): Error -95 calling set_mac_address [ 178.599236][ T8732] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 178.652546][ T8737] 8021q: adding VLAN 0 to HW filter on device bond4 [ 178.742799][ T8742] macvlan1: entered promiscuous mode [ 178.748225][ T8742] macvlan1: entered allmulticast mode [ 178.784547][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.794055][ T8742] bond4: entered promiscuous mode [ 178.799291][ T8742] bridge2: entered promiscuous mode [ 178.805602][ T8742] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 178.842515][ T8742] bond4: left promiscuous mode [ 178.847434][ T8742] bridge2: left promiscuous mode [ 179.091074][ T8758] netlink: 'syz.3.521': attribute type 1 has an invalid length. [ 179.394011][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.581968][ T8773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.598858][ T8775] syzkaller0: entered promiscuous mode [ 179.605048][ T8775] syzkaller0: entered allmulticast mode [ 179.797119][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 179.825481][ T8778] netlink: 'syz.0.529': attribute type 8 has an invalid length. [ 180.008540][ T8780] syzkaller0: entered promiscuous mode [ 180.021388][ T8780] syzkaller0: entered allmulticast mode [ 180.033944][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.043666][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.106654][ T8784] __nla_validate_parse: 4 callbacks suppressed [ 180.106668][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.532'. [ 180.153991][ T8785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.531'. [ 180.167276][ T8785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.531'. [ 180.182053][ T8785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.531'. [ 180.192880][ T8785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.531'. [ 180.201972][ T8785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.531'. [ 180.227955][ T8785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.531'. [ 180.254199][ T8785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.531'. [ 180.273392][ T8785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.531'. [ 180.289005][ T8785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.531'. [ 180.511724][ T8793] batman_adv: batadv0: Adding interface: veth5 [ 180.533171][ T8793] batman_adv: batadv0: The MTU of interface veth5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 180.579713][ T8793] batman_adv: batadv0: Interface activated: veth5 [ 180.674306][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 180.833063][ T6459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.439772][ T8819] dvmrp0: left allmulticast mode [ 181.606836][ T8814] netlink: 'syz.0.541': attribute type 1 has an invalid length. [ 181.845658][ T8836] 8021q: VLANs not supported on gre0 [ 181.897576][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 181.921728][ T8714] Set syz1 is full, maxelem 65536 reached [ 182.211599][ T8849] netlink: 'syz.1.548': attribute type 13 has an invalid length. [ 182.256205][ T8849] netlink: 'syz.1.548': attribute type 17 has an invalid length. [ 182.337885][ T8846] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.345292][ T8846] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.615373][ T8846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.666252][ T8846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.089938][ T8854] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 183.117097][ T8854] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 183.178063][ T8849] gretap0: left promiscuous mode [ 183.193772][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.204938][ T8849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.214952][ T8849] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.227310][ T8849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.241835][ T6829] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.251213][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.259328][ T6147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.267426][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.275530][ T101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.284974][ T6833] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.297077][ T5761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.305599][ T183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.314201][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 183.327214][ T8849] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.334405][ T8849] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.366394][ T8849] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.373634][ T8849] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.395751][ T8849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.405784][ T8849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.457822][ T8855] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 183.551164][ T8862] 8021q: adding VLAN 0 to HW filter on device bond3 [ 183.596410][ T1341] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.623357][ T1341] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.643743][ T1341] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.655926][ T1341] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.775772][ T8887] syzkaller0: entered promiscuous mode [ 183.785261][ T8887] syzkaller0: entered allmulticast mode [ 183.902181][ T8896] 8021q: VLANs not supported on gre0 [ 183.911678][ T8893] syzkaller0: entered promiscuous mode [ 183.920161][ T8893] syzkaller0: entered allmulticast mode [ 184.629928][ T8909] netlink: 'syz.2.562': attribute type 1 has an invalid length. [ 185.046192][ T8915] dvmrp0: entered allmulticast mode [ 186.424834][ T8952] __nla_validate_parse: 307 callbacks suppressed [ 186.424851][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 186.477221][ T8952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.579'. [ 186.861509][ T8965] No such timeout policy "syz1" [ 187.072928][ T8969] netlink: 'syz.4.585': attribute type 1 has an invalid length. [ 187.080667][ T8969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 187.258859][ T8972] netlink: 'syz.2.586': attribute type 3 has an invalid length. [ 187.920874][ T8969] netlink: 'syz.4.585': attribute type 1 has an invalid length. [ 188.231340][ T8990] net_ratelimit: 13 callbacks suppressed [ 188.231356][ T8990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.245640][ T6459] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.279397][ T8990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.328463][ T8995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.342936][ T8995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.365739][ T8995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.387726][ T8995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.411386][ T8995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.422755][ T8995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.450549][ T8995] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 188.625967][ T9005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.647922][ T9007] ieee802154 phy0 wpan0: encryption failed: -90 [ 188.779716][ T9014] netlink: 'syz.4.602': attribute type 1 has an invalid length. [ 188.788244][ T9014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.602'. [ 188.801973][ T9014] netlink: 'syz.4.602': attribute type 1 has an invalid length. [ 189.474984][ T9044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.613'. [ 189.497926][ T9044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.613'. [ 189.519601][ T9044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.613'. [ 189.551313][ T9044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.613'. [ 189.586802][ T9044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.613'. [ 189.616084][ T9044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.613'. [ 189.658461][ T1341] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 189.671103][ T1341] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 189.686569][ T1341] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 189.705918][ T1341] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 190.438120][ T9074] netlink: 'syz.2.621': attribute type 1 has an invalid length. [ 191.002590][ T9130] netlink: 'syz.4.638': attribute type 1 has an invalid length. [ 191.081590][ T5636] Bluetooth: hci3: command 0x0406 tx timeout [ 191.087821][ T5630] Bluetooth: hci2: command 0x0406 tx timeout [ 191.089422][ T5642] Bluetooth: hci1: command 0x0401 tx timeout [ 191.252186][ T9137] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 191.284053][ T9137] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 191.439893][ T9130] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 191.470507][ T9139] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.514640][ T9137] macvlan0: entered promiscuous mode [ 191.531418][ T9137] macvlan0: entered allmulticast mode [ 191.539137][ T9137] bond1: entered promiscuous mode [ 191.545331][ T9137] bridge2: entered promiscuous mode [ 191.551606][ T9137] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 191.561450][ T9137] bond1: left promiscuous mode [ 191.570907][ T9137] bridge2: left promiscuous mode [ 192.002530][ T9181] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.186185][ T9188] netlink: 'syz.1.655': attribute type 1 has an invalid length. [ 192.335614][ T9199] __nla_validate_parse: 159 callbacks suppressed [ 192.335632][ T9199] netlink: 20 bytes leftover after parsing attributes in process `syz.1.655'. [ 192.362487][ T9194] bond5: (slave vxcan5): The slave device specified does not support setting the MAC address [ 192.374214][ T9194] bond5: (slave vxcan5): Error -95 calling set_mac_address [ 192.425285][ T9188] netlink: 28 bytes leftover after parsing attributes in process `syz.1.655'. [ 192.490686][ T9199] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 192.506748][ T9188] 8021q: adding VLAN 0 to HW filter on device bond5 [ 192.560264][ T9194] macvlan1: entered promiscuous mode [ 192.573362][ T9194] macvlan1: entered allmulticast mode [ 192.588234][ T9194] bond5: entered promiscuous mode [ 192.613811][ T9194] bridge3: entered promiscuous mode [ 192.629716][ T9194] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 192.663447][ T9194] bond5: left promiscuous mode [ 192.675566][ T9194] bridge3: left promiscuous mode [ 192.723500][ T9201] macsec1: entered promiscuous mode [ 193.298510][ T9235] netlink: 32 bytes leftover after parsing attributes in process `syz.3.671'. [ 193.431161][ T9231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.669'. [ 193.440400][ T9231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.669'. [ 193.452254][ T9231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.669'. [ 193.466966][ T9231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.669'. [ 193.478887][ T9231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.669'. [ 193.488251][ T9231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.669'. [ 193.503502][ T9231] netlink: 36 bytes leftover after parsing attributes in process `syz.0.669'. [ 193.530383][ T9231] batman_adv: batadv0: Interface deactivated: veth5 [ 194.119862][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.193831][ T5729] net_ratelimit: 2213 callbacks suppressed [ 194.193845][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.078776][ T6141] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.242999][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.274828][ T6146] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.425138][ T9292] netlink: 'syz.0.690': attribute type 1 has an invalid length. [ 196.605364][ T9297] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 196.639951][ T9297] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 196.741736][ T9292] bond4: (slave bridge5): Enslaving as an active interface with an up link [ 196.761065][ T9302] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.811939][ T9292] macvlan2: entered promiscuous mode [ 196.823550][ T9292] macvlan2: entered allmulticast mode [ 196.834853][ T9292] bond4: entered promiscuous mode [ 196.841543][ T9292] bridge5: entered promiscuous mode [ 196.850318][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.860417][ T9292] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 196.892643][ T9292] bond4: left promiscuous mode [ 196.903949][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.911515][ T9315] netlink: 'syz.3.698': attribute type 1 has an invalid length. [ 196.912631][ T9292] bridge5: left promiscuous mode [ 196.919943][ T9315] netlink: 'syz.3.698': attribute type 1 has an invalid length. [ 196.921927][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.943620][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.952293][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.961032][ T9277] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.577378][ T9344] xt_hashlimit: size too large, truncated to 1048576 [ 197.702638][ T9349] __nla_validate_parse: 168 callbacks suppressed [ 197.702655][ T9349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.707'. [ 197.914043][ T9357] netlink: 'syz.4.711': attribute type 1 has an invalid length. [ 197.952462][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.711'. [ 197.972841][ T9357] netlink: 'syz.4.711': attribute type 1 has an invalid length. [ 198.016446][ T9360] netlink: 28 bytes leftover after parsing attributes in process `syz.1.712'. [ 198.245575][ T9371] syzkaller0: entered promiscuous mode [ 198.280261][ T9371] syzkaller0: entered allmulticast mode [ 198.868935][ T9399] netlink: 12 bytes leftover after parsing attributes in process `syz.4.723'. [ 198.985922][ T9401] syzkaller0: entered promiscuous mode [ 199.006133][ T9401] syzkaller0: entered allmulticast mode [ 199.414563][ T5729] net_ratelimit: 12 callbacks suppressed [ 199.414578][ T5729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.567466][ T9431] ±ÿŸÂnÖ8î·: renamed from lo [ 200.718663][ T9469] netlink: 28 bytes leftover after parsing attributes in process `syz.4.749'. [ 200.761872][ T9476] xt_hashlimit: size too large, truncated to 1048576 [ 201.001923][ T9483] syzkaller0: entered promiscuous mode [ 201.023135][ T9483] syzkaller0: entered allmulticast mode [ 201.336061][ T9491] syzkaller0: entered promiscuous mode [ 201.350777][ T9491] syzkaller0: entered allmulticast mode [ 201.404087][ T9497] nbd2: detected capacity change from 0 to 128 [ 201.425976][ T6672] block nbd2: Dead connection, failed to find a fallback [ 201.452385][ T6672] block nbd2: shutting down sockets [ 201.465185][ T6672] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.507600][ T6672] Buffer I/O error on dev nbd2, logical block 0, async page read [ 201.535243][ T6672] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.553839][ T6672] Buffer I/O error on dev nbd2, logical block 0, async page read [ 201.562510][ T6672] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.572454][ T6672] Buffer I/O error on dev nbd2, logical block 0, async page read [ 201.604912][ T6672] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.614650][ T6672] Buffer I/O error on dev nbd2, logical block 0, async page read [ 201.622617][ T6672] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.649573][ T6672] Buffer I/O error on dev nbd2, logical block 0, async page read [ 201.657774][ T6672] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.671953][ T6672] Buffer I/O error on dev nbd2, logical block 0, async page read [ 201.694771][ T6672] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.708360][ T9510] netlink: 28 bytes leftover after parsing attributes in process `syz.3.766'. [ 201.729177][ T6672] Buffer I/O error on dev nbd2, logical block 0, async page read [ 201.748198][ T6672] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.779384][ T6672] Buffer I/O error on dev nbd2, logical block 0, async page read [ 201.803512][ T6672] ldm_validate_partition_table(): Disk read failed. [ 201.823271][ T6672] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.843707][ T6672] Buffer I/O error on dev nbd2, logical block 0, async page read [ 201.861692][ T6672] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 201.885307][ T6672] Buffer I/O error on dev nbd2, logical block 0, async page read [ 201.894404][ T6672] Dev nbd2: unable to read RDB block 0 [ 201.900618][ T6672] nbd2: unable to read partition table [ 201.911873][ T6672] ldm_validate_partition_table(): Disk read failed. [ 201.921051][ T6672] Dev nbd2: unable to read RDB block 0 [ 201.939183][ T6672] nbd2: unable to read partition table [ 202.058386][ T9521] syzkaller0: entered promiscuous mode [ 202.073373][ T9521] syzkaller0: entered allmulticast mode [ 202.214285][ T9529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.770'. [ 202.277725][ T9529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.770'. [ 202.349163][ T9529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.770'. [ 202.374659][ T9538] [ 202.375276][ T9529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.770'. [ 202.376994][ T9538] ====================================================== [ 202.377004][ T9538] WARNING: possible circular locking dependency detected [ 202.377022][ T9538] syzkaller #0 Not tainted [ 202.404291][ T9538] ------------------------------------------------------ [ 202.411305][ T9538] syz.4.774/9538 is trying to acquire lock: [ 202.417195][ T9538] ffff8880492c2530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x4e/0xa50 [ 202.426460][ T9538] [ 202.426460][ T9538] but task is already holding lock: [ 202.433825][ T9538] ffff888036ee4a60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: do_ipv6_setsockopt+0x851/0x3150 [ 202.443511][ T9538] [ 202.443511][ T9538] which lock already depends on the new lock. [ 202.443511][ T9538] [ 202.453908][ T9538] [ 202.453908][ T9538] the existing dependency chain (in reverse order) is: [ 202.462919][ T9538] [ 202.462919][ T9538] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 202.470662][ T9538] lock_sock_nested+0x41/0x100 [ 202.475952][ T9538] inet_shutdown+0x6a/0x390 [ 202.480994][ T9538] nbd_mark_nsock_dead+0x2e9/0x560 [ 202.486638][ T9538] recv_work+0x1c2e/0x1d40 [ 202.491586][ T9538] process_scheduled_works+0xb5d/0x1860 [ 202.497659][ T9538] worker_thread+0xa53/0xfc0 [ 202.502766][ T9538] kthread+0x388/0x470 [ 202.507362][ T9538] ret_from_fork+0x514/0xb70 [ 202.512458][ T9538] ret_from_fork_asm+0x1a/0x30 [ 202.517729][ T9538] [ 202.517729][ T9538] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 202.525351][ T9538] __mutex_lock+0x1a3/0x1550 [ 202.530446][ T9538] nbd_queue_rq+0x37b/0x1100 [ 202.535547][ T9538] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 202.541630][ T9538] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 202.548469][ T9538] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 202.554954][ T9538] blk_mq_run_hw_queue+0x348/0x4f0 [ 202.560573][ T9538] blk_mq_dispatch_list+0xd16/0xe10 [ 202.566276][ T9538] blk_mq_flush_plug_list+0x48d/0x570 [ 202.572157][ T9538] __blk_flush_plug+0x3ed/0x4d0 [ 202.577526][ T9538] __submit_bio+0x28d/0x580 [ 202.582534][ T9538] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 202.588672][ T9538] block_read_full_folio+0x7b7/0x830 [ 202.594456][ T9538] filemap_read_folio+0x137/0x3b0 [ 202.599989][ T9538] do_read_cache_folio+0x358/0x590 [ 202.605604][ T9538] read_part_sector+0xb6/0x2b0 [ 202.610878][ T9538] adfspart_check_ICS+0xb1/0x960 [ 202.616319][ T9538] bdev_disk_changed+0x817/0x1770 [ 202.621847][ T9538] blkdev_get_whole+0x380/0x510 [ 202.627199][ T9538] bdev_open+0x31e/0xd30 [ 202.631945][ T9538] blkdev_open+0x470/0x610 [ 202.636860][ T9538] do_dentry_open+0x785/0x14e0 [ 202.642127][ T9538] vfs_open+0x3b/0x340 [ 202.646715][ T9538] path_openat+0x2e08/0x3860 [ 202.651815][ T9538] do_file_open+0x23e/0x4a0 [ 202.656824][ T9538] do_sys_openat2+0x113/0x200 [ 202.662008][ T9538] __x64_sys_openat+0x138/0x170 [ 202.667360][ T9538] do_syscall_64+0x15f/0xf80 [ 202.672451][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.678847][ T9538] [ 202.678847][ T9538] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 202.686064][ T9538] __mutex_lock+0x1a3/0x1550 [ 202.691157][ T9538] nbd_queue_rq+0xc6/0x1100 [ 202.696162][ T9538] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 202.702211][ T9538] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 202.709044][ T9538] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 202.715536][ T9538] blk_mq_run_hw_queue+0x348/0x4f0 [ 202.721170][ T9538] blk_mq_dispatch_list+0xd16/0xe10 [ 202.726872][ T9538] blk_mq_flush_plug_list+0x48d/0x570 [ 202.732756][ T9538] __blk_flush_plug+0x3ed/0x4d0 [ 202.738137][ T9538] __submit_bio+0x28d/0x580 [ 202.743147][ T9538] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 202.749302][ T9538] block_read_full_folio+0x7b7/0x830 [ 202.755085][ T9538] filemap_read_folio+0x137/0x3b0 [ 202.760616][ T9538] do_read_cache_folio+0x358/0x590 [ 202.766233][ T9538] read_part_sector+0xb6/0x2b0 [ 202.771499][ T9538] adfspart_check_ICS+0xb1/0x960 [ 202.776941][ T9538] bdev_disk_changed+0x817/0x1770 [ 202.782467][ T9538] blkdev_get_whole+0x380/0x510 [ 202.787821][ T9538] bdev_open+0x31e/0xd30 [ 202.792567][ T9538] blkdev_open+0x470/0x610 [ 202.797483][ T9538] do_dentry_open+0x785/0x14e0 [ 202.802771][ T9538] vfs_open+0x3b/0x340 [ 202.807363][ T9538] path_openat+0x2e08/0x3860 [ 202.812455][ T9538] do_file_open+0x23e/0x4a0 [ 202.817458][ T9538] do_sys_openat2+0x113/0x200 [ 202.822634][ T9538] __x64_sys_openat+0x138/0x170 [ 202.827984][ T9538] do_syscall_64+0x15f/0xf80 [ 202.833078][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.839492][ T9538] [ 202.839492][ T9538] -> #4 (set->srcu){.+.+}-{0:0}: [ 202.846609][ T9538] __synchronize_srcu+0xca/0x300 [ 202.852053][ T9538] elevator_switch+0x1e8/0x7a0 [ 202.857326][ T9538] elevator_change+0x2cc/0x450 [ 202.862603][ T9538] elevator_set_default+0x36c/0x430 [ 202.868311][ T9538] blk_register_queue+0x3e9/0x4e0 [ 202.873851][ T9538] __add_disk+0x677/0xd50 [ 202.878685][ T9538] add_disk_fwnode+0xfb/0x480 [ 202.883869][ T9538] nbd_dev_add+0x72c/0xb50 [ 202.888795][ T9538] nbd_init+0x168/0x1f0 [ 202.893465][ T9538] do_one_initcall+0x250/0x870 [ 202.898733][ T9538] do_initcall_level+0x104/0x190 [ 202.904183][ T9538] do_initcalls+0x59/0xa0 [ 202.909025][ T9538] kernel_init_freeable+0x2a6/0x3e0 [ 202.914731][ T9538] kernel_init+0x1d/0x1d0 [ 202.919575][ T9538] ret_from_fork+0x514/0xb70 [ 202.924668][ T9538] ret_from_fork_asm+0x1a/0x30 [ 202.929941][ T9538] [ 202.929941][ T9538] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 202.937748][ T9538] __mutex_lock+0x1a3/0x1550 [ 202.942853][ T9538] elevator_change+0x1b3/0x450 [ 202.948138][ T9538] elevator_set_none+0xb5/0x140 [ 202.953499][ T9538] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 202.959811][ T9538] nbd_start_device+0x17f/0xb10 [ 202.965162][ T9538] nbd_genl_connect+0x165b/0x1cf0 [ 202.970707][ T9538] genl_family_rcv_msg_doit+0x22a/0x330 [ 202.976765][ T9538] genl_rcv_msg+0x61c/0x7a0 [ 202.981787][ T9538] netlink_rcv_skb+0x232/0x4b0 [ 202.987056][ T9538] genl_rcv+0x28/0x40 [ 202.991548][ T9538] netlink_unicast+0x75c/0x8e0 [ 202.996817][ T9538] netlink_sendmsg+0x813/0xb40 [ 203.002090][ T9538] ____sys_sendmsg+0x972/0x9f0 [ 203.007361][ T9538] ___sys_sendmsg+0x2a5/0x360 [ 203.012547][ T9538] __x64_sys_sendmsg+0x1bd/0x2a0 [ 203.017992][ T9538] do_syscall_64+0x15f/0xf80 [ 203.023095][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.029497][ T9538] [ 203.029497][ T9538] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 203.038095][ T9538] blk_alloc_queue+0x546/0x680 [ 203.043368][ T9538] __blk_mq_alloc_disk+0x197/0x390 [ 203.048991][ T9538] nbd_dev_add+0x499/0xb50 [ 203.053908][ T9538] nbd_init+0x168/0x1f0 [ 203.058577][ T9538] do_one_initcall+0x250/0x870 [ 203.063846][ T9538] do_initcall_level+0x104/0x190 [ 203.069294][ T9538] do_initcalls+0x59/0xa0 [ 203.074131][ T9538] kernel_init_freeable+0x2a6/0x3e0 [ 203.079839][ T9538] kernel_init+0x1d/0x1d0 [ 203.084682][ T9538] ret_from_fork+0x514/0xb70 [ 203.089781][ T9538] ret_from_fork_asm+0x1a/0x30 [ 203.095052][ T9538] [ 203.095052][ T9538] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 203.102247][ T9538] fs_reclaim_acquire+0x71/0x100 [ 203.107697][ T9538] __kmalloc_cache_noprof+0x40/0x660 [ 203.113494][ T9538] __ipv6_dev_mc_inc+0x44f/0xa50 [ 203.118935][ T9538] ipv6_add_dev+0xe34/0x13a0 [ 203.124028][ T9538] addrconf_notify+0x771/0x1050 [ 203.129384][ T9538] call_netdevice_register_net_notifiers+0x12a/0x560 [ 203.136563][ T9538] register_netdevice_notifier+0x10b/0x440 [ 203.142875][ T9538] addrconf_init+0xad/0x170 [ 203.147892][ T9538] inet6_init+0x228/0x3f0 [ 203.152727][ T9538] do_one_initcall+0x250/0x870 [ 203.158012][ T9538] do_initcall_level+0x104/0x190 [ 203.163460][ T9538] do_initcalls+0x59/0xa0 [ 203.168298][ T9538] kernel_init_freeable+0x2a6/0x3e0 [ 203.174005][ T9538] kernel_init+0x1d/0x1d0 [ 203.178848][ T9538] ret_from_fork+0x514/0xb70 [ 203.183944][ T9538] ret_from_fork_asm+0x1a/0x30 [ 203.189216][ T9538] [ 203.189216][ T9538] -> #0 (&idev->mc_lock){+.+.}-{4:4}: [ 203.196766][ T9538] __lock_acquire+0x15a5/0x2cf0 [ 203.202121][ T9538] lock_acquire+0x106/0x350 [ 203.207130][ T9538] __mutex_lock+0x1a3/0x1550 [ 203.212228][ T9538] __ipv6_dev_mc_inc+0x4e/0xa50 [ 203.217580][ T9538] __ipv6_sock_mc_join+0x503/0x750 [ 203.223204][ T9538] ipv6_mcast_join_leave+0x1a2/0x240 [ 203.228998][ T9538] do_ipv6_setsockopt+0x190e/0x3150 [ 203.234702][ T9538] ipv6_setsockopt+0x59/0x170 [ 203.239893][ T9538] do_sock_setsockopt+0x17c/0x1b0 [ 203.245422][ T9538] __x64_sys_setsockopt+0x13d/0x1b0 [ 203.251126][ T9538] do_syscall_64+0x15f/0xf80 [ 203.256221][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.262622][ T9538] [ 203.262622][ T9538] other info that might help us debug this: [ 203.262622][ T9538] [ 203.272830][ T9538] Chain exists of: [ 203.272830][ T9538] &idev->mc_lock --> &nsock->tx_lock --> sk_lock-AF_INET6 [ 203.272830][ T9538] [ 203.285870][ T9538] Possible unsafe locking scenario: [ 203.285870][ T9538] [ 203.293301][ T9538] CPU0 CPU1 [ 203.298648][ T9538] ---- ---- [ 203.303997][ T9538] lock(sk_lock-AF_INET6); [ 203.308487][ T9538] lock(&nsock->tx_lock); [ 203.315410][ T9538] lock(sk_lock-AF_INET6); [ 203.322419][ T9538] lock(&idev->mc_lock); [ 203.326731][ T9538] [ 203.326731][ T9538] *** DEADLOCK *** [ 203.326731][ T9538] [ 203.334862][ T9538] 1 lock held by syz.4.774/9538: [ 203.339780][ T9538] #0: ffff888036ee4a60 (sk_lock-AF_INET6){+.+.}-{0:0}, at: do_ipv6_setsockopt+0x851/0x3150 [ 203.349863][ T9538] [ 203.349863][ T9538] stack backtrace: [ 203.355754][ T9538] CPU: 1 UID: 0 PID: 9538 Comm: syz.4.774 Not tainted syzkaller #0 PREEMPT(full) [ 203.355773][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.355789][ T9538] Call Trace: [ 203.355798][ T9538] [ 203.355805][ T9538] dump_stack_lvl+0xe8/0x150 [ 203.355823][ T9538] print_circular_bug+0x2e1/0x300 [ 203.355845][ T9538] check_noncircular+0x12e/0x150 [ 203.355868][ T9538] __lock_acquire+0x15a5/0x2cf0 [ 203.355888][ T9538] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 203.355905][ T9538] ? lockdep_hardirqs_on+0x7a/0x110 [ 203.355923][ T9538] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 203.355939][ T9538] ? stack_depot_save_flags+0x3f3/0x810 [ 203.355960][ T9538] ? __ipv6_dev_mc_inc+0x4e/0xa50 [ 203.355974][ T9538] lock_acquire+0x106/0x350 [ 203.355990][ T9538] ? __ipv6_dev_mc_inc+0x4e/0xa50 [ 203.356009][ T9538] __mutex_lock+0x1a3/0x1550 [ 203.356027][ T9538] ? __ipv6_dev_mc_inc+0x4e/0xa50 [ 203.356046][ T9538] ? __ipv6_dev_mc_inc+0x4e/0xa50 [ 203.356061][ T9538] ? __pfx___mutex_lock+0x10/0x10 [ 203.356082][ T9538] ? in6_dev_get+0x1a/0x290 [ 203.356096][ T9538] ? in6_dev_get+0x1a/0x290 [ 203.356112][ T9538] __ipv6_dev_mc_inc+0x4e/0xa50 [ 203.356127][ T9538] ? ip6_mc_find_dev+0x45/0x2f0 [ 203.356143][ T9538] ? ip6_mc_find_dev+0x45/0x2f0 [ 203.356158][ T9538] ? ip6_mc_find_dev+0x45/0x2f0 [ 203.356176][ T9538] __ipv6_sock_mc_join+0x503/0x750 [ 203.356204][ T9538] ipv6_mcast_join_leave+0x1a2/0x240 [ 203.356226][ T9538] ? __pfx_ipv6_mcast_join_leave+0x10/0x10 [ 203.356253][ T9538] ? do_ipv6_setsockopt+0x851/0x3150 [ 203.356273][ T9538] ? __local_bh_enable_ip+0xd0/0x130 [ 203.356291][ T9538] do_ipv6_setsockopt+0x190e/0x3150 [ 203.356314][ T9538] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 203.356336][ T9538] ? futex_wait+0x2a2/0x390 [ 203.356360][ T9538] ? __lock_acquire+0x6b5/0x2cf0 [ 203.356383][ T9538] ? aa_sk_perm+0x6d5/0x900 [ 203.356401][ T9538] ? __fget_files+0x2a/0x420 [ 203.356421][ T9538] ? __pfx_aa_sk_perm+0x10/0x10 [ 203.356439][ T9538] ? __fget_files+0x2a/0x420 [ 203.356456][ T9538] ? aa_sock_opt_perm+0xff/0x1a0 [ 203.356476][ T9538] ipv6_setsockopt+0x59/0x170 [ 203.356496][ T9538] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 203.356513][ T9538] do_sock_setsockopt+0x17c/0x1b0 [ 203.356534][ T9538] __x64_sys_setsockopt+0x13d/0x1b0 [ 203.356553][ T9538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.356570][ T9538] do_syscall_64+0x15f/0xf80 [ 203.356588][ T9538] ? trace_irq_disable+0x3b/0x140 [ 203.356611][ T9538] ? clear_bhb_loop+0x40/0x90 [ 203.356628][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.356644][ T9538] RIP: 0033:0x7fdc8039cdd9 [ 203.356661][ T9538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.356675][ T9538] RSP: 002b:00007fdc812c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 203.356692][ T9538] RAX: ffffffffffffffda RBX: 00007fdc80615fa0 RCX: 00007fdc8039cdd9 [ 203.356705][ T9538] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000003 [ 203.356715][ T9538] RBP: 00007fdc80432d69 R08: 0000000000000108 R09: 0000000000000000 [ 203.356725][ T9538] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 203.356735][ T9538] R13: 00007fdc80616038 R14: 00007fdc80615fa0 R15: 00007ffeafcb2a08 [ 203.356757][ T9538] [ 203.679139][ T5625] Bluetooth: hci4: command tx timeout [ 203.680212][ T9529] __nla_validate_parse: 3 callbacks suppressed [ 203.680228][ T9529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.770'. [ 203.712968][ T9529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.770'. [ 203.789681][ T9529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.770'. [ 203.798733][ T9529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.770'. [ 203.808296][ T9529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.770'. [ 203.817187][ T9529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.770'. [ 203.827074][ T9529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.770'. [ 203.836199][ T9529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.770'. [ 203.846455][ T9529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.770'. [ 203.855344][ T9529] netlink: 36 bytes leftover after parsing attributes in process `syz.1.770'. [ 203.865950][ T9529] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.873150][ T9529] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.918083][ T9529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.932497][ T9529] batman_adv: batadv0: Interface deactivated: batadv_slave_1